UNPKG

@pulumi/azure-compliance-policies

Version:

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

272 lines (271 loc) 14.5 kB
"use strict"; // Copyright 2016-2024, Pulumi Corporation. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. // // ------------------------------- WARNING ------------------------------------- // This file was programmatically generated. Do not edit unless you know what // you're doing. // ------------------------------- WARNING ------------------------------------- Object.defineProperty(exports, "__esModule", { value: true }); exports.VirtualEndpoint = exports.Server = exports.PrivateEndpointConnection = exports.Migration = exports.FirewallRule = exports.Database = exports.Configuration = exports.Administrator = void 0; const policy_1 = require("@pulumi/policy"); const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager"); const v20230601preview_1 = require("@pulumi/azure-native/dbforpostgresql/v20230601preview"); const v20230601preview_2 = require("@pulumi/azure-native/dbforpostgresql/v20230601preview"); const v20230601preview_3 = require("@pulumi/azure-native/dbforpostgresql/v20230601preview"); const v20230601preview_4 = require("@pulumi/azure-native/dbforpostgresql/v20230601preview"); const v20230601preview_5 = require("@pulumi/azure-native/dbforpostgresql/v20230601preview"); const v20230601preview_6 = require("@pulumi/azure-native/dbforpostgresql/v20230601preview"); const v20230601preview_7 = require("@pulumi/azure-native/dbforpostgresql/v20230601preview"); const v20230601preview_8 = require("@pulumi/azure-native/dbforpostgresql/v20230601preview"); var Administrator; (function (Administrator) { /** * Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Administrator). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Administrator.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-dbforpostgresql-v20230601preview-administrator-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Administrator).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230601preview_1.Administrator, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Administrator shouldn't use an unstable API (dbforpostgresql.v20230601preview.Administrator). A compatible replacement can be found at 'dbforpostgresql.Administrator'."); }), }, vendors: ["azure"], services: ["dbforpostgresql"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Administrator || (Administrator = {})); exports.Administrator = Administrator; var Configuration; (function (Configuration) { /** * Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Configuration). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Configuration.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-dbforpostgresql-v20230601preview-configuration-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Configuration).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230601preview_2.Configuration, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Configuration shouldn't use an unstable API (dbforpostgresql.v20230601preview.Configuration). A compatible replacement can be found at 'dbforpostgresql.Configuration'."); }), }, vendors: ["azure"], services: ["dbforpostgresql"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Configuration || (Configuration = {})); exports.Configuration = Configuration; var Database; (function (Database) { /** * Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Database). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Database.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-dbforpostgresql-v20230601preview-database-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Database).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230601preview_3.Database, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Database shouldn't use an unstable API (dbforpostgresql.v20230601preview.Database). A compatible replacement can be found at 'dbforpostgresql.Database'."); }), }, vendors: ["azure"], services: ["dbforpostgresql"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Database || (Database = {})); exports.Database = Database; var FirewallRule; (function (FirewallRule) { /** * Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.FirewallRule). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ FirewallRule.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-dbforpostgresql-v20230601preview-firewallrule-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.FirewallRule).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230601preview_4.FirewallRule, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure FirewallRule shouldn't use an unstable API (dbforpostgresql.v20230601preview.FirewallRule). A compatible replacement can be found at 'dbforpostgresql.FirewallRule'."); }), }, vendors: ["azure"], services: ["dbforpostgresql"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(FirewallRule || (FirewallRule = {})); exports.FirewallRule = FirewallRule; var Migration; (function (Migration) { /** * Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Migration). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Migration.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-dbforpostgresql-v20230601preview-migration-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Migration).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230601preview_5.Migration, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Migration shouldn't use an unstable API (dbforpostgresql.v20230601preview.Migration). A compatible replacement can be found at 'dbforpostgresql.Migration'."); }), }, vendors: ["azure"], services: ["dbforpostgresql"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Migration || (Migration = {})); exports.Migration = Migration; var PrivateEndpointConnection; (function (PrivateEndpointConnection) { /** * Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.PrivateEndpointConnection). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ PrivateEndpointConnection.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-dbforpostgresql-v20230601preview-privateendpointconnection-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.PrivateEndpointConnection).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230601preview_6.PrivateEndpointConnection, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure PrivateEndpointConnection shouldn't use an unstable API (dbforpostgresql.v20230601preview.PrivateEndpointConnection)."); }), }, vendors: ["azure"], services: ["dbforpostgresql"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(PrivateEndpointConnection || (PrivateEndpointConnection = {})); exports.PrivateEndpointConnection = PrivateEndpointConnection; var Server; (function (Server) { /** * Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Server). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Server.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-dbforpostgresql-v20230601preview-server-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.Server).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230601preview_7.Server, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Server shouldn't use an unstable API (dbforpostgresql.v20230601preview.Server). A compatible replacement can be found at 'dbforpostgresql.Server'."); }), }, vendors: ["azure"], services: ["dbforpostgresql"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Server || (Server = {})); exports.Server = Server; var VirtualEndpoint; (function (VirtualEndpoint) { /** * Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.VirtualEndpoint). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ VirtualEndpoint.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-dbforpostgresql-v20230601preview-virtualendpoint-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (dbforpostgresql.v20230601preview.VirtualEndpoint).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20230601preview_8.VirtualEndpoint, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure VirtualEndpoint shouldn't use an unstable API (dbforpostgresql.v20230601preview.VirtualEndpoint). A compatible replacement can be found at 'dbforpostgresql.VirtualEndpoint'."); }), }, vendors: ["azure"], services: ["dbforpostgresql"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(VirtualEndpoint || (VirtualEndpoint = {})); exports.VirtualEndpoint = VirtualEndpoint;