OBJECT
GuardrailsDesiredState
It is a combination of a guardrail template with required input parameters as well as the credentials metadata required to create infrastructure and enforce policies on the same. Guardrails DesiredState can be run on-demand, or on a pre-defined schedule, or in response to an event
link GraphQL Schema definition
- type GuardrailsDesiredState implements Node {
- # Unique identifier for guardrail DesiredState
- ID! :
- # guardrails desired state context
- GuardrailsDesiredStateContext!] @deprecated( reason: "DesiredStates are no more directly associated with accounts, the association is expressed using targets" ) : [
- # CSP user who created guardrail desired state
- User! :
- # Timestamp at which guardrail desired state is created. Expressed in UTC ISO-8601
- # format
- DateTime! :
- # CSP project associated with guardrail desired state
- Entity :
- # Flag indicating whether the desired state is archived
- Boolean :
- # Guardrail desired state description
- String :
- # DesiredState runs
- #
- # Arguments
- # accounts: filter runs for a specific accounts
- # after: Return records after the given cursor, as per GraphQL
- # Relay spec
- # before: Return records before the given cursor, as per GraphQL
- # Relay spec
- # first: Returns the latest N records
- # status: [Not documented]
- (
- GuardrailsAccountSelector!], : [
- String, :
- String, :
- Int, :
- GuardrailsDesiredStateRunStatus!] : [
- ): GuardrailsDesiredStateRunConnection
- # Enable/Disable continuous enforcement
- Boolean :
- # Last run of the desired state
- #
- # Arguments
- # accounts: filter runs for a specific accounts
- GuardrailsAccountSelector!]): GuardrailsDesiredStateRun ( : [
- # mode for desired state, can ENFORCEMENT or MONITOR
- GuardrailsDesiredStateMode! :
- # Name of guardrail desired state
- String! :
- # Parameters required to run guardrail DesiredState.
- JSON :
- # Severity of the guardrails desired state
- GuardrailsDesiredStateSeverity :
- # The target on which this desired state will be applied
- GuardrailsDesiredStateTarget :
- # Guardrails template that will be enforced by this DesiredState
- GuardrailsTemplate! :
- # CSP user who updated guardrail desired state
- User :
- # Timestamp at which guardrail desired state is updated. Expressed in UTC ISO-8601
- # format
- DateTime :
- }
link Require by
- FindingPolicy"Union of all possible policy types"
- GuardrailsDesiredStateConnectionGuardrails DesiredState Connection Type
- GuardrailsDesiredStateEdgeGuardrails DesiredState Edge Type.
- GuardrailsDesiredStateRunGuardrailsDesiredStateRun - It is a point-in-time instance of guardrails desired state run.
- GuardrailsDesiredStateRunResponseencapsulation of one or more runs resulting from a desired state being run