Azure Classic

Pulumi Official
Package maintained by Pulumi
v5.8.0 published on Friday, May 27, 2022 by Pulumi

FirewallPolicy

Manages a Firewall Policy.

Example Usage

using Pulumi;
using Azure = Pulumi.Azure;

class MyStack : Stack
{
    public MyStack()
    {
        var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new Azure.Core.ResourceGroupArgs
        {
            Location = "West Europe",
        });
        var exampleFirewallPolicy = new Azure.Network.FirewallPolicy("exampleFirewallPolicy", new Azure.Network.FirewallPolicyArgs
        {
            ResourceGroupName = exampleResourceGroup.Name,
            Location = exampleResourceGroup.Location,
        });
    }

}
package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/network"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		_, err = network.NewFirewallPolicy(ctx, "exampleFirewallPolicy", &network.FirewallPolicyArgs{
			ResourceGroupName: exampleResourceGroup.Name,
			Location:          exampleResourceGroup.Location,
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import java.util.*;
import java.io.*;
import java.nio.*;
import com.pulumi.*;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()        
            .location("West Europe")
            .build());

        var exampleFirewallPolicy = new FirewallPolicy("exampleFirewallPolicy", FirewallPolicyArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .build());

    }
}
import pulumi
import pulumi_azure as azure

example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West Europe")
example_firewall_policy = azure.network.FirewallPolicy("exampleFirewallPolicy",
    resource_group_name=example_resource_group.name,
    location=example_resource_group.location)
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West Europe"});
const exampleFirewallPolicy = new azure.network.FirewallPolicy("exampleFirewallPolicy", {
    resourceGroupName: exampleResourceGroup.name,
    location: exampleResourceGroup.location,
});
resources:
  exampleResourceGroup:
    type: azure:core:ResourceGroup
    properties:
      location: West Europe
  exampleFirewallPolicy:
    type: azure:network:FirewallPolicy
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}

Create a FirewallPolicy Resource

new FirewallPolicy(name: string, args: FirewallPolicyArgs, opts?: CustomResourceOptions);
@overload
def FirewallPolicy(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   base_policy_id: Optional[str] = None,
                   dns: Optional[FirewallPolicyDnsArgs] = None,
                   identity: Optional[FirewallPolicyIdentityArgs] = None,
                   insights: Optional[FirewallPolicyInsightsArgs] = None,
                   intrusion_detection: Optional[FirewallPolicyIntrusionDetectionArgs] = None,
                   location: Optional[str] = None,
                   name: Optional[str] = None,
                   private_ip_ranges: Optional[Sequence[str]] = None,
                   resource_group_name: Optional[str] = None,
                   sku: Optional[str] = None,
                   tags: Optional[Mapping[str, str]] = None,
                   threat_intelligence_allowlist: Optional[FirewallPolicyThreatIntelligenceAllowlistArgs] = None,
                   threat_intelligence_mode: Optional[str] = None,
                   tls_certificate: Optional[FirewallPolicyTlsCertificateArgs] = None)
@overload
def FirewallPolicy(resource_name: str,
                   args: FirewallPolicyArgs,
                   opts: Optional[ResourceOptions] = None)
func NewFirewallPolicy(ctx *Context, name string, args FirewallPolicyArgs, opts ...ResourceOption) (*FirewallPolicy, error)
public FirewallPolicy(string name, FirewallPolicyArgs args, CustomResourceOptions? opts = null)
public FirewallPolicy(String name, FirewallPolicyArgs args)
public FirewallPolicy(String name, FirewallPolicyArgs args, CustomResourceOptions options)
type: azure:network:FirewallPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string
The unique name of the resource.
args FirewallPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args FirewallPolicyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args FirewallPolicyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args FirewallPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args FirewallPolicyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

FirewallPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The FirewallPolicy resource accepts the following input properties:

ResourceGroupName string

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

BasePolicyId string

The ID of the base Firewall Policy.

Dns FirewallPolicyDnsArgs

A dns block as defined below.

Identity FirewallPolicyIdentityArgs

An identity block as defined below.

Insights FirewallPolicyInsightsArgs

An insights block as defined below.

IntrusionDetection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

Location string

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

Name string

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

PrivateIpRanges List<string>

A list of private IP ranges to which traffic will not be SNAT.

Sku string

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

Tags Dictionary<string, string>

A mapping of tags which should be assigned to the Firewall Policy.

ThreatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

ThreatIntelligenceMode string

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

TlsCertificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

ResourceGroupName string

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

BasePolicyId string

The ID of the base Firewall Policy.

Dns FirewallPolicyDnsArgs

A dns block as defined below.

Identity FirewallPolicyIdentityArgs

An identity block as defined below.

Insights FirewallPolicyInsightsArgs

An insights block as defined below.

IntrusionDetection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

Location string

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

Name string

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

PrivateIpRanges []string

A list of private IP ranges to which traffic will not be SNAT.

Sku string

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

Tags map[string]string

A mapping of tags which should be assigned to the Firewall Policy.

ThreatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

ThreatIntelligenceMode string

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

TlsCertificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

resourceGroupName String

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

basePolicyId String

The ID of the base Firewall Policy.

dns FirewallPolicyDnsArgs

A dns block as defined below.

identity FirewallPolicyIdentityArgs

An identity block as defined below.

insights FirewallPolicyInsightsArgs

An insights block as defined below.

intrusionDetection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

location String

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

name String

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

privateIpRanges List<String>

A list of private IP ranges to which traffic will not be SNAT.

sku String

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

tags Map<String,String>

A mapping of tags which should be assigned to the Firewall Policy.

threatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

threatIntelligenceMode String

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

tlsCertificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

resourceGroupName string

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

basePolicyId string

The ID of the base Firewall Policy.

dns FirewallPolicyDnsArgs

A dns block as defined below.

identity FirewallPolicyIdentityArgs

An identity block as defined below.

insights FirewallPolicyInsightsArgs

An insights block as defined below.

intrusionDetection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

location string

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

name string

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

privateIpRanges string[]

A list of private IP ranges to which traffic will not be SNAT.

sku string

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

tags {[key: string]: string}

A mapping of tags which should be assigned to the Firewall Policy.

threatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

threatIntelligenceMode string

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

tlsCertificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

resource_group_name str

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

base_policy_id str

The ID of the base Firewall Policy.

dns FirewallPolicyDnsArgs

A dns block as defined below.

identity FirewallPolicyIdentityArgs

An identity block as defined below.

insights FirewallPolicyInsightsArgs

An insights block as defined below.

intrusion_detection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

location str

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

name str

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

private_ip_ranges Sequence[str]

A list of private IP ranges to which traffic will not be SNAT.

sku str

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

tags Mapping[str, str]

A mapping of tags which should be assigned to the Firewall Policy.

threat_intelligence_allowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

threat_intelligence_mode str

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

tls_certificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

resourceGroupName String

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

basePolicyId String

The ID of the base Firewall Policy.

dns Property Map

A dns block as defined below.

identity Property Map

An identity block as defined below.

insights Property Map

An insights block as defined below.

intrusionDetection Property Map

A intrusion_detection block as defined below.

location String

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

name String

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

privateIpRanges List<String>

A list of private IP ranges to which traffic will not be SNAT.

sku String

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

tags Map<String>

A mapping of tags which should be assigned to the Firewall Policy.

threatIntelligenceAllowlist Property Map

A threat_intelligence_allowlist block as defined below.

threatIntelligenceMode String

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

tlsCertificate Property Map

A tls_certificate block as defined below.

Outputs

All input properties are implicitly available as output properties. Additionally, the FirewallPolicy resource produces the following output properties:

ChildPolicies List<string>

A list of reference to child Firewall Policies of this Firewall Policy.

Firewalls List<string>

A list of references to Azure Firewalls that this Firewall Policy is associated with.

Id string

The provider-assigned unique ID for this managed resource.

RuleCollectionGroups List<string>

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

ChildPolicies []string

A list of reference to child Firewall Policies of this Firewall Policy.

Firewalls []string

A list of references to Azure Firewalls that this Firewall Policy is associated with.

Id string

The provider-assigned unique ID for this managed resource.

RuleCollectionGroups []string

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

childPolicies List<String>

A list of reference to child Firewall Policies of this Firewall Policy.

firewalls List<String>

A list of references to Azure Firewalls that this Firewall Policy is associated with.

id String

The provider-assigned unique ID for this managed resource.

ruleCollectionGroups List<String>

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

childPolicies string[]

A list of reference to child Firewall Policies of this Firewall Policy.

firewalls string[]

A list of references to Azure Firewalls that this Firewall Policy is associated with.

id string

The provider-assigned unique ID for this managed resource.

ruleCollectionGroups string[]

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

child_policies Sequence[str]

A list of reference to child Firewall Policies of this Firewall Policy.

firewalls Sequence[str]

A list of references to Azure Firewalls that this Firewall Policy is associated with.

id str

The provider-assigned unique ID for this managed resource.

rule_collection_groups Sequence[str]

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

childPolicies List<String>

A list of reference to child Firewall Policies of this Firewall Policy.

firewalls List<String>

A list of references to Azure Firewalls that this Firewall Policy is associated with.

id String

The provider-assigned unique ID for this managed resource.

ruleCollectionGroups List<String>

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

Look up an Existing FirewallPolicy Resource

Get an existing FirewallPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: FirewallPolicyState, opts?: CustomResourceOptions): FirewallPolicy
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        base_policy_id: Optional[str] = None,
        child_policies: Optional[Sequence[str]] = None,
        dns: Optional[FirewallPolicyDnsArgs] = None,
        firewalls: Optional[Sequence[str]] = None,
        identity: Optional[FirewallPolicyIdentityArgs] = None,
        insights: Optional[FirewallPolicyInsightsArgs] = None,
        intrusion_detection: Optional[FirewallPolicyIntrusionDetectionArgs] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        private_ip_ranges: Optional[Sequence[str]] = None,
        resource_group_name: Optional[str] = None,
        rule_collection_groups: Optional[Sequence[str]] = None,
        sku: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        threat_intelligence_allowlist: Optional[FirewallPolicyThreatIntelligenceAllowlistArgs] = None,
        threat_intelligence_mode: Optional[str] = None,
        tls_certificate: Optional[FirewallPolicyTlsCertificateArgs] = None) -> FirewallPolicy
func GetFirewallPolicy(ctx *Context, name string, id IDInput, state *FirewallPolicyState, opts ...ResourceOption) (*FirewallPolicy, error)
public static FirewallPolicy Get(string name, Input<string> id, FirewallPolicyState? state, CustomResourceOptions? opts = null)
public static FirewallPolicy get(String name, Output<String> id, FirewallPolicyState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
BasePolicyId string

The ID of the base Firewall Policy.

ChildPolicies List<string>

A list of reference to child Firewall Policies of this Firewall Policy.

Dns FirewallPolicyDnsArgs

A dns block as defined below.

Firewalls List<string>

A list of references to Azure Firewalls that this Firewall Policy is associated with.

Identity FirewallPolicyIdentityArgs

An identity block as defined below.

Insights FirewallPolicyInsightsArgs

An insights block as defined below.

IntrusionDetection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

Location string

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

Name string

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

PrivateIpRanges List<string>

A list of private IP ranges to which traffic will not be SNAT.

ResourceGroupName string

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

RuleCollectionGroups List<string>

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

Sku string

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

Tags Dictionary<string, string>

A mapping of tags which should be assigned to the Firewall Policy.

ThreatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

ThreatIntelligenceMode string

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

TlsCertificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

BasePolicyId string

The ID of the base Firewall Policy.

ChildPolicies []string

A list of reference to child Firewall Policies of this Firewall Policy.

Dns FirewallPolicyDnsArgs

A dns block as defined below.

Firewalls []string

A list of references to Azure Firewalls that this Firewall Policy is associated with.

Identity FirewallPolicyIdentityArgs

An identity block as defined below.

Insights FirewallPolicyInsightsArgs

An insights block as defined below.

IntrusionDetection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

Location string

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

Name string

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

PrivateIpRanges []string

A list of private IP ranges to which traffic will not be SNAT.

ResourceGroupName string

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

RuleCollectionGroups []string

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

Sku string

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

Tags map[string]string

A mapping of tags which should be assigned to the Firewall Policy.

ThreatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

ThreatIntelligenceMode string

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

TlsCertificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

basePolicyId String

The ID of the base Firewall Policy.

childPolicies List<String>

A list of reference to child Firewall Policies of this Firewall Policy.

dns FirewallPolicyDnsArgs

A dns block as defined below.

firewalls List<String>

A list of references to Azure Firewalls that this Firewall Policy is associated with.

identity FirewallPolicyIdentityArgs

An identity block as defined below.

insights FirewallPolicyInsightsArgs

An insights block as defined below.

intrusionDetection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

location String

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

name String

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

privateIpRanges List<String>

A list of private IP ranges to which traffic will not be SNAT.

resourceGroupName String

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

ruleCollectionGroups List<String>

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

sku String

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

tags Map<String,String>

A mapping of tags which should be assigned to the Firewall Policy.

threatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

threatIntelligenceMode String

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

tlsCertificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

basePolicyId string

The ID of the base Firewall Policy.

childPolicies string[]

A list of reference to child Firewall Policies of this Firewall Policy.

dns FirewallPolicyDnsArgs

A dns block as defined below.

firewalls string[]

A list of references to Azure Firewalls that this Firewall Policy is associated with.

identity FirewallPolicyIdentityArgs

An identity block as defined below.

insights FirewallPolicyInsightsArgs

An insights block as defined below.

intrusionDetection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

location string

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

name string

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

privateIpRanges string[]

A list of private IP ranges to which traffic will not be SNAT.

resourceGroupName string

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

ruleCollectionGroups string[]

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

sku string

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

tags {[key: string]: string}

A mapping of tags which should be assigned to the Firewall Policy.

threatIntelligenceAllowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

threatIntelligenceMode string

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

tlsCertificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

base_policy_id str

The ID of the base Firewall Policy.

child_policies Sequence[str]

A list of reference to child Firewall Policies of this Firewall Policy.

dns FirewallPolicyDnsArgs

A dns block as defined below.

firewalls Sequence[str]

A list of references to Azure Firewalls that this Firewall Policy is associated with.

identity FirewallPolicyIdentityArgs

An identity block as defined below.

insights FirewallPolicyInsightsArgs

An insights block as defined below.

intrusion_detection FirewallPolicyIntrusionDetectionArgs

A intrusion_detection block as defined below.

location str

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

name str

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

private_ip_ranges Sequence[str]

A list of private IP ranges to which traffic will not be SNAT.

resource_group_name str

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

rule_collection_groups Sequence[str]

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

sku str

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

tags Mapping[str, str]

A mapping of tags which should be assigned to the Firewall Policy.

threat_intelligence_allowlist FirewallPolicyThreatIntelligenceAllowlistArgs

A threat_intelligence_allowlist block as defined below.

threat_intelligence_mode str

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

tls_certificate FirewallPolicyTlsCertificateArgs

A tls_certificate block as defined below.

basePolicyId String

The ID of the base Firewall Policy.

childPolicies List<String>

A list of reference to child Firewall Policies of this Firewall Policy.

dns Property Map

A dns block as defined below.

firewalls List<String>

A list of references to Azure Firewalls that this Firewall Policy is associated with.

identity Property Map

An identity block as defined below.

insights Property Map

An insights block as defined below.

intrusionDetection Property Map

A intrusion_detection block as defined below.

location String

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

name String

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

privateIpRanges List<String>

A list of private IP ranges to which traffic will not be SNAT.

resourceGroupName String

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

ruleCollectionGroups List<String>

A list of references to Firewall Policy Rule Collection Groups that belongs to this Firewall Policy.

sku String

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium. Changing this forces a new Firewall Policy to be created.

tags Map<String>

A mapping of tags which should be assigned to the Firewall Policy.

threatIntelligenceAllowlist Property Map

A threat_intelligence_allowlist block as defined below.

threatIntelligenceMode String

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

tlsCertificate Property Map

A tls_certificate block as defined below.

Supporting Types

FirewallPolicyDns

ProxyEnabled bool

Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.

Servers List<string>

A list of custom DNS servers' IP addresses.

ProxyEnabled bool

Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.

Servers []string

A list of custom DNS servers' IP addresses.

proxyEnabled Boolean

Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.

servers List<String>

A list of custom DNS servers' IP addresses.

proxyEnabled boolean

Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.

servers string[]

A list of custom DNS servers' IP addresses.

proxy_enabled bool

Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.

servers Sequence[str]

A list of custom DNS servers' IP addresses.

proxyEnabled Boolean

Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to false.

servers List<String>

A list of custom DNS servers' IP addresses.

FirewallPolicyIdentity

IdentityIds List<string>

Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.

Type string

Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

IdentityIds []string

Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.

Type string

Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

identityIds List<String>

Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.

type String

Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

identityIds string[]

Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.

type string

Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

identity_ids Sequence[str]

Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.

type str

Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

identityIds List<String>

Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.

type String

Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is UserAssigned.

FirewallPolicyInsights

DefaultLogAnalyticsWorkspaceId string

The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.

Enabled bool

Whether the insights functionality is enabled for this Firewall Policy.

LogAnalyticsWorkspaces List<FirewallPolicyInsightsLogAnalyticsWorkspace>

A list of log_analytics_workspace block as defined below.

RetentionInDays int

The log retention period in days.

DefaultLogAnalyticsWorkspaceId string

The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.

Enabled bool

Whether the insights functionality is enabled for this Firewall Policy.

LogAnalyticsWorkspaces []FirewallPolicyInsightsLogAnalyticsWorkspace

A list of log_analytics_workspace block as defined below.

RetentionInDays int

The log retention period in days.

defaultLogAnalyticsWorkspaceId String

The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.

enabled Boolean

Whether the insights functionality is enabled for this Firewall Policy.

logAnalyticsWorkspaces List<FirewallPolicyInsightsLogAnalyticsWorkspace>

A list of log_analytics_workspace block as defined below.

retentionInDays Integer

The log retention period in days.

defaultLogAnalyticsWorkspaceId string

The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.

enabled boolean

Whether the insights functionality is enabled for this Firewall Policy.

logAnalyticsWorkspaces FirewallPolicyInsightsLogAnalyticsWorkspace[]

A list of log_analytics_workspace block as defined below.

retentionInDays number

The log retention period in days.

default_log_analytics_workspace_id str

The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.

enabled bool

Whether the insights functionality is enabled for this Firewall Policy.

log_analytics_workspaces Sequence[FirewallPolicyInsightsLogAnalyticsWorkspace]

A list of log_analytics_workspace block as defined below.

retention_in_days int

The log retention period in days.

defaultLogAnalyticsWorkspaceId String

The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the log_analytics_workspace.

enabled Boolean

Whether the insights functionality is enabled for this Firewall Policy.

logAnalyticsWorkspaces List<Property Map>

A list of log_analytics_workspace block as defined below.

retentionInDays Number

The log retention period in days.

FirewallPolicyInsightsLogAnalyticsWorkspace

FirewallLocation string

The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.

Id string

The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

FirewallLocation string

The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.

Id string

The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

firewallLocation String

The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.

id String

The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

firewallLocation string

The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.

id string

The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

firewall_location str

The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.

id str

The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

firewallLocation String

The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.

id String

The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the firewall_location.

FirewallPolicyIntrusionDetection

Mode string

In which mode you want to run intrusion detection: Off, Alert or Deny.

SignatureOverrides List<FirewallPolicyIntrusionDetectionSignatureOverride>

One or more signature_overrides blocks as defined below.

TrafficBypasses List<FirewallPolicyIntrusionDetectionTrafficBypass>

One or more traffic_bypass blocks as defined below.

Mode string

In which mode you want to run intrusion detection: Off, Alert or Deny.

SignatureOverrides []FirewallPolicyIntrusionDetectionSignatureOverride

One or more signature_overrides blocks as defined below.

TrafficBypasses []FirewallPolicyIntrusionDetectionTrafficBypass

One or more traffic_bypass blocks as defined below.

mode String

In which mode you want to run intrusion detection: Off, Alert or Deny.

signatureOverrides List<FirewallPolicyIntrusionDetectionSignatureOverride>

One or more signature_overrides blocks as defined below.

trafficBypasses List<FirewallPolicyIntrusionDetectionTrafficBypass>

One or more traffic_bypass blocks as defined below.

mode string

In which mode you want to run intrusion detection: Off, Alert or Deny.

signatureOverrides FirewallPolicyIntrusionDetectionSignatureOverride[]

One or more signature_overrides blocks as defined below.

trafficBypasses FirewallPolicyIntrusionDetectionTrafficBypass[]

One or more traffic_bypass blocks as defined below.

mode str

In which mode you want to run intrusion detection: Off, Alert or Deny.

signature_overrides Sequence[FirewallPolicyIntrusionDetectionSignatureOverride]

One or more signature_overrides blocks as defined below.

traffic_bypasses Sequence[FirewallPolicyIntrusionDetectionTrafficBypass]

One or more traffic_bypass blocks as defined below.

mode String

In which mode you want to run intrusion detection: Off, Alert or Deny.

signatureOverrides List<Property Map>

One or more signature_overrides blocks as defined below.

trafficBypasses List<Property Map>

One or more traffic_bypass blocks as defined below.

FirewallPolicyIntrusionDetectionSignatureOverride

Id string

12-digit number (id) which identifies your signature.

State string

state can be any of Off, Alert or Deny.

Id string

12-digit number (id) which identifies your signature.

State string

state can be any of Off, Alert or Deny.

id String

12-digit number (id) which identifies your signature.

state String

state can be any of Off, Alert or Deny.

id string

12-digit number (id) which identifies your signature.

state string

state can be any of Off, Alert or Deny.

id str

12-digit number (id) which identifies your signature.

state str

state can be any of Off, Alert or Deny.

id String

12-digit number (id) which identifies your signature.

state String

state can be any of Off, Alert or Deny.

FirewallPolicyIntrusionDetectionTrafficBypass

Name string

The name which should be used for this bypass traffic setting.

Protocol string

The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.

Description string

The description for this bypass traffic setting.

DestinationAddresses List<string>

Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.

DestinationIpGroups List<string>

Specifies a list of destination IP groups that shall be bypassed by intrusion detection.

DestinationPorts List<string>

Specifies a list of destination IP ports that shall be bypassed by intrusion detection.

SourceAddresses List<string>

Specifies a list of source addresses that shall be bypassed by intrusion detection.

SourceIpGroups List<string>

Specifies a list of source IP groups that shall be bypassed by intrusion detection.

Name string

The name which should be used for this bypass traffic setting.

Protocol string

The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.

Description string

The description for this bypass traffic setting.

DestinationAddresses []string

Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.

DestinationIpGroups []string

Specifies a list of destination IP groups that shall be bypassed by intrusion detection.

DestinationPorts []string

Specifies a list of destination IP ports that shall be bypassed by intrusion detection.

SourceAddresses []string

Specifies a list of source addresses that shall be bypassed by intrusion detection.

SourceIpGroups []string

Specifies a list of source IP groups that shall be bypassed by intrusion detection.

name String

The name which should be used for this bypass traffic setting.

protocol String

The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.

description String

The description for this bypass traffic setting.

destinationAddresses List<String>

Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.

destinationIpGroups List<String>

Specifies a list of destination IP groups that shall be bypassed by intrusion detection.

destinationPorts List<String>

Specifies a list of destination IP ports that shall be bypassed by intrusion detection.

sourceAddresses List<String>

Specifies a list of source addresses that shall be bypassed by intrusion detection.

sourceIpGroups List<String>

Specifies a list of source IP groups that shall be bypassed by intrusion detection.

name string

The name which should be used for this bypass traffic setting.

protocol string

The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.

description string

The description for this bypass traffic setting.

destinationAddresses string[]

Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.

destinationIpGroups string[]

Specifies a list of destination IP groups that shall be bypassed by intrusion detection.

destinationPorts string[]

Specifies a list of destination IP ports that shall be bypassed by intrusion detection.

sourceAddresses string[]

Specifies a list of source addresses that shall be bypassed by intrusion detection.

sourceIpGroups string[]

Specifies a list of source IP groups that shall be bypassed by intrusion detection.

name str

The name which should be used for this bypass traffic setting.

protocol str

The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.

description str

The description for this bypass traffic setting.

destination_addresses Sequence[str]

Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.

destination_ip_groups Sequence[str]

Specifies a list of destination IP groups that shall be bypassed by intrusion detection.

destination_ports Sequence[str]

Specifies a list of destination IP ports that shall be bypassed by intrusion detection.

source_addresses Sequence[str]

Specifies a list of source addresses that shall be bypassed by intrusion detection.

source_ip_groups Sequence[str]

Specifies a list of source IP groups that shall be bypassed by intrusion detection.

name String

The name which should be used for this bypass traffic setting.

protocol String

The protocols any of ANY, TCP, ICMP, UDP that shall be bypassed by intrusion detection.

description String

The description for this bypass traffic setting.

destinationAddresses List<String>

Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.

destinationIpGroups List<String>

Specifies a list of destination IP groups that shall be bypassed by intrusion detection.

destinationPorts List<String>

Specifies a list of destination IP ports that shall be bypassed by intrusion detection.

sourceAddresses List<String>

Specifies a list of source addresses that shall be bypassed by intrusion detection.

sourceIpGroups List<String>

Specifies a list of source IP groups that shall be bypassed by intrusion detection.

FirewallPolicyThreatIntelligenceAllowlist

Fqdns List<string>

A list of FQDNs that will be skipped for threat detection.

IpAddresses List<string>

A list of IP addresses or CIDR ranges that will be skipped for threat detection.

Fqdns []string

A list of FQDNs that will be skipped for threat detection.

IpAddresses []string

A list of IP addresses or CIDR ranges that will be skipped for threat detection.

fqdns List<String>

A list of FQDNs that will be skipped for threat detection.

ipAddresses List<String>

A list of IP addresses or CIDR ranges that will be skipped for threat detection.

fqdns string[]

A list of FQDNs that will be skipped for threat detection.

ipAddresses string[]

A list of IP addresses or CIDR ranges that will be skipped for threat detection.

fqdns Sequence[str]

A list of FQDNs that will be skipped for threat detection.

ip_addresses Sequence[str]

A list of IP addresses or CIDR ranges that will be skipped for threat detection.

fqdns List<String>

A list of FQDNs that will be skipped for threat detection.

ipAddresses List<String>

A list of IP addresses or CIDR ranges that will be skipped for threat detection.

FirewallPolicyTlsCertificate

KeyVaultSecretId string

The ID of the Key Vault, where the secret or certificate is stored.

Name string

The name of the certificate.

KeyVaultSecretId string

The ID of the Key Vault, where the secret or certificate is stored.

Name string

The name of the certificate.

keyVaultSecretId String

The ID of the Key Vault, where the secret or certificate is stored.

name String

The name of the certificate.

keyVaultSecretId string

The ID of the Key Vault, where the secret or certificate is stored.

name string

The name of the certificate.

key_vault_secret_id str

The ID of the Key Vault, where the secret or certificate is stored.

name str

The name of the certificate.

keyVaultSecretId String

The ID of the Key Vault, where the secret or certificate is stored.

name String

The name of the certificate.

Import

Firewall Policies can be imported using the resource id, e.g.

 $ pulumi import azure:network/firewallPolicy:FirewallPolicy example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.Network/firewallPolicies/policy1

Package Details

Repository
https://github.com/pulumi/pulumi-azure
License
Apache-2.0
Notes

This Pulumi package is based on the azurerm Terraform Provider.