azure-native.blueprint.Assignment
Explore with Pulumi AI
Represents a blueprint assignment. API Version: 2018-11-01-preview.
Example Usage
Assignment with system-assigned managed identity at management group scope
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
{
AssignmentName = "assignSimpleBlueprint",
BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
{
Type = "SystemAssigned",
},
Location = "eastus",
Parameters =
{
{ "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = "Contoso/Online/Shopping/Production",
} },
{ "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = new[]
{
"johnDoe@contoso.com",
"johnsteam@contoso.com",
},
} },
{ "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = "Standard_LRS",
} },
},
ResourceGroups =
{
{ "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
{
Location = "eastus",
Name = "defaultRG",
} },
},
ResourceScope = "managementGroups/ContosoOnlineGroup",
Scope = "subscriptions/00000000-0000-0000-0000-000000000000",
});
});
package main
import (
blueprint "github.com/pulumi/pulumi-azure-native-sdk/blueprint"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
AssignmentName: pulumi.String("assignSimpleBlueprint"),
BlueprintId: pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
Description: pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
Identity: &blueprint.ManagedServiceIdentityArgs{
Type: pulumi.String("SystemAssigned"),
},
Location: pulumi.String("eastus"),
Parameters: blueprint.ParameterValueMap{
"costCenter": &blueprint.ParameterValueArgs{
Value: pulumi.Any("Contoso/Online/Shopping/Production"),
},
"owners": &blueprint.ParameterValueArgs{
Value: pulumi.Any{
"johnDoe@contoso.com",
"johnsteam@contoso.com",
},
},
"storageAccountType": &blueprint.ParameterValueArgs{
Value: pulumi.Any("Standard_LRS"),
},
},
ResourceGroups: blueprint.ResourceGroupValueMap{
"storageRG": &blueprint.ResourceGroupValueArgs{
Location: pulumi.String("eastus"),
Name: pulumi.String("defaultRG"),
},
},
ResourceScope: pulumi.String("managementGroups/ContosoOnlineGroup"),
Scope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var assignment = new Assignment("assignment", AssignmentArgs.builder()
.assignmentName("assignSimpleBlueprint")
.blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
.description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
.identity(Map.of("type", "SystemAssigned"))
.location("eastus")
.parameters(Map.ofEntries(
Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
Map.entry("owners", Map.of("value",
"johnDoe@contoso.com",
"johnsteam@contoso.com")),
Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
))
.resourceGroups(Map.of("storageRG", Map.ofEntries(
Map.entry("location", "eastus"),
Map.entry("name", "defaultRG")
)))
.resourceScope("managementGroups/ContosoOnlineGroup")
.scope("subscriptions/00000000-0000-0000-0000-000000000000")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
assignment = azure_native.blueprint.Assignment("assignment",
assignment_name="assignSimpleBlueprint",
blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
identity=azure_native.blueprint.ManagedServiceIdentityArgs(
type="SystemAssigned",
),
location="eastus",
parameters={
"costCenter": azure_native.blueprint.ParameterValueArgs(
value="Contoso/Online/Shopping/Production",
),
"owners": azure_native.blueprint.ParameterValueArgs(
value=[
"johnDoe@contoso.com",
"johnsteam@contoso.com",
],
),
"storageAccountType": azure_native.blueprint.ParameterValueArgs(
value="Standard_LRS",
),
},
resource_groups={
"storageRG": azure_native.blueprint.ResourceGroupValueArgs(
location="eastus",
name="defaultRG",
),
},
resource_scope="managementGroups/ContosoOnlineGroup",
scope="subscriptions/00000000-0000-0000-0000-000000000000")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const assignment = new azure_native.blueprint.Assignment("assignment", {
assignmentName: "assignSimpleBlueprint",
blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
identity: {
type: "SystemAssigned",
},
location: "eastus",
parameters: {
costCenter: {
value: "Contoso/Online/Shopping/Production",
},
owners: {
value: [
"johnDoe@contoso.com",
"johnsteam@contoso.com",
],
},
storageAccountType: {
value: "Standard_LRS",
},
},
resourceGroups: {
storageRG: {
location: "eastus",
name: "defaultRG",
},
},
resourceScope: "managementGroups/ContosoOnlineGroup",
scope: "subscriptions/00000000-0000-0000-0000-000000000000",
});
resources:
assignment:
type: azure-native:blueprint:Assignment
properties:
assignmentName: assignSimpleBlueprint
blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
identity:
type: SystemAssigned
location: eastus
parameters:
costCenter:
value: Contoso/Online/Shopping/Production
owners:
value:
- johnDoe@contoso.com
- johnsteam@contoso.com
storageAccountType:
value: Standard_LRS
resourceGroups:
storageRG:
location: eastus
name: defaultRG
resourceScope: managementGroups/ContosoOnlineGroup
scope: subscriptions/00000000-0000-0000-0000-000000000000
Assignment with system-assigned managed identity at subscription scope
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
{
AssignmentName = "assignSimpleBlueprint",
BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
{
Type = "SystemAssigned",
},
Location = "eastus",
Parameters =
{
{ "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = "Contoso/Online/Shopping/Production",
} },
{ "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = new[]
{
"johnDoe@contoso.com",
"johnsteam@contoso.com",
},
} },
{ "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = "Standard_LRS",
} },
},
ResourceGroups =
{
{ "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
{
Location = "eastus",
Name = "defaultRG",
} },
},
ResourceScope = "subscriptions/00000000-0000-0000-0000-000000000000",
});
});
package main
import (
blueprint "github.com/pulumi/pulumi-azure-native-sdk/blueprint"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
AssignmentName: pulumi.String("assignSimpleBlueprint"),
BlueprintId: pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
Description: pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
Identity: &blueprint.ManagedServiceIdentityArgs{
Type: pulumi.String("SystemAssigned"),
},
Location: pulumi.String("eastus"),
Parameters: blueprint.ParameterValueMap{
"costCenter": &blueprint.ParameterValueArgs{
Value: pulumi.Any("Contoso/Online/Shopping/Production"),
},
"owners": &blueprint.ParameterValueArgs{
Value: pulumi.Any{
"johnDoe@contoso.com",
"johnsteam@contoso.com",
},
},
"storageAccountType": &blueprint.ParameterValueArgs{
Value: pulumi.Any("Standard_LRS"),
},
},
ResourceGroups: blueprint.ResourceGroupValueMap{
"storageRG": &blueprint.ResourceGroupValueArgs{
Location: pulumi.String("eastus"),
Name: pulumi.String("defaultRG"),
},
},
ResourceScope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var assignment = new Assignment("assignment", AssignmentArgs.builder()
.assignmentName("assignSimpleBlueprint")
.blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
.description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
.identity(Map.of("type", "SystemAssigned"))
.location("eastus")
.parameters(Map.ofEntries(
Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
Map.entry("owners", Map.of("value",
"johnDoe@contoso.com",
"johnsteam@contoso.com")),
Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
))
.resourceGroups(Map.of("storageRG", Map.ofEntries(
Map.entry("location", "eastus"),
Map.entry("name", "defaultRG")
)))
.resourceScope("subscriptions/00000000-0000-0000-0000-000000000000")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
assignment = azure_native.blueprint.Assignment("assignment",
assignment_name="assignSimpleBlueprint",
blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
identity=azure_native.blueprint.ManagedServiceIdentityArgs(
type="SystemAssigned",
),
location="eastus",
parameters={
"costCenter": azure_native.blueprint.ParameterValueArgs(
value="Contoso/Online/Shopping/Production",
),
"owners": azure_native.blueprint.ParameterValueArgs(
value=[
"johnDoe@contoso.com",
"johnsteam@contoso.com",
],
),
"storageAccountType": azure_native.blueprint.ParameterValueArgs(
value="Standard_LRS",
),
},
resource_groups={
"storageRG": azure_native.blueprint.ResourceGroupValueArgs(
location="eastus",
name="defaultRG",
),
},
resource_scope="subscriptions/00000000-0000-0000-0000-000000000000")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const assignment = new azure_native.blueprint.Assignment("assignment", {
assignmentName: "assignSimpleBlueprint",
blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
identity: {
type: "SystemAssigned",
},
location: "eastus",
parameters: {
costCenter: {
value: "Contoso/Online/Shopping/Production",
},
owners: {
value: [
"johnDoe@contoso.com",
"johnsteam@contoso.com",
],
},
storageAccountType: {
value: "Standard_LRS",
},
},
resourceGroups: {
storageRG: {
location: "eastus",
name: "defaultRG",
},
},
resourceScope: "subscriptions/00000000-0000-0000-0000-000000000000",
});
resources:
assignment:
type: azure-native:blueprint:Assignment
properties:
assignmentName: assignSimpleBlueprint
blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
identity:
type: SystemAssigned
location: eastus
parameters:
costCenter:
value: Contoso/Online/Shopping/Production
owners:
value:
- johnDoe@contoso.com
- johnsteam@contoso.com
storageAccountType:
value: Standard_LRS
resourceGroups:
storageRG:
location: eastus
name: defaultRG
resourceScope: subscriptions/00000000-0000-0000-0000-000000000000
Assignment with user-assigned managed identity at management group scope
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
{
AssignmentName = "assignSimpleBlueprint",
BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
{
Type = "UserAssigned",
UserAssignedIdentities =
{
{ "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", null },
},
},
Location = "eastus",
Parameters =
{
{ "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = "Contoso/Online/Shopping/Production",
} },
{ "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = new[]
{
"johnDoe@contoso.com",
"johnsteam@contoso.com",
},
} },
{ "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = "Standard_LRS",
} },
},
ResourceGroups =
{
{ "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
{
Location = "eastus",
Name = "defaultRG",
} },
},
ResourceScope = "managementGroups/ContosoOnlineGroup",
Scope = "subscriptions/00000000-0000-0000-0000-000000000000",
});
});
package main
import (
blueprint "github.com/pulumi/pulumi-azure-native-sdk/blueprint"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
AssignmentName: pulumi.String("assignSimpleBlueprint"),
BlueprintId: pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
Description: pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
Identity: blueprint.ManagedServiceIdentityResponse{
Type: pulumi.String("UserAssigned"),
UserAssignedIdentities: blueprint.UserAssignedIdentityMap{
"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": nil,
},
},
Location: pulumi.String("eastus"),
Parameters: blueprint.ParameterValueMap{
"costCenter": &blueprint.ParameterValueArgs{
Value: pulumi.Any("Contoso/Online/Shopping/Production"),
},
"owners": &blueprint.ParameterValueArgs{
Value: pulumi.Any{
"johnDoe@contoso.com",
"johnsteam@contoso.com",
},
},
"storageAccountType": &blueprint.ParameterValueArgs{
Value: pulumi.Any("Standard_LRS"),
},
},
ResourceGroups: blueprint.ResourceGroupValueMap{
"storageRG": &blueprint.ResourceGroupValueArgs{
Location: pulumi.String("eastus"),
Name: pulumi.String("defaultRG"),
},
},
ResourceScope: pulumi.String("managementGroups/ContosoOnlineGroup"),
Scope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var assignment = new Assignment("assignment", AssignmentArgs.builder()
.assignmentName("assignSimpleBlueprint")
.blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
.description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
.identity(Map.ofEntries(
Map.entry("type", "UserAssigned"),
Map.entry("userAssignedIdentities", Map.of("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", ))
))
.location("eastus")
.parameters(Map.ofEntries(
Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
Map.entry("owners", Map.of("value",
"johnDoe@contoso.com",
"johnsteam@contoso.com")),
Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
))
.resourceGroups(Map.of("storageRG", Map.ofEntries(
Map.entry("location", "eastus"),
Map.entry("name", "defaultRG")
)))
.resourceScope("managementGroups/ContosoOnlineGroup")
.scope("subscriptions/00000000-0000-0000-0000-000000000000")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
assignment = azure_native.blueprint.Assignment("assignment",
assignment_name="assignSimpleBlueprint",
blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
identity=azure_native.blueprint.ManagedServiceIdentityResponseArgs(
type="UserAssigned",
user_assigned_identities={
"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": azure_native.blueprint.UserAssignedIdentityArgs(),
},
),
location="eastus",
parameters={
"costCenter": azure_native.blueprint.ParameterValueArgs(
value="Contoso/Online/Shopping/Production",
),
"owners": azure_native.blueprint.ParameterValueArgs(
value=[
"johnDoe@contoso.com",
"johnsteam@contoso.com",
],
),
"storageAccountType": azure_native.blueprint.ParameterValueArgs(
value="Standard_LRS",
),
},
resource_groups={
"storageRG": azure_native.blueprint.ResourceGroupValueArgs(
location="eastus",
name="defaultRG",
),
},
resource_scope="managementGroups/ContosoOnlineGroup",
scope="subscriptions/00000000-0000-0000-0000-000000000000")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const assignment = new azure_native.blueprint.Assignment("assignment", {
assignmentName: "assignSimpleBlueprint",
blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
identity: {
type: "UserAssigned",
userAssignedIdentities: {
"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": {},
},
},
location: "eastus",
parameters: {
costCenter: {
value: "Contoso/Online/Shopping/Production",
},
owners: {
value: [
"johnDoe@contoso.com",
"johnsteam@contoso.com",
],
},
storageAccountType: {
value: "Standard_LRS",
},
},
resourceGroups: {
storageRG: {
location: "eastus",
name: "defaultRG",
},
},
resourceScope: "managementGroups/ContosoOnlineGroup",
scope: "subscriptions/00000000-0000-0000-0000-000000000000",
});
resources:
assignment:
type: azure-native:blueprint:Assignment
properties:
assignmentName: assignSimpleBlueprint
blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
identity:
type: UserAssigned
userAssignedIdentities:
? /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity
: {}
location: eastus
parameters:
costCenter:
value: Contoso/Online/Shopping/Production
owners:
value:
- johnDoe@contoso.com
- johnsteam@contoso.com
storageAccountType:
value: Standard_LRS
resourceGroups:
storageRG:
location: eastus
name: defaultRG
resourceScope: managementGroups/ContosoOnlineGroup
scope: subscriptions/00000000-0000-0000-0000-000000000000
Assignment with user-assigned managed identity at subscription scope
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
{
AssignmentName = "assignSimpleBlueprint",
BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
{
Type = "UserAssigned",
UserAssignedIdentities =
{
{ "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", null },
},
},
Location = "eastus",
Parameters =
{
{ "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = "Contoso/Online/Shopping/Production",
} },
{ "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = new[]
{
"johnDoe@contoso.com",
"johnsteam@contoso.com",
},
} },
{ "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
{
Value = "Standard_LRS",
} },
},
ResourceGroups =
{
{ "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
{
Location = "eastus",
Name = "defaultRG",
} },
},
ResourceScope = "subscriptions/00000000-0000-0000-0000-000000000000",
});
});
package main
import (
blueprint "github.com/pulumi/pulumi-azure-native-sdk/blueprint"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
AssignmentName: pulumi.String("assignSimpleBlueprint"),
BlueprintId: pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
Description: pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
Identity: blueprint.ManagedServiceIdentityResponse{
Type: pulumi.String("UserAssigned"),
UserAssignedIdentities: blueprint.UserAssignedIdentityMap{
"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": nil,
},
},
Location: pulumi.String("eastus"),
Parameters: blueprint.ParameterValueMap{
"costCenter": &blueprint.ParameterValueArgs{
Value: pulumi.Any("Contoso/Online/Shopping/Production"),
},
"owners": &blueprint.ParameterValueArgs{
Value: pulumi.Any{
"johnDoe@contoso.com",
"johnsteam@contoso.com",
},
},
"storageAccountType": &blueprint.ParameterValueArgs{
Value: pulumi.Any("Standard_LRS"),
},
},
ResourceGroups: blueprint.ResourceGroupValueMap{
"storageRG": &blueprint.ResourceGroupValueArgs{
Location: pulumi.String("eastus"),
Name: pulumi.String("defaultRG"),
},
},
ResourceScope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var assignment = new Assignment("assignment", AssignmentArgs.builder()
.assignmentName("assignSimpleBlueprint")
.blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
.description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
.identity(Map.ofEntries(
Map.entry("type", "UserAssigned"),
Map.entry("userAssignedIdentities", Map.of("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", ))
))
.location("eastus")
.parameters(Map.ofEntries(
Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
Map.entry("owners", Map.of("value",
"johnDoe@contoso.com",
"johnsteam@contoso.com")),
Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
))
.resourceGroups(Map.of("storageRG", Map.ofEntries(
Map.entry("location", "eastus"),
Map.entry("name", "defaultRG")
)))
.resourceScope("subscriptions/00000000-0000-0000-0000-000000000000")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
assignment = azure_native.blueprint.Assignment("assignment",
assignment_name="assignSimpleBlueprint",
blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
identity=azure_native.blueprint.ManagedServiceIdentityResponseArgs(
type="UserAssigned",
user_assigned_identities={
"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": azure_native.blueprint.UserAssignedIdentityArgs(),
},
),
location="eastus",
parameters={
"costCenter": azure_native.blueprint.ParameterValueArgs(
value="Contoso/Online/Shopping/Production",
),
"owners": azure_native.blueprint.ParameterValueArgs(
value=[
"johnDoe@contoso.com",
"johnsteam@contoso.com",
],
),
"storageAccountType": azure_native.blueprint.ParameterValueArgs(
value="Standard_LRS",
),
},
resource_groups={
"storageRG": azure_native.blueprint.ResourceGroupValueArgs(
location="eastus",
name="defaultRG",
),
},
resource_scope="subscriptions/00000000-0000-0000-0000-000000000000")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const assignment = new azure_native.blueprint.Assignment("assignment", {
assignmentName: "assignSimpleBlueprint",
blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
identity: {
type: "UserAssigned",
userAssignedIdentities: {
"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": {},
},
},
location: "eastus",
parameters: {
costCenter: {
value: "Contoso/Online/Shopping/Production",
},
owners: {
value: [
"johnDoe@contoso.com",
"johnsteam@contoso.com",
],
},
storageAccountType: {
value: "Standard_LRS",
},
},
resourceGroups: {
storageRG: {
location: "eastus",
name: "defaultRG",
},
},
resourceScope: "subscriptions/00000000-0000-0000-0000-000000000000",
});
resources:
assignment:
type: azure-native:blueprint:Assignment
properties:
assignmentName: assignSimpleBlueprint
blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
identity:
type: UserAssigned
userAssignedIdentities:
? /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity
: {}
location: eastus
parameters:
costCenter:
value: Contoso/Online/Shopping/Production
owners:
value:
- johnDoe@contoso.com
- johnsteam@contoso.com
storageAccountType:
value: Standard_LRS
resourceGroups:
storageRG:
location: eastus
name: defaultRG
resourceScope: subscriptions/00000000-0000-0000-0000-000000000000
Create Assignment Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Assignment(name: string, args: AssignmentArgs, opts?: CustomResourceOptions);
@overload
def Assignment(resource_name: str,
args: AssignmentArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Assignment(resource_name: str,
opts: Optional[ResourceOptions] = None,
identity: Optional[ManagedServiceIdentityArgs] = None,
parameters: Optional[Mapping[str, ParameterValueArgs]] = None,
resource_groups: Optional[Mapping[str, ResourceGroupValueArgs]] = None,
resource_scope: Optional[str] = None,
assignment_name: Optional[str] = None,
blueprint_id: Optional[str] = None,
description: Optional[str] = None,
display_name: Optional[str] = None,
location: Optional[str] = None,
locks: Optional[AssignmentLockSettingsArgs] = None,
scope: Optional[str] = None)
func NewAssignment(ctx *Context, name string, args AssignmentArgs, opts ...ResourceOption) (*Assignment, error)
public Assignment(string name, AssignmentArgs args, CustomResourceOptions? opts = null)
public Assignment(String name, AssignmentArgs args)
public Assignment(String name, AssignmentArgs args, CustomResourceOptions options)
type: azure-native:blueprint:Assignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args AssignmentArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AssignmentArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AssignmentArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AssignmentArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AssignmentArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var assignmentResource = new AzureNative.Blueprint.Assignment("assignmentResource", new()
{
Identity =
{
{ "type", "string" },
{ "principalId", "string" },
{ "tenantId", "string" },
{ "userAssignedIdentities",
{
{ "string",
{
{ "clientId", "string" },
{ "principalId", "string" },
} },
} },
},
Parameters =
{
{ "string",
{
{ "reference",
{
{ "keyVault",
{
{ "id", "string" },
} },
{ "secretName", "string" },
{ "secretVersion", "string" },
} },
{ "value", "any" },
} },
},
ResourceGroups =
{
{ "string",
{
{ "location", "string" },
{ "name", "string" },
} },
},
ResourceScope = "string",
AssignmentName = "string",
BlueprintId = "string",
Description = "string",
DisplayName = "string",
Location = "string",
Locks =
{
{ "excludedActions", new[]
{
"string",
} },
{ "excludedPrincipals", new[]
{
"string",
} },
{ "mode", "string" },
},
Scope = "string",
});
example, err := blueprint.NewAssignment(ctx, "assignmentResource", &blueprint.AssignmentArgs{
Identity: map[string]interface{}{
"type": "string",
"principalId": "string",
"tenantId": "string",
"userAssignedIdentities": map[string]interface{}{
"string": map[string]interface{}{
"clientId": "string",
"principalId": "string",
},
},
},
Parameters: map[string]interface{}{
"string": map[string]interface{}{
"reference": map[string]interface{}{
"keyVault": map[string]interface{}{
"id": "string",
},
"secretName": "string",
"secretVersion": "string",
},
"value": "any",
},
},
ResourceGroups: map[string]interface{}{
"string": map[string]interface{}{
"location": "string",
"name": "string",
},
},
ResourceScope: "string",
AssignmentName: "string",
BlueprintId: "string",
Description: "string",
DisplayName: "string",
Location: "string",
Locks: map[string]interface{}{
"excludedActions": []string{
"string",
},
"excludedPrincipals": []string{
"string",
},
"mode": "string",
},
Scope: "string",
})
var assignmentResource = new Assignment("assignmentResource", AssignmentArgs.builder()
.identity(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.parameters(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.resourceGroups(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.resourceScope("string")
.assignmentName("string")
.blueprintId("string")
.description("string")
.displayName("string")
.location("string")
.locks(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.scope("string")
.build());
assignment_resource = azure_native.blueprint.Assignment("assignmentResource",
identity={
type: string,
principalId: string,
tenantId: string,
userAssignedIdentities: {
string: {
clientId: string,
principalId: string,
},
},
},
parameters={
string: {
reference: {
keyVault: {
id: string,
},
secretName: string,
secretVersion: string,
},
value: any,
},
},
resource_groups={
string: {
location: string,
name: string,
},
},
resource_scope=string,
assignment_name=string,
blueprint_id=string,
description=string,
display_name=string,
location=string,
locks={
excludedActions: [string],
excludedPrincipals: [string],
mode: string,
},
scope=string)
const assignmentResource = new azure_native.blueprint.Assignment("assignmentResource", {
identity: {
type: "string",
principalId: "string",
tenantId: "string",
userAssignedIdentities: {
string: {
clientId: "string",
principalId: "string",
},
},
},
parameters: {
string: {
reference: {
keyVault: {
id: "string",
},
secretName: "string",
secretVersion: "string",
},
value: "any",
},
},
resourceGroups: {
string: {
location: "string",
name: "string",
},
},
resourceScope: "string",
assignmentName: "string",
blueprintId: "string",
description: "string",
displayName: "string",
location: "string",
locks: {
excludedActions: ["string"],
excludedPrincipals: ["string"],
mode: "string",
},
scope: "string",
});
type: azure-native:blueprint:Assignment
properties:
assignmentName: string
blueprintId: string
description: string
displayName: string
identity:
principalId: string
tenantId: string
type: string
userAssignedIdentities:
string:
clientId: string
principalId: string
location: string
locks:
excludedActions:
- string
excludedPrincipals:
- string
mode: string
parameters:
string:
reference:
keyVault:
id: string
secretName: string
secretVersion: string
value: any
resourceGroups:
string:
location: string
name: string
resourceScope: string
scope: string
Assignment Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Assignment resource accepts the following input properties:
- Identity
Pulumi.
Azure Native. Blueprint. Inputs. Managed Service Identity - Managed identity for this blueprint assignment.
- Parameters
Dictionary<string, Pulumi.
Azure Native. Blueprint. Inputs. Parameter Value Args> - Blueprint assignment parameter values.
- Resource
Groups Dictionary<string, Pulumi.Azure Native. Blueprint. Inputs. Resource Group Value Args> - Names and locations of resource group placeholders.
- Resource
Scope string - The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
- Assignment
Name string - Name of the blueprint assignment.
- Blueprint
Id string - ID of the published version of a blueprint definition.
- Description string
- Multi-line explain this resource.
- Display
Name string - One-liner string explain this resource.
- Location string
- The location of this blueprint assignment.
- Locks
Pulumi.
Azure Native. Blueprint. Inputs. Assignment Lock Settings - Defines how resources deployed by a blueprint assignment are locked.
- Scope string
- The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
- Identity
Managed
Service Identity Args - Managed identity for this blueprint assignment.
- Parameters
map[string]Parameter
Value Args - Blueprint assignment parameter values.
- Resource
Groups map[string]ResourceGroup Value Args - Names and locations of resource group placeholders.
- Resource
Scope string - The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
- Assignment
Name string - Name of the blueprint assignment.
- Blueprint
Id string - ID of the published version of a blueprint definition.
- Description string
- Multi-line explain this resource.
- Display
Name string - One-liner string explain this resource.
- Location string
- The location of this blueprint assignment.
- Locks
Assignment
Lock Settings Args - Defines how resources deployed by a blueprint assignment are locked.
- Scope string
- The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
- identity
Managed
Service Identity - Managed identity for this blueprint assignment.
- parameters
Map<String,Parameter
Value Args> - Blueprint assignment parameter values.
- resource
Groups Map<String,ResourceGroup Value Args> - Names and locations of resource group placeholders.
- resource
Scope String - The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
- assignment
Name String - Name of the blueprint assignment.
- blueprint
Id String - ID of the published version of a blueprint definition.
- description String
- Multi-line explain this resource.
- display
Name String - One-liner string explain this resource.
- location String
- The location of this blueprint assignment.
- locks
Assignment
Lock Settings - Defines how resources deployed by a blueprint assignment are locked.
- scope String
- The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
- identity
Managed
Service Identity - Managed identity for this blueprint assignment.
- parameters
{[key: string]: Parameter
Value Args} - Blueprint assignment parameter values.
- resource
Groups {[key: string]: ResourceGroup Value Args} - Names and locations of resource group placeholders.
- resource
Scope string - The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
- assignment
Name string - Name of the blueprint assignment.
- blueprint
Id string - ID of the published version of a blueprint definition.
- description string
- Multi-line explain this resource.
- display
Name string - One-liner string explain this resource.
- location string
- The location of this blueprint assignment.
- locks
Assignment
Lock Settings - Defines how resources deployed by a blueprint assignment are locked.
- scope string
- The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
- identity
Managed
Service Identity Args - Managed identity for this blueprint assignment.
- parameters
Mapping[str, Parameter
Value Args] - Blueprint assignment parameter values.
- resource_
groups Mapping[str, ResourceGroup Value Args] - Names and locations of resource group placeholders.
- resource_
scope str - The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
- assignment_
name str - Name of the blueprint assignment.
- blueprint_
id str - ID of the published version of a blueprint definition.
- description str
- Multi-line explain this resource.
- display_
name str - One-liner string explain this resource.
- location str
- The location of this blueprint assignment.
- locks
Assignment
Lock Settings Args - Defines how resources deployed by a blueprint assignment are locked.
- scope str
- The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
- identity Property Map
- Managed identity for this blueprint assignment.
- parameters Map<Property Map>
- Blueprint assignment parameter values.
- resource
Groups Map<Property Map> - Names and locations of resource group placeholders.
- resource
Scope String - The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
- assignment
Name String - Name of the blueprint assignment.
- blueprint
Id String - ID of the published version of a blueprint definition.
- description String
- Multi-line explain this resource.
- display
Name String - One-liner string explain this resource.
- location String
- The location of this blueprint assignment.
- locks Property Map
- Defines how resources deployed by a blueprint assignment are locked.
- scope String
- The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
Outputs
All input properties are implicitly available as output properties. Additionally, the Assignment resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Name of this resource.
- Provisioning
State string - State of the blueprint assignment.
- Status
Pulumi.
Azure Native. Blueprint. Outputs. Assignment Status Response - Status of blueprint assignment. This field is readonly.
- Type string
- Type of this resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Name of this resource.
- Provisioning
State string - State of the blueprint assignment.
- Status
Assignment
Status Response - Status of blueprint assignment. This field is readonly.
- Type string
- Type of this resource.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Name of this resource.
- provisioning
State String - State of the blueprint assignment.
- status
Assignment
Status Response - Status of blueprint assignment. This field is readonly.
- type String
- Type of this resource.
- id string
- The provider-assigned unique ID for this managed resource.
- name string
- Name of this resource.
- provisioning
State string - State of the blueprint assignment.
- status
Assignment
Status Response - Status of blueprint assignment. This field is readonly.
- type string
- Type of this resource.
- id str
- The provider-assigned unique ID for this managed resource.
- name str
- Name of this resource.
- provisioning_
state str - State of the blueprint assignment.
- status
Assignment
Status Response - Status of blueprint assignment. This field is readonly.
- type str
- Type of this resource.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Name of this resource.
- provisioning
State String - State of the blueprint assignment.
- status Property Map
- Status of blueprint assignment. This field is readonly.
- type String
- Type of this resource.
Supporting Types
AssignmentLockMode, AssignmentLockModeArgs
- None
- None
- All
Resources Read Only - AllResourcesReadOnly
- All
Resources Do Not Delete - AllResourcesDoNotDelete
- Assignment
Lock Mode None - None
- Assignment
Lock Mode All Resources Read Only - AllResourcesReadOnly
- Assignment
Lock Mode All Resources Do Not Delete - AllResourcesDoNotDelete
- None
- None
- All
Resources Read Only - AllResourcesReadOnly
- All
Resources Do Not Delete - AllResourcesDoNotDelete
- None
- None
- All
Resources Read Only - AllResourcesReadOnly
- All
Resources Do Not Delete - AllResourcesDoNotDelete
- NONE
- None
- ALL_RESOURCES_READ_ONLY
- AllResourcesReadOnly
- ALL_RESOURCES_DO_NOT_DELETE
- AllResourcesDoNotDelete
- "None"
- None
- "All
Resources Read Only" - AllResourcesReadOnly
- "All
Resources Do Not Delete" - AllResourcesDoNotDelete
AssignmentLockSettings, AssignmentLockSettingsArgs
- Excluded
Actions List<string> - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- Excluded
Principals List<string> - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- Mode
string | Pulumi.
Azure Native. Blueprint. Assignment Lock Mode - Lock mode.
- Excluded
Actions []string - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- Excluded
Principals []string - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- Mode
string | Assignment
Lock Mode - Lock mode.
- excluded
Actions List<String> - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- excluded
Principals List<String> - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- mode
String | Assignment
Lock Mode - Lock mode.
- excluded
Actions string[] - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- excluded
Principals string[] - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- mode
string | Assignment
Lock Mode - Lock mode.
- excluded_
actions Sequence[str] - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- excluded_
principals Sequence[str] - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- mode
str | Assignment
Lock Mode - Lock mode.
- excluded
Actions List<String> - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- excluded
Principals List<String> - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- mode
String | "None" | "All
Resources Read Only" | "All Resources Do Not Delete" - Lock mode.
AssignmentLockSettingsResponse, AssignmentLockSettingsResponseArgs
- Excluded
Actions List<string> - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- Excluded
Principals List<string> - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- Mode string
- Lock mode.
- Excluded
Actions []string - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- Excluded
Principals []string - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- Mode string
- Lock mode.
- excluded
Actions List<String> - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- excluded
Principals List<String> - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- mode String
- Lock mode.
- excluded
Actions string[] - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- excluded
Principals string[] - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- mode string
- Lock mode.
- excluded_
actions Sequence[str] - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- excluded_
principals Sequence[str] - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- mode str
- Lock mode.
- excluded
Actions List<String> - List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
- excluded
Principals List<String> - List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
- mode String
- Lock mode.
AssignmentStatusResponse, AssignmentStatusResponseArgs
- Last
Modified string - Last modified time of this blueprint definition.
- Managed
Resources List<string> - List of resources that were created by the blueprint assignment.
- Time
Created string - Creation time of this blueprint definition.
- Last
Modified string - Last modified time of this blueprint definition.
- Managed
Resources []string - List of resources that were created by the blueprint assignment.
- Time
Created string - Creation time of this blueprint definition.
- last
Modified String - Last modified time of this blueprint definition.
- managed
Resources List<String> - List of resources that were created by the blueprint assignment.
- time
Created String - Creation time of this blueprint definition.
- last
Modified string - Last modified time of this blueprint definition.
- managed
Resources string[] - List of resources that were created by the blueprint assignment.
- time
Created string - Creation time of this blueprint definition.
- last_
modified str - Last modified time of this blueprint definition.
- managed_
resources Sequence[str] - List of resources that were created by the blueprint assignment.
- time_
created str - Creation time of this blueprint definition.
- last
Modified String - Last modified time of this blueprint definition.
- managed
Resources List<String> - List of resources that were created by the blueprint assignment.
- time
Created String - Creation time of this blueprint definition.
KeyVaultReference, KeyVaultReferenceArgs
- Id string
- Azure resource ID of the Key Vault.
- Id string
- Azure resource ID of the Key Vault.
- id String
- Azure resource ID of the Key Vault.
- id string
- Azure resource ID of the Key Vault.
- id str
- Azure resource ID of the Key Vault.
- id String
- Azure resource ID of the Key Vault.
KeyVaultReferenceResponse, KeyVaultReferenceResponseArgs
- Id string
- Azure resource ID of the Key Vault.
- Id string
- Azure resource ID of the Key Vault.
- id String
- Azure resource ID of the Key Vault.
- id string
- Azure resource ID of the Key Vault.
- id str
- Azure resource ID of the Key Vault.
- id String
- Azure resource ID of the Key Vault.
ManagedServiceIdentity, ManagedServiceIdentityArgs
- Type
string | Pulumi.
Azure Native. Blueprint. Managed Service Identity Type - Type of the managed identity.
- Principal
Id string - Azure Active Directory principal ID associated with this Identity.
- Tenant
Id string - ID of the Azure Active Directory.
- User
Assigned Dictionary<string, Pulumi.Identities Azure Native. Blueprint. Inputs. User Assigned Identity> - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- Type
string | Managed
Service Identity Type - Type of the managed identity.
- Principal
Id string - Azure Active Directory principal ID associated with this Identity.
- Tenant
Id string - ID of the Azure Active Directory.
- User
Assigned map[string]UserIdentities Assigned Identity - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- type
String | Managed
Service Identity Type - Type of the managed identity.
- principal
Id String - Azure Active Directory principal ID associated with this Identity.
- tenant
Id String - ID of the Azure Active Directory.
- user
Assigned Map<String,UserIdentities Assigned Identity> - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- type
string | Managed
Service Identity Type - Type of the managed identity.
- principal
Id string - Azure Active Directory principal ID associated with this Identity.
- tenant
Id string - ID of the Azure Active Directory.
- user
Assigned {[key: string]: UserIdentities Assigned Identity} - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- type
str | Managed
Service Identity Type - Type of the managed identity.
- principal_
id str - Azure Active Directory principal ID associated with this Identity.
- tenant_
id str - ID of the Azure Active Directory.
- user_
assigned_ Mapping[str, Useridentities Assigned Identity] - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- type
String | "None" | "System
Assigned" | "User Assigned" - Type of the managed identity.
- principal
Id String - Azure Active Directory principal ID associated with this Identity.
- tenant
Id String - ID of the Azure Active Directory.
- user
Assigned Map<Property Map>Identities - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
ManagedServiceIdentityResponse, ManagedServiceIdentityResponseArgs
- Type string
- Type of the managed identity.
- Principal
Id string - Azure Active Directory principal ID associated with this Identity.
- Tenant
Id string - ID of the Azure Active Directory.
- User
Assigned Dictionary<string, Pulumi.Identities Azure Native. Blueprint. Inputs. User Assigned Identity Response> - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- Type string
- Type of the managed identity.
- Principal
Id string - Azure Active Directory principal ID associated with this Identity.
- Tenant
Id string - ID of the Azure Active Directory.
- User
Assigned map[string]UserIdentities Assigned Identity Response - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- type String
- Type of the managed identity.
- principal
Id String - Azure Active Directory principal ID associated with this Identity.
- tenant
Id String - ID of the Azure Active Directory.
- user
Assigned Map<String,UserIdentities Assigned Identity Response> - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- type string
- Type of the managed identity.
- principal
Id string - Azure Active Directory principal ID associated with this Identity.
- tenant
Id string - ID of the Azure Active Directory.
- user
Assigned {[key: string]: UserIdentities Assigned Identity Response} - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- type str
- Type of the managed identity.
- principal_
id str - Azure Active Directory principal ID associated with this Identity.
- tenant_
id str - ID of the Azure Active Directory.
- user_
assigned_ Mapping[str, Useridentities Assigned Identity Response] - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
- type String
- Type of the managed identity.
- principal
Id String - Azure Active Directory principal ID associated with this Identity.
- tenant
Id String - ID of the Azure Active Directory.
- user
Assigned Map<Property Map>Identities - The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
ManagedServiceIdentityType, ManagedServiceIdentityTypeArgs
- None
- None
- System
Assigned - SystemAssigned
- User
Assigned - UserAssigned
- Managed
Service Identity Type None - None
- Managed
Service Identity Type System Assigned - SystemAssigned
- Managed
Service Identity Type User Assigned - UserAssigned
- None
- None
- System
Assigned - SystemAssigned
- User
Assigned - UserAssigned
- None
- None
- System
Assigned - SystemAssigned
- User
Assigned - UserAssigned
- NONE
- None
- SYSTEM_ASSIGNED
- SystemAssigned
- USER_ASSIGNED
- UserAssigned
- "None"
- None
- "System
Assigned" - SystemAssigned
- "User
Assigned" - UserAssigned
ParameterValue, ParameterValueArgs
- Reference
Pulumi.
Azure Native. Blueprint. Inputs. Secret Value Reference - Parameter value as reference type.
- Value object
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- Reference
Secret
Value Reference - Parameter value as reference type.
- Value interface{}
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- reference
Secret
Value Reference - Parameter value as reference type.
- value Object
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- reference
Secret
Value Reference - Parameter value as reference type.
- value any
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- reference
Secret
Value Reference - Parameter value as reference type.
- value Any
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- reference Property Map
- Parameter value as reference type.
- value Any
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
ParameterValueResponse, ParameterValueResponseArgs
- Reference
Pulumi.
Azure Native. Blueprint. Inputs. Secret Value Reference Response - Parameter value as reference type.
- Value object
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- Reference
Secret
Value Reference Response - Parameter value as reference type.
- Value interface{}
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- reference
Secret
Value Reference Response - Parameter value as reference type.
- value Object
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- reference
Secret
Value Reference Response - Parameter value as reference type.
- value any
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- reference
Secret
Value Reference Response - Parameter value as reference type.
- value Any
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
- reference Property Map
- Parameter value as reference type.
- value Any
- Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
ResourceGroupValue, ResourceGroupValueArgs
ResourceGroupValueResponse, ResourceGroupValueResponseArgs
SecretValueReference, SecretValueReferenceArgs
- Key
Vault Pulumi.Azure Native. Blueprint. Inputs. Key Vault Reference - Specifies the reference to a given Azure Key Vault.
- Secret
Name string - Name of the secret.
- Secret
Version string - The version of the secret to use. If left blank, the latest version of the secret is used.
- Key
Vault KeyVault Reference - Specifies the reference to a given Azure Key Vault.
- Secret
Name string - Name of the secret.
- Secret
Version string - The version of the secret to use. If left blank, the latest version of the secret is used.
- key
Vault KeyVault Reference - Specifies the reference to a given Azure Key Vault.
- secret
Name String - Name of the secret.
- secret
Version String - The version of the secret to use. If left blank, the latest version of the secret is used.
- key
Vault KeyVault Reference - Specifies the reference to a given Azure Key Vault.
- secret
Name string - Name of the secret.
- secret
Version string - The version of the secret to use. If left blank, the latest version of the secret is used.
- key_
vault KeyVault Reference - Specifies the reference to a given Azure Key Vault.
- secret_
name str - Name of the secret.
- secret_
version str - The version of the secret to use. If left blank, the latest version of the secret is used.
- key
Vault Property Map - Specifies the reference to a given Azure Key Vault.
- secret
Name String - Name of the secret.
- secret
Version String - The version of the secret to use. If left blank, the latest version of the secret is used.
SecretValueReferenceResponse, SecretValueReferenceResponseArgs
- Key
Vault Pulumi.Azure Native. Blueprint. Inputs. Key Vault Reference Response - Specifies the reference to a given Azure Key Vault.
- Secret
Name string - Name of the secret.
- Secret
Version string - The version of the secret to use. If left blank, the latest version of the secret is used.
- Key
Vault KeyVault Reference Response - Specifies the reference to a given Azure Key Vault.
- Secret
Name string - Name of the secret.
- Secret
Version string - The version of the secret to use. If left blank, the latest version of the secret is used.
- key
Vault KeyVault Reference Response - Specifies the reference to a given Azure Key Vault.
- secret
Name String - Name of the secret.
- secret
Version String - The version of the secret to use. If left blank, the latest version of the secret is used.
- key
Vault KeyVault Reference Response - Specifies the reference to a given Azure Key Vault.
- secret
Name string - Name of the secret.
- secret
Version string - The version of the secret to use. If left blank, the latest version of the secret is used.
- key_
vault KeyVault Reference Response - Specifies the reference to a given Azure Key Vault.
- secret_
name str - Name of the secret.
- secret_
version str - The version of the secret to use. If left blank, the latest version of the secret is used.
- key
Vault Property Map - Specifies the reference to a given Azure Key Vault.
- secret
Name String - Name of the secret.
- secret
Version String - The version of the secret to use. If left blank, the latest version of the secret is used.
UserAssignedIdentity, UserAssignedIdentityArgs
- Client
Id string - Client App Id associated with this identity.
- Principal
Id string - Azure Active Directory principal ID associated with this Identity.
- Client
Id string - Client App Id associated with this identity.
- Principal
Id string - Azure Active Directory principal ID associated with this Identity.
- client
Id String - Client App Id associated with this identity.
- principal
Id String - Azure Active Directory principal ID associated with this Identity.
- client
Id string - Client App Id associated with this identity.
- principal
Id string - Azure Active Directory principal ID associated with this Identity.
- client_
id str - Client App Id associated with this identity.
- principal_
id str - Azure Active Directory principal ID associated with this Identity.
- client
Id String - Client App Id associated with this identity.
- principal
Id String - Azure Active Directory principal ID associated with this Identity.
UserAssignedIdentityResponse, UserAssignedIdentityResponseArgs
- Client
Id string - Client App Id associated with this identity.
- Principal
Id string - Azure Active Directory principal ID associated with this Identity.
- Client
Id string - Client App Id associated with this identity.
- Principal
Id string - Azure Active Directory principal ID associated with this Identity.
- client
Id String - Client App Id associated with this identity.
- principal
Id String - Azure Active Directory principal ID associated with this Identity.
- client
Id string - Client App Id associated with this identity.
- principal
Id string - Azure Active Directory principal ID associated with this Identity.
- client_
id str - Client App Id associated with this identity.
- principal_
id str - Azure Active Directory principal ID associated with this Identity.
- client
Id String - Client App Id associated with this identity.
- principal
Id String - Azure Active Directory principal ID associated with this Identity.
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:blueprint:Assignment assignSimpleBlueprint /subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Blueprint/blueprintAssignments/assignSimpleBlueprint
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- azure-native-v1 pulumi/pulumi-azure-native
- License
- Apache-2.0