Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Lacework Provider
  3. API Docs
  4. ReportRule
lacework 2.0.6 published on Monday, Apr 14, 2025 by lacework
lacework/terraform-provider-lacework

lacework.ReportRule

Explore with Pulumi AI

lacework 2.0.6 published on Monday, Apr 14, 2025 by lacework
lacework/terraform-provider-lacework

Use this resource to create a Lacework Report Rule in order to route reports to one or more email alert channels. For more information, see the Report Rules documentation.

Example Usage

Create ReportRule Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ReportRule(name: string, args: ReportRuleArgs, opts?: CustomResourceOptions);
@overload
def ReportRule(resource_name: str,
               args: ReportRuleArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def ReportRule(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               email_alert_channels: Optional[Sequence[str]] = None,
               severities: Optional[Sequence[str]] = None,
               aws_compliance_reports: Optional[ReportRuleAwsComplianceReportsArgs] = None,
               azure_compliance_reports: Optional[ReportRuleAzureComplianceReportsArgs] = None,
               daily_compliance_reports: Optional[ReportRuleDailyComplianceReportsArgs] = None,
               description: Optional[str] = None,
               enabled: Optional[bool] = None,
               gcp_compliance_reports: Optional[ReportRuleGcpComplianceReportsArgs] = None,
               name: Optional[str] = None,
               report_rule_id: Optional[str] = None,
               resource_groups: Optional[Sequence[str]] = None,
               weekly_snapshot: Optional[bool] = None)
func NewReportRule(ctx *Context, name string, args ReportRuleArgs, opts ...ResourceOption) (*ReportRule, error)
public ReportRule(string name, ReportRuleArgs args, CustomResourceOptions? opts = null)
public ReportRule(String name, ReportRuleArgs args)
public ReportRule(String name, ReportRuleArgs args, CustomResourceOptions options)

type: lacework:ReportRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. ReportRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. ReportRuleArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. ReportRuleArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. ReportRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ReportRuleArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var reportRuleResource = new Lacework.ReportRule("reportRuleResource", new()
{
    EmailAlertChannels = new[]
    {
        "string",
    },
    Severities = new[]
    {
        "string",
    },
    AwsComplianceReports = new Lacework.Inputs.ReportRuleAwsComplianceReportsArgs
    {
        CisS3 = false,
        Hipaa = false,
        Iso2700 = false,
        Nist800171Rev2 = false,
        Nist80053Rev4 = false,
        Pci = false,
        Soc = false,
        SocRev2 = false,
    },
    AzureComplianceReports = new Lacework.Inputs.ReportRuleAzureComplianceReportsArgs
    {
        Cis = false,
        Cis131 = false,
        Pci = false,
        Soc = false,
    },
    DailyComplianceReports = new Lacework.Inputs.ReportRuleDailyComplianceReportsArgs
    {
        AwsCloudtrail = false,
        AwsCompliance = false,
        AzureActivityLog = false,
        AzureCompliance = false,
        GcpAuditTrail = false,
        GcpCompliance = false,
        HostSecurity = false,
        OpenshiftCompliance = false,
        OpenshiftComplianceEvents = false,
        Platform = false,
    },
    Description = "string",
    Enabled = false,
    GcpComplianceReports = new Lacework.Inputs.ReportRuleGcpComplianceReportsArgs
    {
        Cis = false,
        Cis12 = false,
        Hipaa = false,
        HipaaRev2 = false,
        Iso27001 = false,
        K8s = false,
        Pci = false,
        PciRev2 = false,
        Soc = false,
        SocRev2 = false,
    },
    Name = "string",
    ReportRuleId = "string",
    ResourceGroups = new[]
    {
        "string",
    },
    WeeklySnapshot = false,
});
Copy
example, err := lacework.NewReportRule(ctx, "reportRuleResource", &lacework.ReportRuleArgs{
EmailAlertChannels: pulumi.StringArray{
pulumi.String("string"),
},
Severities: pulumi.StringArray{
pulumi.String("string"),
},
AwsComplianceReports: &.ReportRuleAwsComplianceReportsArgs{
CisS3: pulumi.Bool(false),
Hipaa: pulumi.Bool(false),
Iso2700: pulumi.Bool(false),
Nist800171Rev2: pulumi.Bool(false),
Nist80053Rev4: pulumi.Bool(false),
Pci: pulumi.Bool(false),
Soc: pulumi.Bool(false),
SocRev2: pulumi.Bool(false),
},
AzureComplianceReports: &.ReportRuleAzureComplianceReportsArgs{
Cis: pulumi.Bool(false),
Cis131: pulumi.Bool(false),
Pci: pulumi.Bool(false),
Soc: pulumi.Bool(false),
},
DailyComplianceReports: &.ReportRuleDailyComplianceReportsArgs{
AwsCloudtrail: pulumi.Bool(false),
AwsCompliance: pulumi.Bool(false),
AzureActivityLog: pulumi.Bool(false),
AzureCompliance: pulumi.Bool(false),
GcpAuditTrail: pulumi.Bool(false),
GcpCompliance: pulumi.Bool(false),
HostSecurity: pulumi.Bool(false),
OpenshiftCompliance: pulumi.Bool(false),
OpenshiftComplianceEvents: pulumi.Bool(false),
Platform: pulumi.Bool(false),
},
Description: pulumi.String("string"),
Enabled: pulumi.Bool(false),
GcpComplianceReports: &.ReportRuleGcpComplianceReportsArgs{
Cis: pulumi.Bool(false),
Cis12: pulumi.Bool(false),
Hipaa: pulumi.Bool(false),
HipaaRev2: pulumi.Bool(false),
Iso27001: pulumi.Bool(false),
K8s: pulumi.Bool(false),
Pci: pulumi.Bool(false),
PciRev2: pulumi.Bool(false),
Soc: pulumi.Bool(false),
SocRev2: pulumi.Bool(false),
},
Name: pulumi.String("string"),
ReportRuleId: pulumi.String("string"),
ResourceGroups: pulumi.StringArray{
pulumi.String("string"),
},
WeeklySnapshot: pulumi.Bool(false),
})
Copy
var reportRuleResource = new ReportRule("reportRuleResource", ReportRuleArgs.builder()
    .emailAlertChannels("string")
    .severities("string")
    .awsComplianceReports(ReportRuleAwsComplianceReportsArgs.builder()
        .cisS3(false)
        .hipaa(false)
        .iso2700(false)
        .nist800171Rev2(false)
        .nist80053Rev4(false)
        .pci(false)
        .soc(false)
        .socRev2(false)
        .build())
    .azureComplianceReports(ReportRuleAzureComplianceReportsArgs.builder()
        .cis(false)
        .cis131(false)
        .pci(false)
        .soc(false)
        .build())
    .dailyComplianceReports(ReportRuleDailyComplianceReportsArgs.builder()
        .awsCloudtrail(false)
        .awsCompliance(false)
        .azureActivityLog(false)
        .azureCompliance(false)
        .gcpAuditTrail(false)
        .gcpCompliance(false)
        .hostSecurity(false)
        .openshiftCompliance(false)
        .openshiftComplianceEvents(false)
        .platform(false)
        .build())
    .description("string")
    .enabled(false)
    .gcpComplianceReports(ReportRuleGcpComplianceReportsArgs.builder()
        .cis(false)
        .cis12(false)
        .hipaa(false)
        .hipaaRev2(false)
        .iso27001(false)
        .k8s(false)
        .pci(false)
        .pciRev2(false)
        .soc(false)
        .socRev2(false)
        .build())
    .name("string")
    .reportRuleId("string")
    .resourceGroups("string")
    .weeklySnapshot(false)
    .build());
Copy
report_rule_resource = lacework.ReportRule("reportRuleResource",
    email_alert_channels=["string"],
    severities=["string"],
    aws_compliance_reports={
        "cis_s3": False,
        "hipaa": False,
        "iso2700": False,
        "nist800171_rev2": False,
        "nist80053_rev4": False,
        "pci": False,
        "soc": False,
        "soc_rev2": False,
    },
    azure_compliance_reports={
        "cis": False,
        "cis131": False,
        "pci": False,
        "soc": False,
    },
    daily_compliance_reports={
        "aws_cloudtrail": False,
        "aws_compliance": False,
        "azure_activity_log": False,
        "azure_compliance": False,
        "gcp_audit_trail": False,
        "gcp_compliance": False,
        "host_security": False,
        "openshift_compliance": False,
        "openshift_compliance_events": False,
        "platform": False,
    },
    description="string",
    enabled=False,
    gcp_compliance_reports={
        "cis": False,
        "cis12": False,
        "hipaa": False,
        "hipaa_rev2": False,
        "iso27001": False,
        "k8s": False,
        "pci": False,
        "pci_rev2": False,
        "soc": False,
        "soc_rev2": False,
    },
    name="string",
    report_rule_id="string",
    resource_groups=["string"],
    weekly_snapshot=False)
Copy
const reportRuleResource = new lacework.ReportRule("reportRuleResource", {
    emailAlertChannels: ["string"],
    severities: ["string"],
    awsComplianceReports: {
        cisS3: false,
        hipaa: false,
        iso2700: false,
        nist800171Rev2: false,
        nist80053Rev4: false,
        pci: false,
        soc: false,
        socRev2: false,
    },
    azureComplianceReports: {
        cis: false,
        cis131: false,
        pci: false,
        soc: false,
    },
    dailyComplianceReports: {
        awsCloudtrail: false,
        awsCompliance: false,
        azureActivityLog: false,
        azureCompliance: false,
        gcpAuditTrail: false,
        gcpCompliance: false,
        hostSecurity: false,
        openshiftCompliance: false,
        openshiftComplianceEvents: false,
        platform: false,
    },
    description: "string",
    enabled: false,
    gcpComplianceReports: {
        cis: false,
        cis12: false,
        hipaa: false,
        hipaaRev2: false,
        iso27001: false,
        k8s: false,
        pci: false,
        pciRev2: false,
        soc: false,
        socRev2: false,
    },
    name: "string",
    reportRuleId: "string",
    resourceGroups: ["string"],
    weeklySnapshot: false,
});
Copy
type: lacework:ReportRule
properties:
    awsComplianceReports:
        cisS3: false
        hipaa: false
        iso2700: false
        nist80053Rev4: false
        nist800171Rev2: false
        pci: false
        soc: false
        socRev2: false
    azureComplianceReports:
        cis: false
        cis131: false
        pci: false
        soc: false
    dailyComplianceReports:
        awsCloudtrail: false
        awsCompliance: false
        azureActivityLog: false
        azureCompliance: false
        gcpAuditTrail: false
        gcpCompliance: false
        hostSecurity: false
        openshiftCompliance: false
        openshiftComplianceEvents: false
        platform: false
    description: string
    emailAlertChannels:
        - string
    enabled: false
    gcpComplianceReports:
        cis: false
        cis12: false
        hipaa: false
        hipaaRev2: false
        iso27001: false
        k8s: false
        pci: false
        pciRev2: false
        soc: false
        socRev2: false
    name: string
    reportRuleId: string
    resourceGroups:
        - string
    severities:
        - string
    weeklySnapshot: false
Copy

ReportRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ReportRule resource accepts the following input properties:

EmailAlertChannels This property is required. List<string>
The list of email alert channels for the rule to use.
Severities This property is required. List<string>
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
AwsComplianceReports ReportRuleAwsComplianceReports
Compliance reports for Aws. See Aws Compliance Reports below for details.
AzureComplianceReports ReportRuleAzureComplianceReports
Compliance reports for Azure. See Azure Compliance Reports below for details.
DailyComplianceReports ReportRuleDailyComplianceReports
Daily event summary reports. See Daily Compliance Reports below for details.
Description string
The description of the report rule.
Enabled bool
The state of the external integration. Defaults to true.
GcpComplianceReports ReportRuleGcpComplianceReports
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
Name string
The report rule name.
ReportRuleId string
ResourceGroups List<string>
The list of resource groups the rule will apply to.
WeeklySnapshot bool
A weekly compliance trend report for all monitored resources. Defaults to false.
EmailAlertChannels This property is required. []string
The list of email alert channels for the rule to use.
Severities This property is required. []string
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
AwsComplianceReports ReportRuleAwsComplianceReportsArgs
Compliance reports for Aws. See Aws Compliance Reports below for details.
AzureComplianceReports ReportRuleAzureComplianceReportsArgs
Compliance reports for Azure. See Azure Compliance Reports below for details.
DailyComplianceReports ReportRuleDailyComplianceReportsArgs
Daily event summary reports. See Daily Compliance Reports below for details.
Description string
The description of the report rule.
Enabled bool
The state of the external integration. Defaults to true.
GcpComplianceReports ReportRuleGcpComplianceReportsArgs
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
Name string
The report rule name.
ReportRuleId string
ResourceGroups []string
The list of resource groups the rule will apply to.
WeeklySnapshot bool
A weekly compliance trend report for all monitored resources. Defaults to false.
emailAlertChannels This property is required. List<String>
The list of email alert channels for the rule to use.
severities This property is required. List<String>
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
awsComplianceReports ReportRuleAwsComplianceReports
Compliance reports for Aws. See Aws Compliance Reports below for details.
azureComplianceReports ReportRuleAzureComplianceReports
Compliance reports for Azure. See Azure Compliance Reports below for details.
dailyComplianceReports ReportRuleDailyComplianceReports
Daily event summary reports. See Daily Compliance Reports below for details.
description String
The description of the report rule.
enabled Boolean
The state of the external integration. Defaults to true.
gcpComplianceReports ReportRuleGcpComplianceReports
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
name String
The report rule name.
reportRuleId String
resourceGroups List<String>
The list of resource groups the rule will apply to.
weeklySnapshot Boolean
A weekly compliance trend report for all monitored resources. Defaults to false.
emailAlertChannels This property is required. string[]
The list of email alert channels for the rule to use.
severities This property is required. string[]
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
awsComplianceReports ReportRuleAwsComplianceReports
Compliance reports for Aws. See Aws Compliance Reports below for details.
azureComplianceReports ReportRuleAzureComplianceReports
Compliance reports for Azure. See Azure Compliance Reports below for details.
dailyComplianceReports ReportRuleDailyComplianceReports
Daily event summary reports. See Daily Compliance Reports below for details.
description string
The description of the report rule.
enabled boolean
The state of the external integration. Defaults to true.
gcpComplianceReports ReportRuleGcpComplianceReports
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
name string
The report rule name.
reportRuleId string
resourceGroups string[]
The list of resource groups the rule will apply to.
weeklySnapshot boolean
A weekly compliance trend report for all monitored resources. Defaults to false.
email_alert_channels This property is required. Sequence[str]
The list of email alert channels for the rule to use.
severities This property is required. Sequence[str]
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
aws_compliance_reports ReportRuleAwsComplianceReportsArgs
Compliance reports for Aws. See Aws Compliance Reports below for details.
azure_compliance_reports ReportRuleAzureComplianceReportsArgs
Compliance reports for Azure. See Azure Compliance Reports below for details.
daily_compliance_reports ReportRuleDailyComplianceReportsArgs
Daily event summary reports. See Daily Compliance Reports below for details.
description str
The description of the report rule.
enabled bool
The state of the external integration. Defaults to true.
gcp_compliance_reports ReportRuleGcpComplianceReportsArgs
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
name str
The report rule name.
report_rule_id str
resource_groups Sequence[str]
The list of resource groups the rule will apply to.
weekly_snapshot bool
A weekly compliance trend report for all monitored resources. Defaults to false.
emailAlertChannels This property is required. List<String>
The list of email alert channels for the rule to use.
severities This property is required. List<String>
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
awsComplianceReports Property Map
Compliance reports for Aws. See Aws Compliance Reports below for details.
azureComplianceReports Property Map
Compliance reports for Azure. See Azure Compliance Reports below for details.
dailyComplianceReports Property Map
Daily event summary reports. See Daily Compliance Reports below for details.
description String
The description of the report rule.
enabled Boolean
The state of the external integration. Defaults to true.
gcpComplianceReports Property Map
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
name String
The report rule name.
reportRuleId String
resourceGroups List<String>
The list of resource groups the rule will apply to.
weeklySnapshot Boolean
A weekly compliance trend report for all monitored resources. Defaults to false.

Outputs

All input properties are implicitly available as output properties. Additionally, the ReportRule resource produces the following output properties:

CreatedOrUpdatedBy string
CreatedOrUpdatedTime string
Guid string
Id string
The provider-assigned unique ID for this managed resource.
Type string
CreatedOrUpdatedBy string
CreatedOrUpdatedTime string
Guid string
Id string
The provider-assigned unique ID for this managed resource.
Type string
createdOrUpdatedBy String
createdOrUpdatedTime String
guid String
id String
The provider-assigned unique ID for this managed resource.
type String
createdOrUpdatedBy string
createdOrUpdatedTime string
guid string
id string
The provider-assigned unique ID for this managed resource.
type string
created_or_updated_by str
created_or_updated_time str
guid str
id str
The provider-assigned unique ID for this managed resource.
type str
createdOrUpdatedBy String
createdOrUpdatedTime String
guid String
id String
The provider-assigned unique ID for this managed resource.
type String

Look up Existing ReportRule Resource

Get an existing ReportRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ReportRuleState, opts?: CustomResourceOptions): ReportRule
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        aws_compliance_reports: Optional[ReportRuleAwsComplianceReportsArgs] = None,
        azure_compliance_reports: Optional[ReportRuleAzureComplianceReportsArgs] = None,
        created_or_updated_by: Optional[str] = None,
        created_or_updated_time: Optional[str] = None,
        daily_compliance_reports: Optional[ReportRuleDailyComplianceReportsArgs] = None,
        description: Optional[str] = None,
        email_alert_channels: Optional[Sequence[str]] = None,
        enabled: Optional[bool] = None,
        gcp_compliance_reports: Optional[ReportRuleGcpComplianceReportsArgs] = None,
        guid: Optional[str] = None,
        name: Optional[str] = None,
        report_rule_id: Optional[str] = None,
        resource_groups: Optional[Sequence[str]] = None,
        severities: Optional[Sequence[str]] = None,
        type: Optional[str] = None,
        weekly_snapshot: Optional[bool] = None) -> ReportRule
func GetReportRule(ctx *Context, name string, id IDInput, state *ReportRuleState, opts ...ResourceOption) (*ReportRule, error)
public static ReportRule Get(string name, Input<string> id, ReportRuleState? state, CustomResourceOptions? opts = null)
public static ReportRule get(String name, Output<String> id, ReportRuleState state, CustomResourceOptions options)
resources:  _:    type: lacework:ReportRule    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AwsComplianceReports ReportRuleAwsComplianceReports
Compliance reports for Aws. See Aws Compliance Reports below for details.
AzureComplianceReports ReportRuleAzureComplianceReports
Compliance reports for Azure. See Azure Compliance Reports below for details.
CreatedOrUpdatedBy string
CreatedOrUpdatedTime string
DailyComplianceReports ReportRuleDailyComplianceReports
Daily event summary reports. See Daily Compliance Reports below for details.
Description string
The description of the report rule.
EmailAlertChannels List<string>
The list of email alert channels for the rule to use.
Enabled bool
The state of the external integration. Defaults to true.
GcpComplianceReports ReportRuleGcpComplianceReports
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
Guid string
Name string
The report rule name.
ReportRuleId string
ResourceGroups List<string>
The list of resource groups the rule will apply to.
Severities List<string>
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
Type string
WeeklySnapshot bool
A weekly compliance trend report for all monitored resources. Defaults to false.
AwsComplianceReports ReportRuleAwsComplianceReportsArgs
Compliance reports for Aws. See Aws Compliance Reports below for details.
AzureComplianceReports ReportRuleAzureComplianceReportsArgs
Compliance reports for Azure. See Azure Compliance Reports below for details.
CreatedOrUpdatedBy string
CreatedOrUpdatedTime string
DailyComplianceReports ReportRuleDailyComplianceReportsArgs
Daily event summary reports. See Daily Compliance Reports below for details.
Description string
The description of the report rule.
EmailAlertChannels []string
The list of email alert channels for the rule to use.
Enabled bool
The state of the external integration. Defaults to true.
GcpComplianceReports ReportRuleGcpComplianceReportsArgs
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
Guid string
Name string
The report rule name.
ReportRuleId string
ResourceGroups []string
The list of resource groups the rule will apply to.
Severities []string
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
Type string
WeeklySnapshot bool
A weekly compliance trend report for all monitored resources. Defaults to false.
awsComplianceReports ReportRuleAwsComplianceReports
Compliance reports for Aws. See Aws Compliance Reports below for details.
azureComplianceReports ReportRuleAzureComplianceReports
Compliance reports for Azure. See Azure Compliance Reports below for details.
createdOrUpdatedBy String
createdOrUpdatedTime String
dailyComplianceReports ReportRuleDailyComplianceReports
Daily event summary reports. See Daily Compliance Reports below for details.
description String
The description of the report rule.
emailAlertChannels List<String>
The list of email alert channels for the rule to use.
enabled Boolean
The state of the external integration. Defaults to true.
gcpComplianceReports ReportRuleGcpComplianceReports
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
guid String
name String
The report rule name.
reportRuleId String
resourceGroups List<String>
The list of resource groups the rule will apply to.
severities List<String>
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
type String
weeklySnapshot Boolean
A weekly compliance trend report for all monitored resources. Defaults to false.
awsComplianceReports ReportRuleAwsComplianceReports
Compliance reports for Aws. See Aws Compliance Reports below for details.
azureComplianceReports ReportRuleAzureComplianceReports
Compliance reports for Azure. See Azure Compliance Reports below for details.
createdOrUpdatedBy string
createdOrUpdatedTime string
dailyComplianceReports ReportRuleDailyComplianceReports
Daily event summary reports. See Daily Compliance Reports below for details.
description string
The description of the report rule.
emailAlertChannels string[]
The list of email alert channels for the rule to use.
enabled boolean
The state of the external integration. Defaults to true.
gcpComplianceReports ReportRuleGcpComplianceReports
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
guid string
name string
The report rule name.
reportRuleId string
resourceGroups string[]
The list of resource groups the rule will apply to.
severities string[]
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
type string
weeklySnapshot boolean
A weekly compliance trend report for all monitored resources. Defaults to false.
aws_compliance_reports ReportRuleAwsComplianceReportsArgs
Compliance reports for Aws. See Aws Compliance Reports below for details.
azure_compliance_reports ReportRuleAzureComplianceReportsArgs
Compliance reports for Azure. See Azure Compliance Reports below for details.
created_or_updated_by str
created_or_updated_time str
daily_compliance_reports ReportRuleDailyComplianceReportsArgs
Daily event summary reports. See Daily Compliance Reports below for details.
description str
The description of the report rule.
email_alert_channels Sequence[str]
The list of email alert channels for the rule to use.
enabled bool
The state of the external integration. Defaults to true.
gcp_compliance_reports ReportRuleGcpComplianceReportsArgs
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
guid str
name str
The report rule name.
report_rule_id str
resource_groups Sequence[str]
The list of resource groups the rule will apply to.
severities Sequence[str]
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
type str
weekly_snapshot bool
A weekly compliance trend report for all monitored resources. Defaults to false.
awsComplianceReports Property Map
Compliance reports for Aws. See Aws Compliance Reports below for details.
azureComplianceReports Property Map
Compliance reports for Azure. See Azure Compliance Reports below for details.
createdOrUpdatedBy String
createdOrUpdatedTime String
dailyComplianceReports Property Map
Daily event summary reports. See Daily Compliance Reports below for details.
description String
The description of the report rule.
emailAlertChannels List<String>
The list of email alert channels for the rule to use.
enabled Boolean
The state of the external integration. Defaults to true.
gcpComplianceReports Property Map
Compliance reports for Gcp. See Gcp Compliance Reports below for details.
guid String
name String
The report rule name.
reportRuleId String
resourceGroups List<String>
The list of resource groups the rule will apply to.
severities List<String>
The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
type String
weeklySnapshot Boolean
A weekly compliance trend report for all monitored resources. Defaults to false.

Supporting Types

ReportRuleAwsComplianceReports
, ReportRuleAwsComplianceReportsArgs

CisS3 bool
AWS CIS Benchmark and S3 Report. Defaults to false.
Hipaa bool
AWS HIPAA Report. Defaults to false.
Iso2700 bool
AWS ISO 27001:2013 Report. Defaults to false.
Nist800171Rev2 bool
AWS NIST 800-171 Report. Defaults to false.
Nist80053Rev4 bool
AWS NIST 800-53 Report. Defaults to false.
Pci bool
AWS PCI DSS Report. Defaults to false.
Soc bool
AWS SOC 2 Report. Defaults to false.
SocRev2 bool
AWS SOC 2 Report Rev2. Defaults to false.
CisS3 bool
AWS CIS Benchmark and S3 Report. Defaults to false.
Hipaa bool
AWS HIPAA Report. Defaults to false.
Iso2700 bool
AWS ISO 27001:2013 Report. Defaults to false.
Nist800171Rev2 bool
AWS NIST 800-171 Report. Defaults to false.
Nist80053Rev4 bool
AWS NIST 800-53 Report. Defaults to false.
Pci bool
AWS PCI DSS Report. Defaults to false.
Soc bool
AWS SOC 2 Report. Defaults to false.
SocRev2 bool
AWS SOC 2 Report Rev2. Defaults to false.
cisS3 Boolean
AWS CIS Benchmark and S3 Report. Defaults to false.
hipaa Boolean
AWS HIPAA Report. Defaults to false.
iso2700 Boolean
AWS ISO 27001:2013 Report. Defaults to false.
nist800171Rev2 Boolean
AWS NIST 800-171 Report. Defaults to false.
nist80053Rev4 Boolean
AWS NIST 800-53 Report. Defaults to false.
pci Boolean
AWS PCI DSS Report. Defaults to false.
soc Boolean
AWS SOC 2 Report. Defaults to false.
socRev2 Boolean
AWS SOC 2 Report Rev2. Defaults to false.
cisS3 boolean
AWS CIS Benchmark and S3 Report. Defaults to false.
hipaa boolean
AWS HIPAA Report. Defaults to false.
iso2700 boolean
AWS ISO 27001:2013 Report. Defaults to false.
nist800171Rev2 boolean
AWS NIST 800-171 Report. Defaults to false.
nist80053Rev4 boolean
AWS NIST 800-53 Report. Defaults to false.
pci boolean
AWS PCI DSS Report. Defaults to false.
soc boolean
AWS SOC 2 Report. Defaults to false.
socRev2 boolean
AWS SOC 2 Report Rev2. Defaults to false.
cis_s3 bool
AWS CIS Benchmark and S3 Report. Defaults to false.
hipaa bool
AWS HIPAA Report. Defaults to false.
iso2700 bool
AWS ISO 27001:2013 Report. Defaults to false.
nist800171_rev2 bool
AWS NIST 800-171 Report. Defaults to false.
nist80053_rev4 bool
AWS NIST 800-53 Report. Defaults to false.
pci bool
AWS PCI DSS Report. Defaults to false.
soc bool
AWS SOC 2 Report. Defaults to false.
soc_rev2 bool
AWS SOC 2 Report Rev2. Defaults to false.
cisS3 Boolean
AWS CIS Benchmark and S3 Report. Defaults to false.
hipaa Boolean
AWS HIPAA Report. Defaults to false.
iso2700 Boolean
AWS ISO 27001:2013 Report. Defaults to false.
nist800171Rev2 Boolean
AWS NIST 800-171 Report. Defaults to false.
nist80053Rev4 Boolean
AWS NIST 800-53 Report. Defaults to false.
pci Boolean
AWS PCI DSS Report. Defaults to false.
soc Boolean
AWS SOC 2 Report. Defaults to false.
socRev2 Boolean
AWS SOC 2 Report Rev2. Defaults to false.

ReportRuleAzureComplianceReports
, ReportRuleAzureComplianceReportsArgs

Cis bool
Azure CIS Benchmark. Defaults to false.
Cis131 bool
Azure CIS 1.3.1 Benchmark. Defaults to false.
Pci bool
Azure PCI Benchmark. Defaults to false.
Soc bool
Azure SOC 2 Report. Defaults to false.
Cis bool
Azure CIS Benchmark. Defaults to false.
Cis131 bool
Azure CIS 1.3.1 Benchmark. Defaults to false.
Pci bool
Azure PCI Benchmark. Defaults to false.
Soc bool
Azure SOC 2 Report. Defaults to false.
cis Boolean
Azure CIS Benchmark. Defaults to false.
cis131 Boolean
Azure CIS 1.3.1 Benchmark. Defaults to false.
pci Boolean
Azure PCI Benchmark. Defaults to false.
soc Boolean
Azure SOC 2 Report. Defaults to false.
cis boolean
Azure CIS Benchmark. Defaults to false.
cis131 boolean
Azure CIS 1.3.1 Benchmark. Defaults to false.
pci boolean
Azure PCI Benchmark. Defaults to false.
soc boolean
Azure SOC 2 Report. Defaults to false.
cis bool
Azure CIS Benchmark. Defaults to false.
cis131 bool
Azure CIS 1.3.1 Benchmark. Defaults to false.
pci bool
Azure PCI Benchmark. Defaults to false.
soc bool
Azure SOC 2 Report. Defaults to false.
cis Boolean
Azure CIS Benchmark. Defaults to false.
cis131 Boolean
Azure CIS 1.3.1 Benchmark. Defaults to false.
pci Boolean
Azure PCI Benchmark. Defaults to false.
soc Boolean
Azure SOC 2 Report. Defaults to false.

ReportRuleDailyComplianceReports
, ReportRuleDailyComplianceReportsArgs

AwsCloudtrail bool
AWS CloudTrail. Defaults to false.
AwsCompliance bool
AWS Compliance. Defaults to false.
AzureActivityLog bool
Azure Activity Log. Defaults to false.
AzureCompliance bool
GcpAuditTrail bool
GCP Audit Trail. Defaults to false.
GcpCompliance bool
GCP Compliance. Defaults to false.
HostSecurity bool
Host Security. Defaults to false.
OpenshiftCompliance bool
Openshift Compliance (Optional) Defaults to false.
OpenshiftComplianceEvents bool
Openshift Compliance Events (Optional) Defaults to false.
Platform bool
Platform Events. Defaults to false.
AwsCloudtrail bool
AWS CloudTrail. Defaults to false.
AwsCompliance bool
AWS Compliance. Defaults to false.
AzureActivityLog bool
Azure Activity Log. Defaults to false.
AzureCompliance bool
GcpAuditTrail bool
GCP Audit Trail. Defaults to false.
GcpCompliance bool
GCP Compliance. Defaults to false.
HostSecurity bool
Host Security. Defaults to false.
OpenshiftCompliance bool
Openshift Compliance (Optional) Defaults to false.
OpenshiftComplianceEvents bool
Openshift Compliance Events (Optional) Defaults to false.
Platform bool
Platform Events. Defaults to false.
awsCloudtrail Boolean
AWS CloudTrail. Defaults to false.
awsCompliance Boolean
AWS Compliance. Defaults to false.
azureActivityLog Boolean
Azure Activity Log. Defaults to false.
azureCompliance Boolean
gcpAuditTrail Boolean
GCP Audit Trail. Defaults to false.
gcpCompliance Boolean
GCP Compliance. Defaults to false.
hostSecurity Boolean
Host Security. Defaults to false.
openshiftCompliance Boolean
Openshift Compliance (Optional) Defaults to false.
openshiftComplianceEvents Boolean
Openshift Compliance Events (Optional) Defaults to false.
platform Boolean
Platform Events. Defaults to false.
awsCloudtrail boolean
AWS CloudTrail. Defaults to false.
awsCompliance boolean
AWS Compliance. Defaults to false.
azureActivityLog boolean
Azure Activity Log. Defaults to false.
azureCompliance boolean
gcpAuditTrail boolean
GCP Audit Trail. Defaults to false.
gcpCompliance boolean
GCP Compliance. Defaults to false.
hostSecurity boolean
Host Security. Defaults to false.
openshiftCompliance boolean
Openshift Compliance (Optional) Defaults to false.
openshiftComplianceEvents boolean
Openshift Compliance Events (Optional) Defaults to false.
platform boolean
Platform Events. Defaults to false.
aws_cloudtrail bool
AWS CloudTrail. Defaults to false.
aws_compliance bool
AWS Compliance. Defaults to false.
azure_activity_log bool
Azure Activity Log. Defaults to false.
azure_compliance bool
gcp_audit_trail bool
GCP Audit Trail. Defaults to false.
gcp_compliance bool
GCP Compliance. Defaults to false.
host_security bool
Host Security. Defaults to false.
openshift_compliance bool
Openshift Compliance (Optional) Defaults to false.
openshift_compliance_events bool
Openshift Compliance Events (Optional) Defaults to false.
platform bool
Platform Events. Defaults to false.
awsCloudtrail Boolean
AWS CloudTrail. Defaults to false.
awsCompliance Boolean
AWS Compliance. Defaults to false.
azureActivityLog Boolean
Azure Activity Log. Defaults to false.
azureCompliance Boolean
gcpAuditTrail Boolean
GCP Audit Trail. Defaults to false.
gcpCompliance Boolean
GCP Compliance. Defaults to false.
hostSecurity Boolean
Host Security. Defaults to false.
openshiftCompliance Boolean
Openshift Compliance (Optional) Defaults to false.
openshiftComplianceEvents Boolean
Openshift Compliance Events (Optional) Defaults to false.
platform Boolean
Platform Events. Defaults to false.

ReportRuleGcpComplianceReports
, ReportRuleGcpComplianceReportsArgs

Cis bool
GCP CIS Benchmark. Defaults to false.
Cis12 bool
GCP CIS 1.2 Benchmark. Defaults to false.
Hipaa bool
GCP HIPAA Report. Defaults to false.
HipaaRev2 bool
GCP HIPAA Report Rev2. Defaults to false.
Iso27001 bool
GCP ISO 27001 Report. Defaults to false.
K8s bool
GCP K8S Benchmark. Defaults to false.
Pci bool
GCP PCI Benchmark. Defaults to false.
PciRev2 bool
GCP PCI Benchmark Rev2. Defaults to false.
Soc bool
GCP SOC 2 Report. Defaults to false.
SocRev2 bool
GCP SOC 2 Report Rev2. Defaults to false.
Cis bool
GCP CIS Benchmark. Defaults to false.
Cis12 bool
GCP CIS 1.2 Benchmark. Defaults to false.
Hipaa bool
GCP HIPAA Report. Defaults to false.
HipaaRev2 bool
GCP HIPAA Report Rev2. Defaults to false.
Iso27001 bool
GCP ISO 27001 Report. Defaults to false.
K8s bool
GCP K8S Benchmark. Defaults to false.
Pci bool
GCP PCI Benchmark. Defaults to false.
PciRev2 bool
GCP PCI Benchmark Rev2. Defaults to false.
Soc bool
GCP SOC 2 Report. Defaults to false.
SocRev2 bool
GCP SOC 2 Report Rev2. Defaults to false.
cis Boolean
GCP CIS Benchmark. Defaults to false.
cis12 Boolean
GCP CIS 1.2 Benchmark. Defaults to false.
hipaa Boolean
GCP HIPAA Report. Defaults to false.
hipaaRev2 Boolean
GCP HIPAA Report Rev2. Defaults to false.
iso27001 Boolean
GCP ISO 27001 Report. Defaults to false.
k8s Boolean
GCP K8S Benchmark. Defaults to false.
pci Boolean
GCP PCI Benchmark. Defaults to false.
pciRev2 Boolean
GCP PCI Benchmark Rev2. Defaults to false.
soc Boolean
GCP SOC 2 Report. Defaults to false.
socRev2 Boolean
GCP SOC 2 Report Rev2. Defaults to false.
cis boolean
GCP CIS Benchmark. Defaults to false.
cis12 boolean
GCP CIS 1.2 Benchmark. Defaults to false.
hipaa boolean
GCP HIPAA Report. Defaults to false.
hipaaRev2 boolean
GCP HIPAA Report Rev2. Defaults to false.
iso27001 boolean
GCP ISO 27001 Report. Defaults to false.
k8s boolean
GCP K8S Benchmark. Defaults to false.
pci boolean
GCP PCI Benchmark. Defaults to false.
pciRev2 boolean
GCP PCI Benchmark Rev2. Defaults to false.
soc boolean
GCP SOC 2 Report. Defaults to false.
socRev2 boolean
GCP SOC 2 Report Rev2. Defaults to false.
cis bool
GCP CIS Benchmark. Defaults to false.
cis12 bool
GCP CIS 1.2 Benchmark. Defaults to false.
hipaa bool
GCP HIPAA Report. Defaults to false.
hipaa_rev2 bool
GCP HIPAA Report Rev2. Defaults to false.
iso27001 bool
GCP ISO 27001 Report. Defaults to false.
k8s bool
GCP K8S Benchmark. Defaults to false.
pci bool
GCP PCI Benchmark. Defaults to false.
pci_rev2 bool
GCP PCI Benchmark Rev2. Defaults to false.
soc bool
GCP SOC 2 Report. Defaults to false.
soc_rev2 bool
GCP SOC 2 Report Rev2. Defaults to false.
cis Boolean
GCP CIS Benchmark. Defaults to false.
cis12 Boolean
GCP CIS 1.2 Benchmark. Defaults to false.
hipaa Boolean
GCP HIPAA Report. Defaults to false.
hipaaRev2 Boolean
GCP HIPAA Report Rev2. Defaults to false.
iso27001 Boolean
GCP ISO 27001 Report. Defaults to false.
k8s Boolean
GCP K8S Benchmark. Defaults to false.
pci Boolean
GCP PCI Benchmark. Defaults to false.
pciRev2 Boolean
GCP PCI Benchmark Rev2. Defaults to false.
soc Boolean
GCP SOC 2 Report. Defaults to false.
socRev2 Boolean
GCP SOC 2 Report Rev2. Defaults to false.

Import

A Lacework Report Rule can be imported using a GUID, e.g.

$ pulumi import lacework:index/reportRule:ReportRule example EXAMPLE_1234BAE1E42182964D23973F44CFEA3C4AB63B99E9A1EC5
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
lacework lacework/terraform-provider-lacework
License
Notes
This Pulumi package is based on the lacework Terraform Provider.
lacework 2.0.6 published on Monday, Apr 14, 2025 by lacework
lacework/terraform-provider-lacework