Docs Packages
  1. Packages
  2. Azure Classic
  3. API Docs
  4. network
  5. FirewallPolicyRuleCollectionGroup

We recommend using Azure Native.

Azure Classic v5.49.0 published on Tuesday, Aug 29, 2023 by Pulumi
pulumi/pulumi-azure

azure.network.FirewallPolicyRuleCollectionGroup

Explore with Pulumi AI

azure logo

We recommend using Azure Native.

Azure Classic v5.49.0 published on Tuesday, Aug 29, 2023 by Pulumi
pulumi/pulumi-azure

    Manages a Firewall Policy Rule Collection Group.

    Example Usage

    Coming soon!

    Coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.FirewallPolicy;
import com.pulumi.azure.network.FirewallPolicyArgs;
import com.pulumi.azure.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azure.network.FirewallPolicyRuleCollectionGroupArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()        
            .location("West Europe")
            .build());

        var exampleFirewallPolicy = new FirewallPolicy("exampleFirewallPolicy", FirewallPolicyArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .build());

        var exampleFirewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()        
            .firewallPolicyId(exampleFirewallPolicy.id())
            .priority(500)
            .applicationRuleCollections(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs.builder()
                .name("app_rule_collection1")
                .priority(500)
                .action("Deny")
                .rules(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs.builder()
                    .name("app_rule_collection1_rule1")
                    .protocols(                    
                        FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
                            .type("Http")
                            .port(80)
                            .build(),
                        FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
                            .type("Https")
                            .port(443)
                            .build())
                    .sourceAddresses("10.0.0.1")
                    .destinationFqdns("*.microsoft.com")
                    .build())
                .build())
            .networkRuleCollections(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs.builder()
                .name("network_rule_collection1")
                .priority(400)
                .action("Deny")
                .rules(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs.builder()
                    .name("network_rule_collection1_rule1")
                    .protocols(                    
                        "TCP",
                        "UDP")
                    .sourceAddresses("10.0.0.1")
                    .destinationAddresses(                    
                        "192.168.1.1",
                        "192.168.1.2")
                    .destinationPorts(                    
                        "80",
                        "1000-2000")
                    .build())
                .build())
            .natRuleCollections(FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs.builder()
                .name("nat_rule_collection1")
                .priority(300)
                .action("Dnat")
                .rules(FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs.builder()
                    .name("nat_rule_collection1_rule1")
                    .protocols(                    
                        "TCP",
                        "UDP")
                    .sourceAddresses(                    
                        "10.0.0.1",
                        "10.0.0.2")
                    .destinationAddress("192.168.1.1")
                    .destinationPorts("80")
                    .translatedAddress("192.168.0.1")
                    .translatedPort("8080")
                    .build())
                .build())
            .build());

    }
}

    Coming soon!

    Coming soon!

    resources:
  exampleResourceGroup:
    type: azure:core:ResourceGroup
    properties:
      location: West Europe
  exampleFirewallPolicy:
    type: azure:network:FirewallPolicy
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}
  exampleFirewallPolicyRuleCollectionGroup:
    type: azure:network:FirewallPolicyRuleCollectionGroup
    properties:
      firewallPolicyId: ${exampleFirewallPolicy.id}
      priority: 500
      applicationRuleCollections:
        - name: app_rule_collection1
          priority: 500
          action: Deny
          rules:
            - name: app_rule_collection1_rule1
              protocols:
                - type: Http
                  port: 80
                - type: Https
                  port: 443
              sourceAddresses:
                - 10.0.0.1
              destinationFqdns:
                - '*.microsoft.com'
      networkRuleCollections:
        - name: network_rule_collection1
          priority: 400
          action: Deny
          rules:
            - name: network_rule_collection1_rule1
              protocols:
                - TCP
                - UDP
              sourceAddresses:
                - 10.0.0.1
              destinationAddresses:
                - 192.168.1.1
                - 192.168.1.2
              destinationPorts:
                - '80'
                - 1000-2000
      natRuleCollections:
        - name: nat_rule_collection1
          priority: 300
          action: Dnat
          rules:
            - name: nat_rule_collection1_rule1
              protocols:
                - TCP
                - UDP
              sourceAddresses:
                - 10.0.0.1
                - 10.0.0.2
              destinationAddress: 192.168.1.1
              destinationPorts:
                - '80'
              translatedAddress: 192.168.0.1
              translatedPort: '8080'

    Create FirewallPolicyRuleCollectionGroup Resource

    new FirewallPolicyRuleCollectionGroup(name: string, args: FirewallPolicyRuleCollectionGroupArgs, opts?: CustomResourceOptions);
    @overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
                                      firewall_policy_id: Optional[str] = None,
                                      name: Optional[str] = None,
                                      nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
                                      network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
                                      priority: Optional[int] = None)
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
                                      args: FirewallPolicyRuleCollectionGroupArgs,
                                      opts: Optional[ResourceOptions] = None)
    func NewFirewallPolicyRuleCollectionGroup(ctx *Context, name string, args FirewallPolicyRuleCollectionGroupArgs, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
    public FirewallPolicyRuleCollectionGroup(string name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions? opts = null)
    public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions options)

    type: azure:network:FirewallPolicyRuleCollectionGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FirewallPolicyRuleCollectionGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    FirewallPolicyRuleCollectionGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The FirewallPolicyRuleCollectionGroup resource accepts the following input properties:

    FirewallPolicyId string

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Priority int

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    ApplicationRuleCollections List<FirewallPolicyRuleCollectionGroupApplicationRuleCollection>

    One or more application_rule_collection blocks as defined below.

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    NatRuleCollections List<FirewallPolicyRuleCollectionGroupNatRuleCollection>

    One or more nat_rule_collection blocks as defined below.

    NetworkRuleCollections List<FirewallPolicyRuleCollectionGroupNetworkRuleCollection>

    One or more network_rule_collection blocks as defined below.

    FirewallPolicyId string

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Priority int

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    ApplicationRuleCollections []FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs

    One or more application_rule_collection blocks as defined below.

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    NatRuleCollections []FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs

    One or more nat_rule_collection blocks as defined below.

    NetworkRuleCollections []FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs

    One or more network_rule_collection blocks as defined below.

    firewallPolicyId String

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    priority Integer

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    applicationRuleCollections List<FirewallPolicyRuleCollectionGroupApplicationRuleCollection>

    One or more application_rule_collection blocks as defined below.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    natRuleCollections List<FirewallPolicyRuleCollectionGroupNatRuleCollection>

    One or more nat_rule_collection blocks as defined below.

    networkRuleCollections List<FirewallPolicyRuleCollectionGroupNetworkRuleCollection>

    One or more network_rule_collection blocks as defined below.

    firewallPolicyId string

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    priority number

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    applicationRuleCollections FirewallPolicyRuleCollectionGroupApplicationRuleCollection[]

    One or more application_rule_collection blocks as defined below.

    name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    natRuleCollections FirewallPolicyRuleCollectionGroupNatRuleCollection[]

    One or more nat_rule_collection blocks as defined below.

    networkRuleCollections FirewallPolicyRuleCollectionGroupNetworkRuleCollection[]

    One or more network_rule_collection blocks as defined below.

    firewall_policy_id str

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    priority int

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    application_rule_collections Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]

    One or more application_rule_collection blocks as defined below.

    name str

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    nat_rule_collections Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]

    One or more nat_rule_collection blocks as defined below.

    network_rule_collections Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]

    One or more network_rule_collection blocks as defined below.

    firewallPolicyId String

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    priority Number

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    applicationRuleCollections List<Property Map>

    One or more application_rule_collection blocks as defined below.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    natRuleCollections List<Property Map>

    One or more nat_rule_collection blocks as defined below.

    networkRuleCollections List<Property Map>

    One or more network_rule_collection blocks as defined below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the FirewallPolicyRuleCollectionGroup resource produces the following output properties:

    Id string

    The provider-assigned unique ID for this managed resource.

    Id string

    The provider-assigned unique ID for this managed resource.

    id String

    The provider-assigned unique ID for this managed resource.

    id string

    The provider-assigned unique ID for this managed resource.

    id str

    The provider-assigned unique ID for this managed resource.

    id String

    The provider-assigned unique ID for this managed resource.

    Look up Existing FirewallPolicyRuleCollectionGroup Resource

    Get an existing FirewallPolicyRuleCollectionGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: FirewallPolicyRuleCollectionGroupState, opts?: CustomResourceOptions): FirewallPolicyRuleCollectionGroup
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
        firewall_policy_id: Optional[str] = None,
        name: Optional[str] = None,
        nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
        network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
        priority: Optional[int] = None) -> FirewallPolicyRuleCollectionGroup
    func GetFirewallPolicyRuleCollectionGroup(ctx *Context, name string, id IDInput, state *FirewallPolicyRuleCollectionGroupState, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
    public static FirewallPolicyRuleCollectionGroup Get(string name, Input<string> id, FirewallPolicyRuleCollectionGroupState? state, CustomResourceOptions? opts = null)
    public static FirewallPolicyRuleCollectionGroup get(String name, Output<String> id, FirewallPolicyRuleCollectionGroupState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApplicationRuleCollections List<FirewallPolicyRuleCollectionGroupApplicationRuleCollection>

    One or more application_rule_collection blocks as defined below.

    FirewallPolicyId string

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    NatRuleCollections List<FirewallPolicyRuleCollectionGroupNatRuleCollection>

    One or more nat_rule_collection blocks as defined below.

    NetworkRuleCollections List<FirewallPolicyRuleCollectionGroupNetworkRuleCollection>

    One or more network_rule_collection blocks as defined below.

    Priority int

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    ApplicationRuleCollections []FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs

    One or more application_rule_collection blocks as defined below.

    FirewallPolicyId string

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    NatRuleCollections []FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs

    One or more nat_rule_collection blocks as defined below.

    NetworkRuleCollections []FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs

    One or more network_rule_collection blocks as defined below.

    Priority int

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    applicationRuleCollections List<FirewallPolicyRuleCollectionGroupApplicationRuleCollection>

    One or more application_rule_collection blocks as defined below.

    firewallPolicyId String

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    natRuleCollections List<FirewallPolicyRuleCollectionGroupNatRuleCollection>

    One or more nat_rule_collection blocks as defined below.

    networkRuleCollections List<FirewallPolicyRuleCollectionGroupNetworkRuleCollection>

    One or more network_rule_collection blocks as defined below.

    priority Integer

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    applicationRuleCollections FirewallPolicyRuleCollectionGroupApplicationRuleCollection[]

    One or more application_rule_collection blocks as defined below.

    firewallPolicyId string

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    natRuleCollections FirewallPolicyRuleCollectionGroupNatRuleCollection[]

    One or more nat_rule_collection blocks as defined below.

    networkRuleCollections FirewallPolicyRuleCollectionGroupNetworkRuleCollection[]

    One or more network_rule_collection blocks as defined below.

    priority number

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    application_rule_collections Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]

    One or more application_rule_collection blocks as defined below.

    firewall_policy_id str

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    name str

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    nat_rule_collections Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]

    One or more nat_rule_collection blocks as defined below.

    network_rule_collections Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]

    One or more network_rule_collection blocks as defined below.

    priority int

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    applicationRuleCollections List<Property Map>

    One or more application_rule_collection blocks as defined below.

    firewallPolicyId String

    The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    natRuleCollections List<Property Map>

    One or more nat_rule_collection blocks as defined below.

    networkRuleCollections List<Property Map>

    One or more network_rule_collection blocks as defined below.

    priority Number

    The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

    Supporting Types

    FirewallPolicyRuleCollectionGroupApplicationRuleCollection, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs

    Action string

    The action to take for the application rules in this collection. Possible values are Allow and Deny.

    Name string

    The name which should be used for this application rule collection.

    Priority int

    The priority of the application rule collection. The range is 100 - 65000.

    Rules List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule>

    One or more application_rule (application rule) blocks as defined below.

    Action string

    The action to take for the application rules in this collection. Possible values are Allow and Deny.

    Name string

    The name which should be used for this application rule collection.

    Priority int

    The priority of the application rule collection. The range is 100 - 65000.

    Rules []FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule

    One or more application_rule (application rule) blocks as defined below.

    action String

    The action to take for the application rules in this collection. Possible values are Allow and Deny.

    name String

    The name which should be used for this application rule collection.

    priority Integer

    The priority of the application rule collection. The range is 100 - 65000.

    rules List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule>

    One or more application_rule (application rule) blocks as defined below.

    action string

    The action to take for the application rules in this collection. Possible values are Allow and Deny.

    name string

    The name which should be used for this application rule collection.

    priority number

    The priority of the application rule collection. The range is 100 - 65000.

    rules FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule[]

    One or more application_rule (application rule) blocks as defined below.

    action str

    The action to take for the application rules in this collection. Possible values are Allow and Deny.

    name str

    The name which should be used for this application rule collection.

    priority int

    The priority of the application rule collection. The range is 100 - 65000.

    rules Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule]

    One or more application_rule (application rule) blocks as defined below.

    action String

    The action to take for the application rules in this collection. Possible values are Allow and Deny.

    name String

    The name which should be used for this application rule collection.

    priority Number

    The priority of the application rule collection. The range is 100 - 65000.

    rules List<Property Map>

    One or more application_rule (application rule) blocks as defined below.

    FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Description string

    The description which should be used for this rule.

    DestinationAddresses List<string>

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    DestinationFqdnTags List<string>

    Specifies a list of destination FQDN tags.

    DestinationFqdns List<string>

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    DestinationUrls List<string>

    Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

    Protocols List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol>

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    SourceAddresses List<string>

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    SourceIpGroups List<string>

    Specifies a list of source IP groups.

    TerminateTls bool

    Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

    WebCategories List<string>

    Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Description string

    The description which should be used for this rule.

    DestinationAddresses []string

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    DestinationFqdnTags []string

    Specifies a list of destination FQDN tags.

    DestinationFqdns []string

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    DestinationUrls []string

    Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

    Protocols []FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    SourceAddresses []string

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    SourceIpGroups []string

    Specifies a list of source IP groups.

    TerminateTls bool

    Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

    WebCategories []string

    Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    description String

    The description which should be used for this rule.

    destinationAddresses List<String>

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    destinationFqdnTags List<String>

    Specifies a list of destination FQDN tags.

    destinationFqdns List<String>

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    destinationUrls List<String>

    Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

    protocols List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol>

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    sourceAddresses List<String>

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    sourceIpGroups List<String>

    Specifies a list of source IP groups.

    terminateTls Boolean

    Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

    webCategories List<String>

    Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

    name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    description string

    The description which should be used for this rule.

    destinationAddresses string[]

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    destinationFqdnTags string[]

    Specifies a list of destination FQDN tags.

    destinationFqdns string[]

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    destinationUrls string[]

    Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

    protocols FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol[]

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    sourceAddresses string[]

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    sourceIpGroups string[]

    Specifies a list of source IP groups.

    terminateTls boolean

    Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

    webCategories string[]

    Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

    name str

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    description str

    The description which should be used for this rule.

    destination_addresses Sequence[str]

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    destination_fqdn_tags Sequence[str]

    Specifies a list of destination FQDN tags.

    destination_fqdns Sequence[str]

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    destination_urls Sequence[str]

    Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

    protocols Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol]

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    source_addresses Sequence[str]

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    source_ip_groups Sequence[str]

    Specifies a list of source IP groups.

    terminate_tls bool

    Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

    web_categories Sequence[str]

    Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    description String

    The description which should be used for this rule.

    destinationAddresses List<String>

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    destinationFqdnTags List<String>

    Specifies a list of destination FQDN tags.

    destinationFqdns List<String>

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    destinationUrls List<String>

    Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

    protocols List<Property Map>

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    sourceAddresses List<String>

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    sourceIpGroups List<String>

    Specifies a list of source IP groups.

    terminateTls Boolean

    Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

    webCategories List<String>

    Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

    FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs

    Port int

    Port number of the protocol. Range is 0-64000.

    Type string

    Protocol type. Possible values are Http and Https.

    Port int

    Port number of the protocol. Range is 0-64000.

    Type string

    Protocol type. Possible values are Http and Https.

    port Integer

    Port number of the protocol. Range is 0-64000.

    type String

    Protocol type. Possible values are Http and Https.

    port number

    Port number of the protocol. Range is 0-64000.

    type string

    Protocol type. Possible values are Http and Https.

    port int

    Port number of the protocol. Range is 0-64000.

    type str

    Protocol type. Possible values are Http and Https.

    port Number

    Port number of the protocol. Range is 0-64000.

    type String

    Protocol type. Possible values are Http and Https.

    FirewallPolicyRuleCollectionGroupNatRuleCollection, FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs

    Action string

    The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

    Name string

    The name which should be used for this NAT rule collection.

    Priority int

    The priority of the NAT rule collection. The range is 100 - 65000.

    Rules List<FirewallPolicyRuleCollectionGroupNatRuleCollectionRule>

    A nat_rule (NAT rule) block as defined below.

    Action string

    The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

    Name string

    The name which should be used for this NAT rule collection.

    Priority int

    The priority of the NAT rule collection. The range is 100 - 65000.

    Rules []FirewallPolicyRuleCollectionGroupNatRuleCollectionRule

    A nat_rule (NAT rule) block as defined below.

    action String

    The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

    name String

    The name which should be used for this NAT rule collection.

    priority Integer

    The priority of the NAT rule collection. The range is 100 - 65000.

    rules List<FirewallPolicyRuleCollectionGroupNatRuleCollectionRule>

    A nat_rule (NAT rule) block as defined below.

    action string

    The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

    name string

    The name which should be used for this NAT rule collection.

    priority number

    The priority of the NAT rule collection. The range is 100 - 65000.

    rules FirewallPolicyRuleCollectionGroupNatRuleCollectionRule[]

    A nat_rule (NAT rule) block as defined below.

    action str

    The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

    name str

    The name which should be used for this NAT rule collection.

    priority int

    The priority of the NAT rule collection. The range is 100 - 65000.

    rules Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionRule]

    A nat_rule (NAT rule) block as defined below.

    action String

    The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

    name String

    The name which should be used for this NAT rule collection.

    priority Number

    The priority of the NAT rule collection. The range is 100 - 65000.

    rules List<Property Map>

    A nat_rule (NAT rule) block as defined below.

    FirewallPolicyRuleCollectionGroupNatRuleCollectionRule, FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Protocols List<string>

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    TranslatedPort int

    Specifies the translated port.

    DestinationAddress string

    The destination IP address (including CIDR).

    DestinationPorts string

    Specifies a list of destination ports.

    SourceAddresses List<string>

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    SourceIpGroups List<string>

    Specifies a list of source IP groups.

    TranslatedAddress string

    Specifies the translated address.

    TranslatedFqdn string

    Specifies the translated FQDN.

    NOTE: Exactly one of translated_address and translated_fqdn should be set.

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Protocols []string

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    TranslatedPort int

    Specifies the translated port.

    DestinationAddress string

    The destination IP address (including CIDR).

    DestinationPorts string

    Specifies a list of destination ports.

    SourceAddresses []string

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    SourceIpGroups []string

    Specifies a list of source IP groups.

    TranslatedAddress string

    Specifies the translated address.

    TranslatedFqdn string

    Specifies the translated FQDN.

    NOTE: Exactly one of translated_address and translated_fqdn should be set.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    protocols List<String>

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    translatedPort Integer

    Specifies the translated port.

    destinationAddress String

    The destination IP address (including CIDR).

    destinationPorts String

    Specifies a list of destination ports.

    sourceAddresses List<String>

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    sourceIpGroups List<String>

    Specifies a list of source IP groups.

    translatedAddress String

    Specifies the translated address.

    translatedFqdn String

    Specifies the translated FQDN.

    NOTE: Exactly one of translated_address and translated_fqdn should be set.

    name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    protocols string[]

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    translatedPort number

    Specifies the translated port.

    destinationAddress string

    The destination IP address (including CIDR).

    destinationPorts string

    Specifies a list of destination ports.

    sourceAddresses string[]

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    sourceIpGroups string[]

    Specifies a list of source IP groups.

    translatedAddress string

    Specifies the translated address.

    translatedFqdn string

    Specifies the translated FQDN.

    NOTE: Exactly one of translated_address and translated_fqdn should be set.

    name str

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    protocols Sequence[str]

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    translated_port int

    Specifies the translated port.

    destination_address str

    The destination IP address (including CIDR).

    destination_ports str

    Specifies a list of destination ports.

    source_addresses Sequence[str]

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    source_ip_groups Sequence[str]

    Specifies a list of source IP groups.

    translated_address str

    Specifies the translated address.

    translated_fqdn str

    Specifies the translated FQDN.

    NOTE: Exactly one of translated_address and translated_fqdn should be set.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    protocols List<String>

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    translatedPort Number

    Specifies the translated port.

    destinationAddress String

    The destination IP address (including CIDR).

    destinationPorts String

    Specifies a list of destination ports.

    sourceAddresses List<String>

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    sourceIpGroups List<String>

    Specifies a list of source IP groups.

    translatedAddress String

    Specifies the translated address.

    translatedFqdn String

    Specifies the translated FQDN.

    NOTE: Exactly one of translated_address and translated_fqdn should be set.

    FirewallPolicyRuleCollectionGroupNetworkRuleCollection, FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs

    Action string

    The action to take for the network rules in this collection. Possible values are Allow and Deny.

    Name string

    The name which should be used for this network rule collection.

    Priority int

    The priority of the network rule collection. The range is 100 - 65000.

    Rules List<FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule>

    One or more network_rule (network rule) blocks as defined below.

    Action string

    The action to take for the network rules in this collection. Possible values are Allow and Deny.

    Name string

    The name which should be used for this network rule collection.

    Priority int

    The priority of the network rule collection. The range is 100 - 65000.

    Rules []FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule

    One or more network_rule (network rule) blocks as defined below.

    action String

    The action to take for the network rules in this collection. Possible values are Allow and Deny.

    name String

    The name which should be used for this network rule collection.

    priority Integer

    The priority of the network rule collection. The range is 100 - 65000.

    rules List<FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule>

    One or more network_rule (network rule) blocks as defined below.

    action string

    The action to take for the network rules in this collection. Possible values are Allow and Deny.

    name string

    The name which should be used for this network rule collection.

    priority number

    The priority of the network rule collection. The range is 100 - 65000.

    rules FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule[]

    One or more network_rule (network rule) blocks as defined below.

    action str

    The action to take for the network rules in this collection. Possible values are Allow and Deny.

    name str

    The name which should be used for this network rule collection.

    priority int

    The priority of the network rule collection. The range is 100 - 65000.

    rules Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule]

    One or more network_rule (network rule) blocks as defined below.

    action String

    The action to take for the network rules in this collection. Possible values are Allow and Deny.

    name String

    The name which should be used for this network rule collection.

    priority Number

    The priority of the network rule collection. The range is 100 - 65000.

    rules List<Property Map>

    One or more network_rule (network rule) blocks as defined below.

    FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule, FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs

    DestinationPorts List<string>

    Specifies a list of destination ports.

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Protocols List<string>

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    DestinationAddresses List<string>

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    DestinationFqdns List<string>

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    DestinationIpGroups List<string>

    Specifies a list of destination IP groups.

    SourceAddresses List<string>

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    SourceIpGroups List<string>

    Specifies a list of source IP groups.

    DestinationPorts []string

    Specifies a list of destination ports.

    Name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    Protocols []string

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    DestinationAddresses []string

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    DestinationFqdns []string

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    DestinationIpGroups []string

    Specifies a list of destination IP groups.

    SourceAddresses []string

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    SourceIpGroups []string

    Specifies a list of source IP groups.

    destinationPorts List<String>

    Specifies a list of destination ports.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    protocols List<String>

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    destinationAddresses List<String>

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    destinationFqdns List<String>

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    destinationIpGroups List<String>

    Specifies a list of destination IP groups.

    sourceAddresses List<String>

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    sourceIpGroups List<String>

    Specifies a list of source IP groups.

    destinationPorts string[]

    Specifies a list of destination ports.

    name string

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    protocols string[]

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    destinationAddresses string[]

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    destinationFqdns string[]

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    destinationIpGroups string[]

    Specifies a list of destination IP groups.

    sourceAddresses string[]

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    sourceIpGroups string[]

    Specifies a list of source IP groups.

    destination_ports Sequence[str]

    Specifies a list of destination ports.

    name str

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    protocols Sequence[str]

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    destination_addresses Sequence[str]

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    destination_fqdns Sequence[str]

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    destination_ip_groups Sequence[str]

    Specifies a list of destination IP groups.

    source_addresses Sequence[str]

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    source_ip_groups Sequence[str]

    Specifies a list of source IP groups.

    destinationPorts List<String>

    Specifies a list of destination ports.

    name String

    The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

    protocols List<String>

    One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

    destinationAddresses List<String>

    Specifies a list of destination IP addresses (including CIDR, IP range and *).

    destinationFqdns List<String>

    Specifies a list of destination FQDNs. Conflicts with destination_urls.

    destinationIpGroups List<String>

    Specifies a list of destination IP groups.

    sourceAddresses List<String>

    Specifies a list of source IP addresses (including CIDR, IP range and *).

    sourceIpGroups List<String>

    Specifies a list of source IP groups.

    Import

    Firewall Policy Rule Collection Groups can be imported using the resource id, e.g.

     $ pulumi import azure:network/firewallPolicyRuleCollectionGroup:FirewallPolicyRuleCollectionGroup example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.Network/firewallPolicies/policy1/ruleCollectionGroups/gruop1

    Package Details

    Repository
    Azure Classic pulumi/pulumi-azure
    License
    Apache-2.0
    Notes

    This Pulumi package is based on the azurerm Terraform Provider.

    azure logo

    We recommend using Azure Native.

    Azure Classic v5.49.0 published on Tuesday, Aug 29, 2023 by Pulumi
    pulumi/pulumi-azure