Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. network
  5. FirewallPolicyRuleGroup
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.5.0 published on Monday, May 19, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.network.FirewallPolicyRuleGroup

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.5.0 published on Monday, May 19, 2025 by Pulumi
pulumi/pulumi-azure-native

    Rule Group resource.

    Uses Azure REST API version 2020-04-01. In version 2.x of the Azure Native provider, it used API version 2020-04-01.

    Other available API versions: 2019-06-01, 2019-07-01, 2019-08-01, 2019-09-01, 2019-11-01, 2019-12-01, 2020-03-01. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native network [ApiVersion]. See the version guide for details.

    Example Usage

    Create FirewallPolicyRuleGroup

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var firewallPolicyRuleGroup = new AzureNative.Network.FirewallPolicyRuleGroup("firewallPolicyRuleGroup", new()
    {
        FirewallPolicyName = "firewallPolicy",
        Priority = 110,
        ResourceGroupName = "rg1",
        RuleGroupName = "ruleGroup1",
        Rules = new[]
        {
            new AzureNative.Network.Inputs.FirewallPolicyFilterRuleArgs
            {
                Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleActionArgs
                {
                    Type = AzureNative.Network.FirewallPolicyFilterRuleActionType.Deny,
                },
                Name = "Example-Filter-Rule",
                RuleConditions = new[]
                {
                    new AzureNative.Network.Inputs.NetworkRuleConditionArgs
                    {
                        DestinationAddresses = new[]
                        {
                            "*",
                        },
                        DestinationPorts = new[]
                        {
                            "*",
                        },
                        IpProtocols = new[]
                        {
                            AzureNative.Network.FirewallPolicyRuleConditionNetworkProtocol.TCP,
                        },
                        Name = "network-condition1",
                        RuleConditionType = "NetworkRuleCondition",
                        SourceAddresses = new[]
                        {
                            "10.1.25.0/24",
                        },
                    },
                },
                RuleType = "FirewallPolicyFilterRule",
            },
        },
    });

});

    package main

import (
	network "github.com/pulumi/pulumi-azure-native-sdk/network/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := network.NewFirewallPolicyRuleGroup(ctx, "firewallPolicyRuleGroup", &network.FirewallPolicyRuleGroupArgs{
			FirewallPolicyName: pulumi.String("firewallPolicy"),
			Priority:           pulumi.Int(110),
			ResourceGroupName:  pulumi.String("rg1"),
			RuleGroupName:      pulumi.String("ruleGroup1"),
			Rules: pulumi.Array{
				network.FirewallPolicyFilterRule{
					Action: network.FirewallPolicyFilterRuleAction{
						Type: network.FirewallPolicyFilterRuleActionTypeDeny,
					},
					Name: "Example-Filter-Rule",
					RuleConditions: []interface{}{
						network.NetworkRuleCondition{
							DestinationAddresses: []string{
								"*",
							},
							DestinationPorts: []string{
								"*",
							},
							IpProtocols: []network.FirewallPolicyRuleConditionNetworkProtocol{
								network.FirewallPolicyRuleConditionNetworkProtocolTCP,
							},
							Name:              "network-condition1",
							RuleConditionType: "NetworkRuleCondition",
							SourceAddresses: []string{
								"10.1.25.0/24",
							},
						},
					},
					RuleType: "FirewallPolicyFilterRule",
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var firewallPolicyRuleGroup = new FirewallPolicyRuleGroup("firewallPolicyRuleGroup", FirewallPolicyRuleGroupArgs.builder()
            .firewallPolicyName("firewallPolicy")
            .priority(110)
            .resourceGroupName("rg1")
            .ruleGroupName("ruleGroup1")
            .rules(FirewallPolicyFilterRuleArgs.builder()
                .action(FirewallPolicyFilterRuleActionArgs.builder()
                    .type("Deny")
                    .build())
                .name("Example-Filter-Rule")
                .ruleConditions(%!v(PANIC=Format method: interface conversion: model.Expression is *model.FunctionCallExpression, not *model.ObjectConsExpression))
                .ruleType("FirewallPolicyFilterRule")
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const firewallPolicyRuleGroup = new azure_native.network.FirewallPolicyRuleGroup("firewallPolicyRuleGroup", {
    firewallPolicyName: "firewallPolicy",
    priority: 110,
    resourceGroupName: "rg1",
    ruleGroupName: "ruleGroup1",
    rules: [{
        action: {
            type: azure_native.network.FirewallPolicyFilterRuleActionType.Deny,
        },
        name: "Example-Filter-Rule",
        ruleConditions: [{
            destinationAddresses: ["*"],
            destinationPorts: ["*"],
            ipProtocols: [azure_native.network.FirewallPolicyRuleConditionNetworkProtocol.TCP],
            name: "network-condition1",
            ruleConditionType: "NetworkRuleCondition",
            sourceAddresses: ["10.1.25.0/24"],
        }],
        ruleType: "FirewallPolicyFilterRule",
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

firewall_policy_rule_group = azure_native.network.FirewallPolicyRuleGroup("firewallPolicyRuleGroup",
    firewall_policy_name="firewallPolicy",
    priority=110,
    resource_group_name="rg1",
    rule_group_name="ruleGroup1",
    rules=[{
        "action": {
            "type": azure_native.network.FirewallPolicyFilterRuleActionType.DENY,
        },
        "name": "Example-Filter-Rule",
        "rule_conditions": [{
            "destination_addresses": ["*"],
            "destination_ports": ["*"],
            "ip_protocols": [azure_native.network.FirewallPolicyRuleConditionNetworkProtocol.TCP],
            "name": "network-condition1",
            "rule_condition_type": "NetworkRuleCondition",
            "source_addresses": ["10.1.25.0/24"],
        }],
        "rule_type": "FirewallPolicyFilterRule",
    }])

    resources:
  firewallPolicyRuleGroup:
    type: azure-native:network:FirewallPolicyRuleGroup
    properties:
      firewallPolicyName: firewallPolicy
      priority: 110
      resourceGroupName: rg1
      ruleGroupName: ruleGroup1
      rules:
        - action:
            type: Deny
          name: Example-Filter-Rule
          ruleConditions:
            - destinationAddresses:
                - '*'
              destinationPorts:
                - '*'
              ipProtocols:
                - TCP
              name: network-condition1
              ruleConditionType: NetworkRuleCondition
              sourceAddresses:
                - 10.1.25.0/24
          ruleType: FirewallPolicyFilterRule

    Create FirewallPolicyRuleGroup With IpGroups

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var firewallPolicyRuleGroup = new AzureNative.Network.FirewallPolicyRuleGroup("firewallPolicyRuleGroup", new()
    {
        FirewallPolicyName = "firewallPolicy",
        Priority = 110,
        ResourceGroupName = "rg1",
        RuleGroupName = "ruleGroup1",
        Rules = new[]
        {
            new AzureNative.Network.Inputs.FirewallPolicyFilterRuleArgs
            {
                Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleActionArgs
                {
                    Type = AzureNative.Network.FirewallPolicyFilterRuleActionType.Deny,
                },
                Name = "Example-Filter-Rule",
                RuleConditions = new[]
                {
                    new AzureNative.Network.Inputs.NetworkRuleConditionArgs
                    {
                        DestinationIpGroups = new[]
                        {
                            "/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2",
                        },
                        DestinationPorts = new[]
                        {
                            "*",
                        },
                        IpProtocols = new[]
                        {
                            AzureNative.Network.FirewallPolicyRuleConditionNetworkProtocol.TCP,
                        },
                        Name = "network-condition1",
                        RuleConditionType = "NetworkRuleCondition",
                        SourceIpGroups = new[]
                        {
                            "/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1",
                        },
                    },
                },
                RuleType = "FirewallPolicyFilterRule",
            },
        },
    });

});

    package main

import (
	network "github.com/pulumi/pulumi-azure-native-sdk/network/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := network.NewFirewallPolicyRuleGroup(ctx, "firewallPolicyRuleGroup", &network.FirewallPolicyRuleGroupArgs{
			FirewallPolicyName: pulumi.String("firewallPolicy"),
			Priority:           pulumi.Int(110),
			ResourceGroupName:  pulumi.String("rg1"),
			RuleGroupName:      pulumi.String("ruleGroup1"),
			Rules: pulumi.Array{
				network.FirewallPolicyFilterRule{
					Action: network.FirewallPolicyFilterRuleAction{
						Type: network.FirewallPolicyFilterRuleActionTypeDeny,
					},
					Name: "Example-Filter-Rule",
					RuleConditions: []interface{}{
						network.NetworkRuleCondition{
							DestinationIpGroups: []string{
								"/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2",
							},
							DestinationPorts: []string{
								"*",
							},
							IpProtocols: []network.FirewallPolicyRuleConditionNetworkProtocol{
								network.FirewallPolicyRuleConditionNetworkProtocolTCP,
							},
							Name:              "network-condition1",
							RuleConditionType: "NetworkRuleCondition",
							SourceIpGroups: []string{
								"/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1",
							},
						},
					},
					RuleType: "FirewallPolicyFilterRule",
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var firewallPolicyRuleGroup = new FirewallPolicyRuleGroup("firewallPolicyRuleGroup", FirewallPolicyRuleGroupArgs.builder()
            .firewallPolicyName("firewallPolicy")
            .priority(110)
            .resourceGroupName("rg1")
            .ruleGroupName("ruleGroup1")
            .rules(FirewallPolicyFilterRuleArgs.builder()
                .action(FirewallPolicyFilterRuleActionArgs.builder()
                    .type("Deny")
                    .build())
                .name("Example-Filter-Rule")
                .ruleConditions(%!v(PANIC=Format method: interface conversion: model.Expression is *model.FunctionCallExpression, not *model.ObjectConsExpression))
                .ruleType("FirewallPolicyFilterRule")
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const firewallPolicyRuleGroup = new azure_native.network.FirewallPolicyRuleGroup("firewallPolicyRuleGroup", {
    firewallPolicyName: "firewallPolicy",
    priority: 110,
    resourceGroupName: "rg1",
    ruleGroupName: "ruleGroup1",
    rules: [{
        action: {
            type: azure_native.network.FirewallPolicyFilterRuleActionType.Deny,
        },
        name: "Example-Filter-Rule",
        ruleConditions: [{
            destinationIpGroups: ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2"],
            destinationPorts: ["*"],
            ipProtocols: [azure_native.network.FirewallPolicyRuleConditionNetworkProtocol.TCP],
            name: "network-condition1",
            ruleConditionType: "NetworkRuleCondition",
            sourceIpGroups: ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1"],
        }],
        ruleType: "FirewallPolicyFilterRule",
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

firewall_policy_rule_group = azure_native.network.FirewallPolicyRuleGroup("firewallPolicyRuleGroup",
    firewall_policy_name="firewallPolicy",
    priority=110,
    resource_group_name="rg1",
    rule_group_name="ruleGroup1",
    rules=[{
        "action": {
            "type": azure_native.network.FirewallPolicyFilterRuleActionType.DENY,
        },
        "name": "Example-Filter-Rule",
        "rule_conditions": [{
            "destination_ip_groups": ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2"],
            "destination_ports": ["*"],
            "ip_protocols": [azure_native.network.FirewallPolicyRuleConditionNetworkProtocol.TCP],
            "name": "network-condition1",
            "rule_condition_type": "NetworkRuleCondition",
            "source_ip_groups": ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1"],
        }],
        "rule_type": "FirewallPolicyFilterRule",
    }])

    resources:
  firewallPolicyRuleGroup:
    type: azure-native:network:FirewallPolicyRuleGroup
    properties:
      firewallPolicyName: firewallPolicy
      priority: 110
      resourceGroupName: rg1
      ruleGroupName: ruleGroup1
      rules:
        - action:
            type: Deny
          name: Example-Filter-Rule
          ruleConditions:
            - destinationIpGroups:
                - /subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2
              destinationPorts:
                - '*'
              ipProtocols:
                - TCP
              name: network-condition1
              ruleConditionType: NetworkRuleCondition
              sourceIpGroups:
                - /subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1
          ruleType: FirewallPolicyFilterRule

    Create FirewallPolicyRuleGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new FirewallPolicyRuleGroup(name: string, args: FirewallPolicyRuleGroupArgs, opts?: CustomResourceOptions);
    @overload
def FirewallPolicyRuleGroup(resource_name: str,
                            args: FirewallPolicyRuleGroupArgs,
                            opts: Optional[ResourceOptions] = None)

@overload
def FirewallPolicyRuleGroup(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            firewall_policy_name: Optional[str] = None,
                            resource_group_name: Optional[str] = None,
                            id: Optional[str] = None,
                            name: Optional[str] = None,
                            priority: Optional[int] = None,
                            rule_group_name: Optional[str] = None,
                            rules: Optional[Sequence[Union[FirewallPolicyFilterRuleArgs, FirewallPolicyNatRuleArgs]]] = None)
    func NewFirewallPolicyRuleGroup(ctx *Context, name string, args FirewallPolicyRuleGroupArgs, opts ...ResourceOption) (*FirewallPolicyRuleGroup, error)
    public FirewallPolicyRuleGroup(string name, FirewallPolicyRuleGroupArgs args, CustomResourceOptions? opts = null)
    public FirewallPolicyRuleGroup(String name, FirewallPolicyRuleGroupArgs args)
public FirewallPolicyRuleGroup(String name, FirewallPolicyRuleGroupArgs args, CustomResourceOptions options)

    type: azure-native:network:FirewallPolicyRuleGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args FirewallPolicyRuleGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FirewallPolicyRuleGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FirewallPolicyRuleGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FirewallPolicyRuleGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FirewallPolicyRuleGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var firewallPolicyRuleGroupResource = new AzureNative.Network.FirewallPolicyRuleGroup("firewallPolicyRuleGroupResource", new()
{
    FirewallPolicyName = "string",
    ResourceGroupName = "string",
    Id = "string",
    Name = "string",
    Priority = 0,
    RuleGroupName = "string",
    Rules = new[]
    {
        new AzureNative.Network.Inputs.FirewallPolicyFilterRuleArgs
        {
            RuleType = "FirewallPolicyFilterRule",
            Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleActionArgs
            {
                Type = "string",
            },
            Name = "string",
            Priority = 0,
            RuleConditions = new[]
            {
                new AzureNative.Network.Inputs.ApplicationRuleConditionArgs
                {
                    RuleConditionType = "ApplicationRuleCondition",
                    Description = "string",
                    DestinationAddresses = new[]
                    {
                        "string",
                    },
                    FqdnTags = new[]
                    {
                        "string",
                    },
                    Name = "string",
                    Protocols = new[]
                    {
                        new AzureNative.Network.Inputs.FirewallPolicyRuleConditionApplicationProtocolArgs
                        {
                            Port = 0,
                            ProtocolType = "string",
                        },
                    },
                    SourceAddresses = new[]
                    {
                        "string",
                    },
                    SourceIpGroups = new[]
                    {
                        "string",
                    },
                    TargetFqdns = new[]
                    {
                        "string",
                    },
                },
            },
        },
    },
});

    example, err := network.NewFirewallPolicyRuleGroup(ctx, "firewallPolicyRuleGroupResource", &network.FirewallPolicyRuleGroupArgs{
	FirewallPolicyName: pulumi.String("string"),
	ResourceGroupName:  pulumi.String("string"),
	Id:                 pulumi.String("string"),
	Name:               pulumi.String("string"),
	Priority:           pulumi.Int(0),
	RuleGroupName:      pulumi.String("string"),
	Rules: pulumi.Array{
		network.FirewallPolicyFilterRule{
			RuleType: "FirewallPolicyFilterRule",
			Action: network.FirewallPolicyFilterRuleAction{
				Type: "string",
			},
			Name:     "string",
			Priority: 0,
			RuleConditions: []interface{}{
				network.ApplicationRuleCondition{
					RuleConditionType: "ApplicationRuleCondition",
					Description:       "string",
					DestinationAddresses: []string{
						"string",
					},
					FqdnTags: []string{
						"string",
					},
					Name: "string",
					Protocols: []network.FirewallPolicyRuleConditionApplicationProtocol{
						{
							Port:         0,
							ProtocolType: "string",
						},
					},
					SourceAddresses: []string{
						"string",
					},
					SourceIpGroups: []string{
						"string",
					},
					TargetFqdns: []string{
						"string",
					},
				},
			},
		},
	},
})

    var firewallPolicyRuleGroupResource = new FirewallPolicyRuleGroup("firewallPolicyRuleGroupResource", FirewallPolicyRuleGroupArgs.builder()
    .firewallPolicyName("string")
    .resourceGroupName("string")
    .id("string")
    .name("string")
    .priority(0)
    .ruleGroupName("string")
    .rules(FirewallPolicyFilterRuleArgs.builder()
        .ruleType("FirewallPolicyFilterRule")
        .action(FirewallPolicyFilterRuleActionArgs.builder()
            .type("string")
            .build())
        .name("string")
        .priority(0)
        .ruleConditions(%!v(PANIC=Format method: interface conversion: model.Expression is *model.FunctionCallExpression, not *model.ObjectConsExpression))
        .build())
    .build());

    firewall_policy_rule_group_resource = azure_native.network.FirewallPolicyRuleGroup("firewallPolicyRuleGroupResource",
    firewall_policy_name="string",
    resource_group_name="string",
    id="string",
    name="string",
    priority=0,
    rule_group_name="string",
    rules=[{
        "rule_type": "FirewallPolicyFilterRule",
        "action": {
            "type": "string",
        },
        "name": "string",
        "priority": 0,
        "rule_conditions": [{
            "rule_condition_type": "ApplicationRuleCondition",
            "description": "string",
            "destination_addresses": ["string"],
            "fqdn_tags": ["string"],
            "name": "string",
            "protocols": [{
                "port": 0,
                "protocol_type": "string",
            }],
            "source_addresses": ["string"],
            "source_ip_groups": ["string"],
            "target_fqdns": ["string"],
        }],
    }])

    const firewallPolicyRuleGroupResource = new azure_native.network.FirewallPolicyRuleGroup("firewallPolicyRuleGroupResource", {
    firewallPolicyName: "string",
    resourceGroupName: "string",
    id: "string",
    name: "string",
    priority: 0,
    ruleGroupName: "string",
    rules: [{
        ruleType: "FirewallPolicyFilterRule",
        action: {
            type: "string",
        },
        name: "string",
        priority: 0,
        ruleConditions: [{
            ruleConditionType: "ApplicationRuleCondition",
            description: "string",
            destinationAddresses: ["string"],
            fqdnTags: ["string"],
            name: "string",
            protocols: [{
                port: 0,
                protocolType: "string",
            }],
            sourceAddresses: ["string"],
            sourceIpGroups: ["string"],
            targetFqdns: ["string"],
        }],
    }],
});

    type: azure-native:network:FirewallPolicyRuleGroup
properties:
    firewallPolicyName: string
    id: string
    name: string
    priority: 0
    resourceGroupName: string
    ruleGroupName: string
    rules:
        - action:
            type: string
          name: string
          priority: 0
          ruleConditions:
            - description: string
              destinationAddresses:
                - string
              fqdnTags:
                - string
              name: string
              protocols:
                - port: 0
                  protocolType: string
              ruleConditionType: ApplicationRuleCondition
              sourceAddresses:
                - string
              sourceIpGroups:
                - string
              targetFqdns:
                - string
          ruleType: FirewallPolicyFilterRule

    FirewallPolicyRuleGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The FirewallPolicyRuleGroup resource accepts the following input properties:

    FirewallPolicyName string
    The name of the Firewall Policy.
    ResourceGroupName string
    The name of the resource group.
    Id string
    Resource ID.
    Name string
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    Priority int
    Priority of the Firewall Policy Rule Group resource.
    RuleGroupName string
    The name of the FirewallPolicyRuleGroup.
    Rules List<Union<Pulumi.AzureNative.Network.Inputs.FirewallPolicyFilterRule, Pulumi.AzureNative.Network.Inputs.FirewallPolicyNatRuleArgs>>
    Group of Firewall Policy rules.
    FirewallPolicyName string
    The name of the Firewall Policy.
    ResourceGroupName string
    The name of the resource group.
    Id string
    Resource ID.
    Name string
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    Priority int
    Priority of the Firewall Policy Rule Group resource.
    RuleGroupName string
    The name of the FirewallPolicyRuleGroup.
    Rules []interface{}
    Group of Firewall Policy rules.
    firewallPolicyName String
    The name of the Firewall Policy.
    resourceGroupName String
    The name of the resource group.
    id String
    Resource ID.
    name String
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    priority Integer
    Priority of the Firewall Policy Rule Group resource.
    ruleGroupName String
    The name of the FirewallPolicyRuleGroup.
    rules List<Either<FirewallPolicyFilterRule,FirewallPolicyNatRuleArgs>>
    Group of Firewall Policy rules.
    firewallPolicyName string
    The name of the Firewall Policy.
    resourceGroupName string
    The name of the resource group.
    id string
    Resource ID.
    name string
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    priority number
    Priority of the Firewall Policy Rule Group resource.
    ruleGroupName string
    The name of the FirewallPolicyRuleGroup.
    rules (FirewallPolicyFilterRule | FirewallPolicyNatRuleArgs)[]
    Group of Firewall Policy rules.
    firewall_policy_name str
    The name of the Firewall Policy.
    resource_group_name str
    The name of the resource group.
    id str
    Resource ID.
    name str
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    priority int
    Priority of the Firewall Policy Rule Group resource.
    rule_group_name str
    The name of the FirewallPolicyRuleGroup.
    rules Sequence[Union[FirewallPolicyFilterRuleArgs, FirewallPolicyNatRuleArgs]]
    Group of Firewall Policy rules.
    firewallPolicyName String
    The name of the Firewall Policy.
    resourceGroupName String
    The name of the resource group.
    id String
    Resource ID.
    name String
    The name of the resource that is unique within a resource group. This name can be used to access the resource.
    priority Number
    Priority of the Firewall Policy Rule Group resource.
    ruleGroupName String
    The name of the FirewallPolicyRuleGroup.
    rules List<Property Map | Property Map>
    Group of Firewall Policy rules.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the FirewallPolicyRuleGroup resource produces the following output properties:

    AzureApiVersion string
    The Azure API version of the resource.
    Etag string
    A unique read-only string that changes whenever the resource is updated.
    Id string
    The provider-assigned unique ID for this managed resource.
    ProvisioningState string
    The provisioning state of the firewall policy rule group resource.
    Type string
    Rule Group type.
    AzureApiVersion string
    The Azure API version of the resource.
    Etag string
    A unique read-only string that changes whenever the resource is updated.
    Id string
    The provider-assigned unique ID for this managed resource.
    ProvisioningState string
    The provisioning state of the firewall policy rule group resource.
    Type string
    Rule Group type.
    azureApiVersion String
    The Azure API version of the resource.
    etag String
    A unique read-only string that changes whenever the resource is updated.
    id String
    The provider-assigned unique ID for this managed resource.
    provisioningState String
    The provisioning state of the firewall policy rule group resource.
    type String
    Rule Group type.
    azureApiVersion string
    The Azure API version of the resource.
    etag string
    A unique read-only string that changes whenever the resource is updated.
    id string
    The provider-assigned unique ID for this managed resource.
    provisioningState string
    The provisioning state of the firewall policy rule group resource.
    type string
    Rule Group type.
    azure_api_version str
    The Azure API version of the resource.
    etag str
    A unique read-only string that changes whenever the resource is updated.
    id str
    The provider-assigned unique ID for this managed resource.
    provisioning_state str
    The provisioning state of the firewall policy rule group resource.
    type str
    Rule Group type.
    azureApiVersion String
    The Azure API version of the resource.
    etag String
    A unique read-only string that changes whenever the resource is updated.
    id String
    The provider-assigned unique ID for this managed resource.
    provisioningState String
    The provisioning state of the firewall policy rule group resource.
    type String
    Rule Group type.

    Supporting Types

    ApplicationRuleCondition, ApplicationRuleConditionArgs

    Description string
    Description of the rule condition.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    FqdnTags List<string>
    List of FQDN Tags for this rule condition.
    Name string
    Name of the rule condition.
    Protocols List<Pulumi.AzureNative.Network.Inputs.FirewallPolicyRuleConditionApplicationProtocol>
    Array of Application Protocols.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    TargetFqdns List<string>
    List of FQDNs for this rule condition.
    Description string
    Description of the rule condition.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    FqdnTags []string
    List of FQDN Tags for this rule condition.
    Name string
    Name of the rule condition.
    Protocols []FirewallPolicyRuleConditionApplicationProtocol
    Array of Application Protocols.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    TargetFqdns []string
    List of FQDNs for this rule condition.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    fqdnTags List<String>
    List of FQDN Tags for this rule condition.
    name String
    Name of the rule condition.
    protocols List<FirewallPolicyRuleConditionApplicationProtocol>
    Array of Application Protocols.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    targetFqdns List<String>
    List of FQDNs for this rule condition.
    description string
    Description of the rule condition.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    fqdnTags string[]
    List of FQDN Tags for this rule condition.
    name string
    Name of the rule condition.
    protocols FirewallPolicyRuleConditionApplicationProtocol[]
    Array of Application Protocols.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    targetFqdns string[]
    List of FQDNs for this rule condition.
    description str
    Description of the rule condition.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    fqdn_tags Sequence[str]
    List of FQDN Tags for this rule condition.
    name str
    Name of the rule condition.
    protocols Sequence[FirewallPolicyRuleConditionApplicationProtocol]
    Array of Application Protocols.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    target_fqdns Sequence[str]
    List of FQDNs for this rule condition.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    fqdnTags List<String>
    List of FQDN Tags for this rule condition.
    name String
    Name of the rule condition.
    protocols List<Property Map>
    Array of Application Protocols.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    targetFqdns List<String>
    List of FQDNs for this rule condition.

    ApplicationRuleConditionResponse, ApplicationRuleConditionResponseArgs

    Description string
    Description of the rule condition.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    FqdnTags List<string>
    List of FQDN Tags for this rule condition.
    Name string
    Name of the rule condition.
    Protocols List<Pulumi.AzureNative.Network.Inputs.FirewallPolicyRuleConditionApplicationProtocolResponse>
    Array of Application Protocols.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    TargetFqdns List<string>
    List of FQDNs for this rule condition.
    Description string
    Description of the rule condition.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    FqdnTags []string
    List of FQDN Tags for this rule condition.
    Name string
    Name of the rule condition.
    Protocols []FirewallPolicyRuleConditionApplicationProtocolResponse
    Array of Application Protocols.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    TargetFqdns []string
    List of FQDNs for this rule condition.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    fqdnTags List<String>
    List of FQDN Tags for this rule condition.
    name String
    Name of the rule condition.
    protocols List<FirewallPolicyRuleConditionApplicationProtocolResponse>
    Array of Application Protocols.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    targetFqdns List<String>
    List of FQDNs for this rule condition.
    description string
    Description of the rule condition.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    fqdnTags string[]
    List of FQDN Tags for this rule condition.
    name string
    Name of the rule condition.
    protocols FirewallPolicyRuleConditionApplicationProtocolResponse[]
    Array of Application Protocols.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    targetFqdns string[]
    List of FQDNs for this rule condition.
    description str
    Description of the rule condition.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    fqdn_tags Sequence[str]
    List of FQDN Tags for this rule condition.
    name str
    Name of the rule condition.
    protocols Sequence[FirewallPolicyRuleConditionApplicationProtocolResponse]
    Array of Application Protocols.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    target_fqdns Sequence[str]
    List of FQDNs for this rule condition.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    fqdnTags List<String>
    List of FQDN Tags for this rule condition.
    name String
    Name of the rule condition.
    protocols List<Property Map>
    Array of Application Protocols.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    targetFqdns List<String>
    List of FQDNs for this rule condition.

    FirewallPolicyFilterRule, FirewallPolicyFilterRuleArgs

    Action Pulumi.AzureNative.Network.Inputs.FirewallPolicyFilterRuleAction
    The action type of a Filter rule.
    Name string
    The name of the rule.
    Priority int
    Priority of the Firewall Policy Rule resource.
    RuleConditions List<object>
    Collection of rule conditions used by a rule.
    Action FirewallPolicyFilterRuleAction
    The action type of a Filter rule.
    Name string
    The name of the rule.
    Priority int
    Priority of the Firewall Policy Rule resource.
    RuleConditions []interface{}
    Collection of rule conditions used by a rule.
    action FirewallPolicyFilterRuleAction
    The action type of a Filter rule.
    name String
    The name of the rule.
    priority Integer
    Priority of the Firewall Policy Rule resource.
    ruleConditions List<Object>
    Collection of rule conditions used by a rule.
    action FirewallPolicyFilterRuleAction
    The action type of a Filter rule.
    name string
    The name of the rule.
    priority number
    Priority of the Firewall Policy Rule resource.
    ruleConditions (ApplicationRuleCondition | NatRuleCondition | NetworkRuleCondition)[]
    Collection of rule conditions used by a rule.
    action FirewallPolicyFilterRuleAction
    The action type of a Filter rule.
    name str
    The name of the rule.
    priority int
    Priority of the Firewall Policy Rule resource.
    rule_conditions Sequence[Union[ApplicationRuleCondition, NatRuleCondition, NetworkRuleCondition]]
    Collection of rule conditions used by a rule.
    action Property Map
    The action type of a Filter rule.
    name String
    The name of the rule.
    priority Number
    Priority of the Firewall Policy Rule resource.
    ruleConditions List<Property Map | Property Map | Property Map>
    Collection of rule conditions used by a rule.

    FirewallPolicyFilterRuleAction, FirewallPolicyFilterRuleActionArgs

    Type string | FirewallPolicyFilterRuleActionType
    The type of action.
    type String | FirewallPolicyFilterRuleActionType
    The type of action.
    type string | FirewallPolicyFilterRuleActionType
    The type of action.
    type str | FirewallPolicyFilterRuleActionType
    The type of action.
    type String | "Allow" | "Deny"
    The type of action.

    FirewallPolicyFilterRuleActionResponse, FirewallPolicyFilterRuleActionResponseArgs

    Type string
    The type of action.
    Type string
    The type of action.
    type String
    The type of action.
    type string
    The type of action.
    type str
    The type of action.
    type String
    The type of action.

    FirewallPolicyFilterRuleActionType, FirewallPolicyFilterRuleActionTypeArgs

    Allow
    Allow
    Deny
    Deny
    FirewallPolicyFilterRuleActionTypeAllow
    Allow
    FirewallPolicyFilterRuleActionTypeDeny
    Deny
    Allow
    Allow
    Deny
    Deny
    Allow
    Allow
    Deny
    Deny
    ALLOW
    Allow
    DENY
    Deny
    "Allow"
    Allow
    "Deny"
    Deny

    FirewallPolicyFilterRuleResponse, FirewallPolicyFilterRuleResponseArgs

    Action Pulumi.AzureNative.Network.Inputs.FirewallPolicyFilterRuleActionResponse
    The action type of a Filter rule.
    Name string
    The name of the rule.
    Priority int
    Priority of the Firewall Policy Rule resource.
    RuleConditions List<object>
    Collection of rule conditions used by a rule.
    Action FirewallPolicyFilterRuleActionResponse
    The action type of a Filter rule.
    Name string
    The name of the rule.
    Priority int
    Priority of the Firewall Policy Rule resource.
    RuleConditions []interface{}
    Collection of rule conditions used by a rule.
    action FirewallPolicyFilterRuleActionResponse
    The action type of a Filter rule.
    name String
    The name of the rule.
    priority Integer
    Priority of the Firewall Policy Rule resource.
    ruleConditions List<Object>
    Collection of rule conditions used by a rule.
    action FirewallPolicyFilterRuleActionResponse
    The action type of a Filter rule.
    name string
    The name of the rule.
    priority number
    Priority of the Firewall Policy Rule resource.
    ruleConditions (ApplicationRuleConditionResponse | NatRuleConditionResponse | NetworkRuleConditionResponse)[]
    Collection of rule conditions used by a rule.
    action FirewallPolicyFilterRuleActionResponse
    The action type of a Filter rule.
    name str
    The name of the rule.
    priority int
    Priority of the Firewall Policy Rule resource.
    rule_conditions Sequence[Union[ApplicationRuleConditionResponse, NatRuleConditionResponse, NetworkRuleConditionResponse]]
    Collection of rule conditions used by a rule.
    action Property Map
    The action type of a Filter rule.
    name String
    The name of the rule.
    priority Number
    Priority of the Firewall Policy Rule resource.
    ruleConditions List<Property Map | Property Map | Property Map>
    Collection of rule conditions used by a rule.

    FirewallPolicyNatRule, FirewallPolicyNatRuleArgs

    Action Pulumi.AzureNative.Network.Inputs.FirewallPolicyNatRuleAction
    The action type of a Nat rule.
    Name string
    The name of the rule.
    Priority int
    Priority of the Firewall Policy Rule resource.
    RuleCondition Pulumi.AzureNative.Network.Inputs.ApplicationRuleCondition | Pulumi.AzureNative.Network.Inputs.NatRuleCondition | Pulumi.AzureNative.Network.Inputs.NetworkRuleCondition
    The match conditions for incoming traffic.
    TranslatedAddress string
    The translated address for this NAT rule.
    TranslatedPort string
    The translated port for this NAT rule.
    Action FirewallPolicyNatRuleAction
    The action type of a Nat rule.
    Name string
    The name of the rule.
    Priority int
    Priority of the Firewall Policy Rule resource.
    RuleCondition ApplicationRuleCondition | NatRuleCondition | NetworkRuleCondition
    The match conditions for incoming traffic.
    TranslatedAddress string
    The translated address for this NAT rule.
    TranslatedPort string
    The translated port for this NAT rule.
    action FirewallPolicyNatRuleAction
    The action type of a Nat rule.
    name String
    The name of the rule.
    priority Integer
    Priority of the Firewall Policy Rule resource.
    ruleCondition ApplicationRuleCondition | NatRuleCondition | NetworkRuleCondition
    The match conditions for incoming traffic.
    translatedAddress String
    The translated address for this NAT rule.
    translatedPort String
    The translated port for this NAT rule.
    action FirewallPolicyNatRuleAction
    The action type of a Nat rule.
    name string
    The name of the rule.
    priority number
    Priority of the Firewall Policy Rule resource.
    ruleCondition ApplicationRuleCondition | NatRuleCondition | NetworkRuleCondition
    The match conditions for incoming traffic.
    translatedAddress string
    The translated address for this NAT rule.
    translatedPort string
    The translated port for this NAT rule.
    action FirewallPolicyNatRuleAction
    The action type of a Nat rule.
    name str
    The name of the rule.
    priority int
    Priority of the Firewall Policy Rule resource.
    rule_condition ApplicationRuleCondition | NatRuleCondition | NetworkRuleCondition
    The match conditions for incoming traffic.
    translated_address str
    The translated address for this NAT rule.
    translated_port str
    The translated port for this NAT rule.
    action Property Map
    The action type of a Nat rule.
    name String
    The name of the rule.
    priority Number
    Priority of the Firewall Policy Rule resource.
    ruleCondition Property Map | Property Map | Property Map
    The match conditions for incoming traffic.
    translatedAddress String
    The translated address for this NAT rule.
    translatedPort String
    The translated port for this NAT rule.

    FirewallPolicyNatRuleAction, FirewallPolicyNatRuleActionArgs

    Type string | FirewallPolicyNatRuleActionType
    The type of action.
    type String | FirewallPolicyNatRuleActionType
    The type of action.
    type string | FirewallPolicyNatRuleActionType
    The type of action.
    type str | FirewallPolicyNatRuleActionType
    The type of action.
    type String | "DNAT"
    The type of action.

    FirewallPolicyNatRuleActionResponse, FirewallPolicyNatRuleActionResponseArgs

    Type string
    The type of action.
    Type string
    The type of action.
    type String
    The type of action.
    type string
    The type of action.
    type str
    The type of action.
    type String
    The type of action.

    FirewallPolicyNatRuleActionType, FirewallPolicyNatRuleActionTypeArgs

    DNAT
    DNAT
    FirewallPolicyNatRuleActionTypeDNAT
    DNAT
    DNAT
    DNAT
    DNAT
    DNAT
    DNAT
    DNAT
    "DNAT"
    DNAT

    FirewallPolicyNatRuleResponse, FirewallPolicyNatRuleResponseArgs

    Action Pulumi.AzureNative.Network.Inputs.FirewallPolicyNatRuleActionResponse
    The action type of a Nat rule.
    Name string
    The name of the rule.
    Priority int
    Priority of the Firewall Policy Rule resource.
    RuleCondition Pulumi.AzureNative.Network.Inputs.ApplicationRuleConditionResponse | Pulumi.AzureNative.Network.Inputs.NatRuleConditionResponse | Pulumi.AzureNative.Network.Inputs.NetworkRuleConditionResponse
    The match conditions for incoming traffic.
    TranslatedAddress string
    The translated address for this NAT rule.
    TranslatedPort string
    The translated port for this NAT rule.
    Action FirewallPolicyNatRuleActionResponse
    The action type of a Nat rule.
    Name string
    The name of the rule.
    Priority int
    Priority of the Firewall Policy Rule resource.
    RuleCondition ApplicationRuleConditionResponse | NatRuleConditionResponse | NetworkRuleConditionResponse
    The match conditions for incoming traffic.
    TranslatedAddress string
    The translated address for this NAT rule.
    TranslatedPort string
    The translated port for this NAT rule.
    action FirewallPolicyNatRuleActionResponse
    The action type of a Nat rule.
    name String
    The name of the rule.
    priority Integer
    Priority of the Firewall Policy Rule resource.
    ruleCondition ApplicationRuleConditionResponse | NatRuleConditionResponse | NetworkRuleConditionResponse
    The match conditions for incoming traffic.
    translatedAddress String
    The translated address for this NAT rule.
    translatedPort String
    The translated port for this NAT rule.
    action FirewallPolicyNatRuleActionResponse
    The action type of a Nat rule.
    name string
    The name of the rule.
    priority number
    Priority of the Firewall Policy Rule resource.
    ruleCondition ApplicationRuleConditionResponse | NatRuleConditionResponse | NetworkRuleConditionResponse
    The match conditions for incoming traffic.
    translatedAddress string
    The translated address for this NAT rule.
    translatedPort string
    The translated port for this NAT rule.
    action FirewallPolicyNatRuleActionResponse
    The action type of a Nat rule.
    name str
    The name of the rule.
    priority int
    Priority of the Firewall Policy Rule resource.
    rule_condition ApplicationRuleConditionResponse | NatRuleConditionResponse | NetworkRuleConditionResponse
    The match conditions for incoming traffic.
    translated_address str
    The translated address for this NAT rule.
    translated_port str
    The translated port for this NAT rule.
    action Property Map
    The action type of a Nat rule.
    name String
    The name of the rule.
    priority Number
    Priority of the Firewall Policy Rule resource.
    ruleCondition Property Map | Property Map | Property Map
    The match conditions for incoming traffic.
    translatedAddress String
    The translated address for this NAT rule.
    translatedPort String
    The translated port for this NAT rule.

    FirewallPolicyRuleConditionApplicationProtocol, FirewallPolicyRuleConditionApplicationProtocolArgs

    Port int
    Port number for the protocol, cannot be greater than 64000.
    ProtocolType string | Pulumi.AzureNative.Network.FirewallPolicyRuleConditionApplicationProtocolType
    Protocol type.
    Port int
    Port number for the protocol, cannot be greater than 64000.
    ProtocolType string | FirewallPolicyRuleConditionApplicationProtocolType
    Protocol type.
    port Integer
    Port number for the protocol, cannot be greater than 64000.
    protocolType String | FirewallPolicyRuleConditionApplicationProtocolType
    Protocol type.
    port number
    Port number for the protocol, cannot be greater than 64000.
    protocolType string | FirewallPolicyRuleConditionApplicationProtocolType
    Protocol type.
    port int
    Port number for the protocol, cannot be greater than 64000.
    protocol_type str | FirewallPolicyRuleConditionApplicationProtocolType
    Protocol type.
    port Number
    Port number for the protocol, cannot be greater than 64000.
    protocolType String | "Http" | "Https"
    Protocol type.

    FirewallPolicyRuleConditionApplicationProtocolResponse, FirewallPolicyRuleConditionApplicationProtocolResponseArgs

    Port int
    Port number for the protocol, cannot be greater than 64000.
    ProtocolType string
    Protocol type.
    Port int
    Port number for the protocol, cannot be greater than 64000.
    ProtocolType string
    Protocol type.
    port Integer
    Port number for the protocol, cannot be greater than 64000.
    protocolType String
    Protocol type.
    port number
    Port number for the protocol, cannot be greater than 64000.
    protocolType string
    Protocol type.
    port int
    Port number for the protocol, cannot be greater than 64000.
    protocol_type str
    Protocol type.
    port Number
    Port number for the protocol, cannot be greater than 64000.
    protocolType String
    Protocol type.

    FirewallPolicyRuleConditionApplicationProtocolType, FirewallPolicyRuleConditionApplicationProtocolTypeArgs

    Http
    Http
    Https
    Https
    FirewallPolicyRuleConditionApplicationProtocolTypeHttp
    Http
    FirewallPolicyRuleConditionApplicationProtocolTypeHttps
    Https
    Http
    Http
    Https
    Https
    Http
    Http
    Https
    Https
    HTTP
    Http
    HTTPS
    Https
    "Http"
    Http
    "Https"
    Https

    FirewallPolicyRuleConditionNetworkProtocol, FirewallPolicyRuleConditionNetworkProtocolArgs

    TCP
    TCP
    UDP
    UDP
    Any
    Any
    ICMP
    ICMP
    FirewallPolicyRuleConditionNetworkProtocolTCP
    TCP
    FirewallPolicyRuleConditionNetworkProtocolUDP
    UDP
    FirewallPolicyRuleConditionNetworkProtocolAny
    Any
    FirewallPolicyRuleConditionNetworkProtocolICMP
    ICMP
    TCP
    TCP
    UDP
    UDP
    Any
    Any
    ICMP
    ICMP
    TCP
    TCP
    UDP
    UDP
    Any
    Any
    ICMP
    ICMP
    TCP
    TCP
    UDP
    UDP
    ANY
    Any
    ICMP
    ICMP
    "TCP"
    TCP
    "UDP"
    UDP
    "Any"
    Any
    "ICMP"
    ICMP

    NatRuleCondition, NatRuleConditionArgs

    Description string
    Description of the rule condition.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    DestinationPorts List<string>
    List of destination ports.
    IpProtocols List<Union<string, Pulumi.AzureNative.Network.FirewallPolicyRuleConditionNetworkProtocol>>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    Name string
    Name of the rule condition.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    Description string
    Description of the rule condition.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    DestinationPorts []string
    List of destination ports.
    IpProtocols []string
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    Name string
    Name of the rule condition.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<Either<String,FirewallPolicyRuleConditionNetworkProtocol>>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name String
    Name of the rule condition.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    description string
    Description of the rule condition.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    destinationPorts string[]
    List of destination ports.
    ipProtocols (string | FirewallPolicyRuleConditionNetworkProtocol)[]
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name string
    Name of the rule condition.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    description str
    Description of the rule condition.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    destination_ports Sequence[str]
    List of destination ports.
    ip_protocols Sequence[Union[str, FirewallPolicyRuleConditionNetworkProtocol]]
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name str
    Name of the rule condition.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String | "TCP" | "UDP" | "Any" | "ICMP">
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name String
    Name of the rule condition.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.

    NatRuleConditionResponse, NatRuleConditionResponseArgs

    Description string
    Description of the rule condition.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    DestinationPorts List<string>
    List of destination ports.
    IpProtocols List<string>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    Name string
    Name of the rule condition.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    Description string
    Description of the rule condition.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    DestinationPorts []string
    List of destination ports.
    IpProtocols []string
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    Name string
    Name of the rule condition.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name String
    Name of the rule condition.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    description string
    Description of the rule condition.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    destinationPorts string[]
    List of destination ports.
    ipProtocols string[]
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name string
    Name of the rule condition.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    description str
    Description of the rule condition.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    destination_ports Sequence[str]
    List of destination ports.
    ip_protocols Sequence[str]
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name str
    Name of the rule condition.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name String
    Name of the rule condition.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.

    NetworkRuleCondition, NetworkRuleConditionArgs

    Description string
    Description of the rule condition.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    DestinationIpGroups List<string>
    List of destination IpGroups for this rule.
    DestinationPorts List<string>
    List of destination ports.
    IpProtocols List<Union<string, Pulumi.AzureNative.Network.FirewallPolicyRuleConditionNetworkProtocol>>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    Name string
    Name of the rule condition.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    Description string
    Description of the rule condition.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    DestinationIpGroups []string
    List of destination IpGroups for this rule.
    DestinationPorts []string
    List of destination ports.
    IpProtocols []string
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    Name string
    Name of the rule condition.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationIpGroups List<String>
    List of destination IpGroups for this rule.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<Either<String,FirewallPolicyRuleConditionNetworkProtocol>>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name String
    Name of the rule condition.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    description string
    Description of the rule condition.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    destinationIpGroups string[]
    List of destination IpGroups for this rule.
    destinationPorts string[]
    List of destination ports.
    ipProtocols (string | FirewallPolicyRuleConditionNetworkProtocol)[]
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name string
    Name of the rule condition.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    description str
    Description of the rule condition.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    destination_ip_groups Sequence[str]
    List of destination IpGroups for this rule.
    destination_ports Sequence[str]
    List of destination ports.
    ip_protocols Sequence[Union[str, FirewallPolicyRuleConditionNetworkProtocol]]
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name str
    Name of the rule condition.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationIpGroups List<String>
    List of destination IpGroups for this rule.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String | "TCP" | "UDP" | "Any" | "ICMP">
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name String
    Name of the rule condition.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.

    NetworkRuleConditionResponse, NetworkRuleConditionResponseArgs

    Description string
    Description of the rule condition.
    DestinationAddresses List<string>
    List of destination IP addresses or Service Tags.
    DestinationIpGroups List<string>
    List of destination IpGroups for this rule.
    DestinationPorts List<string>
    List of destination ports.
    IpProtocols List<string>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    Name string
    Name of the rule condition.
    SourceAddresses List<string>
    List of source IP addresses for this rule.
    SourceIpGroups List<string>
    List of source IpGroups for this rule.
    Description string
    Description of the rule condition.
    DestinationAddresses []string
    List of destination IP addresses or Service Tags.
    DestinationIpGroups []string
    List of destination IpGroups for this rule.
    DestinationPorts []string
    List of destination ports.
    IpProtocols []string
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    Name string
    Name of the rule condition.
    SourceAddresses []string
    List of source IP addresses for this rule.
    SourceIpGroups []string
    List of source IpGroups for this rule.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationIpGroups List<String>
    List of destination IpGroups for this rule.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name String
    Name of the rule condition.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.
    description string
    Description of the rule condition.
    destinationAddresses string[]
    List of destination IP addresses or Service Tags.
    destinationIpGroups string[]
    List of destination IpGroups for this rule.
    destinationPorts string[]
    List of destination ports.
    ipProtocols string[]
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name string
    Name of the rule condition.
    sourceAddresses string[]
    List of source IP addresses for this rule.
    sourceIpGroups string[]
    List of source IpGroups for this rule.
    description str
    Description of the rule condition.
    destination_addresses Sequence[str]
    List of destination IP addresses or Service Tags.
    destination_ip_groups Sequence[str]
    List of destination IpGroups for this rule.
    destination_ports Sequence[str]
    List of destination ports.
    ip_protocols Sequence[str]
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name str
    Name of the rule condition.
    source_addresses Sequence[str]
    List of source IP addresses for this rule.
    source_ip_groups Sequence[str]
    List of source IpGroups for this rule.
    description String
    Description of the rule condition.
    destinationAddresses List<String>
    List of destination IP addresses or Service Tags.
    destinationIpGroups List<String>
    List of destination IpGroups for this rule.
    destinationPorts List<String>
    List of destination ports.
    ipProtocols List<String>
    Array of FirewallPolicyRuleConditionNetworkProtocols.
    name String
    Name of the rule condition.
    sourceAddresses List<String>
    List of source IP addresses for this rule.
    sourceIpGroups List<String>
    List of source IpGroups for this rule.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:network:FirewallPolicyRuleGroup ruleGroup1 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/firewallPolicies/{firewallPolicyName}/ruleGroups/{ruleGroupName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
    Azure Native v3.5.0 published on Monday, May 19, 2025 by Pulumi
    pulumi/pulumi-azure-native