feat: Add new compliance regime options for Assured Workloads (#3794)
* feat: Add new compliance regime options to folder schemas for assured workloads configurations. * terraform fmt * Update Folder README with `tools/tfdoc.py` tool
This commit is contained in:
Samuele Perticarari
committed by
GitHub
GitHub
parent
1caeacec20
commit
bd87710eea
@@ -871,27 +871,48 @@
|
|||||||
"enum": [
|
"enum": [
|
||||||
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
||||||
"AU_REGIONS_AND_US_SUPPORT",
|
"AU_REGIONS_AND_US_SUPPORT",
|
||||||
|
"AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CA_PROTECTED_B",
|
"CA_PROTECTED_B",
|
||||||
"CA_REGIONS_AND_SUPPORT",
|
"CA_REGIONS_AND_SUPPORT",
|
||||||
|
"CANADA_CONTROLLED_GOODS",
|
||||||
|
"CANADA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CJIS",
|
"CJIS",
|
||||||
"COMPLIANCE_REGIME_UNSPECIFIED",
|
"COMPLIANCE_REGIME_UNSPECIFIED",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_PROTECTED_B",
|
||||||
|
"DATA_BOUNDARY_FOR_CJIS",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_HIGH",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_MODERATE",
|
||||||
|
"DATA_BOUNDARY_FOR_IL2",
|
||||||
|
"DATA_BOUNDARY_FOR_IL4",
|
||||||
|
"DATA_BOUNDARY_FOR_IL5",
|
||||||
|
"DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075",
|
||||||
|
"DATA_BOUNDARY_FOR_ITAR",
|
||||||
|
"EU_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"EU_REGIONS_AND_SUPPORT",
|
"EU_REGIONS_AND_SUPPORT",
|
||||||
"FEDRAMP_HIGH",
|
"FEDRAMP_HIGH",
|
||||||
"FEDRAMP_MODERATE",
|
"FEDRAMP_MODERATE",
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
||||||
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
||||||
"HIPAA",
|
"HIPAA",
|
||||||
"HITRUST",
|
"HITRUST",
|
||||||
"IL2",
|
"IL2",
|
||||||
"IL4",
|
"IL4",
|
||||||
"IL5",
|
"IL5",
|
||||||
"IRS_1075",
|
"IRS_1075",
|
||||||
"ISR_REGIONS_AND_SUPPORT",
|
|
||||||
"ISR_REGIONS",
|
"ISR_REGIONS",
|
||||||
|
"ISR_REGIONS_AND_SUPPORT",
|
||||||
|
"ISRAEL_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"ITAR",
|
"ITAR",
|
||||||
|
"JAPAN_DATA_BOUNDARY",
|
||||||
"JP_REGIONS_AND_SUPPORT",
|
"JP_REGIONS_AND_SUPPORT",
|
||||||
|
"KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS",
|
||||||
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
||||||
"REGIONAL_CONTROLS",
|
"REGIONAL_CONTROLS",
|
||||||
|
"REGIONAL_DATA_BOUNDARY",
|
||||||
|
"US_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT",
|
||||||
"US_REGIONAL_ACCESS"
|
"US_REGIONAL_ACCESS"
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
|
|||||||
@@ -253,7 +253,7 @@
|
|||||||
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
||||||
<br>*additional properties: false*
|
<br>*additional properties: false*
|
||||||
- ⁺**compliance_regime**: *string*
|
- ⁺**compliance_regime**: *string*
|
||||||
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS_AND_SUPPORT', 'ISR_REGIONS', 'ITAR', 'JP_REGIONS_AND_SUPPORT', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'US_REGIONAL_ACCESS']*
|
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CANADA_CONTROLLED_GOODS', 'CANADA_DATA_BOUNDARY_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS', 'DATA_BOUNDARY_FOR_CANADA_PROTECTED_B', 'DATA_BOUNDARY_FOR_CJIS', 'DATA_BOUNDARY_FOR_FEDRAMP_HIGH', 'DATA_BOUNDARY_FOR_FEDRAMP_MODERATE', 'DATA_BOUNDARY_FOR_IL2', 'DATA_BOUNDARY_FOR_IL4', 'DATA_BOUNDARY_FOR_IL5', 'DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075', 'DATA_BOUNDARY_FOR_ITAR', 'EU_DATA_BOUNDARY_AND_SUPPORT', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS', 'ISR_REGIONS_AND_SUPPORT', 'ISRAEL_DATA_BOUNDARY_AND_SUPPORT', 'ITAR', 'JAPAN_DATA_BOUNDARY', 'JP_REGIONS_AND_SUPPORT', 'KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'REGIONAL_DATA_BOUNDARY', 'US_DATA_BOUNDARY_AND_SUPPORT', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT', 'US_REGIONAL_ACCESS']*
|
||||||
- ⁺**display_name**: *string*
|
- ⁺**display_name**: *string*
|
||||||
- ⁺**location**: *string*
|
- ⁺**location**: *string*
|
||||||
- ⁺**organization**: *string*
|
- ⁺**organization**: *string*
|
||||||
|
|||||||
@@ -871,27 +871,48 @@
|
|||||||
"enum": [
|
"enum": [
|
||||||
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
||||||
"AU_REGIONS_AND_US_SUPPORT",
|
"AU_REGIONS_AND_US_SUPPORT",
|
||||||
|
"AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CA_PROTECTED_B",
|
"CA_PROTECTED_B",
|
||||||
"CA_REGIONS_AND_SUPPORT",
|
"CA_REGIONS_AND_SUPPORT",
|
||||||
|
"CANADA_CONTROLLED_GOODS",
|
||||||
|
"CANADA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CJIS",
|
"CJIS",
|
||||||
"COMPLIANCE_REGIME_UNSPECIFIED",
|
"COMPLIANCE_REGIME_UNSPECIFIED",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_PROTECTED_B",
|
||||||
|
"DATA_BOUNDARY_FOR_CJIS",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_HIGH",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_MODERATE",
|
||||||
|
"DATA_BOUNDARY_FOR_IL2",
|
||||||
|
"DATA_BOUNDARY_FOR_IL4",
|
||||||
|
"DATA_BOUNDARY_FOR_IL5",
|
||||||
|
"DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075",
|
||||||
|
"DATA_BOUNDARY_FOR_ITAR",
|
||||||
|
"EU_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"EU_REGIONS_AND_SUPPORT",
|
"EU_REGIONS_AND_SUPPORT",
|
||||||
"FEDRAMP_HIGH",
|
"FEDRAMP_HIGH",
|
||||||
"FEDRAMP_MODERATE",
|
"FEDRAMP_MODERATE",
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
||||||
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
||||||
"HIPAA",
|
"HIPAA",
|
||||||
"HITRUST",
|
"HITRUST",
|
||||||
"IL2",
|
"IL2",
|
||||||
"IL4",
|
"IL4",
|
||||||
"IL5",
|
"IL5",
|
||||||
"IRS_1075",
|
"IRS_1075",
|
||||||
"ISR_REGIONS_AND_SUPPORT",
|
|
||||||
"ISR_REGIONS",
|
"ISR_REGIONS",
|
||||||
|
"ISR_REGIONS_AND_SUPPORT",
|
||||||
|
"ISRAEL_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"ITAR",
|
"ITAR",
|
||||||
|
"JAPAN_DATA_BOUNDARY",
|
||||||
"JP_REGIONS_AND_SUPPORT",
|
"JP_REGIONS_AND_SUPPORT",
|
||||||
|
"KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS",
|
||||||
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
||||||
"REGIONAL_CONTROLS",
|
"REGIONAL_CONTROLS",
|
||||||
|
"REGIONAL_DATA_BOUNDARY",
|
||||||
|
"US_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT",
|
||||||
"US_REGIONAL_ACCESS"
|
"US_REGIONAL_ACCESS"
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
|
|||||||
@@ -280,7 +280,7 @@
|
|||||||
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
||||||
<br>*additional properties: false*
|
<br>*additional properties: false*
|
||||||
- ⁺**compliance_regime**: *string*
|
- ⁺**compliance_regime**: *string*
|
||||||
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS_AND_SUPPORT', 'ISR_REGIONS', 'ITAR', 'JP_REGIONS_AND_SUPPORT', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'US_REGIONAL_ACCESS']*
|
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CANADA_CONTROLLED_GOODS', 'CANADA_DATA_BOUNDARY_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS', 'DATA_BOUNDARY_FOR_CANADA_PROTECTED_B', 'DATA_BOUNDARY_FOR_CJIS', 'DATA_BOUNDARY_FOR_FEDRAMP_HIGH', 'DATA_BOUNDARY_FOR_FEDRAMP_MODERATE', 'DATA_BOUNDARY_FOR_IL2', 'DATA_BOUNDARY_FOR_IL4', 'DATA_BOUNDARY_FOR_IL5', 'DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075', 'DATA_BOUNDARY_FOR_ITAR', 'EU_DATA_BOUNDARY_AND_SUPPORT', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS', 'ISR_REGIONS_AND_SUPPORT', 'ISRAEL_DATA_BOUNDARY_AND_SUPPORT', 'ITAR', 'JAPAN_DATA_BOUNDARY', 'JP_REGIONS_AND_SUPPORT', 'KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'REGIONAL_DATA_BOUNDARY', 'US_DATA_BOUNDARY_AND_SUPPORT', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT', 'US_REGIONAL_ACCESS']*
|
||||||
- ⁺**display_name**: *string*
|
- ⁺**display_name**: *string*
|
||||||
- ⁺**location**: *string*
|
- ⁺**location**: *string*
|
||||||
- ⁺**organization**: *string*
|
- ⁺**organization**: *string*
|
||||||
|
|||||||
@@ -871,27 +871,48 @@
|
|||||||
"enum": [
|
"enum": [
|
||||||
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
||||||
"AU_REGIONS_AND_US_SUPPORT",
|
"AU_REGIONS_AND_US_SUPPORT",
|
||||||
|
"AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CA_PROTECTED_B",
|
"CA_PROTECTED_B",
|
||||||
"CA_REGIONS_AND_SUPPORT",
|
"CA_REGIONS_AND_SUPPORT",
|
||||||
|
"CANADA_CONTROLLED_GOODS",
|
||||||
|
"CANADA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CJIS",
|
"CJIS",
|
||||||
"COMPLIANCE_REGIME_UNSPECIFIED",
|
"COMPLIANCE_REGIME_UNSPECIFIED",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_PROTECTED_B",
|
||||||
|
"DATA_BOUNDARY_FOR_CJIS",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_HIGH",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_MODERATE",
|
||||||
|
"DATA_BOUNDARY_FOR_IL2",
|
||||||
|
"DATA_BOUNDARY_FOR_IL4",
|
||||||
|
"DATA_BOUNDARY_FOR_IL5",
|
||||||
|
"DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075",
|
||||||
|
"DATA_BOUNDARY_FOR_ITAR",
|
||||||
|
"EU_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"EU_REGIONS_AND_SUPPORT",
|
"EU_REGIONS_AND_SUPPORT",
|
||||||
"FEDRAMP_HIGH",
|
"FEDRAMP_HIGH",
|
||||||
"FEDRAMP_MODERATE",
|
"FEDRAMP_MODERATE",
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
||||||
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
||||||
"HIPAA",
|
"HIPAA",
|
||||||
"HITRUST",
|
"HITRUST",
|
||||||
"IL2",
|
"IL2",
|
||||||
"IL4",
|
"IL4",
|
||||||
"IL5",
|
"IL5",
|
||||||
"IRS_1075",
|
"IRS_1075",
|
||||||
"ISR_REGIONS_AND_SUPPORT",
|
|
||||||
"ISR_REGIONS",
|
"ISR_REGIONS",
|
||||||
|
"ISR_REGIONS_AND_SUPPORT",
|
||||||
|
"ISRAEL_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"ITAR",
|
"ITAR",
|
||||||
|
"JAPAN_DATA_BOUNDARY",
|
||||||
"JP_REGIONS_AND_SUPPORT",
|
"JP_REGIONS_AND_SUPPORT",
|
||||||
|
"KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS",
|
||||||
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
||||||
"REGIONAL_CONTROLS",
|
"REGIONAL_CONTROLS",
|
||||||
|
"REGIONAL_DATA_BOUNDARY",
|
||||||
|
"US_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT",
|
||||||
"US_REGIONAL_ACCESS"
|
"US_REGIONAL_ACCESS"
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
|
|||||||
@@ -253,7 +253,7 @@
|
|||||||
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
||||||
<br>*additional properties: false*
|
<br>*additional properties: false*
|
||||||
- ⁺**compliance_regime**: *string*
|
- ⁺**compliance_regime**: *string*
|
||||||
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS_AND_SUPPORT', 'ISR_REGIONS', 'ITAR', 'JP_REGIONS_AND_SUPPORT', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'US_REGIONAL_ACCESS']*
|
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CANADA_CONTROLLED_GOODS', 'CANADA_DATA_BOUNDARY_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS', 'DATA_BOUNDARY_FOR_CANADA_PROTECTED_B', 'DATA_BOUNDARY_FOR_CJIS', 'DATA_BOUNDARY_FOR_FEDRAMP_HIGH', 'DATA_BOUNDARY_FOR_FEDRAMP_MODERATE', 'DATA_BOUNDARY_FOR_IL2', 'DATA_BOUNDARY_FOR_IL4', 'DATA_BOUNDARY_FOR_IL5', 'DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075', 'DATA_BOUNDARY_FOR_ITAR', 'EU_DATA_BOUNDARY_AND_SUPPORT', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS', 'ISR_REGIONS_AND_SUPPORT', 'ISRAEL_DATA_BOUNDARY_AND_SUPPORT', 'ITAR', 'JAPAN_DATA_BOUNDARY', 'JP_REGIONS_AND_SUPPORT', 'KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'REGIONAL_DATA_BOUNDARY', 'US_DATA_BOUNDARY_AND_SUPPORT', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT', 'US_REGIONAL_ACCESS']*
|
||||||
- ⁺**display_name**: *string*
|
- ⁺**display_name**: *string*
|
||||||
- ⁺**location**: *string*
|
- ⁺**location**: *string*
|
||||||
- ⁺**organization**: *string*
|
- ⁺**organization**: *string*
|
||||||
|
|||||||
@@ -871,27 +871,48 @@
|
|||||||
"enum": [
|
"enum": [
|
||||||
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
||||||
"AU_REGIONS_AND_US_SUPPORT",
|
"AU_REGIONS_AND_US_SUPPORT",
|
||||||
|
"AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CA_PROTECTED_B",
|
"CA_PROTECTED_B",
|
||||||
"CA_REGIONS_AND_SUPPORT",
|
"CA_REGIONS_AND_SUPPORT",
|
||||||
|
"CANADA_CONTROLLED_GOODS",
|
||||||
|
"CANADA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CJIS",
|
"CJIS",
|
||||||
"COMPLIANCE_REGIME_UNSPECIFIED",
|
"COMPLIANCE_REGIME_UNSPECIFIED",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_PROTECTED_B",
|
||||||
|
"DATA_BOUNDARY_FOR_CJIS",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_HIGH",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_MODERATE",
|
||||||
|
"DATA_BOUNDARY_FOR_IL2",
|
||||||
|
"DATA_BOUNDARY_FOR_IL4",
|
||||||
|
"DATA_BOUNDARY_FOR_IL5",
|
||||||
|
"DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075",
|
||||||
|
"DATA_BOUNDARY_FOR_ITAR",
|
||||||
|
"EU_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"EU_REGIONS_AND_SUPPORT",
|
"EU_REGIONS_AND_SUPPORT",
|
||||||
"FEDRAMP_HIGH",
|
"FEDRAMP_HIGH",
|
||||||
"FEDRAMP_MODERATE",
|
"FEDRAMP_MODERATE",
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
||||||
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
||||||
"HIPAA",
|
"HIPAA",
|
||||||
"HITRUST",
|
"HITRUST",
|
||||||
"IL2",
|
"IL2",
|
||||||
"IL4",
|
"IL4",
|
||||||
"IL5",
|
"IL5",
|
||||||
"IRS_1075",
|
"IRS_1075",
|
||||||
"ISR_REGIONS_AND_SUPPORT",
|
|
||||||
"ISR_REGIONS",
|
"ISR_REGIONS",
|
||||||
|
"ISR_REGIONS_AND_SUPPORT",
|
||||||
|
"ISRAEL_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"ITAR",
|
"ITAR",
|
||||||
|
"JAPAN_DATA_BOUNDARY",
|
||||||
"JP_REGIONS_AND_SUPPORT",
|
"JP_REGIONS_AND_SUPPORT",
|
||||||
|
"KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS",
|
||||||
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
||||||
"REGIONAL_CONTROLS",
|
"REGIONAL_CONTROLS",
|
||||||
|
"REGIONAL_DATA_BOUNDARY",
|
||||||
|
"US_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT",
|
||||||
"US_REGIONAL_ACCESS"
|
"US_REGIONAL_ACCESS"
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
|
|||||||
@@ -253,7 +253,7 @@
|
|||||||
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
||||||
<br>*additional properties: false*
|
<br>*additional properties: false*
|
||||||
- ⁺**compliance_regime**: *string*
|
- ⁺**compliance_regime**: *string*
|
||||||
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS_AND_SUPPORT', 'ISR_REGIONS', 'ITAR', 'JP_REGIONS_AND_SUPPORT', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'US_REGIONAL_ACCESS']*
|
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CANADA_CONTROLLED_GOODS', 'CANADA_DATA_BOUNDARY_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS', 'DATA_BOUNDARY_FOR_CANADA_PROTECTED_B', 'DATA_BOUNDARY_FOR_CJIS', 'DATA_BOUNDARY_FOR_FEDRAMP_HIGH', 'DATA_BOUNDARY_FOR_FEDRAMP_MODERATE', 'DATA_BOUNDARY_FOR_IL2', 'DATA_BOUNDARY_FOR_IL4', 'DATA_BOUNDARY_FOR_IL5', 'DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075', 'DATA_BOUNDARY_FOR_ITAR', 'EU_DATA_BOUNDARY_AND_SUPPORT', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS', 'ISR_REGIONS_AND_SUPPORT', 'ISRAEL_DATA_BOUNDARY_AND_SUPPORT', 'ITAR', 'JAPAN_DATA_BOUNDARY', 'JP_REGIONS_AND_SUPPORT', 'KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'REGIONAL_DATA_BOUNDARY', 'US_DATA_BOUNDARY_AND_SUPPORT', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT', 'US_REGIONAL_ACCESS']*
|
||||||
- ⁺**display_name**: *string*
|
- ⁺**display_name**: *string*
|
||||||
- ⁺**location**: *string*
|
- ⁺**location**: *string*
|
||||||
- ⁺**organization**: *string*
|
- ⁺**organization**: *string*
|
||||||
|
|||||||
@@ -736,31 +736,31 @@ module "folder" {
|
|||||||
| [asset_feeds](variables.tf#L18) | Cloud Asset Inventory feeds. | <code title="map(object({ billing_project = string content_type = optional(string) asset_types = optional(list(string)) asset_names = optional(list(string)) feed_output_config = object({ pubsub_destination = object({ topic = string }) }) condition = optional(object({ expression = string title = optional(string) description = optional(string) location = optional(string) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
| [asset_feeds](variables.tf#L18) | Cloud Asset Inventory feeds. | <code title="map(object({ billing_project = string content_type = optional(string) asset_types = optional(list(string)) asset_names = optional(list(string)) feed_output_config = object({ pubsub_destination = object({ topic = string }) }) condition = optional(object({ expression = string title = optional(string) description = optional(string) location = optional(string) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [asset_search](variables.tf#L51) | Cloud Asset Inventory search configurations. | <code title="map(object({ asset_types = list(string) query = optional(string) }))">map(object({…}))</code> | | <code>{}</code> |
|
| [asset_search](variables.tf#L51) | Cloud Asset Inventory search configurations. | <code title="map(object({ asset_types = list(string) query = optional(string) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [assured_workload_config](variables.tf#L61) | Create AssuredWorkloads folder instead of regular folder when value is provided. Incompatible with folder_create=false. | <code title="object({ compliance_regime = string display_name = string location = string organization = string enable_sovereign_controls = optional(bool) labels = optional(map(string), {}) partner = optional(string) partner_permissions = optional(object({ assured_workloads_monitoring = optional(bool) data_logs_viewer = optional(bool) service_access_approver = optional(bool) })) violation_notifications_enabled = optional(bool) })">object({…})</code> | | <code>null</code> |
|
| [assured_workload_config](variables.tf#L61) | Create AssuredWorkloads folder instead of regular folder when value is provided. Incompatible with folder_create=false. | <code title="object({ compliance_regime = string display_name = string location = string organization = string enable_sovereign_controls = optional(bool) labels = optional(map(string), {}) partner = optional(string) partner_permissions = optional(object({ assured_workloads_monitoring = optional(bool) data_logs_viewer = optional(bool) service_access_approver = optional(bool) })) violation_notifications_enabled = optional(bool) })">object({…})</code> | | <code>null</code> |
|
||||||
| [autokey_config](variables.tf#L123) | Enable autokey support for this folder's children. Project accepts either project id or number. | <code title="object({ project = string })">object({…})</code> | | <code>null</code> |
|
| [autokey_config](variables.tf#L144) | Enable autokey support for this folder's children. Project accepts either project id or number. | <code title="object({ project = string })">object({…})</code> | | <code>null</code> |
|
||||||
| [contacts](variables.tf#L132) | List of essential contacts for this resource. Must be in the form EMAIL -> [NOTIFICATION_TYPES]. Valid notification types are ALL, SUSPENSION, SECURITY, TECHNICAL, BILLING, LEGAL, PRODUCT_UPDATES. | <code>map(list(string))</code> | | <code>{}</code> |
|
| [contacts](variables.tf#L153) | List of essential contacts for this resource. Must be in the form EMAIL -> [NOTIFICATION_TYPES]. Valid notification types are ALL, SUSPENSION, SECURITY, TECHNICAL, BILLING, LEGAL, PRODUCT_UPDATES. | <code>map(list(string))</code> | | <code>{}</code> |
|
||||||
| [context](variables.tf#L151) | Context-specific interpolations. | <code title="object({ bigquery_datasets = optional(map(string), {}) condition_vars = optional(map(map(string)), {}) custom_roles = optional(map(string), {}) email_addresses = optional(map(string), {}) folder_ids = optional(map(string), {}) iam_principals = optional(map(string), {}) kms_keys = optional(map(string), {}) log_buckets = optional(map(string), {}) project_ids = optional(map(string), {}) project_numbers = optional(map(string), {}) pubsub_topics = optional(map(string), {}) storage_buckets = optional(map(string), {}) tag_values = optional(map(string), {}) })">object({…})</code> | | <code>{}</code> |
|
| [context](variables.tf#L172) | Context-specific interpolations. | <code title="object({ bigquery_datasets = optional(map(string), {}) condition_vars = optional(map(map(string)), {}) custom_roles = optional(map(string), {}) email_addresses = optional(map(string), {}) folder_ids = optional(map(string), {}) iam_principals = optional(map(string), {}) kms_keys = optional(map(string), {}) log_buckets = optional(map(string), {}) project_ids = optional(map(string), {}) project_numbers = optional(map(string), {}) pubsub_topics = optional(map(string), {}) storage_buckets = optional(map(string), {}) tag_values = optional(map(string), {}) })">object({…})</code> | | <code>{}</code> |
|
||||||
| [deletion_protection](variables.tf#L172) | Deletion protection setting for this folder. | <code>bool</code> | | <code>false</code> |
|
| [deletion_protection](variables.tf#L193) | Deletion protection setting for this folder. | <code>bool</code> | | <code>false</code> |
|
||||||
| [factories_config](variables.tf#L178) | Paths to data files and folders that enable factory functionality. | <code title="object({ org_policies = optional(string) pam_entitlements = optional(string) scc_mute_configs = optional(string) scc_sha_custom_modules = optional(string) })">object({…})</code> | | <code>{}</code> |
|
| [factories_config](variables.tf#L199) | Paths to data files and folders that enable factory functionality. | <code title="object({ org_policies = optional(string) pam_entitlements = optional(string) scc_mute_configs = optional(string) scc_sha_custom_modules = optional(string) })">object({…})</code> | | <code>{}</code> |
|
||||||
| [firewall_policy](variables.tf#L190) | Hierarchical firewall policy to associate to this folder. | <code title="object({ name = string policy = string })">object({…})</code> | | <code>null</code> |
|
| [firewall_policy](variables.tf#L211) | Hierarchical firewall policy to associate to this folder. | <code title="object({ name = string policy = string })">object({…})</code> | | <code>null</code> |
|
||||||
| [folder_create](variables.tf#L201) | Create folder. When set to false, uses id to reference an existing folder. | <code>bool</code> | | <code>true</code> |
|
| [folder_create](variables.tf#L222) | Create folder. When set to false, uses id to reference an existing folder. | <code>bool</code> | | <code>true</code> |
|
||||||
| [iam](variables-iam.tf#L17) | IAM bindings in {ROLE => [MEMBERS]} format. | <code>map(list(string))</code> | | <code>{}</code> |
|
| [iam](variables-iam.tf#L17) | IAM bindings in {ROLE => [MEMBERS]} format. | <code>map(list(string))</code> | | <code>{}</code> |
|
||||||
| [iam_bindings](variables-iam.tf#L24) | Authoritative IAM bindings in {KEY => {role = ROLE, members = [], condition = {}}}. Keys are arbitrary. | <code title="map(object({ members = list(string) role = string condition = optional(object({ expression = string title = string description = optional(string) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
| [iam_bindings](variables-iam.tf#L24) | Authoritative IAM bindings in {KEY => {role = ROLE, members = [], condition = {}}}. Keys are arbitrary. | <code title="map(object({ members = list(string) role = string condition = optional(object({ expression = string title = string description = optional(string) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [iam_bindings_additive](variables-iam.tf#L39) | Individual additive IAM bindings. Keys are arbitrary. | <code title="map(object({ member = string role = string condition = optional(object({ expression = string title = string description = optional(string) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
| [iam_bindings_additive](variables-iam.tf#L39) | Individual additive IAM bindings. Keys are arbitrary. | <code title="map(object({ member = string role = string condition = optional(object({ expression = string title = string description = optional(string) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [iam_by_principals](variables-iam.tf#L61) | Authoritative IAM binding in {PRINCIPAL => [ROLES]} format. Principals need to be statically defined to avoid errors. Merged internally with the `iam` variable. | <code>map(list(string))</code> | | <code>{}</code> |
|
| [iam_by_principals](variables-iam.tf#L61) | Authoritative IAM binding in {PRINCIPAL => [ROLES]} format. Principals need to be statically defined to avoid errors. Merged internally with the `iam` variable. | <code>map(list(string))</code> | | <code>{}</code> |
|
||||||
| [iam_by_principals_additive](variables-iam.tf#L54) | Additive IAM binding in {PRINCIPAL => [ROLES]} format. Principals need to be statically defined to avoid errors. Merged internally with the `iam_bindings_additive` variable. | <code>map(list(string))</code> | | <code>{}</code> |
|
| [iam_by_principals_additive](variables-iam.tf#L54) | Additive IAM binding in {PRINCIPAL => [ROLES]} format. Principals need to be statically defined to avoid errors. Merged internally with the `iam_bindings_additive` variable. | <code>map(list(string))</code> | | <code>{}</code> |
|
||||||
| [iam_by_principals_conditional](variables-iam.tf#L68) | Authoritative IAM binding in {PRINCIPAL => {roles = [roles], condition = {cond}}} format. Principals need to be statically defined to avoid errors. Condition is required. | <code title="map(object({ roles = list(string) condition = object({ expression = string title = string description = optional(string) }) }))">map(object({…}))</code> | | <code>{}</code> |
|
| [iam_by_principals_conditional](variables-iam.tf#L68) | Authoritative IAM binding in {PRINCIPAL => {roles = [roles], condition = {cond}}} format. Principals need to be statically defined to avoid errors. Condition is required. | <code title="map(object({ roles = list(string) condition = object({ expression = string title = string description = optional(string) }) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [id](variables.tf#L211) | Folder ID in case you use folder_create=false. | <code>string</code> | | <code>null</code> |
|
| [id](variables.tf#L232) | Folder ID in case you use folder_create=false. | <code>string</code> | | <code>null</code> |
|
||||||
| [logging_data_access](variables-logging.tf#L17) | Control activation of data access logs. The special 'allServices' key denotes configuration for all services. | <code title="map(object({ ADMIN_READ = optional(object({ exempted_members = optional(list(string), []) })), DATA_READ = optional(object({ exempted_members = optional(list(string), []) })), DATA_WRITE = optional(object({ exempted_members = optional(list(string), []) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
| [logging_data_access](variables-logging.tf#L17) | Control activation of data access logs. The special 'allServices' key denotes configuration for all services. | <code title="map(object({ ADMIN_READ = optional(object({ exempted_members = optional(list(string), []) })), DATA_READ = optional(object({ exempted_members = optional(list(string), []) })), DATA_WRITE = optional(object({ exempted_members = optional(list(string), []) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [logging_exclusions](variables-logging.tf#L28) | Logging exclusions for this folder in the form {NAME -> FILTER}. | <code>map(string)</code> | | <code>{}</code> |
|
| [logging_exclusions](variables-logging.tf#L28) | Logging exclusions for this folder in the form {NAME -> FILTER}. | <code>map(string)</code> | | <code>{}</code> |
|
||||||
| [logging_settings](variables-logging.tf#L35) | Default settings for logging resources. | <code title="object({ disable_default_sink = optional(bool) kms_key_name = optional(string) storage_location = optional(string) })">object({…})</code> | | <code>null</code> |
|
| [logging_settings](variables-logging.tf#L35) | Default settings for logging resources. | <code title="object({ disable_default_sink = optional(bool) kms_key_name = optional(string) storage_location = optional(string) })">object({…})</code> | | <code>null</code> |
|
||||||
| [logging_sinks](variables-logging.tf#L45) | Logging sinks to create for the folder. | <code title="map(object({ destination = string type = string bq_partitioned_table = optional(bool, false) description = optional(string) disabled = optional(bool, false) exclusions = optional(map(string), {}) filter = optional(string) iam = optional(bool, true) include_children = optional(bool, true) intercept_children = optional(bool, false) }))">map(object({…}))</code> | | <code>{}</code> |
|
| [logging_sinks](variables-logging.tf#L45) | Logging sinks to create for the folder. | <code title="map(object({ destination = string type = string bq_partitioned_table = optional(bool, false) description = optional(string) disabled = optional(bool, false) exclusions = optional(map(string), {}) filter = optional(string) iam = optional(bool, true) include_children = optional(bool, true) intercept_children = optional(bool, false) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [name](variables.tf#L217) | Folder name. | <code>string</code> | | <code>null</code> |
|
| [name](variables.tf#L238) | Folder name. | <code>string</code> | | <code>null</code> |
|
||||||
| [org_policies](variables.tf#L223) | Organization policies applied to this folder keyed by policy name. | <code title="map(object({ inherit_from_parent = optional(bool) # for list policies only. reset = optional(bool) rules = optional(list(object({ allow = optional(object({ all = optional(bool) values = optional(list(string)) })) deny = optional(object({ all = optional(bool) values = optional(list(string)) })) enforce = optional(bool) # for boolean policies only. condition = optional(object({ description = optional(string) expression = optional(string) location = optional(string) title = optional(string) }), {}) parameters = optional(string) })), []) }))">map(object({…}))</code> | | <code>{}</code> |
|
| [org_policies](variables.tf#L244) | Organization policies applied to this folder keyed by policy name. | <code title="map(object({ inherit_from_parent = optional(bool) # for list policies only. reset = optional(bool) rules = optional(list(object({ allow = optional(object({ all = optional(bool) values = optional(list(string)) })) deny = optional(object({ all = optional(bool) values = optional(list(string)) })) enforce = optional(bool) # for boolean policies only. condition = optional(object({ description = optional(string) expression = optional(string) location = optional(string) title = optional(string) }), {}) parameters = optional(string) })), []) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [pam_entitlements](variables-pam.tf#L17) | Privileged Access Manager entitlements for this resource, keyed by entitlement ID. | <code title="map(object({ max_request_duration = string eligible_users = list(string) privileged_access = list(object({ role = string condition = optional(string) })) requester_justification_config = optional(object({ not_mandatory = optional(bool, true) unstructured = optional(bool, false) }), { not_mandatory = false, unstructured = true }) manual_approvals = optional(object({ require_approver_justification = bool steps = list(object({ approvers = list(string) approvals_needed = optional(number, 1) approver_email_recipients = optional(list(string)) })) })) additional_notification_targets = optional(object({ admin_email_recipients = optional(list(string)) requester_email_recipients = optional(list(string)) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
| [pam_entitlements](variables-pam.tf#L17) | Privileged Access Manager entitlements for this resource, keyed by entitlement ID. | <code title="map(object({ max_request_duration = string eligible_users = list(string) privileged_access = list(object({ role = string condition = optional(string) })) requester_justification_config = optional(object({ not_mandatory = optional(bool, true) unstructured = optional(bool, false) }), { not_mandatory = false, unstructured = true }) manual_approvals = optional(object({ require_approver_justification = bool steps = list(object({ approvers = list(string) approvals_needed = optional(number, 1) approver_email_recipients = optional(list(string)) })) })) additional_notification_targets = optional(object({ admin_email_recipients = optional(list(string)) requester_email_recipients = optional(list(string)) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [parent](variables.tf#L251) | Parent in folders/folder_id or organizations/org_id format. | <code>string</code> | | <code>null</code> |
|
| [parent](variables.tf#L272) | Parent in folders/folder_id or organizations/org_id format. | <code>string</code> | | <code>null</code> |
|
||||||
| [scc_mute_configs](variables-scc.tf#L17) | SCC mute configurations keyed by name. | <code title="map(object({ description = optional(string) filter = string type = optional(string, "DYNAMIC") }))">map(object({…}))</code> | | <code>{}</code> |
|
| [scc_mute_configs](variables-scc.tf#L17) | SCC mute configurations keyed by name. | <code title="map(object({ description = optional(string) filter = string type = optional(string, "DYNAMIC") }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [scc_sha_custom_modules](variables-scc.tf#L27) | SCC custom modules keyed by module name. | <code title="map(object({ description = optional(string) severity = string recommendation = string predicate = object({ expression = string }) resource_selector = object({ resource_types = list(string) }) enablement_state = optional(string, "ENABLED") }))">map(object({…}))</code> | | <code>{}</code> |
|
| [scc_sha_custom_modules](variables-scc.tf#L27) | SCC custom modules keyed by module name. | <code title="map(object({ description = optional(string) severity = string recommendation = string predicate = object({ expression = string }) resource_selector = object({ resource_types = list(string) }) enablement_state = optional(string, "ENABLED") }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [tag_bindings](variables.tf#L265) | Tag bindings for this folder, in key => tag value id format. | <code>map(string)</code> | | <code>null</code> |
|
| [tag_bindings](variables.tf#L286) | Tag bindings for this folder, in key => tag value id format. | <code>map(string)</code> | | <code>null</code> |
|
||||||
|
|
||||||
## Outputs
|
## Outputs
|
||||||
|
|
||||||
|
|||||||
@@ -81,27 +81,48 @@ variable "assured_workload_config" {
|
|||||||
condition = try(contains([
|
condition = try(contains([
|
||||||
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
||||||
"AU_REGIONS_AND_US_SUPPORT",
|
"AU_REGIONS_AND_US_SUPPORT",
|
||||||
|
"AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CA_PROTECTED_B",
|
"CA_PROTECTED_B",
|
||||||
"CA_REGIONS_AND_SUPPORT",
|
"CA_REGIONS_AND_SUPPORT",
|
||||||
|
"CANADA_CONTROLLED_GOODS",
|
||||||
|
"CANADA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CJIS",
|
"CJIS",
|
||||||
"COMPLIANCE_REGIME_UNSPECIFIED",
|
"COMPLIANCE_REGIME_UNSPECIFIED",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_PROTECTED_B",
|
||||||
|
"DATA_BOUNDARY_FOR_CJIS",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_HIGH",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_MODERATE",
|
||||||
|
"DATA_BOUNDARY_FOR_IL2",
|
||||||
|
"DATA_BOUNDARY_FOR_IL4",
|
||||||
|
"DATA_BOUNDARY_FOR_IL5",
|
||||||
|
"DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075",
|
||||||
|
"DATA_BOUNDARY_FOR_ITAR",
|
||||||
|
"EU_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"EU_REGIONS_AND_SUPPORT",
|
"EU_REGIONS_AND_SUPPORT",
|
||||||
"FEDRAMP_HIGH",
|
"FEDRAMP_HIGH",
|
||||||
"FEDRAMP_MODERATE",
|
"FEDRAMP_MODERATE",
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
||||||
"HIPAA",
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
||||||
"HITRUST",
|
"HIPAA", # DEPRECATED
|
||||||
|
"HITRUST", # DEPRECATED
|
||||||
"IL2",
|
"IL2",
|
||||||
"IL4",
|
"IL4",
|
||||||
"IL5",
|
"IL5",
|
||||||
"IRS_1075",
|
"IRS_1075",
|
||||||
"ISR_REGIONS_AND_SUPPORT",
|
|
||||||
"ISR_REGIONS",
|
"ISR_REGIONS",
|
||||||
|
"ISR_REGIONS_AND_SUPPORT",
|
||||||
|
"ISRAEL_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"ITAR",
|
"ITAR",
|
||||||
|
"JAPAN_DATA_BOUNDARY",
|
||||||
"JP_REGIONS_AND_SUPPORT",
|
"JP_REGIONS_AND_SUPPORT",
|
||||||
|
"KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS",
|
||||||
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
||||||
"REGIONAL_CONTROLS",
|
"REGIONAL_CONTROLS",
|
||||||
|
"REGIONAL_DATA_BOUNDARY",
|
||||||
|
"US_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT",
|
||||||
"US_REGIONAL_ACCESS"
|
"US_REGIONAL_ACCESS"
|
||||||
], var.assured_workload_config.compliance_regime), true)
|
], var.assured_workload_config.compliance_regime), true)
|
||||||
error_message = "Field assured_workload_config.compliance_regime must be one of the values listed in https://cloud.google.com/assured-workloads/docs/reference/rest/Shared.Types/ComplianceRegime"
|
error_message = "Field assured_workload_config.compliance_regime must be one of the values listed in https://cloud.google.com/assured-workloads/docs/reference/rest/Shared.Types/ComplianceRegime"
|
||||||
|
|||||||
@@ -871,27 +871,48 @@
|
|||||||
"enum": [
|
"enum": [
|
||||||
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
"ASSURED_WORKLOADS_FOR_PARTNERS",
|
||||||
"AU_REGIONS_AND_US_SUPPORT",
|
"AU_REGIONS_AND_US_SUPPORT",
|
||||||
|
"AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CA_PROTECTED_B",
|
"CA_PROTECTED_B",
|
||||||
"CA_REGIONS_AND_SUPPORT",
|
"CA_REGIONS_AND_SUPPORT",
|
||||||
|
"CANADA_CONTROLLED_GOODS",
|
||||||
|
"CANADA_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"CJIS",
|
"CJIS",
|
||||||
"COMPLIANCE_REGIME_UNSPECIFIED",
|
"COMPLIANCE_REGIME_UNSPECIFIED",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS",
|
||||||
|
"DATA_BOUNDARY_FOR_CANADA_PROTECTED_B",
|
||||||
|
"DATA_BOUNDARY_FOR_CJIS",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_HIGH",
|
||||||
|
"DATA_BOUNDARY_FOR_FEDRAMP_MODERATE",
|
||||||
|
"DATA_BOUNDARY_FOR_IL2",
|
||||||
|
"DATA_BOUNDARY_FOR_IL4",
|
||||||
|
"DATA_BOUNDARY_FOR_IL5",
|
||||||
|
"DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075",
|
||||||
|
"DATA_BOUNDARY_FOR_ITAR",
|
||||||
|
"EU_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"EU_REGIONS_AND_SUPPORT",
|
"EU_REGIONS_AND_SUPPORT",
|
||||||
"FEDRAMP_HIGH",
|
"FEDRAMP_HIGH",
|
||||||
"FEDRAMP_MODERATE",
|
"FEDRAMP_MODERATE",
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
|
||||||
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS",
|
||||||
|
"HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT",
|
||||||
"HIPAA",
|
"HIPAA",
|
||||||
"HITRUST",
|
"HITRUST",
|
||||||
"IL2",
|
"IL2",
|
||||||
"IL4",
|
"IL4",
|
||||||
"IL5",
|
"IL5",
|
||||||
"IRS_1075",
|
"IRS_1075",
|
||||||
"ISR_REGIONS_AND_SUPPORT",
|
|
||||||
"ISR_REGIONS",
|
"ISR_REGIONS",
|
||||||
|
"ISR_REGIONS_AND_SUPPORT",
|
||||||
|
"ISRAEL_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
"ITAR",
|
"ITAR",
|
||||||
|
"JAPAN_DATA_BOUNDARY",
|
||||||
"JP_REGIONS_AND_SUPPORT",
|
"JP_REGIONS_AND_SUPPORT",
|
||||||
|
"KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS",
|
||||||
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
"KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS",
|
||||||
"REGIONAL_CONTROLS",
|
"REGIONAL_CONTROLS",
|
||||||
|
"REGIONAL_DATA_BOUNDARY",
|
||||||
|
"US_DATA_BOUNDARY_AND_SUPPORT",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES",
|
||||||
|
"US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT",
|
||||||
"US_REGIONAL_ACCESS"
|
"US_REGIONAL_ACCESS"
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
|
|||||||
@@ -278,7 +278,7 @@
|
|||||||
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
- **assured_workload_config**<a name="refs-assured_workload_config"></a>: *object*
|
||||||
<br>*additional properties: false*
|
<br>*additional properties: false*
|
||||||
- ⁺**compliance_regime**: *string*
|
- ⁺**compliance_regime**: *string*
|
||||||
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS_AND_SUPPORT', 'ISR_REGIONS', 'ITAR', 'JP_REGIONS_AND_SUPPORT', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'US_REGIONAL_ACCESS']*
|
<br>*enum: ['ASSURED_WORKLOADS_FOR_PARTNERS', 'AU_REGIONS_AND_US_SUPPORT', 'AUSTRALIA_DATA_BOUNDARY_AND_SUPPORT', 'CA_PROTECTED_B', 'CA_REGIONS_AND_SUPPORT', 'CANADA_CONTROLLED_GOODS', 'CANADA_DATA_BOUNDARY_AND_SUPPORT', 'CJIS', 'COMPLIANCE_REGIME_UNSPECIFIED', 'DATA_BOUNDARY_FOR_CANADA_CONTROLLED_GOODS', 'DATA_BOUNDARY_FOR_CANADA_PROTECTED_B', 'DATA_BOUNDARY_FOR_CJIS', 'DATA_BOUNDARY_FOR_FEDRAMP_HIGH', 'DATA_BOUNDARY_FOR_FEDRAMP_MODERATE', 'DATA_BOUNDARY_FOR_IL2', 'DATA_BOUNDARY_FOR_IL4', 'DATA_BOUNDARY_FOR_IL5', 'DATA_BOUNDARY_FOR_IRS_PUBLICATION_1075', 'DATA_BOUNDARY_FOR_ITAR', 'EU_DATA_BOUNDARY_AND_SUPPORT', 'EU_REGIONS_AND_SUPPORT', 'FEDRAMP_HIGH', 'FEDRAMP_MODERATE', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS', 'HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_US_SUPPORT', 'HIPAA', 'HITRUST', 'IL2', 'IL4', 'IL5', 'IRS_1075', 'ISR_REGIONS', 'ISR_REGIONS_AND_SUPPORT', 'ISRAEL_DATA_BOUNDARY_AND_SUPPORT', 'ITAR', 'JAPAN_DATA_BOUNDARY', 'JP_REGIONS_AND_SUPPORT', 'KSA_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS', 'KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS', 'REGIONAL_CONTROLS', 'REGIONAL_DATA_BOUNDARY', 'US_DATA_BOUNDARY_AND_SUPPORT', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES', 'US_DATA_BOUNDARY_FOR_HEALTHCARE_AND_LIFE_SCIENCES_WITH_SUPPORT', 'US_REGIONAL_ACCESS']*
|
||||||
- ⁺**display_name**: *string*
|
- ⁺**display_name**: *string*
|
||||||
- ⁺**location**: *string*
|
- ⁺**location**: *string*
|
||||||
- ⁺**organization**: *string*
|
- ⁺**organization**: *string*
|
||||||
|
|||||||
Reference in New Issue
Block a user