google_assured_workloads_workload

The AssuredWorkloads Workload resource

Example Usage - basic_workload

A basic test of a assuredworkloads api

resource "google_assured_workloads_workload" "primary" {
  compliance_regime = "FEDRAMP_MODERATE"
  display_name      = "{{display}}"
  location          = "us-west1"
  organization      = "123456789"
  billing_account   = "billingAccounts/000000-0000000-0000000-000000"

  kms_settings {
    next_rotation_time = "9999-10-02T15:01:23Z"
    rotation_period    = "10368000s"
  }

  provisioned_resources_parent = "folders/519620126891"

  resource_settings {
    display_name  = "folder-display-name"
    resource_type = "CONSUMER_FOLDER"
  }

  resource_settings {
    resource_type = "ENCRYPTION_KEYS_PROJECT"
  }

  resource_settings {
    resource_id   = "ring"
    resource_type = "KEYRING"
  }

  violation_notifications_enabled = true

  labels = {
    label-one = "value-one"
  }
}

Example Usage - sovereign_controls_workload

A Sovereign Controls test of the assuredworkloads api

resource "google_assured_workloads_workload" "primary" {
  compliance_regime         = "EU_REGIONS_AND_SUPPORT"
  display_name              = "display"
  location                  = "europe-west9"
  organization              = "123456789"
  billing_account           = "billingAccounts/000000-0000000-0000000-000000"
  enable_sovereign_controls = true

  kms_settings {
    next_rotation_time = "9999-10-02T15:01:23Z"
    rotation_period    = "10368000s"
  }

  resource_settings {
    resource_type = "CONSUMER_FOLDER"
  }

  resource_settings {
    resource_type = "ENCRYPTION_KEYS_PROJECT"
  }

  resource_settings {
    resource_id   = "ring"
    resource_type = "KEYRING"
  }

  labels = {
    label-one = "value-one"
  }
  provider                  = google-beta
}

Argument Reference

The following arguments are supported:


Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

The kms_settings block supports:

The partner_permissions block supports:

The resource_settings block supports:

Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

Timeouts

This resource provides the following Timeouts configuration options:

Import

Workload can be imported using any of these accepted formats:

In Terraform v1.5.0 and later, use an import block to import Workload using one of the formats above. For example:

import {
  id = "organizations/{{organization}}/locations/{{location}}/workloads/{{name}}"
  to = google_assured_workloads_workload.default
}

When using the terraform import command, Workload can be imported using one of the formats above. For example:

$ terraform import google_assured_workloads_workload.default organizations/{{organization}}/locations/{{location}}/workloads/{{name}}
$ terraform import google_assured_workloads_workload.default {{organization}}/{{location}}/{{name}}