@pulumi/azure-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
334 lines (333 loc) • 18.6 kB
JavaScript
"use strict";
// Copyright 2016-2024, Pulumi Corporation.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// ------------------------------- WARNING -------------------------------------
// This file was programmatically generated. Do not edit unless you know what
// you're doing.
// ------------------------------- WARNING -------------------------------------
Object.defineProperty(exports, "__esModule", { value: true });
exports.SqlServerLicense = exports.SqlServerInstance = exports.SqlServerEsuLicense = exports.SqlServerDatabase = exports.SqlServerAvailabilityGroup = exports.SqlManagedInstance = exports.PostgresInstance = exports.FailoverGroup = exports.DataController = exports.ActiveDirectoryConnector = void 0;
const policy_1 = require("@pulumi/policy");
const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager");
const v20240501preview_1 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
const v20240501preview_2 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
const v20240501preview_3 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
const v20240501preview_4 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
const v20240501preview_5 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
const v20240501preview_6 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
const v20240501preview_7 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
const v20240501preview_8 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
const v20240501preview_9 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
const v20240501preview_10 = require("@pulumi/azure-native/azurearcdata/v20240501preview");
var ActiveDirectoryConnector;
(function (ActiveDirectoryConnector) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.ActiveDirectoryConnector).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
ActiveDirectoryConnector.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-activedirectoryconnector-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.ActiveDirectoryConnector).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_1.ActiveDirectoryConnector, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure ActiveDirectoryConnector shouldn't use an unstable API (azurearcdata.v20240501preview.ActiveDirectoryConnector). A compatible replacement can be found at 'azurearcdata.ActiveDirectoryConnector'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(ActiveDirectoryConnector || (ActiveDirectoryConnector = {}));
exports.ActiveDirectoryConnector = ActiveDirectoryConnector;
var DataController;
(function (DataController) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.DataController).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
DataController.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-datacontroller-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.DataController).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_2.DataController, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure DataController shouldn't use an unstable API (azurearcdata.v20240501preview.DataController). A compatible replacement can be found at 'azurearcdata.DataController'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(DataController || (DataController = {}));
exports.DataController = DataController;
var FailoverGroup;
(function (FailoverGroup) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.FailoverGroup).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
FailoverGroup.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-failovergroup-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.FailoverGroup).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_3.FailoverGroup, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure FailoverGroup shouldn't use an unstable API (azurearcdata.v20240501preview.FailoverGroup). A compatible replacement can be found at 'azurearcdata.FailoverGroup'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(FailoverGroup || (FailoverGroup = {}));
exports.FailoverGroup = FailoverGroup;
var PostgresInstance;
(function (PostgresInstance) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.PostgresInstance).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
PostgresInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-postgresinstance-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.PostgresInstance).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_4.PostgresInstance, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure PostgresInstance shouldn't use an unstable API (azurearcdata.v20240501preview.PostgresInstance). A compatible replacement can be found at 'azurearcdata.PostgresInstance'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(PostgresInstance || (PostgresInstance = {}));
exports.PostgresInstance = PostgresInstance;
var SqlManagedInstance;
(function (SqlManagedInstance) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlManagedInstance).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
SqlManagedInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-sqlmanagedinstance-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlManagedInstance).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_5.SqlManagedInstance, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure SqlManagedInstance shouldn't use an unstable API (azurearcdata.v20240501preview.SqlManagedInstance). A compatible replacement can be found at 'azurearcdata.SqlManagedInstance'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(SqlManagedInstance || (SqlManagedInstance = {}));
exports.SqlManagedInstance = SqlManagedInstance;
var SqlServerAvailabilityGroup;
(function (SqlServerAvailabilityGroup) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerAvailabilityGroup).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
SqlServerAvailabilityGroup.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-sqlserveravailabilitygroup-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerAvailabilityGroup).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_6.SqlServerAvailabilityGroup, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure SqlServerAvailabilityGroup shouldn't use an unstable API (azurearcdata.v20240501preview.SqlServerAvailabilityGroup). A compatible replacement can be found at 'azurearcdata.SqlServerAvailabilityGroup'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(SqlServerAvailabilityGroup || (SqlServerAvailabilityGroup = {}));
exports.SqlServerAvailabilityGroup = SqlServerAvailabilityGroup;
var SqlServerDatabase;
(function (SqlServerDatabase) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerDatabase).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
SqlServerDatabase.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-sqlserverdatabase-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerDatabase).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_7.SqlServerDatabase, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure SqlServerDatabase shouldn't use an unstable API (azurearcdata.v20240501preview.SqlServerDatabase). A compatible replacement can be found at 'azurearcdata.SqlServerDatabase'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(SqlServerDatabase || (SqlServerDatabase = {}));
exports.SqlServerDatabase = SqlServerDatabase;
var SqlServerEsuLicense;
(function (SqlServerEsuLicense) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerEsuLicense).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
SqlServerEsuLicense.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-sqlserveresulicense-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerEsuLicense).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_8.SqlServerEsuLicense, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure SqlServerEsuLicense shouldn't use an unstable API (azurearcdata.v20240501preview.SqlServerEsuLicense). A compatible replacement can be found at 'azurearcdata.SqlServerEsuLicense'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(SqlServerEsuLicense || (SqlServerEsuLicense = {}));
exports.SqlServerEsuLicense = SqlServerEsuLicense;
var SqlServerInstance;
(function (SqlServerInstance) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerInstance).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
SqlServerInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-sqlserverinstance-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerInstance).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_9.SqlServerInstance, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure SqlServerInstance shouldn't use an unstable API (azurearcdata.v20240501preview.SqlServerInstance). A compatible replacement can be found at 'azurearcdata.SqlServerInstance'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(SqlServerInstance || (SqlServerInstance = {}));
exports.SqlServerInstance = SqlServerInstance;
var SqlServerLicense;
(function (SqlServerLicense) {
/**
* Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerLicense).
*
* @severity medium
* @frameworks none
* @topics api, preview, unstable
* @link https://learn.microsoft.com/en-us/rest/api/azure/
*/
SqlServerLicense.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "azurenative-azurearcdata-v20240501preview-sqlserverlicense-disallow-preview-resource",
description: "Disallow the use of non-stable (Preview) Azure resouces (azurearcdata.v20240501preview.SqlServerLicense).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v20240501preview_10.SqlServerLicense, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Azure SqlServerLicense shouldn't use an unstable API (azurearcdata.v20240501preview.SqlServerLicense). A compatible replacement can be found at 'azurearcdata.SqlServerLicense'.");
}),
},
vendors: ["azure"],
services: ["azurearcdata"],
severity: "medium",
topics: ["api", "unstable", "preview"],
});
})(SqlServerLicense || (SqlServerLicense = {}));
exports.SqlServerLicense = SqlServerLicense;