UNPKG

@pulumi/azure-compliance-policies

Version:

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

396 lines (395 loc) 21.5 kB
"use strict"; // Copyright 2016-2024, Pulumi Corporation. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. // // ------------------------------- WARNING ------------------------------------- // This file was programmatically generated. Do not edit unless you know what // you're doing. // ------------------------------- WARNING ------------------------------------- Object.defineProperty(exports, "__esModule", { value: true }); exports.ServerInstance = exports.SapLandscapeMonitor = exports.SapInstance = exports.SapDiscoverySite = exports.SAPVirtualInstance = exports.SAPDatabaseInstance = exports.SAPCentralInstance = exports.SAPApplicationServerInstance = exports.ProviderInstance = exports.Monitor = exports.Connector = exports.ACSSBackupConnection = void 0; const policy_1 = require("@pulumi/policy"); const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager"); const v20231001preview_1 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_2 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_3 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_4 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_5 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_6 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_7 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_8 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_9 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_10 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_11 = require("@pulumi/azure-native/workloads/v20231001preview"); const v20231001preview_12 = require("@pulumi/azure-native/workloads/v20231001preview"); var ACSSBackupConnection; (function (ACSSBackupConnection) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.ACSSBackupConnection). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ ACSSBackupConnection.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-acssbackupconnection-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.ACSSBackupConnection).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_1.ACSSBackupConnection, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure ACSSBackupConnection shouldn't use an unstable API (workloads.v20231001preview.ACSSBackupConnection). A compatible replacement can be found at 'workloads.ACSSBackupConnection'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(ACSSBackupConnection || (ACSSBackupConnection = {})); exports.ACSSBackupConnection = ACSSBackupConnection; var Connector; (function (Connector) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.Connector). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Connector.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-connector-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.Connector).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_2.Connector, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Connector shouldn't use an unstable API (workloads.v20231001preview.Connector). A compatible replacement can be found at 'workloads.Connector'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Connector || (Connector = {})); exports.Connector = Connector; var Monitor; (function (Monitor) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.Monitor). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ Monitor.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-monitor-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.Monitor).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_3.Monitor, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure Monitor shouldn't use an unstable API (workloads.v20231001preview.Monitor). A compatible replacement can be found at 'workloads.Monitor'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(Monitor || (Monitor = {})); exports.Monitor = Monitor; var ProviderInstance; (function (ProviderInstance) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.ProviderInstance). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ ProviderInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-providerinstance-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.ProviderInstance).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_4.ProviderInstance, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure ProviderInstance shouldn't use an unstable API (workloads.v20231001preview.ProviderInstance). A compatible replacement can be found at 'workloads.ProviderInstance'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(ProviderInstance || (ProviderInstance = {})); exports.ProviderInstance = ProviderInstance; var SAPApplicationServerInstance; (function (SAPApplicationServerInstance) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SAPApplicationServerInstance). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ SAPApplicationServerInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-sapapplicationserverinstance-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SAPApplicationServerInstance).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_5.SAPApplicationServerInstance, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure SAPApplicationServerInstance shouldn't use an unstable API (workloads.v20231001preview.SAPApplicationServerInstance). A compatible replacement can be found at 'workloads.SAPApplicationServerInstance'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(SAPApplicationServerInstance || (SAPApplicationServerInstance = {})); exports.SAPApplicationServerInstance = SAPApplicationServerInstance; var SAPCentralInstance; (function (SAPCentralInstance) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SAPCentralInstance). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ SAPCentralInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-sapcentralinstance-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SAPCentralInstance).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_6.SAPCentralInstance, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure SAPCentralInstance shouldn't use an unstable API (workloads.v20231001preview.SAPCentralInstance). A compatible replacement can be found at 'workloads.SAPCentralInstance'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(SAPCentralInstance || (SAPCentralInstance = {})); exports.SAPCentralInstance = SAPCentralInstance; var SAPDatabaseInstance; (function (SAPDatabaseInstance) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SAPDatabaseInstance). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ SAPDatabaseInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-sapdatabaseinstance-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SAPDatabaseInstance).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_7.SAPDatabaseInstance, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure SAPDatabaseInstance shouldn't use an unstable API (workloads.v20231001preview.SAPDatabaseInstance). A compatible replacement can be found at 'workloads.SAPDatabaseInstance'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(SAPDatabaseInstance || (SAPDatabaseInstance = {})); exports.SAPDatabaseInstance = SAPDatabaseInstance; var SAPVirtualInstance; (function (SAPVirtualInstance) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SAPVirtualInstance). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ SAPVirtualInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-sapvirtualinstance-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SAPVirtualInstance).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_8.SAPVirtualInstance, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure SAPVirtualInstance shouldn't use an unstable API (workloads.v20231001preview.SAPVirtualInstance). A compatible replacement can be found at 'workloads.SAPVirtualInstance'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(SAPVirtualInstance || (SAPVirtualInstance = {})); exports.SAPVirtualInstance = SAPVirtualInstance; var SapDiscoverySite; (function (SapDiscoverySite) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SapDiscoverySite). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ SapDiscoverySite.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-sapdiscoverysite-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SapDiscoverySite).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_9.SapDiscoverySite, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure SapDiscoverySite shouldn't use an unstable API (workloads.v20231001preview.SapDiscoverySite). A compatible replacement can be found at 'workloads.SapDiscoverySite'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(SapDiscoverySite || (SapDiscoverySite = {})); exports.SapDiscoverySite = SapDiscoverySite; var SapInstance; (function (SapInstance) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SapInstance). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ SapInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-sapinstance-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SapInstance).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_10.SapInstance, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure SapInstance shouldn't use an unstable API (workloads.v20231001preview.SapInstance). A compatible replacement can be found at 'workloads.SapInstance'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(SapInstance || (SapInstance = {})); exports.SapInstance = SapInstance; var SapLandscapeMonitor; (function (SapLandscapeMonitor) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SapLandscapeMonitor). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ SapLandscapeMonitor.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-saplandscapemonitor-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.SapLandscapeMonitor).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_11.SapLandscapeMonitor, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure SapLandscapeMonitor shouldn't use an unstable API (workloads.v20231001preview.SapLandscapeMonitor). A compatible replacement can be found at 'workloads.SapLandscapeMonitor'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(SapLandscapeMonitor || (SapLandscapeMonitor = {})); exports.SapLandscapeMonitor = SapLandscapeMonitor; var ServerInstance; (function (ServerInstance) { /** * Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.ServerInstance). * * @severity medium * @frameworks none * @topics api, preview, unstable * @link https://learn.microsoft.com/en-us/rest/api/azure/ */ ServerInstance.disallowPreviewResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "azurenative-workloads-v20231001preview-serverinstance-disallow-preview-resource", description: "Disallow the use of non-stable (Preview) Azure resouces (workloads.v20231001preview.ServerInstance).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v20231001preview_12.ServerInstance, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Azure ServerInstance shouldn't use an unstable API (workloads.v20231001preview.ServerInstance). A compatible replacement can be found at 'workloads.ServerInstance'."); }), }, vendors: ["azure"], services: ["workloads"], severity: "medium", topics: ["api", "unstable", "preview"], }); })(ServerInstance || (ServerInstance = {})); exports.ServerInstance = ServerInstance;