Azure Classic
FirewallPolicyRuleCollectionGroup
Manages a Firewall Policy Rule Collection Group.
Example Usage
using Pulumi;
using Azure = Pulumi.Azure;
class MyStack : Stack
{
public MyStack()
{
var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new Azure.Core.ResourceGroupArgs
{
Location = "West Europe",
});
var exampleFirewallPolicy = new Azure.Network.FirewallPolicy("exampleFirewallPolicy", new Azure.Network.FirewallPolicyArgs
{
ResourceGroupName = exampleResourceGroup.Name,
Location = exampleResourceGroup.Location,
});
var exampleFirewallPolicyRuleCollectionGroup = new Azure.Network.FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup", new Azure.Network.FirewallPolicyRuleCollectionGroupArgs
{
FirewallPolicyId = exampleFirewallPolicy.Id,
Priority = 500,
ApplicationRuleCollections =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs
{
Name = "app_rule_collection1",
Priority = 500,
Action = "Deny",
Rules =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs
{
Name = "app_rule_collection1_rule1",
Protocols =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
{
Type = "Http",
Port = 80,
},
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
{
Type = "Https",
Port = 443,
},
},
SourceAddresses =
{
"10.0.0.1",
},
DestinationFqdns =
{
".microsoft.com",
},
},
},
},
},
NetworkRuleCollections =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs
{
Name = "network_rule_collection1",
Priority = 400,
Action = "Deny",
Rules =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs
{
Name = "network_rule_collection1_rule1",
Protocols =
{
"TCP",
"UDP",
},
SourceAddresses =
{
"10.0.0.1",
},
DestinationAddresses =
{
"192.168.1.1",
"192.168.1.2",
},
DestinationPorts =
{
"80",
"1000-2000",
},
},
},
},
},
NatRuleCollections =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs
{
Name = "nat_rule_collection1",
Priority = 300,
Action = "Dnat",
Rules =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs
{
Name = "nat_rule_collection1_rule1",
Protocols =
{
"TCP",
"UDP",
},
SourceAddresses =
{
"10.0.0.1",
"10.0.0.2",
},
DestinationAddress = "192.168.1.1",
DestinationPorts =
{
"80",
"1000-2000",
},
TranslatedAddress = "192.168.0.1",
TranslatedPort = 8080,
},
},
},
},
});
}
}
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/network"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleFirewallPolicy, err := network.NewFirewallPolicy(ctx, "exampleFirewallPolicy", &network.FirewallPolicyArgs{
ResourceGroupName: exampleResourceGroup.Name,
Location: exampleResourceGroup.Location,
})
if err != nil {
return err
}
_, err = network.NewFirewallPolicyRuleCollectionGroup(ctx, "exampleFirewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyId: exampleFirewallPolicy.ID(),
Priority: pulumi.Int(500),
ApplicationRuleCollections: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs{
Name: pulumi.String("app_rule_collection1"),
Priority: pulumi.Int(500),
Action: pulumi.String("Deny"),
Rules: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs{
Name: pulumi.String("app_rule_collection1_rule1"),
Protocols: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs{
Type: pulumi.String("Http"),
Port: pulumi.Int(80),
},
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs{
Type: pulumi.String("Https"),
Port: pulumi.Int(443),
},
},
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.1"),
},
DestinationFqdns: pulumi.StringArray{
pulumi.String(".microsoft.com"),
},
},
},
},
},
NetworkRuleCollections: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs{
Name: pulumi.String("network_rule_collection1"),
Priority: pulumi.Int(400),
Action: pulumi.String("Deny"),
Rules: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs{
Name: pulumi.String("network_rule_collection1_rule1"),
Protocols: pulumi.StringArray{
pulumi.String("TCP"),
pulumi.String("UDP"),
},
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.1"),
},
DestinationAddresses: pulumi.StringArray{
pulumi.String("192.168.1.1"),
pulumi.String("192.168.1.2"),
},
DestinationPorts: pulumi.StringArray{
pulumi.String("80"),
pulumi.String("1000-2000"),
},
},
},
},
},
NatRuleCollections: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs{
Name: pulumi.String("nat_rule_collection1"),
Priority: pulumi.Int(300),
Action: pulumi.String("Dnat"),
Rules: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs{
Name: pulumi.String("nat_rule_collection1_rule1"),
Protocols: pulumi.StringArray{
pulumi.String("TCP"),
pulumi.String("UDP"),
},
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.1"),
pulumi.String("10.0.0.2"),
},
DestinationAddress: pulumi.String("192.168.1.1"),
DestinationPorts: pulumi.StringArray{
pulumi.String("80"),
pulumi.String("1000-2000"),
},
TranslatedAddress: pulumi.String("192.168.0.1"),
TranslatedPort: pulumi.Int(8080),
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import java.util.*;
import java.io.*;
import java.nio.*;
import com.pulumi.*;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()
.location("West Europe")
.build());
var exampleFirewallPolicy = new FirewallPolicy("exampleFirewallPolicy", FirewallPolicyArgs.builder()
.resourceGroupName(exampleResourceGroup.getName())
.location(exampleResourceGroup.getLocation())
.build());
var exampleFirewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyId(exampleFirewallPolicy.getId())
.priority(500)
.applicationRuleCollections(FirewallPolicyRuleCollectionGroupApplicationRuleCollection.builder()
.name("app_rule_collection1")
.priority(500)
.action("Deny")
.rules(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule.builder()
.name("app_rule_collection1_rule1")
.protocols(
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol.builder()
.type("Http")
.port(80)
.build(),
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol.builder()
.type("Https")
.port(443)
.build())
.sourceAddresses("10.0.0.1")
.destinationFqdns(".microsoft.com")
.build())
.build())
.networkRuleCollections(FirewallPolicyRuleCollectionGroupNetworkRuleCollection.builder()
.name("network_rule_collection1")
.priority(400)
.action("Deny")
.rules(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule.builder()
.name("network_rule_collection1_rule1")
.protocols(
"TCP",
"UDP")
.sourceAddresses("10.0.0.1")
.destinationAddresses(
"192.168.1.1",
"192.168.1.2")
.destinationPorts(
"80",
"1000-2000")
.build())
.build())
.natRuleCollections(FirewallPolicyRuleCollectionGroupNatRuleCollection.builder()
.name("nat_rule_collection1")
.priority(300)
.action("Dnat")
.rules(FirewallPolicyRuleCollectionGroupNatRuleCollectionRule.builder()
.name("nat_rule_collection1_rule1")
.protocols(
"TCP",
"UDP")
.sourceAddresses(
"10.0.0.1",
"10.0.0.2")
.destinationAddress("192.168.1.1")
.destinationPorts(
"80",
"1000-2000")
.translatedAddress("192.168.0.1")
.translatedPort("8080")
.build())
.build())
.build());
}
}
import pulumi
import pulumi_azure as azure
example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West Europe")
example_firewall_policy = azure.network.FirewallPolicy("exampleFirewallPolicy",
resource_group_name=example_resource_group.name,
location=example_resource_group.location)
example_firewall_policy_rule_collection_group = azure.network.FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup",
firewall_policy_id=example_firewall_policy.id,
priority=500,
application_rule_collections=[azure.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs(
name="app_rule_collection1",
priority=500,
action="Deny",
rules=[azure.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs(
name="app_rule_collection1_rule1",
protocols=[
azure.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs(
type="Http",
port=80,
),
azure.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs(
type="Https",
port=443,
),
],
source_addresses=["10.0.0.1"],
destination_fqdns=[".microsoft.com"],
)],
)],
network_rule_collections=[azure.network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs(
name="network_rule_collection1",
priority=400,
action="Deny",
rules=[azure.network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs(
name="network_rule_collection1_rule1",
protocols=[
"TCP",
"UDP",
],
source_addresses=["10.0.0.1"],
destination_addresses=[
"192.168.1.1",
"192.168.1.2",
],
destination_ports=[
"80",
"1000-2000",
],
)],
)],
nat_rule_collections=[azure.network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs(
name="nat_rule_collection1",
priority=300,
action="Dnat",
rules=[azure.network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs(
name="nat_rule_collection1_rule1",
protocols=[
"TCP",
"UDP",
],
source_addresses=[
"10.0.0.1",
"10.0.0.2",
],
destination_address="192.168.1.1",
destination_ports=[
"80",
"1000-2000",
],
translated_address="192.168.0.1",
translated_port=8080,
)],
)])
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West Europe"});
const exampleFirewallPolicy = new azure.network.FirewallPolicy("exampleFirewallPolicy", {
resourceGroupName: exampleResourceGroup.name,
location: exampleResourceGroup.location,
});
const exampleFirewallPolicyRuleCollectionGroup = new azure.network.FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup", {
firewallPolicyId: exampleFirewallPolicy.id,
priority: 500,
applicationRuleCollections: [{
name: "app_rule_collection1",
priority: 500,
action: "Deny",
rules: [{
name: "app_rule_collection1_rule1",
protocols: [
{
type: "Http",
port: 80,
},
{
type: "Https",
port: 443,
},
],
sourceAddresses: ["10.0.0.1"],
destinationFqdns: [".microsoft.com"],
}],
}],
networkRuleCollections: [{
name: "network_rule_collection1",
priority: 400,
action: "Deny",
rules: [{
name: "network_rule_collection1_rule1",
protocols: [
"TCP",
"UDP",
],
sourceAddresses: ["10.0.0.1"],
destinationAddresses: [
"192.168.1.1",
"192.168.1.2",
],
destinationPorts: [
"80",
"1000-2000",
],
}],
}],
natRuleCollections: [{
name: "nat_rule_collection1",
priority: 300,
action: "Dnat",
rules: [{
name: "nat_rule_collection1_rule1",
protocols: [
"TCP",
"UDP",
],
sourceAddresses: [
"10.0.0.1",
"10.0.0.2",
],
destinationAddress: "192.168.1.1",
destinationPorts: [
"80",
"1000-2000",
],
translatedAddress: "192.168.0.1",
translatedPort: 8080,
}],
}],
});
resources:
exampleResourceGroup:
type: azure:core:ResourceGroup
properties:
location: West Europe
exampleFirewallPolicy:
type: azure:network:FirewallPolicy
properties:
resourceGroupName: ${exampleResourceGroup.name}
location: ${exampleResourceGroup.location}
exampleFirewallPolicyRuleCollectionGroup:
type: azure:network:FirewallPolicyRuleCollectionGroup
properties:
firewallPolicyId: ${exampleFirewallPolicy.id}
priority: 500
applicationRuleCollections:
- name: app_rule_collection1
priority: 500
action: Deny
rules:
- name: app_rule_collection1_rule1
protocols:
- type: Http
port: 80
- type: Https
port: 443
sourceAddresses:
- 10.0.0.1
destinationFqdns:
- .microsoft.com
networkRuleCollections:
- name: network_rule_collection1
priority: 400
action: Deny
rules:
- name: network_rule_collection1_rule1
protocols:
- TCP
- UDP
sourceAddresses:
- 10.0.0.1
destinationAddresses:
- 192.168.1.1
- 192.168.1.2
destinationPorts:
- 80
- 1000-2000
natRuleCollections:
- name: nat_rule_collection1
priority: 300
action: Dnat
rules:
- name: nat_rule_collection1_rule1
protocols:
- TCP
- UDP
sourceAddresses:
- 10.0.0.1
- 10.0.0.2
destinationAddress: 192.168.1.1
destinationPorts:
- 80
- 1000-2000
translatedAddress: 192.168.0.1
translatedPort: 8080
Create a FirewallPolicyRuleCollectionGroup Resource
new FirewallPolicyRuleCollectionGroup(name: string, args: FirewallPolicyRuleCollectionGroupArgs, opts?: CustomResourceOptions);
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
opts: Optional[ResourceOptions] = None,
application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
firewall_policy_id: Optional[str] = None,
name: Optional[str] = None,
nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
priority: Optional[int] = None)
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
args: FirewallPolicyRuleCollectionGroupArgs,
opts: Optional[ResourceOptions] = None)
func NewFirewallPolicyRuleCollectionGroup(ctx *Context, name string, args FirewallPolicyRuleCollectionGroupArgs, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
public FirewallPolicyRuleCollectionGroup(string name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions? opts = null)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions options)
type: azure:network:FirewallPolicyRuleCollectionGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
FirewallPolicyRuleCollectionGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The FirewallPolicyRuleCollectionGroup resource accepts the following input properties:
- Firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection Args> One or more
application_rule_collection
blocks as defined below.- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection Args> One or more
nat_rule_collection
blocks as defined below.- Network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection Args> One or more
network_rule_collection
blocks as defined below.
- Firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule []FirewallCollections Policy Rule Collection Group Application Rule Collection Args One or more
application_rule_collection
blocks as defined below.- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule []FirewallCollections Policy Rule Collection Group Nat Rule Collection Args One or more
nat_rule_collection
blocks as defined below.- Network
Rule []FirewallCollections Policy Rule Collection Group Network Rule Collection Args One or more
network_rule_collection
blocks as defined below.
- firewall
Policy StringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority Integer
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule ListCollections Policy Rule Collection Group Application Rule Collection Args> One or more
application_rule_collection
blocks as defined below.- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule ListCollections Policy Rule Collection Group Nat Rule Collection Args> One or more
nat_rule_collection
blocks as defined below.- network
Rule ListCollections Policy Rule Collection Group Network Rule Collection Args> One or more
network_rule_collection
blocks as defined below.
- firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority number
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule FirewallCollections Policy Rule Collection Group Application Rule Collection Args[] One or more
application_rule_collection
blocks as defined below.- name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule FirewallCollections Policy Rule Collection Group Nat Rule Collection Args[] One or more
nat_rule_collection
blocks as defined below.- network
Rule FirewallCollections Policy Rule Collection Group Network Rule Collection Args[] One or more
network_rule_collection
blocks as defined below.
- firewall_
policy_ strid The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Application Rule Collection Args] One or more
application_rule_collection
blocks as defined below.- name str
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Nat Rule Collection Args] One or more
nat_rule_collection
blocks as defined below.- network_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Network Rule Collection Args] One or more
network_rule_collection
blocks as defined below.
- firewall
Policy StringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority Number
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule ListCollections One or more
application_rule_collection
blocks as defined below.- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule ListCollections One or more
nat_rule_collection
blocks as defined below.- network
Rule ListCollections One or more
network_rule_collection
blocks as defined below.
Outputs
All input properties are implicitly available as output properties. Additionally, the FirewallPolicyRuleCollectionGroup resource produces the following output properties:
- Id string
The provider-assigned unique ID for this managed resource.
- Id string
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
- id string
The provider-assigned unique ID for this managed resource.
- id str
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
Look up an Existing FirewallPolicyRuleCollectionGroup Resource
Get an existing FirewallPolicyRuleCollectionGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: FirewallPolicyRuleCollectionGroupState, opts?: CustomResourceOptions): FirewallPolicyRuleCollectionGroup
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
firewall_policy_id: Optional[str] = None,
name: Optional[str] = None,
nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
priority: Optional[int] = None) -> FirewallPolicyRuleCollectionGroup
func GetFirewallPolicyRuleCollectionGroup(ctx *Context, name string, id IDInput, state *FirewallPolicyRuleCollectionGroupState, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
public static FirewallPolicyRuleCollectionGroup Get(string name, Input<string> id, FirewallPolicyRuleCollectionGroupState? state, CustomResourceOptions? opts = null)
public static FirewallPolicyRuleCollectionGroup get(String name, Output<String> id, FirewallPolicyRuleCollectionGroupState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection Args> One or more
application_rule_collection
blocks as defined below.- Firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection Args> One or more
nat_rule_collection
blocks as defined below.- Network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection Args> One or more
network_rule_collection
blocks as defined below.- Priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule []FirewallCollections Policy Rule Collection Group Application Rule Collection Args One or more
application_rule_collection
blocks as defined below.- Firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule []FirewallCollections Policy Rule Collection Group Nat Rule Collection Args One or more
nat_rule_collection
blocks as defined below.- Network
Rule []FirewallCollections Policy Rule Collection Group Network Rule Collection Args One or more
network_rule_collection
blocks as defined below.- Priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule ListCollections Policy Rule Collection Group Application Rule Collection Args> One or more
application_rule_collection
blocks as defined below.- firewall
Policy StringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule ListCollections Policy Rule Collection Group Nat Rule Collection Args> One or more
nat_rule_collection
blocks as defined below.- network
Rule ListCollections Policy Rule Collection Group Network Rule Collection Args> One or more
network_rule_collection
blocks as defined below.- priority Integer
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule FirewallCollections Policy Rule Collection Group Application Rule Collection Args[] One or more
application_rule_collection
blocks as defined below.- firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule FirewallCollections Policy Rule Collection Group Nat Rule Collection Args[] One or more
nat_rule_collection
blocks as defined below.- network
Rule FirewallCollections Policy Rule Collection Group Network Rule Collection Args[] One or more
network_rule_collection
blocks as defined below.- priority number
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Application Rule Collection Args] One or more
application_rule_collection
blocks as defined below.- firewall_
policy_ strid The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name str
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Nat Rule Collection Args] One or more
nat_rule_collection
blocks as defined below.- network_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Network Rule Collection Args] One or more
network_rule_collection
blocks as defined below.- priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule ListCollections One or more
application_rule_collection
blocks as defined below.- firewall
Policy StringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule ListCollections One or more
nat_rule_collection
blocks as defined below.- network
Rule ListCollections One or more
network_rule_collection
blocks as defined below.- priority Number
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
Supporting Types
FirewallPolicyRuleCollectionGroupApplicationRuleCollection
- Action string
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- Name string
The name which should be used for this application rule collection.
- Priority int
The priority of the application rule collection. The range is
100
-65000
.- Rules
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule> One or more
rule
(application rule) blocks as defined below.
- Action string
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- Name string
The name which should be used for this application rule collection.
- Priority int
The priority of the application rule collection. The range is
100
-65000
.- Rules
[]Firewall
Policy Rule Collection Group Application Rule Collection Rule One or more
rule
(application rule) blocks as defined below.
- action String
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- name String
The name which should be used for this application rule collection.
- priority Integer
The priority of the application rule collection. The range is
100
-65000
.- rules
List
Policy Rule Collection Group Application Rule Collection Rule> One or more
rule
(application rule) blocks as defined below.
- action string
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- name string
The name which should be used for this application rule collection.
- priority number
The priority of the application rule collection. The range is
100
-65000
.- rules
Firewall
Policy Rule Collection Group Application Rule Collection Rule[] One or more
rule
(application rule) blocks as defined below.
- action str
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- name str
The name which should be used for this application rule collection.
- priority int
The priority of the application rule collection. The range is
100
-65000
.- rules
Sequence[Firewall
Policy Rule Collection Group Application Rule Collection Rule] One or more
rule
(application rule) blocks as defined below.
- action String
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- name String
The name which should be used for this application rule collection.
- priority Number
The priority of the application rule collection. The range is
100
-65000
.- rules
List
One or more
rule
(application rule) blocks as defined below.
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule
- Name string
The name which should be used for this rule.
- Description string
The description which should be used for this rule.
- Destination
Addresses List<string> Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- List<string>
Specifies a list of destination FQDN tags.
- Destination
Fqdns List<string> Specifies a list of destination FQDNs.
- Destination
Urls List<string> Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- Protocols
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol> Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- Source
Addresses List<string> Specifies a list of source IP addresses (including CIDR and
*
).- Source
Ip List<string>Groups Specifies a list of source IP groups.
- Terminate
Tls bool Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- Web
Categories List<string> Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- Name string
The name which should be used for this rule.
- Description string
The description which should be used for this rule.
- Destination
Addresses []string Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- []string
Specifies a list of destination FQDN tags.
- Destination
Fqdns []string Specifies a list of destination FQDNs.
- Destination
Urls []string Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- Protocols
[]Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- Source
Addresses []string Specifies a list of source IP addresses (including CIDR and
*
).- Source
Ip []stringGroups Specifies a list of source IP groups.
- Terminate
Tls bool Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- Web
Categories []string Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- name String
The name which should be used for this rule.
- description String
The description which should be used for this rule.
- destination
Addresses List Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- List
Specifies a list of destination FQDN tags.
- destination
Fqdns List Specifies a list of destination FQDNs.
- destination
Urls List Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- protocols
List
Policy Rule Collection Group Application Rule Collection Rule Protocol> Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- source
Addresses List Specifies a list of source IP addresses (including CIDR and
*
).- source
Ip ListGroups Specifies a list of source IP groups.
- terminate
Tls Boolean Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- web
Categories List Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- name string
The name which should be used for this rule.
- description string
The description which should be used for this rule.
- destination
Addresses string[] Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- string[]
Specifies a list of destination FQDN tags.
- destination
Fqdns string[] Specifies a list of destination FQDNs.
- destination
Urls string[] Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- protocols
Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol[] Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- source
Addresses string[] Specifies a list of source IP addresses (including CIDR and
*
).- source
Ip string[]Groups Specifies a list of source IP groups.
- terminate
Tls boolean Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- web
Categories string[] Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- name str
The name which should be used for this rule.
- description str
The description which should be used for this rule.
- destination_
addresses Sequence[str] Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- Sequence[str]
Specifies a list of destination FQDN tags.
- destination_
fqdns Sequence[str] Specifies a list of destination FQDNs.
- destination_
urls Sequence[str] Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- protocols
Sequence[Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol] Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- source_
addresses Sequence[str] Specifies a list of source IP addresses (including CIDR and
*
).- source_
ip_ Sequence[str]groups Specifies a list of source IP groups.
- terminate_
tls bool Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- web_
categories Sequence[str] Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- name String
The name which should be used for this rule.
- description String
The description which should be used for this rule.
- destination
Addresses List Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- List
Specifies a list of destination FQDN tags.
- destination
Fqdns List Specifies a list of destination FQDNs.
- destination
Urls List Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- protocols
List
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- source
Addresses List Specifies a list of source IP addresses (including CIDR and
*
).- source
Ip ListGroups Specifies a list of source IP groups.
- terminate
Tls Boolean Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- web
Categories List Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol
FirewallPolicyRuleCollectionGroupNatRuleCollection
- Action string
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- Name string
The name which should be used for this NAT rule collection.
- Priority int
The priority of the NAT rule collection. The range is
100
-65000
.- Rules
List<Firewall
Policy Rule Collection Group Nat Rule Collection Rule> A
rule
(NAT rule) block as defined above.
- Action string
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- Name string
The name which should be used for this NAT rule collection.
- Priority int
The priority of the NAT rule collection. The range is
100
-65000
.- Rules
[]Firewall
Policy Rule Collection Group Nat Rule Collection Rule A
rule
(NAT rule) block as defined above.
- action String
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- name String
The name which should be used for this NAT rule collection.
- priority Integer
The priority of the NAT rule collection. The range is
100
-65000
.- rules
List
Policy Rule Collection Group Nat Rule Collection Rule> A
rule
(NAT rule) block as defined above.
- action string
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- name string
The name which should be used for this NAT rule collection.
- priority number
The priority of the NAT rule collection. The range is
100
-65000
.- rules
Firewall
Policy Rule Collection Group Nat Rule Collection Rule[] A
rule
(NAT rule) block as defined above.
- action str
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- name str
The name which should be used for this NAT rule collection.
- priority int
The priority of the NAT rule collection. The range is
100
-65000
.- rules
Sequence[Firewall
Policy Rule Collection Group Nat Rule Collection Rule] A
rule
(NAT rule) block as defined above.
- action String
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- name String
The name which should be used for this NAT rule collection.
- priority Number
The priority of the NAT rule collection. The range is
100
-65000
.- rules
List
A
rule
(NAT rule) block as defined above.
FirewallPolicyRuleCollectionGroupNatRuleCollectionRule
- Name string
The name which should be used for this rule.
- Protocols List<string>
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- Translated
Port int Specifies the translated port.
- Destination
Address string The destination IP address (including CIDR).
- Destination
Ports List<string> Specifies a list of destination ports.
- Source
Addresses List<string> Specifies a list of source IP addresses (including CIDR and
*
).- Source
Ip List<string>Groups Specifies a list of source IP groups.
- Translated
Address string Specifies the translated address.
- Translated
Fqdn string Specifies the translated FQDN.
- Name string
The name which should be used for this rule.
- Protocols []string
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- Translated
Port int Specifies the translated port.
- Destination
Address string The destination IP address (including CIDR).
- Destination
Ports []string Specifies a list of destination ports.
- Source
Addresses []string Specifies a list of source IP addresses (including CIDR and
*
).- Source
Ip []stringGroups Specifies a list of source IP groups.
- Translated
Address string Specifies the translated address.
- Translated
Fqdn string Specifies the translated FQDN.
- name String
The name which should be used for this rule.
- protocols
List
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- translated
Port Integer Specifies the translated port.
- destination
Address String The destination IP address (including CIDR).
- destination
Ports List Specifies a list of destination ports.
- source
Addresses List Specifies a list of source IP addresses (including CIDR and
*
).- source
Ip ListGroups Specifies a list of source IP groups.
- translated
Address String Specifies the translated address.
- translated
Fqdn String Specifies the translated FQDN.
- name string
The name which should be used for this rule.
- protocols string[]
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- translated
Port number Specifies the translated port.
- destination
Address string The destination IP address (including CIDR).
- destination
Ports string[] Specifies a list of destination ports.
- source
Addresses string[] Specifies a list of source IP addresses (including CIDR and
*
).- source
Ip string[]Groups Specifies a list of source IP groups.
- translated
Address string Specifies the translated address.
- translated
Fqdn string Specifies the translated FQDN.
- name str
The name which should be used for this rule.
- protocols Sequence[str]
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- translated_
port int Specifies the translated port.
- destination_
address str The destination IP address (including CIDR).
- destination_
ports Sequence[str] Specifies a list of destination ports.
- source_
addresses Sequence[str] Specifies a list of source IP addresses (including CIDR and
*
).- source_
ip_ Sequence[str]groups Specifies a list of source IP groups.
- translated_
address str Specifies the translated address.
- translated_
fqdn str Specifies the translated FQDN.
- name String
The name which should be used for this rule.
- protocols
List
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- translated
Port Number Specifies the translated port.
- destination
Address String The destination IP address (including CIDR).
- destination
Ports List Specifies a list of destination ports.
- source
Addresses List Specifies a list of source IP addresses (including CIDR and
*
).- source
Ip ListGroups Specifies a list of source IP groups.
- translated
Address String Specifies the translated address.
- translated
Fqdn String Specifies the translated FQDN.
FirewallPolicyRuleCollectionGroupNetworkRuleCollection
- Action string
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- Name string
The name which should be used for this network rule collection.
- Priority int
The priority of the network rule collection. The range is
100
-65000
.- Rules
List<Firewall
Policy Rule Collection Group Network Rule Collection Rule> One or more
rule
(network rule) blocks as defined above.
- Action string
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- Name string
The name which should be used for this network rule collection.
- Priority int
The priority of the network rule collection. The range is
100
-65000
.- Rules
[]Firewall
Policy Rule Collection Group Network Rule Collection Rule One or more
rule
(network rule) blocks as defined above.
- action String
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- name String
The name which should be used for this network rule collection.
- priority Integer
The priority of the network rule collection. The range is
100
-65000
.- rules
List
Policy Rule Collection Group Network Rule Collection Rule> One or more
rule
(network rule) blocks as defined above.
- action string
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- name string
The name which should be used for this network rule collection.
- priority number
The priority of the network rule collection. The range is
100
-65000
.- rules
Firewall
Policy Rule Collection Group Network Rule Collection Rule[] One or more
rule
(network rule) blocks as defined above.
- action str
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- name str
The name which should be used for this network rule collection.
- priority int
The priority of the network rule collection. The range is
100
-65000
.- rules
Sequence[Firewall
Policy Rule Collection Group Network Rule Collection Rule] One or more
rule
(network rule) blocks as defined above.
- action String
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- name String
The name which should be used for this network rule collection.
- priority Number
The priority of the network rule collection. The range is
100
-65000
.- rules
List
One or more
rule
(network rule) blocks as defined above.
FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule
- Destination
Ports List<string> Specifies a list of destination ports.
- Name string
The name which should be used for this rule.
- Protocols List<string>
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- Destination
Addresses List<string> Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- Destination
Fqdns List<string> Specifies a list of destination FQDNs.
- Destination
Ip List<string>Groups Specifies a list of destination IP groups.
- Source
Addresses List<string> Specifies a list of source IP addresses (including CIDR and
*
).- Source
Ip List<string>Groups Specifies a list of source IP groups.
- Destination
Ports []string Specifies a list of destination ports.
- Name string
The name which should be used for this rule.
- Protocols []string
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- Destination
Addresses []string Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- Destination
Fqdns []string Specifies a list of destination FQDNs.
- Destination
Ip []stringGroups Specifies a list of destination IP groups.
- Source
Addresses []string Specifies a list of source IP addresses (including CIDR and
*
).- Source
Ip []stringGroups Specifies a list of source IP groups.
- destination
Ports List Specifies a list of destination ports.
- name String
The name which should be used for this rule.
- protocols
List
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- destination
Addresses List Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- destination
Fqdns List Specifies a list of destination FQDNs.
- destination
Ip ListGroups Specifies a list of destination IP groups.
- source
Addresses List Specifies a list of source IP addresses (including CIDR and
*
).- source
Ip ListGroups Specifies a list of source IP groups.
- destination
Ports string[] Specifies a list of destination ports.
- name string
The name which should be used for this rule.
- protocols string[]
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- destination
Addresses string[] Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- destination
Fqdns string[] Specifies a list of destination FQDNs.
- destination
Ip string[]Groups Specifies a list of destination IP groups.
- source
Addresses string[] Specifies a list of source IP addresses (including CIDR and
*
).- source
Ip string[]Groups Specifies a list of source IP groups.
- destination_
ports Sequence[str] Specifies a list of destination ports.
- name str
The name which should be used for this rule.
- protocols Sequence[str]
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- destination_
addresses Sequence[str] Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- destination_
fqdns Sequence[str] Specifies a list of destination FQDNs.
- destination_
ip_ Sequence[str]groups Specifies a list of destination IP groups.
- source_
addresses Sequence[str] Specifies a list of source IP addresses (including CIDR and
*
).- source_
ip_ Sequence[str]groups Specifies a list of source IP groups.
- destination
Ports List Specifies a list of destination ports.
- name String
The name which should be used for this rule.
- protocols
List
Specifies a list of network protocols this rule applies to. Possible values are
TCP
,UDP
.- destination
Addresses List Specifies a list of destination IP addresses (including CIDR and
*
) or Service Tags.- destination
Fqdns List Specifies a list of destination FQDNs.
- destination
Ip ListGroups Specifies a list of destination IP groups.
- source
Addresses List Specifies a list of source IP addresses (including CIDR and
*
).- source
Ip ListGroups Specifies a list of source IP groups.
Import
Firewall Policy Rule Collection Groups can be imported using the resource id
, e.g.
$ pulumi import azure:network/firewallPolicyRuleCollectionGroup:FirewallPolicyRuleCollectionGroup example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.Network/firewallPolicies/policy1/ruleCollectionGroups/gruop1
Package Details
- Repository
- https://github.com/pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
azurerm
Terraform Provider.