1. Pulumi Registry
  2. Azure Classic
  3. API Docs
  4. network
  5. FirewallPolicyRuleCollectionGroup
azure logo
Azure Classic v5.32.0, Jan 25 23

azure.network.FirewallPolicyRuleCollectionGroup

Manages a Firewall Policy Rule Collection Group.

Example Usage

Coming soon!

Coming soon!

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.FirewallPolicy;
import com.pulumi.azure.network.FirewallPolicyArgs;
import com.pulumi.azure.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azure.network.FirewallPolicyRuleCollectionGroupArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()        
            .location("West Europe")
            .build());

        var exampleFirewallPolicy = new FirewallPolicy("exampleFirewallPolicy", FirewallPolicyArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .build());

        var exampleFirewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()        
            .firewallPolicyId(exampleFirewallPolicy.id())
            .priority(500)
            .applicationRuleCollections(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs.builder()
                .name("app_rule_collection1")
                .priority(500)
                .action("Deny")
                .rules(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs.builder()
                    .name("app_rule_collection1_rule1")
                    .protocols(                    
                        FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
                            .type("Http")
                            .port(80)
                            .build(),
                        FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
                            .type("Https")
                            .port(443)
                            .build())
                    .sourceAddresses("10.0.0.1")
                    .destinationFqdns("*.microsoft.com")
                    .build())
                .build())
            .networkRuleCollections(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs.builder()
                .name("network_rule_collection1")
                .priority(400)
                .action("Deny")
                .rules(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs.builder()
                    .name("network_rule_collection1_rule1")
                    .protocols(                    
                        "TCP",
                        "UDP")
                    .sourceAddresses("10.0.0.1")
                    .destinationAddresses(                    
                        "192.168.1.1",
                        "192.168.1.2")
                    .destinationPorts(                    
                        "80",
                        "1000-2000")
                    .build())
                .build())
            .natRuleCollections(FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs.builder()
                .name("nat_rule_collection1")
                .priority(300)
                .action("Dnat")
                .rules(FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs.builder()
                    .name("nat_rule_collection1_rule1")
                    .protocols(                    
                        "TCP",
                        "UDP")
                    .sourceAddresses(                    
                        "10.0.0.1",
                        "10.0.0.2")
                    .destinationAddress("192.168.1.1")
                    .destinationPorts("80")
                    .translatedAddress("192.168.0.1")
                    .translatedPort("8080")
                    .build())
                .build())
            .build());

    }
}

Coming soon!

Coming soon!

resources:
  exampleResourceGroup:
    type: azure:core:ResourceGroup
    properties:
      location: West Europe
  exampleFirewallPolicy:
    type: azure:network:FirewallPolicy
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}
  exampleFirewallPolicyRuleCollectionGroup:
    type: azure:network:FirewallPolicyRuleCollectionGroup
    properties:
      firewallPolicyId: ${exampleFirewallPolicy.id}
      priority: 500
      applicationRuleCollections:
        - name: app_rule_collection1
          priority: 500
          action: Deny
          rules:
            - name: app_rule_collection1_rule1
              protocols:
                - type: Http
                  port: 80
                - type: Https
                  port: 443
              sourceAddresses:
                - 10.0.0.1
              destinationFqdns:
                - '*.microsoft.com'
      networkRuleCollections:
        - name: network_rule_collection1
          priority: 400
          action: Deny
          rules:
            - name: network_rule_collection1_rule1
              protocols:
                - TCP
                - UDP
              sourceAddresses:
                - 10.0.0.1
              destinationAddresses:
                - 192.168.1.1
                - 192.168.1.2
              destinationPorts:
                - '80'
                - 1000-2000
      natRuleCollections:
        - name: nat_rule_collection1
          priority: 300
          action: Dnat
          rules:
            - name: nat_rule_collection1_rule1
              protocols:
                - TCP
                - UDP
              sourceAddresses:
                - 10.0.0.1
                - 10.0.0.2
              destinationAddress: 192.168.1.1
              destinationPorts:
                - '80'
              translatedAddress: 192.168.0.1
              translatedPort: '8080'

Create FirewallPolicyRuleCollectionGroup Resource

new FirewallPolicyRuleCollectionGroup(name: string, args: FirewallPolicyRuleCollectionGroupArgs, opts?: CustomResourceOptions);
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
                                      firewall_policy_id: Optional[str] = None,
                                      name: Optional[str] = None,
                                      nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
                                      network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
                                      priority: Optional[int] = None)
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
                                      args: FirewallPolicyRuleCollectionGroupArgs,
                                      opts: Optional[ResourceOptions] = None)
func NewFirewallPolicyRuleCollectionGroup(ctx *Context, name string, args FirewallPolicyRuleCollectionGroupArgs, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
public FirewallPolicyRuleCollectionGroup(string name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions? opts = null)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions options)

type: azure:network:FirewallPolicyRuleCollectionGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args FirewallPolicyRuleCollectionGroupArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args FirewallPolicyRuleCollectionGroupArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args FirewallPolicyRuleCollectionGroupArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args FirewallPolicyRuleCollectionGroupArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args FirewallPolicyRuleCollectionGroupArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

FirewallPolicyRuleCollectionGroup Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The FirewallPolicyRuleCollectionGroup resource accepts the following input properties:

FirewallPolicyId string

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Priority int

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

ApplicationRuleCollections List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs>

One or more application_rule_collection blocks as defined below.

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

NatRuleCollections List<FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs>

One or more nat_rule_collection blocks as defined below.

NetworkRuleCollections List<FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs>

One or more network_rule_collection blocks as defined below.

FirewallPolicyId string

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Priority int

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

ApplicationRuleCollections []FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs

One or more application_rule_collection blocks as defined below.

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

NatRuleCollections []FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs

One or more nat_rule_collection blocks as defined below.

NetworkRuleCollections []FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs

One or more network_rule_collection blocks as defined below.

firewallPolicyId String

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

priority Integer

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

applicationRuleCollections List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs>

One or more application_rule_collection blocks as defined below.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

natRuleCollections List<FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs>

One or more nat_rule_collection blocks as defined below.

networkRuleCollections List<FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs>

One or more network_rule_collection blocks as defined below.

firewallPolicyId string

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

priority number

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

applicationRuleCollections FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs[]

One or more application_rule_collection blocks as defined below.

name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

natRuleCollections FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs[]

One or more nat_rule_collection blocks as defined below.

networkRuleCollections FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs[]

One or more network_rule_collection blocks as defined below.

firewall_policy_id str

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

priority int

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

application_rule_collections Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]

One or more application_rule_collection blocks as defined below.

name str

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

nat_rule_collections Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]

One or more nat_rule_collection blocks as defined below.

network_rule_collections Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]

One or more network_rule_collection blocks as defined below.

firewallPolicyId String

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

priority Number

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

applicationRuleCollections List<Property Map>

One or more application_rule_collection blocks as defined below.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

natRuleCollections List<Property Map>

One or more nat_rule_collection blocks as defined below.

networkRuleCollections List<Property Map>

One or more network_rule_collection blocks as defined below.

Outputs

All input properties are implicitly available as output properties. Additionally, the FirewallPolicyRuleCollectionGroup resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

Id string

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id str

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

Look up Existing FirewallPolicyRuleCollectionGroup Resource

Get an existing FirewallPolicyRuleCollectionGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: FirewallPolicyRuleCollectionGroupState, opts?: CustomResourceOptions): FirewallPolicyRuleCollectionGroup
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
        firewall_policy_id: Optional[str] = None,
        name: Optional[str] = None,
        nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
        network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
        priority: Optional[int] = None) -> FirewallPolicyRuleCollectionGroup
func GetFirewallPolicyRuleCollectionGroup(ctx *Context, name string, id IDInput, state *FirewallPolicyRuleCollectionGroupState, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
public static FirewallPolicyRuleCollectionGroup Get(string name, Input<string> id, FirewallPolicyRuleCollectionGroupState? state, CustomResourceOptions? opts = null)
public static FirewallPolicyRuleCollectionGroup get(String name, Output<String> id, FirewallPolicyRuleCollectionGroupState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
ApplicationRuleCollections List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs>

One or more application_rule_collection blocks as defined below.

FirewallPolicyId string

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

NatRuleCollections List<FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs>

One or more nat_rule_collection blocks as defined below.

NetworkRuleCollections List<FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs>

One or more network_rule_collection blocks as defined below.

Priority int

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

ApplicationRuleCollections []FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs

One or more application_rule_collection blocks as defined below.

FirewallPolicyId string

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

NatRuleCollections []FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs

One or more nat_rule_collection blocks as defined below.

NetworkRuleCollections []FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs

One or more network_rule_collection blocks as defined below.

Priority int

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

applicationRuleCollections List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs>

One or more application_rule_collection blocks as defined below.

firewallPolicyId String

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

natRuleCollections List<FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs>

One or more nat_rule_collection blocks as defined below.

networkRuleCollections List<FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs>

One or more network_rule_collection blocks as defined below.

priority Integer

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

applicationRuleCollections FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs[]

One or more application_rule_collection blocks as defined below.

firewallPolicyId string

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

natRuleCollections FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs[]

One or more nat_rule_collection blocks as defined below.

networkRuleCollections FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs[]

One or more network_rule_collection blocks as defined below.

priority number

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

application_rule_collections Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]

One or more application_rule_collection blocks as defined below.

firewall_policy_id str

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

name str

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

nat_rule_collections Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]

One or more nat_rule_collection blocks as defined below.

network_rule_collections Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]

One or more network_rule_collection blocks as defined below.

priority int

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

applicationRuleCollections List<Property Map>

One or more application_rule_collection blocks as defined below.

firewallPolicyId String

The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

natRuleCollections List<Property Map>

One or more nat_rule_collection blocks as defined below.

networkRuleCollections List<Property Map>

One or more network_rule_collection blocks as defined below.

priority Number

The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.

Supporting Types

FirewallPolicyRuleCollectionGroupApplicationRuleCollection

Action string

The action to take for the application rules in this collection. Possible values are Allow and Deny.

Name string

The name which should be used for this application rule collection.

Priority int

The priority of the application rule collection. The range is 100 - 65000.

Rules List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule>

One or more application_rule (application rule) blocks as defined below.

Action string

The action to take for the application rules in this collection. Possible values are Allow and Deny.

Name string

The name which should be used for this application rule collection.

Priority int

The priority of the application rule collection. The range is 100 - 65000.

Rules []FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule

One or more application_rule (application rule) blocks as defined below.

action String

The action to take for the application rules in this collection. Possible values are Allow and Deny.

name String

The name which should be used for this application rule collection.

priority Integer

The priority of the application rule collection. The range is 100 - 65000.

rules List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule>

One or more application_rule (application rule) blocks as defined below.

action string

The action to take for the application rules in this collection. Possible values are Allow and Deny.

name string

The name which should be used for this application rule collection.

priority number

The priority of the application rule collection. The range is 100 - 65000.

rules FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule[]

One or more application_rule (application rule) blocks as defined below.

action str

The action to take for the application rules in this collection. Possible values are Allow and Deny.

name str

The name which should be used for this application rule collection.

priority int

The priority of the application rule collection. The range is 100 - 65000.

rules Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule]

One or more application_rule (application rule) blocks as defined below.

action String

The action to take for the application rules in this collection. Possible values are Allow and Deny.

name String

The name which should be used for this application rule collection.

priority Number

The priority of the application rule collection. The range is 100 - 65000.

rules List<Property Map>

One or more application_rule (application rule) blocks as defined below.

FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Description string

The description which should be used for this rule.

DestinationAddresses List<string>

Specifies a list of destination IP addresses (including CIDR and *).

DestinationFqdnTags List<string>

Specifies a list of destination FQDN tags.

DestinationFqdns List<string>

Specifies a list of destination FQDNs. Conflicts with destination_urls.

DestinationUrls List<string>

Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

Protocols List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol>

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

SourceAddresses List<string>

Specifies a list of source IP addresses (including CIDR and *).

SourceIpGroups List<string>

Specifies a list of source IP groups.

TerminateTls bool

Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

WebCategories List<string>

Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Description string

The description which should be used for this rule.

DestinationAddresses []string

Specifies a list of destination IP addresses (including CIDR and *).

DestinationFqdnTags []string

Specifies a list of destination FQDN tags.

DestinationFqdns []string

Specifies a list of destination FQDNs. Conflicts with destination_urls.

DestinationUrls []string

Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

Protocols []FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

SourceAddresses []string

Specifies a list of source IP addresses (including CIDR and *).

SourceIpGroups []string

Specifies a list of source IP groups.

TerminateTls bool

Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

WebCategories []string

Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

description String

The description which should be used for this rule.

destinationAddresses List<String>

Specifies a list of destination IP addresses (including CIDR and *).

destinationFqdnTags List<String>

Specifies a list of destination FQDN tags.

destinationFqdns List<String>

Specifies a list of destination FQDNs. Conflicts with destination_urls.

destinationUrls List<String>

Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

protocols List<FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol>

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

sourceAddresses List<String>

Specifies a list of source IP addresses (including CIDR and *).

sourceIpGroups List<String>

Specifies a list of source IP groups.

terminateTls Boolean

Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

webCategories List<String>

Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

description string

The description which should be used for this rule.

destinationAddresses string[]

Specifies a list of destination IP addresses (including CIDR and *).

destinationFqdnTags string[]

Specifies a list of destination FQDN tags.

destinationFqdns string[]

Specifies a list of destination FQDNs. Conflicts with destination_urls.

destinationUrls string[]

Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

protocols FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol[]

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

sourceAddresses string[]

Specifies a list of source IP addresses (including CIDR and *).

sourceIpGroups string[]

Specifies a list of source IP groups.

terminateTls boolean

Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

webCategories string[]

Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

name str

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

description str

The description which should be used for this rule.

destination_addresses Sequence[str]

Specifies a list of destination IP addresses (including CIDR and *).

destination_fqdn_tags Sequence[str]

Specifies a list of destination FQDN tags.

destination_fqdns Sequence[str]

Specifies a list of destination FQDNs. Conflicts with destination_urls.

destination_urls Sequence[str]

Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

protocols Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol]

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

source_addresses Sequence[str]

Specifies a list of source IP addresses (including CIDR and *).

source_ip_groups Sequence[str]

Specifies a list of source IP groups.

terminate_tls bool

Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

web_categories Sequence[str]

Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

description String

The description which should be used for this rule.

destinationAddresses List<String>

Specifies a list of destination IP addresses (including CIDR and *).

destinationFqdnTags List<String>

Specifies a list of destination FQDN tags.

destinationFqdns List<String>

Specifies a list of destination FQDNs. Conflicts with destination_urls.

destinationUrls List<String>

Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with destination_fqdns.

protocols List<Property Map>

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

sourceAddresses List<String>

Specifies a list of source IP addresses (including CIDR and *).

sourceIpGroups List<String>

Specifies a list of source IP groups.

terminateTls Boolean

Boolean specifying if TLS shall be terminated (true) or not (false). Must be true when using destination_urls. Needs Premium SKU for Firewall Policy.

webCategories List<String>

Specifies a list of web categories to which access is denied or allowed depending on the value of action above. Needs Premium SKU for Firewall Policy.

FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol

Port int

Port number of the protocol. Range is 0-64000.

Type string

Protocol type. Possible values are Http and Https.

Port int

Port number of the protocol. Range is 0-64000.

Type string

Protocol type. Possible values are Http and Https.

port Integer

Port number of the protocol. Range is 0-64000.

type String

Protocol type. Possible values are Http and Https.

port number

Port number of the protocol. Range is 0-64000.

type string

Protocol type. Possible values are Http and Https.

port int

Port number of the protocol. Range is 0-64000.

type str

Protocol type. Possible values are Http and Https.

port Number

Port number of the protocol. Range is 0-64000.

type String

Protocol type. Possible values are Http and Https.

FirewallPolicyRuleCollectionGroupNatRuleCollection

Action string

The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

Name string

The name which should be used for this NAT rule collection.

Priority int

The priority of the NAT rule collection. The range is 100 - 65000.

Rules List<FirewallPolicyRuleCollectionGroupNatRuleCollectionRule>

A nat_rule (NAT rule) block as defined below.

Action string

The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

Name string

The name which should be used for this NAT rule collection.

Priority int

The priority of the NAT rule collection. The range is 100 - 65000.

Rules []FirewallPolicyRuleCollectionGroupNatRuleCollectionRule

A nat_rule (NAT rule) block as defined below.

action String

The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

name String

The name which should be used for this NAT rule collection.

priority Integer

The priority of the NAT rule collection. The range is 100 - 65000.

rules List<FirewallPolicyRuleCollectionGroupNatRuleCollectionRule>

A nat_rule (NAT rule) block as defined below.

action string

The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

name string

The name which should be used for this NAT rule collection.

priority number

The priority of the NAT rule collection. The range is 100 - 65000.

rules FirewallPolicyRuleCollectionGroupNatRuleCollectionRule[]

A nat_rule (NAT rule) block as defined below.

action str

The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

name str

The name which should be used for this NAT rule collection.

priority int

The priority of the NAT rule collection. The range is 100 - 65000.

rules Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionRule]

A nat_rule (NAT rule) block as defined below.

action String

The action to take for the NAT rules in this collection. Currently, the only possible value is Dnat.

name String

The name which should be used for this NAT rule collection.

priority Number

The priority of the NAT rule collection. The range is 100 - 65000.

rules List<Property Map>

A nat_rule (NAT rule) block as defined below.

FirewallPolicyRuleCollectionGroupNatRuleCollectionRule

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Protocols List<string>

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

TranslatedPort int

Specifies the translated port.

DestinationAddress string

The destination IP address (including CIDR).

DestinationPorts string

Specifies a list of destination ports.

SourceAddresses List<string>

Specifies a list of source IP addresses (including CIDR and *).

SourceIpGroups List<string>

Specifies a list of source IP groups.

TranslatedAddress string

Specifies the translated address.

TranslatedFqdn string

Specifies the translated FQDN.

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Protocols []string

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

TranslatedPort int

Specifies the translated port.

DestinationAddress string

The destination IP address (including CIDR).

DestinationPorts string

Specifies a list of destination ports.

SourceAddresses []string

Specifies a list of source IP addresses (including CIDR and *).

SourceIpGroups []string

Specifies a list of source IP groups.

TranslatedAddress string

Specifies the translated address.

TranslatedFqdn string

Specifies the translated FQDN.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

protocols List<String>

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

translatedPort Integer

Specifies the translated port.

destinationAddress String

The destination IP address (including CIDR).

destinationPorts String

Specifies a list of destination ports.

sourceAddresses List<String>

Specifies a list of source IP addresses (including CIDR and *).

sourceIpGroups List<String>

Specifies a list of source IP groups.

translatedAddress String

Specifies the translated address.

translatedFqdn String

Specifies the translated FQDN.

name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

protocols string[]

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

translatedPort number

Specifies the translated port.

destinationAddress string

The destination IP address (including CIDR).

destinationPorts string

Specifies a list of destination ports.

sourceAddresses string[]

Specifies a list of source IP addresses (including CIDR and *).

sourceIpGroups string[]

Specifies a list of source IP groups.

translatedAddress string

Specifies the translated address.

translatedFqdn string

Specifies the translated FQDN.

name str

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

protocols Sequence[str]

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

translated_port int

Specifies the translated port.

destination_address str

The destination IP address (including CIDR).

destination_ports str

Specifies a list of destination ports.

source_addresses Sequence[str]

Specifies a list of source IP addresses (including CIDR and *).

source_ip_groups Sequence[str]

Specifies a list of source IP groups.

translated_address str

Specifies the translated address.

translated_fqdn str

Specifies the translated FQDN.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

protocols List<String>

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

translatedPort Number

Specifies the translated port.

destinationAddress String

The destination IP address (including CIDR).

destinationPorts String

Specifies a list of destination ports.

sourceAddresses List<String>

Specifies a list of source IP addresses (including CIDR and *).

sourceIpGroups List<String>

Specifies a list of source IP groups.

translatedAddress String

Specifies the translated address.

translatedFqdn String

Specifies the translated FQDN.

FirewallPolicyRuleCollectionGroupNetworkRuleCollection

Action string

The action to take for the network rules in this collection. Possible values are Allow and Deny.

Name string

The name which should be used for this network rule collection.

Priority int

The priority of the network rule collection. The range is 100 - 65000.

Rules List<FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule>

One or more network_rule (network rule) blocks as defined below.

Action string

The action to take for the network rules in this collection. Possible values are Allow and Deny.

Name string

The name which should be used for this network rule collection.

Priority int

The priority of the network rule collection. The range is 100 - 65000.

Rules []FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule

One or more network_rule (network rule) blocks as defined below.

action String

The action to take for the network rules in this collection. Possible values are Allow and Deny.

name String

The name which should be used for this network rule collection.

priority Integer

The priority of the network rule collection. The range is 100 - 65000.

rules List<FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule>

One or more network_rule (network rule) blocks as defined below.

action string

The action to take for the network rules in this collection. Possible values are Allow and Deny.

name string

The name which should be used for this network rule collection.

priority number

The priority of the network rule collection. The range is 100 - 65000.

rules FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule[]

One or more network_rule (network rule) blocks as defined below.

action str

The action to take for the network rules in this collection. Possible values are Allow and Deny.

name str

The name which should be used for this network rule collection.

priority int

The priority of the network rule collection. The range is 100 - 65000.

rules Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule]

One or more network_rule (network rule) blocks as defined below.

action String

The action to take for the network rules in this collection. Possible values are Allow and Deny.

name String

The name which should be used for this network rule collection.

priority Number

The priority of the network rule collection. The range is 100 - 65000.

rules List<Property Map>

One or more network_rule (network rule) blocks as defined below.

FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule

DestinationPorts List<string>

Specifies a list of destination ports.

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Protocols List<string>

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

DestinationAddresses List<string>

Specifies a list of destination IP addresses (including CIDR and *).

DestinationFqdns List<string>

Specifies a list of destination FQDNs. Conflicts with destination_urls.

DestinationIpGroups List<string>

Specifies a list of destination IP groups.

SourceAddresses List<string>

Specifies a list of source IP addresses (including CIDR and *).

SourceIpGroups List<string>

Specifies a list of source IP groups.

DestinationPorts []string

Specifies a list of destination ports.

Name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

Protocols []string

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

DestinationAddresses []string

Specifies a list of destination IP addresses (including CIDR and *).

DestinationFqdns []string

Specifies a list of destination FQDNs. Conflicts with destination_urls.

DestinationIpGroups []string

Specifies a list of destination IP groups.

SourceAddresses []string

Specifies a list of source IP addresses (including CIDR and *).

SourceIpGroups []string

Specifies a list of source IP groups.

destinationPorts List<String>

Specifies a list of destination ports.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

protocols List<String>

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

destinationAddresses List<String>

Specifies a list of destination IP addresses (including CIDR and *).

destinationFqdns List<String>

Specifies a list of destination FQDNs. Conflicts with destination_urls.

destinationIpGroups List<String>

Specifies a list of destination IP groups.

sourceAddresses List<String>

Specifies a list of source IP addresses (including CIDR and *).

sourceIpGroups List<String>

Specifies a list of source IP groups.

destinationPorts string[]

Specifies a list of destination ports.

name string

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

protocols string[]

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

destinationAddresses string[]

Specifies a list of destination IP addresses (including CIDR and *).

destinationFqdns string[]

Specifies a list of destination FQDNs. Conflicts with destination_urls.

destinationIpGroups string[]

Specifies a list of destination IP groups.

sourceAddresses string[]

Specifies a list of source IP addresses (including CIDR and *).

sourceIpGroups string[]

Specifies a list of source IP groups.

destination_ports Sequence[str]

Specifies a list of destination ports.

name str

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

protocols Sequence[str]

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

destination_addresses Sequence[str]

Specifies a list of destination IP addresses (including CIDR and *).

destination_fqdns Sequence[str]

Specifies a list of destination FQDNs. Conflicts with destination_urls.

destination_ip_groups Sequence[str]

Specifies a list of destination IP groups.

source_addresses Sequence[str]

Specifies a list of source IP addresses (including CIDR and *).

source_ip_groups Sequence[str]

Specifies a list of source IP groups.

destinationPorts List<String>

Specifies a list of destination ports.

name String

The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.

protocols List<String>

One or more protocols blocks as defined below. Not required when specifying destination_fqdn_tags, but required when specifying destination_fqdns.

destinationAddresses List<String>

Specifies a list of destination IP addresses (including CIDR and *).

destinationFqdns List<String>

Specifies a list of destination FQDNs. Conflicts with destination_urls.

destinationIpGroups List<String>

Specifies a list of destination IP groups.

sourceAddresses List<String>

Specifies a list of source IP addresses (including CIDR and *).

sourceIpGroups List<String>

Specifies a list of source IP groups.

Import

Firewall Policy Rule Collection Groups can be imported using the resource id, e.g.

 $ pulumi import azure:network/firewallPolicyRuleCollectionGroup:FirewallPolicyRuleCollectionGroup example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.Network/firewallPolicies/policy1/ruleCollectionGroups/gruop1

Package Details

Repository
Azure Classic pulumi/pulumi-azure
License
Apache-2.0
Notes

This Pulumi package is based on the azurerm Terraform Provider.