Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. network
  5. FirewallPolicyRuleCollectionGroup
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.4.0 published on Wednesday, May 7, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.network.FirewallPolicyRuleCollectionGroup

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.4.0 published on Wednesday, May 7, 2025 by Pulumi
pulumi/pulumi-azure-native

    Rule Collection Group resource.

    Uses Azure REST API version 2024-05-01. In version 2.x of the Azure Native provider, it used API version 2023-02-01.

    Other available API versions: 2020-05-01, 2020-06-01, 2020-07-01, 2020-08-01, 2020-11-01, 2021-02-01, 2021-03-01, 2021-05-01, 2021-08-01, 2022-01-01, 2022-05-01, 2022-07-01, 2022-09-01, 2022-11-01, 2023-02-01, 2023-04-01, 2023-05-01, 2023-06-01, 2023-09-01, 2023-11-01, 2024-01-01, 2024-03-01. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native network [ApiVersion]. See the version guide for details.

    Example Usage

    Create Firewall Policy Nat Rule Collection Group

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
    {
        FirewallPolicyName = "firewallPolicy",
        Priority = 100,
        ResourceGroupName = "rg1",
        RuleCollectionGroupName = "ruleCollectionGroup1",
        RuleCollections = new[]
        {
            new AzureNative.Network.Inputs.FirewallPolicyNatRuleCollectionArgs
            {
                Action = new AzureNative.Network.Inputs.FirewallPolicyNatRuleCollectionActionArgs
                {
                    Type = AzureNative.Network.FirewallPolicyNatRuleCollectionActionType.DNAT,
                },
                Name = "Example-Nat-Rule-Collection",
                Priority = 100,
                RuleCollectionType = "FirewallPolicyNatRuleCollection",
                Rules = new[]
                {
                    new AzureNative.Network.Inputs.NatRuleArgs
                    {
                        DestinationAddresses = new[]
                        {
                            "152.23.32.23",
                        },
                        DestinationPorts = new[]
                        {
                            "8080",
                        },
                        IpProtocols = new[]
                        {
                            AzureNative.Network.FirewallPolicyRuleNetworkProtocol.TCP,
                            AzureNative.Network.FirewallPolicyRuleNetworkProtocol.UDP,
                        },
                        Name = "nat-rule1",
                        RuleType = "NatRule",
                        SourceAddresses = new[]
                        {
                            "2.2.2.2",
                        },
                        SourceIpGroups = new() { },
                        TranslatedFqdn = "internalhttp.server.net",
                        TranslatedPort = "8080",
                    },
                },
            },
        },
    });

});

    package main

import (
	network "github.com/pulumi/pulumi-azure-native-sdk/network/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
			FirewallPolicyName:      pulumi.String("firewallPolicy"),
			Priority:                pulumi.Int(100),
			ResourceGroupName:       pulumi.String("rg1"),
			RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
			RuleCollections: pulumi.Array{
				network.FirewallPolicyNatRuleCollection{
					Action: network.FirewallPolicyNatRuleCollectionAction{
						Type: network.FirewallPolicyNatRuleCollectionActionTypeDNAT,
					},
					Name:               "Example-Nat-Rule-Collection",
					Priority:           100,
					RuleCollectionType: "FirewallPolicyNatRuleCollection",
					Rules: []interface{}{
						network.NatRuleType{
							DestinationAddresses: []string{
								"152.23.32.23",
							},
							DestinationPorts: []string{
								"8080",
							},
							IpProtocols: []network.FirewallPolicyRuleNetworkProtocol{
								network.FirewallPolicyRuleNetworkProtocolTCP,
								network.FirewallPolicyRuleNetworkProtocolUDP,
							},
							Name:     "nat-rule1",
							RuleType: "NatRule",
							SourceAddresses: []string{
								"2.2.2.2",
							},
							SourceIpGroups: []interface{}{},
							TranslatedFqdn: "internalhttp.server.net",
							TranslatedPort: "8080",
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
            .firewallPolicyName("firewallPolicy")
            .priority(100)
            .resourceGroupName("rg1")
            .ruleCollectionGroupName("ruleCollectionGroup1")
            .ruleCollections(FirewallPolicyNatRuleCollectionArgs.builder()
                .action(FirewallPolicyNatRuleCollectionActionArgs.builder()
                    .type("DNAT")
                    .build())
                .name("Example-Nat-Rule-Collection")
                .priority(100)
                .ruleCollectionType("FirewallPolicyNatRuleCollection")
                .rules(%!v(PANIC=Format method: interface conversion: model.Expression is *model.FunctionCallExpression, not *model.ObjectConsExpression))
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
    firewallPolicyName: "firewallPolicy",
    priority: 100,
    resourceGroupName: "rg1",
    ruleCollectionGroupName: "ruleCollectionGroup1",
    ruleCollections: [{
        action: {
            type: azure_native.network.FirewallPolicyNatRuleCollectionActionType.DNAT,
        },
        name: "Example-Nat-Rule-Collection",
        priority: 100,
        ruleCollectionType: "FirewallPolicyNatRuleCollection",
        rules: [{
            destinationAddresses: ["152.23.32.23"],
            destinationPorts: ["8080"],
            ipProtocols: [
                azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP,
                azure_native.network.FirewallPolicyRuleNetworkProtocol.UDP,
            ],
            name: "nat-rule1",
            ruleType: "NatRule",
            sourceAddresses: ["2.2.2.2"],
            sourceIpGroups: [],
            translatedFqdn: "internalhttp.server.net",
            translatedPort: "8080",
        }],
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
    firewall_policy_name="firewallPolicy",
    priority=100,
    resource_group_name="rg1",
    rule_collection_group_name="ruleCollectionGroup1",
    rule_collections=[{
        "action": {
            "type": azure_native.network.FirewallPolicyNatRuleCollectionActionType.DNAT,
        },
        "name": "Example-Nat-Rule-Collection",
        "priority": 100,
        "rule_collection_type": "FirewallPolicyNatRuleCollection",
        "rules": [{
            "destination_addresses": ["152.23.32.23"],
            "destination_ports": ["8080"],
            "ip_protocols": [
                azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP,
                azure_native.network.FirewallPolicyRuleNetworkProtocol.UDP,
            ],
            "name": "nat-rule1",
            "rule_type": "NatRule",
            "source_addresses": ["2.2.2.2"],
            "source_ip_groups": [],
            "translated_fqdn": "internalhttp.server.net",
            "translated_port": "8080",
        }],
    }])

    resources:
  firewallPolicyRuleCollectionGroup:
    type: azure-native:network:FirewallPolicyRuleCollectionGroup
    properties:
      firewallPolicyName: firewallPolicy
      priority: 100
      resourceGroupName: rg1
      ruleCollectionGroupName: ruleCollectionGroup1
      ruleCollections:
        - action:
            type: DNAT
          name: Example-Nat-Rule-Collection
          priority: 100
          ruleCollectionType: FirewallPolicyNatRuleCollection
          rules:
            - destinationAddresses:
                - 152.23.32.23
              destinationPorts:
                - '8080'
              ipProtocols:
                - TCP
                - UDP
              name: nat-rule1
              ruleType: NatRule
              sourceAddresses:
                - 2.2.2.2
              sourceIpGroups: []
              translatedFqdn: internalhttp.server.net
              translatedPort: '8080'

    Create Firewall Policy Rule Collection Group

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
    {
        FirewallPolicyName = "firewallPolicy",
        Priority = 100,
        ResourceGroupName = "rg1",
        RuleCollectionGroupName = "ruleCollectionGroup1",
        RuleCollections = new[]
        {
            new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
            {
                Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
                {
                    Type = AzureNative.Network.FirewallPolicyFilterRuleCollectionActionType.Deny,
                },
                Name = "Example-Filter-Rule-Collection",
                Priority = 100,
                RuleCollectionType = "FirewallPolicyFilterRuleCollection",
                Rules = new[]
                {
                    new AzureNative.Network.Inputs.NetworkRuleArgs
                    {
                        DestinationAddresses = new[]
                        {
                            "*",
                        },
                        DestinationPorts = new[]
                        {
                            "*",
                        },
                        IpProtocols = new[]
                        {
                            AzureNative.Network.FirewallPolicyRuleNetworkProtocol.TCP,
                        },
                        Name = "network-rule1",
                        RuleType = "NetworkRule",
                        SourceAddresses = new[]
                        {
                            "10.1.25.0/24",
                        },
                    },
                },
            },
        },
    });

});

    package main

import (
	network "github.com/pulumi/pulumi-azure-native-sdk/network/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
			FirewallPolicyName:      pulumi.String("firewallPolicy"),
			Priority:                pulumi.Int(100),
			ResourceGroupName:       pulumi.String("rg1"),
			RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
			RuleCollections: pulumi.Array{
				network.FirewallPolicyFilterRuleCollection{
					Action: network.FirewallPolicyFilterRuleCollectionAction{
						Type: network.FirewallPolicyFilterRuleCollectionActionTypeDeny,
					},
					Name:               "Example-Filter-Rule-Collection",
					Priority:           100,
					RuleCollectionType: "FirewallPolicyFilterRuleCollection",
					Rules: []interface{}{
						network.NetworkRule{
							DestinationAddresses: []string{
								"*",
							},
							DestinationPorts: []string{
								"*",
							},
							IpProtocols: []network.FirewallPolicyRuleNetworkProtocol{
								network.FirewallPolicyRuleNetworkProtocolTCP,
							},
							Name:     "network-rule1",
							RuleType: "NetworkRule",
							SourceAddresses: []string{
								"10.1.25.0/24",
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
            .firewallPolicyName("firewallPolicy")
            .priority(100)
            .resourceGroupName("rg1")
            .ruleCollectionGroupName("ruleCollectionGroup1")
            .ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
                .action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
                    .type("Deny")
                    .build())
                .name("Example-Filter-Rule-Collection")
                .priority(100)
                .ruleCollectionType("FirewallPolicyFilterRuleCollection")
                .rules(%!v(PANIC=Format method: interface conversion: model.Expression is *model.FunctionCallExpression, not *model.ObjectConsExpression))
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
    firewallPolicyName: "firewallPolicy",
    priority: 100,
    resourceGroupName: "rg1",
    ruleCollectionGroupName: "ruleCollectionGroup1",
    ruleCollections: [{
        action: {
            type: azure_native.network.FirewallPolicyFilterRuleCollectionActionType.Deny,
        },
        name: "Example-Filter-Rule-Collection",
        priority: 100,
        ruleCollectionType: "FirewallPolicyFilterRuleCollection",
        rules: [{
            destinationAddresses: ["*"],
            destinationPorts: ["*"],
            ipProtocols: [azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP],
            name: "network-rule1",
            ruleType: "NetworkRule",
            sourceAddresses: ["10.1.25.0/24"],
        }],
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
    firewall_policy_name="firewallPolicy",
    priority=100,
    resource_group_name="rg1",
    rule_collection_group_name="ruleCollectionGroup1",
    rule_collections=[{
        "action": {
            "type": azure_native.network.FirewallPolicyFilterRuleCollectionActionType.DENY,
        },
        "name": "Example-Filter-Rule-Collection",
        "priority": 100,
        "rule_collection_type": "FirewallPolicyFilterRuleCollection",
        "rules": [{
            "destination_addresses": ["*"],
            "destination_ports": ["*"],
            "ip_protocols": [azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP],
            "name": "network-rule1",
            "rule_type": "NetworkRule",
            "source_addresses": ["10.1.25.0/24"],
        }],
    }])

    resources:
  firewallPolicyRuleCollectionGroup:
    type: azure-native:network:FirewallPolicyRuleCollectionGroup
    properties:
      firewallPolicyName: firewallPolicy
      priority: 100
      resourceGroupName: rg1
      ruleCollectionGroupName: ruleCollectionGroup1
      ruleCollections:
        - action:
            type: Deny
          name: Example-Filter-Rule-Collection
          priority: 100
          ruleCollectionType: FirewallPolicyFilterRuleCollection
          rules:
            - destinationAddresses:
                - '*'
              destinationPorts:
                - '*'
              ipProtocols:
                - TCP
              name: network-rule1
              ruleType: NetworkRule
              sourceAddresses:
                - 10.1.25.0/24

    Create Firewall Policy Rule Collection Group With IP Groups

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
    {
        FirewallPolicyName = "firewallPolicy",
        Priority = 110,
        ResourceGroupName = "rg1",
        RuleCollectionGroupName = "ruleCollectionGroup1",
        RuleCollections = new[]
        {
            new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
            {
                Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
                {
                    Type = AzureNative.Network.FirewallPolicyFilterRuleCollectionActionType.Deny,
                },
                Name = "Example-Filter-Rule-Collection",
                RuleCollectionType = "FirewallPolicyFilterRuleCollection",
                Rules = new[]
                {
                    new AzureNative.Network.Inputs.NetworkRuleArgs
                    {
                        DestinationIpGroups = new[]
                        {
                            "/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2",
                        },
                        DestinationPorts = new[]
                        {
                            "*",
                        },
                        IpProtocols = new[]
                        {
                            AzureNative.Network.FirewallPolicyRuleNetworkProtocol.TCP,
                        },
                        Name = "network-1",
                        RuleType = "NetworkRule",
                        SourceIpGroups = new[]
                        {
                            "/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1",
                        },
                    },
                },
            },
        },
    });

});

    package main

import (
	network "github.com/pulumi/pulumi-azure-native-sdk/network/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
			FirewallPolicyName:      pulumi.String("firewallPolicy"),
			Priority:                pulumi.Int(110),
			ResourceGroupName:       pulumi.String("rg1"),
			RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
			RuleCollections: pulumi.Array{
				network.FirewallPolicyFilterRuleCollection{
					Action: network.FirewallPolicyFilterRuleCollectionAction{
						Type: network.FirewallPolicyFilterRuleCollectionActionTypeDeny,
					},
					Name:               "Example-Filter-Rule-Collection",
					RuleCollectionType: "FirewallPolicyFilterRuleCollection",
					Rules: []interface{}{
						network.NetworkRule{
							DestinationIpGroups: []string{
								"/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2",
							},
							DestinationPorts: []string{
								"*",
							},
							IpProtocols: []network.FirewallPolicyRuleNetworkProtocol{
								network.FirewallPolicyRuleNetworkProtocolTCP,
							},
							Name:     "network-1",
							RuleType: "NetworkRule",
							SourceIpGroups: []string{
								"/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1",
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
            .firewallPolicyName("firewallPolicy")
            .priority(110)
            .resourceGroupName("rg1")
            .ruleCollectionGroupName("ruleCollectionGroup1")
            .ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
                .action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
                    .type("Deny")
                    .build())
                .name("Example-Filter-Rule-Collection")
                .ruleCollectionType("FirewallPolicyFilterRuleCollection")
                .rules(%!v(PANIC=Format method: interface conversion: model.Expression is *model.FunctionCallExpression, not *model.ObjectConsExpression))
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
    firewallPolicyName: "firewallPolicy",
    priority: 110,
    resourceGroupName: "rg1",
    ruleCollectionGroupName: "ruleCollectionGroup1",
    ruleCollections: [{
        action: {
            type: azure_native.network.FirewallPolicyFilterRuleCollectionActionType.Deny,
        },
        name: "Example-Filter-Rule-Collection",
        ruleCollectionType: "FirewallPolicyFilterRuleCollection",
        rules: [{
            destinationIpGroups: ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2"],
            destinationPorts: ["*"],
            ipProtocols: [azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP],
            name: "network-1",
            ruleType: "NetworkRule",
            sourceIpGroups: ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1"],
        }],
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
    firewall_policy_name="firewallPolicy",
    priority=110,
    resource_group_name="rg1",
    rule_collection_group_name="ruleCollectionGroup1",
    rule_collections=[{
        "action": {
            "type": azure_native.network.FirewallPolicyFilterRuleCollectionActionType.DENY,
        },
        "name": "Example-Filter-Rule-Collection",
        "rule_collection_type": "FirewallPolicyFilterRuleCollection",
        "rules": [{
            "destination_ip_groups": ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2"],
            "destination_ports": ["*"],
            "ip_protocols": [azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP],
            "name": "network-1",
            "rule_type": "NetworkRule",
            "source_ip_groups": ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1"],
        }],
    }])

    resources:
  firewallPolicyRuleCollectionGroup:
    type: azure-native:network:FirewallPolicyRuleCollectionGroup
    properties:
      firewallPolicyName: firewallPolicy
      priority: 110
      resourceGroupName: rg1
      ruleCollectionGroupName: ruleCollectionGroup1
      ruleCollections:
        - action:
            type: Deny
          name: Example-Filter-Rule-Collection
          ruleCollectionType: FirewallPolicyFilterRuleCollection
          rules:
            - destinationIpGroups:
                - /subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2
              destinationPorts:
                - '*'
              ipProtocols:
                - TCP
              name: network-1
              ruleType: NetworkRule
              sourceIpGroups:
                - /subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1

    Create Firewall Policy Rule Collection Group With Web Categories

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
    {
        FirewallPolicyName = "firewallPolicy",
        Priority = 110,
        ResourceGroupName = "rg1",
        RuleCollectionGroupName = "ruleCollectionGroup1",
        RuleCollections = new[]
        {
            new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
            {
                Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
                {
                    Type = AzureNative.Network.FirewallPolicyFilterRuleCollectionActionType.Deny,
                },
                Name = "Example-Filter-Rule-Collection",
                RuleCollectionType = "FirewallPolicyFilterRuleCollection",
                Rules = new[]
                {
                    new AzureNative.Network.Inputs.ApplicationRuleArgs
                    {
                        Description = "Deny inbound rule",
                        Name = "rule1",
                        Protocols = new[]
                        {
                            new AzureNative.Network.Inputs.FirewallPolicyRuleApplicationProtocolArgs
                            {
                                Port = 443,
                                ProtocolType = AzureNative.Network.FirewallPolicyRuleApplicationProtocolType.Https,
                            },
                        },
                        RuleType = "ApplicationRule",
                        SourceAddresses = new[]
                        {
                            "216.58.216.164",
                            "10.0.0.0/24",
                        },
                        WebCategories = new[]
                        {
                            "Hacking",
                        },
                    },
                },
            },
        },
    });

});

    package main

import (
	network "github.com/pulumi/pulumi-azure-native-sdk/network/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
			FirewallPolicyName:      pulumi.String("firewallPolicy"),
			Priority:                pulumi.Int(110),
			ResourceGroupName:       pulumi.String("rg1"),
			RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
			RuleCollections: pulumi.Array{
				network.FirewallPolicyFilterRuleCollection{
					Action: network.FirewallPolicyFilterRuleCollectionAction{
						Type: network.FirewallPolicyFilterRuleCollectionActionTypeDeny,
					},
					Name:               "Example-Filter-Rule-Collection",
					RuleCollectionType: "FirewallPolicyFilterRuleCollection",
					Rules: []interface{}{
						network.ApplicationRule{
							Description: "Deny inbound rule",
							Name:        "rule1",
							Protocols: []network.FirewallPolicyRuleApplicationProtocol{
								{
									Port:         443,
									ProtocolType: network.FirewallPolicyRuleApplicationProtocolTypeHttps,
								},
							},
							RuleType: "ApplicationRule",
							SourceAddresses: []string{
								"216.58.216.164",
								"10.0.0.0/24",
							},
							WebCategories: []string{
								"Hacking",
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
            .firewallPolicyName("firewallPolicy")
            .priority(110)
            .resourceGroupName("rg1")
            .ruleCollectionGroupName("ruleCollectionGroup1")
            .ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
                .action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
                    .type("Deny")
                    .build())
                .name("Example-Filter-Rule-Collection")
                .ruleCollectionType("FirewallPolicyFilterRuleCollection")
                .rules(%!v(PANIC=Format method: interface conversion: model.Expression is *model.FunctionCallExpression, not *model.ObjectConsExpression))
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
    firewallPolicyName: "firewallPolicy",
    priority: 110,
    resourceGroupName: "rg1",
    ruleCollectionGroupName: "ruleCollectionGroup1",
    ruleCollections: [{
        action: {
            type: azure_native.network.FirewallPolicyFilterRuleCollectionActionType.Deny,
        },
        name: "Example-Filter-Rule-Collection",
        ruleCollectionType: "FirewallPolicyFilterRuleCollection",
        rules: [{
            description: "Deny inbound rule",
            name: "rule1",
            protocols: [{
                port: 443,
                protocolType: azure_native.network.FirewallPolicyRuleApplicationProtocolType.Https,
            }],
            ruleType: "ApplicationRule",
            sourceAddresses: [
                "216.58.216.164",
                "10.0.0.0/24",
            ],
            webCategories: ["Hacking"],
        }],
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
    firewall_policy_name="firewallPolicy",
    priority=110,
    resource_group_name="rg1",
    rule_collection_group_name="ruleCollectionGroup1",
    rule_collections=[{
        "action": {
            "type": azure_native.network.FirewallPolicyFilterRuleCollectionActionType.DENY,
        },
        "name": "Example-Filter-Rule-Collection",
        "rule_collection_type": "FirewallPolicyFilterRuleCollection",
        "rules": [{
            "description": "Deny inbound rule",
            "name": "rule1",
            "protocols": [{
                "port": 443,
                "protocol_type": azure_native.network.FirewallPolicyRuleApplicationProtocolType.HTTPS,
            }],
            "rule_type": "ApplicationRule",
            "source_addresses": [
                "216.58.216.164",
                "10.0.0.0/24",
            ],
            "web_categories": ["Hacking"],
        }],
    }])

    resources:
  firewallPolicyRuleCollectionGroup:
    type: azure-native:network:FirewallPolicyRuleCollectionGroup
    properties:
      firewallPolicyName: firewallPolicy
      priority: 110
      resourceGroupName: rg1
      ruleCollectionGroupName: ruleCollectionGroup1
      ruleCollections:
        - action:
            type: Deny
          name: Example-Filter-Rule-Collection
          ruleCollectionType: FirewallPolicyFilterRuleCollection
          rules:
            - description: Deny inbound rule
              name: rule1
              protocols:
                - port: 443
                  protocolType: Https
              ruleType: ApplicationRule
              sourceAddresses:
                - 216.58.216.164
                - 10.0.0.0/24
              webCategories:
                - Hacking

    Create Firewall Policy Rule Collection Group With http header to insert

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
    {
        FirewallPolicyName = "firewallPolicy",
        Priority = 110,
        ResourceGroupName = "rg1",
        RuleCollectionGroupName = "ruleCollectionGroup1",
        RuleCollections = new[]
        {
            new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
            {
                Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
                {
                    Type = AzureNative.Network.FirewallPolicyFilterRuleCollectionActionType.Allow,
                },
                Name = "Example-Filter-Rule-Collection",
                RuleCollectionType = "FirewallPolicyFilterRuleCollection",
                Rules = new[]
                {
                    new AzureNative.Network.Inputs.ApplicationRuleArgs
                    {
                        Description = "Insert trusted tenants header",
                        FqdnTags = new[]
                        {
                            "WindowsVirtualDesktop",
                        },
                        HttpHeadersToInsert = new[]
                        {
                            new AzureNative.Network.Inputs.FirewallPolicyHttpHeaderToInsertArgs
                            {
                                HeaderName = "Restrict-Access-To-Tenants",
                                HeaderValue = "contoso.com,fabrikam.onmicrosoft.com",
                            },
                        },
                        Name = "rule1",
                        Protocols = new[]
                        {
                            new AzureNative.Network.Inputs.FirewallPolicyRuleApplicationProtocolArgs
                            {
                                Port = 80,
                                ProtocolType = AzureNative.Network.FirewallPolicyRuleApplicationProtocolType.Http,
                            },
                        },
                        RuleType = "ApplicationRule",
                        SourceAddresses = new[]
                        {
                            "216.58.216.164",
                            "10.0.0.0/24",
                        },
                    },
                },
            },
        },
    });

});

    package main

import (
	network "github.com/pulumi/pulumi-azure-native-sdk/network/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
			FirewallPolicyName:      pulumi.String("firewallPolicy"),
			Priority:                pulumi.Int(110),
			ResourceGroupName:       pulumi.String("rg1"),
			RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
			RuleCollections: pulumi.Array{
				network.FirewallPolicyFilterRuleCollection{
					Action: network.FirewallPolicyFilterRuleCollectionAction{
						Type: network.FirewallPolicyFilterRuleCollectionActionTypeAllow,
					},
					Name:               "Example-Filter-Rule-Collection",
					RuleCollectionType: "FirewallPolicyFilterRuleCollection",
					Rules: []interface{}{
						network.ApplicationRule{
							Description: "Insert trusted tenants header",
							FqdnTags: []string{
								"WindowsVirtualDesktop",
							},
							HttpHeadersToInsert: []network.FirewallPolicyHttpHeaderToInsert{
								{
									HeaderName:  "Restrict-Access-To-Tenants",
									HeaderValue: "contoso.com,fabrikam.onmicrosoft.com",
								},
							},
							Name: "rule1",
							Protocols: []network.FirewallPolicyRuleApplicationProtocol{
								{
									Port:         80,
									ProtocolType: network.FirewallPolicyRuleApplicationProtocolTypeHttp,
								},
							},
							RuleType: "ApplicationRule",
							SourceAddresses: []string{
								"216.58.216.164",
								"10.0.0.0/24",
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
            .firewallPolicyName("firewallPolicy")
            .priority(110)
            .resourceGroupName("rg1")
            .ruleCollectionGroupName("ruleCollectionGroup1")
            .ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
                .action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
                    .type("Allow")
                    .build())
                .name("Example-Filter-Rule-Collection")
                .ruleCollectionType("FirewallPolicyFilterRuleCollection")
                .rules(%!v(PANIC=Format method: interface conversion: model.Expression is *model.FunctionCallExpression, not *model.ObjectConsExpression))
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
    firewallPolicyName: "firewallPolicy",
    priority: 110,
    resourceGroupName: "rg1",
    ruleCollectionGroupName: "ruleCollectionGroup1",
    ruleCollections: [{
        action: {
            type: azure_native.network.FirewallPolicyFilterRuleCollectionActionType.Allow,
        },
        name: "Example-Filter-Rule-Collection",
        ruleCollectionType: "FirewallPolicyFilterRuleCollection",
        rules: [{
            description: "Insert trusted tenants header",
            fqdnTags: ["WindowsVirtualDesktop"],
            httpHeadersToInsert: [{
                headerName: "Restrict-Access-To-Tenants",
                headerValue: "contoso.com,fabrikam.onmicrosoft.com",
            }],
            name: "rule1",
            protocols: [{
                port: 80,
                protocolType: azure_native.network.FirewallPolicyRuleApplicationProtocolType.Http,
            }],
            ruleType: "ApplicationRule",
            sourceAddresses: [
                "216.58.216.164",
                "10.0.0.0/24",
            ],
        }],
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
    firewall_policy_name="firewallPolicy",
    priority=110,
    resource_group_name="rg1",
    rule_collection_group_name="ruleCollectionGroup1",
    rule_collections=[{
        "action": {
            "type": azure_native.network.FirewallPolicyFilterRuleCollectionActionType.ALLOW,
        },
        "name": "Example-Filter-Rule-Collection",
        "rule_collection_type": "FirewallPolicyFilterRuleCollection",
        "rules": [{
            "description": "Insert trusted tenants header",
            "fqdn_tags": ["WindowsVirtualDesktop"],
            "http_headers_to_insert": [{
                "header_name": "Restrict-Access-To-Tenants",
                "header_value": "contoso.com,fabrikam.onmicrosoft.com",
            }],
            "name": "rule1",
            "protocols": [{
                "port": 80,
                "protocol_type": azure_native.network.FirewallPolicyRuleApplicationProtocolType.HTTP,
            }],
            "rule_type": "ApplicationRule",
            "source_addresses": [
                "216.58.216.164",
                "10.0.0.0/24",
            ],
        }],
    }])

    resources:
  firewallPolicyRuleCollectionGroup:
    type: azure-native:network:FirewallPolicyRuleCollectionGroup
    properties:
      firewallPolicyName: firewallPolicy
      priority: 110
      resourceGroupName: rg1
      ruleCollectionGroupName: ruleCollectionGroup1
      ruleCollections:
        - action:
            type: Allow
          name: Example-Filter-Rule-Collection
          ruleCollectionType: FirewallPolicyFilterRuleCollection
          rules:
            - description: Insert trusted tenants header
              fqdnTags:
                - WindowsVirtualDesktop
              httpHeadersToInsert:
                - headerName: Restrict-Access-To-Tenants
                  headerValue: contoso.com,fabrikam.onmicrosoft.com
              name: rule1
              protocols:
                - port: 80
                  protocolType: Http
              ruleType: ApplicationRule
              sourceAddresses:
                - 216.58.216.164
                - 10.0.0.0/24

    Create FirewallPolicyRuleCollectionGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new FirewallPolicyRuleCollectionGroup(name: string, args: FirewallPolicyRuleCollectionGroupArgs, opts?: CustomResourceOptions);
    @overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
                                      args: FirewallPolicyRuleCollectionGroupArgs,
                                      opts: Optional[ResourceOptions] = None)

@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      firewall_policy_name: Optional[str] = None,
                                      resource_group_name: Optional[str] = None,
                                      id: Optional[str] = None,
                                      name: Optional[str] = None,
                                      priority: Optional[int] = None,
                                      rule_collection_group_name: Optional[str] = None,
                                      rule_collections: Optional[Sequence[Union[FirewallPolicyFilterRuleCollectionArgs, FirewallPolicyNatRuleCollectionArgs]]] = None)
    func NewFirewallPolicyRuleCollectionGroup(ctx *Context, name string, args FirewallPolicyRuleCollectionGroupArgs, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
    public FirewallPolicyRuleCollectionGroup(string name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions? opts = null)
    public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions options)

    type: azure-native:network:FirewallPolicyRuleCollectionGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var firewallPolicyRuleCollectionGroupResource = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", new()
{
    FirewallPolicyName = "string",
    ResourceGroupName = "string",
    Id = "string",
    Name = "string",
    Priority = 0,
    RuleCollectionGroupName = "string",
    RuleCollections = new[]
    {
        new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
        {
            RuleCollectionType = "FirewallPolicyFilterRuleCollection",
            Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
            {
                Type = "string",
            },
            Name = "string",
            Priority = 0,
            Rules = new[]
            {
                new AzureNative.Network.Inputs.ApplicationRuleArgs
                {
                    RuleType = "ApplicationRule",
                    HttpHeadersToInsert = new[]
                    {
                        new AzureNative.Network.Inputs.FirewallPolicyHttpHeaderToInsertArgs
                        {
                            HeaderName = "string",
                            HeaderValue = "string",
                        },
                    },
                    FqdnTags = new[]
                    {
                        "string",
                    },
                    Description = "string",
                    Name = "string",
                    Protocols = new[]
                    {
                        new AzureNative.Network.Inputs.FirewallPolicyRuleApplicationProtocolArgs
                        {
                            Port = 0,
                            ProtocolType = "string",
                        },
                    },
                    DestinationAddresses = new[]
                    {
                        "string",
                    },
                    SourceAddresses = new[]
                    {
                        "string",
                    },
                    SourceIpGroups = new[]
                    {
                        "string",
                    },
                    TargetFqdns = new[]
                    {
                        "string",
                    },
                    TargetUrls = new[]
                    {
                        "string",
                    },
                    TerminateTLS = false,
                    WebCategories = new[]
                    {
                        "string",
                    },
                },
            },
        },
    },
});

    example, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroupResource", &network.FirewallPolicyRuleCollectionGroupArgs{
	FirewallPolicyName:      pulumi.String("string"),
	ResourceGroupName:       pulumi.String("string"),
	Id:                      pulumi.String("string"),
	Name:                    pulumi.String("string"),
	Priority:                pulumi.Int(0),
	RuleCollectionGroupName: pulumi.String("string"),
	RuleCollections: pulumi.Array{
		network.FirewallPolicyFilterRuleCollection{
			RuleCollectionType: "FirewallPolicyFilterRuleCollection",
			Action: network.FirewallPolicyFilterRuleCollectionAction{
				Type: "string",
			},
			Name:     "string",
			Priority: 0,
			Rules: []interface{}{
				network.ApplicationRule{
					RuleType: "ApplicationRule",
					HttpHeadersToInsert: []network.FirewallPolicyHttpHeaderToInsert{
						{
							HeaderName:  "string",
							HeaderValue: "string",
						},
					},
					FqdnTags: []string{
						"string",
					},
					Description: "string",
					Name:        "string",
					Protocols: []network.FirewallPolicyRuleApplicationProtocol{
						{
							Port:         0,
							ProtocolType: "string",
						},
					},
					DestinationAddresses: []string{
						"string",
					},
					SourceAddresses: []string{
						"string",
					},
					SourceIpGroups: []string{
						"string",
					},
					TargetFqdns: []string{
						"string",
					},
					TargetUrls: []string{
						"string",
					},
					TerminateTLS: false,
					WebCategories: []string{
						"string",
					},
				},
			},
		},
	},
})

    var firewallPolicyRuleCollectionGroupResource = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", FirewallPolicyRuleCollectionGroupArgs.builder()
    .firewallPolicyName("string")
    .resourceGroupName("string")
    .id("string")
    .name("string")
    .priority(0)
    .ruleCollectionGroupName("string")
    .ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
        .ruleCollectionType("FirewallPolicyFilterRuleCollection")
        .action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
            .type("string")
            .build())
        .name("string")
        .priority(0)
        .rules(%!v(PANIC=Format method: interface conversion: model.Expression is *model.FunctionCallExpression, not *model.ObjectConsExpression))
        .build())
    .build());

    firewall_policy_rule_collection_group_resource = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource",
    firewall_policy_name="string",
    resource_group_name="string",
    id="string",
    name="string",
    priority=0,
    rule_collection_group_name="string",
    rule_collections=[{
        "rule_collection_type": "FirewallPolicyFilterRuleCollection",
        "action": {
            "type": "string",
        },
        "name": "string",
        "priority": 0,
        "rules": [{
            "rule_type": "ApplicationRule",
            "http_headers_to_insert": [{
                "header_name": "string",
                "header_value": "string",
            }],
            "fqdn_tags": ["string"],
            "description": "string",
            "name": "string",
            "protocols": [{
                "port": 0,
                "protocol_type": "string",
            }],
            "destination_addresses": ["string"],
            "source_addresses": ["string"],
            "source_ip_groups": ["string"],
            "target_fqdns": ["string"],
            "target_urls": ["string"],
            "terminate_tls": False,
            "web_categories": ["string"],
        }],
    }])

    const firewallPolicyRuleCollectionGroupResource = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", {
    firewallPolicyName: "string",
    resourceGroupName: "string",
    id: "string",
    name: "string",
    priority: 0,
    ruleCollectionGroupName: "string",
    ruleCollections: [{
        ruleCollectionType: "FirewallPolicyFilterRuleCollection",
        action: {
            type: "string",
        },
        name: "string",
        priority: 0,
        rules: [{
            ruleType: "ApplicationRule",
            httpHeadersToInsert: [{
                headerName: "string",
                headerValue: "string",
            }],
            fqdnTags: ["string"],
            description: "string",
            name: "string",
            protocols: [{
                port: 0,
                protocolType: "string",
            }],
            destinationAddresses: ["string"],
            sourceAddresses: ["string"],
            sourceIpGroups: ["string"],
            targetFqdns: ["string"],
            targetUrls: ["string"],
            terminateTLS: false,
            webCategories: ["string"],
        }],
    }],
});

    type: azure-native:network:FirewallPolicyRuleCollectionGroup
properties:
    firewallPolicyName: string
    id: string
    name: string
    priority: 0
    resourceGroupName: string
    ruleCollectionGroupName: string
    ruleCollections:
        - action:
            type: string
          name: string
          priority: 0
          ruleCollectionType: FirewallPolicyFilterRuleCollection
          rules:
            - description: string
              destinationAddresses:
                - string
              fqdnTags:
                - string
              httpHeadersToInsert:
                - headerName: string
                  headerValue: string
              name: string
              protocols:
                - port: 0
                  protocolType: string
              ruleType: ApplicationRule
              sourceAddresses:
                - string
              sourceIpGroups:
                - string
              targetFqdns:
                - string
              targetUrls:
                - string
              terminateTLS: false
              webCategories:
                - string

    FirewallPolicyRuleCollectionGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The FirewallPolicyRuleCollectionGroup resource accepts the following input properties:

    FirewallPolicyName string
    The name of the Firewall Policy.
    ResourceGroupName string
    The name of the resource group.
    Id string
    Resource ID.
    Name string
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    Priority int
    Priority of the Firewall Policy Rule Collection Group resource.
    RuleCollectionGroupName string
    The name of the FirewallPolicyRuleCollectionGroup.
    RuleCollections List<Union<Pulumi.AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollection, Pulumi.AzureNative.Network.Inputs.FirewallPolicyNatRuleCollectionArgs>>
    Group of Firewall Policy rule collections.
    FirewallPolicyName string
    The name of the Firewall Policy.
    ResourceGroupName string
    The name of the resource group.
    Id string
    Resource ID.
    Name string
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    Priority int
    Priority of the Firewall Policy Rule Collection Group resource.
    RuleCollectionGroupName string
    The name of the FirewallPolicyRuleCollectionGroup.
    RuleCollections []interface{}
    Group of Firewall Policy rule collections.
    firewallPolicyName String
    The name of the Firewall Policy.
    resourceGroupName String
    The name of the resource group.
    id String
    Resource ID.
    name String
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    priority Integer
    Priority of the Firewall Policy Rule Collection Group resource.
    ruleCollectionGroupName String
    The name of the FirewallPolicyRuleCollectionGroup.
    ruleCollections List<Either<FirewallPolicyFilterRuleCollection,FirewallPolicyNatRuleCollectionArgs>>
    Group of Firewall Policy rule collections.
    firewallPolicyName string
    The name of the Firewall Policy.
    resourceGroupName string
    The name of the resource group.
    id string
    Resource ID.
    name string
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    priority number
    Priority of the Firewall Policy Rule Collection Group resource.
    ruleCollectionGroupName string
    The name of the FirewallPolicyRuleCollectionGroup.
    ruleCollections (FirewallPolicyFilterRuleCollection | FirewallPolicyNatRuleCollectionArgs)[]
    Group of Firewall Policy rule collections.
    firewall_policy_name str
    The name of the Firewall Policy.
    resource_group_name str
    The name of the resource group.
    id str
    Resource ID.
    name str
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    priority int
    Priority of the Firewall Policy Rule Collection Group resource.
    rule_collection_group_name str
    The name of the FirewallPolicyRuleCollectionGroup.
    rule_collections Sequence[Union[FirewallPolicyFilterRuleCollectionArgs, FirewallPolicyNatRuleCollectionArgs]]
    Group of Firewall Policy rule collections.
    firewallPolicyName String
    The name of the Firewall Policy.
    resourceGroupName String
    The name of the resource group.
    id String
    Resource ID.
    name String
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    priority Number
    Priority of the Firewall Policy Rule Collection Group resource.
    ruleCollectionGroupName String
    The name of the FirewallPolicyRuleCollectionGroup.
    ruleCollections List<Property Map | Property Map>
    Group of Firewall Policy rule collections.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the FirewallPolicyRuleCollectionGroup resource produces the following output properties:

    AzureApiVersion string
    The Azure API version of the resource.
    Etag string
    A unique read-only string that changes whenever the resource is updated.
    Id string
    The provider-assigned unique ID for this managed resource.
    ProvisioningState string
    The provisioning state of the firewall policy rule collection group resource.
    Size string
    A read-only string that represents the size of the FirewallPolicyRuleCollectionGroupProperties in MB. (ex 1.2MB)
    Type string
    Rule Group type.
    AzureApiVersion string
    The Azure API version of the resource.
    Etag string
    A unique read-only string that changes whenever the resource is updated.
    Id string
    The provider-assigned unique ID for this managed resource.
    ProvisioningState string
    The provisioning state of the firewall policy rule collection group resource.
    Size string
    A read-only string that represents the size of the FirewallPolicyRuleCollectionGroupProperties in MB. (ex 1.2MB)
    Type string
    Rule Group type.
    azureApiVersion String
    The Azure API version of the resource.
    etag String
    A unique read-only string that changes whenever the resource is updated.
    id String
    The provider-assigned unique ID for this managed resource.
    provisioningState String
    The provisioning state of the firewall policy rule collection group resource.
    size String
    A read-only string that represents the size of the FirewallPolicyRuleCollectionGroupProperties in MB. (ex 1.2MB)
    type String
    Rule Group type.
    azureApiVersion string
    The Azure API version of the resource.
    etag string
    A unique read-only string that changes whenever the resource is updated.
    id string
    The provider-assigned unique ID for this managed resource.
    provisioningState string
    The provisioning state of the firewall policy rule collection group resource.
    size string
    A read-only string that represents the size of the FirewallPolicyRuleCollectionGroupProperties in MB. (ex 1.2MB)
    type string
    Rule Group type.
    azure_api_version str
    The Azure API version of the resource.
    etag str
    A unique read-only string that changes whenever the resource is updated.
    id str
    The provider-assigned unique ID for this managed resource.
    provisioning_state str
    The provisioning state of the firewall policy rule collection group resource.
    size str
    A read-only string that represents the size of the FirewallPolicyRuleCollectionGroupProperties in MB. (ex 1.2MB)
    type str
    Rule Group type.
    azureApiVersion String
    The Azure API version of the resource.
    etag String
    A unique read-only string that changes whenever the resource is updated.
    id String
    The provider-assigned unique ID for this managed resource.
    provisioningState String
    The provisioning state of the firewall policy rule collection group resource.
    size String
    A read-only string that represents the size of the FirewallPolicyRuleCollectionGroupProperties in MB. (ex 1.2MB)
    type String
    Rule Group type.

    Supporting Types

    ApplicationRule, ApplicationRuleArgs

    Description string
    Description of the rule.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    FqdnTags List<string>
    List of FQDN Tags for this rule.
    HttpHeadersToInsert List<Pulumi.AzureNative.Network.Inputs.FirewallPolicyHttpHeaderToInsert>
    List of HTTP/S headers to insert.
    Name string
    Name of the rule.
    Protocols List<Pulumi.AzureNative.Network.Inputs.FirewallPolicyRuleApplicationProtocol>
    Array of Application Protocols.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    TargetFqdns List<string>
    List of FQDNs for this rule.
    TargetUrls List<string>
    List of Urls for this rule condition.
    TerminateTLS bool
    Terminate TLS connections for this rule.
    WebCategories List<string>
    List of destination azure web categories.
    Description string
    Description of the rule.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    FqdnTags []string
    List of FQDN Tags for this rule.
    HttpHeadersToInsert []FirewallPolicyHttpHeaderToInsert
    List of HTTP/S headers to insert.
    Name string
    Name of the rule.
    Protocols []FirewallPolicyRuleApplicationProtocol
    Array of Application Protocols.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    TargetFqdns []string
    List of FQDNs for this rule.
    TargetUrls []string
    List of Urls for this rule condition.
    TerminateTLS bool
    Terminate TLS connections for this rule.
    WebCategories []string
    List of destination azure web categories.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    fqdnTags List<String>
    List of FQDN Tags for this rule.
    httpHeadersToInsert List<FirewallPolicyHttpHeaderToInsert>
    List of HTTP/S headers to insert.
    name String
    Name of the rule.
    protocols List<FirewallPolicyRuleApplicationProtocol>
    Array of Application Protocols.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    targetFqdns List<String>
    List of FQDNs for this rule.
    targetUrls List<String>
    List of Urls for this rule condition.
    terminateTLS Boolean
    Terminate TLS connections for this rule.
    webCategories List<String>
    List of destination azure web categories.
    description string
    Description of the rule.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    fqdnTags string[]
    List of FQDN Tags for this rule.
    httpHeadersToInsert FirewallPolicyHttpHeaderToInsert[]
    List of HTTP/S headers to insert.
    name string
    Name of the rule.
    protocols FirewallPolicyRuleApplicationProtocol[]
    Array of Application Protocols.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    targetFqdns string[]
    List of FQDNs for this rule.
    targetUrls string[]
    List of Urls for this rule condition.
    terminateTLS boolean
    Terminate TLS connections for this rule.
    webCategories string[]
    List of destination azure web categories.
    description str
    Description of the rule.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    fqdn_tags Sequence[str]
    List of FQDN Tags for this rule.
    http_headers_to_insert Sequence[FirewallPolicyHttpHeaderToInsert]
    List of HTTP/S headers to insert.
    name str
    Name of the rule.
    protocols Sequence[FirewallPolicyRuleApplicationProtocol]
    Array of Application Protocols.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    target_fqdns Sequence[str]
    List of FQDNs for this rule.
    target_urls Sequence[str]
    List of Urls for this rule condition.
    terminate_tls bool
    Terminate TLS connections for this rule.
    web_categories Sequence[str]
    List of destination azure web categories.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    fqdnTags List<String>
    List of FQDN Tags for this rule.
    httpHeadersToInsert List<Property Map>
    List of HTTP/S headers to insert.
    name String
    Name of the rule.
    protocols List<Property Map>
    Array of Application Protocols.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    targetFqdns List<String>
    List of FQDNs for this rule.
    targetUrls List<String>
    List of Urls for this rule condition.
    terminateTLS Boolean
    Terminate TLS connections for this rule.
    webCategories List<String>
    List of destination azure web categories.

    ApplicationRuleResponse, ApplicationRuleResponseArgs

    Description string
    Description of the rule.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    FqdnTags List<string>
    List of FQDN Tags for this rule.
    HttpHeadersToInsert List<Pulumi.AzureNative.Network.Inputs.FirewallPolicyHttpHeaderToInsertResponse>
    List of HTTP/S headers to insert.
    Name string
    Name of the rule.
    Protocols List<Pulumi.AzureNative.Network.Inputs.FirewallPolicyRuleApplicationProtocolResponse>
    Array of Application Protocols.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    TargetFqdns List<string>
    List of FQDNs for this rule.
    TargetUrls List<string>
    List of Urls for this rule condition.
    TerminateTLS bool
    Terminate TLS connections for this rule.
    WebCategories List<string>
    List of destination azure web categories.
    Description string
    Description of the rule.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    FqdnTags []string
    List of FQDN Tags for this rule.
    HttpHeadersToInsert []FirewallPolicyHttpHeaderToInsertResponse
    List of HTTP/S headers to insert.
    Name string
    Name of the rule.
    Protocols []FirewallPolicyRuleApplicationProtocolResponse
    Array of Application Protocols.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    TargetFqdns []string
    List of FQDNs for this rule.
    TargetUrls []string
    List of Urls for this rule condition.
    TerminateTLS bool
    Terminate TLS connections for this rule.
    WebCategories []string
    List of destination azure web categories.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    fqdnTags List<String>
    List of FQDN Tags for this rule.
    httpHeadersToInsert List<FirewallPolicyHttpHeaderToInsertResponse>
    List of HTTP/S headers to insert.
    name String
    Name of the rule.
    protocols List<FirewallPolicyRuleApplicationProtocolResponse>
    Array of Application Protocols.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    targetFqdns List<String>
    List of FQDNs for this rule.
    targetUrls List<String>
    List of Urls for this rule condition.
    terminateTLS Boolean
    Terminate TLS connections for this rule.
    webCategories List<String>
    List of destination azure web categories.
    description string
    Description of the rule.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    fqdnTags string[]
    List of FQDN Tags for this rule.
    httpHeadersToInsert FirewallPolicyHttpHeaderToInsertResponse[]
    List of HTTP/S headers to insert.
    name string
    Name of the rule.
    protocols FirewallPolicyRuleApplicationProtocolResponse[]
    Array of Application Protocols.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    targetFqdns string[]
    List of FQDNs for this rule.
    targetUrls string[]
    List of Urls for this rule condition.
    terminateTLS boolean
    Terminate TLS connections for this rule.
    webCategories string[]
    List of destination azure web categories.
    description str
    Description of the rule.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    fqdn_tags Sequence[str]
    List of FQDN Tags for this rule.
    http_headers_to_insert Sequence[FirewallPolicyHttpHeaderToInsertResponse]
    List of HTTP/S headers to insert.
    name str
    Name of the rule.
    protocols Sequence[FirewallPolicyRuleApplicationProtocolResponse]
    Array of Application Protocols.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    target_fqdns Sequence[str]
    List of FQDNs for this rule.
    target_urls Sequence[str]
    List of Urls for this rule condition.
    terminate_tls bool
    Terminate TLS connections for this rule.
    web_categories Sequence[str]
    List of destination azure web categories.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    fqdnTags List<String>
    List of FQDN Tags for this rule.
    httpHeadersToInsert List<Property Map>
    List of HTTP/S headers to insert.
    name String
    Name of the rule.
    protocols List<Property Map>
    Array of Application Protocols.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    targetFqdns List<String>
    List of FQDNs for this rule.
    targetUrls List<String>
    List of Urls for this rule condition.
    terminateTLS Boolean
    Terminate TLS connections for this rule.
    webCategories List<String>
    List of destination azure web categories.

    FirewallPolicyFilterRuleCollection, FirewallPolicyFilterRuleCollectionArgs

    Action Pulumi.AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionAction
    The action type of a Filter rule collection.
    Name string
    The name of the rule collection.
    Priority int
    Priority of the Firewall Policy Rule Collection resource.
    Rules List<object>
    List of rules included in a rule collection.
    Action FirewallPolicyFilterRuleCollectionAction
    The action type of a Filter rule collection.
    Name string
    The name of the rule collection.
    Priority int
    Priority of the Firewall Policy Rule Collection resource.
    Rules []interface{}
    List of rules included in a rule collection.
    action FirewallPolicyFilterRuleCollectionAction
    The action type of a Filter rule collection.
    name String
    The name of the rule collection.
    priority Integer
    Priority of the Firewall Policy Rule Collection resource.
    rules List<Object>
    List of rules included in a rule collection.
    action FirewallPolicyFilterRuleCollectionAction
    The action type of a Filter rule collection.
    name string
    The name of the rule collection.
    priority number
    Priority of the Firewall Policy Rule Collection resource.
    rules (ApplicationRule | NatRule | NetworkRule)[]
    List of rules included in a rule collection.
    action FirewallPolicyFilterRuleCollectionAction
    The action type of a Filter rule collection.
    name str
    The name of the rule collection.
    priority int
    Priority of the Firewall Policy Rule Collection resource.
    rules Sequence[Union[ApplicationRule, NatRule, NetworkRule]]
    List of rules included in a rule collection.
    action Property Map
    The action type of a Filter rule collection.
    name String
    The name of the rule collection.
    priority Number
    Priority of the Firewall Policy Rule Collection resource.
    rules List<Property Map | Property Map | Property Map>
    List of rules included in a rule collection.

    FirewallPolicyFilterRuleCollectionAction, FirewallPolicyFilterRuleCollectionActionArgs

    type String | "Allow" | "Deny"
    The type of action.

    FirewallPolicyFilterRuleCollectionActionResponse, FirewallPolicyFilterRuleCollectionActionResponseArgs

    Type string
    The type of action.
    Type string
    The type of action.
    type String
    The type of action.
    type string
    The type of action.
    type str
    The type of action.
    type String
    The type of action.

    FirewallPolicyFilterRuleCollectionActionType, FirewallPolicyFilterRuleCollectionActionTypeArgs

    Allow
    Allow
    Deny
    Deny
    FirewallPolicyFilterRuleCollectionActionTypeAllow
    Allow
    FirewallPolicyFilterRuleCollectionActionTypeDeny
    Deny
    Allow
    Allow
    Deny
    Deny
    Allow
    Allow
    Deny
    Deny
    ALLOW
    Allow
    DENY
    Deny
    "Allow"
    Allow
    "Deny"
    Deny

    FirewallPolicyFilterRuleCollectionResponse, FirewallPolicyFilterRuleCollectionResponseArgs

    Action Pulumi.AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionResponse
    The action type of a Filter rule collection.
    Name string
    The name of the rule collection.
    Priority int
    Priority of the Firewall Policy Rule Collection resource.
    Rules List<object>
    List of rules included in a rule collection.
    Action FirewallPolicyFilterRuleCollectionActionResponse
    The action type of a Filter rule collection.
    Name string
    The name of the rule collection.
    Priority int
    Priority of the Firewall Policy Rule Collection resource.
    Rules []interface{}
    List of rules included in a rule collection.
    action FirewallPolicyFilterRuleCollectionActionResponse
    The action type of a Filter rule collection.
    name String
    The name of the rule collection.
    priority Integer
    Priority of the Firewall Policy Rule Collection resource.
    rules List<Object>
    List of rules included in a rule collection.
    action FirewallPolicyFilterRuleCollectionActionResponse
    The action type of a Filter rule collection.
    name string
    The name of the rule collection.
    priority number
    Priority of the Firewall Policy Rule Collection resource.
    rules (ApplicationRuleResponse | NatRuleResponse | NetworkRuleResponse)[]
    List of rules included in a rule collection.
    action FirewallPolicyFilterRuleCollectionActionResponse
    The action type of a Filter rule collection.
    name str
    The name of the rule collection.
    priority int
    Priority of the Firewall Policy Rule Collection resource.
    rules Sequence[Union[ApplicationRuleResponse, NatRuleResponse, NetworkRuleResponse]]
    List of rules included in a rule collection.
    action Property Map
    The action type of a Filter rule collection.
    name String
    The name of the rule collection.
    priority Number
    Priority of the Firewall Policy Rule Collection resource.
    rules List<Property Map | Property Map | Property Map>
    List of rules included in a rule collection.

    FirewallPolicyHttpHeaderToInsert, FirewallPolicyHttpHeaderToInsertArgs

    HeaderName string
    Contains the name of the header
    HeaderValue string
    Contains the value of the header
    HeaderName string
    Contains the name of the header
    HeaderValue string
    Contains the value of the header
    headerName String
    Contains the name of the header
    headerValue String
    Contains the value of the header
    headerName string
    Contains the name of the header
    headerValue string
    Contains the value of the header
    header_name str
    Contains the name of the header
    header_value str
    Contains the value of the header
    headerName String
    Contains the name of the header
    headerValue String
    Contains the value of the header

    FirewallPolicyHttpHeaderToInsertResponse, FirewallPolicyHttpHeaderToInsertResponseArgs

    HeaderName string
    Contains the name of the header
    HeaderValue string
    Contains the value of the header
    HeaderName string
    Contains the name of the header
    HeaderValue string
    Contains the value of the header
    headerName String
    Contains the name of the header
    headerValue String
    Contains the value of the header
    headerName string
    Contains the name of the header
    headerValue string
    Contains the value of the header
    header_name str
    Contains the name of the header
    header_value str
    Contains the value of the header
    headerName String
    Contains the name of the header
    headerValue String
    Contains the value of the header

    FirewallPolicyNatRuleCollection, FirewallPolicyNatRuleCollectionArgs

    Action Pulumi.AzureNative.Network.Inputs.FirewallPolicyNatRuleCollectionAction
    The action type of a Nat rule collection.
    Name string
    The name of the rule collection.
    Priority int
    Priority of the Firewall Policy Rule Collection resource.
    Rules List<object>
    List of rules included in a rule collection.
    Action FirewallPolicyNatRuleCollectionAction
    The action type of a Nat rule collection.
    Name string
    The name of the rule collection.
    Priority int
    Priority of the Firewall Policy Rule Collection resource.
    Rules []interface{}
    List of rules included in a rule collection.
    action FirewallPolicyNatRuleCollectionAction
    The action type of a Nat rule collection.
    name String
    The name of the rule collection.
    priority Integer
    Priority of the Firewall Policy Rule Collection resource.
    rules List<Object>
    List of rules included in a rule collection.
    action FirewallPolicyNatRuleCollectionAction
    The action type of a Nat rule collection.
    name string
    The name of the rule collection.
    priority number
    Priority of the Firewall Policy Rule Collection resource.
    rules (ApplicationRule | NatRule | NetworkRule)[]
    List of rules included in a rule collection.
    action FirewallPolicyNatRuleCollectionAction
    The action type of a Nat rule collection.
    name str
    The name of the rule collection.
    priority int
    Priority of the Firewall Policy Rule Collection resource.
    rules Sequence[Union[ApplicationRule, NatRule, NetworkRule]]
    List of rules included in a rule collection.
    action Property Map
    The action type of a Nat rule collection.
    name String
    The name of the rule collection.
    priority Number
    Priority of the Firewall Policy Rule Collection resource.
    rules List<Property Map | Property Map | Property Map>
    List of rules included in a rule collection.

    FirewallPolicyNatRuleCollectionAction, FirewallPolicyNatRuleCollectionActionArgs

    type String | "DNAT"
    The type of action.

    FirewallPolicyNatRuleCollectionActionResponse, FirewallPolicyNatRuleCollectionActionResponseArgs

    Type string
    The type of action.
    Type string
    The type of action.
    type String
    The type of action.
    type string
    The type of action.
    type str
    The type of action.
    type String
    The type of action.

    FirewallPolicyNatRuleCollectionActionType, FirewallPolicyNatRuleCollectionActionTypeArgs

    DNAT
    DNAT
    FirewallPolicyNatRuleCollectionActionTypeDNAT
    DNAT
    DNAT
    DNAT
    DNAT
    DNAT
    DNAT
    DNAT
    "DNAT"
    DNAT

    FirewallPolicyNatRuleCollectionResponse, FirewallPolicyNatRuleCollectionResponseArgs

    Action Pulumi.AzureNative.Network.Inputs.FirewallPolicyNatRuleCollectionActionResponse
    The action type of a Nat rule collection.
    Name string
    The name of the rule collection.
    Priority int
    Priority of the Firewall Policy Rule Collection resource.
    Rules List<object>
    List of rules included in a rule collection.
    Action FirewallPolicyNatRuleCollectionActionResponse
    The action type of a Nat rule collection.
    Name string
    The name of the rule collection.
    Priority int
    Priority of the Firewall Policy Rule Collection resource.
    Rules []interface{}
    List of rules included in a rule collection.
    action FirewallPolicyNatRuleCollectionActionResponse
    The action type of a Nat rule collection.
    name String
    The name of the rule collection.
    priority Integer
    Priority of the Firewall Policy Rule Collection resource.
    rules List<Object>
    List of rules included in a rule collection.
    action FirewallPolicyNatRuleCollectionActionResponse
    The action type of a Nat rule collection.
    name string
    The name of the rule collection.
    priority number
    Priority of the Firewall Policy Rule Collection resource.
    rules (ApplicationRuleResponse | NatRuleResponse | NetworkRuleResponse)[]
    List of rules included in a rule collection.
    action FirewallPolicyNatRuleCollectionActionResponse
    The action type of a Nat rule collection.
    name str
    The name of the rule collection.
    priority int
    Priority of the Firewall Policy Rule Collection resource.
    rules Sequence[Union[ApplicationRuleResponse, NatRuleResponse, NetworkRuleResponse]]
    List of rules included in a rule collection.
    action Property Map
    The action type of a Nat rule collection.
    name String
    The name of the rule collection.
    priority Number
    Priority of the Firewall Policy Rule Collection resource.
    rules List<Property Map | Property Map | Property Map>
    List of rules included in a rule collection.

    FirewallPolicyRuleApplicationProtocol, FirewallPolicyRuleApplicationProtocolArgs

    Port int
    Port number for the protocol, cannot be greater than 64000.
    ProtocolType string | Pulumi.AzureNative.Network.FirewallPolicyRuleApplicationProtocolType
    Protocol type.
    Port int
    Port number for the protocol, cannot be greater than 64000.
    ProtocolType string | FirewallPolicyRuleApplicationProtocolType
    Protocol type.
    port Integer
    Port number for the protocol, cannot be greater than 64000.
    protocolType String | FirewallPolicyRuleApplicationProtocolType
    Protocol type.
    port number
    Port number for the protocol, cannot be greater than 64000.
    protocolType string | FirewallPolicyRuleApplicationProtocolType
    Protocol type.
    port int
    Port number for the protocol, cannot be greater than 64000.
    protocol_type str | FirewallPolicyRuleApplicationProtocolType
    Protocol type.
    port Number
    Port number for the protocol, cannot be greater than 64000.
    protocolType String | "Http" | "Https"
    Protocol type.

    FirewallPolicyRuleApplicationProtocolResponse, FirewallPolicyRuleApplicationProtocolResponseArgs

    Port int
    Port number for the protocol, cannot be greater than 64000.
    ProtocolType string
    Protocol type.
    Port int
    Port number for the protocol, cannot be greater than 64000.
    ProtocolType string
    Protocol type.
    port Integer
    Port number for the protocol, cannot be greater than 64000.
    protocolType String
    Protocol type.
    port number
    Port number for the protocol, cannot be greater than 64000.
    protocolType string
    Protocol type.
    port int
    Port number for the protocol, cannot be greater than 64000.
    protocol_type str
    Protocol type.
    port Number
    Port number for the protocol, cannot be greater than 64000.
    protocolType String
    Protocol type.

    FirewallPolicyRuleApplicationProtocolType, FirewallPolicyRuleApplicationProtocolTypeArgs

    Http
    Http
    Https
    Https
    FirewallPolicyRuleApplicationProtocolTypeHttp
    Http
    FirewallPolicyRuleApplicationProtocolTypeHttps
    Https
    Http
    Http
    Https
    Https
    Http
    Http
    Https
    Https
    HTTP
    Http
    HTTPS
    Https
    "Http"
    Http
    "Https"
    Https

    FirewallPolicyRuleNetworkProtocol, FirewallPolicyRuleNetworkProtocolArgs

    TCP
    TCP
    UDP
    UDP
    Any
    Any
    ICMP
    ICMP
    FirewallPolicyRuleNetworkProtocolTCP
    TCP
    FirewallPolicyRuleNetworkProtocolUDP
    UDP
    FirewallPolicyRuleNetworkProtocolAny
    Any
    FirewallPolicyRuleNetworkProtocolICMP
    ICMP
    TCP
    TCP
    UDP
    UDP
    Any
    Any
    ICMP
    ICMP
    TCP
    TCP
    UDP
    UDP
    Any
    Any
    ICMP
    ICMP
    TCP
    TCP
    UDP
    UDP
    ANY
    Any
    ICMP
    ICMP
    "TCP"
    TCP
    "UDP"
    UDP
    "Any"
    Any
    "ICMP"
    ICMP

    NatRule, NatRuleArgs

    Description string
    Description of the rule.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    DestinationPorts List<string>
    List of destination ports.
    IpProtocols List<Union<string, Pulumi.AzureNative.Network.FirewallPolicyRuleNetworkProtocol>>
    Array of FirewallPolicyRuleNetworkProtocols.
    Name string
    Name of the rule.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    TranslatedAddress string
    The translated address for this NAT rule.
    TranslatedFqdn string
    The translated FQDN for this NAT rule.
    TranslatedPort string
    The translated port for this NAT rule.
    Description string
    Description of the rule.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    DestinationPorts []string
    List of destination ports.
    IpProtocols []string
    Array of FirewallPolicyRuleNetworkProtocols.
    Name string
    Name of the rule.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    TranslatedAddress string
    The translated address for this NAT rule.
    TranslatedFqdn string
    The translated FQDN for this NAT rule.
    TranslatedPort string
    The translated port for this NAT rule.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<Either<String,FirewallPolicyRuleNetworkProtocol>>
    Array of FirewallPolicyRuleNetworkProtocols.
    name String
    Name of the rule.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    translatedAddress String
    The translated address for this NAT rule.
    translatedFqdn String
    The translated FQDN for this NAT rule.
    translatedPort String
    The translated port for this NAT rule.
    description string
    Description of the rule.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    destinationPorts string[]
    List of destination ports.
    ipProtocols (string | FirewallPolicyRuleNetworkProtocol)[]
    Array of FirewallPolicyRuleNetworkProtocols.
    name string
    Name of the rule.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    translatedAddress string
    The translated address for this NAT rule.
    translatedFqdn string
    The translated FQDN for this NAT rule.
    translatedPort string
    The translated port for this NAT rule.
    description str
    Description of the rule.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    destination_ports Sequence[str]
    List of destination ports.
    ip_protocols Sequence[Union[str, FirewallPolicyRuleNetworkProtocol]]
    Array of FirewallPolicyRuleNetworkProtocols.
    name str
    Name of the rule.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    translated_address str
    The translated address for this NAT rule.
    translated_fqdn str
    The translated FQDN for this NAT rule.
    translated_port str
    The translated port for this NAT rule.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String | "TCP" | "UDP" | "Any" | "ICMP">
    Array of FirewallPolicyRuleNetworkProtocols.
    name String
    Name of the rule.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    translatedAddress String
    The translated address for this NAT rule.
    translatedFqdn String
    The translated FQDN for this NAT rule.
    translatedPort String
    The translated port for this NAT rule.

    NatRuleResponse, NatRuleResponseArgs

    Description string
    Description of the rule.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    DestinationPorts List<string>
    List of destination ports.
    IpProtocols List<string>
    Array of FirewallPolicyRuleNetworkProtocols.
    Name string
    Name of the rule.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    TranslatedAddress string
    The translated address for this NAT rule.
    TranslatedFqdn string
    The translated FQDN for this NAT rule.
    TranslatedPort string
    The translated port for this NAT rule.
    Description string
    Description of the rule.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    DestinationPorts []string
    List of destination ports.
    IpProtocols []string
    Array of FirewallPolicyRuleNetworkProtocols.
    Name string
    Name of the rule.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    TranslatedAddress string
    The translated address for this NAT rule.
    TranslatedFqdn string
    The translated FQDN for this NAT rule.
    TranslatedPort string
    The translated port for this NAT rule.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String>
    Array of FirewallPolicyRuleNetworkProtocols.
    name String
    Name of the rule.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    translatedAddress String
    The translated address for this NAT rule.
    translatedFqdn String
    The translated FQDN for this NAT rule.
    translatedPort String
    The translated port for this NAT rule.
    description string
    Description of the rule.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    destinationPorts string[]
    List of destination ports.
    ipProtocols string[]
    Array of FirewallPolicyRuleNetworkProtocols.
    name string
    Name of the rule.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    translatedAddress string
    The translated address for this NAT rule.
    translatedFqdn string
    The translated FQDN for this NAT rule.
    translatedPort string
    The translated port for this NAT rule.
    description str
    Description of the rule.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    destination_ports Sequence[str]
    List of destination ports.
    ip_protocols Sequence[str]
    Array of FirewallPolicyRuleNetworkProtocols.
    name str
    Name of the rule.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    translated_address str
    The translated address for this NAT rule.
    translated_fqdn str
    The translated FQDN for this NAT rule.
    translated_port str
    The translated port for this NAT rule.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String>
    Array of FirewallPolicyRuleNetworkProtocols.
    name String
    Name of the rule.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    translatedAddress String
    The translated address for this NAT rule.
    translatedFqdn String
    The translated FQDN for this NAT rule.
    translatedPort String
    The translated port for this NAT rule.

    NetworkRule, NetworkRuleArgs

    Description string
    Description of the rule.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    DestinationFqdns List<string>
    List of destination FQDNs.
    DestinationIpGroups List<string>
    List of destination IpGroups for this rule.
    DestinationPorts List<string>
    List of destination ports.
    IpProtocols List<Union<string, Pulumi.AzureNative.Network.FirewallPolicyRuleNetworkProtocol>>
    Array of FirewallPolicyRuleNetworkProtocols.
    Name string
    Name of the rule.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    Description string
    Description of the rule.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    DestinationFqdns []string
    List of destination FQDNs.
    DestinationIpGroups []string
    List of destination IpGroups for this rule.
    DestinationPorts []string
    List of destination ports.
    IpProtocols []string
    Array of FirewallPolicyRuleNetworkProtocols.
    Name string
    Name of the rule.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationFqdns List<String>
    List of destination FQDNs.
    destinationIpGroups List<String>
    List of destination IpGroups for this rule.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<Either<String,FirewallPolicyRuleNetworkProtocol>>
    Array of FirewallPolicyRuleNetworkProtocols.
    name String
    Name of the rule.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    description string
    Description of the rule.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    destinationFqdns string[]
    List of destination FQDNs.
    destinationIpGroups string[]
    List of destination IpGroups for this rule.
    destinationPorts string[]
    List of destination ports.
    ipProtocols (string | FirewallPolicyRuleNetworkProtocol)[]
    Array of FirewallPolicyRuleNetworkProtocols.
    name string
    Name of the rule.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    description str
    Description of the rule.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    destination_fqdns Sequence[str]
    List of destination FQDNs.
    destination_ip_groups Sequence[str]
    List of destination IpGroups for this rule.
    destination_ports Sequence[str]
    List of destination ports.
    ip_protocols Sequence[Union[str, FirewallPolicyRuleNetworkProtocol]]
    Array of FirewallPolicyRuleNetworkProtocols.
    name str
    Name of the rule.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationFqdns List<String>
    List of destination FQDNs.
    destinationIpGroups List<String>
    List of destination IpGroups for this rule.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String | "TCP" | "UDP" | "Any" | "ICMP">
    Array of FirewallPolicyRuleNetworkProtocols.
    name String
    Name of the rule.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.

    NetworkRuleResponse, NetworkRuleResponseArgs

    Description string
    Description of the rule.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    DestinationFqdns List<string>
    List of destination FQDNs.
    DestinationIpGroups List<string>
    List of destination IpGroups for this rule.
    DestinationPorts List<string>
    List of destination ports.
    IpProtocols List<string>
    Array of FirewallPolicyRuleNetworkProtocols.
    Name string
    Name of the rule.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    Description string
    Description of the rule.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    DestinationFqdns []string
    List of destination FQDNs.
    DestinationIpGroups []string
    List of destination IpGroups for this rule.
    DestinationPorts []string
    List of destination ports.
    IpProtocols []string
    Array of FirewallPolicyRuleNetworkProtocols.
    Name string
    Name of the rule.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationFqdns List<String>
    List of destination FQDNs.
    destinationIpGroups List<String>
    List of destination IpGroups for this rule.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String>
    Array of FirewallPolicyRuleNetworkProtocols.
    name String
    Name of the rule.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    description string
    Description of the rule.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    destinationFqdns string[]
    List of destination FQDNs.
    destinationIpGroups string[]
    List of destination IpGroups for this rule.
    destinationPorts string[]
    List of destination ports.
    ipProtocols string[]
    Array of FirewallPolicyRuleNetworkProtocols.
    name string
    Name of the rule.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    description str
    Description of the rule.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    destination_fqdns Sequence[str]
    List of destination FQDNs.
    destination_ip_groups Sequence[str]
    List of destination IpGroups for this rule.
    destination_ports Sequence[str]
    List of destination ports.
    ip_protocols Sequence[str]
    Array of FirewallPolicyRuleNetworkProtocols.
    name str
    Name of the rule.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    description String
    Description of the rule.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationFqdns List<String>
    List of destination FQDNs.
    destinationIpGroups List<String>
    List of destination IpGroups for this rule.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String>
    Array of FirewallPolicyRuleNetworkProtocols.
    name String
    Name of the rule.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:network:FirewallPolicyRuleCollectionGroup ruleCollectionGroup1 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/firewallPolicies/{firewallPolicyName}/ruleCollectionGroups/{ruleCollectionGroupName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
    Azure Native v3.4.0 published on Wednesday, May 7, 2025 by Pulumi
    pulumi/pulumi-azure-native