We recommend using Azure Native.
azure.network.FirewallPolicyRuleCollectionGroup
Explore with Pulumi AI
Manages a Firewall Policy Rule Collection Group.
Example Usage
Coming soon!
Coming soon!
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.FirewallPolicy;
import com.pulumi.azure.network.FirewallPolicyArgs;
import com.pulumi.azure.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azure.network.FirewallPolicyRuleCollectionGroupArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()
.location("West Europe")
.build());
var exampleFirewallPolicy = new FirewallPolicy("exampleFirewallPolicy", FirewallPolicyArgs.builder()
.resourceGroupName(exampleResourceGroup.name())
.location(exampleResourceGroup.location())
.build());
var exampleFirewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyId(exampleFirewallPolicy.id())
.priority(500)
.applicationRuleCollections(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs.builder()
.name("app_rule_collection1")
.priority(500)
.action("Deny")
.rules(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs.builder()
.name("app_rule_collection1_rule1")
.protocols(
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
.type("Http")
.port(80)
.build(),
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
.type("Https")
.port(443)
.build())
.sourceAddresses("10.0.0.1")
.destinationFqdns("*.microsoft.com")
.build())
.build())
.networkRuleCollections(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs.builder()
.name("network_rule_collection1")
.priority(400)
.action("Deny")
.rules(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs.builder()
.name("network_rule_collection1_rule1")
.protocols(
"TCP",
"UDP")
.sourceAddresses("10.0.0.1")
.destinationAddresses(
"192.168.1.1",
"192.168.1.2")
.destinationPorts(
"80",
"1000-2000")
.build())
.build())
.natRuleCollections(FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs.builder()
.name("nat_rule_collection1")
.priority(300)
.action("Dnat")
.rules(FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs.builder()
.name("nat_rule_collection1_rule1")
.protocols(
"TCP",
"UDP")
.sourceAddresses(
"10.0.0.1",
"10.0.0.2")
.destinationAddress("192.168.1.1")
.destinationPorts("80")
.translatedAddress("192.168.0.1")
.translatedPort("8080")
.build())
.build())
.build());
}
}
Coming soon!
Coming soon!
resources:
exampleResourceGroup:
type: azure:core:ResourceGroup
properties:
location: West Europe
exampleFirewallPolicy:
type: azure:network:FirewallPolicy
properties:
resourceGroupName: ${exampleResourceGroup.name}
location: ${exampleResourceGroup.location}
exampleFirewallPolicyRuleCollectionGroup:
type: azure:network:FirewallPolicyRuleCollectionGroup
properties:
firewallPolicyId: ${exampleFirewallPolicy.id}
priority: 500
applicationRuleCollections:
- name: app_rule_collection1
priority: 500
action: Deny
rules:
- name: app_rule_collection1_rule1
protocols:
- type: Http
port: 80
- type: Https
port: 443
sourceAddresses:
- 10.0.0.1
destinationFqdns:
- '*.microsoft.com'
networkRuleCollections:
- name: network_rule_collection1
priority: 400
action: Deny
rules:
- name: network_rule_collection1_rule1
protocols:
- TCP
- UDP
sourceAddresses:
- 10.0.0.1
destinationAddresses:
- 192.168.1.1
- 192.168.1.2
destinationPorts:
- '80'
- 1000-2000
natRuleCollections:
- name: nat_rule_collection1
priority: 300
action: Dnat
rules:
- name: nat_rule_collection1_rule1
protocols:
- TCP
- UDP
sourceAddresses:
- 10.0.0.1
- 10.0.0.2
destinationAddress: 192.168.1.1
destinationPorts:
- '80'
translatedAddress: 192.168.0.1
translatedPort: '8080'
Create FirewallPolicyRuleCollectionGroup Resource
new FirewallPolicyRuleCollectionGroup(name: string, args: FirewallPolicyRuleCollectionGroupArgs, opts?: CustomResourceOptions);
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
opts: Optional[ResourceOptions] = None,
application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
firewall_policy_id: Optional[str] = None,
name: Optional[str] = None,
nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
priority: Optional[int] = None)
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
args: FirewallPolicyRuleCollectionGroupArgs,
opts: Optional[ResourceOptions] = None)
func NewFirewallPolicyRuleCollectionGroup(ctx *Context, name string, args FirewallPolicyRuleCollectionGroupArgs, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
public FirewallPolicyRuleCollectionGroup(string name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions? opts = null)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions options)
type: azure:network:FirewallPolicyRuleCollectionGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
FirewallPolicyRuleCollectionGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The FirewallPolicyRuleCollectionGroup resource accepts the following input properties:
- Firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> One or more
application_rule_collection
blocks as defined below.- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> One or more
nat_rule_collection
blocks as defined below.- Network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> One or more
network_rule_collection
blocks as defined below.
- Firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule []FirewallCollections Policy Rule Collection Group Application Rule Collection Args One or more
application_rule_collection
blocks as defined below.- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule []FirewallCollections Policy Rule Collection Group Nat Rule Collection Args One or more
nat_rule_collection
blocks as defined below.- Network
Rule []FirewallCollections Policy Rule Collection Group Network Rule Collection Args One or more
network_rule_collection
blocks as defined below.
- firewall
Policy StringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority Integer
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> One or more
application_rule_collection
blocks as defined below.- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> One or more
nat_rule_collection
blocks as defined below.- network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> One or more
network_rule_collection
blocks as defined below.
- firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority number
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule FirewallCollections Policy Rule Collection Group Application Rule Collection[] One or more
application_rule_collection
blocks as defined below.- name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule FirewallCollections Policy Rule Collection Group Nat Rule Collection[] One or more
nat_rule_collection
blocks as defined below.- network
Rule FirewallCollections Policy Rule Collection Group Network Rule Collection[] One or more
network_rule_collection
blocks as defined below.
- firewall_
policy_ strid The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Application Rule Collection Args] One or more
application_rule_collection
blocks as defined below.- name str
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Nat Rule Collection Args] One or more
nat_rule_collection
blocks as defined below.- network_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Network Rule Collection Args] One or more
network_rule_collection
blocks as defined below.
- firewall
Policy StringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority Number
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<Property Map>Collections One or more
application_rule_collection
blocks as defined below.- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<Property Map>Collections One or more
nat_rule_collection
blocks as defined below.- network
Rule List<Property Map>Collections One or more
network_rule_collection
blocks as defined below.
Outputs
All input properties are implicitly available as output properties. Additionally, the FirewallPolicyRuleCollectionGroup resource produces the following output properties:
- Id string
The provider-assigned unique ID for this managed resource.
- Id string
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
- id string
The provider-assigned unique ID for this managed resource.
- id str
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
Look up Existing FirewallPolicyRuleCollectionGroup Resource
Get an existing FirewallPolicyRuleCollectionGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: FirewallPolicyRuleCollectionGroupState, opts?: CustomResourceOptions): FirewallPolicyRuleCollectionGroup
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
firewall_policy_id: Optional[str] = None,
name: Optional[str] = None,
nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
priority: Optional[int] = None) -> FirewallPolicyRuleCollectionGroup
func GetFirewallPolicyRuleCollectionGroup(ctx *Context, name string, id IDInput, state *FirewallPolicyRuleCollectionGroupState, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
public static FirewallPolicyRuleCollectionGroup Get(string name, Input<string> id, FirewallPolicyRuleCollectionGroupState? state, CustomResourceOptions? opts = null)
public static FirewallPolicyRuleCollectionGroup get(String name, Output<String> id, FirewallPolicyRuleCollectionGroupState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> One or more
application_rule_collection
blocks as defined below.- Firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> One or more
nat_rule_collection
blocks as defined below.- Network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> One or more
network_rule_collection
blocks as defined below.- Priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule []FirewallCollections Policy Rule Collection Group Application Rule Collection Args One or more
application_rule_collection
blocks as defined below.- Firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule []FirewallCollections Policy Rule Collection Group Nat Rule Collection Args One or more
nat_rule_collection
blocks as defined below.- Network
Rule []FirewallCollections Policy Rule Collection Group Network Rule Collection Args One or more
network_rule_collection
blocks as defined below.- Priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> One or more
application_rule_collection
blocks as defined below.- firewall
Policy StringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> One or more
nat_rule_collection
blocks as defined below.- network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> One or more
network_rule_collection
blocks as defined below.- priority Integer
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule FirewallCollections Policy Rule Collection Group Application Rule Collection[] One or more
application_rule_collection
blocks as defined below.- firewall
Policy stringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule FirewallCollections Policy Rule Collection Group Nat Rule Collection[] One or more
nat_rule_collection
blocks as defined below.- network
Rule FirewallCollections Policy Rule Collection Group Network Rule Collection[] One or more
network_rule_collection
blocks as defined below.- priority number
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Application Rule Collection Args] One or more
application_rule_collection
blocks as defined below.- firewall_
policy_ strid The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name str
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Nat Rule Collection Args] One or more
nat_rule_collection
blocks as defined below.- network_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Network Rule Collection Args] One or more
network_rule_collection
blocks as defined below.- priority int
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<Property Map>Collections One or more
application_rule_collection
blocks as defined below.- firewall
Policy StringId The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<Property Map>Collections One or more
nat_rule_collection
blocks as defined below.- network
Rule List<Property Map>Collections One or more
network_rule_collection
blocks as defined below.- priority Number
The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
Supporting Types
FirewallPolicyRuleCollectionGroupApplicationRuleCollection, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs
- Action string
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- Name string
The name which should be used for this application rule collection.
- Priority int
The priority of the application rule collection. The range is
100
-65000
.- Rules
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule> One or more
application_rule
(application rule) blocks as defined below.
- Action string
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- Name string
The name which should be used for this application rule collection.
- Priority int
The priority of the application rule collection. The range is
100
-65000
.- Rules
[]Firewall
Policy Rule Collection Group Application Rule Collection Rule One or more
application_rule
(application rule) blocks as defined below.
- action String
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- name String
The name which should be used for this application rule collection.
- priority Integer
The priority of the application rule collection. The range is
100
-65000
.- rules
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule> One or more
application_rule
(application rule) blocks as defined below.
- action string
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- name string
The name which should be used for this application rule collection.
- priority number
The priority of the application rule collection. The range is
100
-65000
.- rules
Firewall
Policy Rule Collection Group Application Rule Collection Rule[] One or more
application_rule
(application rule) blocks as defined below.
- action str
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- name str
The name which should be used for this application rule collection.
- priority int
The priority of the application rule collection. The range is
100
-65000
.- rules
Sequence[Firewall
Policy Rule Collection Group Application Rule Collection Rule] One or more
application_rule
(application rule) blocks as defined below.
- action String
The action to take for the application rules in this collection. Possible values are
Allow
andDeny
.- name String
The name which should be used for this application rule collection.
- priority Number
The priority of the application rule collection. The range is
100
-65000
.- rules List<Property Map>
One or more
application_rule
(application rule) blocks as defined below.
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Description string
The description which should be used for this rule.
- Destination
Addresses List<string> Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- List<string>
Specifies a list of destination FQDN tags.
- Destination
Fqdns List<string> Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- Destination
Urls List<string> Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- Protocols
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol> One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- Source
Addresses List<string> Specifies a list of source IP addresses (including CIDR, IP range and
*
).- Source
Ip List<string>Groups Specifies a list of source IP groups.
- Terminate
Tls bool Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- Web
Categories List<string> Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Description string
The description which should be used for this rule.
- Destination
Addresses []string Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- []string
Specifies a list of destination FQDN tags.
- Destination
Fqdns []string Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- Destination
Urls []string Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- Protocols
[]Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- Source
Addresses []string Specifies a list of source IP addresses (including CIDR, IP range and
*
).- Source
Ip []stringGroups Specifies a list of source IP groups.
- Terminate
Tls bool Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- Web
Categories []string Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- description String
The description which should be used for this rule.
- destination
Addresses List<String> Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- List<String>
Specifies a list of destination FQDN tags.
- destination
Fqdns List<String> Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- destination
Urls List<String> Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- protocols
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol> One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- source
Addresses List<String> Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source
Ip List<String>Groups Specifies a list of source IP groups.
- terminate
Tls Boolean Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- web
Categories List<String> Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- description string
The description which should be used for this rule.
- destination
Addresses string[] Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- string[]
Specifies a list of destination FQDN tags.
- destination
Fqdns string[] Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- destination
Urls string[] Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- protocols
Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol[] One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- source
Addresses string[] Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source
Ip string[]Groups Specifies a list of source IP groups.
- terminate
Tls boolean Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- web
Categories string[] Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- name str
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- description str
The description which should be used for this rule.
- destination_
addresses Sequence[str] Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- Sequence[str]
Specifies a list of destination FQDN tags.
- destination_
fqdns Sequence[str] Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- destination_
urls Sequence[str] Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- protocols
Sequence[Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol] One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- source_
addresses Sequence[str] Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source_
ip_ Sequence[str]groups Specifies a list of source IP groups.
- terminate_
tls bool Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- web_
categories Sequence[str] Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- description String
The description which should be used for this rule.
- destination
Addresses List<String> Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- List<String>
Specifies a list of destination FQDN tags.
- destination
Fqdns List<String> Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- destination
Urls List<String> Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns
.- protocols List<Property Map>
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- source
Addresses List<String> Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source
Ip List<String>Groups Specifies a list of source IP groups.
- terminate
Tls Boolean Boolean specifying if TLS shall be terminated (true) or not (false). Must be
true
when usingdestination_urls
. Needs Premium SKU for Firewall Policy.- web
Categories List<String> Specifies a list of web categories to which access is denied or allowed depending on the value of
action
above. Needs Premium SKU for Firewall Policy.
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
FirewallPolicyRuleCollectionGroupNatRuleCollection, FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs
- Action string
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- Name string
The name which should be used for this NAT rule collection.
- Priority int
The priority of the NAT rule collection. The range is
100
-65000
.- Rules
List<Firewall
Policy Rule Collection Group Nat Rule Collection Rule> A
nat_rule
(NAT rule) block as defined below.
- Action string
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- Name string
The name which should be used for this NAT rule collection.
- Priority int
The priority of the NAT rule collection. The range is
100
-65000
.- Rules
[]Firewall
Policy Rule Collection Group Nat Rule Collection Rule A
nat_rule
(NAT rule) block as defined below.
- action String
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- name String
The name which should be used for this NAT rule collection.
- priority Integer
The priority of the NAT rule collection. The range is
100
-65000
.- rules
List<Firewall
Policy Rule Collection Group Nat Rule Collection Rule> A
nat_rule
(NAT rule) block as defined below.
- action string
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- name string
The name which should be used for this NAT rule collection.
- priority number
The priority of the NAT rule collection. The range is
100
-65000
.- rules
Firewall
Policy Rule Collection Group Nat Rule Collection Rule[] A
nat_rule
(NAT rule) block as defined below.
- action str
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- name str
The name which should be used for this NAT rule collection.
- priority int
The priority of the NAT rule collection. The range is
100
-65000
.- rules
Sequence[Firewall
Policy Rule Collection Group Nat Rule Collection Rule] A
nat_rule
(NAT rule) block as defined below.
- action String
The action to take for the NAT rules in this collection. Currently, the only possible value is
Dnat
.- name String
The name which should be used for this NAT rule collection.
- priority Number
The priority of the NAT rule collection. The range is
100
-65000
.- rules List<Property Map>
A
nat_rule
(NAT rule) block as defined below.
FirewallPolicyRuleCollectionGroupNatRuleCollectionRule, FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Protocols List<string>
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- Translated
Port int Specifies the translated port.
- Destination
Address string The destination IP address (including CIDR).
- Destination
Ports string Specifies a list of destination ports.
- Source
Addresses List<string> Specifies a list of source IP addresses (including CIDR, IP range and
*
).- Source
Ip List<string>Groups Specifies a list of source IP groups.
- Translated
Address string Specifies the translated address.
- Translated
Fqdn string Specifies the translated FQDN.
NOTE: Exactly one of
translated_address
andtranslated_fqdn
should be set.
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Protocols []string
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- Translated
Port int Specifies the translated port.
- Destination
Address string The destination IP address (including CIDR).
- Destination
Ports string Specifies a list of destination ports.
- Source
Addresses []string Specifies a list of source IP addresses (including CIDR, IP range and
*
).- Source
Ip []stringGroups Specifies a list of source IP groups.
- Translated
Address string Specifies the translated address.
- Translated
Fqdn string Specifies the translated FQDN.
NOTE: Exactly one of
translated_address
andtranslated_fqdn
should be set.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols List<String>
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- translated
Port Integer Specifies the translated port.
- destination
Address String The destination IP address (including CIDR).
- destination
Ports String Specifies a list of destination ports.
- source
Addresses List<String> Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source
Ip List<String>Groups Specifies a list of source IP groups.
- translated
Address String Specifies the translated address.
- translated
Fqdn String Specifies the translated FQDN.
NOTE: Exactly one of
translated_address
andtranslated_fqdn
should be set.
- name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols string[]
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- translated
Port number Specifies the translated port.
- destination
Address string The destination IP address (including CIDR).
- destination
Ports string Specifies a list of destination ports.
- source
Addresses string[] Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source
Ip string[]Groups Specifies a list of source IP groups.
- translated
Address string Specifies the translated address.
- translated
Fqdn string Specifies the translated FQDN.
NOTE: Exactly one of
translated_address
andtranslated_fqdn
should be set.
- name str
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols Sequence[str]
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- translated_
port int Specifies the translated port.
- destination_
address str The destination IP address (including CIDR).
- destination_
ports str Specifies a list of destination ports.
- source_
addresses Sequence[str] Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source_
ip_ Sequence[str]groups Specifies a list of source IP groups.
- translated_
address str Specifies the translated address.
- translated_
fqdn str Specifies the translated FQDN.
NOTE: Exactly one of
translated_address
andtranslated_fqdn
should be set.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols List<String>
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- translated
Port Number Specifies the translated port.
- destination
Address String The destination IP address (including CIDR).
- destination
Ports String Specifies a list of destination ports.
- source
Addresses List<String> Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source
Ip List<String>Groups Specifies a list of source IP groups.
- translated
Address String Specifies the translated address.
- translated
Fqdn String Specifies the translated FQDN.
NOTE: Exactly one of
translated_address
andtranslated_fqdn
should be set.
FirewallPolicyRuleCollectionGroupNetworkRuleCollection, FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs
- Action string
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- Name string
The name which should be used for this network rule collection.
- Priority int
The priority of the network rule collection. The range is
100
-65000
.- Rules
List<Firewall
Policy Rule Collection Group Network Rule Collection Rule> One or more
network_rule
(network rule) blocks as defined below.
- Action string
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- Name string
The name which should be used for this network rule collection.
- Priority int
The priority of the network rule collection. The range is
100
-65000
.- Rules
[]Firewall
Policy Rule Collection Group Network Rule Collection Rule One or more
network_rule
(network rule) blocks as defined below.
- action String
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- name String
The name which should be used for this network rule collection.
- priority Integer
The priority of the network rule collection. The range is
100
-65000
.- rules
List<Firewall
Policy Rule Collection Group Network Rule Collection Rule> One or more
network_rule
(network rule) blocks as defined below.
- action string
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- name string
The name which should be used for this network rule collection.
- priority number
The priority of the network rule collection. The range is
100
-65000
.- rules
Firewall
Policy Rule Collection Group Network Rule Collection Rule[] One or more
network_rule
(network rule) blocks as defined below.
- action str
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- name str
The name which should be used for this network rule collection.
- priority int
The priority of the network rule collection. The range is
100
-65000
.- rules
Sequence[Firewall
Policy Rule Collection Group Network Rule Collection Rule] One or more
network_rule
(network rule) blocks as defined below.
- action String
The action to take for the network rules in this collection. Possible values are
Allow
andDeny
.- name String
The name which should be used for this network rule collection.
- priority Number
The priority of the network rule collection. The range is
100
-65000
.- rules List<Property Map>
One or more
network_rule
(network rule) blocks as defined below.
FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule, FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs
- Destination
Ports List<string> Specifies a list of destination ports.
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Protocols List<string>
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- Destination
Addresses List<string> Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- Destination
Fqdns List<string> Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- Destination
Ip List<string>Groups Specifies a list of destination IP groups.
- Source
Addresses List<string> Specifies a list of source IP addresses (including CIDR, IP range and
*
).- Source
Ip List<string>Groups Specifies a list of source IP groups.
- Destination
Ports []string Specifies a list of destination ports.
- Name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Protocols []string
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- Destination
Addresses []string Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- Destination
Fqdns []string Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- Destination
Ip []stringGroups Specifies a list of destination IP groups.
- Source
Addresses []string Specifies a list of source IP addresses (including CIDR, IP range and
*
).- Source
Ip []stringGroups Specifies a list of source IP groups.
- destination
Ports List<String> Specifies a list of destination ports.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols List<String>
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- destination
Addresses List<String> Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- destination
Fqdns List<String> Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- destination
Ip List<String>Groups Specifies a list of destination IP groups.
- source
Addresses List<String> Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source
Ip List<String>Groups Specifies a list of source IP groups.
- destination
Ports string[] Specifies a list of destination ports.
- name string
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols string[]
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- destination
Addresses string[] Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- destination
Fqdns string[] Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- destination
Ip string[]Groups Specifies a list of destination IP groups.
- source
Addresses string[] Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source
Ip string[]Groups Specifies a list of source IP groups.
- destination_
ports Sequence[str] Specifies a list of destination ports.
- name str
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols Sequence[str]
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- destination_
addresses Sequence[str] Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- destination_
fqdns Sequence[str] Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- destination_
ip_ Sequence[str]groups Specifies a list of destination IP groups.
- source_
addresses Sequence[str] Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source_
ip_ Sequence[str]groups Specifies a list of source IP groups.
- destination
Ports List<String> Specifies a list of destination ports.
- name String
The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- protocols List<String>
One or more
protocols
blocks as defined below. Not required when specifyingdestination_fqdn_tags
, but required when specifyingdestination_fqdns
.- destination
Addresses List<String> Specifies a list of destination IP addresses (including CIDR, IP range and
*
).- destination
Fqdns List<String> Specifies a list of destination FQDNs. Conflicts with
destination_urls
.- destination
Ip List<String>Groups Specifies a list of destination IP groups.
- source
Addresses List<String> Specifies a list of source IP addresses (including CIDR, IP range and
*
).- source
Ip List<String>Groups Specifies a list of source IP groups.
Import
Firewall Policy Rule Collection Groups can be imported using the resource id
, e.g.
$ pulumi import azure:network/firewallPolicyRuleCollectionGroup:FirewallPolicyRuleCollectionGroup example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.Network/firewallPolicies/policy1/ruleCollectionGroups/gruop1
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
azurerm
Terraform Provider.