Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. security
  5. Automation
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.security.Automation

Explore with Pulumi AI

This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-azure-native

The security automation resource.

Uses Azure REST API version 2023-12-01-preview. In version 2.x of the Azure Native provider, it used API version 2019-01-01-preview.

Other available API versions: 2019-01-01-preview. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native security [ApiVersion]. See the version guide for details.

Example Usage

Create or update a security automation for all assessments (including all severities)

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
        IsEnabled = true,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = AzureNative.Security.EventSource.Assessments,
            },
        },
        Tags = null,
    });

});
Copy
package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.Array{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment"),
			IsEnabled:         pulumi.Bool(true),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: security.AutomationScopeArray{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: security.AutomationSourceArray{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String(security.EventSourceAssessments),
				},
			},
			Tags: pulumi.StringMap{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import com.pulumi.azurenative.security.inputs.AutomationScopeArgs;
import com.pulumi.azurenative.security.inputs.AutomationSourceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()
            .actions(AutomationActionLogicAppArgs.builder()
                .actionType("LogicApp")
                .logicAppResourceId("/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1")
                .uri("https://exampleTriggerUri1.com")
                .build())
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment")
            .isEnabled(true)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(AutomationScopeArgs.builder()
                .description("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5")
                .scopePath("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
                .build())
            .sources(AutomationSourceArgs.builder()
                .eventSource("Assessments")
                .build())
            .tags(Map.ofEntries(
            ))
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
    isEnabled: true,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: azure_native.security.EventSource.Assessments,
    }],
    tags: {},
});
Copy
import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[{
        "action_type": "LogicApp",
        "logic_app_resource_id": "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        "uri": "https://exampleTriggerUri1.com",
    }],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
    is_enabled=True,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[{
        "description": "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        "scope_path": "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources=[{
        "event_source": azure_native.security.EventSource.ASSESSMENTS,
    }],
    tags={})
Copy
resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment
      isEnabled: true
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
      tags: {}
Copy

Create or update a security automation for all high severity assessments

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
        IsEnabled = true,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = AzureNative.Security.EventSource.Assessments,
                RuleSets = new[]
                {
                    new AzureNative.Security.Inputs.AutomationRuleSetArgs
                    {
                        Rules = new[]
                        {
                            new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                            {
                                ExpectedValue = "High",
                                Operator = AzureNative.Security.Operator.EqualsValue,
                                PropertyJPath = "properties.metadata.severity",
                                PropertyType = AzureNative.Security.PropertyType.String,
                            },
                        },
                    },
                },
            },
        },
        Tags = null,
    });

});
Copy
package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.Array{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment"),
			IsEnabled:         pulumi.Bool(true),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: security.AutomationScopeArray{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: security.AutomationSourceArray{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String(security.EventSourceAssessments),
					RuleSets: security.AutomationRuleSetArray{
						&security.AutomationRuleSetArgs{
							Rules: security.AutomationTriggeringRuleArray{
								&security.AutomationTriggeringRuleArgs{
									ExpectedValue: pulumi.String("High"),
									Operator:      pulumi.String(security.OperatorEquals),
									PropertyJPath: pulumi.String("properties.metadata.severity"),
									PropertyType:  pulumi.String(security.PropertyTypeString),
								},
							},
						},
					},
				},
			},
			Tags: pulumi.StringMap{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import com.pulumi.azurenative.security.inputs.AutomationScopeArgs;
import com.pulumi.azurenative.security.inputs.AutomationSourceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()
            .actions(AutomationActionLogicAppArgs.builder()
                .actionType("LogicApp")
                .logicAppResourceId("/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1")
                .uri("https://exampleTriggerUri1.com")
                .build())
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment")
            .isEnabled(true)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(AutomationScopeArgs.builder()
                .description("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5")
                .scopePath("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
                .build())
            .sources(AutomationSourceArgs.builder()
                .eventSource("Assessments")
                .ruleSets(AutomationRuleSetArgs.builder()
                    .rules(AutomationTriggeringRuleArgs.builder()
                        .expectedValue("High")
                        .operator("Equals")
                        .propertyJPath("properties.metadata.severity")
                        .propertyType("String")
                        .build())
                    .build())
                .build())
            .tags(Map.ofEntries(
            ))
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
    isEnabled: true,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: azure_native.security.EventSource.Assessments,
        ruleSets: [{
            rules: [{
                expectedValue: "High",
                operator: azure_native.security.Operator.Equals,
                propertyJPath: "properties.metadata.severity",
                propertyType: azure_native.security.PropertyType.String,
            }],
        }],
    }],
    tags: {},
});
Copy
import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[{
        "action_type": "LogicApp",
        "logic_app_resource_id": "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        "uri": "https://exampleTriggerUri1.com",
    }],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
    is_enabled=True,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[{
        "description": "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        "scope_path": "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources=[{
        "event_source": azure_native.security.EventSource.ASSESSMENTS,
        "rule_sets": [{
            "rules": [{
                "expected_value": "High",
                "operator": azure_native.security.Operator.EQUALS,
                "property_j_path": "properties.metadata.severity",
                "property_type": azure_native.security.PropertyType.STRING,
            }],
        }],
    }],
    tags={})
Copy
resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment
      isEnabled: true
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
          ruleSets:
            - rules:
                - expectedValue: High
                  operator: Equals
                  propertyJPath: properties.metadata.severity
                  propertyType: String
      tags: {}
Copy

Disable or enable a security automation

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
        IsEnabled = false,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = AzureNative.Security.EventSource.Assessments,
                RuleSets = new[]
                {
                    new AzureNative.Security.Inputs.AutomationRuleSetArgs
                    {
                        Rules = new[]
                        {
                            new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                            {
                                ExpectedValue = "customAssessment",
                                Operator = AzureNative.Security.Operator.EqualsValue,
                                PropertyJPath = "$.Entity.AssessmentType",
                                PropertyType = AzureNative.Security.PropertyType.String,
                            },
                        },
                    },
                },
            },
        },
        Tags = null,
    });

});
Copy
package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.Array{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment"),
			IsEnabled:         pulumi.Bool(false),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: security.AutomationScopeArray{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: security.AutomationSourceArray{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String(security.EventSourceAssessments),
					RuleSets: security.AutomationRuleSetArray{
						&security.AutomationRuleSetArgs{
							Rules: security.AutomationTriggeringRuleArray{
								&security.AutomationTriggeringRuleArgs{
									ExpectedValue: pulumi.String("customAssessment"),
									Operator:      pulumi.String(security.OperatorEquals),
									PropertyJPath: pulumi.String("$.Entity.AssessmentType"),
									PropertyType:  pulumi.String(security.PropertyTypeString),
								},
							},
						},
					},
				},
			},
			Tags: pulumi.StringMap{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import com.pulumi.azurenative.security.inputs.AutomationScopeArgs;
import com.pulumi.azurenative.security.inputs.AutomationSourceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()
            .actions(AutomationActionLogicAppArgs.builder()
                .actionType("LogicApp")
                .logicAppResourceId("/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1")
                .uri("https://exampleTriggerUri1.com")
                .build())
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment")
            .isEnabled(false)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(AutomationScopeArgs.builder()
                .description("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5")
                .scopePath("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
                .build())
            .sources(AutomationSourceArgs.builder()
                .eventSource("Assessments")
                .ruleSets(AutomationRuleSetArgs.builder()
                    .rules(AutomationTriggeringRuleArgs.builder()
                        .expectedValue("customAssessment")
                        .operator("Equals")
                        .propertyJPath("$.Entity.AssessmentType")
                        .propertyType("String")
                        .build())
                    .build())
                .build())
            .tags(Map.ofEntries(
            ))
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
    isEnabled: false,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: azure_native.security.EventSource.Assessments,
        ruleSets: [{
            rules: [{
                expectedValue: "customAssessment",
                operator: azure_native.security.Operator.Equals,
                propertyJPath: "$.Entity.AssessmentType",
                propertyType: azure_native.security.PropertyType.String,
            }],
        }],
    }],
    tags: {},
});
Copy
import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[{
        "action_type": "LogicApp",
        "logic_app_resource_id": "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        "uri": "https://exampleTriggerUri1.com",
    }],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
    is_enabled=False,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[{
        "description": "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        "scope_path": "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources=[{
        "event_source": azure_native.security.EventSource.ASSESSMENTS,
        "rule_sets": [{
            "rules": [{
                "expected_value": "customAssessment",
                "operator": azure_native.security.Operator.EQUALS,
                "property_j_path": "$.Entity.AssessmentType",
                "property_type": azure_native.security.PropertyType.STRING,
            }],
        }],
    }],
    tags={})
Copy
resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment
      isEnabled: false
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
          ruleSets:
            - rules:
                - expectedValue: customAssessment
                  operator: Equals
                  propertyJPath: $.Entity.AssessmentType
                  propertyType: String
      tags: {}
Copy

Create Automation Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Automation(name: string, args: AutomationArgs, opts?: CustomResourceOptions);
@overload
def Automation(resource_name: str,
               args: AutomationArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def Automation(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               resource_group_name: Optional[str] = None,
               actions: Optional[Sequence[Union[AutomationActionEventHubArgs, AutomationActionLogicAppArgs, AutomationActionWorkspaceArgs]]] = None,
               automation_name: Optional[str] = None,
               description: Optional[str] = None,
               is_enabled: Optional[bool] = None,
               kind: Optional[str] = None,
               location: Optional[str] = None,
               scopes: Optional[Sequence[AutomationScopeArgs]] = None,
               sources: Optional[Sequence[AutomationSourceArgs]] = None,
               tags: Optional[Mapping[str, str]] = None)
func NewAutomation(ctx *Context, name string, args AutomationArgs, opts ...ResourceOption) (*Automation, error)
public Automation(string name, AutomationArgs args, CustomResourceOptions? opts = null)
public Automation(String name, AutomationArgs args)
public Automation(String name, AutomationArgs args, CustomResourceOptions options)

type: azure-native:security:Automation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AutomationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AutomationArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AutomationArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AutomationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AutomationArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var automationResource = new AzureNative.Security.Automation("automationResource", new()
{
    ResourceGroupName = "string",
    Actions = new[]
    {
        new AzureNative.Security.Inputs.AutomationActionEventHubArgs
        {
            ActionType = "EventHub",
            ConnectionString = "string",
            EventHubResourceId = "string",
            IsTrustedServiceEnabled = false,
        },
    },
    AutomationName = "string",
    Description = "string",
    IsEnabled = false,
    Kind = "string",
    Location = "string",
    Scopes = new[]
    {
        new AzureNative.Security.Inputs.AutomationScopeArgs
        {
            Description = "string",
            ScopePath = "string",
        },
    },
    Sources = new[]
    {
        new AzureNative.Security.Inputs.AutomationSourceArgs
        {
            EventSource = "string",
            RuleSets = new[]
            {
                new AzureNative.Security.Inputs.AutomationRuleSetArgs
                {
                    Rules = new[]
                    {
                        new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                        {
                            ExpectedValue = "string",
                            Operator = "string",
                            PropertyJPath = "string",
                            PropertyType = "string",
                        },
                    },
                },
            },
        },
    },
    Tags = 
    {
        { "string", "string" },
    },
});
Copy
example, err := security.NewAutomation(ctx, "automationResource", &security.AutomationArgs{
	ResourceGroupName: pulumi.String("string"),
	Actions: pulumi.Array{
		security.AutomationActionEventHub{
			ActionType:              "EventHub",
			ConnectionString:        "string",
			EventHubResourceId:      "string",
			IsTrustedServiceEnabled: false,
		},
	},
	AutomationName: pulumi.String("string"),
	Description:    pulumi.String("string"),
	IsEnabled:      pulumi.Bool(false),
	Kind:           pulumi.String("string"),
	Location:       pulumi.String("string"),
	Scopes: security.AutomationScopeArray{
		&security.AutomationScopeArgs{
			Description: pulumi.String("string"),
			ScopePath:   pulumi.String("string"),
		},
	},
	Sources: security.AutomationSourceArray{
		&security.AutomationSourceArgs{
			EventSource: pulumi.String("string"),
			RuleSets: security.AutomationRuleSetArray{
				&security.AutomationRuleSetArgs{
					Rules: security.AutomationTriggeringRuleArray{
						&security.AutomationTriggeringRuleArgs{
							ExpectedValue: pulumi.String("string"),
							Operator:      pulumi.String("string"),
							PropertyJPath: pulumi.String("string"),
							PropertyType:  pulumi.String("string"),
						},
					},
				},
			},
		},
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})
Copy
var automationResource = new Automation("automationResource", AutomationArgs.builder()
    .resourceGroupName("string")
    .actions(AutomationActionEventHubArgs.builder()
        .actionType("EventHub")
        .connectionString("string")
        .eventHubResourceId("string")
        .isTrustedServiceEnabled(false)
        .build())
    .automationName("string")
    .description("string")
    .isEnabled(false)
    .kind("string")
    .location("string")
    .scopes(AutomationScopeArgs.builder()
        .description("string")
        .scopePath("string")
        .build())
    .sources(AutomationSourceArgs.builder()
        .eventSource("string")
        .ruleSets(AutomationRuleSetArgs.builder()
            .rules(AutomationTriggeringRuleArgs.builder()
                .expectedValue("string")
                .operator("string")
                .propertyJPath("string")
                .propertyType("string")
                .build())
            .build())
        .build())
    .tags(Map.of("string", "string"))
    .build());
Copy
automation_resource = azure_native.security.Automation("automationResource",
    resource_group_name="string",
    actions=[{
        "action_type": "EventHub",
        "connection_string": "string",
        "event_hub_resource_id": "string",
        "is_trusted_service_enabled": False,
    }],
    automation_name="string",
    description="string",
    is_enabled=False,
    kind="string",
    location="string",
    scopes=[{
        "description": "string",
        "scope_path": "string",
    }],
    sources=[{
        "event_source": "string",
        "rule_sets": [{
            "rules": [{
                "expected_value": "string",
                "operator": "string",
                "property_j_path": "string",
                "property_type": "string",
            }],
        }],
    }],
    tags={
        "string": "string",
    })
Copy
const automationResource = new azure_native.security.Automation("automationResource", {
    resourceGroupName: "string",
    actions: [{
        actionType: "EventHub",
        connectionString: "string",
        eventHubResourceId: "string",
        isTrustedServiceEnabled: false,
    }],
    automationName: "string",
    description: "string",
    isEnabled: false,
    kind: "string",
    location: "string",
    scopes: [{
        description: "string",
        scopePath: "string",
    }],
    sources: [{
        eventSource: "string",
        ruleSets: [{
            rules: [{
                expectedValue: "string",
                operator: "string",
                propertyJPath: "string",
                propertyType: "string",
            }],
        }],
    }],
    tags: {
        string: "string",
    },
});
Copy
type: azure-native:security:Automation
properties:
    actions:
        - actionType: EventHub
          connectionString: string
          eventHubResourceId: string
          isTrustedServiceEnabled: false
    automationName: string
    description: string
    isEnabled: false
    kind: string
    location: string
    resourceGroupName: string
    scopes:
        - description: string
          scopePath: string
    sources:
        - eventSource: string
          ruleSets:
            - rules:
                - expectedValue: string
                  operator: string
                  propertyJPath: string
                  propertyType: string
    tags:
        string: string
Copy

Automation Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Automation resource accepts the following input properties:

ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group within the user's subscription. The name is case insensitive.
Actions List<object>
A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
AutomationName Changes to this property will trigger replacement. string
The security automation name.
Description string
The security automation description.
IsEnabled bool
Indicates whether the security automation is enabled.
Kind string
Kind of the resource
Location string
Location where the resource is stored
Scopes List<Pulumi.AzureNative.Security.Inputs.AutomationScope>
A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
Sources List<Pulumi.AzureNative.Security.Inputs.AutomationSource>
A collection of the source event types which evaluate the security automation set of rules.
Tags Dictionary<string, string>
A list of key value pairs that describe the resource.
ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group within the user's subscription. The name is case insensitive.
Actions []interface{}
A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
AutomationName Changes to this property will trigger replacement. string
The security automation name.
Description string
The security automation description.
IsEnabled bool
Indicates whether the security automation is enabled.
Kind string
Kind of the resource
Location string
Location where the resource is stored
Scopes []AutomationScopeArgs
A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
Sources []AutomationSourceArgs
A collection of the source event types which evaluate the security automation set of rules.
Tags map[string]string
A list of key value pairs that describe the resource.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group within the user's subscription. The name is case insensitive.
actions List<Object>
A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
automationName Changes to this property will trigger replacement. String
The security automation name.
description String
The security automation description.
isEnabled Boolean
Indicates whether the security automation is enabled.
kind String
Kind of the resource
location String
Location where the resource is stored
scopes List<AutomationScope>
A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
sources List<AutomationSource>
A collection of the source event types which evaluate the security automation set of rules.
tags Map<String,String>
A list of key value pairs that describe the resource.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group within the user's subscription. The name is case insensitive.
actions (AutomationActionEventHub | AutomationActionLogicAppArgs | AutomationActionWorkspaceArgs)[]
A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
automationName Changes to this property will trigger replacement. string
The security automation name.
description string
The security automation description.
isEnabled boolean
Indicates whether the security automation is enabled.
kind string
Kind of the resource
location string
Location where the resource is stored
scopes AutomationScope[]
A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
sources AutomationSource[]
A collection of the source event types which evaluate the security automation set of rules.
tags {[key: string]: string}
A list of key value pairs that describe the resource.
resource_group_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the resource group within the user's subscription. The name is case insensitive.
actions Sequence[Union[AutomationActionEventHubArgs, AutomationActionLogicAppArgs, AutomationActionWorkspaceArgs]]
A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
automation_name Changes to this property will trigger replacement. str
The security automation name.
description str
The security automation description.
is_enabled bool
Indicates whether the security automation is enabled.
kind str
Kind of the resource
location str
Location where the resource is stored
scopes Sequence[AutomationScopeArgs]
A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
sources Sequence[AutomationSourceArgs]
A collection of the source event types which evaluate the security automation set of rules.
tags Mapping[str, str]
A list of key value pairs that describe the resource.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group within the user's subscription. The name is case insensitive.
actions List<Property Map | Property Map | Property Map>
A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
automationName Changes to this property will trigger replacement. String
The security automation name.
description String
The security automation description.
isEnabled Boolean
Indicates whether the security automation is enabled.
kind String
Kind of the resource
location String
Location where the resource is stored
scopes List<Property Map>
A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
sources List<Property Map>
A collection of the source event types which evaluate the security automation set of rules.
tags Map<String>
A list of key value pairs that describe the resource.

Outputs

All input properties are implicitly available as output properties. Additionally, the Automation resource produces the following output properties:

AzureApiVersion string
The Azure API version of the resource.
Id string
The provider-assigned unique ID for this managed resource.
Name string
Resource name
Type string
Resource type
Etag string
Entity tag is used for comparing two or more entities from the same requested resource.
AzureApiVersion string
The Azure API version of the resource.
Id string
The provider-assigned unique ID for this managed resource.
Name string
Resource name
Type string
Resource type
Etag string
Entity tag is used for comparing two or more entities from the same requested resource.
azureApiVersion String
The Azure API version of the resource.
id String
The provider-assigned unique ID for this managed resource.
name String
Resource name
type String
Resource type
etag String
Entity tag is used for comparing two or more entities from the same requested resource.
azureApiVersion string
The Azure API version of the resource.
id string
The provider-assigned unique ID for this managed resource.
name string
Resource name
type string
Resource type
etag string
Entity tag is used for comparing two or more entities from the same requested resource.
azure_api_version str
The Azure API version of the resource.
id str
The provider-assigned unique ID for this managed resource.
name str
Resource name
type str
Resource type
etag str
Entity tag is used for comparing two or more entities from the same requested resource.
azureApiVersion String
The Azure API version of the resource.
id String
The provider-assigned unique ID for this managed resource.
name String
Resource name
type String
Resource type
etag String
Entity tag is used for comparing two or more entities from the same requested resource.

Supporting Types

AutomationActionEventHub
, AutomationActionEventHubArgs

ConnectionString string
The target Event Hub connection string (it will not be included in any response).
EventHubResourceId string
The target Event Hub Azure Resource ID.
IsTrustedServiceEnabled bool
Indicates whether the trusted service is enabled or not.
ConnectionString string
The target Event Hub connection string (it will not be included in any response).
EventHubResourceId string
The target Event Hub Azure Resource ID.
IsTrustedServiceEnabled bool
Indicates whether the trusted service is enabled or not.
connectionString String
The target Event Hub connection string (it will not be included in any response).
eventHubResourceId String
The target Event Hub Azure Resource ID.
isTrustedServiceEnabled Boolean
Indicates whether the trusted service is enabled or not.
connectionString string
The target Event Hub connection string (it will not be included in any response).
eventHubResourceId string
The target Event Hub Azure Resource ID.
isTrustedServiceEnabled boolean
Indicates whether the trusted service is enabled or not.
connection_string str
The target Event Hub connection string (it will not be included in any response).
event_hub_resource_id str
The target Event Hub Azure Resource ID.
is_trusted_service_enabled bool
Indicates whether the trusted service is enabled or not.
connectionString String
The target Event Hub connection string (it will not be included in any response).
eventHubResourceId String
The target Event Hub Azure Resource ID.
isTrustedServiceEnabled Boolean
Indicates whether the trusted service is enabled or not.

AutomationActionEventHubResponse
, AutomationActionEventHubResponseArgs

SasPolicyName This property is required. string
The target Event Hub SAS policy name.
ConnectionString string
The target Event Hub connection string (it will not be included in any response).
EventHubResourceId string
The target Event Hub Azure Resource ID.
IsTrustedServiceEnabled bool
Indicates whether the trusted service is enabled or not.
SasPolicyName This property is required. string
The target Event Hub SAS policy name.
ConnectionString string
The target Event Hub connection string (it will not be included in any response).
EventHubResourceId string
The target Event Hub Azure Resource ID.
IsTrustedServiceEnabled bool
Indicates whether the trusted service is enabled or not.
sasPolicyName This property is required. String
The target Event Hub SAS policy name.
connectionString String
The target Event Hub connection string (it will not be included in any response).
eventHubResourceId String
The target Event Hub Azure Resource ID.
isTrustedServiceEnabled Boolean
Indicates whether the trusted service is enabled or not.
sasPolicyName This property is required. string
The target Event Hub SAS policy name.
connectionString string
The target Event Hub connection string (it will not be included in any response).
eventHubResourceId string
The target Event Hub Azure Resource ID.
isTrustedServiceEnabled boolean
Indicates whether the trusted service is enabled or not.
sas_policy_name This property is required. str
The target Event Hub SAS policy name.
connection_string str
The target Event Hub connection string (it will not be included in any response).
event_hub_resource_id str
The target Event Hub Azure Resource ID.
is_trusted_service_enabled bool
Indicates whether the trusted service is enabled or not.
sasPolicyName This property is required. String
The target Event Hub SAS policy name.
connectionString String
The target Event Hub connection string (it will not be included in any response).
eventHubResourceId String
The target Event Hub Azure Resource ID.
isTrustedServiceEnabled Boolean
Indicates whether the trusted service is enabled or not.

AutomationActionLogicApp
, AutomationActionLogicAppArgs

LogicAppResourceId string
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
Uri string
The Logic App trigger URI endpoint (it will not be included in any response).
LogicAppResourceId string
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
Uri string
The Logic App trigger URI endpoint (it will not be included in any response).
logicAppResourceId String
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
uri String
The Logic App trigger URI endpoint (it will not be included in any response).
logicAppResourceId string
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
uri string
The Logic App trigger URI endpoint (it will not be included in any response).
logic_app_resource_id str
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
uri str
The Logic App trigger URI endpoint (it will not be included in any response).
logicAppResourceId String
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
uri String
The Logic App trigger URI endpoint (it will not be included in any response).

AutomationActionLogicAppResponse
, AutomationActionLogicAppResponseArgs

LogicAppResourceId string
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
Uri string
The Logic App trigger URI endpoint (it will not be included in any response).
LogicAppResourceId string
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
Uri string
The Logic App trigger URI endpoint (it will not be included in any response).
logicAppResourceId String
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
uri String
The Logic App trigger URI endpoint (it will not be included in any response).
logicAppResourceId string
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
uri string
The Logic App trigger URI endpoint (it will not be included in any response).
logic_app_resource_id str
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
uri str
The Logic App trigger URI endpoint (it will not be included in any response).
logicAppResourceId String
The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
uri String
The Logic App trigger URI endpoint (it will not be included in any response).

AutomationActionWorkspace
, AutomationActionWorkspaceArgs

WorkspaceResourceId string
The fully qualified Log Analytics Workspace Azure Resource ID.
WorkspaceResourceId string
The fully qualified Log Analytics Workspace Azure Resource ID.
workspaceResourceId String
The fully qualified Log Analytics Workspace Azure Resource ID.
workspaceResourceId string
The fully qualified Log Analytics Workspace Azure Resource ID.
workspace_resource_id str
The fully qualified Log Analytics Workspace Azure Resource ID.
workspaceResourceId String
The fully qualified Log Analytics Workspace Azure Resource ID.

AutomationActionWorkspaceResponse
, AutomationActionWorkspaceResponseArgs

WorkspaceResourceId string
The fully qualified Log Analytics Workspace Azure Resource ID.
WorkspaceResourceId string
The fully qualified Log Analytics Workspace Azure Resource ID.
workspaceResourceId String
The fully qualified Log Analytics Workspace Azure Resource ID.
workspaceResourceId string
The fully qualified Log Analytics Workspace Azure Resource ID.
workspace_resource_id str
The fully qualified Log Analytics Workspace Azure Resource ID.
workspaceResourceId String
The fully qualified Log Analytics Workspace Azure Resource ID.

AutomationRuleSet
, AutomationRuleSetArgs

AutomationRuleSetResponse
, AutomationRuleSetResponseArgs

AutomationScope
, AutomationScopeArgs

Description string
The resources scope description.
ScopePath string
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
Description string
The resources scope description.
ScopePath string
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
description String
The resources scope description.
scopePath String
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
description string
The resources scope description.
scopePath string
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
description str
The resources scope description.
scope_path str
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
description String
The resources scope description.
scopePath String
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

AutomationScopeResponse
, AutomationScopeResponseArgs

Description string
The resources scope description.
ScopePath string
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
Description string
The resources scope description.
ScopePath string
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
description String
The resources scope description.
scopePath String
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
description string
The resources scope description.
scopePath string
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
description str
The resources scope description.
scope_path str
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
description String
The resources scope description.
scopePath String
The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

AutomationSource
, AutomationSourceArgs

EventSource string | Pulumi.AzureNative.Security.EventSource
A valid event source type.
RuleSets List<Pulumi.AzureNative.Security.Inputs.AutomationRuleSet>
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
EventSource string | EventSource
A valid event source type.
RuleSets []AutomationRuleSet
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
eventSource String | EventSource
A valid event source type.
ruleSets List<AutomationRuleSet>
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
eventSource string | EventSource
A valid event source type.
ruleSets AutomationRuleSet[]
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
event_source str | EventSource
A valid event source type.
rule_sets Sequence[AutomationRuleSet]
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

AutomationSourceResponse
, AutomationSourceResponseArgs

EventSource string
A valid event source type.
RuleSets List<Pulumi.AzureNative.Security.Inputs.AutomationRuleSetResponse>
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
EventSource string
A valid event source type.
RuleSets []AutomationRuleSetResponse
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
eventSource String
A valid event source type.
ruleSets List<AutomationRuleSetResponse>
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
eventSource string
A valid event source type.
ruleSets AutomationRuleSetResponse[]
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
event_source str
A valid event source type.
rule_sets Sequence[AutomationRuleSetResponse]
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
eventSource String
A valid event source type.
ruleSets List<Property Map>
A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

AutomationTriggeringRule
, AutomationTriggeringRuleArgs

ExpectedValue string
The expected value.
Operator string | Pulumi.AzureNative.Security.Operator
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
PropertyJPath string
The JPath of the entity model property that should be checked.
PropertyType string | Pulumi.AzureNative.Security.PropertyType
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
ExpectedValue string
The expected value.
Operator string | Operator
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
PropertyJPath string
The JPath of the entity model property that should be checked.
PropertyType string | PropertyType
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
expectedValue String
The expected value.
operator String | Operator
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
propertyJPath String
The JPath of the entity model property that should be checked.
propertyType String | PropertyType
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
expectedValue string
The expected value.
operator string | Operator
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
propertyJPath string
The JPath of the entity model property that should be checked.
propertyType string | PropertyType
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
expected_value str
The expected value.
operator str | Operator
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
property_j_path str
The JPath of the entity model property that should be checked.
property_type str | PropertyType
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
expectedValue String
The expected value.
operator String | "Equals" | "GreaterThan" | "GreaterThanOrEqualTo" | "LesserThan" | "LesserThanOrEqualTo" | "NotEquals" | "Contains" | "StartsWith" | "EndsWith"
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
propertyJPath String
The JPath of the entity model property that should be checked.
propertyType String | "String" | "Integer" | "Number" | "Boolean"
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

AutomationTriggeringRuleResponse
, AutomationTriggeringRuleResponseArgs

ExpectedValue string
The expected value.
Operator string
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
PropertyJPath string
The JPath of the entity model property that should be checked.
PropertyType string
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
ExpectedValue string
The expected value.
Operator string
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
PropertyJPath string
The JPath of the entity model property that should be checked.
PropertyType string
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
expectedValue String
The expected value.
operator String
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
propertyJPath String
The JPath of the entity model property that should be checked.
propertyType String
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
expectedValue string
The expected value.
operator string
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
propertyJPath string
The JPath of the entity model property that should be checked.
propertyType string
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
expected_value str
The expected value.
operator str
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
property_j_path str
The JPath of the entity model property that should be checked.
property_type str
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
expectedValue String
The expected value.
operator String
A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
propertyJPath String
The JPath of the entity model property that should be checked.
propertyType String
The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

EventSource
, EventSourceArgs

Assessments
Assessments
AssessmentsSnapshot
AssessmentsSnapshot
SubAssessments
SubAssessments
SubAssessmentsSnapshot
SubAssessmentsSnapshot
Alerts
Alerts
SecureScores
SecureScores
SecureScoresSnapshot
SecureScoresSnapshot
SecureScoreControls
SecureScoreControls
SecureScoreControlsSnapshot
SecureScoreControlsSnapshot
RegulatoryComplianceAssessment
RegulatoryComplianceAssessment
RegulatoryComplianceAssessmentSnapshot
RegulatoryComplianceAssessmentSnapshot
AttackPaths
AttackPaths
AttackPathsSnapshot
AttackPathsSnapshot
EventSourceAssessments
Assessments
EventSourceAssessmentsSnapshot
AssessmentsSnapshot
EventSourceSubAssessments
SubAssessments
EventSourceSubAssessmentsSnapshot
SubAssessmentsSnapshot
EventSourceAlerts
Alerts
EventSourceSecureScores
SecureScores
EventSourceSecureScoresSnapshot
SecureScoresSnapshot
EventSourceSecureScoreControls
SecureScoreControls
EventSourceSecureScoreControlsSnapshot
SecureScoreControlsSnapshot
EventSourceRegulatoryComplianceAssessment
RegulatoryComplianceAssessment
EventSourceRegulatoryComplianceAssessmentSnapshot
RegulatoryComplianceAssessmentSnapshot
EventSourceAttackPaths
AttackPaths
EventSourceAttackPathsSnapshot
AttackPathsSnapshot
Assessments
Assessments
AssessmentsSnapshot
AssessmentsSnapshot
SubAssessments
SubAssessments
SubAssessmentsSnapshot
SubAssessmentsSnapshot
Alerts
Alerts
SecureScores
SecureScores
SecureScoresSnapshot
SecureScoresSnapshot
SecureScoreControls
SecureScoreControls
SecureScoreControlsSnapshot
SecureScoreControlsSnapshot
RegulatoryComplianceAssessment
RegulatoryComplianceAssessment
RegulatoryComplianceAssessmentSnapshot
RegulatoryComplianceAssessmentSnapshot
AttackPaths
AttackPaths
AttackPathsSnapshot
AttackPathsSnapshot
Assessments
Assessments
AssessmentsSnapshot
AssessmentsSnapshot
SubAssessments
SubAssessments
SubAssessmentsSnapshot
SubAssessmentsSnapshot
Alerts
Alerts
SecureScores
SecureScores
SecureScoresSnapshot
SecureScoresSnapshot
SecureScoreControls
SecureScoreControls
SecureScoreControlsSnapshot
SecureScoreControlsSnapshot
RegulatoryComplianceAssessment
RegulatoryComplianceAssessment
RegulatoryComplianceAssessmentSnapshot
RegulatoryComplianceAssessmentSnapshot
AttackPaths
AttackPaths
AttackPathsSnapshot
AttackPathsSnapshot
ASSESSMENTS
Assessments
ASSESSMENTS_SNAPSHOT
AssessmentsSnapshot
SUB_ASSESSMENTS
SubAssessments
SUB_ASSESSMENTS_SNAPSHOT
SubAssessmentsSnapshot
ALERTS
Alerts
SECURE_SCORES
SecureScores
SECURE_SCORES_SNAPSHOT
SecureScoresSnapshot
SECURE_SCORE_CONTROLS
SecureScoreControls
SECURE_SCORE_CONTROLS_SNAPSHOT
SecureScoreControlsSnapshot
REGULATORY_COMPLIANCE_ASSESSMENT
RegulatoryComplianceAssessment
REGULATORY_COMPLIANCE_ASSESSMENT_SNAPSHOT
RegulatoryComplianceAssessmentSnapshot
ATTACK_PATHS
AttackPaths
ATTACK_PATHS_SNAPSHOT
AttackPathsSnapshot
"Assessments"
Assessments
"AssessmentsSnapshot"
AssessmentsSnapshot
"SubAssessments"
SubAssessments
"SubAssessmentsSnapshot"
SubAssessmentsSnapshot
"Alerts"
Alerts
"SecureScores"
SecureScores
"SecureScoresSnapshot"
SecureScoresSnapshot
"SecureScoreControls"
SecureScoreControls
"SecureScoreControlsSnapshot"
SecureScoreControlsSnapshot
"RegulatoryComplianceAssessment"
RegulatoryComplianceAssessment
"RegulatoryComplianceAssessmentSnapshot"
RegulatoryComplianceAssessmentSnapshot
"AttackPaths"
AttackPaths
"AttackPathsSnapshot"
AttackPathsSnapshot

Operator
, OperatorArgs

EqualsValue
EqualsApplies for decimal and non-decimal operands
GreaterThan
GreaterThanApplies only for decimal operands
GreaterThanOrEqualTo
GreaterThanOrEqualToApplies only for decimal operands
LesserThan
LesserThanApplies only for decimal operands
LesserThanOrEqualTo
LesserThanOrEqualToApplies only for decimal operands
NotEquals
NotEqualsApplies for decimal and non-decimal operands
Contains
ContainsApplies only for non-decimal operands
StartsWith
StartsWithApplies only for non-decimal operands
EndsWith
EndsWithApplies only for non-decimal operands
OperatorEquals
EqualsApplies for decimal and non-decimal operands
OperatorGreaterThan
GreaterThanApplies only for decimal operands
OperatorGreaterThanOrEqualTo
GreaterThanOrEqualToApplies only for decimal operands
OperatorLesserThan
LesserThanApplies only for decimal operands
OperatorLesserThanOrEqualTo
LesserThanOrEqualToApplies only for decimal operands
OperatorNotEquals
NotEqualsApplies for decimal and non-decimal operands
OperatorContains
ContainsApplies only for non-decimal operands
OperatorStartsWith
StartsWithApplies only for non-decimal operands
OperatorEndsWith
EndsWithApplies only for non-decimal operands
Equals
EqualsApplies for decimal and non-decimal operands
GreaterThan
GreaterThanApplies only for decimal operands
GreaterThanOrEqualTo
GreaterThanOrEqualToApplies only for decimal operands
LesserThan
LesserThanApplies only for decimal operands
LesserThanOrEqualTo
LesserThanOrEqualToApplies only for decimal operands
NotEquals
NotEqualsApplies for decimal and non-decimal operands
Contains
ContainsApplies only for non-decimal operands
StartsWith
StartsWithApplies only for non-decimal operands
EndsWith
EndsWithApplies only for non-decimal operands
Equals
EqualsApplies for decimal and non-decimal operands
GreaterThan
GreaterThanApplies only for decimal operands
GreaterThanOrEqualTo
GreaterThanOrEqualToApplies only for decimal operands
LesserThan
LesserThanApplies only for decimal operands
LesserThanOrEqualTo
LesserThanOrEqualToApplies only for decimal operands
NotEquals
NotEqualsApplies for decimal and non-decimal operands
Contains
ContainsApplies only for non-decimal operands
StartsWith
StartsWithApplies only for non-decimal operands
EndsWith
EndsWithApplies only for non-decimal operands
EQUALS
EqualsApplies for decimal and non-decimal operands
GREATER_THAN
GreaterThanApplies only for decimal operands
GREATER_THAN_OR_EQUAL_TO
GreaterThanOrEqualToApplies only for decimal operands
LESSER_THAN
LesserThanApplies only for decimal operands
LESSER_THAN_OR_EQUAL_TO
LesserThanOrEqualToApplies only for decimal operands
NOT_EQUALS
NotEqualsApplies for decimal and non-decimal operands
CONTAINS
ContainsApplies only for non-decimal operands
STARTS_WITH
StartsWithApplies only for non-decimal operands
ENDS_WITH
EndsWithApplies only for non-decimal operands
"Equals"
EqualsApplies for decimal and non-decimal operands
"GreaterThan"
GreaterThanApplies only for decimal operands
"GreaterThanOrEqualTo"
GreaterThanOrEqualToApplies only for decimal operands
"LesserThan"
LesserThanApplies only for decimal operands
"LesserThanOrEqualTo"
LesserThanOrEqualToApplies only for decimal operands
"NotEquals"
NotEqualsApplies for decimal and non-decimal operands
"Contains"
ContainsApplies only for non-decimal operands
"StartsWith"
StartsWithApplies only for non-decimal operands
"EndsWith"
EndsWithApplies only for non-decimal operands

PropertyType
, PropertyTypeArgs

String
String
Integer
Integer
Number
Number
Boolean
Boolean
PropertyTypeString
String
PropertyTypeInteger
Integer
PropertyTypeNumber
Number
PropertyTypeBoolean
Boolean
String
String
Integer
Integer
Number
Number
Boolean
Boolean
String
String
Integer
Integer
Number
Number
Boolean
Boolean
STRING
String
INTEGER
Integer
NUMBER
Number
BOOLEAN
Boolean
"String"
String
"Integer"
Integer
"Number"
Number
"Boolean"
Boolean

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:security:Automation exampleAutomation /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/automations/{automationName}
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Azure Native pulumi/pulumi-azure-native
License
Apache-2.0
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-azure-native