Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native v2
  3. API Docs
  4. security
  5. Assignment
These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native-v2.security.Assignment

Explore with Pulumi AI

These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native

Security Assignment on a resource group over a given scope Azure REST API version: 2021-08-01-preview. Prior API version in Azure Native 1.x: 2021-08-01-preview.

Example Usage

Define a default standard assignment

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Security.Assignment("assignment", new()
    {
        AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
        {
            Id = "/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
        },
        AssignmentId = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
        Description = "Set of policies monitored by Azure Security Center for cross cloud",
        DisplayName = "ASC Default",
        Effect = "audit",
        ResourceGroupName = "myResourceGroup",
        Scope = "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg",
    });

});
Copy
package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAssignment(ctx, "assignment", &security.AssignmentArgs{
			AssignedStandard: &security.AssignedStandardItemArgs{
				Id: pulumi.String("/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			},
			AssignmentId:      pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			Description:       pulumi.String("Set of policies monitored by Azure Security Center for cross cloud"),
			DisplayName:       pulumi.String("ASC Default"),
			Effect:            pulumi.String("audit"),
			ResourceGroupName: pulumi.String("myResourceGroup"),
			Scope:             pulumi.String("/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Assignment;
import com.pulumi.azurenative.security.AssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()
            .assignedStandard(AssignedStandardItemArgs.builder()
                .id("/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
                .build())
            .assignmentId("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
            .description("Set of policies monitored by Azure Security Center for cross cloud")
            .displayName("ASC Default")
            .effect("audit")
            .resourceGroupName("myResourceGroup")
            .scope("/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg")
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.security.Assignment("assignment", {
    assignedStandard: {
        id: "/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    },
    assignmentId: "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    description: "Set of policies monitored by Azure Security Center for cross cloud",
    displayName: "ASC Default",
    effect: "audit",
    resourceGroupName: "myResourceGroup",
    scope: "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg",
});
Copy
import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.security.Assignment("assignment",
    assigned_standard={
        "id": "/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    },
    assignment_id="1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    description="Set of policies monitored by Azure Security Center for cross cloud",
    display_name="ASC Default",
    effect="audit",
    resource_group_name="myResourceGroup",
    scope="/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg")
Copy
resources:
  assignment:
    type: azure-native:security:Assignment
    properties:
      assignedStandard:
        id: /providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8
      assignmentId: 1f3afdf9-d0c9-4c3d-847f-89da613e70a8
      description: Set of policies monitored by Azure Security Center for cross cloud
      displayName: ASC Default
      effect: audit
      resourceGroupName: myResourceGroup
      scope: /subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg
Copy

Exempt Recommendation From standard and resource

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Security.Assignment("assignment", new()
    {
        AdditionalData = new AzureNative.Security.Inputs.AssignmentPropertiesAdditionalDataArgs
        {
            ExemptionCategory = "waiver",
        },
        AssignedComponent = new AzureNative.Security.Inputs.AssignedComponentItemArgs
        {
            Key = "1195afff-c881-495e-9bc5-1486211ae03f",
        },
        AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
        {
            Id = "/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
        },
        AssignmentId = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
        Description = "Set of policies monitored by Azure Security Center for cross cloud",
        DisplayName = "ASC Default",
        Effect = "Exempt",
        ExpiresOn = "2022-05-01T19:50:47.083633Z",
        Metadata = new Dictionary<string, object?>
        {
            ["ticketId"] = 12345,
        },
        ResourceGroupName = "myResourceGroup",
        Scope = "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg",
    });

});
Copy
package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAssignment(ctx, "assignment", &security.AssignmentArgs{
			AdditionalData: &security.AssignmentPropertiesAdditionalDataArgs{
				ExemptionCategory: pulumi.String("waiver"),
			},
			AssignedComponent: &security.AssignedComponentItemArgs{
				Key: pulumi.String("1195afff-c881-495e-9bc5-1486211ae03f"),
			},
			AssignedStandard: &security.AssignedStandardItemArgs{
				Id: pulumi.String("/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			},
			AssignmentId: pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			Description:  pulumi.String("Set of policies monitored by Azure Security Center for cross cloud"),
			DisplayName:  pulumi.String("ASC Default"),
			Effect:       pulumi.String("Exempt"),
			ExpiresOn:    pulumi.String("2022-05-01T19:50:47.083633Z"),
			Metadata: pulumi.Any(map[string]interface{}{
				"ticketId": 12345,
			}),
			ResourceGroupName: pulumi.String("myResourceGroup"),
			Scope:             pulumi.String("/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Assignment;
import com.pulumi.azurenative.security.AssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignmentPropertiesAdditionalDataArgs;
import com.pulumi.azurenative.security.inputs.AssignedComponentItemArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()
            .additionalData(AssignmentPropertiesAdditionalDataArgs.builder()
                .exemptionCategory("waiver")
                .build())
            .assignedComponent(AssignedComponentItemArgs.builder()
                .key("1195afff-c881-495e-9bc5-1486211ae03f")
                .build())
            .assignedStandard(AssignedStandardItemArgs.builder()
                .id("/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
                .build())
            .assignmentId("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
            .description("Set of policies monitored by Azure Security Center for cross cloud")
            .displayName("ASC Default")
            .effect("Exempt")
            .expiresOn("2022-05-01T19:50:47.083633Z")
            .metadata(Map.of("ticketId", 12345))
            .resourceGroupName("myResourceGroup")
            .scope("/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg")
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.security.Assignment("assignment", {
    additionalData: {
        exemptionCategory: "waiver",
    },
    assignedComponent: {
        key: "1195afff-c881-495e-9bc5-1486211ae03f",
    },
    assignedStandard: {
        id: "/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    },
    assignmentId: "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    description: "Set of policies monitored by Azure Security Center for cross cloud",
    displayName: "ASC Default",
    effect: "Exempt",
    expiresOn: "2022-05-01T19:50:47.083633Z",
    metadata: {
        ticketId: 12345,
    },
    resourceGroupName: "myResourceGroup",
    scope: "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg",
});
Copy
import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.security.Assignment("assignment",
    additional_data={
        "exemption_category": "waiver",
    },
    assigned_component={
        "key": "1195afff-c881-495e-9bc5-1486211ae03f",
    },
    assigned_standard={
        "id": "/providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    },
    assignment_id="1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    description="Set of policies monitored by Azure Security Center for cross cloud",
    display_name="ASC Default",
    effect="Exempt",
    expires_on="2022-05-01T19:50:47.083633Z",
    metadata={
        "ticketId": 12345,
    },
    resource_group_name="myResourceGroup",
    scope="/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg")
Copy
resources:
  assignment:
    type: azure-native:security:Assignment
    properties:
      additionalData:
        exemptionCategory: waiver
      assignedComponent:
        key: 1195afff-c881-495e-9bc5-1486211ae03f
      assignedStandard:
        id: /providers/Microsoft.Security/Standards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8
      assignmentId: 1f3afdf9-d0c9-4c3d-847f-89da613e70a8
      description: Set of policies monitored by Azure Security Center for cross cloud
      displayName: ASC Default
      effect: Exempt
      expiresOn: 2022-05-01T19:50:47.083633Z
      metadata:
        ticketId: 12345
      resourceGroupName: myResourceGroup
      scope: /subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/ResourceGroup/rg
Copy

Create Assignment Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Assignment(name: string, args: AssignmentArgs, opts?: CustomResourceOptions);
@overload
def Assignment(resource_name: str,
               args: AssignmentArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def Assignment(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               resource_group_name: Optional[str] = None,
               effect: Optional[str] = None,
               assigned_standard: Optional[AssignedStandardItemArgs] = None,
               assignment_id: Optional[str] = None,
               description: Optional[str] = None,
               display_name: Optional[str] = None,
               additional_data: Optional[AssignmentPropertiesAdditionalDataArgs] = None,
               expires_on: Optional[str] = None,
               kind: Optional[str] = None,
               location: Optional[str] = None,
               metadata: Optional[Any] = None,
               assigned_component: Optional[AssignedComponentItemArgs] = None,
               scope: Optional[str] = None,
               tags: Optional[Mapping[str, str]] = None)
func NewAssignment(ctx *Context, name string, args AssignmentArgs, opts ...ResourceOption) (*Assignment, error)
public Assignment(string name, AssignmentArgs args, CustomResourceOptions? opts = null)
public Assignment(String name, AssignmentArgs args)
public Assignment(String name, AssignmentArgs args, CustomResourceOptions options)

type: azure-native:security:Assignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AssignmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AssignmentArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AssignmentArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AssignmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AssignmentArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var azure_nativeAssignmentResource = new AzureNative.Security.Assignment("azure-nativeAssignmentResource", new()
{
    ResourceGroupName = "string",
    Effect = "string",
    AssignedStandard = 
    {
        { "id", "string" },
    },
    AssignmentId = "string",
    Description = "string",
    DisplayName = "string",
    AdditionalData = 
    {
        { "exemptionCategory", "string" },
    },
    ExpiresOn = "string",
    Kind = "string",
    Location = "string",
    Metadata = "any",
    AssignedComponent = 
    {
        { "key", "string" },
    },
    Scope = "string",
    Tags = 
    {
        { "string", "string" },
    },
});
Copy
example, err := security.NewAssignment(ctx, "azure-nativeAssignmentResource", &security.AssignmentArgs{
	ResourceGroupName: "string",
	Effect:            "string",
	AssignedStandard: map[string]interface{}{
		"id": "string",
	},
	AssignmentId: "string",
	Description:  "string",
	DisplayName:  "string",
	AdditionalData: map[string]interface{}{
		"exemptionCategory": "string",
	},
	ExpiresOn: "string",
	Kind:      "string",
	Location:  "string",
	Metadata:  "any",
	AssignedComponent: map[string]interface{}{
		"key": "string",
	},
	Scope: "string",
	Tags: map[string]interface{}{
		"string": "string",
	},
})
Copy
var azure_nativeAssignmentResource = new Assignment("azure-nativeAssignmentResource", AssignmentArgs.builder()
    .resourceGroupName("string")
    .effect("string")
    .assignedStandard(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .assignmentId("string")
    .description("string")
    .displayName("string")
    .additionalData(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .expiresOn("string")
    .kind("string")
    .location("string")
    .metadata("any")
    .assignedComponent(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .scope("string")
    .tags(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .build());
Copy
azure_native_assignment_resource = azure_native.security.Assignment("azure-nativeAssignmentResource",
    resource_group_name=string,
    effect=string,
    assigned_standard={
        id: string,
    },
    assignment_id=string,
    description=string,
    display_name=string,
    additional_data={
        exemptionCategory: string,
    },
    expires_on=string,
    kind=string,
    location=string,
    metadata=any,
    assigned_component={
        key: string,
    },
    scope=string,
    tags={
        string: string,
    })
Copy
const azure_nativeAssignmentResource = new azure_native.security.Assignment("azure-nativeAssignmentResource", {
    resourceGroupName: "string",
    effect: "string",
    assignedStandard: {
        id: "string",
    },
    assignmentId: "string",
    description: "string",
    displayName: "string",
    additionalData: {
        exemptionCategory: "string",
    },
    expiresOn: "string",
    kind: "string",
    location: "string",
    metadata: "any",
    assignedComponent: {
        key: "string",
    },
    scope: "string",
    tags: {
        string: "string",
    },
});
Copy
type: azure-native:security:Assignment
properties:
    additionalData:
        exemptionCategory: string
    assignedComponent:
        key: string
    assignedStandard:
        id: string
    assignmentId: string
    description: string
    displayName: string
    effect: string
    expiresOn: string
    kind: string
    location: string
    metadata: any
    resourceGroupName: string
    scope: string
    tags:
        string: string
Copy

Assignment Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Assignment resource accepts the following input properties:

ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group within the user's subscription. The name is case insensitive.
AdditionalData Pulumi.AzureNative.Security.Inputs.AssignmentPropertiesAdditionalData
Additional data about the assignment
AssignedComponent Pulumi.AzureNative.Security.Inputs.AssignedComponentItem
Component item with key as applied to this standard assignment over the given scope
AssignedStandard Pulumi.AzureNative.Security.Inputs.AssignedStandardItem
Standard item with key as applied to this standard assignment over the given scope
AssignmentId Changes to this property will trigger replacement. string
The security assignment key - unique key for the standard assignment
Description string
description of the standardAssignment
DisplayName string
display name of the standardAssignment
Effect string
expected effect of this assignment (Disable/Exempt/etc)
ExpiresOn string
Expiration date of this assignment as a full ISO date
Kind string
Kind of the resource
Location string
Location where the resource is stored
Metadata object
The assignment metadata. Metadata is an open ended object and is typically a collection of key value pairs.
Scope string
Scope to which the standardAssignment applies - can be a subscription path or a resource group under that subscription
Tags Dictionary<string, string>
A list of key value pairs that describe the resource.
ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group within the user's subscription. The name is case insensitive.
AdditionalData AssignmentPropertiesAdditionalDataArgs
Additional data about the assignment
AssignedComponent AssignedComponentItemArgs
Component item with key as applied to this standard assignment over the given scope
AssignedStandard AssignedStandardItemArgs
Standard item with key as applied to this standard assignment over the given scope
AssignmentId Changes to this property will trigger replacement. string
The security assignment key - unique key for the standard assignment
Description string
description of the standardAssignment
DisplayName string
display name of the standardAssignment
Effect string
expected effect of this assignment (Disable/Exempt/etc)
ExpiresOn string
Expiration date of this assignment as a full ISO date
Kind string
Kind of the resource
Location string
Location where the resource is stored
Metadata interface{}
The assignment metadata. Metadata is an open ended object and is typically a collection of key value pairs.
Scope string
Scope to which the standardAssignment applies - can be a subscription path or a resource group under that subscription
Tags map[string]string
A list of key value pairs that describe the resource.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group within the user's subscription. The name is case insensitive.
additionalData AssignmentPropertiesAdditionalData
Additional data about the assignment
assignedComponent AssignedComponentItem
Component item with key as applied to this standard assignment over the given scope
assignedStandard AssignedStandardItem
Standard item with key as applied to this standard assignment over the given scope
assignmentId Changes to this property will trigger replacement. String
The security assignment key - unique key for the standard assignment
description String
description of the standardAssignment
displayName String
display name of the standardAssignment
effect String
expected effect of this assignment (Disable/Exempt/etc)
expiresOn String
Expiration date of this assignment as a full ISO date
kind String
Kind of the resource
location String
Location where the resource is stored
metadata Object
The assignment metadata. Metadata is an open ended object and is typically a collection of key value pairs.
scope String
Scope to which the standardAssignment applies - can be a subscription path or a resource group under that subscription
tags Map<String,String>
A list of key value pairs that describe the resource.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group within the user's subscription. The name is case insensitive.
additionalData AssignmentPropertiesAdditionalData
Additional data about the assignment
assignedComponent AssignedComponentItem
Component item with key as applied to this standard assignment over the given scope
assignedStandard AssignedStandardItem
Standard item with key as applied to this standard assignment over the given scope
assignmentId Changes to this property will trigger replacement. string
The security assignment key - unique key for the standard assignment
description string
description of the standardAssignment
displayName string
display name of the standardAssignment
effect string
expected effect of this assignment (Disable/Exempt/etc)
expiresOn string
Expiration date of this assignment as a full ISO date
kind string
Kind of the resource
location string
Location where the resource is stored
metadata any
The assignment metadata. Metadata is an open ended object and is typically a collection of key value pairs.
scope string
Scope to which the standardAssignment applies - can be a subscription path or a resource group under that subscription
tags {[key: string]: string}
A list of key value pairs that describe the resource.
resource_group_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the resource group within the user's subscription. The name is case insensitive.
additional_data AssignmentPropertiesAdditionalDataArgs
Additional data about the assignment
assigned_component AssignedComponentItemArgs
Component item with key as applied to this standard assignment over the given scope
assigned_standard AssignedStandardItemArgs
Standard item with key as applied to this standard assignment over the given scope
assignment_id Changes to this property will trigger replacement. str
The security assignment key - unique key for the standard assignment
description str
description of the standardAssignment
display_name str
display name of the standardAssignment
effect str
expected effect of this assignment (Disable/Exempt/etc)
expires_on str
Expiration date of this assignment as a full ISO date
kind str
Kind of the resource
location str
Location where the resource is stored
metadata Any
The assignment metadata. Metadata is an open ended object and is typically a collection of key value pairs.
scope str
Scope to which the standardAssignment applies - can be a subscription path or a resource group under that subscription
tags Mapping[str, str]
A list of key value pairs that describe the resource.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group within the user's subscription. The name is case insensitive.
additionalData Property Map
Additional data about the assignment
assignedComponent Property Map
Component item with key as applied to this standard assignment over the given scope
assignedStandard Property Map
Standard item with key as applied to this standard assignment over the given scope
assignmentId Changes to this property will trigger replacement. String
The security assignment key - unique key for the standard assignment
description String
description of the standardAssignment
displayName String
display name of the standardAssignment
effect String
expected effect of this assignment (Disable/Exempt/etc)
expiresOn String
Expiration date of this assignment as a full ISO date
kind String
Kind of the resource
location String
Location where the resource is stored
metadata Any
The assignment metadata. Metadata is an open ended object and is typically a collection of key value pairs.
scope String
Scope to which the standardAssignment applies - can be a subscription path or a resource group under that subscription
tags Map<String>
A list of key value pairs that describe the resource.

Outputs

All input properties are implicitly available as output properties. Additionally, the Assignment resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Name string
Resource name
SystemData Pulumi.AzureNative.Security.Outputs.SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string
Resource type
Etag string
Entity tag is used for comparing two or more entities from the same requested resource.
Id string
The provider-assigned unique ID for this managed resource.
Name string
Resource name
SystemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string
Resource type
Etag string
Entity tag is used for comparing two or more entities from the same requested resource.
id String
The provider-assigned unique ID for this managed resource.
name String
Resource name
systemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String
Resource type
etag String
Entity tag is used for comparing two or more entities from the same requested resource.
id string
The provider-assigned unique ID for this managed resource.
name string
Resource name
systemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type string
Resource type
etag string
Entity tag is used for comparing two or more entities from the same requested resource.
id str
The provider-assigned unique ID for this managed resource.
name str
Resource name
system_data SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type str
Resource type
etag str
Entity tag is used for comparing two or more entities from the same requested resource.
id String
The provider-assigned unique ID for this managed resource.
name String
Resource name
systemData Property Map
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String
Resource type
etag String
Entity tag is used for comparing two or more entities from the same requested resource.

Supporting Types

AssignedComponentItem
, AssignedComponentItemArgs

Key string
unique key to a security assessment object
Key string
unique key to a security assessment object
key String
unique key to a security assessment object
key string
unique key to a security assessment object
key str
unique key to a security assessment object
key String
unique key to a security assessment object

AssignedComponentItemResponse
, AssignedComponentItemResponseArgs

Key string
unique key to a security assessment object
Key string
unique key to a security assessment object
key String
unique key to a security assessment object
key string
unique key to a security assessment object
key str
unique key to a security assessment object
key String
unique key to a security assessment object

AssignedStandardItem
, AssignedStandardItemArgs

Id string
Full resourceId of the Microsoft.Security/standard object
Id string
Full resourceId of the Microsoft.Security/standard object
id String
Full resourceId of the Microsoft.Security/standard object
id string
Full resourceId of the Microsoft.Security/standard object
id str
Full resourceId of the Microsoft.Security/standard object
id String
Full resourceId of the Microsoft.Security/standard object

AssignedStandardItemResponse
, AssignedStandardItemResponseArgs

Id string
Full resourceId of the Microsoft.Security/standard object
Id string
Full resourceId of the Microsoft.Security/standard object
id String
Full resourceId of the Microsoft.Security/standard object
id string
Full resourceId of the Microsoft.Security/standard object
id str
Full resourceId of the Microsoft.Security/standard object
id String
Full resourceId of the Microsoft.Security/standard object

AssignmentPropertiesAdditionalData
, AssignmentPropertiesAdditionalDataArgs

ExemptionCategory string
Exemption category of this assignment
ExemptionCategory string
Exemption category of this assignment
exemptionCategory String
Exemption category of this assignment
exemptionCategory string
Exemption category of this assignment
exemption_category str
Exemption category of this assignment
exemptionCategory String
Exemption category of this assignment

AssignmentPropertiesResponseAdditionalData
, AssignmentPropertiesResponseAdditionalDataArgs

ExemptionCategory string
Exemption category of this assignment
ExemptionCategory string
Exemption category of this assignment
exemptionCategory String
Exemption category of this assignment
exemptionCategory string
Exemption category of this assignment
exemption_category str
Exemption category of this assignment
exemptionCategory String
Exemption category of this assignment

SystemDataResponse
, SystemDataResponseArgs

CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.
createdAt string
The timestamp of resource creation (UTC).
createdBy string
The identity that created the resource.
createdByType string
The type of identity that created the resource.
lastModifiedAt string
The timestamp of resource last modification (UTC)
lastModifiedBy string
The identity that last modified the resource.
lastModifiedByType string
The type of identity that last modified the resource.
created_at str
The timestamp of resource creation (UTC).
created_by str
The identity that created the resource.
created_by_type str
The type of identity that created the resource.
last_modified_at str
The timestamp of resource last modification (UTC)
last_modified_by str
The identity that last modified the resource.
last_modified_by_type str
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:security:Assignment 1f3afdf9-d0c9-4c3d-847f-89da613e70a8 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/assignments/{assignmentId}
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
azure-native-v2 pulumi/pulumi-azure-native
License
Apache-2.0
These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native