UNPKG

@pulumi/azure-compliance-policies

Version:

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

520 lines (519 loc) 27.7 kB
"use strict"; // Copyright 2016-2024, Pulumi Corporation. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. // // ------------------------------- WARNING ------------------------------------- // This file was programmatically generated. Do not edit unless you know what // you're doing. // ------------------------------- WARNING ------------------------------------- Object.defineProperty(exports, "__esModule", { value: true }); exports.User = exports.StorageAccountCredential = exports.StorageAccount = exports.Share = exports.PeriodicTimerEventTrigger = exports.Order = exports.MonitoringConfig = exports.MECRole = exports.KubernetesRole = exports.IoTRole = exports.FileEventTrigger = exports.Device = exports.Container = exports.CloudEdgeManagementRole = exports.BandwidthSchedule = exports.ArcAddon = void 0; const policy_1 = require("@pulumi/policy"); const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager"); const v20230101preview_1 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_2 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_3 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_4 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_5 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_6 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_7 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_8 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_9 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_10 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_11 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_12 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_13 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_14 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_15 = require("@pulumi/azure-native/databoxedge/v20230101preview"); const v20230101preview_16 = require("@pulumi/azure-native/databoxedge/v20230101preview"); var ArcAddon; (function (ArcAddon) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.ArcAddon). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ ArcAddon.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-arcaddon-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.ArcAddon).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_1.ArcAddon, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure ArcAddon shouldn't use an unstable API (databoxedge.v20230101preview.ArcAddon). A compatible replacement can be found at 'databoxedge.ArcAddon'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(ArcAddon || (ArcAddon = {})); exports.ArcAddon = ArcAddon; var BandwidthSchedule; (function (BandwidthSchedule) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.BandwidthSchedule). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ BandwidthSchedule.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-bandwidthschedule-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.BandwidthSchedule).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_2.BandwidthSchedule, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure BandwidthSchedule shouldn't use an unstable API (databoxedge.v20230101preview.BandwidthSchedule). A compatible replacement can be found at 'databoxedge.BandwidthSchedule'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(BandwidthSchedule || (BandwidthSchedule = {})); exports.BandwidthSchedule = BandwidthSchedule; var CloudEdgeManagementRole; (function (CloudEdgeManagementRole) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.CloudEdgeManagementRole). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ CloudEdgeManagementRole.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-cloudedgemanagementrole-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.CloudEdgeManagementRole).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_3.CloudEdgeManagementRole, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure CloudEdgeManagementRole shouldn't use an unstable API (databoxedge.v20230101preview.CloudEdgeManagementRole). A compatible replacement can be found at 'databoxedge.CloudEdgeManagementRole'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(CloudEdgeManagementRole || (CloudEdgeManagementRole = {})); exports.CloudEdgeManagementRole = CloudEdgeManagementRole; var Container; (function (Container) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.Container). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Container.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-container-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.Container).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_4.Container, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Container shouldn't use an unstable API (databoxedge.v20230101preview.Container). A compatible replacement can be found at 'databoxedge.Container'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Container || (Container = {})); exports.Container = Container; var Device; (function (Device) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.Device). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Device.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-device-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.Device).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_5.Device, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Device shouldn't use an unstable API (databoxedge.v20230101preview.Device). A compatible replacement can be found at 'databoxedge.Device'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Device || (Device = {})); exports.Device = Device; var FileEventTrigger; (function (FileEventTrigger) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.FileEventTrigger). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ FileEventTrigger.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-fileeventtrigger-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.FileEventTrigger).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_6.FileEventTrigger, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure FileEventTrigger shouldn't use an unstable API (databoxedge.v20230101preview.FileEventTrigger). A compatible replacement can be found at 'databoxedge.FileEventTrigger'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(FileEventTrigger || (FileEventTrigger = {})); exports.FileEventTrigger = FileEventTrigger; var IoTRole; (function (IoTRole) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.IoTRole). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ IoTRole.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-iotrole-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.IoTRole).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_7.IoTRole, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure IoTRole shouldn't use an unstable API (databoxedge.v20230101preview.IoTRole). A compatible replacement can be found at 'databoxedge.IoTRole'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(IoTRole || (IoTRole = {})); exports.IoTRole = IoTRole; var KubernetesRole; (function (KubernetesRole) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.KubernetesRole). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ KubernetesRole.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-kubernetesrole-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.KubernetesRole).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_8.KubernetesRole, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure KubernetesRole shouldn't use an unstable API (databoxedge.v20230101preview.KubernetesRole). A compatible replacement can be found at 'databoxedge.KubernetesRole'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(KubernetesRole || (KubernetesRole = {})); exports.KubernetesRole = KubernetesRole; var MECRole; (function (MECRole) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.MECRole). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ MECRole.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-mecrole-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.MECRole).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_9.MECRole, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure MECRole shouldn't use an unstable API (databoxedge.v20230101preview.MECRole). A compatible replacement can be found at 'databoxedge.MECRole'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(MECRole || (MECRole = {})); exports.MECRole = MECRole; var MonitoringConfig; (function (MonitoringConfig) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.MonitoringConfig). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ MonitoringConfig.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-monitoringconfig-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.MonitoringConfig).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_10.MonitoringConfig, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure MonitoringConfig shouldn't use an unstable API (databoxedge.v20230101preview.MonitoringConfig). A compatible replacement can be found at 'databoxedge.MonitoringConfig'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(MonitoringConfig || (MonitoringConfig = {})); exports.MonitoringConfig = MonitoringConfig; var Order; (function (Order) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.Order). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Order.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-order-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.Order).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_11.Order, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Order shouldn't use an unstable API (databoxedge.v20230101preview.Order). A compatible replacement can be found at 'databoxedge.Order'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Order || (Order = {})); exports.Order = Order; var PeriodicTimerEventTrigger; (function (PeriodicTimerEventTrigger) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.PeriodicTimerEventTrigger). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ PeriodicTimerEventTrigger.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-periodictimereventtrigger-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.PeriodicTimerEventTrigger).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_12.PeriodicTimerEventTrigger, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure PeriodicTimerEventTrigger shouldn't use an unstable API (databoxedge.v20230101preview.PeriodicTimerEventTrigger). A compatible replacement can be found at 'databoxedge.PeriodicTimerEventTrigger'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(PeriodicTimerEventTrigger || (PeriodicTimerEventTrigger = {})); exports.PeriodicTimerEventTrigger = PeriodicTimerEventTrigger; var Share; (function (Share) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.Share). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Share.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-share-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.Share).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_13.Share, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Share shouldn't use an unstable API (databoxedge.v20230101preview.Share). A compatible replacement can be found at 'databoxedge.Share'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Share || (Share = {})); exports.Share = Share; var StorageAccount; (function (StorageAccount) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.StorageAccount). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ StorageAccount.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-storageaccount-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.StorageAccount).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_14.StorageAccount, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure StorageAccount shouldn't use an unstable API (databoxedge.v20230101preview.StorageAccount). A compatible replacement can be found at 'databoxedge.StorageAccount'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(StorageAccount || (StorageAccount = {})); exports.StorageAccount = StorageAccount; var StorageAccountCredential; (function (StorageAccountCredential) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.StorageAccountCredential). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ StorageAccountCredential.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-storageaccountcredential-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.StorageAccountCredential).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_15.StorageAccountCredential, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure StorageAccountCredential shouldn't use an unstable API (databoxedge.v20230101preview.StorageAccountCredential). A compatible replacement can be found at 'databoxedge.StorageAccountCredential'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(StorageAccountCredential || (StorageAccountCredential = {})); exports.StorageAccountCredential = StorageAccountCredential; var User; (function (User) { /** * Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.User). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ User.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-databoxedge-v20230101preview-user-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (databoxedge.v20230101preview.User).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230101preview_16.User, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure User shouldn't use an unstable API (databoxedge.v20230101preview.User). A compatible replacement can be found at 'databoxedge.User'."); }), }, vendors: ["azure"], services: ["databoxedge"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(User || (User = {})); exports.User = User;