Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. network
  5. AdminRule
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.5.1 published on Friday, Jun 6, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.network.AdminRule

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.5.1 published on Friday, Jun 6, 2025 by Pulumi
pulumi/pulumi-azure-native

    Network admin rule.

    Uses Azure REST API version 2024-05-01. In version 2.x of the Azure Native provider, it used API version 2023-02-01.

    Other available API versions: 2021-02-01-preview, 2022-01-01, 2022-02-01-preview, 2022-04-01-preview, 2022-05-01, 2022-07-01, 2022-09-01, 2022-11-01, 2023-02-01, 2023-04-01, 2023-05-01, 2023-06-01, 2023-09-01, 2023-11-01, 2024-01-01, 2024-01-01-preview, 2024-03-01, 2024-07-01. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native network [ApiVersion]. See the version guide for details.

    Example Usage

    Create a admin rule with network group as source or destination

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var adminRule = new AzureNative.Network.AdminRule("adminRule", new()
    {
        Access = AzureNative.Network.SecurityConfigurationRuleAccess.Deny,
        ConfigurationName = "myTestSecurityConfig",
        Description = "This is Sample Admin Rule",
        DestinationPortRanges = new[]
        {
            "22",
        },
        Destinations = new[]
        {
            new AzureNative.Network.Inputs.AddressPrefixItemArgs
            {
                AddressPrefix = "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/networkManagers/testNetworkManager/networkGroups/ng1",
                AddressPrefixType = "NetworkGroup",
            },
        },
        Direction = AzureNative.Network.SecurityConfigurationRuleDirection.Inbound,
        Kind = "Custom",
        NetworkManagerName = "testNetworkManager",
        Priority = 1,
        Protocol = AzureNative.Network.SecurityConfigurationRuleProtocol.Tcp,
        ResourceGroupName = "rg1",
        RuleCollectionName = "testRuleCollection",
        RuleName = "SampleAdminRule",
        SourcePortRanges = new[]
        {
            "0-65535",
        },
        Sources = new[]
        {
            new AzureNative.Network.Inputs.AddressPrefixItemArgs
            {
                AddressPrefix = "Internet",
                AddressPrefixType = AzureNative.Network.AddressPrefixType.ServiceTag,
            },
        },
    });

});

    package main

import (
	network "github.com/pulumi/pulumi-azure-native-sdk/network/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := network.NewAdminRule(ctx, "adminRule", &network.AdminRuleArgs{
			Access:            pulumi.String(network.SecurityConfigurationRuleAccessDeny),
			ConfigurationName: pulumi.String("myTestSecurityConfig"),
			Description:       pulumi.String("This is Sample Admin Rule"),
			DestinationPortRanges: pulumi.StringArray{
				pulumi.String("22"),
			},
			Destinations: network.AddressPrefixItemArray{
				&network.AddressPrefixItemArgs{
					AddressPrefix:     pulumi.String("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/networkManagers/testNetworkManager/networkGroups/ng1"),
					AddressPrefixType: pulumi.String("NetworkGroup"),
				},
			},
			Direction:          pulumi.String(network.SecurityConfigurationRuleDirectionInbound),
			Kind:               pulumi.String("Custom"),
			NetworkManagerName: pulumi.String("testNetworkManager"),
			Priority:           pulumi.Int(1),
			Protocol:           pulumi.String(network.SecurityConfigurationRuleProtocolTcp),
			ResourceGroupName:  pulumi.String("rg1"),
			RuleCollectionName: pulumi.String("testRuleCollection"),
			RuleName:           pulumi.String("SampleAdminRule"),
			SourcePortRanges: pulumi.StringArray{
				pulumi.String("0-65535"),
			},
			Sources: network.AddressPrefixItemArray{
				&network.AddressPrefixItemArgs{
					AddressPrefix:     pulumi.String("Internet"),
					AddressPrefixType: pulumi.String(network.AddressPrefixTypeServiceTag),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.AdminRule;
import com.pulumi.azurenative.network.AdminRuleArgs;
import com.pulumi.azurenative.network.inputs.AddressPrefixItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var adminRule = new AdminRule("adminRule", AdminRuleArgs.builder()
            .access("Deny")
            .configurationName("myTestSecurityConfig")
            .description("This is Sample Admin Rule")
            .destinationPortRanges("22")
            .destinations(AddressPrefixItemArgs.builder()
                .addressPrefix("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/networkManagers/testNetworkManager/networkGroups/ng1")
                .addressPrefixType("NetworkGroup")
                .build())
            .direction("Inbound")
            .kind("Custom")
            .networkManagerName("testNetworkManager")
            .priority(1)
            .protocol("Tcp")
            .resourceGroupName("rg1")
            .ruleCollectionName("testRuleCollection")
            .ruleName("SampleAdminRule")
            .sourcePortRanges("0-65535")
            .sources(AddressPrefixItemArgs.builder()
                .addressPrefix("Internet")
                .addressPrefixType("ServiceTag")
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const adminRule = new azure_native.network.AdminRule("adminRule", {
    access: azure_native.network.SecurityConfigurationRuleAccess.Deny,
    configurationName: "myTestSecurityConfig",
    description: "This is Sample Admin Rule",
    destinationPortRanges: ["22"],
    destinations: [{
        addressPrefix: "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/networkManagers/testNetworkManager/networkGroups/ng1",
        addressPrefixType: "NetworkGroup",
    }],
    direction: azure_native.network.SecurityConfigurationRuleDirection.Inbound,
    kind: "Custom",
    networkManagerName: "testNetworkManager",
    priority: 1,
    protocol: azure_native.network.SecurityConfigurationRuleProtocol.Tcp,
    resourceGroupName: "rg1",
    ruleCollectionName: "testRuleCollection",
    ruleName: "SampleAdminRule",
    sourcePortRanges: ["0-65535"],
    sources: [{
        addressPrefix: "Internet",
        addressPrefixType: azure_native.network.AddressPrefixType.ServiceTag,
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

admin_rule = azure_native.network.AdminRule("adminRule",
    access=azure_native.network.SecurityConfigurationRuleAccess.DENY,
    configuration_name="myTestSecurityConfig",
    description="This is Sample Admin Rule",
    destination_port_ranges=["22"],
    destinations=[{
        "address_prefix": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/networkManagers/testNetworkManager/networkGroups/ng1",
        "address_prefix_type": "NetworkGroup",
    }],
    direction=azure_native.network.SecurityConfigurationRuleDirection.INBOUND,
    kind="Custom",
    network_manager_name="testNetworkManager",
    priority=1,
    protocol=azure_native.network.SecurityConfigurationRuleProtocol.TCP,
    resource_group_name="rg1",
    rule_collection_name="testRuleCollection",
    rule_name="SampleAdminRule",
    source_port_ranges=["0-65535"],
    sources=[{
        "address_prefix": "Internet",
        "address_prefix_type": azure_native.network.AddressPrefixType.SERVICE_TAG,
    }])

    resources:
  adminRule:
    type: azure-native:network:AdminRule
    properties:
      access: Deny
      configurationName: myTestSecurityConfig
      description: This is Sample Admin Rule
      destinationPortRanges:
        - '22'
      destinations:
        - addressPrefix: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/networkManagers/testNetworkManager/networkGroups/ng1
          addressPrefixType: NetworkGroup
      direction: Inbound
      kind: Custom
      networkManagerName: testNetworkManager
      priority: 1
      protocol: Tcp
      resourceGroupName: rg1
      ruleCollectionName: testRuleCollection
      ruleName: SampleAdminRule
      sourcePortRanges:
        - 0-65535
      sources:
        - addressPrefix: Internet
          addressPrefixType: ServiceTag

    Create an admin rule

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var adminRule = new AzureNative.Network.AdminRule("adminRule", new()
    {
        Access = AzureNative.Network.SecurityConfigurationRuleAccess.Deny,
        ConfigurationName = "myTestSecurityConfig",
        Description = "This is Sample Admin Rule",
        DestinationPortRanges = new[]
        {
            "22",
        },
        Destinations = new[]
        {
            new AzureNative.Network.Inputs.AddressPrefixItemArgs
            {
                AddressPrefix = "*",
                AddressPrefixType = AzureNative.Network.AddressPrefixType.IPPrefix,
            },
        },
        Direction = AzureNative.Network.SecurityConfigurationRuleDirection.Inbound,
        Kind = "Custom",
        NetworkManagerName = "testNetworkManager",
        Priority = 1,
        Protocol = AzureNative.Network.SecurityConfigurationRuleProtocol.Tcp,
        ResourceGroupName = "rg1",
        RuleCollectionName = "testRuleCollection",
        RuleName = "SampleAdminRule",
        SourcePortRanges = new[]
        {
            "0-65535",
        },
        Sources = new[]
        {
            new AzureNative.Network.Inputs.AddressPrefixItemArgs
            {
                AddressPrefix = "Internet",
                AddressPrefixType = AzureNative.Network.AddressPrefixType.ServiceTag,
            },
        },
    });

});

    package main

import (
	network "github.com/pulumi/pulumi-azure-native-sdk/network/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := network.NewAdminRule(ctx, "adminRule", &network.AdminRuleArgs{
			Access:            pulumi.String(network.SecurityConfigurationRuleAccessDeny),
			ConfigurationName: pulumi.String("myTestSecurityConfig"),
			Description:       pulumi.String("This is Sample Admin Rule"),
			DestinationPortRanges: pulumi.StringArray{
				pulumi.String("22"),
			},
			Destinations: network.AddressPrefixItemArray{
				&network.AddressPrefixItemArgs{
					AddressPrefix:     pulumi.String("*"),
					AddressPrefixType: pulumi.String(network.AddressPrefixTypeIPPrefix),
				},
			},
			Direction:          pulumi.String(network.SecurityConfigurationRuleDirectionInbound),
			Kind:               pulumi.String("Custom"),
			NetworkManagerName: pulumi.String("testNetworkManager"),
			Priority:           pulumi.Int(1),
			Protocol:           pulumi.String(network.SecurityConfigurationRuleProtocolTcp),
			ResourceGroupName:  pulumi.String("rg1"),
			RuleCollectionName: pulumi.String("testRuleCollection"),
			RuleName:           pulumi.String("SampleAdminRule"),
			SourcePortRanges: pulumi.StringArray{
				pulumi.String("0-65535"),
			},
			Sources: network.AddressPrefixItemArray{
				&network.AddressPrefixItemArgs{
					AddressPrefix:     pulumi.String("Internet"),
					AddressPrefixType: pulumi.String(network.AddressPrefixTypeServiceTag),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.AdminRule;
import com.pulumi.azurenative.network.AdminRuleArgs;
import com.pulumi.azurenative.network.inputs.AddressPrefixItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var adminRule = new AdminRule("adminRule", AdminRuleArgs.builder()
            .access("Deny")
            .configurationName("myTestSecurityConfig")
            .description("This is Sample Admin Rule")
            .destinationPortRanges("22")
            .destinations(AddressPrefixItemArgs.builder()
                .addressPrefix("*")
                .addressPrefixType("IPPrefix")
                .build())
            .direction("Inbound")
            .kind("Custom")
            .networkManagerName("testNetworkManager")
            .priority(1)
            .protocol("Tcp")
            .resourceGroupName("rg1")
            .ruleCollectionName("testRuleCollection")
            .ruleName("SampleAdminRule")
            .sourcePortRanges("0-65535")
            .sources(AddressPrefixItemArgs.builder()
                .addressPrefix("Internet")
                .addressPrefixType("ServiceTag")
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const adminRule = new azure_native.network.AdminRule("adminRule", {
    access: azure_native.network.SecurityConfigurationRuleAccess.Deny,
    configurationName: "myTestSecurityConfig",
    description: "This is Sample Admin Rule",
    destinationPortRanges: ["22"],
    destinations: [{
        addressPrefix: "*",
        addressPrefixType: azure_native.network.AddressPrefixType.IPPrefix,
    }],
    direction: azure_native.network.SecurityConfigurationRuleDirection.Inbound,
    kind: "Custom",
    networkManagerName: "testNetworkManager",
    priority: 1,
    protocol: azure_native.network.SecurityConfigurationRuleProtocol.Tcp,
    resourceGroupName: "rg1",
    ruleCollectionName: "testRuleCollection",
    ruleName: "SampleAdminRule",
    sourcePortRanges: ["0-65535"],
    sources: [{
        addressPrefix: "Internet",
        addressPrefixType: azure_native.network.AddressPrefixType.ServiceTag,
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

admin_rule = azure_native.network.AdminRule("adminRule",
    access=azure_native.network.SecurityConfigurationRuleAccess.DENY,
    configuration_name="myTestSecurityConfig",
    description="This is Sample Admin Rule",
    destination_port_ranges=["22"],
    destinations=[{
        "address_prefix": "*",
        "address_prefix_type": azure_native.network.AddressPrefixType.IP_PREFIX,
    }],
    direction=azure_native.network.SecurityConfigurationRuleDirection.INBOUND,
    kind="Custom",
    network_manager_name="testNetworkManager",
    priority=1,
    protocol=azure_native.network.SecurityConfigurationRuleProtocol.TCP,
    resource_group_name="rg1",
    rule_collection_name="testRuleCollection",
    rule_name="SampleAdminRule",
    source_port_ranges=["0-65535"],
    sources=[{
        "address_prefix": "Internet",
        "address_prefix_type": azure_native.network.AddressPrefixType.SERVICE_TAG,
    }])

    resources:
  adminRule:
    type: azure-native:network:AdminRule
    properties:
      access: Deny
      configurationName: myTestSecurityConfig
      description: This is Sample Admin Rule
      destinationPortRanges:
        - '22'
      destinations:
        - addressPrefix: '*'
          addressPrefixType: IPPrefix
      direction: Inbound
      kind: Custom
      networkManagerName: testNetworkManager
      priority: 1
      protocol: Tcp
      resourceGroupName: rg1
      ruleCollectionName: testRuleCollection
      ruleName: SampleAdminRule
      sourcePortRanges:
        - 0-65535
      sources:
        - addressPrefix: Internet
          addressPrefixType: ServiceTag

    Create AdminRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AdminRule(name: string, args: AdminRuleArgs, opts?: CustomResourceOptions);
    @overload
def AdminRule(resource_name: str,
              args: AdminRuleArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def AdminRule(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              protocol: Optional[Union[str, SecurityConfigurationRuleProtocol]] = None,
              network_manager_name: Optional[str] = None,
              rule_collection_name: Optional[str] = None,
              priority: Optional[int] = None,
              access: Optional[Union[str, SecurityConfigurationRuleAccess]] = None,
              direction: Optional[Union[str, SecurityConfigurationRuleDirection]] = None,
              configuration_name: Optional[str] = None,
              resource_group_name: Optional[str] = None,
              destinations: Optional[Sequence[AddressPrefixItemArgs]] = None,
              destination_port_ranges: Optional[Sequence[str]] = None,
              description: Optional[str] = None,
              rule_name: Optional[str] = None,
              source_port_ranges: Optional[Sequence[str]] = None,
              sources: Optional[Sequence[AddressPrefixItemArgs]] = None)
    func NewAdminRule(ctx *Context, name string, args AdminRuleArgs, opts ...ResourceOption) (*AdminRule, error)
    public AdminRule(string name, AdminRuleArgs args, CustomResourceOptions? opts = null)
    public AdminRule(String name, AdminRuleArgs args)
public AdminRule(String name, AdminRuleArgs args, CustomResourceOptions options)

    type: azure-native:network:AdminRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AdminRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AdminRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AdminRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AdminRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AdminRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var adminRuleResource = new AzureNative.Network.AdminRule("adminRuleResource", new()
{
    Protocol = "string",
    NetworkManagerName = "string",
    RuleCollectionName = "string",
    Priority = 0,
    Access = "string",
    Direction = "string",
    ConfigurationName = "string",
    ResourceGroupName = "string",
    Kind = "string",
    Destinations = new[]
    {
        new AzureNative.Network.Inputs.AddressPrefixItemArgs
        {
            AddressPrefix = "string",
            AddressPrefixType = "string",
        },
    },
    DestinationPortRanges = new[]
    {
        "string",
    },
    Description = "string",
    RuleName = "string",
    SourcePortRanges = new[]
    {
        "string",
    },
    Sources = new[]
    {
        new AzureNative.Network.Inputs.AddressPrefixItemArgs
        {
            AddressPrefix = "string",
            AddressPrefixType = "string",
        },
    },
});

    example, err := network.NewAdminRule(ctx, "adminRuleResource", &network.AdminRuleArgs{
	Protocol:           pulumi.String("string"),
	NetworkManagerName: pulumi.String("string"),
	RuleCollectionName: pulumi.String("string"),
	Priority:           pulumi.Int(0),
	Access:             pulumi.String("string"),
	Direction:          pulumi.String("string"),
	ConfigurationName:  pulumi.String("string"),
	ResourceGroupName:  pulumi.String("string"),
	Kind:               pulumi.String("string"),
	Destinations: network.AddressPrefixItemArray{
		&network.AddressPrefixItemArgs{
			AddressPrefix:     pulumi.String("string"),
			AddressPrefixType: pulumi.String("string"),
		},
	},
	DestinationPortRanges: pulumi.StringArray{
		pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	RuleName:    pulumi.String("string"),
	SourcePortRanges: pulumi.StringArray{
		pulumi.String("string"),
	},
	Sources: network.AddressPrefixItemArray{
		&network.AddressPrefixItemArgs{
			AddressPrefix:     pulumi.String("string"),
			AddressPrefixType: pulumi.String("string"),
		},
	},
})

    var adminRuleResource = new AdminRule("adminRuleResource", AdminRuleArgs.builder()
    .protocol("string")
    .networkManagerName("string")
    .ruleCollectionName("string")
    .priority(0)
    .access("string")
    .direction("string")
    .configurationName("string")
    .resourceGroupName("string")
    .kind("string")
    .destinations(AddressPrefixItemArgs.builder()
        .addressPrefix("string")
        .addressPrefixType("string")
        .build())
    .destinationPortRanges("string")
    .description("string")
    .ruleName("string")
    .sourcePortRanges("string")
    .sources(AddressPrefixItemArgs.builder()
        .addressPrefix("string")
        .addressPrefixType("string")
        .build())
    .build());

    admin_rule_resource = azure_native.network.AdminRule("adminRuleResource",
    protocol="string",
    network_manager_name="string",
    rule_collection_name="string",
    priority=0,
    access="string",
    direction="string",
    configuration_name="string",
    resource_group_name="string",
    kind="string",
    destinations=[{
        "address_prefix": "string",
        "address_prefix_type": "string",
    }],
    destination_port_ranges=["string"],
    description="string",
    rule_name="string",
    source_port_ranges=["string"],
    sources=[{
        "address_prefix": "string",
        "address_prefix_type": "string",
    }])

    const adminRuleResource = new azure_native.network.AdminRule("adminRuleResource", {
    protocol: "string",
    networkManagerName: "string",
    ruleCollectionName: "string",
    priority: 0,
    access: "string",
    direction: "string",
    configurationName: "string",
    resourceGroupName: "string",
    kind: "string",
    destinations: [{
        addressPrefix: "string",
        addressPrefixType: "string",
    }],
    destinationPortRanges: ["string"],
    description: "string",
    ruleName: "string",
    sourcePortRanges: ["string"],
    sources: [{
        addressPrefix: "string",
        addressPrefixType: "string",
    }],
});

    type: azure-native:network:AdminRule
properties:
    access: string
    configurationName: string
    description: string
    destinationPortRanges:
        - string
    destinations:
        - addressPrefix: string
          addressPrefixType: string
    direction: string
    kind: string
    networkManagerName: string
    priority: 0
    protocol: string
    resourceGroupName: string
    ruleCollectionName: string
    ruleName: string
    sourcePortRanges:
        - string
    sources:
        - addressPrefix: string
          addressPrefixType: string

    AdminRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AdminRule resource accepts the following input properties:

    Access string | Pulumi.AzureNative.Network.SecurityConfigurationRuleAccess
    Indicates the access allowed for this particular rule
    ConfigurationName string
    The name of the network manager Security Configuration.
    Direction string | Pulumi.AzureNative.Network.SecurityConfigurationRuleDirection
    Indicates if the traffic matched against the rule in inbound or outbound.
    NetworkManagerName string
    The name of the network manager.
    Priority int
    The priority of the rule. The value can be between 1 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.
    Protocol string | Pulumi.AzureNative.Network.SecurityConfigurationRuleProtocol
    Network protocol this rule applies to.
    ResourceGroupName string
    The name of the resource group.
    RuleCollectionName string
    The name of the network manager security Configuration rule collection.
    Description string
    A description for this rule. Restricted to 140 chars.
    DestinationPortRanges List<string>
    The destination port ranges.
    Destinations List<Pulumi.AzureNative.Network.Inputs.AddressPrefixItem>
    The destination address prefixes. CIDR or destination IP ranges.
    RuleName string
    The name of the rule.
    SourcePortRanges List<string>
    The source port ranges.
    Sources List<Pulumi.AzureNative.Network.Inputs.AddressPrefixItem>
    The CIDR or source IP ranges.
    Access string | SecurityConfigurationRuleAccess
    Indicates the access allowed for this particular rule
    ConfigurationName string
    The name of the network manager Security Configuration.
    Direction string | SecurityConfigurationRuleDirection
    Indicates if the traffic matched against the rule in inbound or outbound.
    NetworkManagerName string
    The name of the network manager.
    Priority int
    The priority of the rule. The value can be between 1 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.
    Protocol string | SecurityConfigurationRuleProtocol
    Network protocol this rule applies to.
    ResourceGroupName string
    The name of the resource group.
    RuleCollectionName string
    The name of the network manager security Configuration rule collection.
    Description string
    A description for this rule. Restricted to 140 chars.
    DestinationPortRanges []string
    The destination port ranges.
    Destinations []AddressPrefixItemArgs
    The destination address prefixes. CIDR or destination IP ranges.
    RuleName string
    The name of the rule.
    SourcePortRanges []string
    The source port ranges.
    Sources []AddressPrefixItemArgs
    The CIDR or source IP ranges.
    access String | SecurityConfigurationRuleAccess
    Indicates the access allowed for this particular rule
    configurationName String
    The name of the network manager Security Configuration.
    direction String | SecurityConfigurationRuleDirection
    Indicates if the traffic matched against the rule in inbound or outbound.
    networkManagerName String
    The name of the network manager.
    priority Integer
    The priority of the rule. The value can be between 1 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.
    protocol String | SecurityConfigurationRuleProtocol
    Network protocol this rule applies to.
    resourceGroupName String
    The name of the resource group.
    ruleCollectionName String
    The name of the network manager security Configuration rule collection.
    description String
    A description for this rule. Restricted to 140 chars.
    destinationPortRanges List<String>
    The destination port ranges.
    destinations List<AddressPrefixItem>
    The destination address prefixes. CIDR or destination IP ranges.
    ruleName String
    The name of the rule.
    sourcePortRanges List<String>
    The source port ranges.
    sources List<AddressPrefixItem>
    The CIDR or source IP ranges.
    access string | SecurityConfigurationRuleAccess
    Indicates the access allowed for this particular rule
    configurationName string
    The name of the network manager Security Configuration.
    direction string | SecurityConfigurationRuleDirection
    Indicates if the traffic matched against the rule in inbound or outbound.
    networkManagerName string
    The name of the network manager.
    priority number
    The priority of the rule. The value can be between 1 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.
    protocol string | SecurityConfigurationRuleProtocol
    Network protocol this rule applies to.
    resourceGroupName string
    The name of the resource group.
    ruleCollectionName string
    The name of the network manager security Configuration rule collection.
    description string
    A description for this rule. Restricted to 140 chars.
    destinationPortRanges string[]
    The destination port ranges.
    destinations AddressPrefixItem[]
    The destination address prefixes. CIDR or destination IP ranges.
    ruleName string
    The name of the rule.
    sourcePortRanges string[]
    The source port ranges.
    sources AddressPrefixItem[]
    The CIDR or source IP ranges.
    access str | SecurityConfigurationRuleAccess
    Indicates the access allowed for this particular rule
    configuration_name str
    The name of the network manager Security Configuration.
    direction str | SecurityConfigurationRuleDirection
    Indicates if the traffic matched against the rule in inbound or outbound.
    network_manager_name str
    The name of the network manager.
    priority int
    The priority of the rule. The value can be between 1 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.
    protocol str | SecurityConfigurationRuleProtocol
    Network protocol this rule applies to.
    resource_group_name str
    The name of the resource group.
    rule_collection_name str
    The name of the network manager security Configuration rule collection.
    description str
    A description for this rule. Restricted to 140 chars.
    destination_port_ranges Sequence[str]
    The destination port ranges.
    destinations Sequence[AddressPrefixItemArgs]
    The destination address prefixes. CIDR or destination IP ranges.
    rule_name str
    The name of the rule.
    source_port_ranges Sequence[str]
    The source port ranges.
    sources Sequence[AddressPrefixItemArgs]
    The CIDR or source IP ranges.
    access String | "Allow" | "Deny" | "AlwaysAllow"
    Indicates the access allowed for this particular rule
    configurationName String
    The name of the network manager Security Configuration.
    direction String | "Inbound" | "Outbound"
    Indicates if the traffic matched against the rule in inbound or outbound.
    networkManagerName String
    The name of the network manager.
    priority Number
    The priority of the rule. The value can be between 1 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.
    protocol String | "Tcp" | "Udp" | "Icmp" | "Esp" | "Any" | "Ah"
    Network protocol this rule applies to.
    resourceGroupName String
    The name of the resource group.
    ruleCollectionName String
    The name of the network manager security Configuration rule collection.
    description String
    A description for this rule. Restricted to 140 chars.
    destinationPortRanges List<String>
    The destination port ranges.
    destinations List<Property Map>
    The destination address prefixes. CIDR or destination IP ranges.
    ruleName String
    The name of the rule.
    sourcePortRanges List<String>
    The source port ranges.
    sources List<Property Map>
    The CIDR or source IP ranges.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AdminRule resource produces the following output properties:

    AzureApiVersion string
    The Azure API version of the resource.
    Etag string
    A unique read-only string that changes whenever the resource is updated.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name.
    ProvisioningState string
    The provisioning state of the resource.
    ResourceGuid string
    Unique identifier for this resource.
    SystemData Pulumi.AzureNative.Network.Outputs.SystemDataResponse
    The system metadata related to this resource.
    Type string
    Resource type.
    AzureApiVersion string
    The Azure API version of the resource.
    Etag string
    A unique read-only string that changes whenever the resource is updated.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name.
    ProvisioningState string
    The provisioning state of the resource.
    ResourceGuid string
    Unique identifier for this resource.
    SystemData SystemDataResponse
    The system metadata related to this resource.
    Type string
    Resource type.
    azureApiVersion String
    The Azure API version of the resource.
    etag String
    A unique read-only string that changes whenever the resource is updated.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name.
    provisioningState String
    The provisioning state of the resource.
    resourceGuid String
    Unique identifier for this resource.
    systemData SystemDataResponse
    The system metadata related to this resource.
    type String
    Resource type.
    azureApiVersion string
    The Azure API version of the resource.
    etag string
    A unique read-only string that changes whenever the resource is updated.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Resource name.
    provisioningState string
    The provisioning state of the resource.
    resourceGuid string
    Unique identifier for this resource.
    systemData SystemDataResponse
    The system metadata related to this resource.
    type string
    Resource type.
    azure_api_version str
    The Azure API version of the resource.
    etag str
    A unique read-only string that changes whenever the resource is updated.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Resource name.
    provisioning_state str
    The provisioning state of the resource.
    resource_guid str
    Unique identifier for this resource.
    system_data SystemDataResponse
    The system metadata related to this resource.
    type str
    Resource type.
    azureApiVersion String
    The Azure API version of the resource.
    etag String
    A unique read-only string that changes whenever the resource is updated.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name.
    provisioningState String
    The provisioning state of the resource.
    resourceGuid String
    Unique identifier for this resource.
    systemData Property Map
    The system metadata related to this resource.
    type String
    Resource type.

    Supporting Types

    AddressPrefixItem, AddressPrefixItemArgs

    AddressPrefix string
    Address prefix.
    AddressPrefixType string | Pulumi.AzureNative.Network.AddressPrefixType
    Address prefix type.
    AddressPrefix string
    Address prefix.
    AddressPrefixType string | AddressPrefixType
    Address prefix type.
    addressPrefix String
    Address prefix.
    addressPrefixType String | AddressPrefixType
    Address prefix type.
    addressPrefix string
    Address prefix.
    addressPrefixType string | AddressPrefixType
    Address prefix type.
    address_prefix str
    Address prefix.
    address_prefix_type str | AddressPrefixType
    Address prefix type.
    addressPrefix String
    Address prefix.
    addressPrefixType String | "IPPrefix" | "ServiceTag"
    Address prefix type.

    AddressPrefixItemResponse, AddressPrefixItemResponseArgs

    AddressPrefix string
    Address prefix.
    AddressPrefixType string
    Address prefix type.
    AddressPrefix string
    Address prefix.
    AddressPrefixType string
    Address prefix type.
    addressPrefix String
    Address prefix.
    addressPrefixType String
    Address prefix type.
    addressPrefix string
    Address prefix.
    addressPrefixType string
    Address prefix type.
    address_prefix str
    Address prefix.
    address_prefix_type str
    Address prefix type.
    addressPrefix String
    Address prefix.
    addressPrefixType String
    Address prefix type.

    AddressPrefixType, AddressPrefixTypeArgs

    IPPrefix
    IPPrefix
    ServiceTag
    ServiceTag
    AddressPrefixTypeIPPrefix
    IPPrefix
    AddressPrefixTypeServiceTag
    ServiceTag
    IPPrefix
    IPPrefix
    ServiceTag
    ServiceTag
    IPPrefix
    IPPrefix
    ServiceTag
    ServiceTag
    IP_PREFIX
    IPPrefix
    SERVICE_TAG
    ServiceTag
    "IPPrefix"
    IPPrefix
    "ServiceTag"
    ServiceTag

    SecurityConfigurationRuleAccess, SecurityConfigurationRuleAccessArgs

    Allow
    Allow
    Deny
    Deny
    AlwaysAllow
    AlwaysAllow
    SecurityConfigurationRuleAccessAllow
    Allow
    SecurityConfigurationRuleAccessDeny
    Deny
    SecurityConfigurationRuleAccessAlwaysAllow
    AlwaysAllow
    Allow
    Allow
    Deny
    Deny
    AlwaysAllow
    AlwaysAllow
    Allow
    Allow
    Deny
    Deny
    AlwaysAllow
    AlwaysAllow
    ALLOW
    Allow
    DENY
    Deny
    ALWAYS_ALLOW
    AlwaysAllow
    "Allow"
    Allow
    "Deny"
    Deny
    "AlwaysAllow"
    AlwaysAllow

    SecurityConfigurationRuleDirection, SecurityConfigurationRuleDirectionArgs

    Inbound
    Inbound
    Outbound
    Outbound
    SecurityConfigurationRuleDirectionInbound
    Inbound
    SecurityConfigurationRuleDirectionOutbound
    Outbound
    Inbound
    Inbound
    Outbound
    Outbound
    Inbound
    Inbound
    Outbound
    Outbound
    INBOUND
    Inbound
    OUTBOUND
    Outbound
    "Inbound"
    Inbound
    "Outbound"
    Outbound

    SecurityConfigurationRuleProtocol, SecurityConfigurationRuleProtocolArgs

    Tcp
    Tcp
    Udp
    Udp
    Icmp
    Icmp
    Esp
    Esp
    Any
    Any
    Ah
    Ah
    SecurityConfigurationRuleProtocolTcp
    Tcp
    SecurityConfigurationRuleProtocolUdp
    Udp
    SecurityConfigurationRuleProtocolIcmp
    Icmp
    SecurityConfigurationRuleProtocolEsp
    Esp
    SecurityConfigurationRuleProtocolAny
    Any
    SecurityConfigurationRuleProtocolAh
    Ah
    Tcp
    Tcp
    Udp
    Udp
    Icmp
    Icmp
    Esp
    Esp
    Any
    Any
    Ah
    Ah
    Tcp
    Tcp
    Udp
    Udp
    Icmp
    Icmp
    Esp
    Esp
    Any
    Any
    Ah
    Ah
    TCP
    Tcp
    UDP
    Udp
    ICMP
    Icmp
    ESP
    Esp
    ANY
    Any
    AH
    Ah
    "Tcp"
    Tcp
    "Udp"
    Udp
    "Icmp"
    Icmp
    "Esp"
    Esp
    "Any"
    Any
    "Ah"
    Ah

    SystemDataResponse, SystemDataResponseArgs

    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The type of identity that last modified the resource.
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The type of identity that last modified the resource.
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The type of identity that last modified the resource.
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The type of identity that last modified the resource.
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The type of identity that last modified the resource.
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The type of identity that last modified the resource.
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:network:AdminRule SampleAdminRule /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/networkManagers/{networkManagerName}/securityAdminConfigurations/{configurationName}/ruleCollections/{ruleCollectionName}/rules/{ruleName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
    Azure Native v3.5.1 published on Friday, Jun 6, 2025 by Pulumi
    pulumi/pulumi-azure-native