Azure Classic v5.43.0, May 6 23

azure.network.FirewallPolicy

Explore with Pulumi AI

Manages a Firewall Policy.

Example Usage

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new()
    {
        Location = "West Europe",
    });

    var exampleFirewallPolicy = new Azure.Network.FirewallPolicy("exampleFirewallPolicy", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        Location = exampleResourceGroup.Location,
    });

});

package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/network"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		_, err = network.NewFirewallPolicy(ctx, "exampleFirewallPolicy", &network.FirewallPolicyArgs{
			ResourceGroupName: exampleResourceGroup.Name,
			Location:          exampleResourceGroup.Location,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.FirewallPolicy;
import com.pulumi.azure.network.FirewallPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()        
            .location("West Europe")
            .build());

        var exampleFirewallPolicy = new FirewallPolicy("exampleFirewallPolicy", FirewallPolicyArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .build());

    }
}

import pulumi
import pulumi_azure as azure

example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West Europe")
example_firewall_policy = azure.network.FirewallPolicy("exampleFirewallPolicy",
    resource_group_name=example_resource_group.name,
    location=example_resource_group.location)

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West Europe"});
const exampleFirewallPolicy = new azure.network.FirewallPolicy("exampleFirewallPolicy", {
    resourceGroupName: exampleResourceGroup.name,
    location: exampleResourceGroup.location,
});

resources:
  exampleResourceGroup:
    type: azure:core:ResourceGroup
    properties:
      location: West Europe
  exampleFirewallPolicy:
    type: azure:network:FirewallPolicy
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}

Create FirewallPolicy Resource

new FirewallPolicy(name: string, args: FirewallPolicyArgs, opts?: CustomResourceOptions);

@overload
def FirewallPolicy(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   auto_learn_private_ranges_enabled: Optional[bool] = None,
                   base_policy_id: Optional[str] = None,
                   dns: Optional[FirewallPolicyDnsArgs] = None,
                   explicit_proxy: Optional[FirewallPolicyExplicitProxyArgs] = None,
                   identity: Optional[FirewallPolicyIdentityArgs] = None,
                   insights: Optional[FirewallPolicyInsightsArgs] = None,
                   intrusion_detection: Optional[FirewallPolicyIntrusionDetectionArgs] = None,
                   location: Optional[str] = None,
                   name: Optional[str] = None,
                   private_ip_ranges: Optional[Sequence[str]] = None,
                   resource_group_name: Optional[str] = None,
                   sku: Optional[str] = None,
                   sql_redirect_allowed: Optional[bool] = None,
                   tags: Optional[Mapping[str, str]] = None,
                   threat_intelligence_allowlist: Optional[FirewallPolicyThreatIntelligenceAllowlistArgs] = None,
                   threat_intelligence_mode: Optional[str] = None,
                   tls_certificate: Optional[FirewallPolicyTlsCertificateArgs] = None)
@overload
def FirewallPolicy(resource_name: str,
                   args: FirewallPolicyArgs,
                   opts: Optional[ResourceOptions] = None)

func NewFirewallPolicy(ctx *Context, name string, args FirewallPolicyArgs, opts ...ResourceOption) (*FirewallPolicy, error)

public FirewallPolicy(string name, FirewallPolicyArgs args, CustomResourceOptions? opts = null)

public FirewallPolicy(String name, FirewallPolicyArgs args)
public FirewallPolicy(String name, FirewallPolicyArgs args, CustomResourceOptions options)

type: azure:network:FirewallPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string: The unique name of the resource.
args FirewallPolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args FirewallPolicyArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args FirewallPolicyArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args FirewallPolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args FirewallPolicyArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

FirewallPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The FirewallPolicy resource accepts the following input properties:

ResourceGroupName string: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
AutoLearnPrivateRangesEnabled bool: Whether enable auto learn private ip range.
BasePolicyId string: The ID of the base Firewall Policy.
Dns FirewallPolicyDnsArgs: A dns block as defined below.
ExplicitProxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
Identity FirewallPolicyIdentityArgs: An identity block as defined below.
Insights FirewallPolicyInsightsArgs: An insights block as defined below.
IntrusionDetection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
Location string: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
Name string: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
PrivateIpRanges List<string>: A list of private IP ranges to which traffic will not be SNAT.
Sku string: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
SqlRedirectAllowed bool: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
Tags Dictionary<string, string>: A mapping of tags which should be assigned to the Firewall Policy.
ThreatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
ThreatIntelligenceMode string: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
TlsCertificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

ResourceGroupName string: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
AutoLearnPrivateRangesEnabled bool: Whether enable auto learn private ip range.
BasePolicyId string: The ID of the base Firewall Policy.
Dns FirewallPolicyDnsArgs: A dns block as defined below.
ExplicitProxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
Identity FirewallPolicyIdentityArgs: An identity block as defined below.
Insights FirewallPolicyInsightsArgs: An insights block as defined below.
IntrusionDetection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
Location string: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
Name string: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
PrivateIpRanges []string: A list of private IP ranges to which traffic will not be SNAT.
Sku string: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
SqlRedirectAllowed bool: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
Tags map[string]string: A mapping of tags which should be assigned to the Firewall Policy.
ThreatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
ThreatIntelligenceMode string: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
TlsCertificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

resourceGroupName String: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
autoLearnPrivateRangesEnabled Boolean: Whether enable auto learn private ip range.
basePolicyId String: The ID of the base Firewall Policy.
dns FirewallPolicyDnsArgs: A dns block as defined below.
explicitProxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
identity FirewallPolicyIdentityArgs: An identity block as defined below.
insights FirewallPolicyInsightsArgs: An insights block as defined below.
intrusionDetection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
location String: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
name String: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
privateIpRanges List<String>: A list of private IP ranges to which traffic will not be SNAT.
sku String: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
sqlRedirectAllowed Boolean: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
tags Map<String,String>: A mapping of tags which should be assigned to the Firewall Policy.
threatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
threatIntelligenceMode String: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
tlsCertificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

resourceGroupName string: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
autoLearnPrivateRangesEnabled boolean: Whether enable auto learn private ip range.
basePolicyId string: The ID of the base Firewall Policy.
dns FirewallPolicyDnsArgs: A dns block as defined below.
explicitProxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
identity FirewallPolicyIdentityArgs: An identity block as defined below.
insights FirewallPolicyInsightsArgs: An insights block as defined below.
intrusionDetection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
location string: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
name string: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
privateIpRanges string[]: A list of private IP ranges to which traffic will not be SNAT.
sku string: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
sqlRedirectAllowed boolean: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
tags {[key: string]: string}: A mapping of tags which should be assigned to the Firewall Policy.
threatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
threatIntelligenceMode string: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
tlsCertificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

resource_group_name str: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
auto_learn_private_ranges_enabled bool: Whether enable auto learn private ip range.
base_policy_id str: The ID of the base Firewall Policy.
dns FirewallPolicyDnsArgs: A dns block as defined below.
explicit_proxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
identity FirewallPolicyIdentityArgs: An identity block as defined below.
insights FirewallPolicyInsightsArgs: An insights block as defined below.
intrusion_detection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
location str: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
name str: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
private_ip_ranges Sequence[str]: A list of private IP ranges to which traffic will not be SNAT.
sku str: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
sql_redirect_allowed bool: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
tags Mapping[str, str]: A mapping of tags which should be assigned to the Firewall Policy.
threat_intelligence_allowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
threat_intelligence_mode str: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
tls_certificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

resourceGroupName String: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
autoLearnPrivateRangesEnabled Boolean: Whether enable auto learn private ip range.
basePolicyId String: The ID of the base Firewall Policy.
dns Property Map: A dns block as defined below.
explicitProxy Property Map: A explicit_proxy block as defined below.
identity Property Map: An identity block as defined below.
insights Property Map: An insights block as defined below.
intrusionDetection Property Map: A intrusion_detection block as defined below.
location String: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
name String: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
privateIpRanges List<String>: A list of private IP ranges to which traffic will not be SNAT.
sku String: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
sqlRedirectAllowed Boolean: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
tags Map<String>: A mapping of tags which should be assigned to the Firewall Policy.
threatIntelligenceAllowlist Property Map: A threat_intelligence_allowlist block as defined below.
threatIntelligenceMode String: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
tlsCertificate Property Map: A tls_certificate block as defined below.

Outputs

All input properties are implicitly available as output properties. Additionally, the FirewallPolicy resource produces the following output properties:

ChildPolicies List<string>: A list of reference to child Firewall Policies of this Firewall Policy.
Firewalls List<string>: A list of references to Azure Firewalls that this Firewall Policy is associated with.
Id string: The provider-assigned unique ID for this managed resource.
RuleCollectionGroups List<string>: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

ChildPolicies []string: A list of reference to child Firewall Policies of this Firewall Policy.
Firewalls []string: A list of references to Azure Firewalls that this Firewall Policy is associated with.
Id string: The provider-assigned unique ID for this managed resource.
RuleCollectionGroups []string: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

childPolicies List<String>: A list of reference to child Firewall Policies of this Firewall Policy.
firewalls List<String>: A list of references to Azure Firewalls that this Firewall Policy is associated with.
id String: The provider-assigned unique ID for this managed resource.
ruleCollectionGroups List<String>: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

childPolicies string[]: A list of reference to child Firewall Policies of this Firewall Policy.
firewalls string[]: A list of references to Azure Firewalls that this Firewall Policy is associated with.
id string: The provider-assigned unique ID for this managed resource.
ruleCollectionGroups string[]: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

child_policies Sequence[str]: A list of reference to child Firewall Policies of this Firewall Policy.
firewalls Sequence[str]: A list of references to Azure Firewalls that this Firewall Policy is associated with.
id str: The provider-assigned unique ID for this managed resource.
rule_collection_groups Sequence[str]: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

childPolicies List<String>: A list of reference to child Firewall Policies of this Firewall Policy.
firewalls List<String>: A list of references to Azure Firewalls that this Firewall Policy is associated with.
id String: The provider-assigned unique ID for this managed resource.
ruleCollectionGroups List<String>: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

Look up Existing FirewallPolicy Resource

Get an existing FirewallPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: FirewallPolicyState, opts?: CustomResourceOptions): FirewallPolicy

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        auto_learn_private_ranges_enabled: Optional[bool] = None,
        base_policy_id: Optional[str] = None,
        child_policies: Optional[Sequence[str]] = None,
        dns: Optional[FirewallPolicyDnsArgs] = None,
        explicit_proxy: Optional[FirewallPolicyExplicitProxyArgs] = None,
        firewalls: Optional[Sequence[str]] = None,
        identity: Optional[FirewallPolicyIdentityArgs] = None,
        insights: Optional[FirewallPolicyInsightsArgs] = None,
        intrusion_detection: Optional[FirewallPolicyIntrusionDetectionArgs] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        private_ip_ranges: Optional[Sequence[str]] = None,
        resource_group_name: Optional[str] = None,
        rule_collection_groups: Optional[Sequence[str]] = None,
        sku: Optional[str] = None,
        sql_redirect_allowed: Optional[bool] = None,
        tags: Optional[Mapping[str, str]] = None,
        threat_intelligence_allowlist: Optional[FirewallPolicyThreatIntelligenceAllowlistArgs] = None,
        threat_intelligence_mode: Optional[str] = None,
        tls_certificate: Optional[FirewallPolicyTlsCertificateArgs] = None) -> FirewallPolicy

func GetFirewallPolicy(ctx *Context, name string, id IDInput, state *FirewallPolicyState, opts ...ResourceOption) (*FirewallPolicy, error)

public static FirewallPolicy Get(string name, Input<string> id, FirewallPolicyState? state, CustomResourceOptions? opts = null)

public static FirewallPolicy get(String name, Output<String> id, FirewallPolicyState state, CustomResourceOptions options)

Resource lookup is not supported in YAML

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AutoLearnPrivateRangesEnabled bool: Whether enable auto learn private ip range.
BasePolicyId string: The ID of the base Firewall Policy.
ChildPolicies List<string>: A list of reference to child Firewall Policies of this Firewall Policy.
Dns FirewallPolicyDnsArgs: A dns block as defined below.
ExplicitProxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
Firewalls List<string>: A list of references to Azure Firewalls that this Firewall Policy is associated with.
Identity FirewallPolicyIdentityArgs: An identity block as defined below.
Insights FirewallPolicyInsightsArgs: An insights block as defined below.
IntrusionDetection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
Location string: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
Name string: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
PrivateIpRanges List<string>: A list of private IP ranges to which traffic will not be SNAT.
ResourceGroupName string: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
RuleCollectionGroups List<string>: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.
Sku string: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
SqlRedirectAllowed bool: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
Tags Dictionary<string, string>: A mapping of tags which should be assigned to the Firewall Policy.
ThreatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
ThreatIntelligenceMode string: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
TlsCertificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

AutoLearnPrivateRangesEnabled bool: Whether enable auto learn private ip range.
BasePolicyId string: The ID of the base Firewall Policy.
ChildPolicies []string: A list of reference to child Firewall Policies of this Firewall Policy.
Dns FirewallPolicyDnsArgs: A dns block as defined below.
ExplicitProxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
Firewalls []string: A list of references to Azure Firewalls that this Firewall Policy is associated with.
Identity FirewallPolicyIdentityArgs: An identity block as defined below.
Insights FirewallPolicyInsightsArgs: An insights block as defined below.
IntrusionDetection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
Location string: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
Name string: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
PrivateIpRanges []string: A list of private IP ranges to which traffic will not be SNAT.
ResourceGroupName string: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
RuleCollectionGroups []string: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.
Sku string: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
SqlRedirectAllowed bool: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
Tags map[string]string: A mapping of tags which should be assigned to the Firewall Policy.
ThreatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
ThreatIntelligenceMode string: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
TlsCertificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

autoLearnPrivateRangesEnabled Boolean: Whether enable auto learn private ip range.
basePolicyId String: The ID of the base Firewall Policy.
childPolicies List<String>: A list of reference to child Firewall Policies of this Firewall Policy.
dns FirewallPolicyDnsArgs: A dns block as defined below.
explicitProxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
firewalls List<String>: A list of references to Azure Firewalls that this Firewall Policy is associated with.
identity FirewallPolicyIdentityArgs: An identity block as defined below.
insights FirewallPolicyInsightsArgs: An insights block as defined below.
intrusionDetection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
location String: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
name String: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
privateIpRanges List<String>: A list of private IP ranges to which traffic will not be SNAT.
resourceGroupName String: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
ruleCollectionGroups List<String>: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.
sku String: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
sqlRedirectAllowed Boolean: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
tags Map<String,String>: A mapping of tags which should be assigned to the Firewall Policy.
threatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
threatIntelligenceMode String: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
tlsCertificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

autoLearnPrivateRangesEnabled boolean: Whether enable auto learn private ip range.
basePolicyId string: The ID of the base Firewall Policy.
childPolicies string[]: A list of reference to child Firewall Policies of this Firewall Policy.
dns FirewallPolicyDnsArgs: A dns block as defined below.
explicitProxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
firewalls string[]: A list of references to Azure Firewalls that this Firewall Policy is associated with.
identity FirewallPolicyIdentityArgs: An identity block as defined below.
insights FirewallPolicyInsightsArgs: An insights block as defined below.
intrusionDetection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
location string: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
name string: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
privateIpRanges string[]: A list of private IP ranges to which traffic will not be SNAT.
resourceGroupName string: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
ruleCollectionGroups string[]: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.
sku string: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
sqlRedirectAllowed boolean: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
tags {[key: string]: string}: A mapping of tags which should be assigned to the Firewall Policy.
threatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
threatIntelligenceMode string: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
tlsCertificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

auto_learn_private_ranges_enabled bool: Whether enable auto learn private ip range.
base_policy_id str: The ID of the base Firewall Policy.
child_policies Sequence[str]: A list of reference to child Firewall Policies of this Firewall Policy.
dns FirewallPolicyDnsArgs: A dns block as defined below.
explicit_proxy FirewallPolicyExplicitProxyArgs: A explicit_proxy block as defined below.
firewalls Sequence[str]: A list of references to Azure Firewalls that this Firewall Policy is associated with.
identity FirewallPolicyIdentityArgs: An identity block as defined below.
insights FirewallPolicyInsightsArgs: An insights block as defined below.
intrusion_detection FirewallPolicyIntrusionDetectionArgs: A intrusion_detection block as defined below.
location str: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
name str: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
private_ip_ranges Sequence[str]: A list of private IP ranges to which traffic will not be SNAT.
resource_group_name str: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
rule_collection_groups Sequence[str]: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.
sku str: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
sql_redirect_allowed bool: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
tags Mapping[str, str]: A mapping of tags which should be assigned to the Firewall Policy.
threat_intelligence_allowlist FirewallPolicyThreatIntelligenceAllowlistArgs: A threat_intelligence_allowlist block as defined below.
threat_intelligence_mode str: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
tls_certificate FirewallPolicyTlsCertificateArgs: A tls_certificate block as defined below.

autoLearnPrivateRangesEnabled Boolean: Whether enable auto learn private ip range.
basePolicyId String: The ID of the base Firewall Policy.
childPolicies List<String>: A list of reference to child Firewall Policies of this Firewall Policy.
dns Property Map: A dns block as defined below.
explicitProxy Property Map: A explicit_proxy block as defined below.
firewalls List<String>: A list of references to Azure Firewalls that this Firewall Policy is associated with.
identity Property Map: An identity block as defined below.
insights Property Map: An insights block as defined below.
intrusionDetection Property Map: A intrusion_detection block as defined below.
location String: The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
name String: The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.
privateIpRanges List<String>: A list of private IP ranges to which traffic will not be SNAT.
resourceGroupName String: The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.
ruleCollectionGroups List<String>: A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.
sku String: The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Changing this forces a new Firewall Policy to be created.
sqlRedirectAllowed Boolean: Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.
tags Map<String>: A mapping of tags which should be assigned to the Firewall Policy.
threatIntelligenceAllowlist Property Map: A threat_intelligence_allowlist block as defined below.
threatIntelligenceMode String: The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.
tlsCertificate Property Map: A tls_certificate block as defined below.

Supporting Types

FirewallPolicyDns

ProxyEnabled bool: Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.
Servers List<string>: A list of custom DNS servers' IP addresses.

ProxyEnabled bool: Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.
Servers []string: A list of custom DNS servers' IP addresses.

proxyEnabled Boolean: Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.
servers List<String>: A list of custom DNS servers' IP addresses.

proxyEnabled boolean: Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.
servers string[]: A list of custom DNS servers' IP addresses.

proxy_enabled bool: Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.
servers Sequence[str]: A list of custom DNS servers' IP addresses.

proxyEnabled Boolean: Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.
servers List<String>: A list of custom DNS servers' IP addresses.

FirewallPolicyExplicitProxy

EnablePacFile bool: Whether the pac file port and url need to be provided.
Enabled bool: Whether the explicit proxy is enabled for this Firewall Policy.
HttpPort int: The port number for explicit http protocol.
HttpsPort int: The port number for explicit proxy https protocol.
PacFile string: Specifies a SAS URL for PAC file.
PacFilePort int: Specifies a port number for firewall to serve PAC file.

EnablePacFile bool: Whether the pac file port and url need to be provided.
Enabled bool: Whether the explicit proxy is enabled for this Firewall Policy.
HttpPort int: The port number for explicit http protocol.
HttpsPort int: The port number for explicit proxy https protocol.
PacFile string: Specifies a SAS URL for PAC file.
PacFilePort int: Specifies a port number for firewall to serve PAC file.

enablePacFile Boolean: Whether the pac file port and url need to be provided.
enabled Boolean: Whether the explicit proxy is enabled for this Firewall Policy.
httpPort Integer: The port number for explicit http protocol.
httpsPort Integer: The port number for explicit proxy https protocol.
pacFile String: Specifies a SAS URL for PAC file.
pacFilePort Integer: Specifies a port number for firewall to serve PAC file.

enablePacFile boolean: Whether the pac file port and url need to be provided.
enabled boolean: Whether the explicit proxy is enabled for this Firewall Policy.
httpPort number: The port number for explicit http protocol.
httpsPort number: The port number for explicit proxy https protocol.
pacFile string: Specifies a SAS URL for PAC file.
pacFilePort number: Specifies a port number for firewall to serve PAC file.

enable_pac_file bool: Whether the pac file port and url need to be provided.
enabled bool: Whether the explicit proxy is enabled for this Firewall Policy.
http_port int: The port number for explicit http protocol.
https_port int: The port number for explicit proxy https protocol.
pac_file str: Specifies a SAS URL for PAC file.
pac_file_port int: Specifies a port number for firewall to serve PAC file.

enablePacFile Boolean: Whether the pac file port and url need to be provided.
enabled Boolean: Whether the explicit proxy is enabled for this Firewall Policy.
httpPort Number: The port number for explicit http protocol.
httpsPort Number: The port number for explicit proxy https protocol.
pacFile String: Specifies a SAS URL for PAC file.
pacFilePort Number: Specifies a port number for firewall to serve PAC file.

FirewallPolicyIdentity

IdentityIds List<string>: Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.
Type string: Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

IdentityIds []string: Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.
Type string: Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

identityIds List<String>: Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.
type String: Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

identityIds string[]: Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.
type string: Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

identity_ids Sequence[str]: Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.
type str: Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

identityIds List<String>: Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.
type String: Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

FirewallPolicyInsights

DefaultLogAnalyticsWorkspaceId string: The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.
Enabled bool: Whether the insights functionality is enabled for this Firewall Policy.
LogAnalyticsWorkspaces List<FirewallPolicyInsightsLogAnalyticsWorkspace>: A list of log_analytics_workspace block as defined below.
RetentionInDays int: The log retention period in days.

DefaultLogAnalyticsWorkspaceId string: The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.
Enabled bool: Whether the insights functionality is enabled for this Firewall Policy.
LogAnalyticsWorkspaces []FirewallPolicyInsightsLogAnalyticsWorkspace: A list of log_analytics_workspace block as defined below.
RetentionInDays int: The log retention period in days.

defaultLogAnalyticsWorkspaceId String: The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.
enabled Boolean: Whether the insights functionality is enabled for this Firewall Policy.
logAnalyticsWorkspaces List<FirewallPolicyInsightsLogAnalyticsWorkspace>: A list of log_analytics_workspace block as defined below.
retentionInDays Integer: The log retention period in days.

defaultLogAnalyticsWorkspaceId string: The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.
enabled boolean: Whether the insights functionality is enabled for this Firewall Policy.
logAnalyticsWorkspaces FirewallPolicyInsightsLogAnalyticsWorkspace[]: A list of log_analytics_workspace block as defined below.
retentionInDays number: The log retention period in days.

default_log_analytics_workspace_id str: The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.
enabled bool: Whether the insights functionality is enabled for this Firewall Policy.
log_analytics_workspaces Sequence[FirewallPolicyInsightsLogAnalyticsWorkspace]: A list of log_analytics_workspace block as defined below.
retention_in_days int: The log retention period in days.

defaultLogAnalyticsWorkspaceId String: The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.
enabled Boolean: Whether the insights functionality is enabled for this Firewall Policy.
logAnalyticsWorkspaces List<Property Map>: A list of log_analytics_workspace block as defined below.
retentionInDays Number: The log retention period in days.

FirewallPolicyInsightsLogAnalyticsWorkspace

FirewallLocation string: The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.
Id string: The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

FirewallLocation string: The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.
Id string: The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

firewallLocation String: The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.
id String: The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

firewallLocation string: The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.
id string: The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

firewall_location str: The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.
id str: The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

firewallLocation String: The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.
id String: The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

FirewallPolicyIntrusionDetection

Mode string: In which mode you want to run intrusion detection: Off, Alert or Deny.
PrivateRanges List<string>: A list of Private IP address ranges to identify traffic direction. By default, only ranges defined by IANA RFC 1918 are considered private IP addresses.
SignatureOverrides List<FirewallPolicyIntrusionDetectionSignatureOverride>: One or more signature_overrides blocks as defined below.
TrafficBypasses List<FirewallPolicyIntrusionDetectionTrafficBypass>: One or more traffic_bypass blocks as defined below.

Mode string: In which mode you want to run intrusion detection: Off, Alert or Deny.
PrivateRanges []string: A list of Private IP address ranges to identify traffic direction. By default, only ranges defined by IANA RFC 1918 are considered private IP addresses.
SignatureOverrides []FirewallPolicyIntrusionDetectionSignatureOverride: One or more signature_overrides blocks as defined below.
TrafficBypasses []FirewallPolicyIntrusionDetectionTrafficBypass: One or more traffic_bypass blocks as defined below.

mode String: In which mode you want to run intrusion detection: Off, Alert or Deny.
privateRanges List<String>: A list of Private IP address ranges to identify traffic direction. By default, only ranges defined by IANA RFC 1918 are considered private IP addresses.
signatureOverrides List<FirewallPolicyIntrusionDetectionSignatureOverride>: One or more signature_overrides blocks as defined below.
trafficBypasses List<FirewallPolicyIntrusionDetectionTrafficBypass>: One or more traffic_bypass blocks as defined below.

mode string: In which mode you want to run intrusion detection: Off, Alert or Deny.
privateRanges string[]: A list of Private IP address ranges to identify traffic direction. By default, only ranges defined by IANA RFC 1918 are considered private IP addresses.
signatureOverrides FirewallPolicyIntrusionDetectionSignatureOverride[]: One or more signature_overrides blocks as defined below.
trafficBypasses FirewallPolicyIntrusionDetectionTrafficBypass[]: One or more traffic_bypass blocks as defined below.

mode str: In which mode you want to run intrusion detection: Off, Alert or Deny.
private_ranges Sequence[str]: A list of Private IP address ranges to identify traffic direction. By default, only ranges defined by IANA RFC 1918 are considered private IP addresses.
signature_overrides Sequence[FirewallPolicyIntrusionDetectionSignatureOverride]: One or more signature_overrides blocks as defined below.
traffic_bypasses Sequence[FirewallPolicyIntrusionDetectionTrafficBypass]: One or more traffic_bypass blocks as defined below.

mode String: In which mode you want to run intrusion detection: Off, Alert or Deny.
privateRanges List<String>: A list of Private IP address ranges to identify traffic direction. By default, only ranges defined by IANA RFC 1918 are considered private IP addresses.
signatureOverrides List<Property Map>: One or more signature_overrides blocks as defined below.
trafficBypasses List<Property Map>: One or more traffic_bypass blocks as defined below.

FirewallPolicyIntrusionDetectionSignatureOverride

Id string: 12-digit number (id) which identifies your signature.
State string: state can be any of Off, Alert or Deny.

Id string: 12-digit number (id) which identifies your signature.
State string: state can be any of Off, Alert or Deny.

id String: 12-digit number (id) which identifies your signature.
state String: state can be any of Off, Alert or Deny.

id string: 12-digit number (id) which identifies your signature.
state string: state can be any of Off, Alert or Deny.

id str: 12-digit number (id) which identifies your signature.
state str: state can be any of Off, Alert or Deny.

id String: 12-digit number (id) which identifies your signature.
state String: state can be any of Off, Alert or Deny.

FirewallPolicyIntrusionDetectionTrafficBypass

Name string: The name which should be used for this bypass traffic setting.
Protocol string: The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.
Description string: The description for this bypass traffic setting.
DestinationAddresses List<string>: Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.
DestinationIpGroups List<string>: Specifies a list of destination IP groups that shall be bypassed by intrusion detection.
DestinationPorts List<string>: Specifies a list of destination IP ports that shall be bypassed by intrusion detection.
SourceAddresses List<string>: Specifies a list of source addresses that shall be bypassed by intrusion detection.
SourceIpGroups List<string>: Specifies a list of source IP groups that shall be bypassed by intrusion detection.

Name string: The name which should be used for this bypass traffic setting.
Protocol string: The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.
Description string: The description for this bypass traffic setting.
DestinationAddresses []string: Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.
DestinationIpGroups []string: Specifies a list of destination IP groups that shall be bypassed by intrusion detection.
DestinationPorts []string: Specifies a list of destination IP ports that shall be bypassed by intrusion detection.
SourceAddresses []string: Specifies a list of source addresses that shall be bypassed by intrusion detection.
SourceIpGroups []string: Specifies a list of source IP groups that shall be bypassed by intrusion detection.

name String: The name which should be used for this bypass traffic setting.
protocol String: The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.
description String: The description for this bypass traffic setting.
destinationAddresses List<String>: Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.
destinationIpGroups List<String>: Specifies a list of destination IP groups that shall be bypassed by intrusion detection.
destinationPorts List<String>: Specifies a list of destination IP ports that shall be bypassed by intrusion detection.
sourceAddresses List<String>: Specifies a list of source addresses that shall be bypassed by intrusion detection.
sourceIpGroups List<String>: Specifies a list of source IP groups that shall be bypassed by intrusion detection.

name string: The name which should be used for this bypass traffic setting.
protocol string: The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.
description string: The description for this bypass traffic setting.
destinationAddresses string[]: Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.
destinationIpGroups string[]: Specifies a list of destination IP groups that shall be bypassed by intrusion detection.
destinationPorts string[]: Specifies a list of destination IP ports that shall be bypassed by intrusion detection.
sourceAddresses string[]: Specifies a list of source addresses that shall be bypassed by intrusion detection.
sourceIpGroups string[]: Specifies a list of source IP groups that shall be bypassed by intrusion detection.

name str: The name which should be used for this bypass traffic setting.
protocol str: The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.
description str: The description for this bypass traffic setting.
destination_addresses Sequence[str]: Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.
destination_ip_groups Sequence[str]: Specifies a list of destination IP groups that shall be bypassed by intrusion detection.
destination_ports Sequence[str]: Specifies a list of destination IP ports that shall be bypassed by intrusion detection.
source_addresses Sequence[str]: Specifies a list of source addresses that shall be bypassed by intrusion detection.
source_ip_groups Sequence[str]: Specifies a list of source IP groups that shall be bypassed by intrusion detection.

name String: The name which should be used for this bypass traffic setting.
protocol String: The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.
description String: The description for this bypass traffic setting.
destinationAddresses List<String>: Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.
destinationIpGroups List<String>: Specifies a list of destination IP groups that shall be bypassed by intrusion detection.
destinationPorts List<String>: Specifies a list of destination IP ports that shall be bypassed by intrusion detection.
sourceAddresses List<String>: Specifies a list of source addresses that shall be bypassed by intrusion detection.
sourceIpGroups List<String>: Specifies a list of source IP groups that shall be bypassed by intrusion detection.

FirewallPolicyThreatIntelligenceAllowlist

Fqdns List<string>: A list of FQDNs that will be skipped for threat detection.
IpAddresses List<string>: A list of IP addresses or CIDR ranges that will be skipped for threat detection.

Fqdns []string: A list of FQDNs that will be skipped for threat detection.
IpAddresses []string: A list of IP addresses or CIDR ranges that will be skipped for threat detection.

fqdns List<String>: A list of FQDNs that will be skipped for threat detection.
ipAddresses List<String>: A list of IP addresses or CIDR ranges that will be skipped for threat detection.

fqdns string[]: A list of FQDNs that will be skipped for threat detection.
ipAddresses string[]: A list of IP addresses or CIDR ranges that will be skipped for threat detection.

fqdns Sequence[str]: A list of FQDNs that will be skipped for threat detection.
ip_addresses Sequence[str]: A list of IP addresses or CIDR ranges that will be skipped for threat detection.

fqdns List<String>: A list of FQDNs that will be skipped for threat detection.
ipAddresses List<String>: A list of IP addresses or CIDR ranges that will be skipped for threat detection.

FirewallPolicyTlsCertificate

KeyVaultSecretId string: The ID of the Key Vault, where the secret or certificate is stored.
Name string: The name of the certificate.

KeyVaultSecretId string: The ID of the Key Vault, where the secret or certificate is stored.
Name string: The name of the certificate.

keyVaultSecretId String: The ID of the Key Vault, where the secret or certificate is stored.
name String: The name of the certificate.

keyVaultSecretId string: The ID of the Key Vault, where the secret or certificate is stored.
name string: The name of the certificate.

key_vault_secret_id str: The ID of the Key Vault, where the secret or certificate is stored.
name str: The name of the certificate.

keyVaultSecretId String: The ID of the Key Vault, where the secret or certificate is stored.
name String: The name of the certificate.

Import

Firewall Policies can be imported using the resource id, e.g.

 $ pulumi import azure:network/firewallPolicy:FirewallPolicy example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.Network/firewallPolicies/policy1

Package Details

Repository: Azure Classic pulumi/pulumi-azure
License: Apache-2.0
Notes: This Pulumi package is based on the azurerm Terraform Provider.