Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. assuredworkloads
  5. assuredworkloads/v1beta1
  6. Workload

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.assuredworkloads/v1beta1.Workload

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Creates Assured Workload.

    Create Workload Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Workload(name: string, args: WorkloadArgs, opts?: CustomResourceOptions);
    @overload
def Workload(resource_name: str,
             args: WorkloadArgs,
             opts: Optional[ResourceOptions] = None)

@overload
def Workload(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             display_name: Optional[str] = None,
             organization_id: Optional[str] = None,
             compliance_regime: Optional[WorkloadComplianceRegime] = None,
             kms_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs] = None,
             location: Optional[str] = None,
             etag: Optional[str] = None,
             external_id: Optional[str] = None,
             fedramp_high_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs] = None,
             fedramp_moderate_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs] = None,
             il4_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs] = None,
             billing_account: Optional[str] = None,
             labels: Optional[Mapping[str, str]] = None,
             enable_sovereign_controls: Optional[bool] = None,
             name: Optional[str] = None,
             cjis_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs] = None,
             partner: Optional[WorkloadPartner] = None,
             partner_permissions: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs] = None,
             provisioned_resources_parent: Optional[str] = None,
             resource_settings: Optional[Sequence[GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs]] = None,
             violation_notifications_enabled: Optional[bool] = None)
    func NewWorkload(ctx *Context, name string, args WorkloadArgs, opts ...ResourceOption) (*Workload, error)
    public Workload(string name, WorkloadArgs args, CustomResourceOptions? opts = null)
    public Workload(String name, WorkloadArgs args)
public Workload(String name, WorkloadArgs args, CustomResourceOptions options)

    type: google-native:assuredworkloads/v1beta1:Workload
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var google_nativeWorkloadResource = new GoogleNative.AssuredWorkloads.V1Beta1.Workload("google-nativeWorkloadResource", new()
{
    DisplayName = "string",
    OrganizationId = "string",
    ComplianceRegime = GoogleNative.AssuredWorkloads.V1Beta1.WorkloadComplianceRegime.ComplianceRegimeUnspecified,
    Location = "string",
    Etag = "string",
    ExternalId = "string",
    FedrampHighSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs
    {
        KmsSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
        {
            NextRotationTime = "string",
            RotationPeriod = "string",
        },
    },
    FedrampModerateSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs
    {
        KmsSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
        {
            NextRotationTime = "string",
            RotationPeriod = "string",
        },
    },
    Il4Settings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs
    {
        KmsSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
        {
            NextRotationTime = "string",
            RotationPeriod = "string",
        },
    },
    BillingAccount = "string",
    Labels = 
    {
        { "string", "string" },
    },
    EnableSovereignControls = false,
    Name = "string",
    CjisSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs
    {
        KmsSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
        {
            NextRotationTime = "string",
            RotationPeriod = "string",
        },
    },
    Partner = GoogleNative.AssuredWorkloads.V1Beta1.WorkloadPartner.PartnerUnspecified,
    PartnerPermissions = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs
    {
        AssuredWorkloadsMonitoring = false,
        DataLogsViewer = false,
        ServiceAccessApprover = false,
    },
    ProvisionedResourcesParent = "string",
    ResourceSettings = new[]
    {
        new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs
        {
            DisplayName = "string",
            ResourceId = "string",
            ResourceType = GoogleNative.AssuredWorkloads.V1Beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType.ResourceTypeUnspecified,
        },
    },
    ViolationNotificationsEnabled = false,
});

    example, err := assuredworkloadsv1beta1.NewWorkload(ctx, "google-nativeWorkloadResource", &assuredworkloadsv1beta1.WorkloadArgs{
	DisplayName:      pulumi.String("string"),
	OrganizationId:   pulumi.String("string"),
	ComplianceRegime: assuredworkloadsv1beta1.WorkloadComplianceRegimeComplianceRegimeUnspecified,
	Location:         pulumi.String("string"),
	Etag:             pulumi.String("string"),
	ExternalId:       pulumi.String("string"),
	FedrampHighSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs{
		KmsSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs{
			NextRotationTime: pulumi.String("string"),
			RotationPeriod:   pulumi.String("string"),
		},
	},
	FedrampModerateSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs{
		KmsSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs{
			NextRotationTime: pulumi.String("string"),
			RotationPeriod:   pulumi.String("string"),
		},
	},
	Il4Settings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs{
		KmsSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs{
			NextRotationTime: pulumi.String("string"),
			RotationPeriod:   pulumi.String("string"),
		},
	},
	BillingAccount: pulumi.String("string"),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	EnableSovereignControls: pulumi.Bool(false),
	Name:                    pulumi.String("string"),
	CjisSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs{
		KmsSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs{
			NextRotationTime: pulumi.String("string"),
			RotationPeriod:   pulumi.String("string"),
		},
	},
	Partner: assuredworkloadsv1beta1.WorkloadPartnerPartnerUnspecified,
	PartnerPermissions: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs{
		AssuredWorkloadsMonitoring: pulumi.Bool(false),
		DataLogsViewer:             pulumi.Bool(false),
		ServiceAccessApprover:      pulumi.Bool(false),
	},
	ProvisionedResourcesParent: pulumi.String("string"),
	ResourceSettings: assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArray{
		&assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs{
			DisplayName:  pulumi.String("string"),
			ResourceId:   pulumi.String("string"),
			ResourceType: assuredworkloadsv1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceTypeResourceTypeUnspecified,
		},
	},
	ViolationNotificationsEnabled: pulumi.Bool(false),
})

    var google_nativeWorkloadResource = new Workload("google-nativeWorkloadResource", WorkloadArgs.builder()
    .displayName("string")
    .organizationId("string")
    .complianceRegime("COMPLIANCE_REGIME_UNSPECIFIED")
    .location("string")
    .etag("string")
    .externalId("string")
    .fedrampHighSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs.builder()
        .kmsSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs.builder()
            .nextRotationTime("string")
            .rotationPeriod("string")
            .build())
        .build())
    .fedrampModerateSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs.builder()
        .kmsSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs.builder()
            .nextRotationTime("string")
            .rotationPeriod("string")
            .build())
        .build())
    .il4Settings(GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs.builder()
        .kmsSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs.builder()
            .nextRotationTime("string")
            .rotationPeriod("string")
            .build())
        .build())
    .billingAccount("string")
    .labels(Map.of("string", "string"))
    .enableSovereignControls(false)
    .name("string")
    .cjisSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs.builder()
        .kmsSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs.builder()
            .nextRotationTime("string")
            .rotationPeriod("string")
            .build())
        .build())
    .partner("PARTNER_UNSPECIFIED")
    .partnerPermissions(GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs.builder()
        .assuredWorkloadsMonitoring(false)
        .dataLogsViewer(false)
        .serviceAccessApprover(false)
        .build())
    .provisionedResourcesParent("string")
    .resourceSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs.builder()
        .displayName("string")
        .resourceId("string")
        .resourceType("RESOURCE_TYPE_UNSPECIFIED")
        .build())
    .violationNotificationsEnabled(false)
    .build());

    google_native_workload_resource = google_native.assuredworkloads.v1beta1.Workload("google-nativeWorkloadResource",
    display_name="string",
    organization_id="string",
    compliance_regime=google_native.assuredworkloads.v1beta1.WorkloadComplianceRegime.COMPLIANCE_REGIME_UNSPECIFIED,
    location="string",
    etag="string",
    external_id="string",
    fedramp_high_settings={
        "kms_settings": {
            "next_rotation_time": "string",
            "rotation_period": "string",
        },
    },
    fedramp_moderate_settings={
        "kms_settings": {
            "next_rotation_time": "string",
            "rotation_period": "string",
        },
    },
    il4_settings={
        "kms_settings": {
            "next_rotation_time": "string",
            "rotation_period": "string",
        },
    },
    billing_account="string",
    labels={
        "string": "string",
    },
    enable_sovereign_controls=False,
    name="string",
    cjis_settings={
        "kms_settings": {
            "next_rotation_time": "string",
            "rotation_period": "string",
        },
    },
    partner=google_native.assuredworkloads.v1beta1.WorkloadPartner.PARTNER_UNSPECIFIED,
    partner_permissions={
        "assured_workloads_monitoring": False,
        "data_logs_viewer": False,
        "service_access_approver": False,
    },
    provisioned_resources_parent="string",
    resource_settings=[{
        "display_name": "string",
        "resource_id": "string",
        "resource_type": google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType.RESOURCE_TYPE_UNSPECIFIED,
    }],
    violation_notifications_enabled=False)

    const google_nativeWorkloadResource = new google_native.assuredworkloads.v1beta1.Workload("google-nativeWorkloadResource", {
    displayName: "string",
    organizationId: "string",
    complianceRegime: google_native.assuredworkloads.v1beta1.WorkloadComplianceRegime.ComplianceRegimeUnspecified,
    location: "string",
    etag: "string",
    externalId: "string",
    fedrampHighSettings: {
        kmsSettings: {
            nextRotationTime: "string",
            rotationPeriod: "string",
        },
    },
    fedrampModerateSettings: {
        kmsSettings: {
            nextRotationTime: "string",
            rotationPeriod: "string",
        },
    },
    il4Settings: {
        kmsSettings: {
            nextRotationTime: "string",
            rotationPeriod: "string",
        },
    },
    billingAccount: "string",
    labels: {
        string: "string",
    },
    enableSovereignControls: false,
    name: "string",
    cjisSettings: {
        kmsSettings: {
            nextRotationTime: "string",
            rotationPeriod: "string",
        },
    },
    partner: google_native.assuredworkloads.v1beta1.WorkloadPartner.PartnerUnspecified,
    partnerPermissions: {
        assuredWorkloadsMonitoring: false,
        dataLogsViewer: false,
        serviceAccessApprover: false,
    },
    provisionedResourcesParent: "string",
    resourceSettings: [{
        displayName: "string",
        resourceId: "string",
        resourceType: google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType.ResourceTypeUnspecified,
    }],
    violationNotificationsEnabled: false,
});

    type: google-native:assuredworkloads/v1beta1:Workload
properties:
    billingAccount: string
    cjisSettings:
        kmsSettings:
            nextRotationTime: string
            rotationPeriod: string
    complianceRegime: COMPLIANCE_REGIME_UNSPECIFIED
    displayName: string
    enableSovereignControls: false
    etag: string
    externalId: string
    fedrampHighSettings:
        kmsSettings:
            nextRotationTime: string
            rotationPeriod: string
    fedrampModerateSettings:
        kmsSettings:
            nextRotationTime: string
            rotationPeriod: string
    il4Settings:
        kmsSettings:
            nextRotationTime: string
            rotationPeriod: string
    labels:
        string: string
    location: string
    name: string
    organizationId: string
    partner: PARTNER_UNSPECIFIED
    partnerPermissions:
        assuredWorkloadsMonitoring: false
        dataLogsViewer: false
        serviceAccessApprover: false
    provisionedResourcesParent: string
    resourceSettings:
        - displayName: string
          resourceId: string
          resourceType: RESOURCE_TYPE_UNSPECIFIED
    violationNotificationsEnabled: false

    Workload Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Workload resource accepts the following input properties:

    ComplianceRegime Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.WorkloadComplianceRegime
    Immutable. Compliance Regime associated with this workload.
    DisplayName string
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    OrganizationId string
    BillingAccount string
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    CjisSettings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettings
    Input only. Immutable. Settings specific to resources needed for CJIS.
    EnableSovereignControls bool
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    Etag string
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    ExternalId string
    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
    FedrampHighSettings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettings
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    FedrampModerateSettings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettings
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    Il4Settings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadIL4Settings
    Input only. Immutable. Settings specific to resources needed for IL4.
    KmsSettings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Labels Dictionary<string, string>
    Optional. Labels applied to the workload.
    Location string
    Name string
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    Partner Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.WorkloadPartner
    Optional. Partner regime associated with this workload.
    PartnerPermissions Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissions
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    ProvisionedResourcesParent string
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    ResourceSettings List<Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettings>
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    ViolationNotificationsEnabled bool
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    ComplianceRegime WorkloadComplianceRegime
    Immutable. Compliance Regime associated with this workload.
    DisplayName string
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    OrganizationId string
    BillingAccount string
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    CjisSettings GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs
    Input only. Immutable. Settings specific to resources needed for CJIS.
    EnableSovereignControls bool
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    Etag string
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    ExternalId string
    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
    FedrampHighSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    FedrampModerateSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    Il4Settings GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs
    Input only. Immutable. Settings specific to resources needed for IL4.
    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Labels map[string]string
    Optional. Labels applied to the workload.
    Location string
    Name string
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    Partner WorkloadPartner
    Optional. Partner regime associated with this workload.
    PartnerPermissions GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    ProvisionedResourcesParent string
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    ResourceSettings []GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    ViolationNotificationsEnabled bool
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    complianceRegime WorkloadComplianceRegime
    Immutable. Compliance Regime associated with this workload.
    displayName String
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    organizationId String
    billingAccount String
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    cjisSettings GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettings
    Input only. Immutable. Settings specific to resources needed for CJIS.
    enableSovereignControls Boolean
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    etag String
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    externalId String
    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
    fedrampHighSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettings
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    fedrampModerateSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettings
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    il4Settings GoogleCloudAssuredworkloadsV1beta1WorkloadIL4Settings
    Input only. Immutable. Settings specific to resources needed for IL4.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels Map<String,String>
    Optional. Labels applied to the workload.
    location String
    name String
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    partner WorkloadPartner
    Optional. Partner regime associated with this workload.
    partnerPermissions GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissions
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    provisionedResourcesParent String
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    resourceSettings List<GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettings>
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    violationNotificationsEnabled Boolean
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    complianceRegime WorkloadComplianceRegime
    Immutable. Compliance Regime associated with this workload.
    displayName string
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    organizationId string
    billingAccount string
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    cjisSettings GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettings
    Input only. Immutable. Settings specific to resources needed for CJIS.
    enableSovereignControls boolean
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    etag string
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    externalId string
    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
    fedrampHighSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettings
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    fedrampModerateSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettings
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    il4Settings GoogleCloudAssuredworkloadsV1beta1WorkloadIL4Settings
    Input only. Immutable. Settings specific to resources needed for IL4.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels {[key: string]: string}
    Optional. Labels applied to the workload.
    location string
    name string
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    partner WorkloadPartner
    Optional. Partner regime associated with this workload.
    partnerPermissions GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissions
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    provisionedResourcesParent string
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    resourceSettings GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettings[]
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    violationNotificationsEnabled boolean
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    compliance_regime WorkloadComplianceRegime
    Immutable. Compliance Regime associated with this workload.
    display_name str
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    organization_id str
    billing_account str
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    cjis_settings GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs
    Input only. Immutable. Settings specific to resources needed for CJIS.
    enable_sovereign_controls bool
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    etag str
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    external_id str
    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
    fedramp_high_settings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    fedramp_moderate_settings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    il4_settings GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs
    Input only. Immutable. Settings specific to resources needed for IL4.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels Mapping[str, str]
    Optional. Labels applied to the workload.
    location str
    name str
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    partner WorkloadPartner
    Optional. Partner regime associated with this workload.
    partner_permissions GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    provisioned_resources_parent str
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    resource_settings Sequence[GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs]
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    violation_notifications_enabled bool
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    complianceRegime "COMPLIANCE_REGIME_UNSPECIFIED" | "IL4" | "CJIS" | "FEDRAMP_HIGH" | "FEDRAMP_MODERATE" | "US_REGIONAL_ACCESS" | "HIPAA" | "HITRUST" | "EU_REGIONS_AND_SUPPORT" | "CA_REGIONS_AND_SUPPORT" | "ITAR" | "AU_REGIONS_AND_US_SUPPORT" | "ASSURED_WORKLOADS_FOR_PARTNERS" | "ISR_REGIONS" | "ISR_REGIONS_AND_SUPPORT" | "CA_PROTECTED_B" | "IL5" | "IL2" | "JP_REGIONS_AND_SUPPORT"
    Immutable. Compliance Regime associated with this workload.
    displayName String
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    organizationId String
    billingAccount String
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    cjisSettings Property Map
    Input only. Immutable. Settings specific to resources needed for CJIS.
    enableSovereignControls Boolean
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    etag String
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    externalId String
    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
    fedrampHighSettings Property Map
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    fedrampModerateSettings Property Map
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    il4Settings Property Map
    Input only. Immutable. Settings specific to resources needed for IL4.
    kmsSettings Property Map
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels Map<String>
    Optional. Labels applied to the workload.
    location String
    name String
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    partner "PARTNER_UNSPECIFIED" | "LOCAL_CONTROLS_BY_S3NS" | "SOVEREIGN_CONTROLS_BY_T_SYSTEMS" | "SOVEREIGN_CONTROLS_BY_SIA_MINSAIT" | "SOVEREIGN_CONTROLS_BY_PSN"
    Optional. Partner regime associated with this workload.
    partnerPermissions Property Map
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    provisionedResourcesParent String
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    resourceSettings List<Property Map>
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    violationNotificationsEnabled Boolean
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Workload resource produces the following output properties:

    ComplianceStatus Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    CompliantButDisallowedServices List<string>
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    CreateTime string
    Immutable. The Workload creation timestamp.
    EkmProvisioningResponse Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    Id string
    The provider-assigned unique ID for this managed resource.
    KajEnrollmentState string
    Represents the KAJ enrollment state of the given workload.
    ResourceMonitoringEnabled bool
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    Resources List<Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse>
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    SaaEnrollmentResponse Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    ComplianceStatus GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    CompliantButDisallowedServices []string
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    CreateTime string
    Immutable. The Workload creation timestamp.
    EkmProvisioningResponse GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    Id string
    The provider-assigned unique ID for this managed resource.
    KajEnrollmentState string
    Represents the KAJ enrollment state of the given workload.
    ResourceMonitoringEnabled bool
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    Resources []GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    SaaEnrollmentResponse GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    complianceStatus GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    compliantButDisallowedServices List<String>
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    createTime String
    Immutable. The Workload creation timestamp.
    ekmProvisioningResponse GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    id String
    The provider-assigned unique ID for this managed resource.
    kajEnrollmentState String
    Represents the KAJ enrollment state of the given workload.
    resourceMonitoringEnabled Boolean
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    resources List<GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse>
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    saaEnrollmentResponse GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    complianceStatus GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    compliantButDisallowedServices string[]
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    createTime string
    Immutable. The Workload creation timestamp.
    ekmProvisioningResponse GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    id string
    The provider-assigned unique ID for this managed resource.
    kajEnrollmentState string
    Represents the KAJ enrollment state of the given workload.
    resourceMonitoringEnabled boolean
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    resources GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse[]
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    saaEnrollmentResponse GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    compliance_status GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    compliant_but_disallowed_services Sequence[str]
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    create_time str
    Immutable. The Workload creation timestamp.
    ekm_provisioning_response GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    id str
    The provider-assigned unique ID for this managed resource.
    kaj_enrollment_state str
    Represents the KAJ enrollment state of the given workload.
    resource_monitoring_enabled bool
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    resources Sequence[GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse]
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    saa_enrollment_response GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    complianceStatus Property Map
    Count of active Violations in the Workload.
    compliantButDisallowedServices List<String>
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    createTime String
    Immutable. The Workload creation timestamp.
    ekmProvisioningResponse Property Map
    Represents the Ekm Provisioning State of the given workload.
    id String
    The provider-assigned unique ID for this managed resource.
    kajEnrollmentState String
    Represents the KAJ enrollment state of the given workload.
    resourceMonitoringEnabled Boolean
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    resources List<Property Map>
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    saaEnrollmentResponse Property Map
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.

    Supporting Types

    GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponseArgs

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponseArgs

    AcknowledgedResourceViolationCount int
    Number of current resource violations which are not acknowledged.
    AcknowledgedViolationCount int
    Number of current orgPolicy violations which are acknowledged.
    ActiveResourceViolationCount int
    Number of current resource violations which are acknowledged.
    ActiveViolationCount int
    Number of current orgPolicy violations which are not acknowledged.
    AcknowledgedResourceViolationCount int
    Number of current resource violations which are not acknowledged.
    AcknowledgedViolationCount int
    Number of current orgPolicy violations which are acknowledged.
    ActiveResourceViolationCount int
    Number of current resource violations which are acknowledged.
    ActiveViolationCount int
    Number of current orgPolicy violations which are not acknowledged.
    acknowledgedResourceViolationCount Integer
    Number of current resource violations which are not acknowledged.
    acknowledgedViolationCount Integer
    Number of current orgPolicy violations which are acknowledged.
    activeResourceViolationCount Integer
    Number of current resource violations which are acknowledged.
    activeViolationCount Integer
    Number of current orgPolicy violations which are not acknowledged.
    acknowledgedResourceViolationCount number
    Number of current resource violations which are not acknowledged.
    acknowledgedViolationCount number
    Number of current orgPolicy violations which are acknowledged.
    activeResourceViolationCount number
    Number of current resource violations which are acknowledged.
    activeViolationCount number
    Number of current orgPolicy violations which are not acknowledged.
    acknowledged_resource_violation_count int
    Number of current resource violations which are not acknowledged.
    acknowledged_violation_count int
    Number of current orgPolicy violations which are acknowledged.
    active_resource_violation_count int
    Number of current resource violations which are acknowledged.
    active_violation_count int
    Number of current orgPolicy violations which are not acknowledged.
    acknowledgedResourceViolationCount Number
    Number of current resource violations which are not acknowledged.
    acknowledgedViolationCount Number
    Number of current orgPolicy violations which are acknowledged.
    activeResourceViolationCount Number
    Number of current resource violations which are acknowledged.
    activeViolationCount Number
    Number of current orgPolicy violations which are not acknowledged.

    GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponseArgs

    EkmProvisioningErrorDomain string
    Indicates Ekm provisioning error if any.
    EkmProvisioningErrorMapping string
    Detailed error message if Ekm provisioning fails
    EkmProvisioningState string
    Indicates Ekm enrollment Provisioning of a given workload.
    EkmProvisioningErrorDomain string
    Indicates Ekm provisioning error if any.
    EkmProvisioningErrorMapping string
    Detailed error message if Ekm provisioning fails
    EkmProvisioningState string
    Indicates Ekm enrollment Provisioning of a given workload.
    ekmProvisioningErrorDomain String
    Indicates Ekm provisioning error if any.
    ekmProvisioningErrorMapping String
    Detailed error message if Ekm provisioning fails
    ekmProvisioningState String
    Indicates Ekm enrollment Provisioning of a given workload.
    ekmProvisioningErrorDomain string
    Indicates Ekm provisioning error if any.
    ekmProvisioningErrorMapping string
    Detailed error message if Ekm provisioning fails
    ekmProvisioningState string
    Indicates Ekm enrollment Provisioning of a given workload.
    ekm_provisioning_error_domain str
    Indicates Ekm provisioning error if any.
    ekm_provisioning_error_mapping str
    Detailed error message if Ekm provisioning fails
    ekm_provisioning_state str
    Indicates Ekm enrollment Provisioning of a given workload.
    ekmProvisioningErrorDomain String
    Indicates Ekm provisioning error if any.
    ekmProvisioningErrorMapping String
    Detailed error message if Ekm provisioning fails
    ekmProvisioningState String
    Indicates Ekm enrollment Provisioning of a given workload.

    GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponseArgs

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponseArgs

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadIL4Settings, GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponseArgs

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs

    NextRotationTime string
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    RotationPeriod string
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    NextRotationTime string
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    RotationPeriod string
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    nextRotationTime String
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotationPeriod String
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    nextRotationTime string
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotationPeriod string
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    next_rotation_time str
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotation_period str
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    nextRotationTime String
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotationPeriod String
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponseArgs

    NextRotationTime string
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    RotationPeriod string
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    NextRotationTime string
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    RotationPeriod string
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    nextRotationTime String
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotationPeriod String
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    nextRotationTime string
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotationPeriod string
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    next_rotation_time str
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotation_period str
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    nextRotationTime String
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotationPeriod String
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissions, GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs

    AssuredWorkloadsMonitoring bool
    Optional. Allow partner to view violation alerts.
    DataLogsViewer bool
    Allow the partner to view inspectability logs and monitoring violations.
    ServiceAccessApprover bool
    Optional. Allow partner to view access approval logs.
    AssuredWorkloadsMonitoring bool
    Optional. Allow partner to view violation alerts.
    DataLogsViewer bool
    Allow the partner to view inspectability logs and monitoring violations.
    ServiceAccessApprover bool
    Optional. Allow partner to view access approval logs.
    assuredWorkloadsMonitoring Boolean
    Optional. Allow partner to view violation alerts.
    dataLogsViewer Boolean
    Allow the partner to view inspectability logs and monitoring violations.
    serviceAccessApprover Boolean
    Optional. Allow partner to view access approval logs.
    assuredWorkloadsMonitoring boolean
    Optional. Allow partner to view violation alerts.
    dataLogsViewer boolean
    Allow the partner to view inspectability logs and monitoring violations.
    serviceAccessApprover boolean
    Optional. Allow partner to view access approval logs.
    assured_workloads_monitoring bool
    Optional. Allow partner to view violation alerts.
    data_logs_viewer bool
    Allow the partner to view inspectability logs and monitoring violations.
    service_access_approver bool
    Optional. Allow partner to view access approval logs.
    assuredWorkloadsMonitoring Boolean
    Optional. Allow partner to view violation alerts.
    dataLogsViewer Boolean
    Allow the partner to view inspectability logs and monitoring violations.
    serviceAccessApprover Boolean
    Optional. Allow partner to view access approval logs.

    GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponseArgs

    AssuredWorkloadsMonitoring bool
    Optional. Allow partner to view violation alerts.
    DataLogsViewer bool
    Allow the partner to view inspectability logs and monitoring violations.
    ServiceAccessApprover bool
    Optional. Allow partner to view access approval logs.
    AssuredWorkloadsMonitoring bool
    Optional. Allow partner to view violation alerts.
    DataLogsViewer bool
    Allow the partner to view inspectability logs and monitoring violations.
    ServiceAccessApprover bool
    Optional. Allow partner to view access approval logs.
    assuredWorkloadsMonitoring Boolean
    Optional. Allow partner to view violation alerts.
    dataLogsViewer Boolean
    Allow the partner to view inspectability logs and monitoring violations.
    serviceAccessApprover Boolean
    Optional. Allow partner to view access approval logs.
    assuredWorkloadsMonitoring boolean
    Optional. Allow partner to view violation alerts.
    dataLogsViewer boolean
    Allow the partner to view inspectability logs and monitoring violations.
    serviceAccessApprover boolean
    Optional. Allow partner to view access approval logs.
    assured_workloads_monitoring bool
    Optional. Allow partner to view violation alerts.
    data_logs_viewer bool
    Allow the partner to view inspectability logs and monitoring violations.
    service_access_approver bool
    Optional. Allow partner to view access approval logs.
    assuredWorkloadsMonitoring Boolean
    Optional. Allow partner to view violation alerts.
    dataLogsViewer Boolean
    Allow the partner to view inspectability logs and monitoring violations.
    serviceAccessApprover Boolean
    Optional. Allow partner to view access approval logs.

    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponseArgs

    ResourceId string
    Resource identifier. For a project this represents project_number.
    ResourceType string
    Indicates the type of resource.
    ResourceId string
    Resource identifier. For a project this represents project_number.
    ResourceType string
    Indicates the type of resource.
    resourceId String
    Resource identifier. For a project this represents project_number.
    resourceType String
    Indicates the type of resource.
    resourceId string
    Resource identifier. For a project this represents project_number.
    resourceType string
    Indicates the type of resource.
    resource_id str
    Resource identifier. For a project this represents project_number.
    resource_type str
    Indicates the type of resource.
    resourceId String
    Resource identifier. For a project this represents project_number.
    resourceType String
    Indicates the type of resource.

    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs

    DisplayName string
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    ResourceId string
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    ResourceType Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    DisplayName string
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    ResourceId string
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    ResourceType GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    displayName String
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resourceId String
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resourceType GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    displayName string
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resourceId string
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resourceType GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    display_name str
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resource_id str
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resource_type GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    displayName String
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resourceId String
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resourceType "RESOURCE_TYPE_UNSPECIFIED" | "CONSUMER_PROJECT" | "CONSUMER_FOLDER" | "ENCRYPTION_KEYS_PROJECT" | "KEYRING"
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType, GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceTypeArgs

    ResourceTypeUnspecified
    RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
    ConsumerProject
    CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
    ConsumerFolder
    CONSUMER_FOLDERConsumer Folder.
    EncryptionKeysProject
    ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
    Keyring
    KEYRINGKeyring resource that hosts encryption keys.
    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceTypeResourceTypeUnspecified
    RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceTypeConsumerProject
    CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceTypeConsumerFolder
    CONSUMER_FOLDERConsumer Folder.
    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceTypeEncryptionKeysProject
    ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceTypeKeyring
    KEYRINGKeyring resource that hosts encryption keys.
    ResourceTypeUnspecified
    RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
    ConsumerProject
    CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
    ConsumerFolder
    CONSUMER_FOLDERConsumer Folder.
    EncryptionKeysProject
    ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
    Keyring
    KEYRINGKeyring resource that hosts encryption keys.
    ResourceTypeUnspecified
    RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
    ConsumerProject
    CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
    ConsumerFolder
    CONSUMER_FOLDERConsumer Folder.
    EncryptionKeysProject
    ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
    Keyring
    KEYRINGKeyring resource that hosts encryption keys.
    RESOURCE_TYPE_UNSPECIFIED
    RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
    CONSUMER_PROJECT
    CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
    CONSUMER_FOLDER
    CONSUMER_FOLDERConsumer Folder.
    ENCRYPTION_KEYS_PROJECT
    ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
    KEYRING
    KEYRINGKeyring resource that hosts encryption keys.
    "RESOURCE_TYPE_UNSPECIFIED"
    RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
    "CONSUMER_PROJECT"
    CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
    "CONSUMER_FOLDER"
    CONSUMER_FOLDERConsumer Folder.
    "ENCRYPTION_KEYS_PROJECT"
    ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
    "KEYRING"
    KEYRINGKeyring resource that hosts encryption keys.

    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponseArgs

    DisplayName string
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    ResourceId string
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    ResourceType string
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    DisplayName string
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    ResourceId string
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    ResourceType string
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    displayName String
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resourceId String
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resourceType String
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    displayName string
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resourceId string
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resourceType string
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    display_name str
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resource_id str
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resource_type str
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    displayName String
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resourceId String
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resourceType String
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponseArgs

    SetupErrors List<string>
    Indicates SAA enrollment setup error if any.
    SetupStatus string
    Indicates SAA enrollment status of a given workload.
    SetupErrors []string
    Indicates SAA enrollment setup error if any.
    SetupStatus string
    Indicates SAA enrollment status of a given workload.
    setupErrors List<String>
    Indicates SAA enrollment setup error if any.
    setupStatus String
    Indicates SAA enrollment status of a given workload.
    setupErrors string[]
    Indicates SAA enrollment setup error if any.
    setupStatus string
    Indicates SAA enrollment status of a given workload.
    setup_errors Sequence[str]
    Indicates SAA enrollment setup error if any.
    setup_status str
    Indicates SAA enrollment status of a given workload.
    setupErrors List<String>
    Indicates SAA enrollment setup error if any.
    setupStatus String
    Indicates SAA enrollment status of a given workload.

    WorkloadComplianceRegime, WorkloadComplianceRegimeArgs

    ComplianceRegimeUnspecified
    COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
    Il4
    IL4Information protection as per DoD IL4 requirements.
    Cjis
    CJISCriminal Justice Information Services (CJIS) Security policies.
    FedrampHigh
    FEDRAMP_HIGHFedRAMP High data protection controls
    FedrampModerate
    FEDRAMP_MODERATEFedRAMP Moderate data protection controls
    UsRegionalAccess
    US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
    Hipaa
    HIPAAHealth Insurance Portability and Accountability Act controls
    Hitrust
    HITRUSTHealth Information Trust Alliance controls
    EuRegionsAndSupport
    EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
    CaRegionsAndSupport
    CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
    Itar
    ITARInternational Traffic in Arms Regulations
    AuRegionsAndUsSupport
    AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
    AssuredWorkloadsForPartners
    ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
    IsrRegions
    ISR_REGIONSAssured Workloads for Israel
    IsrRegionsAndSupport
    ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
    CaProtectedB
    CA_PROTECTED_BAssured Workloads for Canada Protected B regime
    Il5
    IL5Information protection as per DoD IL5 requirements.
    Il2
    IL2Information protection as per DoD IL2 requirements.
    JpRegionsAndSupport
    JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
    WorkloadComplianceRegimeComplianceRegimeUnspecified
    COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
    WorkloadComplianceRegimeIl4
    IL4Information protection as per DoD IL4 requirements.
    WorkloadComplianceRegimeCjis
    CJISCriminal Justice Information Services (CJIS) Security policies.
    WorkloadComplianceRegimeFedrampHigh
    FEDRAMP_HIGHFedRAMP High data protection controls
    WorkloadComplianceRegimeFedrampModerate
    FEDRAMP_MODERATEFedRAMP Moderate data protection controls
    WorkloadComplianceRegimeUsRegionalAccess
    US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
    WorkloadComplianceRegimeHipaa
    HIPAAHealth Insurance Portability and Accountability Act controls
    WorkloadComplianceRegimeHitrust
    HITRUSTHealth Information Trust Alliance controls
    WorkloadComplianceRegimeEuRegionsAndSupport
    EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
    WorkloadComplianceRegimeCaRegionsAndSupport
    CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
    WorkloadComplianceRegimeItar
    ITARInternational Traffic in Arms Regulations
    WorkloadComplianceRegimeAuRegionsAndUsSupport
    AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
    WorkloadComplianceRegimeAssuredWorkloadsForPartners
    ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
    WorkloadComplianceRegimeIsrRegions
    ISR_REGIONSAssured Workloads for Israel
    WorkloadComplianceRegimeIsrRegionsAndSupport
    ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
    WorkloadComplianceRegimeCaProtectedB
    CA_PROTECTED_BAssured Workloads for Canada Protected B regime
    WorkloadComplianceRegimeIl5
    IL5Information protection as per DoD IL5 requirements.
    WorkloadComplianceRegimeIl2
    IL2Information protection as per DoD IL2 requirements.
    WorkloadComplianceRegimeJpRegionsAndSupport
    JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
    ComplianceRegimeUnspecified
    COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
    Il4
    IL4Information protection as per DoD IL4 requirements.
    Cjis
    CJISCriminal Justice Information Services (CJIS) Security policies.
    FedrampHigh
    FEDRAMP_HIGHFedRAMP High data protection controls
    FedrampModerate
    FEDRAMP_MODERATEFedRAMP Moderate data protection controls
    UsRegionalAccess
    US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
    Hipaa
    HIPAAHealth Insurance Portability and Accountability Act controls
    Hitrust
    HITRUSTHealth Information Trust Alliance controls
    EuRegionsAndSupport
    EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
    CaRegionsAndSupport
    CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
    Itar
    ITARInternational Traffic in Arms Regulations
    AuRegionsAndUsSupport
    AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
    AssuredWorkloadsForPartners
    ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
    IsrRegions
    ISR_REGIONSAssured Workloads for Israel
    IsrRegionsAndSupport
    ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
    CaProtectedB
    CA_PROTECTED_BAssured Workloads for Canada Protected B regime
    Il5
    IL5Information protection as per DoD IL5 requirements.
    Il2
    IL2Information protection as per DoD IL2 requirements.
    JpRegionsAndSupport
    JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
    ComplianceRegimeUnspecified
    COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
    Il4
    IL4Information protection as per DoD IL4 requirements.
    Cjis
    CJISCriminal Justice Information Services (CJIS) Security policies.
    FedrampHigh
    FEDRAMP_HIGHFedRAMP High data protection controls
    FedrampModerate
    FEDRAMP_MODERATEFedRAMP Moderate data protection controls
    UsRegionalAccess
    US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
    Hipaa
    HIPAAHealth Insurance Portability and Accountability Act controls
    Hitrust
    HITRUSTHealth Information Trust Alliance controls
    EuRegionsAndSupport
    EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
    CaRegionsAndSupport
    CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
    Itar
    ITARInternational Traffic in Arms Regulations
    AuRegionsAndUsSupport
    AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
    AssuredWorkloadsForPartners
    ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
    IsrRegions
    ISR_REGIONSAssured Workloads for Israel
    IsrRegionsAndSupport
    ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
    CaProtectedB
    CA_PROTECTED_BAssured Workloads for Canada Protected B regime
    Il5
    IL5Information protection as per DoD IL5 requirements.
    Il2
    IL2Information protection as per DoD IL2 requirements.
    JpRegionsAndSupport
    JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
    COMPLIANCE_REGIME_UNSPECIFIED
    COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
    IL4
    IL4Information protection as per DoD IL4 requirements.
    CJIS
    CJISCriminal Justice Information Services (CJIS) Security policies.
    FEDRAMP_HIGH
    FEDRAMP_HIGHFedRAMP High data protection controls
    FEDRAMP_MODERATE
    FEDRAMP_MODERATEFedRAMP Moderate data protection controls
    US_REGIONAL_ACCESS
    US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
    HIPAA
    HIPAAHealth Insurance Portability and Accountability Act controls
    HITRUST
    HITRUSTHealth Information Trust Alliance controls
    EU_REGIONS_AND_SUPPORT
    EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
    CA_REGIONS_AND_SUPPORT
    CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
    ITAR
    ITARInternational Traffic in Arms Regulations
    AU_REGIONS_AND_US_SUPPORT
    AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
    ASSURED_WORKLOADS_FOR_PARTNERS
    ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
    ISR_REGIONS
    ISR_REGIONSAssured Workloads for Israel
    ISR_REGIONS_AND_SUPPORT
    ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
    CA_PROTECTED_B
    CA_PROTECTED_BAssured Workloads for Canada Protected B regime
    IL5
    IL5Information protection as per DoD IL5 requirements.
    IL2
    IL2Information protection as per DoD IL2 requirements.
    JP_REGIONS_AND_SUPPORT
    JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
    "COMPLIANCE_REGIME_UNSPECIFIED"
    COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
    "IL4"
    IL4Information protection as per DoD IL4 requirements.
    "CJIS"
    CJISCriminal Justice Information Services (CJIS) Security policies.
    "FEDRAMP_HIGH"
    FEDRAMP_HIGHFedRAMP High data protection controls
    "FEDRAMP_MODERATE"
    FEDRAMP_MODERATEFedRAMP Moderate data protection controls
    "US_REGIONAL_ACCESS"
    US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
    "HIPAA"
    HIPAAHealth Insurance Portability and Accountability Act controls
    "HITRUST"
    HITRUSTHealth Information Trust Alliance controls
    "EU_REGIONS_AND_SUPPORT"
    EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
    "CA_REGIONS_AND_SUPPORT"
    CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
    "ITAR"
    ITARInternational Traffic in Arms Regulations
    "AU_REGIONS_AND_US_SUPPORT"
    AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
    "ASSURED_WORKLOADS_FOR_PARTNERS"
    ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
    "ISR_REGIONS"
    ISR_REGIONSAssured Workloads for Israel
    "ISR_REGIONS_AND_SUPPORT"
    ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
    "CA_PROTECTED_B"
    CA_PROTECTED_BAssured Workloads for Canada Protected B regime
    "IL5"
    IL5Information protection as per DoD IL5 requirements.
    "IL2"
    IL2Information protection as per DoD IL2 requirements.
    "JP_REGIONS_AND_SUPPORT"
    JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions

    WorkloadPartner, WorkloadPartnerArgs

    PartnerUnspecified
    PARTNER_UNSPECIFIED
    LocalControlsByS3ns
    LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
    SovereignControlsByTSystems
    SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
    SovereignControlsBySiaMinsait
    SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
    SovereignControlsByPsn
    SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
    WorkloadPartnerPartnerUnspecified
    PARTNER_UNSPECIFIED
    WorkloadPartnerLocalControlsByS3ns
    LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
    WorkloadPartnerSovereignControlsByTSystems
    SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
    WorkloadPartnerSovereignControlsBySiaMinsait
    SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
    WorkloadPartnerSovereignControlsByPsn
    SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
    PartnerUnspecified
    PARTNER_UNSPECIFIED
    LocalControlsByS3ns
    LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
    SovereignControlsByTSystems
    SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
    SovereignControlsBySiaMinsait
    SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
    SovereignControlsByPsn
    SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
    PartnerUnspecified
    PARTNER_UNSPECIFIED
    LocalControlsByS3ns
    LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
    SovereignControlsByTSystems
    SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
    SovereignControlsBySiaMinsait
    SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
    SovereignControlsByPsn
    SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
    PARTNER_UNSPECIFIED
    PARTNER_UNSPECIFIED
    LOCAL_CONTROLS_BY_S3NS
    LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
    SOVEREIGN_CONTROLS_BY_T_SYSTEMS
    SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
    SOVEREIGN_CONTROLS_BY_SIA_MINSAIT
    SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
    SOVEREIGN_CONTROLS_BY_PSN
    SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
    "PARTNER_UNSPECIFIED"
    PARTNER_UNSPECIFIED
    "LOCAL_CONTROLS_BY_S3NS"
    LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
    "SOVEREIGN_CONTROLS_BY_T_SYSTEMS"
    SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
    "SOVEREIGN_CONTROLS_BY_SIA_MINSAIT"
    SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
    "SOVEREIGN_CONTROLS_BY_PSN"
    SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native