1. Packages
  2. Azure Native
  3. API Docs
  4. security
  5. JitNetworkAccessPolicy
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.33.0 published on Friday, Mar 22, 2024 by Pulumi

azure-native.security.JitNetworkAccessPolicy

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.33.0 published on Friday, Mar 22, 2024 by Pulumi

    Azure REST API version: 2020-01-01. Prior API version in Azure Native 1.x: 2020-01-01.

    Example Usage

    Create JIT network access policy

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using AzureNative = Pulumi.AzureNative;
    
    return await Deployment.RunAsync(() => 
    {
        var jitNetworkAccessPolicy = new AzureNative.Security.JitNetworkAccessPolicy("jitNetworkAccessPolicy", new()
        {
            AscLocation = "westeurope",
            JitNetworkAccessPolicyName = "default",
            Kind = "Basic",
            Requests = new[]
            {
                new AzureNative.Security.Inputs.JitNetworkAccessRequestArgs
                {
                    Requestor = "barbara@contoso.com",
                    StartTimeUtc = "2018-05-17T08:06:45.5691611Z",
                    VirtualMachines = new[]
                    {
                        new AzureNative.Security.Inputs.JitNetworkAccessRequestVirtualMachineArgs
                        {
                            Id = "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1",
                            Ports = new[]
                            {
                                new AzureNative.Security.Inputs.JitNetworkAccessRequestPortArgs
                                {
                                    AllowedSourceAddressPrefix = "192.127.0.2",
                                    EndTimeUtc = "2018-05-17T09:06:45.5691611Z",
                                    Number = 3389,
                                    Status = "Initiated",
                                    StatusReason = "UserRequested",
                                },
                            },
                        },
                    },
                },
            },
            ResourceGroupName = "myRg1",
            VirtualMachines = new[]
            {
                new AzureNative.Security.Inputs.JitNetworkAccessPolicyVirtualMachineArgs
                {
                    Id = "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1",
                    Ports = new[]
                    {
                        new AzureNative.Security.Inputs.JitNetworkAccessPortRuleArgs
                        {
                            AllowedSourceAddressPrefix = "*",
                            MaxRequestAccessDuration = "PT3H",
                            Number = 22,
                            Protocol = "*",
                        },
                        new AzureNative.Security.Inputs.JitNetworkAccessPortRuleArgs
                        {
                            AllowedSourceAddressPrefix = "*",
                            MaxRequestAccessDuration = "PT3H",
                            Number = 3389,
                            Protocol = "*",
                        },
                    },
                },
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-azure-native-sdk/security/v2"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := security.NewJitNetworkAccessPolicy(ctx, "jitNetworkAccessPolicy", &security.JitNetworkAccessPolicyArgs{
    			AscLocation:                pulumi.String("westeurope"),
    			JitNetworkAccessPolicyName: pulumi.String("default"),
    			Kind:                       pulumi.String("Basic"),
    			Requests: security.JitNetworkAccessRequestArray{
    				&security.JitNetworkAccessRequestArgs{
    					Requestor:    pulumi.String("barbara@contoso.com"),
    					StartTimeUtc: pulumi.String("2018-05-17T08:06:45.5691611Z"),
    					VirtualMachines: security.JitNetworkAccessRequestVirtualMachineArray{
    						&security.JitNetworkAccessRequestVirtualMachineArgs{
    							Id: pulumi.String("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1"),
    							Ports: security.JitNetworkAccessRequestPortArray{
    								&security.JitNetworkAccessRequestPortArgs{
    									AllowedSourceAddressPrefix: pulumi.String("192.127.0.2"),
    									EndTimeUtc:                 pulumi.String("2018-05-17T09:06:45.5691611Z"),
    									Number:                     pulumi.Int(3389),
    									Status:                     pulumi.String("Initiated"),
    									StatusReason:               pulumi.String("UserRequested"),
    								},
    							},
    						},
    					},
    				},
    			},
    			ResourceGroupName: pulumi.String("myRg1"),
    			VirtualMachines: security.JitNetworkAccessPolicyVirtualMachineArray{
    				&security.JitNetworkAccessPolicyVirtualMachineArgs{
    					Id: pulumi.String("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1"),
    					Ports: security.JitNetworkAccessPortRuleArray{
    						&security.JitNetworkAccessPortRuleArgs{
    							AllowedSourceAddressPrefix: pulumi.String("*"),
    							MaxRequestAccessDuration:   pulumi.String("PT3H"),
    							Number:                     pulumi.Int(22),
    							Protocol:                   pulumi.String("*"),
    						},
    						&security.JitNetworkAccessPortRuleArgs{
    							AllowedSourceAddressPrefix: pulumi.String("*"),
    							MaxRequestAccessDuration:   pulumi.String("PT3H"),
    							Number:                     pulumi.Int(3389),
    							Protocol:                   pulumi.String("*"),
    						},
    					},
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.azurenative.security.JitNetworkAccessPolicy;
    import com.pulumi.azurenative.security.JitNetworkAccessPolicyArgs;
    import com.pulumi.azurenative.security.inputs.JitNetworkAccessRequestArgs;
    import com.pulumi.azurenative.security.inputs.JitNetworkAccessPolicyVirtualMachineArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var jitNetworkAccessPolicy = new JitNetworkAccessPolicy("jitNetworkAccessPolicy", JitNetworkAccessPolicyArgs.builder()        
                .ascLocation("westeurope")
                .jitNetworkAccessPolicyName("default")
                .kind("Basic")
                .requests(JitNetworkAccessRequestArgs.builder()
                    .requestor("barbara@contoso.com")
                    .startTimeUtc("2018-05-17T08:06:45.5691611Z")
                    .virtualMachines(JitNetworkAccessRequestVirtualMachineArgs.builder()
                        .id("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1")
                        .ports(JitNetworkAccessRequestPortArgs.builder()
                            .allowedSourceAddressPrefix("192.127.0.2")
                            .endTimeUtc("2018-05-17T09:06:45.5691611Z")
                            .number(3389)
                            .status("Initiated")
                            .statusReason("UserRequested")
                            .build())
                        .build())
                    .build())
                .resourceGroupName("myRg1")
                .virtualMachines(JitNetworkAccessPolicyVirtualMachineArgs.builder()
                    .id("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1")
                    .ports(                
                        JitNetworkAccessPortRuleArgs.builder()
                            .allowedSourceAddressPrefix("*")
                            .maxRequestAccessDuration("PT3H")
                            .number(22)
                            .protocol("*")
                            .build(),
                        JitNetworkAccessPortRuleArgs.builder()
                            .allowedSourceAddressPrefix("*")
                            .maxRequestAccessDuration("PT3H")
                            .number(3389)
                            .protocol("*")
                            .build())
                    .build())
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_azure_native as azure_native
    
    jit_network_access_policy = azure_native.security.JitNetworkAccessPolicy("jitNetworkAccessPolicy",
        asc_location="westeurope",
        jit_network_access_policy_name="default",
        kind="Basic",
        requests=[azure_native.security.JitNetworkAccessRequestArgs(
            requestor="barbara@contoso.com",
            start_time_utc="2018-05-17T08:06:45.5691611Z",
            virtual_machines=[azure_native.security.JitNetworkAccessRequestVirtualMachineArgs(
                id="/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1",
                ports=[azure_native.security.JitNetworkAccessRequestPortArgs(
                    allowed_source_address_prefix="192.127.0.2",
                    end_time_utc="2018-05-17T09:06:45.5691611Z",
                    number=3389,
                    status="Initiated",
                    status_reason="UserRequested",
                )],
            )],
        )],
        resource_group_name="myRg1",
        virtual_machines=[azure_native.security.JitNetworkAccessPolicyVirtualMachineArgs(
            id="/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1",
            ports=[
                azure_native.security.JitNetworkAccessPortRuleArgs(
                    allowed_source_address_prefix="*",
                    max_request_access_duration="PT3H",
                    number=22,
                    protocol="*",
                ),
                azure_native.security.JitNetworkAccessPortRuleArgs(
                    allowed_source_address_prefix="*",
                    max_request_access_duration="PT3H",
                    number=3389,
                    protocol="*",
                ),
            ],
        )])
    
    import * as pulumi from "@pulumi/pulumi";
    import * as azure_native from "@pulumi/azure-native";
    
    const jitNetworkAccessPolicy = new azure_native.security.JitNetworkAccessPolicy("jitNetworkAccessPolicy", {
        ascLocation: "westeurope",
        jitNetworkAccessPolicyName: "default",
        kind: "Basic",
        requests: [{
            requestor: "barbara@contoso.com",
            startTimeUtc: "2018-05-17T08:06:45.5691611Z",
            virtualMachines: [{
                id: "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1",
                ports: [{
                    allowedSourceAddressPrefix: "192.127.0.2",
                    endTimeUtc: "2018-05-17T09:06:45.5691611Z",
                    number: 3389,
                    status: "Initiated",
                    statusReason: "UserRequested",
                }],
            }],
        }],
        resourceGroupName: "myRg1",
        virtualMachines: [{
            id: "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1",
            ports: [
                {
                    allowedSourceAddressPrefix: "*",
                    maxRequestAccessDuration: "PT3H",
                    number: 22,
                    protocol: "*",
                },
                {
                    allowedSourceAddressPrefix: "*",
                    maxRequestAccessDuration: "PT3H",
                    number: 3389,
                    protocol: "*",
                },
            ],
        }],
    });
    
    resources:
      jitNetworkAccessPolicy:
        type: azure-native:security:JitNetworkAccessPolicy
        properties:
          ascLocation: westeurope
          jitNetworkAccessPolicyName: default
          kind: Basic
          requests:
            - requestor: barbara@contoso.com
              startTimeUtc: 2018-05-17T08:06:45.5691611Z
              virtualMachines:
                - id: /subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1
                  ports:
                    - allowedSourceAddressPrefix: 192.127.0.2
                      endTimeUtc: 2018-05-17T09:06:45.5691611Z
                      number: 3389
                      status: Initiated
                      statusReason: UserRequested
          resourceGroupName: myRg1
          virtualMachines:
            - id: /subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg1/providers/Microsoft.Compute/virtualMachines/vm1
              ports:
                - allowedSourceAddressPrefix: '*'
                  maxRequestAccessDuration: PT3H
                  number: 22
                  protocol: '*'
                - allowedSourceAddressPrefix: '*'
                  maxRequestAccessDuration: PT3H
                  number: 3389
                  protocol: '*'
    

    Create JitNetworkAccessPolicy Resource

    new JitNetworkAccessPolicy(name: string, args: JitNetworkAccessPolicyArgs, opts?: CustomResourceOptions);
    @overload
    def JitNetworkAccessPolicy(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               asc_location: Optional[str] = None,
                               jit_network_access_policy_name: Optional[str] = None,
                               kind: Optional[str] = None,
                               requests: Optional[Sequence[JitNetworkAccessRequestArgs]] = None,
                               resource_group_name: Optional[str] = None,
                               virtual_machines: Optional[Sequence[JitNetworkAccessPolicyVirtualMachineArgs]] = None)
    @overload
    def JitNetworkAccessPolicy(resource_name: str,
                               args: JitNetworkAccessPolicyArgs,
                               opts: Optional[ResourceOptions] = None)
    func NewJitNetworkAccessPolicy(ctx *Context, name string, args JitNetworkAccessPolicyArgs, opts ...ResourceOption) (*JitNetworkAccessPolicy, error)
    public JitNetworkAccessPolicy(string name, JitNetworkAccessPolicyArgs args, CustomResourceOptions? opts = null)
    public JitNetworkAccessPolicy(String name, JitNetworkAccessPolicyArgs args)
    public JitNetworkAccessPolicy(String name, JitNetworkAccessPolicyArgs args, CustomResourceOptions options)
    
    type: azure-native:security:JitNetworkAccessPolicy
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    name string
    The unique name of the resource.
    args JitNetworkAccessPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args JitNetworkAccessPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args JitNetworkAccessPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args JitNetworkAccessPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args JitNetworkAccessPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    JitNetworkAccessPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The JitNetworkAccessPolicy resource accepts the following input properties:

    AscLocation string
    The location where ASC stores the data of the subscription. can be retrieved from Get locations
    ResourceGroupName string
    The name of the resource group within the user's subscription. The name is case insensitive.
    VirtualMachines List<Pulumi.AzureNative.Security.Inputs.JitNetworkAccessPolicyVirtualMachine>
    Configurations for Microsoft.Compute/virtualMachines resource type.
    JitNetworkAccessPolicyName string
    Name of a Just-in-Time access configuration policy.
    Kind string
    Kind of the resource
    Requests List<Pulumi.AzureNative.Security.Inputs.JitNetworkAccessRequest>
    AscLocation string
    The location where ASC stores the data of the subscription. can be retrieved from Get locations
    ResourceGroupName string
    The name of the resource group within the user's subscription. The name is case insensitive.
    VirtualMachines []JitNetworkAccessPolicyVirtualMachineArgs
    Configurations for Microsoft.Compute/virtualMachines resource type.
    JitNetworkAccessPolicyName string
    Name of a Just-in-Time access configuration policy.
    Kind string
    Kind of the resource
    Requests []JitNetworkAccessRequestArgs
    ascLocation String
    The location where ASC stores the data of the subscription. can be retrieved from Get locations
    resourceGroupName String
    The name of the resource group within the user's subscription. The name is case insensitive.
    virtualMachines List<JitNetworkAccessPolicyVirtualMachine>
    Configurations for Microsoft.Compute/virtualMachines resource type.
    jitNetworkAccessPolicyName String
    Name of a Just-in-Time access configuration policy.
    kind String
    Kind of the resource
    requests List<JitNetworkAccessRequest>
    ascLocation string
    The location where ASC stores the data of the subscription. can be retrieved from Get locations
    resourceGroupName string
    The name of the resource group within the user's subscription. The name is case insensitive.
    virtualMachines JitNetworkAccessPolicyVirtualMachine[]
    Configurations for Microsoft.Compute/virtualMachines resource type.
    jitNetworkAccessPolicyName string
    Name of a Just-in-Time access configuration policy.
    kind string
    Kind of the resource
    requests JitNetworkAccessRequest[]
    asc_location str
    The location where ASC stores the data of the subscription. can be retrieved from Get locations
    resource_group_name str
    The name of the resource group within the user's subscription. The name is case insensitive.
    virtual_machines Sequence[JitNetworkAccessPolicyVirtualMachineArgs]
    Configurations for Microsoft.Compute/virtualMachines resource type.
    jit_network_access_policy_name str
    Name of a Just-in-Time access configuration policy.
    kind str
    Kind of the resource
    requests Sequence[JitNetworkAccessRequestArgs]
    ascLocation String
    The location where ASC stores the data of the subscription. can be retrieved from Get locations
    resourceGroupName String
    The name of the resource group within the user's subscription. The name is case insensitive.
    virtualMachines List<Property Map>
    Configurations for Microsoft.Compute/virtualMachines resource type.
    jitNetworkAccessPolicyName String
    Name of a Just-in-Time access configuration policy.
    kind String
    Kind of the resource
    requests List<Property Map>

    Outputs

    All input properties are implicitly available as output properties. Additionally, the JitNetworkAccessPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Location string
    Location where the resource is stored
    Name string
    Resource name
    ProvisioningState string
    Gets the provisioning state of the Just-in-Time policy.
    Type string
    Resource type
    Id string
    The provider-assigned unique ID for this managed resource.
    Location string
    Location where the resource is stored
    Name string
    Resource name
    ProvisioningState string
    Gets the provisioning state of the Just-in-Time policy.
    Type string
    Resource type
    id String
    The provider-assigned unique ID for this managed resource.
    location String
    Location where the resource is stored
    name String
    Resource name
    provisioningState String
    Gets the provisioning state of the Just-in-Time policy.
    type String
    Resource type
    id string
    The provider-assigned unique ID for this managed resource.
    location string
    Location where the resource is stored
    name string
    Resource name
    provisioningState string
    Gets the provisioning state of the Just-in-Time policy.
    type string
    Resource type
    id str
    The provider-assigned unique ID for this managed resource.
    location str
    Location where the resource is stored
    name str
    Resource name
    provisioning_state str
    Gets the provisioning state of the Just-in-Time policy.
    type str
    Resource type
    id String
    The provider-assigned unique ID for this managed resource.
    location String
    Location where the resource is stored
    name String
    Resource name
    provisioningState String
    Gets the provisioning state of the Just-in-Time policy.
    type String
    Resource type

    Supporting Types

    JitNetworkAccessPolicyVirtualMachine, JitNetworkAccessPolicyVirtualMachineArgs

    Id string
    Resource ID of the virtual machine that is linked to this policy
    Ports List<Pulumi.AzureNative.Security.Inputs.JitNetworkAccessPortRule>
    Port configurations for the virtual machine
    PublicIpAddress string
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    Id string
    Resource ID of the virtual machine that is linked to this policy
    Ports []JitNetworkAccessPortRule
    Port configurations for the virtual machine
    PublicIpAddress string
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    id String
    Resource ID of the virtual machine that is linked to this policy
    ports List<JitNetworkAccessPortRule>
    Port configurations for the virtual machine
    publicIpAddress String
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    id string
    Resource ID of the virtual machine that is linked to this policy
    ports JitNetworkAccessPortRule[]
    Port configurations for the virtual machine
    publicIpAddress string
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    id str
    Resource ID of the virtual machine that is linked to this policy
    ports Sequence[JitNetworkAccessPortRule]
    Port configurations for the virtual machine
    public_ip_address str
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    id String
    Resource ID of the virtual machine that is linked to this policy
    ports List<Property Map>
    Port configurations for the virtual machine
    publicIpAddress String
    Public IP address of the Azure Firewall that is linked to this policy, if applicable

    JitNetworkAccessPolicyVirtualMachineResponse, JitNetworkAccessPolicyVirtualMachineResponseArgs

    Id string
    Resource ID of the virtual machine that is linked to this policy
    Ports List<Pulumi.AzureNative.Security.Inputs.JitNetworkAccessPortRuleResponse>
    Port configurations for the virtual machine
    PublicIpAddress string
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    Id string
    Resource ID of the virtual machine that is linked to this policy
    Ports []JitNetworkAccessPortRuleResponse
    Port configurations for the virtual machine
    PublicIpAddress string
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    id String
    Resource ID of the virtual machine that is linked to this policy
    ports List<JitNetworkAccessPortRuleResponse>
    Port configurations for the virtual machine
    publicIpAddress String
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    id string
    Resource ID of the virtual machine that is linked to this policy
    ports JitNetworkAccessPortRuleResponse[]
    Port configurations for the virtual machine
    publicIpAddress string
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    id str
    Resource ID of the virtual machine that is linked to this policy
    ports Sequence[JitNetworkAccessPortRuleResponse]
    Port configurations for the virtual machine
    public_ip_address str
    Public IP address of the Azure Firewall that is linked to this policy, if applicable
    id String
    Resource ID of the virtual machine that is linked to this policy
    ports List<Property Map>
    Port configurations for the virtual machine
    publicIpAddress String
    Public IP address of the Azure Firewall that is linked to this policy, if applicable

    JitNetworkAccessPortRule, JitNetworkAccessPortRuleArgs

    MaxRequestAccessDuration string
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    Number int
    Protocol string | Pulumi.AzureNative.Security.Protocol
    AllowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    AllowedSourceAddressPrefixes List<string>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    MaxRequestAccessDuration string
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    Number int
    Protocol string | Protocol
    AllowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    AllowedSourceAddressPrefixes []string
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    maxRequestAccessDuration String
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    number Integer
    protocol String | Protocol
    allowedSourceAddressPrefix String
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes List<String>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    maxRequestAccessDuration string
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    number number
    protocol string | Protocol
    allowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes string[]
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    max_request_access_duration str
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    number int
    protocol str | Protocol
    allowed_source_address_prefix str
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowed_source_address_prefixes Sequence[str]
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    maxRequestAccessDuration String
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    number Number
    protocol String | "TCP" | "UDP" | "*"
    allowedSourceAddressPrefix String
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes List<String>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.

    JitNetworkAccessPortRuleResponse, JitNetworkAccessPortRuleResponseArgs

    MaxRequestAccessDuration string
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    Number int
    Protocol string
    AllowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    AllowedSourceAddressPrefixes List<string>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    MaxRequestAccessDuration string
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    Number int
    Protocol string
    AllowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    AllowedSourceAddressPrefixes []string
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    maxRequestAccessDuration String
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    number Integer
    protocol String
    allowedSourceAddressPrefix String
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes List<String>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    maxRequestAccessDuration string
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    number number
    protocol string
    allowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes string[]
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    max_request_access_duration str
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    number int
    protocol str
    allowed_source_address_prefix str
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowed_source_address_prefixes Sequence[str]
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    maxRequestAccessDuration String
    Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
    number Number
    protocol String
    allowedSourceAddressPrefix String
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes List<String>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.

    JitNetworkAccessRequest, JitNetworkAccessRequestArgs

    Requestor string
    The identity of the person who made the request
    StartTimeUtc string
    The start time of the request in UTC
    VirtualMachines List<Pulumi.AzureNative.Security.Inputs.JitNetworkAccessRequestVirtualMachine>
    Justification string
    The justification for making the initiate request
    Requestor string
    The identity of the person who made the request
    StartTimeUtc string
    The start time of the request in UTC
    VirtualMachines []JitNetworkAccessRequestVirtualMachine
    Justification string
    The justification for making the initiate request
    requestor String
    The identity of the person who made the request
    startTimeUtc String
    The start time of the request in UTC
    virtualMachines List<JitNetworkAccessRequestVirtualMachine>
    justification String
    The justification for making the initiate request
    requestor string
    The identity of the person who made the request
    startTimeUtc string
    The start time of the request in UTC
    virtualMachines JitNetworkAccessRequestVirtualMachine[]
    justification string
    The justification for making the initiate request
    requestor str
    The identity of the person who made the request
    start_time_utc str
    The start time of the request in UTC
    virtual_machines Sequence[JitNetworkAccessRequestVirtualMachine]
    justification str
    The justification for making the initiate request
    requestor String
    The identity of the person who made the request
    startTimeUtc String
    The start time of the request in UTC
    virtualMachines List<Property Map>
    justification String
    The justification for making the initiate request

    JitNetworkAccessRequestPort, JitNetworkAccessRequestPortArgs

    EndTimeUtc string
    The date & time at which the request ends in UTC
    Number int
    Status string | Pulumi.AzureNative.Security.Status
    The status of the port
    StatusReason string | Pulumi.AzureNative.Security.StatusReason
    A description of why the status has its value
    AllowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    AllowedSourceAddressPrefixes List<string>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    MappedPort int
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    EndTimeUtc string
    The date & time at which the request ends in UTC
    Number int
    Status string | Status
    The status of the port
    StatusReason string | StatusReason
    A description of why the status has its value
    AllowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    AllowedSourceAddressPrefixes []string
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    MappedPort int
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    endTimeUtc String
    The date & time at which the request ends in UTC
    number Integer
    status String | Status
    The status of the port
    statusReason String | StatusReason
    A description of why the status has its value
    allowedSourceAddressPrefix String
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes List<String>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    mappedPort Integer
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    endTimeUtc string
    The date & time at which the request ends in UTC
    number number
    status string | Status
    The status of the port
    statusReason string | StatusReason
    A description of why the status has its value
    allowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes string[]
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    mappedPort number
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    end_time_utc str
    The date & time at which the request ends in UTC
    number int
    status str | Status
    The status of the port
    status_reason str | StatusReason
    A description of why the status has its value
    allowed_source_address_prefix str
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowed_source_address_prefixes Sequence[str]
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    mapped_port int
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    endTimeUtc String
    The date & time at which the request ends in UTC
    number Number
    status String | "Revoked" | "Initiated"
    The status of the port
    statusReason String | "Expired" | "UserRequested" | "NewerRequestInitiated"
    A description of why the status has its value
    allowedSourceAddressPrefix String
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes List<String>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    mappedPort Number
    The port which is mapped to this port's number in the Azure Firewall, if applicable

    JitNetworkAccessRequestPortResponse, JitNetworkAccessRequestPortResponseArgs

    EndTimeUtc string
    The date & time at which the request ends in UTC
    Number int
    Status string
    The status of the port
    StatusReason string
    A description of why the status has its value
    AllowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    AllowedSourceAddressPrefixes List<string>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    MappedPort int
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    EndTimeUtc string
    The date & time at which the request ends in UTC
    Number int
    Status string
    The status of the port
    StatusReason string
    A description of why the status has its value
    AllowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    AllowedSourceAddressPrefixes []string
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    MappedPort int
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    endTimeUtc String
    The date & time at which the request ends in UTC
    number Integer
    status String
    The status of the port
    statusReason String
    A description of why the status has its value
    allowedSourceAddressPrefix String
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes List<String>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    mappedPort Integer
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    endTimeUtc string
    The date & time at which the request ends in UTC
    number number
    status string
    The status of the port
    statusReason string
    A description of why the status has its value
    allowedSourceAddressPrefix string
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes string[]
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    mappedPort number
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    end_time_utc str
    The date & time at which the request ends in UTC
    number int
    status str
    The status of the port
    status_reason str
    A description of why the status has its value
    allowed_source_address_prefix str
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowed_source_address_prefixes Sequence[str]
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    mapped_port int
    The port which is mapped to this port's number in the Azure Firewall, if applicable
    endTimeUtc String
    The date & time at which the request ends in UTC
    number Number
    status String
    The status of the port
    statusReason String
    A description of why the status has its value
    allowedSourceAddressPrefix String
    Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".
    allowedSourceAddressPrefixes List<String>
    Mutually exclusive with the "allowedSourceAddressPrefix" parameter.
    mappedPort Number
    The port which is mapped to this port's number in the Azure Firewall, if applicable

    JitNetworkAccessRequestResponse, JitNetworkAccessRequestResponseArgs

    Requestor string
    The identity of the person who made the request
    StartTimeUtc string
    The start time of the request in UTC
    VirtualMachines List<Pulumi.AzureNative.Security.Inputs.JitNetworkAccessRequestVirtualMachineResponse>
    Justification string
    The justification for making the initiate request
    Requestor string
    The identity of the person who made the request
    StartTimeUtc string
    The start time of the request in UTC
    VirtualMachines []JitNetworkAccessRequestVirtualMachineResponse
    Justification string
    The justification for making the initiate request
    requestor String
    The identity of the person who made the request
    startTimeUtc String
    The start time of the request in UTC
    virtualMachines List<JitNetworkAccessRequestVirtualMachineResponse>
    justification String
    The justification for making the initiate request
    requestor string
    The identity of the person who made the request
    startTimeUtc string
    The start time of the request in UTC
    virtualMachines JitNetworkAccessRequestVirtualMachineResponse[]
    justification string
    The justification for making the initiate request
    requestor str
    The identity of the person who made the request
    start_time_utc str
    The start time of the request in UTC
    virtual_machines Sequence[JitNetworkAccessRequestVirtualMachineResponse]
    justification str
    The justification for making the initiate request
    requestor String
    The identity of the person who made the request
    startTimeUtc String
    The start time of the request in UTC
    virtualMachines List<Property Map>
    justification String
    The justification for making the initiate request

    JitNetworkAccessRequestVirtualMachine, JitNetworkAccessRequestVirtualMachineArgs

    Id string
    Resource ID of the virtual machine that is linked to this policy
    Ports List<Pulumi.AzureNative.Security.Inputs.JitNetworkAccessRequestPort>
    The ports that were opened for the virtual machine
    Id string
    Resource ID of the virtual machine that is linked to this policy
    Ports []JitNetworkAccessRequestPort
    The ports that were opened for the virtual machine
    id String
    Resource ID of the virtual machine that is linked to this policy
    ports List<JitNetworkAccessRequestPort>
    The ports that were opened for the virtual machine
    id string
    Resource ID of the virtual machine that is linked to this policy
    ports JitNetworkAccessRequestPort[]
    The ports that were opened for the virtual machine
    id str
    Resource ID of the virtual machine that is linked to this policy
    ports Sequence[JitNetworkAccessRequestPort]
    The ports that were opened for the virtual machine
    id String
    Resource ID of the virtual machine that is linked to this policy
    ports List<Property Map>
    The ports that were opened for the virtual machine

    JitNetworkAccessRequestVirtualMachineResponse, JitNetworkAccessRequestVirtualMachineResponseArgs

    Id string
    Resource ID of the virtual machine that is linked to this policy
    Ports List<Pulumi.AzureNative.Security.Inputs.JitNetworkAccessRequestPortResponse>
    The ports that were opened for the virtual machine
    Id string
    Resource ID of the virtual machine that is linked to this policy
    Ports []JitNetworkAccessRequestPortResponse
    The ports that were opened for the virtual machine
    id String
    Resource ID of the virtual machine that is linked to this policy
    ports List<JitNetworkAccessRequestPortResponse>
    The ports that were opened for the virtual machine
    id string
    Resource ID of the virtual machine that is linked to this policy
    ports JitNetworkAccessRequestPortResponse[]
    The ports that were opened for the virtual machine
    id str
    Resource ID of the virtual machine that is linked to this policy
    ports Sequence[JitNetworkAccessRequestPortResponse]
    The ports that were opened for the virtual machine
    id String
    Resource ID of the virtual machine that is linked to this policy
    ports List<Property Map>
    The ports that were opened for the virtual machine

    Protocol, ProtocolArgs

    TCP
    TCP
    UDP
    UDP
    All
    *
    ProtocolTCP
    TCP
    ProtocolUDP
    UDP
    ProtocolAll
    *
    TCP
    TCP
    UDP
    UDP
    All
    *
    TCP
    TCP
    UDP
    UDP
    All
    *
    TCP
    TCP
    UDP
    UDP
    ALL
    *
    "TCP"
    TCP
    "UDP"
    UDP
    "*"
    *

    Status, StatusArgs

    Revoked
    Revoked
    Initiated
    Initiated
    StatusRevoked
    Revoked
    StatusInitiated
    Initiated
    Revoked
    Revoked
    Initiated
    Initiated
    Revoked
    Revoked
    Initiated
    Initiated
    REVOKED
    Revoked
    INITIATED
    Initiated
    "Revoked"
    Revoked
    "Initiated"
    Initiated

    StatusReason, StatusReasonArgs

    Expired
    Expired
    UserRequested
    UserRequested
    NewerRequestInitiated
    NewerRequestInitiated
    StatusReasonExpired
    Expired
    StatusReasonUserRequested
    UserRequested
    StatusReasonNewerRequestInitiated
    NewerRequestInitiated
    Expired
    Expired
    UserRequested
    UserRequested
    NewerRequestInitiated
    NewerRequestInitiated
    Expired
    Expired
    UserRequested
    UserRequested
    NewerRequestInitiated
    NewerRequestInitiated
    EXPIRED
    Expired
    USER_REQUESTED
    UserRequested
    NEWER_REQUEST_INITIATED
    NewerRequestInitiated
    "Expired"
    Expired
    "UserRequested"
    UserRequested
    "NewerRequestInitiated"
    NewerRequestInitiated

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:security:JitNetworkAccessPolicy default /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/locations/{ascLocation}/jitNetworkAccessPolicies/{jitNetworkAccessPolicyName} 
    

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
    Azure Native v2.33.0 published on Friday, Mar 22, 2024 by Pulumi