Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. networksecuritymanager
  6. getPolicy

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.85.0
published on Monday, Nov 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.networksecuritymanager.getPolicy

aws-native logo aws-native logo AWS Cloud Control

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.85.0
published on Monday, Nov 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Resource Type definition for AWS::NetworkSecurityManager::Policy. Creates and manages a Network Security Manager policy.

    Using getPolicy

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getPolicy(args: GetPolicyArgs, opts?: InvokeOptions): Promise<GetPolicyResult>
function getPolicyOutput(args: GetPolicyOutputArgs, opts?: InvokeOutputOptions): Output<GetPolicyResult>
    def get_policy(policy_arn: Optional[str] = None,
               opts: Optional[InvokeOptions] = None) -> GetPolicyResult
def get_policy_output(policy_arn: pulumi.Input[Optional[str]] = None,
               opts: Optional[InvokeOutputOptions] = None) -> Output[GetPolicyResult]
    func LookupPolicy(ctx *Context, args *LookupPolicyArgs, opts ...InvokeOption) (*LookupPolicyResult, error)
func LookupPolicyOutput(ctx *Context, args *LookupPolicyOutputArgs, opts ...InvokeOption) LookupPolicyResultOutput

    > Note: This function is named LookupPolicy in the Go SDK.

    public static class GetPolicy 
{
    public static Task<GetPolicyResult> InvokeAsync(GetPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetPolicyResult> Invoke(GetPolicyInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetPolicyResult> Invoke(GetPolicyInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetPolicyResult> getPolicy(GetPolicyArgs args, InvokeOptions options)
public static Output<GetPolicyResult> getPolicy(GetPolicyArgs args, InvokeOptions options)
public static Output<GetPolicyResult> getPolicy(GetPolicyArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: aws-native:networksecuritymanager:getPolicy
  arguments:
    # arguments dictionary
    data "aws-native_networksecuritymanager_get_policy" "name" {
    # arguments
}

    The following arguments are supported:

    PolicyArn string
    The ARN of the policy.
    PolicyArn string
    The ARN of the policy.
    policy_arn string
    The ARN of the policy.
    policyArn String
    The ARN of the policy.
    policyArn string
    The ARN of the policy.
    policy_arn str
    The ARN of the policy.
    policyArn String
    The ARN of the policy.

    getPolicy Result

    The following output properties are available:

    AssociatedTemplateAndRuleList List<Pulumi.AwsNative.NetworkSecurityManager.Outputs.PolicyAssociatedTemplateAndRule>
    List of templates and rules associated with this policy.
    PolicyArn string
    The ARN of the policy.
    PolicyConfiguration Pulumi.AwsNative.NetworkSecurityManager.Outputs.PolicyConfiguration
    Configuration settings for policy behavior.
    PolicyDescription string
    A description of the policy.
    PolicyId string
    The unique identifier of the policy.
    Priority int
    The priority of the policy.
    Status Pulumi.AwsNative.NetworkSecurityManager.PolicyStatus
    The status of the policy.
    Tags List<Pulumi.AwsNative.Outputs.Tag>
    The tags associated with the policy.
    UpdatedAt string
    An ISO 8601 timestamp indicating when the policy was last modified.
    Version string
    The version number.
    AssociatedTemplateAndRuleList []PolicyAssociatedTemplateAndRule
    List of templates and rules associated with this policy.
    PolicyArn string
    The ARN of the policy.
    PolicyConfiguration PolicyConfiguration
    Configuration settings for policy behavior.
    PolicyDescription string
    A description of the policy.
    PolicyId string
    The unique identifier of the policy.
    Priority int
    The priority of the policy.
    Status PolicyStatus
    The status of the policy.
    Tags Tag
    The tags associated with the policy.
    UpdatedAt string
    An ISO 8601 timestamp indicating when the policy was last modified.
    Version string
    The version number.
    associated_template_and_rule_list list(object)
    List of templates and rules associated with this policy.
    policy_arn string
    The ARN of the policy.
    policy_configuration object
    Configuration settings for policy behavior.
    policy_description string
    A description of the policy.
    policy_id string
    The unique identifier of the policy.
    priority number
    The priority of the policy.
    status "DRAFT" | "ACTIVE" | "DISABLED"
    The status of the policy.
    tags list(object)
    The tags associated with the policy.
    updated_at string
    An ISO 8601 timestamp indicating when the policy was last modified.
    version string
    The version number.
    associatedTemplateAndRuleList List<PolicyAssociatedTemplateAndRule>
    List of templates and rules associated with this policy.
    policyArn String
    The ARN of the policy.
    policyConfiguration PolicyConfiguration
    Configuration settings for policy behavior.
    policyDescription String
    A description of the policy.
    policyId String
    The unique identifier of the policy.
    priority Integer
    The priority of the policy.
    status PolicyStatus
    The status of the policy.
    tags List<Tag>
    The tags associated with the policy.
    updatedAt String
    An ISO 8601 timestamp indicating when the policy was last modified.
    version String
    The version number.
    associatedTemplateAndRuleList PolicyAssociatedTemplateAndRule[]
    List of templates and rules associated with this policy.
    policyArn string
    The ARN of the policy.
    policyConfiguration PolicyConfiguration
    Configuration settings for policy behavior.
    policyDescription string
    A description of the policy.
    policyId string
    The unique identifier of the policy.
    priority number
    The priority of the policy.
    status PolicyStatus
    The status of the policy.
    tags Tag[]
    The tags associated with the policy.
    updatedAt string
    An ISO 8601 timestamp indicating when the policy was last modified.
    version string
    The version number.
    associated_template_and_rule_list Sequence[PolicyAssociatedTemplateAndRule]
    List of templates and rules associated with this policy.
    policy_arn str
    The ARN of the policy.
    policy_configuration PolicyConfiguration
    Configuration settings for policy behavior.
    policy_description str
    A description of the policy.
    policy_id str
    The unique identifier of the policy.
    priority int
    The priority of the policy.
    status PolicyStatus
    The status of the policy.
    tags Sequence[root_Tag]
    The tags associated with the policy.
    updated_at str
    An ISO 8601 timestamp indicating when the policy was last modified.
    version str
    The version number.
    associatedTemplateAndRuleList List<Property Map>
    List of templates and rules associated with this policy.
    policyArn String
    The ARN of the policy.
    policyConfiguration Property Map
    Configuration settings for policy behavior.
    policyDescription String
    A description of the policy.
    policyId String
    The unique identifier of the policy.
    priority Number
    The priority of the policy.
    status "DRAFT" | "ACTIVE" | "DISABLED"
    The status of the policy.
    tags List<Property Map>
    The tags associated with the policy.
    updatedAt String
    An ISO 8601 timestamp indicating when the policy was last modified.
    version String
    The version number.

    Supporting Types

    PolicyAssociatedTemplateAndRule

    RuleArn string
    ARN of the associated rule.
    TemplateArn string
    ARN of the associated template.
    RuleArn string
    ARN of the associated rule.
    TemplateArn string
    ARN of the associated template.
    rule_arn string
    ARN of the associated rule.
    template_arn string
    ARN of the associated template.
    ruleArn String
    ARN of the associated rule.
    templateArn String
    ARN of the associated template.
    ruleArn string
    ARN of the associated rule.
    templateArn string
    ARN of the associated template.
    rule_arn str
    ARN of the associated rule.
    template_arn str
    ARN of the associated template.
    ruleArn String
    ARN of the associated rule.
    templateArn String
    ARN of the associated template.

    PolicyConfiguration

    RemediationEnabled bool
    Controls automatic remediation of non-compliant resources.
    ResourcesCleanUp bool
    Controls automatic cleanup of unused resources.
    WafConfig Pulumi.AwsNative.NetworkSecurityManager.Inputs.PolicyWafConfig
    RemediationEnabled bool
    Controls automatic remediation of non-compliant resources.
    ResourcesCleanUp bool
    Controls automatic cleanup of unused resources.
    WafConfig PolicyWafConfig
    remediation_enabled bool
    Controls automatic remediation of non-compliant resources.
    resources_clean_up bool
    Controls automatic cleanup of unused resources.
    waf_config object
    remediationEnabled Boolean
    Controls automatic remediation of non-compliant resources.
    resourcesCleanUp Boolean
    Controls automatic cleanup of unused resources.
    wafConfig PolicyWafConfig
    remediationEnabled boolean
    Controls automatic remediation of non-compliant resources.
    resourcesCleanUp boolean
    Controls automatic cleanup of unused resources.
    wafConfig PolicyWafConfig
    remediation_enabled bool
    Controls automatic remediation of non-compliant resources.
    resources_clean_up bool
    Controls automatic cleanup of unused resources.
    waf_config PolicyWafConfig
    remediationEnabled Boolean
    Controls automatic remediation of non-compliant resources.
    resourcesCleanUp Boolean
    Controls automatic cleanup of unused resources.
    wafConfig Property Map

    PolicyStatus

    PolicyWafConfig

    ConflictResolution Pulumi.AwsNative.NetworkSecurityManager.PolicyWafConfigConflictResolution
    Conflict-resolution strategy applied to AWS WAF policies.
    ExistingCustomerWebAclResolution Pulumi.AwsNative.NetworkSecurityManager.PolicyWafConfigExistingCustomerWebAclResolution
    Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
    ConflictResolution PolicyWafConfigConflictResolution
    Conflict-resolution strategy applied to AWS WAF policies.
    ExistingCustomerWebAclResolution PolicyWafConfigExistingCustomerWebAclResolution
    Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
    conflict_resolution "MERGE_WHERE_APPLICABLE"
    Conflict-resolution strategy applied to AWS WAF policies.
    existing_customer_web_acl_resolution "RETROFIT" | "OVERRIDE_ASSOCIATION" | "NO_REMEDIATION"
    Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
    conflictResolution PolicyWafConfigConflictResolution
    Conflict-resolution strategy applied to AWS WAF policies.
    existingCustomerWebAclResolution PolicyWafConfigExistingCustomerWebAclResolution
    Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
    conflictResolution PolicyWafConfigConflictResolution
    Conflict-resolution strategy applied to AWS WAF policies.
    existingCustomerWebAclResolution PolicyWafConfigExistingCustomerWebAclResolution
    Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
    conflict_resolution PolicyWafConfigConflictResolution
    Conflict-resolution strategy applied to AWS WAF policies.
    existing_customer_web_acl_resolution PolicyWafConfigExistingCustomerWebAclResolution
    Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
    conflictResolution "MERGE_WHERE_APPLICABLE"
    Conflict-resolution strategy applied to AWS WAF policies.
    existingCustomerWebAclResolution "RETROFIT" | "OVERRIDE_ASSOCIATION" | "NO_REMEDIATION"
    Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.

    PolicyWafConfigConflictResolution

    PolicyWafConfigExistingCustomerWebAclResolution

    Tag

    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo AWS Cloud Control

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.85.0
    published on Monday, Nov 2, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial