Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Auth0 Provider
  3. API Docs
  4. NetworkAcl
Auth0 v3.19.1 published on Wednesday, Apr 30, 2025 by Pulumi
pulumi/pulumi-auth0

auth0.NetworkAcl

Explore with Pulumi AI

auth0 logo
Auth0 v3.19.1 published on Wednesday, Apr 30, 2025 by Pulumi
pulumi/pulumi-auth0

    With this resource, you can create and manage NetworkACLs for a tenant.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as auth0 from "@pulumi/auth0";

// Example of auth0_network_acl with match criteria
const myNetworkAclMatch = new auth0.NetworkAcl("my_network_acl_match", {
    description: "Example with match network ACL",
    active: true,
    priority: 1,
    rule: {
        action: {
            allow: true,
        },
        scope: "management",
        match: {
            geoCountryCodes: [
                "US",
                "CA",
            ],
            geoSubdivisionCodes: [
                "US-NY",
                "CA-ON",
            ],
        },
    },
});
// Example of auth0_network_acl with not-match criteria
const myNetworkAclNotMatch = new auth0.NetworkAcl("my_network_acl_not_match", {
    description: "Example with not match network ACL",
    active: true,
    priority: 3,
    rule: {
        action: {
            log: true,
        },
        scope: "authentication",
        notMatch: {
            asns: [9876],
            ipv4Cidrs: [
                "192.168.1.0/24",
                "10.0.0.0/8",
            ],
            ipv6Cidrs: ["2001:db8::/32"],
        },
    },
});

    import pulumi
import pulumi_auth0 as auth0

# Example of auth0_network_acl with match criteria
my_network_acl_match = auth0.NetworkAcl("my_network_acl_match",
    description="Example with match network ACL",
    active=True,
    priority=1,
    rule={
        "action": {
            "allow": True,
        },
        "scope": "management",
        "match": {
            "geo_country_codes": [
                "US",
                "CA",
            ],
            "geo_subdivision_codes": [
                "US-NY",
                "CA-ON",
            ],
        },
    })
# Example of auth0_network_acl with not-match criteria
my_network_acl_not_match = auth0.NetworkAcl("my_network_acl_not_match",
    description="Example with not match network ACL",
    active=True,
    priority=3,
    rule={
        "action": {
            "log": True,
        },
        "scope": "authentication",
        "not_match": {
            "asns": [9876],
            "ipv4_cidrs": [
                "192.168.1.0/24",
                "10.0.0.0/8",
            ],
            "ipv6_cidrs": ["2001:db8::/32"],
        },
    })

    package main

import (
	"github.com/pulumi/pulumi-auth0/sdk/v3/go/auth0"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Example of auth0_network_acl with match criteria
		_, err := auth0.NewNetworkAcl(ctx, "my_network_acl_match", &auth0.NetworkAclArgs{
			Description: pulumi.String("Example with match network ACL"),
			Active:      pulumi.Bool(true),
			Priority:    pulumi.Int(1),
			Rule: &auth0.NetworkAclRuleArgs{
				Action: &auth0.NetworkAclRuleActionArgs{
					Allow: pulumi.Bool(true),
				},
				Scope: pulumi.String("management"),
				Match: &auth0.NetworkAclRuleMatchArgs{
					GeoCountryCodes: pulumi.StringArray{
						pulumi.String("US"),
						pulumi.String("CA"),
					},
					GeoSubdivisionCodes: pulumi.StringArray{
						pulumi.String("US-NY"),
						pulumi.String("CA-ON"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		// Example of auth0_network_acl with not-match criteria
		_, err = auth0.NewNetworkAcl(ctx, "my_network_acl_not_match", &auth0.NetworkAclArgs{
			Description: pulumi.String("Example with not match network ACL"),
			Active:      pulumi.Bool(true),
			Priority:    pulumi.Int(3),
			Rule: &auth0.NetworkAclRuleArgs{
				Action: &auth0.NetworkAclRuleActionArgs{
					Log: pulumi.Bool(true),
				},
				Scope: pulumi.String("authentication"),
				NotMatch: &auth0.NetworkAclRuleNotMatchArgs{
					Asns: pulumi.IntArray{
						pulumi.Int(9876),
					},
					Ipv4Cidrs: pulumi.StringArray{
						pulumi.String("192.168.1.0/24"),
						pulumi.String("10.0.0.0/8"),
					},
					Ipv6Cidrs: pulumi.StringArray{
						pulumi.String("2001:db8::/32"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Auth0 = Pulumi.Auth0;

return await Deployment.RunAsync(() => 
{
    // Example of auth0_network_acl with match criteria
    var myNetworkAclMatch = new Auth0.NetworkAcl("my_network_acl_match", new()
    {
        Description = "Example with match network ACL",
        Active = true,
        Priority = 1,
        Rule = new Auth0.Inputs.NetworkAclRuleArgs
        {
            Action = new Auth0.Inputs.NetworkAclRuleActionArgs
            {
                Allow = true,
            },
            Scope = "management",
            Match = new Auth0.Inputs.NetworkAclRuleMatchArgs
            {
                GeoCountryCodes = new[]
                {
                    "US",
                    "CA",
                },
                GeoSubdivisionCodes = new[]
                {
                    "US-NY",
                    "CA-ON",
                },
            },
        },
    });

    // Example of auth0_network_acl with not-match criteria
    var myNetworkAclNotMatch = new Auth0.NetworkAcl("my_network_acl_not_match", new()
    {
        Description = "Example with not match network ACL",
        Active = true,
        Priority = 3,
        Rule = new Auth0.Inputs.NetworkAclRuleArgs
        {
            Action = new Auth0.Inputs.NetworkAclRuleActionArgs
            {
                Log = true,
            },
            Scope = "authentication",
            NotMatch = new Auth0.Inputs.NetworkAclRuleNotMatchArgs
            {
                Asns = new[]
                {
                    9876,
                },
                Ipv4Cidrs = new[]
                {
                    "192.168.1.0/24",
                    "10.0.0.0/8",
                },
                Ipv6Cidrs = new[]
                {
                    "2001:db8::/32",
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.auth0.NetworkAcl;
import com.pulumi.auth0.NetworkAclArgs;
import com.pulumi.auth0.inputs.NetworkAclRuleArgs;
import com.pulumi.auth0.inputs.NetworkAclRuleActionArgs;
import com.pulumi.auth0.inputs.NetworkAclRuleMatchArgs;
import com.pulumi.auth0.inputs.NetworkAclRuleNotMatchArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Example of auth0_network_acl with match criteria
        var myNetworkAclMatch = new NetworkAcl("myNetworkAclMatch", NetworkAclArgs.builder()
            .description("Example with match network ACL")
            .active(true)
            .priority(1)
            .rule(NetworkAclRuleArgs.builder()
                .action(NetworkAclRuleActionArgs.builder()
                    .allow(true)
                    .build())
                .scope("management")
                .match(NetworkAclRuleMatchArgs.builder()
                    .geoCountryCodes(                    
                        "US",
                        "CA")
                    .geoSubdivisionCodes(                    
                        "US-NY",
                        "CA-ON")
                    .build())
                .build())
            .build());

        // Example of auth0_network_acl with not-match criteria
        var myNetworkAclNotMatch = new NetworkAcl("myNetworkAclNotMatch", NetworkAclArgs.builder()
            .description("Example with not match network ACL")
            .active(true)
            .priority(3)
            .rule(NetworkAclRuleArgs.builder()
                .action(NetworkAclRuleActionArgs.builder()
                    .log(true)
                    .build())
                .scope("authentication")
                .notMatch(NetworkAclRuleNotMatchArgs.builder()
                    .asns(9876)
                    .ipv4Cidrs(                    
                        "192.168.1.0/24",
                        "10.0.0.0/8")
                    .ipv6Cidrs("2001:db8::/32")
                    .build())
                .build())
            .build());

    }
}

    resources:
  # Example of auth0_network_acl with match criteria
  myNetworkAclMatch:
    type: auth0:NetworkAcl
    name: my_network_acl_match
    properties:
      description: Example with match network ACL
      active: true
      priority: 1
      rule:
        action:
          allow: true
        scope: management
        match:
          geoCountryCodes:
            - US
            - CA
          geoSubdivisionCodes:
            - US-NY
            - CA-ON
  # Example of auth0_network_acl with not-match criteria
  myNetworkAclNotMatch:
    type: auth0:NetworkAcl
    name: my_network_acl_not_match
    properties:
      description: Example with not match network ACL
      active: true
      priority: 3
      rule:
        action:
          log: true
        scope: authentication
        notMatch:
          asns:
            - 9876
          ipv4Cidrs:
            - 192.168.1.0/24
            - 10.0.0.0/8
          ipv6Cidrs:
            - 2001:db8::/32

    Create NetworkAcl Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new NetworkAcl(name: string, args: NetworkAclArgs, opts?: CustomResourceOptions);
    @overload
def NetworkAcl(resource_name: str,
               args: NetworkAclArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def NetworkAcl(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               active: Optional[bool] = None,
               description: Optional[str] = None,
               priority: Optional[int] = None,
               rule: Optional[NetworkAclRuleArgs] = None)
    func NewNetworkAcl(ctx *Context, name string, args NetworkAclArgs, opts ...ResourceOption) (*NetworkAcl, error)
    public NetworkAcl(string name, NetworkAclArgs args, CustomResourceOptions? opts = null)
    public NetworkAcl(String name, NetworkAclArgs args)
public NetworkAcl(String name, NetworkAclArgs args, CustomResourceOptions options)

    type: auth0:NetworkAcl
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args NetworkAclArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NetworkAclArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NetworkAclArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NetworkAclArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NetworkAclArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var networkAclResource = new Auth0.NetworkAcl("networkAclResource", new()
{
    Active = false,
    Description = "string",
    Priority = 0,
    Rule = new Auth0.Inputs.NetworkAclRuleArgs
    {
        Action = new Auth0.Inputs.NetworkAclRuleActionArgs
        {
            Allow = false,
            Block = false,
            Log = false,
            Redirect = false,
            RedirectUri = "string",
        },
        Scope = "string",
        Match = new Auth0.Inputs.NetworkAclRuleMatchArgs
        {
            Asns = new[]
            {
                0,
            },
            GeoCountryCodes = new[]
            {
                "string",
            },
            GeoSubdivisionCodes = new[]
            {
                "string",
            },
            Ipv4Cidrs = new[]
            {
                "string",
            },
            Ipv6Cidrs = new[]
            {
                "string",
            },
            Ja3Fingerprints = new[]
            {
                "string",
            },
            Ja4Fingerprints = new[]
            {
                "string",
            },
            UserAgents = new[]
            {
                "string",
            },
        },
        NotMatch = new Auth0.Inputs.NetworkAclRuleNotMatchArgs
        {
            Asns = new[]
            {
                0,
            },
            GeoCountryCodes = new[]
            {
                "string",
            },
            GeoSubdivisionCodes = new[]
            {
                "string",
            },
            Ipv4Cidrs = new[]
            {
                "string",
            },
            Ipv6Cidrs = new[]
            {
                "string",
            },
            Ja3Fingerprints = new[]
            {
                "string",
            },
            Ja4Fingerprints = new[]
            {
                "string",
            },
            UserAgents = new[]
            {
                "string",
            },
        },
    },
});

    example, err := auth0.NewNetworkAcl(ctx, "networkAclResource", &auth0.NetworkAclArgs{
	Active:      pulumi.Bool(false),
	Description: pulumi.String("string"),
	Priority:    pulumi.Int(0),
	Rule: &auth0.NetworkAclRuleArgs{
		Action: &auth0.NetworkAclRuleActionArgs{
			Allow:       pulumi.Bool(false),
			Block:       pulumi.Bool(false),
			Log:         pulumi.Bool(false),
			Redirect:    pulumi.Bool(false),
			RedirectUri: pulumi.String("string"),
		},
		Scope: pulumi.String("string"),
		Match: &auth0.NetworkAclRuleMatchArgs{
			Asns: pulumi.IntArray{
				pulumi.Int(0),
			},
			GeoCountryCodes: pulumi.StringArray{
				pulumi.String("string"),
			},
			GeoSubdivisionCodes: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ipv4Cidrs: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ipv6Cidrs: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ja3Fingerprints: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ja4Fingerprints: pulumi.StringArray{
				pulumi.String("string"),
			},
			UserAgents: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		NotMatch: &auth0.NetworkAclRuleNotMatchArgs{
			Asns: pulumi.IntArray{
				pulumi.Int(0),
			},
			GeoCountryCodes: pulumi.StringArray{
				pulumi.String("string"),
			},
			GeoSubdivisionCodes: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ipv4Cidrs: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ipv6Cidrs: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ja3Fingerprints: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ja4Fingerprints: pulumi.StringArray{
				pulumi.String("string"),
			},
			UserAgents: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
})

    var networkAclResource = new NetworkAcl("networkAclResource", NetworkAclArgs.builder()
    .active(false)
    .description("string")
    .priority(0)
    .rule(NetworkAclRuleArgs.builder()
        .action(NetworkAclRuleActionArgs.builder()
            .allow(false)
            .block(false)
            .log(false)
            .redirect(false)
            .redirectUri("string")
            .build())
        .scope("string")
        .match(NetworkAclRuleMatchArgs.builder()
            .asns(0)
            .geoCountryCodes("string")
            .geoSubdivisionCodes("string")
            .ipv4Cidrs("string")
            .ipv6Cidrs("string")
            .ja3Fingerprints("string")
            .ja4Fingerprints("string")
            .userAgents("string")
            .build())
        .notMatch(NetworkAclRuleNotMatchArgs.builder()
            .asns(0)
            .geoCountryCodes("string")
            .geoSubdivisionCodes("string")
            .ipv4Cidrs("string")
            .ipv6Cidrs("string")
            .ja3Fingerprints("string")
            .ja4Fingerprints("string")
            .userAgents("string")
            .build())
        .build())
    .build());

    network_acl_resource = auth0.NetworkAcl("networkAclResource",
    active=False,
    description="string",
    priority=0,
    rule={
        "action": {
            "allow": False,
            "block": False,
            "log": False,
            "redirect": False,
            "redirect_uri": "string",
        },
        "scope": "string",
        "match": {
            "asns": [0],
            "geo_country_codes": ["string"],
            "geo_subdivision_codes": ["string"],
            "ipv4_cidrs": ["string"],
            "ipv6_cidrs": ["string"],
            "ja3_fingerprints": ["string"],
            "ja4_fingerprints": ["string"],
            "user_agents": ["string"],
        },
        "not_match": {
            "asns": [0],
            "geo_country_codes": ["string"],
            "geo_subdivision_codes": ["string"],
            "ipv4_cidrs": ["string"],
            "ipv6_cidrs": ["string"],
            "ja3_fingerprints": ["string"],
            "ja4_fingerprints": ["string"],
            "user_agents": ["string"],
        },
    })

    const networkAclResource = new auth0.NetworkAcl("networkAclResource", {
    active: false,
    description: "string",
    priority: 0,
    rule: {
        action: {
            allow: false,
            block: false,
            log: false,
            redirect: false,
            redirectUri: "string",
        },
        scope: "string",
        match: {
            asns: [0],
            geoCountryCodes: ["string"],
            geoSubdivisionCodes: ["string"],
            ipv4Cidrs: ["string"],
            ipv6Cidrs: ["string"],
            ja3Fingerprints: ["string"],
            ja4Fingerprints: ["string"],
            userAgents: ["string"],
        },
        notMatch: {
            asns: [0],
            geoCountryCodes: ["string"],
            geoSubdivisionCodes: ["string"],
            ipv4Cidrs: ["string"],
            ipv6Cidrs: ["string"],
            ja3Fingerprints: ["string"],
            ja4Fingerprints: ["string"],
            userAgents: ["string"],
        },
    },
});

    type: auth0:NetworkAcl
properties:
    active: false
    description: string
    priority: 0
    rule:
        action:
            allow: false
            block: false
            log: false
            redirect: false
            redirectUri: string
        match:
            asns:
                - 0
            geoCountryCodes:
                - string
            geoSubdivisionCodes:
                - string
            ipv4Cidrs:
                - string
            ipv6Cidrs:
                - string
            ja3Fingerprints:
                - string
            ja4Fingerprints:
                - string
            userAgents:
                - string
        notMatch:
            asns:
                - 0
            geoCountryCodes:
                - string
            geoSubdivisionCodes:
                - string
            ipv4Cidrs:
                - string
            ipv6Cidrs:
                - string
            ja3Fingerprints:
                - string
            ja4Fingerprints:
                - string
            userAgents:
                - string
        scope: string

    NetworkAcl Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The NetworkAcl resource accepts the following input properties:

    Active bool
    Whether the Network ACL is active
    Description string
    The description of the Network ACL
    Priority int
    The priority of the Network ACL. Must be unique between 1 and 10.
    Rule NetworkAclRule
    The rule of the Network ACL
    Active bool
    Whether the Network ACL is active
    Description string
    The description of the Network ACL
    Priority int
    The priority of the Network ACL. Must be unique between 1 and 10.
    Rule NetworkAclRuleArgs
    The rule of the Network ACL
    active Boolean
    Whether the Network ACL is active
    description String
    The description of the Network ACL
    priority Integer
    The priority of the Network ACL. Must be unique between 1 and 10.
    rule NetworkAclRule
    The rule of the Network ACL
    active boolean
    Whether the Network ACL is active
    description string
    The description of the Network ACL
    priority number
    The priority of the Network ACL. Must be unique between 1 and 10.
    rule NetworkAclRule
    The rule of the Network ACL
    active bool
    Whether the Network ACL is active
    description str
    The description of the Network ACL
    priority int
    The priority of the Network ACL. Must be unique between 1 and 10.
    rule NetworkAclRuleArgs
    The rule of the Network ACL
    active Boolean
    Whether the Network ACL is active
    description String
    The description of the Network ACL
    priority Number
    The priority of the Network ACL. Must be unique between 1 and 10.
    rule Property Map
    The rule of the Network ACL

    Outputs

    All input properties are implicitly available as output properties. Additionally, the NetworkAcl resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing NetworkAcl Resource

    Get an existing NetworkAcl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NetworkAclState, opts?: CustomResourceOptions): NetworkAcl
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        active: Optional[bool] = None,
        description: Optional[str] = None,
        priority: Optional[int] = None,
        rule: Optional[NetworkAclRuleArgs] = None) -> NetworkAcl
    func GetNetworkAcl(ctx *Context, name string, id IDInput, state *NetworkAclState, opts ...ResourceOption) (*NetworkAcl, error)
    public static NetworkAcl Get(string name, Input<string> id, NetworkAclState? state, CustomResourceOptions? opts = null)
    public static NetworkAcl get(String name, Output<String> id, NetworkAclState state, CustomResourceOptions options)
    resources:  _:    type: auth0:NetworkAcl    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Active bool
    Whether the Network ACL is active
    Description string
    The description of the Network ACL
    Priority int
    The priority of the Network ACL. Must be unique between 1 and 10.
    Rule NetworkAclRule
    The rule of the Network ACL
    Active bool
    Whether the Network ACL is active
    Description string
    The description of the Network ACL
    Priority int
    The priority of the Network ACL. Must be unique between 1 and 10.
    Rule NetworkAclRuleArgs
    The rule of the Network ACL
    active Boolean
    Whether the Network ACL is active
    description String
    The description of the Network ACL
    priority Integer
    The priority of the Network ACL. Must be unique between 1 and 10.
    rule NetworkAclRule
    The rule of the Network ACL
    active boolean
    Whether the Network ACL is active
    description string
    The description of the Network ACL
    priority number
    The priority of the Network ACL. Must be unique between 1 and 10.
    rule NetworkAclRule
    The rule of the Network ACL
    active bool
    Whether the Network ACL is active
    description str
    The description of the Network ACL
    priority int
    The priority of the Network ACL. Must be unique between 1 and 10.
    rule NetworkAclRuleArgs
    The rule of the Network ACL
    active Boolean
    Whether the Network ACL is active
    description String
    The description of the Network ACL
    priority Number
    The priority of the Network ACL. Must be unique between 1 and 10.
    rule Property Map
    The rule of the Network ACL

    Supporting Types

    NetworkAclRule, NetworkAclRuleArgs

    Action NetworkAclRuleAction
    The action configuration for the Network ACL Rule. Only one action type (block, allow, log, or redirect) should be specified.
    Scope string
    The scope of the Network ACL Rule
    Match NetworkAclRuleMatch
    The configuration for the Network ACL Rule
    NotMatch NetworkAclRuleNotMatch
    The configuration for the Network ACL Rule
    Action NetworkAclRuleAction
    The action configuration for the Network ACL Rule. Only one action type (block, allow, log, or redirect) should be specified.
    Scope string
    The scope of the Network ACL Rule
    Match NetworkAclRuleMatch
    The configuration for the Network ACL Rule
    NotMatch NetworkAclRuleNotMatch
    The configuration for the Network ACL Rule
    action NetworkAclRuleAction
    The action configuration for the Network ACL Rule. Only one action type (block, allow, log, or redirect) should be specified.
    scope String
    The scope of the Network ACL Rule
    match NetworkAclRuleMatch
    The configuration for the Network ACL Rule
    notMatch NetworkAclRuleNotMatch
    The configuration for the Network ACL Rule
    action NetworkAclRuleAction
    The action configuration for the Network ACL Rule. Only one action type (block, allow, log, or redirect) should be specified.
    scope string
    The scope of the Network ACL Rule
    match NetworkAclRuleMatch
    The configuration for the Network ACL Rule
    notMatch NetworkAclRuleNotMatch
    The configuration for the Network ACL Rule
    action NetworkAclRuleAction
    The action configuration for the Network ACL Rule. Only one action type (block, allow, log, or redirect) should be specified.
    scope str
    The scope of the Network ACL Rule
    match NetworkAclRuleMatch
    The configuration for the Network ACL Rule
    not_match NetworkAclRuleNotMatch
    The configuration for the Network ACL Rule
    action Property Map
    The action configuration for the Network ACL Rule. Only one action type (block, allow, log, or redirect) should be specified.
    scope String
    The scope of the Network ACL Rule
    match Property Map
    The configuration for the Network ACL Rule
    notMatch Property Map
    The configuration for the Network ACL Rule

    NetworkAclRuleAction, NetworkAclRuleActionArgs

    Allow bool
    If true, allows the request. When using allow action, no other properties should be set.
    Block bool
    If true, blocks the request. When using block action, no other properties should be set.
    Log bool
    If true, logs the request. When using log action, no other properties should be set.
    Redirect bool
    If true, redirects the request. When using redirect action, redirect_uri must also be specified.
    RedirectUri string
    The URI to redirect to when redirect is true. Required when redirect is true. Must be between 1 and 2000 characters.
    Allow bool
    If true, allows the request. When using allow action, no other properties should be set.
    Block bool
    If true, blocks the request. When using block action, no other properties should be set.
    Log bool
    If true, logs the request. When using log action, no other properties should be set.
    Redirect bool
    If true, redirects the request. When using redirect action, redirect_uri must also be specified.
    RedirectUri string
    The URI to redirect to when redirect is true. Required when redirect is true. Must be between 1 and 2000 characters.
    allow Boolean
    If true, allows the request. When using allow action, no other properties should be set.
    block Boolean
    If true, blocks the request. When using block action, no other properties should be set.
    log Boolean
    If true, logs the request. When using log action, no other properties should be set.
    redirect Boolean
    If true, redirects the request. When using redirect action, redirect_uri must also be specified.
    redirectUri String
    The URI to redirect to when redirect is true. Required when redirect is true. Must be between 1 and 2000 characters.
    allow boolean
    If true, allows the request. When using allow action, no other properties should be set.
    block boolean
    If true, blocks the request. When using block action, no other properties should be set.
    log boolean
    If true, logs the request. When using log action, no other properties should be set.
    redirect boolean
    If true, redirects the request. When using redirect action, redirect_uri must also be specified.
    redirectUri string
    The URI to redirect to when redirect is true. Required when redirect is true. Must be between 1 and 2000 characters.
    allow bool
    If true, allows the request. When using allow action, no other properties should be set.
    block bool
    If true, blocks the request. When using block action, no other properties should be set.
    log bool
    If true, logs the request. When using log action, no other properties should be set.
    redirect bool
    If true, redirects the request. When using redirect action, redirect_uri must also be specified.
    redirect_uri str
    The URI to redirect to when redirect is true. Required when redirect is true. Must be between 1 and 2000 characters.
    allow Boolean
    If true, allows the request. When using allow action, no other properties should be set.
    block Boolean
    If true, blocks the request. When using block action, no other properties should be set.
    log Boolean
    If true, logs the request. When using log action, no other properties should be set.
    redirect Boolean
    If true, redirects the request. When using redirect action, redirect_uri must also be specified.
    redirectUri String
    The URI to redirect to when redirect is true. Required when redirect is true. Must be between 1 and 2000 characters.

    NetworkAclRuleMatch, NetworkAclRuleMatchArgs

    Asns List<int>
    ASNs. Must contain between 1 and 10 unique items.
    GeoCountryCodes List<string>
    Geo Country Codes. Must contain between 1 and 10 unique items.
    GeoSubdivisionCodes List<string>
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    Ipv4Cidrs List<string>
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    Ipv6Cidrs List<string>
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    Ja3Fingerprints List<string>
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    Ja4Fingerprints List<string>
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    UserAgents List<string>
    User Agents. Must contain between 1 and 10 unique items.
    Asns []int
    ASNs. Must contain between 1 and 10 unique items.
    GeoCountryCodes []string
    Geo Country Codes. Must contain between 1 and 10 unique items.
    GeoSubdivisionCodes []string
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    Ipv4Cidrs []string
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    Ipv6Cidrs []string
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    Ja3Fingerprints []string
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    Ja4Fingerprints []string
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    UserAgents []string
    User Agents. Must contain between 1 and 10 unique items.
    asns List<Integer>
    ASNs. Must contain between 1 and 10 unique items.
    geoCountryCodes List<String>
    Geo Country Codes. Must contain between 1 and 10 unique items.
    geoSubdivisionCodes List<String>
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    ipv4Cidrs List<String>
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    ipv6Cidrs List<String>
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    ja3Fingerprints List<String>
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    ja4Fingerprints List<String>
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    userAgents List<String>
    User Agents. Must contain between 1 and 10 unique items.
    asns number[]
    ASNs. Must contain between 1 and 10 unique items.
    geoCountryCodes string[]
    Geo Country Codes. Must contain between 1 and 10 unique items.
    geoSubdivisionCodes string[]
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    ipv4Cidrs string[]
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    ipv6Cidrs string[]
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    ja3Fingerprints string[]
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    ja4Fingerprints string[]
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    userAgents string[]
    User Agents. Must contain between 1 and 10 unique items.
    asns Sequence[int]
    ASNs. Must contain between 1 and 10 unique items.
    geo_country_codes Sequence[str]
    Geo Country Codes. Must contain between 1 and 10 unique items.
    geo_subdivision_codes Sequence[str]
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    ipv4_cidrs Sequence[str]
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    ipv6_cidrs Sequence[str]
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    ja3_fingerprints Sequence[str]
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    ja4_fingerprints Sequence[str]
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    user_agents Sequence[str]
    User Agents. Must contain between 1 and 10 unique items.
    asns List<Number>
    ASNs. Must contain between 1 and 10 unique items.
    geoCountryCodes List<String>
    Geo Country Codes. Must contain between 1 and 10 unique items.
    geoSubdivisionCodes List<String>
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    ipv4Cidrs List<String>
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    ipv6Cidrs List<String>
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    ja3Fingerprints List<String>
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    ja4Fingerprints List<String>
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    userAgents List<String>
    User Agents. Must contain between 1 and 10 unique items.

    NetworkAclRuleNotMatch, NetworkAclRuleNotMatchArgs

    Asns List<int>
    ASNs. Must contain between 1 and 10 unique items.
    GeoCountryCodes List<string>
    Geo Country Codes. Must contain between 1 and 10 unique items.
    GeoSubdivisionCodes List<string>
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    Ipv4Cidrs List<string>
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    Ipv6Cidrs List<string>
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    Ja3Fingerprints List<string>
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    Ja4Fingerprints List<string>
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    UserAgents List<string>
    User Agents. Must contain between 1 and 10 unique items.
    Asns []int
    ASNs. Must contain between 1 and 10 unique items.
    GeoCountryCodes []string
    Geo Country Codes. Must contain between 1 and 10 unique items.
    GeoSubdivisionCodes []string
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    Ipv4Cidrs []string
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    Ipv6Cidrs []string
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    Ja3Fingerprints []string
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    Ja4Fingerprints []string
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    UserAgents []string
    User Agents. Must contain between 1 and 10 unique items.
    asns List<Integer>
    ASNs. Must contain between 1 and 10 unique items.
    geoCountryCodes List<String>
    Geo Country Codes. Must contain between 1 and 10 unique items.
    geoSubdivisionCodes List<String>
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    ipv4Cidrs List<String>
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    ipv6Cidrs List<String>
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    ja3Fingerprints List<String>
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    ja4Fingerprints List<String>
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    userAgents List<String>
    User Agents. Must contain between 1 and 10 unique items.
    asns number[]
    ASNs. Must contain between 1 and 10 unique items.
    geoCountryCodes string[]
    Geo Country Codes. Must contain between 1 and 10 unique items.
    geoSubdivisionCodes string[]
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    ipv4Cidrs string[]
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    ipv6Cidrs string[]
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    ja3Fingerprints string[]
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    ja4Fingerprints string[]
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    userAgents string[]
    User Agents. Must contain between 1 and 10 unique items.
    asns Sequence[int]
    ASNs. Must contain between 1 and 10 unique items.
    geo_country_codes Sequence[str]
    Geo Country Codes. Must contain between 1 and 10 unique items.
    geo_subdivision_codes Sequence[str]
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    ipv4_cidrs Sequence[str]
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    ipv6_cidrs Sequence[str]
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    ja3_fingerprints Sequence[str]
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    ja4_fingerprints Sequence[str]
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    user_agents Sequence[str]
    User Agents. Must contain between 1 and 10 unique items.
    asns List<Number>
    ASNs. Must contain between 1 and 10 unique items.
    geoCountryCodes List<String>
    Geo Country Codes. Must contain between 1 and 10 unique items.
    geoSubdivisionCodes List<String>
    Geo Subdivision Codes. Must contain between 1 and 10 unique items.
    ipv4Cidrs List<String>
    IPv4 CIDRs. Must contain between 1 and 10 unique items. Can be IPv4 addresses or CIDR blocks.
    ipv6Cidrs List<String>
    IPv6 CIDRs. Must contain between 1 and 10 unique items. Can be IPv6 addresses or CIDR blocks.
    ja3Fingerprints List<String>
    JA3 Fingerprints. Must contain between 1 and 10 unique items.
    ja4Fingerprints List<String>
    JA4 Fingerprints. Must contain between 1 and 10 unique items.
    userAgents List<String>
    User Agents. Must contain between 1 and 10 unique items.

    Import

    This resource can be imported using the network acl ID.

    Example:

    $ pulumi import auth0:index/networkAcl:NetworkAcl my_network_acl "167f9a50-4444-3333-1111-ndfdaf953ab4"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Auth0 pulumi/pulumi-auth0
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the auth0 Terraform Provider.
    auth0 logo
    Auth0 v3.19.1 published on Wednesday, Apr 30, 2025 by Pulumi
    pulumi/pulumi-auth0