Docs Home
We recommend using Azure Native.
Azure v6.24.0 published on Wednesday, Jun 18, 2025 by Pulumi
azure.network.FirewallPolicyRuleCollectionGroup
Explore with Pulumi AI
Manages a Firewall Policy Rule Collection Group.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = new azure.core.ResourceGroup("example", {
name: "example-resources",
location: "West Europe",
});
const exampleFirewallPolicy = new azure.network.FirewallPolicy("example", {
name: "example-fwpolicy",
resourceGroupName: example.name,
location: example.location,
});
const exampleFirewallPolicyRuleCollectionGroup = new azure.network.FirewallPolicyRuleCollectionGroup("example", {
name: "example-fwpolicy-rcg",
firewallPolicyId: exampleFirewallPolicy.id,
priority: 500,
applicationRuleCollections: [{
name: "app_rule_collection1",
priority: 500,
action: "Deny",
rules: [{
name: "app_rule_collection1_rule1",
protocols: [
{
type: "Http",
port: 80,
},
{
type: "Https",
port: 443,
},
],
sourceAddresses: ["10.0.0.1"],
destinationFqdns: ["*.microsoft.com"],
}],
}],
networkRuleCollections: [{
name: "network_rule_collection1",
priority: 400,
action: "Deny",
rules: [{
name: "network_rule_collection1_rule1",
protocols: [
"TCP",
"UDP",
],
sourceAddresses: ["10.0.0.1"],
destinationAddresses: [
"192.168.1.1",
"192.168.1.2",
],
destinationPorts: [
"80",
"1000-2000",
],
}],
}],
natRuleCollections: [{
name: "nat_rule_collection1",
priority: 300,
action: "Dnat",
rules: [{
name: "nat_rule_collection1_rule1",
protocols: [
"TCP",
"UDP",
],
sourceAddresses: [
"10.0.0.1",
"10.0.0.2",
],
destinationAddress: "192.168.1.1",
destinationPorts: "80",
translatedAddress: "192.168.0.1",
translatedPort: 8080,
}],
}],
});
import pulumi
import pulumi_azure as azure
example = azure.core.ResourceGroup("example",
name="example-resources",
location="West Europe")
example_firewall_policy = azure.network.FirewallPolicy("example",
name="example-fwpolicy",
resource_group_name=example.name,
location=example.location)
example_firewall_policy_rule_collection_group = azure.network.FirewallPolicyRuleCollectionGroup("example",
name="example-fwpolicy-rcg",
firewall_policy_id=example_firewall_policy.id,
priority=500,
application_rule_collections=[{
"name": "app_rule_collection1",
"priority": 500,
"action": "Deny",
"rules": [{
"name": "app_rule_collection1_rule1",
"protocols": [
{
"type": "Http",
"port": 80,
},
{
"type": "Https",
"port": 443,
},
],
"source_addresses": ["10.0.0.1"],
"destination_fqdns": ["*.microsoft.com"],
}],
}],
network_rule_collections=[{
"name": "network_rule_collection1",
"priority": 400,
"action": "Deny",
"rules": [{
"name": "network_rule_collection1_rule1",
"protocols": [
"TCP",
"UDP",
],
"source_addresses": ["10.0.0.1"],
"destination_addresses": [
"192.168.1.1",
"192.168.1.2",
],
"destination_ports": [
"80",
"1000-2000",
],
}],
}],
nat_rule_collections=[{
"name": "nat_rule_collection1",
"priority": 300,
"action": "Dnat",
"rules": [{
"name": "nat_rule_collection1_rule1",
"protocols": [
"TCP",
"UDP",
],
"source_addresses": [
"10.0.0.1",
"10.0.0.2",
],
"destination_address": "192.168.1.1",
"destination_ports": "80",
"translated_address": "192.168.0.1",
"translated_port": 8080,
}],
}])
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/network"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
Name: pulumi.String("example-resources"),
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleFirewallPolicy, err := network.NewFirewallPolicy(ctx, "example", &network.FirewallPolicyArgs{
Name: pulumi.String("example-fwpolicy"),
ResourceGroupName: example.Name,
Location: example.Location,
})
if err != nil {
return err
}
_, err = network.NewFirewallPolicyRuleCollectionGroup(ctx, "example", &network.FirewallPolicyRuleCollectionGroupArgs{
Name: pulumi.String("example-fwpolicy-rcg"),
FirewallPolicyId: exampleFirewallPolicy.ID(),
Priority: pulumi.Int(500),
ApplicationRuleCollections: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs{
Name: pulumi.String("app_rule_collection1"),
Priority: pulumi.Int(500),
Action: pulumi.String("Deny"),
Rules: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs{
Name: pulumi.String("app_rule_collection1_rule1"),
Protocols: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs{
Type: pulumi.String("Http"),
Port: pulumi.Int(80),
},
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs{
Type: pulumi.String("Https"),
Port: pulumi.Int(443),
},
},
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.1"),
},
DestinationFqdns: pulumi.StringArray{
pulumi.String("*.microsoft.com"),
},
},
},
},
},
NetworkRuleCollections: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs{
Name: pulumi.String("network_rule_collection1"),
Priority: pulumi.Int(400),
Action: pulumi.String("Deny"),
Rules: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs{
Name: pulumi.String("network_rule_collection1_rule1"),
Protocols: pulumi.StringArray{
pulumi.String("TCP"),
pulumi.String("UDP"),
},
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.1"),
},
DestinationAddresses: pulumi.StringArray{
pulumi.String("192.168.1.1"),
pulumi.String("192.168.1.2"),
},
DestinationPorts: pulumi.StringArray{
pulumi.String("80"),
pulumi.String("1000-2000"),
},
},
},
},
},
NatRuleCollections: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs{
Name: pulumi.String("nat_rule_collection1"),
Priority: pulumi.Int(300),
Action: pulumi.String("Dnat"),
Rules: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs{
Name: pulumi.String("nat_rule_collection1_rule1"),
Protocols: pulumi.StringArray{
pulumi.String("TCP"),
pulumi.String("UDP"),
},
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.1"),
pulumi.String("10.0.0.2"),
},
DestinationAddress: pulumi.String("192.168.1.1"),
DestinationPorts: pulumi.String("80"),
TranslatedAddress: pulumi.String("192.168.0.1"),
TranslatedPort: pulumi.Int(8080),
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var example = new Azure.Core.ResourceGroup("example", new()
{
Name = "example-resources",
Location = "West Europe",
});
var exampleFirewallPolicy = new Azure.Network.FirewallPolicy("example", new()
{
Name = "example-fwpolicy",
ResourceGroupName = example.Name,
Location = example.Location,
});
var exampleFirewallPolicyRuleCollectionGroup = new Azure.Network.FirewallPolicyRuleCollectionGroup("example", new()
{
Name = "example-fwpolicy-rcg",
FirewallPolicyId = exampleFirewallPolicy.Id,
Priority = 500,
ApplicationRuleCollections = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs
{
Name = "app_rule_collection1",
Priority = 500,
Action = "Deny",
Rules = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs
{
Name = "app_rule_collection1_rule1",
Protocols = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
{
Type = "Http",
Port = 80,
},
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
{
Type = "Https",
Port = 443,
},
},
SourceAddresses = new[]
{
"10.0.0.1",
},
DestinationFqdns = new[]
{
"*.microsoft.com",
},
},
},
},
},
NetworkRuleCollections = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs
{
Name = "network_rule_collection1",
Priority = 400,
Action = "Deny",
Rules = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs
{
Name = "network_rule_collection1_rule1",
Protocols = new[]
{
"TCP",
"UDP",
},
SourceAddresses = new[]
{
"10.0.0.1",
},
DestinationAddresses = new[]
{
"192.168.1.1",
"192.168.1.2",
},
DestinationPorts = new[]
{
"80",
"1000-2000",
},
},
},
},
},
NatRuleCollections = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs
{
Name = "nat_rule_collection1",
Priority = 300,
Action = "Dnat",
Rules = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs
{
Name = "nat_rule_collection1_rule1",
Protocols = new[]
{
"TCP",
"UDP",
},
SourceAddresses = new[]
{
"10.0.0.1",
"10.0.0.2",
},
DestinationAddress = "192.168.1.1",
DestinationPorts = "80",
TranslatedAddress = "192.168.0.1",
TranslatedPort = 8080,
},
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.FirewallPolicy;
import com.pulumi.azure.network.FirewallPolicyArgs;
import com.pulumi.azure.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azure.network.FirewallPolicyRuleCollectionGroupArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ResourceGroup("example", ResourceGroupArgs.builder()
.name("example-resources")
.location("West Europe")
.build());
var exampleFirewallPolicy = new FirewallPolicy("exampleFirewallPolicy", FirewallPolicyArgs.builder()
.name("example-fwpolicy")
.resourceGroupName(example.name())
.location(example.location())
.build());
var exampleFirewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
.name("example-fwpolicy-rcg")
.firewallPolicyId(exampleFirewallPolicy.id())
.priority(500)
.applicationRuleCollections(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs.builder()
.name("app_rule_collection1")
.priority(500)
.action("Deny")
.rules(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs.builder()
.name("app_rule_collection1_rule1")
.protocols(
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
.type("Http")
.port(80)
.build(),
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
.type("Https")
.port(443)
.build())
.sourceAddresses("10.0.0.1")
.destinationFqdns("*.microsoft.com")
.build())
.build())
.networkRuleCollections(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs.builder()
.name("network_rule_collection1")
.priority(400)
.action("Deny")
.rules(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs.builder()
.name("network_rule_collection1_rule1")
.protocols(
"TCP",
"UDP")
.sourceAddresses("10.0.0.1")
.destinationAddresses(
"192.168.1.1",
"192.168.1.2")
.destinationPorts(
"80",
"1000-2000")
.build())
.build())
.natRuleCollections(FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs.builder()
.name("nat_rule_collection1")
.priority(300)
.action("Dnat")
.rules(FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs.builder()
.name("nat_rule_collection1_rule1")
.protocols(
"TCP",
"UDP")
.sourceAddresses(
"10.0.0.1",
"10.0.0.2")
.destinationAddress("192.168.1.1")
.destinationPorts("80")
.translatedAddress("192.168.0.1")
.translatedPort(8080)
.build())
.build())
.build());
}
}
resources:
example:
type: azure:core:ResourceGroup
properties:
name: example-resources
location: West Europe
exampleFirewallPolicy:
type: azure:network:FirewallPolicy
name: example
properties:
name: example-fwpolicy
resourceGroupName: ${example.name}
location: ${example.location}
exampleFirewallPolicyRuleCollectionGroup:
type: azure:network:FirewallPolicyRuleCollectionGroup
name: example
properties:
name: example-fwpolicy-rcg
firewallPolicyId: ${exampleFirewallPolicy.id}
priority: 500
applicationRuleCollections:
- name: app_rule_collection1
priority: 500
action: Deny
rules:
- name: app_rule_collection1_rule1
protocols:
- type: Http
port: 80
- type: Https
port: 443
sourceAddresses:
- 10.0.0.1
destinationFqdns:
- '*.microsoft.com'
networkRuleCollections:
- name: network_rule_collection1
priority: 400
action: Deny
rules:
- name: network_rule_collection1_rule1
protocols:
- TCP
- UDP
sourceAddresses:
- 10.0.0.1
destinationAddresses:
- 192.168.1.1
- 192.168.1.2
destinationPorts:
- '80'
- 1000-2000
natRuleCollections:
- name: nat_rule_collection1
priority: 300
action: Dnat
rules:
- name: nat_rule_collection1_rule1
protocols:
- TCP
- UDP
sourceAddresses:
- 10.0.0.1
- 10.0.0.2
destinationAddress: 192.168.1.1
destinationPorts: '80'
translatedAddress: 192.168.0.1
translatedPort: '8080'
API Providers
This resource uses the following Azure API Providers:
Microsoft.Network: 2024-05-01
Create FirewallPolicyRuleCollectionGroup Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new FirewallPolicyRuleCollectionGroup(name: string, args: FirewallPolicyRuleCollectionGroupArgs, opts?: CustomResourceOptions);@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
args: FirewallPolicyRuleCollectionGroupArgs,
opts: Optional[ResourceOptions] = None)
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
opts: Optional[ResourceOptions] = None,
firewall_policy_id: Optional[str] = None,
priority: Optional[int] = None,
application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
name: Optional[str] = None,
nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None)func NewFirewallPolicyRuleCollectionGroup(ctx *Context, name string, args FirewallPolicyRuleCollectionGroupArgs, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)public FirewallPolicyRuleCollectionGroup(string name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions? opts = null)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions options)
type: azure:network:FirewallPolicyRuleCollectionGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var firewallPolicyRuleCollectionGroupResource = new Azure.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", new()
{
FirewallPolicyId = "string",
Priority = 0,
ApplicationRuleCollections = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs
{
Action = "string",
Name = "string",
Priority = 0,
Rules = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs
{
Name = "string",
Description = "string",
DestinationAddresses = new[]
{
"string",
},
DestinationFqdnTags = new[]
{
"string",
},
DestinationFqdns = new[]
{
"string",
},
DestinationUrls = new[]
{
"string",
},
HttpHeaders = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeaderArgs
{
Name = "string",
Value = "string",
},
},
Protocols = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
{
Port = 0,
Type = "string",
},
},
SourceAddresses = new[]
{
"string",
},
SourceIpGroups = new[]
{
"string",
},
TerminateTls = false,
WebCategories = new[]
{
"string",
},
},
},
},
},
Name = "string",
NatRuleCollections = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs
{
Action = "string",
Name = "string",
Priority = 0,
Rules = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs
{
Name = "string",
Protocols = new[]
{
"string",
},
TranslatedPort = 0,
Description = "string",
DestinationAddress = "string",
DestinationPorts = "string",
SourceAddresses = new[]
{
"string",
},
SourceIpGroups = new[]
{
"string",
},
TranslatedAddress = "string",
TranslatedFqdn = "string",
},
},
},
},
NetworkRuleCollections = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs
{
Action = "string",
Name = "string",
Priority = 0,
Rules = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs
{
DestinationPorts = new[]
{
"string",
},
Name = "string",
Protocols = new[]
{
"string",
},
Description = "string",
DestinationAddresses = new[]
{
"string",
},
DestinationFqdns = new[]
{
"string",
},
DestinationIpGroups = new[]
{
"string",
},
SourceAddresses = new[]
{
"string",
},
SourceIpGroups = new[]
{
"string",
},
},
},
},
},
});
example, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroupResource", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyId: pulumi.String("string"),
Priority: pulumi.Int(0),
ApplicationRuleCollections: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs{
Action: pulumi.String("string"),
Name: pulumi.String("string"),
Priority: pulumi.Int(0),
Rules: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs{
Name: pulumi.String("string"),
Description: pulumi.String("string"),
DestinationAddresses: pulumi.StringArray{
pulumi.String("string"),
},
DestinationFqdnTags: pulumi.StringArray{
pulumi.String("string"),
},
DestinationFqdns: pulumi.StringArray{
pulumi.String("string"),
},
DestinationUrls: pulumi.StringArray{
pulumi.String("string"),
},
HttpHeaders: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeaderArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeaderArgs{
Name: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
Protocols: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs{
Port: pulumi.Int(0),
Type: pulumi.String("string"),
},
},
SourceAddresses: pulumi.StringArray{
pulumi.String("string"),
},
SourceIpGroups: pulumi.StringArray{
pulumi.String("string"),
},
TerminateTls: pulumi.Bool(false),
WebCategories: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
Name: pulumi.String("string"),
NatRuleCollections: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs{
Action: pulumi.String("string"),
Name: pulumi.String("string"),
Priority: pulumi.Int(0),
Rules: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs{
Name: pulumi.String("string"),
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
TranslatedPort: pulumi.Int(0),
Description: pulumi.String("string"),
DestinationAddress: pulumi.String("string"),
DestinationPorts: pulumi.String("string"),
SourceAddresses: pulumi.StringArray{
pulumi.String("string"),
},
SourceIpGroups: pulumi.StringArray{
pulumi.String("string"),
},
TranslatedAddress: pulumi.String("string"),
TranslatedFqdn: pulumi.String("string"),
},
},
},
},
NetworkRuleCollections: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs{
Action: pulumi.String("string"),
Name: pulumi.String("string"),
Priority: pulumi.Int(0),
Rules: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs{
DestinationPorts: pulumi.StringArray{
pulumi.String("string"),
},
Name: pulumi.String("string"),
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
Description: pulumi.String("string"),
DestinationAddresses: pulumi.StringArray{
pulumi.String("string"),
},
DestinationFqdns: pulumi.StringArray{
pulumi.String("string"),
},
DestinationIpGroups: pulumi.StringArray{
pulumi.String("string"),
},
SourceAddresses: pulumi.StringArray{
pulumi.String("string"),
},
SourceIpGroups: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
})
var firewallPolicyRuleCollectionGroupResource = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyId("string")
.priority(0)
.applicationRuleCollections(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs.builder()
.action("string")
.name("string")
.priority(0)
.rules(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs.builder()
.name("string")
.description("string")
.destinationAddresses("string")
.destinationFqdnTags("string")
.destinationFqdns("string")
.destinationUrls("string")
.httpHeaders(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeaderArgs.builder()
.name("string")
.value("string")
.build())
.protocols(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
.port(0)
.type("string")
.build())
.sourceAddresses("string")
.sourceIpGroups("string")
.terminateTls(false)
.webCategories("string")
.build())
.build())
.name("string")
.natRuleCollections(FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs.builder()
.action("string")
.name("string")
.priority(0)
.rules(FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs.builder()
.name("string")
.protocols("string")
.translatedPort(0)
.description("string")
.destinationAddress("string")
.destinationPorts("string")
.sourceAddresses("string")
.sourceIpGroups("string")
.translatedAddress("string")
.translatedFqdn("string")
.build())
.build())
.networkRuleCollections(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs.builder()
.action("string")
.name("string")
.priority(0)
.rules(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs.builder()
.destinationPorts("string")
.name("string")
.protocols("string")
.description("string")
.destinationAddresses("string")
.destinationFqdns("string")
.destinationIpGroups("string")
.sourceAddresses("string")
.sourceIpGroups("string")
.build())
.build())
.build());
firewall_policy_rule_collection_group_resource = azure.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource",
firewall_policy_id="string",
priority=0,
application_rule_collections=[{
"action": "string",
"name": "string",
"priority": 0,
"rules": [{
"name": "string",
"description": "string",
"destination_addresses": ["string"],
"destination_fqdn_tags": ["string"],
"destination_fqdns": ["string"],
"destination_urls": ["string"],
"http_headers": [{
"name": "string",
"value": "string",
}],
"protocols": [{
"port": 0,
"type": "string",
}],
"source_addresses": ["string"],
"source_ip_groups": ["string"],
"terminate_tls": False,
"web_categories": ["string"],
}],
}],
name="string",
nat_rule_collections=[{
"action": "string",
"name": "string",
"priority": 0,
"rules": [{
"name": "string",
"protocols": ["string"],
"translated_port": 0,
"description": "string",
"destination_address": "string",
"destination_ports": "string",
"source_addresses": ["string"],
"source_ip_groups": ["string"],
"translated_address": "string",
"translated_fqdn": "string",
}],
}],
network_rule_collections=[{
"action": "string",
"name": "string",
"priority": 0,
"rules": [{
"destination_ports": ["string"],
"name": "string",
"protocols": ["string"],
"description": "string",
"destination_addresses": ["string"],
"destination_fqdns": ["string"],
"destination_ip_groups": ["string"],
"source_addresses": ["string"],
"source_ip_groups": ["string"],
}],
}])
const firewallPolicyRuleCollectionGroupResource = new azure.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", {
firewallPolicyId: "string",
priority: 0,
applicationRuleCollections: [{
action: "string",
name: "string",
priority: 0,
rules: [{
name: "string",
description: "string",
destinationAddresses: ["string"],
destinationFqdnTags: ["string"],
destinationFqdns: ["string"],
destinationUrls: ["string"],
httpHeaders: [{
name: "string",
value: "string",
}],
protocols: [{
port: 0,
type: "string",
}],
sourceAddresses: ["string"],
sourceIpGroups: ["string"],
terminateTls: false,
webCategories: ["string"],
}],
}],
name: "string",
natRuleCollections: [{
action: "string",
name: "string",
priority: 0,
rules: [{
name: "string",
protocols: ["string"],
translatedPort: 0,
description: "string",
destinationAddress: "string",
destinationPorts: "string",
sourceAddresses: ["string"],
sourceIpGroups: ["string"],
translatedAddress: "string",
translatedFqdn: "string",
}],
}],
networkRuleCollections: [{
action: "string",
name: "string",
priority: 0,
rules: [{
destinationPorts: ["string"],
name: "string",
protocols: ["string"],
description: "string",
destinationAddresses: ["string"],
destinationFqdns: ["string"],
destinationIpGroups: ["string"],
sourceAddresses: ["string"],
sourceIpGroups: ["string"],
}],
}],
});
type: azure:network:FirewallPolicyRuleCollectionGroup
properties:
applicationRuleCollections:
- action: string
name: string
priority: 0
rules:
- description: string
destinationAddresses:
- string
destinationFqdnTags:
- string
destinationFqdns:
- string
destinationUrls:
- string
httpHeaders:
- name: string
value: string
name: string
protocols:
- port: 0
type: string
sourceAddresses:
- string
sourceIpGroups:
- string
terminateTls: false
webCategories:
- string
firewallPolicyId: string
name: string
natRuleCollections:
- action: string
name: string
priority: 0
rules:
- description: string
destinationAddress: string
destinationPorts: string
name: string
protocols:
- string
sourceAddresses:
- string
sourceIpGroups:
- string
translatedAddress: string
translatedFqdn: string
translatedPort: 0
networkRuleCollections:
- action: string
name: string
priority: 0
rules:
- description: string
destinationAddresses:
- string
destinationFqdns:
- string
destinationIpGroups:
- string
destinationPorts:
- string
name: string
protocols:
- string
sourceAddresses:
- string
sourceIpGroups:
- string
priority: 0
FirewallPolicyRuleCollectionGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The FirewallPolicyRuleCollectionGroup resource accepts the following input properties:
- Firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> - One or more
application_rule_collectionblocks as defined below. - Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> - One or more
nat_rule_collectionblocks as defined below. - Network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> - One or more
network_rule_collectionblocks as defined below.
- Firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule []FirewallCollections Policy Rule Collection Group Application Rule Collection Args - One or more
application_rule_collectionblocks as defined below. - Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule []FirewallCollections Policy Rule Collection Group Nat Rule Collection Args - One or more
nat_rule_collectionblocks as defined below. - Network
Rule []FirewallCollections Policy Rule Collection Group Network Rule Collection Args - One or more
network_rule_collectionblocks as defined below.
- firewall
Policy StringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority Integer
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> - One or more
application_rule_collectionblocks as defined below. - name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> - One or more
nat_rule_collectionblocks as defined below. - network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> - One or more
network_rule_collectionblocks as defined below.
- firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority number
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule FirewallCollections Policy Rule Collection Group Application Rule Collection[] - One or more
application_rule_collectionblocks as defined below. - name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule FirewallCollections Policy Rule Collection Group Nat Rule Collection[] - One or more
nat_rule_collectionblocks as defined below. - network
Rule FirewallCollections Policy Rule Collection Group Network Rule Collection[] - One or more
network_rule_collectionblocks as defined below.
- firewall_
policy_ strid - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Application Rule Collection Args] - One or more
application_rule_collectionblocks as defined below. - name str
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Nat Rule Collection Args] - One or more
nat_rule_collectionblocks as defined below. - network_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Network Rule Collection Args] - One or more
network_rule_collectionblocks as defined below.
- firewall
Policy StringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority Number
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<Property Map>Collections - One or more
application_rule_collectionblocks as defined below. - name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<Property Map>Collections - One or more
nat_rule_collectionblocks as defined below. - network
Rule List<Property Map>Collections - One or more
network_rule_collectionblocks as defined below.
Outputs
All input properties are implicitly available as output properties. Additionally, the FirewallPolicyRuleCollectionGroup resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing FirewallPolicyRuleCollectionGroup Resource
Get an existing FirewallPolicyRuleCollectionGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: FirewallPolicyRuleCollectionGroupState, opts?: CustomResourceOptions): FirewallPolicyRuleCollectionGroup@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
firewall_policy_id: Optional[str] = None,
name: Optional[str] = None,
nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
priority: Optional[int] = None) -> FirewallPolicyRuleCollectionGroupfunc GetFirewallPolicyRuleCollectionGroup(ctx *Context, name string, id IDInput, state *FirewallPolicyRuleCollectionGroupState, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)public static FirewallPolicyRuleCollectionGroup Get(string name, Input<string> id, FirewallPolicyRuleCollectionGroupState? state, CustomResourceOptions? opts = null)public static FirewallPolicyRuleCollectionGroup get(String name, Output<String> id, FirewallPolicyRuleCollectionGroupState state, CustomResourceOptions options)resources: _: type: azure:network:FirewallPolicyRuleCollectionGroup get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> - One or more
application_rule_collectionblocks as defined below. - Firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> - One or more
nat_rule_collectionblocks as defined below. - Network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> - One or more
network_rule_collectionblocks as defined below. - Priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule []FirewallCollections Policy Rule Collection Group Application Rule Collection Args - One or more
application_rule_collectionblocks as defined below. - Firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule []FirewallCollections Policy Rule Collection Group Nat Rule Collection Args - One or more
nat_rule_collectionblocks as defined below. - Network
Rule []FirewallCollections Policy Rule Collection Group Network Rule Collection Args - One or more
network_rule_collectionblocks as defined below. - Priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> - One or more
application_rule_collectionblocks as defined below. - firewall
Policy StringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> - One or more
nat_rule_collectionblocks as defined below. - network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> - One or more
network_rule_collectionblocks as defined below. - priority Integer
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule FirewallCollections Policy Rule Collection Group Application Rule Collection[] - One or more
application_rule_collectionblocks as defined below. - firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule FirewallCollections Policy Rule Collection Group Nat Rule Collection[] - One or more
nat_rule_collectionblocks as defined below. - network
Rule FirewallCollections Policy Rule Collection Group Network Rule Collection[] - One or more
network_rule_collectionblocks as defined below. - priority number
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Application Rule Collection Args] - One or more
application_rule_collectionblocks as defined below. - firewall_
policy_ strid - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name str
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Nat Rule Collection Args] - One or more
nat_rule_collectionblocks as defined below. - network_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Network Rule Collection Args] - One or more
network_rule_collectionblocks as defined below. - priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<Property Map>Collections - One or more
application_rule_collectionblocks as defined below. - firewall
Policy StringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<Property Map>Collections - One or more
nat_rule_collectionblocks as defined below. - network
Rule List<Property Map>Collections - One or more
network_rule_collectionblocks as defined below. - priority Number
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
Supporting Types
FirewallPolicyRuleCollectionGroupApplicationRuleCollection, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs
- Action string
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - Name string
- The name which should be used for this application rule collection.
- Priority int
- The priority of the application rule collection. The range is
100-65000. - Rules
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule> - One or more
application_ruleblocks as defined below.
- Action string
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - Name string
- The name which should be used for this application rule collection.
- Priority int
- The priority of the application rule collection. The range is
100-65000. - Rules
[]Firewall
Policy Rule Collection Group Application Rule Collection Rule - One or more
application_ruleblocks as defined below.
- action String
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - name String
- The name which should be used for this application rule collection.
- priority Integer
- The priority of the application rule collection. The range is
100-65000. - rules
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule> - One or more
application_ruleblocks as defined below.
- action string
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - name string
- The name which should be used for this application rule collection.
- priority number
- The priority of the application rule collection. The range is
100-65000. - rules
Firewall
Policy Rule Collection Group Application Rule Collection Rule[] - One or more
application_ruleblocks as defined below.
- action str
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - name str
- The name which should be used for this application rule collection.
- priority int
- The priority of the application rule collection. The range is
100-65000. - rules
Sequence[Firewall
Policy Rule Collection Group Application Rule Collection Rule] - One or more
application_ruleblocks as defined below.
- action String
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - name String
- The name which should be used for this application rule collection.
- priority Number
- The priority of the application rule collection. The range is
100-65000. - rules List<Property Map>
- One or more
application_ruleblocks as defined below.
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs
- Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Description string
- Destination
Addresses List<string> - List<string>
- Specifies a list of destination FQDN tags.
- Destination
Fqdns List<string> - Destination
Urls List<string> - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - Http
Headers List<FirewallPolicy Rule Collection Group Application Rule Collection Rule Http Header> - Specifies a list of HTTP/HTTPS headers to insert. One or more
http_headersblocks as defined below. - Protocols
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol> - Source
Addresses List<string> - Source
Ip List<string>Groups - Terminate
Tls bool - Boolean specifying if TLS shall be terminated (true) or not (false). Must be
truewhen usingdestination_urls. Needs Premium SKU for Firewall Policy. - Web
Categories List<string> - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Description string
- Destination
Addresses []string - []string
- Specifies a list of destination FQDN tags.
- Destination
Fqdns []string - Destination
Urls []string - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - Http
Headers []FirewallPolicy Rule Collection Group Application Rule Collection Rule Http Header - Specifies a list of HTTP/HTTPS headers to insert. One or more
http_headersblocks as defined below. - Protocols
[]Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol - Source
Addresses []string - Source
Ip []stringGroups - Terminate
Tls bool - Boolean specifying if TLS shall be terminated (true) or not (false). Must be
truewhen usingdestination_urls. Needs Premium SKU for Firewall Policy. - Web
Categories []string - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- description String
- destination
Addresses List<String> - List<String>
- Specifies a list of destination FQDN tags.
- destination
Fqdns List<String> - destination
Urls List<String> - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - http
Headers List<FirewallPolicy Rule Collection Group Application Rule Collection Rule Http Header> - Specifies a list of HTTP/HTTPS headers to insert. One or more
http_headersblocks as defined below. - protocols
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol> - source
Addresses List<String> - source
Ip List<String>Groups - terminate
Tls Boolean - Boolean specifying if TLS shall be terminated (true) or not (false). Must be
truewhen usingdestination_urls. Needs Premium SKU for Firewall Policy. - web
Categories List<String> - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- description string
- destination
Addresses string[] - string[]
- Specifies a list of destination FQDN tags.
- destination
Fqdns string[] - destination
Urls string[] - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - http
Headers FirewallPolicy Rule Collection Group Application Rule Collection Rule Http Header[] - Specifies a list of HTTP/HTTPS headers to insert. One or more
http_headersblocks as defined below. - protocols
Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol[] - source
Addresses string[] - source
Ip string[]Groups - terminate
Tls boolean - Boolean specifying if TLS shall be terminated (true) or not (false). Must be
truewhen usingdestination_urls. Needs Premium SKU for Firewall Policy. - web
Categories string[] - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- name str
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- description str
- destination_
addresses Sequence[str] - Sequence[str]
- Specifies a list of destination FQDN tags.
- destination_
fqdns Sequence[str] - destination_
urls Sequence[str] - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - http_
headers Sequence[FirewallPolicy Rule Collection Group Application Rule Collection Rule Http Header] - Specifies a list of HTTP/HTTPS headers to insert. One or more
http_headersblocks as defined below. - protocols
Sequence[Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol] - source_
addresses Sequence[str] - source_
ip_ Sequence[str]groups - terminate_
tls bool - Boolean specifying if TLS shall be terminated (true) or not (false). Must be
truewhen usingdestination_urls. Needs Premium SKU for Firewall Policy. - web_
categories Sequence[str] - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- description String
- destination
Addresses List<String> - List<String>
- Specifies a list of destination FQDN tags.
- destination
Fqdns List<String> - destination
Urls List<String> - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - http
Headers List<Property Map> - Specifies a list of HTTP/HTTPS headers to insert. One or more
http_headersblocks as defined below. - protocols List<Property Map>
- source
Addresses List<String> - source
Ip List<String>Groups - terminate
Tls Boolean - Boolean specifying if TLS shall be terminated (true) or not (false). Must be
truewhen usingdestination_urls. Needs Premium SKU for Firewall Policy. - web
Categories List<String> - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeader, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeaderArgs
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
FirewallPolicyRuleCollectionGroupNatRuleCollection, FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs
- Action string
- The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat. - Name string
- The name which should be used for this NAT rule collection.
- Priority int
- The priority of the NAT rule collection. The range is
100-65000. - Rules
List<Firewall
Policy Rule Collection Group Nat Rule Collection Rule> - A
nat_ruleblock as defined below.
- Action string
- The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat. - Name string
- The name which should be used for this NAT rule collection.
- Priority int
- The priority of the NAT rule collection. The range is
100-65000. - Rules
[]Firewall
Policy Rule Collection Group Nat Rule Collection Rule - A
nat_ruleblock as defined below.
- action String
- The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat. - name String
- The name which should be used for this NAT rule collection.
- priority Integer
- The priority of the NAT rule collection. The range is
100-65000. - rules
List<Firewall
Policy Rule Collection Group Nat Rule Collection Rule> - A
nat_ruleblock as defined below.
- action string
- The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat. - name string
- The name which should be used for this NAT rule collection.
- priority number
- The priority of the NAT rule collection. The range is
100-65000. - rules
Firewall
Policy Rule Collection Group Nat Rule Collection Rule[] - A
nat_ruleblock as defined below.
- action str
- The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat. - name str
- The name which should be used for this NAT rule collection.
- priority int
- The priority of the NAT rule collection. The range is
100-65000. - rules
Sequence[Firewall
Policy Rule Collection Group Nat Rule Collection Rule] - A
nat_ruleblock as defined below.
- action String
- The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat. - name String
- The name which should be used for this NAT rule collection.
- priority Number
- The priority of the NAT rule collection. The range is
100-65000. - rules List<Property Map>
- A
nat_ruleblock as defined below.
FirewallPolicyRuleCollectionGroupNatRuleCollectionRule, FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs
- Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Protocols List<string>
- Translated
Port int - Specifies the translated port.
- Description string
- Destination
Address string - The destination IP address (including CIDR).
- Destination
Ports string - Source
Addresses List<string> - Source
Ip List<string>Groups - Translated
Address string - Specifies the translated address.
- Translated
Fqdn string Specifies the translated FQDN.
Note: Exactly one of
translated_addressandtranslated_fqdnshould be set.
- Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Protocols []string
- Translated
Port int - Specifies the translated port.
- Description string
- Destination
Address string - The destination IP address (including CIDR).
- Destination
Ports string - Source
Addresses []string - Source
Ip []stringGroups - Translated
Address string - Specifies the translated address.
- Translated
Fqdn string Specifies the translated FQDN.
Note: Exactly one of
translated_addressandtranslated_fqdnshould be set.
- name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols List<String>
- translated
Port Integer - Specifies the translated port.
- description String
- destination
Address String - The destination IP address (including CIDR).
- destination
Ports String - source
Addresses List<String> - source
Ip List<String>Groups - translated
Address String - Specifies the translated address.
- translated
Fqdn String Specifies the translated FQDN.
Note: Exactly one of
translated_addressandtranslated_fqdnshould be set.
- name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols string[]
- translated
Port number - Specifies the translated port.
- description string
- destination
Address string - The destination IP address (including CIDR).
- destination
Ports string - source
Addresses string[] - source
Ip string[]Groups - translated
Address string - Specifies the translated address.
- translated
Fqdn string Specifies the translated FQDN.
Note: Exactly one of
translated_addressandtranslated_fqdnshould be set.
- name str
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols Sequence[str]
- translated_
port int - Specifies the translated port.
- description str
- destination_
address str - The destination IP address (including CIDR).
- destination_
ports str - source_
addresses Sequence[str] - source_
ip_ Sequence[str]groups - translated_
address str - Specifies the translated address.
- translated_
fqdn str Specifies the translated FQDN.
Note: Exactly one of
translated_addressandtranslated_fqdnshould be set.
- name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols List<String>
- translated
Port Number - Specifies the translated port.
- description String
- destination
Address String - The destination IP address (including CIDR).
- destination
Ports String - source
Addresses List<String> - source
Ip List<String>Groups - translated
Address String - Specifies the translated address.
- translated
Fqdn String Specifies the translated FQDN.
Note: Exactly one of
translated_addressandtranslated_fqdnshould be set.
FirewallPolicyRuleCollectionGroupNetworkRuleCollection, FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs
- Action string
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - Name string
- The name which should be used for this network rule collection.
- Priority int
- The priority of the network rule collection. The range is
100-65000. - Rules
List<Firewall
Policy Rule Collection Group Network Rule Collection Rule> - One or more
network_ruleblocks as defined below.
- Action string
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - Name string
- The name which should be used for this network rule collection.
- Priority int
- The priority of the network rule collection. The range is
100-65000. - Rules
[]Firewall
Policy Rule Collection Group Network Rule Collection Rule - One or more
network_ruleblocks as defined below.
- action String
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - name String
- The name which should be used for this network rule collection.
- priority Integer
- The priority of the network rule collection. The range is
100-65000. - rules
List<Firewall
Policy Rule Collection Group Network Rule Collection Rule> - One or more
network_ruleblocks as defined below.
- action string
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - name string
- The name which should be used for this network rule collection.
- priority number
- The priority of the network rule collection. The range is
100-65000. - rules
Firewall
Policy Rule Collection Group Network Rule Collection Rule[] - One or more
network_ruleblocks as defined below.
- action str
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - name str
- The name which should be used for this network rule collection.
- priority int
- The priority of the network rule collection. The range is
100-65000. - rules
Sequence[Firewall
Policy Rule Collection Group Network Rule Collection Rule] - One or more
network_ruleblocks as defined below.
- action String
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - name String
- The name which should be used for this network rule collection.
- priority Number
- The priority of the network rule collection. The range is
100-65000. - rules List<Property Map>
- One or more
network_ruleblocks as defined below.
FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule, FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs
- Destination
Ports List<string> - Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Protocols List<string>
- Description string
- Destination
Addresses List<string> - Destination
Fqdns List<string> - Destination
Ip List<string>Groups - Specifies a list of destination IP groups.
- Source
Addresses List<string> - Source
Ip List<string>Groups
- Destination
Ports []string - Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Protocols []string
- Description string
- Destination
Addresses []string - Destination
Fqdns []string - Destination
Ip []stringGroups - Specifies a list of destination IP groups.
- Source
Addresses []string - Source
Ip []stringGroups
- destination
Ports List<String> - name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols List<String>
- description String
- destination
Addresses List<String> - destination
Fqdns List<String> - destination
Ip List<String>Groups - Specifies a list of destination IP groups.
- source
Addresses List<String> - source
Ip List<String>Groups
- destination
Ports string[] - name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols string[]
- description string
- destination
Addresses string[] - destination
Fqdns string[] - destination
Ip string[]Groups - Specifies a list of destination IP groups.
- source
Addresses string[] - source
Ip string[]Groups
- destination_
ports Sequence[str] - name str
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols Sequence[str]
- description str
- destination_
addresses Sequence[str] - destination_
fqdns Sequence[str] - destination_
ip_ Sequence[str]groups - Specifies a list of destination IP groups.
- source_
addresses Sequence[str] - source_
ip_ Sequence[str]groups
- destination
Ports List<String> - name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols List<String>
- description String
- destination
Addresses List<String> - destination
Fqdns List<String> - destination
Ip List<String>Groups - Specifies a list of destination IP groups.
- source
Addresses List<String> - source
Ip List<String>Groups
Import
Firewall Policy Rule Collection Groups can be imported using the resource id, e.g.
$ pulumi import azure:network/firewallPolicyRuleCollectionGroup:FirewallPolicyRuleCollectionGroup example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.Network/firewallPolicies/policy1/ruleCollectionGroups/gruop1
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
azurermTerraform Provider.