We recommend new projects start with resources from the AWS provider.
published on Monday, Nov 2, 2026 by Pulumi
We recommend new projects start with resources from the AWS provider.
published on Monday, Nov 2, 2026 by Pulumi
Resource Type definition for AWS::NetworkSecurityManager::Policy. Creates and manages a Network Security Manager policy.
Create Policy Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Policy(name: string, args: PolicyArgs, opts?: CustomResourceOptions);@overload
def Policy(resource_name: str,
args: PolicyArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Policy(resource_name: str,
opts: Optional[ResourceOptions] = None,
firewall_type: Optional[PolicyFirewallType] = None,
policy_configuration: Optional[PolicyConfigurationArgs] = None,
priority: Optional[int] = None,
associated_template_and_rule_list: Optional[Sequence[PolicyAssociatedTemplateAndRuleArgs]] = None,
policy_description: Optional[str] = None,
policy_name: Optional[str] = None,
tags: Optional[Sequence[_root_inputs.TagArgs]] = None)func NewPolicy(ctx *Context, name string, args PolicyArgs, opts ...ResourceOption) (*Policy, error)public Policy(string name, PolicyArgs args, CustomResourceOptions? opts = null)
public Policy(String name, PolicyArgs args)
public Policy(String name, PolicyArgs args, CustomResourceOptions options)
type: aws-native:networksecuritymanager:Policy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "aws-native_networksecuritymanager_policy" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Policy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Policy resource accepts the following input properties:
- Firewall
Type Pulumi.Aws Native. Network Security Manager. Policy Firewall Type - The type of firewall.
- Policy
Configuration Pulumi.Aws Native. Network Security Manager. Inputs. Policy Configuration - Configuration settings for policy behavior.
- Priority int
- The priority of the policy.
- Associated
Template List<Pulumi.And Rule List Aws Native. Network Security Manager. Inputs. Policy Associated Template And Rule> - List of templates and rules associated with this policy.
- Policy
Description string - A description of the policy.
- Policy
Name string - The name of the policy.
-
List<Pulumi.
Aws Native. Inputs. Tag> - The tags associated with the policy.
- Firewall
Type PolicyFirewall Type - The type of firewall.
- Policy
Configuration PolicyConfiguration Args - Configuration settings for policy behavior.
- Priority int
- The priority of the policy.
- Associated
Template []PolicyAnd Rule List Associated Template And Rule Args - List of templates and rules associated with this policy.
- Policy
Description string - A description of the policy.
- Policy
Name string - The name of the policy.
-
Tag
Args - The tags associated with the policy.
- firewall_
type "WAF" | "SHIELD_ADVANCED" - The type of firewall.
- policy_
configuration object - Configuration settings for policy behavior.
- priority number
- The priority of the policy.
- associated_
template_ list(object)and_ rule_ list - List of templates and rules associated with this policy.
- policy_
description string - A description of the policy.
- policy_
name string - The name of the policy.
- list(object)
- The tags associated with the policy.
- firewall
Type PolicyFirewall Type - The type of firewall.
- policy
Configuration PolicyConfiguration - Configuration settings for policy behavior.
- priority Integer
- The priority of the policy.
- associated
Template List<PolicyAnd Rule List Associated Template And Rule> - List of templates and rules associated with this policy.
- policy
Description String - A description of the policy.
- policy
Name String - The name of the policy.
- List<Tag>
- The tags associated with the policy.
- firewall
Type PolicyFirewall Type - The type of firewall.
- policy
Configuration PolicyConfiguration - Configuration settings for policy behavior.
- priority number
- The priority of the policy.
- associated
Template PolicyAnd Rule List Associated Template And Rule[] - List of templates and rules associated with this policy.
- policy
Description string - A description of the policy.
- policy
Name string - The name of the policy.
- Tag[]
- The tags associated with the policy.
- firewall_
type PolicyFirewall Type - The type of firewall.
- policy_
configuration PolicyConfiguration Args - Configuration settings for policy behavior.
- priority int
- The priority of the policy.
- associated_
template_ Sequence[Policyand_ rule_ list Associated Template And Rule Args] - List of templates and rules associated with this policy.
- policy_
description str - A description of the policy.
- policy_
name str - The name of the policy.
-
Sequence[Tag
Args] - The tags associated with the policy.
- firewall
Type "WAF" | "SHIELD_ADVANCED" - The type of firewall.
- policy
Configuration Property Map - Configuration settings for policy behavior.
- priority Number
- The priority of the policy.
- associated
Template List<Property Map>And Rule List - List of templates and rules associated with this policy.
- policy
Description String - A description of the policy.
- policy
Name String - The name of the policy.
- List<Property Map>
- The tags associated with the policy.
Outputs
All input properties are implicitly available as output properties. Additionally, the Policy resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Policy
Arn string - The ARN of the policy.
- Policy
Id string - The unique identifier of the policy.
- Status
Pulumi.
Aws Native. Network Security Manager. Policy Status - The status of the policy.
- Updated
At string - An ISO 8601 timestamp indicating when the policy was last modified.
- Version string
- The version number.
- Id string
- The provider-assigned unique ID for this managed resource.
- Policy
Arn string - The ARN of the policy.
- Policy
Id string - The unique identifier of the policy.
- Status
Policy
Status - The status of the policy.
- Updated
At string - An ISO 8601 timestamp indicating when the policy was last modified.
- Version string
- The version number.
- id string
- The provider-assigned unique ID for this managed resource.
- policy_
arn string - The ARN of the policy.
- policy_
id string - The unique identifier of the policy.
- status "DRAFT" | "ACTIVE" | "DISABLED"
- The status of the policy.
- updated_
at string - An ISO 8601 timestamp indicating when the policy was last modified.
- version string
- The version number.
- id String
- The provider-assigned unique ID for this managed resource.
- policy
Arn String - The ARN of the policy.
- policy
Id String - The unique identifier of the policy.
- status
Policy
Status - The status of the policy.
- updated
At String - An ISO 8601 timestamp indicating when the policy was last modified.
- version String
- The version number.
- id string
- The provider-assigned unique ID for this managed resource.
- policy
Arn string - The ARN of the policy.
- policy
Id string - The unique identifier of the policy.
- status
Policy
Status - The status of the policy.
- updated
At string - An ISO 8601 timestamp indicating when the policy was last modified.
- version string
- The version number.
- id str
- The provider-assigned unique ID for this managed resource.
- policy_
arn str - The ARN of the policy.
- policy_
id str - The unique identifier of the policy.
- status
Policy
Status - The status of the policy.
- updated_
at str - An ISO 8601 timestamp indicating when the policy was last modified.
- version str
- The version number.
- id String
- The provider-assigned unique ID for this managed resource.
- policy
Arn String - The ARN of the policy.
- policy
Id String - The unique identifier of the policy.
- status "DRAFT" | "ACTIVE" | "DISABLED"
- The status of the policy.
- updated
At String - An ISO 8601 timestamp indicating when the policy was last modified.
- version String
- The version number.
Supporting Types
PolicyAssociatedTemplateAndRule, PolicyAssociatedTemplateAndRuleArgs
Associates either a template or a rule with a policy.- Rule
Arn string - ARN of the associated rule.
- Template
Arn string - ARN of the associated template.
- Rule
Arn string - ARN of the associated rule.
- Template
Arn string - ARN of the associated template.
- rule_
arn string - ARN of the associated rule.
- template_
arn string - ARN of the associated template.
- rule
Arn String - ARN of the associated rule.
- template
Arn String - ARN of the associated template.
- rule
Arn string - ARN of the associated rule.
- template
Arn string - ARN of the associated template.
- rule_
arn str - ARN of the associated rule.
- template_
arn str - ARN of the associated template.
- rule
Arn String - ARN of the associated rule.
- template
Arn String - ARN of the associated template.
PolicyConfiguration, PolicyConfigurationArgs
Configuration settings for policy behavior.- Remediation
Enabled bool - Controls automatic remediation of non-compliant resources.
- Resources
Clean boolUp - Controls automatic cleanup of unused resources.
- Waf
Config Pulumi.Aws Native. Network Security Manager. Inputs. Policy Waf Config
- Remediation
Enabled bool - Controls automatic remediation of non-compliant resources.
- Resources
Clean boolUp - Controls automatic cleanup of unused resources.
- Waf
Config PolicyWaf Config
- remediation_
enabled bool - Controls automatic remediation of non-compliant resources.
- resources_
clean_ boolup - Controls automatic cleanup of unused resources.
- waf_
config object
- remediation
Enabled Boolean - Controls automatic remediation of non-compliant resources.
- resources
Clean BooleanUp - Controls automatic cleanup of unused resources.
- waf
Config PolicyWaf Config
- remediation
Enabled boolean - Controls automatic remediation of non-compliant resources.
- resources
Clean booleanUp - Controls automatic cleanup of unused resources.
- waf
Config PolicyWaf Config
- remediation_
enabled bool - Controls automatic remediation of non-compliant resources.
- resources_
clean_ boolup - Controls automatic cleanup of unused resources.
- waf_
config PolicyWaf Config
- remediation
Enabled Boolean - Controls automatic remediation of non-compliant resources.
- resources
Clean BooleanUp - Controls automatic cleanup of unused resources.
- waf
Config Property Map
PolicyFirewallType, PolicyFirewallTypeArgs
- Waf
WAF- Shield
Advanced SHIELD_ADVANCED
- Policy
Firewall Type Waf WAF- Policy
Firewall Type Shield Advanced SHIELD_ADVANCED
- "WAF"
WAF- "SHIELD_ADVANCED"
SHIELD_ADVANCED
- Waf
WAF- Shield
Advanced SHIELD_ADVANCED
- Waf
WAF- Shield
Advanced SHIELD_ADVANCED
- WAF
WAF- SHIELD_ADVANCED
SHIELD_ADVANCED
- "WAF"
WAF- "SHIELD_ADVANCED"
SHIELD_ADVANCED
PolicyStatus, PolicyStatusArgs
- Draft
DRAFT- Active
ACTIVE- Disabled
DISABLED
- Policy
Status Draft DRAFT- Policy
Status Active ACTIVE- Policy
Status Disabled DISABLED
- "DRAFT"
DRAFT- "ACTIVE"
ACTIVE- "DISABLED"
DISABLED
- Draft
DRAFT- Active
ACTIVE- Disabled
DISABLED
- Draft
DRAFT- Active
ACTIVE- Disabled
DISABLED
- DRAFT
DRAFT- ACTIVE
ACTIVE- DISABLED
DISABLED
- "DRAFT"
DRAFT- "ACTIVE"
ACTIVE- "DISABLED"
DISABLED
PolicyWafConfig, PolicyWafConfigArgs
WAF-specific policy settings. Populated only for WAF firewall type policies.- Conflict
Resolution Pulumi.Aws Native. Network Security Manager. Policy Waf Config Conflict Resolution - Conflict-resolution strategy applied to AWS WAF policies.
- Existing
Customer Pulumi.Web Acl Resolution Aws Native. Network Security Manager. Policy Waf Config Existing Customer Web Acl Resolution - Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
- Conflict
Resolution PolicyWaf Config Conflict Resolution - Conflict-resolution strategy applied to AWS WAF policies.
- Existing
Customer PolicyWeb Acl Resolution Waf Config Existing Customer Web Acl Resolution - Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
- conflict_
resolution "MERGE_WHERE_APPLICABLE" - Conflict-resolution strategy applied to AWS WAF policies.
- existing_
customer_ "RETROFIT" | "OVERRIDE_ASSOCIATION" | "NO_REMEDIATION"web_ acl_ resolution - Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
- conflict
Resolution PolicyWaf Config Conflict Resolution - Conflict-resolution strategy applied to AWS WAF policies.
- existing
Customer PolicyWeb Acl Resolution Waf Config Existing Customer Web Acl Resolution - Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
- conflict
Resolution PolicyWaf Config Conflict Resolution - Conflict-resolution strategy applied to AWS WAF policies.
- existing
Customer PolicyWeb Acl Resolution Waf Config Existing Customer Web Acl Resolution - Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
- conflict_
resolution PolicyWaf Config Conflict Resolution - Conflict-resolution strategy applied to AWS WAF policies.
- existing_
customer_ Policyweb_ acl_ resolution Waf Config Existing Customer Web Acl Resolution - Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
- conflict
Resolution "MERGE_WHERE_APPLICABLE" - Conflict-resolution strategy applied to AWS WAF policies.
- existing
Customer "RETROFIT" | "OVERRIDE_ASSOCIATION" | "NO_REMEDIATION"Web Acl Resolution - Controls how Network Security Manager handles remediation when a resource already has a customer-created WebACL.
PolicyWafConfigConflictResolution, PolicyWafConfigConflictResolutionArgs
- Merge
Where Applicable MERGE_WHERE_APPLICABLE
- Policy
Waf Config Conflict Resolution Merge Where Applicable MERGE_WHERE_APPLICABLE
- "MERGE_WHERE_APPLICABLE"
MERGE_WHERE_APPLICABLE
- Merge
Where Applicable MERGE_WHERE_APPLICABLE
- Merge
Where Applicable MERGE_WHERE_APPLICABLE
- MERGE_WHERE_APPLICABLE
MERGE_WHERE_APPLICABLE
- "MERGE_WHERE_APPLICABLE"
MERGE_WHERE_APPLICABLE
PolicyWafConfigExistingCustomerWebAclResolution, PolicyWafConfigExistingCustomerWebAclResolutionArgs
- Retrofit
RETROFIT- Override
Association OVERRIDE_ASSOCIATION- No
Remediation NO_REMEDIATION
- Policy
Waf Config Existing Customer Web Acl Resolution Retrofit RETROFIT- Policy
Waf Config Existing Customer Web Acl Resolution Override Association OVERRIDE_ASSOCIATION- Policy
Waf Config Existing Customer Web Acl Resolution No Remediation NO_REMEDIATION
- "RETROFIT"
RETROFIT- "OVERRIDE_ASSOCIATION"
OVERRIDE_ASSOCIATION- "NO_REMEDIATION"
NO_REMEDIATION
- Retrofit
RETROFIT- Override
Association OVERRIDE_ASSOCIATION- No
Remediation NO_REMEDIATION
- Retrofit
RETROFIT- Override
Association OVERRIDE_ASSOCIATION- No
Remediation NO_REMEDIATION
- RETROFIT
RETROFIT- OVERRIDE_ASSOCIATION
OVERRIDE_ASSOCIATION- NO_REMEDIATION
NO_REMEDIATION
- "RETROFIT"
RETROFIT- "OVERRIDE_ASSOCIATION"
OVERRIDE_ASSOCIATION- "NO_REMEDIATION"
NO_REMEDIATION
Tag, TagArgs
A set of tags to apply to the resource.Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
We recommend new projects start with resources from the AWS provider.
published on Monday, Nov 2, 2026 by Pulumi