Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. security
  5. Automation
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.security.Automation

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

    The security automation resource. Azure REST API version: 2019-01-01-preview. Prior API version in Azure Native 1.x: 2019-01-01-preview.

    Other available API versions: 2023-12-01-preview.

    Example Usage

    Create or update a security automation for all assessments (including all severities)

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
        IsEnabled = true,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = AzureNative.Security.EventSource.Assessments,
            },
        },
        Tags = null,
    });

});

    package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.Array{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment"),
			IsEnabled:         pulumi.Bool(true),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: security.AutomationScopeArray{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: security.AutomationSourceArray{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String(security.EventSourceAssessments),
				},
			},
			Tags: pulumi.StringMap{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import com.pulumi.azurenative.security.inputs.AutomationScopeArgs;
import com.pulumi.azurenative.security.inputs.AutomationSourceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()
            .actions(AutomationActionLogicAppArgs.builder()
                .actionType("LogicApp")
                .logicAppResourceId("/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1")
                .uri("https://exampleTriggerUri1.com")
                .build())
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment")
            .isEnabled(true)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(AutomationScopeArgs.builder()
                .description("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5")
                .scopePath("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
                .build())
            .sources(AutomationSourceArgs.builder()
                .eventSource("Assessments")
                .build())
            .tags()
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
    isEnabled: true,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: azure_native.security.EventSource.Assessments,
    }],
    tags: {},
});

    import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[{
        "action_type": "LogicApp",
        "logic_app_resource_id": "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        "uri": "https://exampleTriggerUri1.com",
    }],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
    is_enabled=True,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[{
        "description": "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        "scope_path": "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources=[{
        "event_source": azure_native.security.EventSource.ASSESSMENTS,
    }],
    tags={})

    resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment
      isEnabled: true
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
      tags: {}

    Create or update a security automation for all high severity assessments

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
        IsEnabled = true,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = AzureNative.Security.EventSource.Assessments,
                RuleSets = new[]
                {
                    new AzureNative.Security.Inputs.AutomationRuleSetArgs
                    {
                        Rules = new[]
                        {
                            new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                            {
                                ExpectedValue = "High",
                                Operator = AzureNative.Security.Operator.EqualsValue,
                                PropertyJPath = "properties.metadata.severity",
                                PropertyType = AzureNative.Security.PropertyType.String,
                            },
                        },
                    },
                },
            },
        },
        Tags = null,
    });

});

    package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.Array{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment"),
			IsEnabled:         pulumi.Bool(true),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: security.AutomationScopeArray{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: security.AutomationSourceArray{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String(security.EventSourceAssessments),
					RuleSets: security.AutomationRuleSetArray{
						&security.AutomationRuleSetArgs{
							Rules: security.AutomationTriggeringRuleArray{
								&security.AutomationTriggeringRuleArgs{
									ExpectedValue: pulumi.String("High"),
									Operator:      pulumi.String(security.OperatorEquals),
									PropertyJPath: pulumi.String("properties.metadata.severity"),
									PropertyType:  pulumi.String(security.PropertyTypeString),
								},
							},
						},
					},
				},
			},
			Tags: pulumi.StringMap{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import com.pulumi.azurenative.security.inputs.AutomationScopeArgs;
import com.pulumi.azurenative.security.inputs.AutomationSourceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()
            .actions(AutomationActionLogicAppArgs.builder()
                .actionType("LogicApp")
                .logicAppResourceId("/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1")
                .uri("https://exampleTriggerUri1.com")
                .build())
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment")
            .isEnabled(true)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(AutomationScopeArgs.builder()
                .description("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5")
                .scopePath("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
                .build())
            .sources(AutomationSourceArgs.builder()
                .eventSource("Assessments")
                .ruleSets(AutomationRuleSetArgs.builder()
                    .rules(AutomationTriggeringRuleArgs.builder()
                        .expectedValue("High")
                        .operator("Equals")
                        .propertyJPath("properties.metadata.severity")
                        .propertyType("String")
                        .build())
                    .build())
                .build())
            .tags()
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
    isEnabled: true,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: azure_native.security.EventSource.Assessments,
        ruleSets: [{
            rules: [{
                expectedValue: "High",
                operator: azure_native.security.Operator.Equals,
                propertyJPath: "properties.metadata.severity",
                propertyType: azure_native.security.PropertyType.String,
            }],
        }],
    }],
    tags: {},
});

    import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[{
        "action_type": "LogicApp",
        "logic_app_resource_id": "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        "uri": "https://exampleTriggerUri1.com",
    }],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
    is_enabled=True,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[{
        "description": "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        "scope_path": "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources=[{
        "event_source": azure_native.security.EventSource.ASSESSMENTS,
        "rule_sets": [{
            "rules": [{
                "expected_value": "High",
                "operator": azure_native.security.Operator.EQUALS,
                "property_j_path": "properties.metadata.severity",
                "property_type": azure_native.security.PropertyType.STRING,
            }],
        }],
    }],
    tags={})

    resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment
      isEnabled: true
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
          ruleSets:
            - rules:
                - expectedValue: High
                  operator: Equals
                  propertyJPath: properties.metadata.severity
                  propertyType: String
      tags: {}

    Disable or enable a security automation

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
        IsEnabled = false,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = AzureNative.Security.EventSource.Assessments,
                RuleSets = new[]
                {
                    new AzureNative.Security.Inputs.AutomationRuleSetArgs
                    {
                        Rules = new[]
                        {
                            new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                            {
                                ExpectedValue = "customAssessment",
                                Operator = AzureNative.Security.Operator.EqualsValue,
                                PropertyJPath = "$.Entity.AssessmentType",
                                PropertyType = AzureNative.Security.PropertyType.String,
                            },
                        },
                    },
                },
            },
        },
        Tags = null,
    });

});

    package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.Array{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment"),
			IsEnabled:         pulumi.Bool(false),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: security.AutomationScopeArray{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: security.AutomationSourceArray{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String(security.EventSourceAssessments),
					RuleSets: security.AutomationRuleSetArray{
						&security.AutomationRuleSetArgs{
							Rules: security.AutomationTriggeringRuleArray{
								&security.AutomationTriggeringRuleArgs{
									ExpectedValue: pulumi.String("customAssessment"),
									Operator:      pulumi.String(security.OperatorEquals),
									PropertyJPath: pulumi.String("$.Entity.AssessmentType"),
									PropertyType:  pulumi.String(security.PropertyTypeString),
								},
							},
						},
					},
				},
			},
			Tags: pulumi.StringMap{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import com.pulumi.azurenative.security.inputs.AutomationScopeArgs;
import com.pulumi.azurenative.security.inputs.AutomationSourceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()
            .actions(AutomationActionLogicAppArgs.builder()
                .actionType("LogicApp")
                .logicAppResourceId("/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1")
                .uri("https://exampleTriggerUri1.com")
                .build())
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment")
            .isEnabled(false)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(AutomationScopeArgs.builder()
                .description("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5")
                .scopePath("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
                .build())
            .sources(AutomationSourceArgs.builder()
                .eventSource("Assessments")
                .ruleSets(AutomationRuleSetArgs.builder()
                    .rules(AutomationTriggeringRuleArgs.builder()
                        .expectedValue("customAssessment")
                        .operator("Equals")
                        .propertyJPath("$.Entity.AssessmentType")
                        .propertyType("String")
                        .build())
                    .build())
                .build())
            .tags()
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
    isEnabled: false,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: azure_native.security.EventSource.Assessments,
        ruleSets: [{
            rules: [{
                expectedValue: "customAssessment",
                operator: azure_native.security.Operator.Equals,
                propertyJPath: "$.Entity.AssessmentType",
                propertyType: azure_native.security.PropertyType.String,
            }],
        }],
    }],
    tags: {},
});

    import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[{
        "action_type": "LogicApp",
        "logic_app_resource_id": "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        "uri": "https://exampleTriggerUri1.com",
    }],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
    is_enabled=False,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[{
        "description": "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        "scope_path": "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources=[{
        "event_source": azure_native.security.EventSource.ASSESSMENTS,
        "rule_sets": [{
            "rules": [{
                "expected_value": "customAssessment",
                "operator": azure_native.security.Operator.EQUALS,
                "property_j_path": "$.Entity.AssessmentType",
                "property_type": azure_native.security.PropertyType.STRING,
            }],
        }],
    }],
    tags={})

    resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment
      isEnabled: false
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
          ruleSets:
            - rules:
                - expectedValue: customAssessment
                  operator: Equals
                  propertyJPath: $.Entity.AssessmentType
                  propertyType: String
      tags: {}

    Create Automation Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Automation(name: string, args: AutomationArgs, opts?: CustomResourceOptions);
    @overload
def Automation(resource_name: str,
               args: AutomationArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def Automation(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               resource_group_name: Optional[str] = None,
               actions: Optional[Sequence[Union[AutomationActionEventHubArgs, AutomationActionLogicAppArgs, AutomationActionWorkspaceArgs]]] = None,
               automation_name: Optional[str] = None,
               description: Optional[str] = None,
               is_enabled: Optional[bool] = None,
               kind: Optional[str] = None,
               location: Optional[str] = None,
               scopes: Optional[Sequence[AutomationScopeArgs]] = None,
               sources: Optional[Sequence[AutomationSourceArgs]] = None,
               tags: Optional[Mapping[str, str]] = None)
    func NewAutomation(ctx *Context, name string, args AutomationArgs, opts ...ResourceOption) (*Automation, error)
    public Automation(string name, AutomationArgs args, CustomResourceOptions? opts = null)
    public Automation(String name, AutomationArgs args)
public Automation(String name, AutomationArgs args, CustomResourceOptions options)

    type: azure-native:security:Automation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var automationResource = new AzureNative.Security.Automation("automationResource", new()
{
    ResourceGroupName = "string",
    Actions = new[]
    {
        new AzureNative.Security.Inputs.AutomationActionEventHubArgs
        {
            ActionType = "EventHub",
            ConnectionString = "string",
            EventHubResourceId = "string",
        },
    },
    AutomationName = "string",
    Description = "string",
    IsEnabled = false,
    Kind = "string",
    Location = "string",
    Scopes = new[]
    {
        new AzureNative.Security.Inputs.AutomationScopeArgs
        {
            Description = "string",
            ScopePath = "string",
        },
    },
    Sources = new[]
    {
        new AzureNative.Security.Inputs.AutomationSourceArgs
        {
            EventSource = "string",
            RuleSets = new[]
            {
                new AzureNative.Security.Inputs.AutomationRuleSetArgs
                {
                    Rules = new[]
                    {
                        new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                        {
                            ExpectedValue = "string",
                            Operator = "string",
                            PropertyJPath = "string",
                            PropertyType = "string",
                        },
                    },
                },
            },
        },
    },
    Tags = 
    {
        { "string", "string" },
    },
});

    example, err := security.NewAutomation(ctx, "automationResource", &security.AutomationArgs{
	ResourceGroupName: pulumi.String("string"),
	Actions: pulumi.Array{
		security.AutomationActionEventHub{
			ActionType:         "EventHub",
			ConnectionString:   "string",
			EventHubResourceId: "string",
		},
	},
	AutomationName: pulumi.String("string"),
	Description:    pulumi.String("string"),
	IsEnabled:      pulumi.Bool(false),
	Kind:           pulumi.String("string"),
	Location:       pulumi.String("string"),
	Scopes: security.AutomationScopeArray{
		&security.AutomationScopeArgs{
			Description: pulumi.String("string"),
			ScopePath:   pulumi.String("string"),
		},
	},
	Sources: security.AutomationSourceArray{
		&security.AutomationSourceArgs{
			EventSource: pulumi.String("string"),
			RuleSets: security.AutomationRuleSetArray{
				&security.AutomationRuleSetArgs{
					Rules: security.AutomationTriggeringRuleArray{
						&security.AutomationTriggeringRuleArgs{
							ExpectedValue: pulumi.String("string"),
							Operator:      pulumi.String("string"),
							PropertyJPath: pulumi.String("string"),
							PropertyType:  pulumi.String("string"),
						},
					},
				},
			},
		},
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

    var automationResource = new Automation("automationResource", AutomationArgs.builder()
    .resourceGroupName("string")
    .actions(AutomationActionEventHubArgs.builder()
        .actionType("EventHub")
        .connectionString("string")
        .eventHubResourceId("string")
        .build())
    .automationName("string")
    .description("string")
    .isEnabled(false)
    .kind("string")
    .location("string")
    .scopes(AutomationScopeArgs.builder()
        .description("string")
        .scopePath("string")
        .build())
    .sources(AutomationSourceArgs.builder()
        .eventSource("string")
        .ruleSets(AutomationRuleSetArgs.builder()
            .rules(AutomationTriggeringRuleArgs.builder()
                .expectedValue("string")
                .operator("string")
                .propertyJPath("string")
                .propertyType("string")
                .build())
            .build())
        .build())
    .tags(Map.of("string", "string"))
    .build());

    automation_resource = azure_native.security.Automation("automationResource",
    resource_group_name="string",
    actions=[{
        "action_type": "EventHub",
        "connection_string": "string",
        "event_hub_resource_id": "string",
    }],
    automation_name="string",
    description="string",
    is_enabled=False,
    kind="string",
    location="string",
    scopes=[{
        "description": "string",
        "scope_path": "string",
    }],
    sources=[{
        "event_source": "string",
        "rule_sets": [{
            "rules": [{
                "expected_value": "string",
                "operator": "string",
                "property_j_path": "string",
                "property_type": "string",
            }],
        }],
    }],
    tags={
        "string": "string",
    })

    const automationResource = new azure_native.security.Automation("automationResource", {
    resourceGroupName: "string",
    actions: [{
        actionType: "EventHub",
        connectionString: "string",
        eventHubResourceId: "string",
    }],
    automationName: "string",
    description: "string",
    isEnabled: false,
    kind: "string",
    location: "string",
    scopes: [{
        description: "string",
        scopePath: "string",
    }],
    sources: [{
        eventSource: "string",
        ruleSets: [{
            rules: [{
                expectedValue: "string",
                operator: "string",
                propertyJPath: "string",
                propertyType: "string",
            }],
        }],
    }],
    tags: {
        string: "string",
    },
});

    type: azure-native:security:Automation
properties:
    actions:
        - actionType: EventHub
          connectionString: string
          eventHubResourceId: string
    automationName: string
    description: string
    isEnabled: false
    kind: string
    location: string
    resourceGroupName: string
    scopes:
        - description: string
          scopePath: string
    sources:
        - eventSource: string
          ruleSets:
            - rules:
                - expectedValue: string
                  operator: string
                  propertyJPath: string
                  propertyType: string
    tags:
        string: string

    Automation Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Automation resource accepts the following input properties:

    ResourceGroupName string
    The name of the resource group within the user's subscription. The name is case insensitive.
    Actions List<object>
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    AutomationName string
    The security automation name.
    Description string
    The security automation description.
    IsEnabled bool
    Indicates whether the security automation is enabled.
    Kind string
    Kind of the resource
    Location string
    Location where the resource is stored
    Scopes List<Pulumi.AzureNative.Security.Inputs.AutomationScope>
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    Sources List<Pulumi.AzureNative.Security.Inputs.AutomationSource>
    A collection of the source event types which evaluate the security automation set of rules.
    Tags Dictionary<string, string>
    A list of key value pairs that describe the resource.
    ResourceGroupName string
    The name of the resource group within the user's subscription. The name is case insensitive.
    Actions []interface{}
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    AutomationName string
    The security automation name.
    Description string
    The security automation description.
    IsEnabled bool
    Indicates whether the security automation is enabled.
    Kind string
    Kind of the resource
    Location string
    Location where the resource is stored
    Scopes []AutomationScopeArgs
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    Sources []AutomationSourceArgs
    A collection of the source event types which evaluate the security automation set of rules.
    Tags map[string]string
    A list of key value pairs that describe the resource.
    resourceGroupName String
    The name of the resource group within the user's subscription. The name is case insensitive.
    actions List<Object>
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    automationName String
    The security automation name.
    description String
    The security automation description.
    isEnabled Boolean
    Indicates whether the security automation is enabled.
    kind String
    Kind of the resource
    location String
    Location where the resource is stored
    scopes List<AutomationScope>
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    sources List<AutomationSource>
    A collection of the source event types which evaluate the security automation set of rules.
    tags Map<String,String>
    A list of key value pairs that describe the resource.
    resourceGroupName string
    The name of the resource group within the user's subscription. The name is case insensitive.
    actions (AutomationActionEventHub | AutomationActionLogicAppArgs | AutomationActionWorkspaceArgs)[]
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    automationName string
    The security automation name.
    description string
    The security automation description.
    isEnabled boolean
    Indicates whether the security automation is enabled.
    kind string
    Kind of the resource
    location string
    Location where the resource is stored
    scopes AutomationScope[]
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    sources AutomationSource[]
    A collection of the source event types which evaluate the security automation set of rules.
    tags {[key: string]: string}
    A list of key value pairs that describe the resource.
    resource_group_name str
    The name of the resource group within the user's subscription. The name is case insensitive.
    actions Sequence[Union[AutomationActionEventHubArgs, AutomationActionLogicAppArgs, AutomationActionWorkspaceArgs]]
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    automation_name str
    The security automation name.
    description str
    The security automation description.
    is_enabled bool
    Indicates whether the security automation is enabled.
    kind str
    Kind of the resource
    location str
    Location where the resource is stored
    scopes Sequence[AutomationScopeArgs]
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    sources Sequence[AutomationSourceArgs]
    A collection of the source event types which evaluate the security automation set of rules.
    tags Mapping[str, str]
    A list of key value pairs that describe the resource.
    resourceGroupName String
    The name of the resource group within the user's subscription. The name is case insensitive.
    actions List<Property Map | Property Map | Property Map>
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    automationName String
    The security automation name.
    description String
    The security automation description.
    isEnabled Boolean
    Indicates whether the security automation is enabled.
    kind String
    Kind of the resource
    location String
    Location where the resource is stored
    scopes List<Property Map>
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    sources List<Property Map>
    A collection of the source event types which evaluate the security automation set of rules.
    tags Map<String>
    A list of key value pairs that describe the resource.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Automation resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name
    Type string
    Resource type
    Etag string
    Entity tag is used for comparing two or more entities from the same requested resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name
    Type string
    Resource type
    Etag string
    Entity tag is used for comparing two or more entities from the same requested resource.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name
    type String
    Resource type
    etag String
    Entity tag is used for comparing two or more entities from the same requested resource.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Resource name
    type string
    Resource type
    etag string
    Entity tag is used for comparing two or more entities from the same requested resource.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Resource name
    type str
    Resource type
    etag str
    Entity tag is used for comparing two or more entities from the same requested resource.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name
    type String
    Resource type
    etag String
    Entity tag is used for comparing two or more entities from the same requested resource.

    Supporting Types

    AutomationActionEventHub, AutomationActionEventHubArgs

    ConnectionString string
    The target Event Hub connection string (it will not be included in any response).
    EventHubResourceId string
    The target Event Hub Azure Resource ID.
    ConnectionString string
    The target Event Hub connection string (it will not be included in any response).
    EventHubResourceId string
    The target Event Hub Azure Resource ID.
    connectionString String
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId String
    The target Event Hub Azure Resource ID.
    connectionString string
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId string
    The target Event Hub Azure Resource ID.
    connection_string str
    The target Event Hub connection string (it will not be included in any response).
    event_hub_resource_id str
    The target Event Hub Azure Resource ID.
    connectionString String
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId String
    The target Event Hub Azure Resource ID.

    AutomationActionEventHubResponse, AutomationActionEventHubResponseArgs

    SasPolicyName string
    The target Event Hub SAS policy name.
    ConnectionString string
    The target Event Hub connection string (it will not be included in any response).
    EventHubResourceId string
    The target Event Hub Azure Resource ID.
    SasPolicyName string
    The target Event Hub SAS policy name.
    ConnectionString string
    The target Event Hub connection string (it will not be included in any response).
    EventHubResourceId string
    The target Event Hub Azure Resource ID.
    sasPolicyName String
    The target Event Hub SAS policy name.
    connectionString String
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId String
    The target Event Hub Azure Resource ID.
    sasPolicyName string
    The target Event Hub SAS policy name.
    connectionString string
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId string
    The target Event Hub Azure Resource ID.
    sas_policy_name str
    The target Event Hub SAS policy name.
    connection_string str
    The target Event Hub connection string (it will not be included in any response).
    event_hub_resource_id str
    The target Event Hub Azure Resource ID.
    sasPolicyName String
    The target Event Hub SAS policy name.
    connectionString String
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId String
    The target Event Hub Azure Resource ID.

    AutomationActionLogicApp, AutomationActionLogicAppArgs

    LogicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    Uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    LogicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    Uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId String
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri String
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logic_app_resource_id str
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri str
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId String
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri String
    The Logic App trigger URI endpoint (it will not be included in any response).

    AutomationActionLogicAppResponse, AutomationActionLogicAppResponseArgs

    LogicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    Uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    LogicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    Uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId String
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri String
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logic_app_resource_id str
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri str
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId String
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri String
    The Logic App trigger URI endpoint (it will not be included in any response).

    AutomationActionWorkspace, AutomationActionWorkspaceArgs

    WorkspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    WorkspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId String
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspace_resource_id str
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId String
    The fully qualified Log Analytics Workspace Azure Resource ID.

    AutomationActionWorkspaceResponse, AutomationActionWorkspaceResponseArgs

    WorkspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    WorkspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId String
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspace_resource_id str
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId String
    The fully qualified Log Analytics Workspace Azure Resource ID.

    AutomationRuleSet, AutomationRuleSetArgs

    AutomationRuleSetResponse, AutomationRuleSetResponseArgs

    AutomationScope, AutomationScopeArgs

    Description string
    The resources scope description.
    ScopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    Description string
    The resources scope description.
    ScopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description String
    The resources scope description.
    scopePath String
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description string
    The resources scope description.
    scopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description str
    The resources scope description.
    scope_path str
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description String
    The resources scope description.
    scopePath String
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

    AutomationScopeResponse, AutomationScopeResponseArgs

    Description string
    The resources scope description.
    ScopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    Description string
    The resources scope description.
    ScopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description String
    The resources scope description.
    scopePath String
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description string
    The resources scope description.
    scopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description str
    The resources scope description.
    scope_path str
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description String
    The resources scope description.
    scopePath String
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

    AutomationSource, AutomationSourceArgs

    EventSource string | Pulumi.AzureNative.Security.EventSource
    A valid event source type.
    RuleSets List<Pulumi.AzureNative.Security.Inputs.AutomationRuleSet>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    EventSource string | EventSource
    A valid event source type.
    RuleSets []AutomationRuleSet
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource String | EventSource
    A valid event source type.
    ruleSets List<AutomationRuleSet>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource string | EventSource
    A valid event source type.
    ruleSets AutomationRuleSet[]
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    event_source str | EventSource
    A valid event source type.
    rule_sets Sequence[AutomationRuleSet]
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

    AutomationSourceResponse, AutomationSourceResponseArgs

    EventSource string
    A valid event source type.
    RuleSets List<Pulumi.AzureNative.Security.Inputs.AutomationRuleSetResponse>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    EventSource string
    A valid event source type.
    RuleSets []AutomationRuleSetResponse
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource String
    A valid event source type.
    ruleSets List<AutomationRuleSetResponse>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource string
    A valid event source type.
    ruleSets AutomationRuleSetResponse[]
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    event_source str
    A valid event source type.
    rule_sets Sequence[AutomationRuleSetResponse]
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource String
    A valid event source type.
    ruleSets List<Property Map>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

    AutomationTriggeringRule, AutomationTriggeringRuleArgs

    ExpectedValue string
    The expected value.
    Operator string | Pulumi.AzureNative.Security.Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    PropertyJPath string
    The JPath of the entity model property that should be checked.
    PropertyType string | Pulumi.AzureNative.Security.PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    ExpectedValue string
    The expected value.
    Operator string | Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    PropertyJPath string
    The JPath of the entity model property that should be checked.
    PropertyType string | PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue String
    The expected value.
    operator String | Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath String
    The JPath of the entity model property that should be checked.
    propertyType String | PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue string
    The expected value.
    operator string | Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath string
    The JPath of the entity model property that should be checked.
    propertyType string | PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expected_value str
    The expected value.
    operator str | Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    property_j_path str
    The JPath of the entity model property that should be checked.
    property_type str | PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue String
    The expected value.
    operator String | "Equals" | "GreaterThan" | "GreaterThanOrEqualTo" | "LesserThan" | "LesserThanOrEqualTo" | "NotEquals" | "Contains" | "StartsWith" | "EndsWith"
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath String
    The JPath of the entity model property that should be checked.
    propertyType String | "String" | "Integer" | "Number" | "Boolean"
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

    AutomationTriggeringRuleResponse, AutomationTriggeringRuleResponseArgs

    ExpectedValue string
    The expected value.
    Operator string
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    PropertyJPath string
    The JPath of the entity model property that should be checked.
    PropertyType string
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    ExpectedValue string
    The expected value.
    Operator string
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    PropertyJPath string
    The JPath of the entity model property that should be checked.
    PropertyType string
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue String
    The expected value.
    operator String
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath String
    The JPath of the entity model property that should be checked.
    propertyType String
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue string
    The expected value.
    operator string
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath string
    The JPath of the entity model property that should be checked.
    propertyType string
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expected_value str
    The expected value.
    operator str
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    property_j_path str
    The JPath of the entity model property that should be checked.
    property_type str
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue String
    The expected value.
    operator String
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath String
    The JPath of the entity model property that should be checked.
    propertyType String
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

    EventSource, EventSourceArgs

    Assessments
    Assessments
    AssessmentsSnapshot
    AssessmentsSnapshot
    SubAssessments
    SubAssessments
    SubAssessmentsSnapshot
    SubAssessmentsSnapshot
    Alerts
    Alerts
    SecureScores
    SecureScores
    SecureScoresSnapshot
    SecureScoresSnapshot
    SecureScoreControls
    SecureScoreControls
    SecureScoreControlsSnapshot
    SecureScoreControlsSnapshot
    RegulatoryComplianceAssessment
    RegulatoryComplianceAssessment
    RegulatoryComplianceAssessmentSnapshot
    RegulatoryComplianceAssessmentSnapshot
    EventSourceAssessments
    Assessments
    EventSourceAssessmentsSnapshot
    AssessmentsSnapshot
    EventSourceSubAssessments
    SubAssessments
    EventSourceSubAssessmentsSnapshot
    SubAssessmentsSnapshot
    EventSourceAlerts
    Alerts
    EventSourceSecureScores
    SecureScores
    EventSourceSecureScoresSnapshot
    SecureScoresSnapshot
    EventSourceSecureScoreControls
    SecureScoreControls
    EventSourceSecureScoreControlsSnapshot
    SecureScoreControlsSnapshot
    EventSourceRegulatoryComplianceAssessment
    RegulatoryComplianceAssessment
    EventSourceRegulatoryComplianceAssessmentSnapshot
    RegulatoryComplianceAssessmentSnapshot
    Assessments
    Assessments
    AssessmentsSnapshot
    AssessmentsSnapshot
    SubAssessments
    SubAssessments
    SubAssessmentsSnapshot
    SubAssessmentsSnapshot
    Alerts
    Alerts
    SecureScores
    SecureScores
    SecureScoresSnapshot
    SecureScoresSnapshot
    SecureScoreControls
    SecureScoreControls
    SecureScoreControlsSnapshot
    SecureScoreControlsSnapshot
    RegulatoryComplianceAssessment
    RegulatoryComplianceAssessment
    RegulatoryComplianceAssessmentSnapshot
    RegulatoryComplianceAssessmentSnapshot
    Assessments
    Assessments
    AssessmentsSnapshot
    AssessmentsSnapshot
    SubAssessments
    SubAssessments
    SubAssessmentsSnapshot
    SubAssessmentsSnapshot
    Alerts
    Alerts
    SecureScores
    SecureScores
    SecureScoresSnapshot
    SecureScoresSnapshot
    SecureScoreControls
    SecureScoreControls
    SecureScoreControlsSnapshot
    SecureScoreControlsSnapshot
    RegulatoryComplianceAssessment
    RegulatoryComplianceAssessment
    RegulatoryComplianceAssessmentSnapshot
    RegulatoryComplianceAssessmentSnapshot
    ASSESSMENTS
    Assessments
    ASSESSMENTS_SNAPSHOT
    AssessmentsSnapshot
    SUB_ASSESSMENTS
    SubAssessments
    SUB_ASSESSMENTS_SNAPSHOT
    SubAssessmentsSnapshot
    ALERTS
    Alerts
    SECURE_SCORES
    SecureScores
    SECURE_SCORES_SNAPSHOT
    SecureScoresSnapshot
    SECURE_SCORE_CONTROLS
    SecureScoreControls
    SECURE_SCORE_CONTROLS_SNAPSHOT
    SecureScoreControlsSnapshot
    REGULATORY_COMPLIANCE_ASSESSMENT
    RegulatoryComplianceAssessment
    REGULATORY_COMPLIANCE_ASSESSMENT_SNAPSHOT
    RegulatoryComplianceAssessmentSnapshot
    "Assessments"
    Assessments
    "AssessmentsSnapshot"
    AssessmentsSnapshot
    "SubAssessments"
    SubAssessments
    "SubAssessmentsSnapshot"
    SubAssessmentsSnapshot
    "Alerts"
    Alerts
    "SecureScores"
    SecureScores
    "SecureScoresSnapshot"
    SecureScoresSnapshot
    "SecureScoreControls"
    SecureScoreControls
    "SecureScoreControlsSnapshot"
    SecureScoreControlsSnapshot
    "RegulatoryComplianceAssessment"
    RegulatoryComplianceAssessment
    "RegulatoryComplianceAssessmentSnapshot"
    RegulatoryComplianceAssessmentSnapshot

    Operator, OperatorArgs

    EqualsValue
    EqualsApplies for decimal and non-decimal operands
    GreaterThan
    GreaterThanApplies only for decimal operands
    GreaterThanOrEqualTo
    GreaterThanOrEqualToApplies only for decimal operands
    LesserThan
    LesserThanApplies only for decimal operands
    LesserThanOrEqualTo
    LesserThanOrEqualToApplies only for decimal operands
    NotEquals
    NotEqualsApplies for decimal and non-decimal operands
    Contains
    ContainsApplies only for non-decimal operands
    StartsWith
    StartsWithApplies only for non-decimal operands
    EndsWith
    EndsWithApplies only for non-decimal operands
    OperatorEquals
    EqualsApplies for decimal and non-decimal operands
    OperatorGreaterThan
    GreaterThanApplies only for decimal operands
    OperatorGreaterThanOrEqualTo
    GreaterThanOrEqualToApplies only for decimal operands
    OperatorLesserThan
    LesserThanApplies only for decimal operands
    OperatorLesserThanOrEqualTo
    LesserThanOrEqualToApplies only for decimal operands
    OperatorNotEquals
    NotEqualsApplies for decimal and non-decimal operands
    OperatorContains
    ContainsApplies only for non-decimal operands
    OperatorStartsWith
    StartsWithApplies only for non-decimal operands
    OperatorEndsWith
    EndsWithApplies only for non-decimal operands
    Equals
    EqualsApplies for decimal and non-decimal operands
    GreaterThan
    GreaterThanApplies only for decimal operands
    GreaterThanOrEqualTo
    GreaterThanOrEqualToApplies only for decimal operands
    LesserThan
    LesserThanApplies only for decimal operands
    LesserThanOrEqualTo
    LesserThanOrEqualToApplies only for decimal operands
    NotEquals
    NotEqualsApplies for decimal and non-decimal operands
    Contains
    ContainsApplies only for non-decimal operands
    StartsWith
    StartsWithApplies only for non-decimal operands
    EndsWith
    EndsWithApplies only for non-decimal operands
    Equals
    EqualsApplies for decimal and non-decimal operands
    GreaterThan
    GreaterThanApplies only for decimal operands
    GreaterThanOrEqualTo
    GreaterThanOrEqualToApplies only for decimal operands
    LesserThan
    LesserThanApplies only for decimal operands
    LesserThanOrEqualTo
    LesserThanOrEqualToApplies only for decimal operands
    NotEquals
    NotEqualsApplies for decimal and non-decimal operands
    Contains
    ContainsApplies only for non-decimal operands
    StartsWith
    StartsWithApplies only for non-decimal operands
    EndsWith
    EndsWithApplies only for non-decimal operands
    EQUALS
    EqualsApplies for decimal and non-decimal operands
    GREATER_THAN
    GreaterThanApplies only for decimal operands
    GREATER_THAN_OR_EQUAL_TO
    GreaterThanOrEqualToApplies only for decimal operands
    LESSER_THAN
    LesserThanApplies only for decimal operands
    LESSER_THAN_OR_EQUAL_TO
    LesserThanOrEqualToApplies only for decimal operands
    NOT_EQUALS
    NotEqualsApplies for decimal and non-decimal operands
    CONTAINS
    ContainsApplies only for non-decimal operands
    STARTS_WITH
    StartsWithApplies only for non-decimal operands
    ENDS_WITH
    EndsWithApplies only for non-decimal operands
    "Equals"
    EqualsApplies for decimal and non-decimal operands
    "GreaterThan"
    GreaterThanApplies only for decimal operands
    "GreaterThanOrEqualTo"
    GreaterThanOrEqualToApplies only for decimal operands
    "LesserThan"
    LesserThanApplies only for decimal operands
    "LesserThanOrEqualTo"
    LesserThanOrEqualToApplies only for decimal operands
    "NotEquals"
    NotEqualsApplies for decimal and non-decimal operands
    "Contains"
    ContainsApplies only for non-decimal operands
    "StartsWith"
    StartsWithApplies only for non-decimal operands
    "EndsWith"
    EndsWithApplies only for non-decimal operands

    PropertyType, PropertyTypeArgs

    String
    String
    Integer
    Integer
    Number
    Number
    Boolean
    Boolean
    PropertyTypeString
    String
    PropertyTypeInteger
    Integer
    PropertyTypeNumber
    Number
    PropertyTypeBoolean
    Boolean
    String
    String
    Integer
    Integer
    Number
    Number
    Boolean
    Boolean
    String
    String
    Integer
    Integer
    Number
    Number
    Boolean
    Boolean
    STRING
    String
    INTEGER
    Integer
    NUMBER
    Number
    BOOLEAN
    Boolean
    "String"
    String
    "Integer"
    Integer
    "Number"
    Number
    "Boolean"
    Boolean

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:security:Automation exampleAutomation /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/automations/{automationName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
    Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
    pulumi/pulumi-azure-native