We recommend using Azure Native.
azure.network.FirewallApplicationRuleCollection
Explore with Pulumi AI
Manages an Application Rule Collection within an Azure Firewall.
Example Usage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new()
{
Location = "West Europe",
});
var exampleVirtualNetwork = new Azure.Network.VirtualNetwork("exampleVirtualNetwork", new()
{
AddressSpaces = new[]
{
"10.0.0.0/16",
},
Location = exampleResourceGroup.Location,
ResourceGroupName = exampleResourceGroup.Name,
});
var exampleSubnet = new Azure.Network.Subnet("exampleSubnet", new()
{
ResourceGroupName = exampleResourceGroup.Name,
VirtualNetworkName = exampleVirtualNetwork.Name,
AddressPrefixes = new[]
{
"10.0.1.0/24",
},
});
var examplePublicIp = new Azure.Network.PublicIp("examplePublicIp", new()
{
Location = exampleResourceGroup.Location,
ResourceGroupName = exampleResourceGroup.Name,
AllocationMethod = "Static",
Sku = "Standard",
});
var exampleFirewall = new Azure.Network.Firewall("exampleFirewall", new()
{
Location = exampleResourceGroup.Location,
ResourceGroupName = exampleResourceGroup.Name,
SkuName = "AZFW_VNet",
SkuTier = "Standard",
IpConfigurations = new[]
{
new Azure.Network.Inputs.FirewallIpConfigurationArgs
{
Name = "configuration",
SubnetId = exampleSubnet.Id,
PublicIpAddressId = examplePublicIp.Id,
},
},
});
var exampleFirewallApplicationRuleCollection = new Azure.Network.FirewallApplicationRuleCollection("exampleFirewallApplicationRuleCollection", new()
{
AzureFirewallName = exampleFirewall.Name,
ResourceGroupName = exampleResourceGroup.Name,
Priority = 100,
Action = "Allow",
Rules = new[]
{
new Azure.Network.Inputs.FirewallApplicationRuleCollectionRuleArgs
{
Name = "testrule",
SourceAddresses = new[]
{
"10.0.0.0/16",
},
TargetFqdns = new[]
{
"*.google.com",
},
Protocols = new[]
{
new Azure.Network.Inputs.FirewallApplicationRuleCollectionRuleProtocolArgs
{
Port = 443,
Type = "Https",
},
},
},
},
});
});
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/network"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleVirtualNetwork, err := network.NewVirtualNetwork(ctx, "exampleVirtualNetwork", &network.VirtualNetworkArgs{
AddressSpaces: pulumi.StringArray{
pulumi.String("10.0.0.0/16"),
},
Location: exampleResourceGroup.Location,
ResourceGroupName: exampleResourceGroup.Name,
})
if err != nil {
return err
}
exampleSubnet, err := network.NewSubnet(ctx, "exampleSubnet", &network.SubnetArgs{
ResourceGroupName: exampleResourceGroup.Name,
VirtualNetworkName: exampleVirtualNetwork.Name,
AddressPrefixes: pulumi.StringArray{
pulumi.String("10.0.1.0/24"),
},
})
if err != nil {
return err
}
examplePublicIp, err := network.NewPublicIp(ctx, "examplePublicIp", &network.PublicIpArgs{
Location: exampleResourceGroup.Location,
ResourceGroupName: exampleResourceGroup.Name,
AllocationMethod: pulumi.String("Static"),
Sku: pulumi.String("Standard"),
})
if err != nil {
return err
}
exampleFirewall, err := network.NewFirewall(ctx, "exampleFirewall", &network.FirewallArgs{
Location: exampleResourceGroup.Location,
ResourceGroupName: exampleResourceGroup.Name,
SkuName: pulumi.String("AZFW_VNet"),
SkuTier: pulumi.String("Standard"),
IpConfigurations: network.FirewallIpConfigurationArray{
&network.FirewallIpConfigurationArgs{
Name: pulumi.String("configuration"),
SubnetId: exampleSubnet.ID(),
PublicIpAddressId: examplePublicIp.ID(),
},
},
})
if err != nil {
return err
}
_, err = network.NewFirewallApplicationRuleCollection(ctx, "exampleFirewallApplicationRuleCollection", &network.FirewallApplicationRuleCollectionArgs{
AzureFirewallName: exampleFirewall.Name,
ResourceGroupName: exampleResourceGroup.Name,
Priority: pulumi.Int(100),
Action: pulumi.String("Allow"),
Rules: network.FirewallApplicationRuleCollectionRuleArray{
&network.FirewallApplicationRuleCollectionRuleArgs{
Name: pulumi.String("testrule"),
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.0/16"),
},
TargetFqdns: pulumi.StringArray{
pulumi.String("*.google.com"),
},
Protocols: network.FirewallApplicationRuleCollectionRuleProtocolArray{
&network.FirewallApplicationRuleCollectionRuleProtocolArgs{
Port: pulumi.Int(443),
Type: pulumi.String("Https"),
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.VirtualNetwork;
import com.pulumi.azure.network.VirtualNetworkArgs;
import com.pulumi.azure.network.Subnet;
import com.pulumi.azure.network.SubnetArgs;
import com.pulumi.azure.network.PublicIp;
import com.pulumi.azure.network.PublicIpArgs;
import com.pulumi.azure.network.Firewall;
import com.pulumi.azure.network.FirewallArgs;
import com.pulumi.azure.network.inputs.FirewallIpConfigurationArgs;
import com.pulumi.azure.network.FirewallApplicationRuleCollection;
import com.pulumi.azure.network.FirewallApplicationRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallApplicationRuleCollectionRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()
.location("West Europe")
.build());
var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()
.addressSpaces("10.0.0.0/16")
.location(exampleResourceGroup.location())
.resourceGroupName(exampleResourceGroup.name())
.build());
var exampleSubnet = new Subnet("exampleSubnet", SubnetArgs.builder()
.resourceGroupName(exampleResourceGroup.name())
.virtualNetworkName(exampleVirtualNetwork.name())
.addressPrefixes("10.0.1.0/24")
.build());
var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()
.location(exampleResourceGroup.location())
.resourceGroupName(exampleResourceGroup.name())
.allocationMethod("Static")
.sku("Standard")
.build());
var exampleFirewall = new Firewall("exampleFirewall", FirewallArgs.builder()
.location(exampleResourceGroup.location())
.resourceGroupName(exampleResourceGroup.name())
.skuName("AZFW_VNet")
.skuTier("Standard")
.ipConfigurations(FirewallIpConfigurationArgs.builder()
.name("configuration")
.subnetId(exampleSubnet.id())
.publicIpAddressId(examplePublicIp.id())
.build())
.build());
var exampleFirewallApplicationRuleCollection = new FirewallApplicationRuleCollection("exampleFirewallApplicationRuleCollection", FirewallApplicationRuleCollectionArgs.builder()
.azureFirewallName(exampleFirewall.name())
.resourceGroupName(exampleResourceGroup.name())
.priority(100)
.action("Allow")
.rules(FirewallApplicationRuleCollectionRuleArgs.builder()
.name("testrule")
.sourceAddresses("10.0.0.0/16")
.targetFqdns("*.google.com")
.protocols(FirewallApplicationRuleCollectionRuleProtocolArgs.builder()
.port("443")
.type("Https")
.build())
.build())
.build());
}
}
import pulumi
import pulumi_azure as azure
example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West Europe")
example_virtual_network = azure.network.VirtualNetwork("exampleVirtualNetwork",
address_spaces=["10.0.0.0/16"],
location=example_resource_group.location,
resource_group_name=example_resource_group.name)
example_subnet = azure.network.Subnet("exampleSubnet",
resource_group_name=example_resource_group.name,
virtual_network_name=example_virtual_network.name,
address_prefixes=["10.0.1.0/24"])
example_public_ip = azure.network.PublicIp("examplePublicIp",
location=example_resource_group.location,
resource_group_name=example_resource_group.name,
allocation_method="Static",
sku="Standard")
example_firewall = azure.network.Firewall("exampleFirewall",
location=example_resource_group.location,
resource_group_name=example_resource_group.name,
sku_name="AZFW_VNet",
sku_tier="Standard",
ip_configurations=[azure.network.FirewallIpConfigurationArgs(
name="configuration",
subnet_id=example_subnet.id,
public_ip_address_id=example_public_ip.id,
)])
example_firewall_application_rule_collection = azure.network.FirewallApplicationRuleCollection("exampleFirewallApplicationRuleCollection",
azure_firewall_name=example_firewall.name,
resource_group_name=example_resource_group.name,
priority=100,
action="Allow",
rules=[azure.network.FirewallApplicationRuleCollectionRuleArgs(
name="testrule",
source_addresses=["10.0.0.0/16"],
target_fqdns=["*.google.com"],
protocols=[azure.network.FirewallApplicationRuleCollectionRuleProtocolArgs(
port=443,
type="Https",
)],
)])
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West Europe"});
const exampleVirtualNetwork = new azure.network.VirtualNetwork("exampleVirtualNetwork", {
addressSpaces: ["10.0.0.0/16"],
location: exampleResourceGroup.location,
resourceGroupName: exampleResourceGroup.name,
});
const exampleSubnet = new azure.network.Subnet("exampleSubnet", {
resourceGroupName: exampleResourceGroup.name,
virtualNetworkName: exampleVirtualNetwork.name,
addressPrefixes: ["10.0.1.0/24"],
});
const examplePublicIp = new azure.network.PublicIp("examplePublicIp", {
location: exampleResourceGroup.location,
resourceGroupName: exampleResourceGroup.name,
allocationMethod: "Static",
sku: "Standard",
});
const exampleFirewall = new azure.network.Firewall("exampleFirewall", {
location: exampleResourceGroup.location,
resourceGroupName: exampleResourceGroup.name,
skuName: "AZFW_VNet",
skuTier: "Standard",
ipConfigurations: [{
name: "configuration",
subnetId: exampleSubnet.id,
publicIpAddressId: examplePublicIp.id,
}],
});
const exampleFirewallApplicationRuleCollection = new azure.network.FirewallApplicationRuleCollection("exampleFirewallApplicationRuleCollection", {
azureFirewallName: exampleFirewall.name,
resourceGroupName: exampleResourceGroup.name,
priority: 100,
action: "Allow",
rules: [{
name: "testrule",
sourceAddresses: ["10.0.0.0/16"],
targetFqdns: ["*.google.com"],
protocols: [{
port: 443,
type: "Https",
}],
}],
});
resources:
exampleResourceGroup:
type: azure:core:ResourceGroup
properties:
location: West Europe
exampleVirtualNetwork:
type: azure:network:VirtualNetwork
properties:
addressSpaces:
- 10.0.0.0/16
location: ${exampleResourceGroup.location}
resourceGroupName: ${exampleResourceGroup.name}
exampleSubnet:
type: azure:network:Subnet
properties:
resourceGroupName: ${exampleResourceGroup.name}
virtualNetworkName: ${exampleVirtualNetwork.name}
addressPrefixes:
- 10.0.1.0/24
examplePublicIp:
type: azure:network:PublicIp
properties:
location: ${exampleResourceGroup.location}
resourceGroupName: ${exampleResourceGroup.name}
allocationMethod: Static
sku: Standard
exampleFirewall:
type: azure:network:Firewall
properties:
location: ${exampleResourceGroup.location}
resourceGroupName: ${exampleResourceGroup.name}
skuName: AZFW_VNet
skuTier: Standard
ipConfigurations:
- name: configuration
subnetId: ${exampleSubnet.id}
publicIpAddressId: ${examplePublicIp.id}
exampleFirewallApplicationRuleCollection:
type: azure:network:FirewallApplicationRuleCollection
properties:
azureFirewallName: ${exampleFirewall.name}
resourceGroupName: ${exampleResourceGroup.name}
priority: 100
action: Allow
rules:
- name: testrule
sourceAddresses:
- 10.0.0.0/16
targetFqdns:
- '*.google.com'
protocols:
- port: '443'
type: Https
Create FirewallApplicationRuleCollection Resource
new FirewallApplicationRuleCollection(name: string, args: FirewallApplicationRuleCollectionArgs, opts?: CustomResourceOptions);
@overload
def FirewallApplicationRuleCollection(resource_name: str,
opts: Optional[ResourceOptions] = None,
action: Optional[str] = None,
azure_firewall_name: Optional[str] = None,
name: Optional[str] = None,
priority: Optional[int] = None,
resource_group_name: Optional[str] = None,
rules: Optional[Sequence[FirewallApplicationRuleCollectionRuleArgs]] = None)
@overload
def FirewallApplicationRuleCollection(resource_name: str,
args: FirewallApplicationRuleCollectionArgs,
opts: Optional[ResourceOptions] = None)
func NewFirewallApplicationRuleCollection(ctx *Context, name string, args FirewallApplicationRuleCollectionArgs, opts ...ResourceOption) (*FirewallApplicationRuleCollection, error)
public FirewallApplicationRuleCollection(string name, FirewallApplicationRuleCollectionArgs args, CustomResourceOptions? opts = null)
public FirewallApplicationRuleCollection(String name, FirewallApplicationRuleCollectionArgs args)
public FirewallApplicationRuleCollection(String name, FirewallApplicationRuleCollectionArgs args, CustomResourceOptions options)
type: azure:network:FirewallApplicationRuleCollection
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FirewallApplicationRuleCollectionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FirewallApplicationRuleCollectionArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FirewallApplicationRuleCollectionArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FirewallApplicationRuleCollectionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FirewallApplicationRuleCollectionArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
FirewallApplicationRuleCollection Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The FirewallApplicationRuleCollection resource accepts the following input properties:
- Action string
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- Azure
Firewall stringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- Priority int
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- Resource
Group stringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- Rules
List<Firewall
Application Rule Collection Rule> One or more
rule
blocks as defined below.- Name string
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- Action string
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- Azure
Firewall stringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- Priority int
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- Resource
Group stringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- Rules
[]Firewall
Application Rule Collection Rule Args One or more
rule
blocks as defined below.- Name string
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- action String
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- azure
Firewall StringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- priority Integer
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- resource
Group StringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- rules
List<Firewall
Application Rule Collection Rule> One or more
rule
blocks as defined below.- name String
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- action string
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- azure
Firewall stringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- priority number
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- resource
Group stringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- rules
Firewall
Application Rule Collection Rule[] One or more
rule
blocks as defined below.- name string
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- action str
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- azure_
firewall_ strname Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- priority int
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- resource_
group_ strname Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- rules
Sequence[Firewall
Application Rule Collection Rule Args] One or more
rule
blocks as defined below.- name str
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- action String
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- azure
Firewall StringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- priority Number
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- resource
Group StringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- rules List<Property Map>
One or more
rule
blocks as defined below.- name String
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
Outputs
All input properties are implicitly available as output properties. Additionally, the FirewallApplicationRuleCollection resource produces the following output properties:
- Id string
The provider-assigned unique ID for this managed resource.
- Id string
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
- id string
The provider-assigned unique ID for this managed resource.
- id str
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
Look up Existing FirewallApplicationRuleCollection Resource
Get an existing FirewallApplicationRuleCollection resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: FirewallApplicationRuleCollectionState, opts?: CustomResourceOptions): FirewallApplicationRuleCollection
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
action: Optional[str] = None,
azure_firewall_name: Optional[str] = None,
name: Optional[str] = None,
priority: Optional[int] = None,
resource_group_name: Optional[str] = None,
rules: Optional[Sequence[FirewallApplicationRuleCollectionRuleArgs]] = None) -> FirewallApplicationRuleCollection
func GetFirewallApplicationRuleCollection(ctx *Context, name string, id IDInput, state *FirewallApplicationRuleCollectionState, opts ...ResourceOption) (*FirewallApplicationRuleCollection, error)
public static FirewallApplicationRuleCollection Get(string name, Input<string> id, FirewallApplicationRuleCollectionState? state, CustomResourceOptions? opts = null)
public static FirewallApplicationRuleCollection get(String name, Output<String> id, FirewallApplicationRuleCollectionState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Action string
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- Azure
Firewall stringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- Name string
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- Priority int
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- Resource
Group stringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- Rules
List<Firewall
Application Rule Collection Rule> One or more
rule
blocks as defined below.
- Action string
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- Azure
Firewall stringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- Name string
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- Priority int
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- Resource
Group stringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- Rules
[]Firewall
Application Rule Collection Rule Args One or more
rule
blocks as defined below.
- action String
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- azure
Firewall StringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- name String
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- priority Integer
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- resource
Group StringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- rules
List<Firewall
Application Rule Collection Rule> One or more
rule
blocks as defined below.
- action string
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- azure
Firewall stringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- name string
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- priority number
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- resource
Group stringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- rules
Firewall
Application Rule Collection Rule[] One or more
rule
blocks as defined below.
- action str
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- azure_
firewall_ strname Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- name str
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- priority int
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- resource_
group_ strname Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- rules
Sequence[Firewall
Application Rule Collection Rule Args] One or more
rule
blocks as defined below.
- action String
Specifies the action the rule will apply to matching traffic. Possible values are
Allow
andDeny
.- azure
Firewall StringName Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.
- name String
Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.
- priority Number
Specifies the priority of the rule collection. Possible values are between
100
-65000
.- resource
Group StringName Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.
- rules List<Property Map>
One or more
rule
blocks as defined below.
Supporting Types
FirewallApplicationRuleCollectionRule, FirewallApplicationRuleCollectionRuleArgs
- Name string
Specifies the name of the rule.
- Description string
Specifies a description for the rule.
- List<string>
A list of FQDN tags. Possible values are
AppServiceEnvironment
,AzureBackup
,AzureKubernetesService
,HDInsight
,MicrosoftActiveProtectionService
,WindowsDiagnostics
,WindowsUpdate
andWindowsVirtualDesktop
.- Protocols
List<Firewall
Application Rule Collection Rule Protocol> One or more
protocol
blocks as defined below.- Source
Addresses List<string> A list of source IP addresses and/or IP ranges.
- Source
Ip List<string>Groups A list of source IP Group IDs for the rule.
NOTE At least one of
source_addresses
andsource_ip_groups
must be specified for a rule.- Target
Fqdns List<string> A list of FQDNs.
- Name string
Specifies the name of the rule.
- Description string
Specifies a description for the rule.
- []string
A list of FQDN tags. Possible values are
AppServiceEnvironment
,AzureBackup
,AzureKubernetesService
,HDInsight
,MicrosoftActiveProtectionService
,WindowsDiagnostics
,WindowsUpdate
andWindowsVirtualDesktop
.- Protocols
[]Firewall
Application Rule Collection Rule Protocol One or more
protocol
blocks as defined below.- Source
Addresses []string A list of source IP addresses and/or IP ranges.
- Source
Ip []stringGroups A list of source IP Group IDs for the rule.
NOTE At least one of
source_addresses
andsource_ip_groups
must be specified for a rule.- Target
Fqdns []string A list of FQDNs.
- name String
Specifies the name of the rule.
- description String
Specifies a description for the rule.
- List<String>
A list of FQDN tags. Possible values are
AppServiceEnvironment
,AzureBackup
,AzureKubernetesService
,HDInsight
,MicrosoftActiveProtectionService
,WindowsDiagnostics
,WindowsUpdate
andWindowsVirtualDesktop
.- protocols
List<Firewall
Application Rule Collection Rule Protocol> One or more
protocol
blocks as defined below.- source
Addresses List<String> A list of source IP addresses and/or IP ranges.
- source
Ip List<String>Groups A list of source IP Group IDs for the rule.
NOTE At least one of
source_addresses
andsource_ip_groups
must be specified for a rule.- target
Fqdns List<String> A list of FQDNs.
- name string
Specifies the name of the rule.
- description string
Specifies a description for the rule.
- string[]
A list of FQDN tags. Possible values are
AppServiceEnvironment
,AzureBackup
,AzureKubernetesService
,HDInsight
,MicrosoftActiveProtectionService
,WindowsDiagnostics
,WindowsUpdate
andWindowsVirtualDesktop
.- protocols
Firewall
Application Rule Collection Rule Protocol[] One or more
protocol
blocks as defined below.- source
Addresses string[] A list of source IP addresses and/or IP ranges.
- source
Ip string[]Groups A list of source IP Group IDs for the rule.
NOTE At least one of
source_addresses
andsource_ip_groups
must be specified for a rule.- target
Fqdns string[] A list of FQDNs.
- name str
Specifies the name of the rule.
- description str
Specifies a description for the rule.
- Sequence[str]
A list of FQDN tags. Possible values are
AppServiceEnvironment
,AzureBackup
,AzureKubernetesService
,HDInsight
,MicrosoftActiveProtectionService
,WindowsDiagnostics
,WindowsUpdate
andWindowsVirtualDesktop
.- protocols
Sequence[Firewall
Application Rule Collection Rule Protocol] One or more
protocol
blocks as defined below.- source_
addresses Sequence[str] A list of source IP addresses and/or IP ranges.
- source_
ip_ Sequence[str]groups A list of source IP Group IDs for the rule.
NOTE At least one of
source_addresses
andsource_ip_groups
must be specified for a rule.- target_
fqdns Sequence[str] A list of FQDNs.
- name String
Specifies the name of the rule.
- description String
Specifies a description for the rule.
- List<String>
A list of FQDN tags. Possible values are
AppServiceEnvironment
,AzureBackup
,AzureKubernetesService
,HDInsight
,MicrosoftActiveProtectionService
,WindowsDiagnostics
,WindowsUpdate
andWindowsVirtualDesktop
.- protocols List<Property Map>
One or more
protocol
blocks as defined below.- source
Addresses List<String> A list of source IP addresses and/or IP ranges.
- source
Ip List<String>Groups A list of source IP Group IDs for the rule.
NOTE At least one of
source_addresses
andsource_ip_groups
must be specified for a rule.- target
Fqdns List<String> A list of FQDNs.
FirewallApplicationRuleCollectionRuleProtocol, FirewallApplicationRuleCollectionRuleProtocolArgs
Import
Firewall Application Rule Collections can be imported using the resource id
, e.g.
$ pulumi import azure:network/firewallApplicationRuleCollection:FirewallApplicationRuleCollection example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.Network/azureFirewalls/myfirewall/applicationRuleCollections/mycollection
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
azurerm
Terraform Provider.