We recommend using Azure Native.
Viewing docs for Azure v4.42.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi
published on Monday, Mar 9, 2026 by Pulumi
We recommend using Azure Native.
Viewing docs for Azure v4.42.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi
published on Monday, Mar 9, 2026 by Pulumi
Manages a Firewall Policy Rule Collection Group.
Example Usage
using Pulumi;
using Azure = Pulumi.Azure;
class MyStack : Stack
{
public MyStack()
{
var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new Azure.Core.ResourceGroupArgs
{
Location = "West Europe",
});
var exampleFirewallPolicy = new Azure.Network.FirewallPolicy("exampleFirewallPolicy", new Azure.Network.FirewallPolicyArgs
{
ResourceGroupName = exampleResourceGroup.Name,
Location = exampleResourceGroup.Location,
});
var exampleFirewallPolicyRuleCollectionGroup = new Azure.Network.FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup", new Azure.Network.FirewallPolicyRuleCollectionGroupArgs
{
FirewallPolicyId = exampleFirewallPolicy.Id,
Priority = 500,
ApplicationRuleCollections =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs
{
Name = "app_rule_collection1",
Priority = 500,
Action = "Deny",
Rules =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs
{
Name = "app_rule_collection1_rule1",
Protocols =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
{
Type = "Http",
Port = 80,
},
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
{
Type = "Https",
Port = 443,
},
},
SourceAddresses =
{
"10.0.0.1",
},
DestinationFqdns =
{
".microsoft.com",
},
},
},
},
},
NetworkRuleCollections =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs
{
Name = "network_rule_collection1",
Priority = 400,
Action = "Deny",
Rules =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs
{
Name = "network_rule_collection1_rule1",
Protocols =
{
"TCP",
"UDP",
},
SourceAddresses =
{
"10.0.0.1",
},
DestinationAddresses =
{
"192.168.1.1",
"192.168.1.2",
},
DestinationPorts =
{
"80",
"1000-2000",
},
},
},
},
},
NatRuleCollections =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs
{
Name = "nat_rule_collection1",
Priority = 300,
Action = "Dnat",
Rules =
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs
{
Name = "nat_rule_collection1_rule1",
Protocols =
{
"TCP",
"UDP",
},
SourceAddresses =
{
"10.0.0.1",
"10.0.0.2",
},
DestinationAddress = "192.168.1.1",
DestinationPorts =
{
"80",
"1000-2000",
},
TranslatedAddress = "192.168.0.1",
TranslatedPort = 8080,
},
},
},
},
});
}
}
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v4/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v4/go/azure/network"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleFirewallPolicy, err := network.NewFirewallPolicy(ctx, "exampleFirewallPolicy", &network.FirewallPolicyArgs{
ResourceGroupName: exampleResourceGroup.Name,
Location: exampleResourceGroup.Location,
})
if err != nil {
return err
}
_, err = network.NewFirewallPolicyRuleCollectionGroup(ctx, "exampleFirewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyId: exampleFirewallPolicy.ID(),
Priority: pulumi.Int(500),
ApplicationRuleCollections: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs{
Name: pulumi.String("app_rule_collection1"),
Priority: pulumi.Int(500),
Action: pulumi.String("Deny"),
Rules: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs{
Name: pulumi.String("app_rule_collection1_rule1"),
Protocols: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs{
Type: pulumi.String("Http"),
Port: pulumi.Int(80),
},
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs{
Type: pulumi.String("Https"),
Port: pulumi.Int(443),
},
},
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.1"),
},
DestinationFqdns: pulumi.StringArray{
pulumi.String(".microsoft.com"),
},
},
},
},
},
NetworkRuleCollections: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs{
Name: pulumi.String("network_rule_collection1"),
Priority: pulumi.Int(400),
Action: pulumi.String("Deny"),
Rules: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs{
Name: pulumi.String("network_rule_collection1_rule1"),
Protocols: pulumi.StringArray{
pulumi.String("TCP"),
pulumi.String("UDP"),
},
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.1"),
},
DestinationAddresses: pulumi.StringArray{
pulumi.String("192.168.1.1"),
pulumi.String("192.168.1.2"),
},
DestinationPorts: pulumi.StringArray{
pulumi.String("80"),
pulumi.String("1000-2000"),
},
},
},
},
},
NatRuleCollections: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs{
Name: pulumi.String("nat_rule_collection1"),
Priority: pulumi.Int(300),
Action: pulumi.String("Dnat"),
Rules: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs{
Name: pulumi.String("nat_rule_collection1_rule1"),
Protocols: pulumi.StringArray{
pulumi.String("TCP"),
pulumi.String("UDP"),
},
SourceAddresses: pulumi.StringArray{
pulumi.String("10.0.0.1"),
pulumi.String("10.0.0.2"),
},
DestinationAddress: pulumi.String("192.168.1.1"),
DestinationPorts: pulumi.StringArray{
pulumi.String("80"),
pulumi.String("1000-2000"),
},
TranslatedAddress: pulumi.String("192.168.0.1"),
TranslatedPort: pulumi.Int(8080),
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
Example coming soon!
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West Europe"});
const exampleFirewallPolicy = new azure.network.FirewallPolicy("exampleFirewallPolicy", {
resourceGroupName: exampleResourceGroup.name,
location: exampleResourceGroup.location,
});
const exampleFirewallPolicyRuleCollectionGroup = new azure.network.FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup", {
firewallPolicyId: exampleFirewallPolicy.id,
priority: 500,
applicationRuleCollections: [{
name: "app_rule_collection1",
priority: 500,
action: "Deny",
rules: [{
name: "app_rule_collection1_rule1",
protocols: [
{
type: "Http",
port: 80,
},
{
type: "Https",
port: 443,
},
],
sourceAddresses: ["10.0.0.1"],
destinationFqdns: [".microsoft.com"],
}],
}],
networkRuleCollections: [{
name: "network_rule_collection1",
priority: 400,
action: "Deny",
rules: [{
name: "network_rule_collection1_rule1",
protocols: [
"TCP",
"UDP",
],
sourceAddresses: ["10.0.0.1"],
destinationAddresses: [
"192.168.1.1",
"192.168.1.2",
],
destinationPorts: [
"80",
"1000-2000",
],
}],
}],
natRuleCollections: [{
name: "nat_rule_collection1",
priority: 300,
action: "Dnat",
rules: [{
name: "nat_rule_collection1_rule1",
protocols: [
"TCP",
"UDP",
],
sourceAddresses: [
"10.0.0.1",
"10.0.0.2",
],
destinationAddress: "192.168.1.1",
destinationPorts: [
"80",
"1000-2000",
],
translatedAddress: "192.168.0.1",
translatedPort: "8080",
}],
}],
});
import pulumi
import pulumi_azure as azure
example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West Europe")
example_firewall_policy = azure.network.FirewallPolicy("exampleFirewallPolicy",
resource_group_name=example_resource_group.name,
location=example_resource_group.location)
example_firewall_policy_rule_collection_group = azure.network.FirewallPolicyRuleCollectionGroup("exampleFirewallPolicyRuleCollectionGroup",
firewall_policy_id=example_firewall_policy.id,
priority=500,
application_rule_collections=[azure.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs(
name="app_rule_collection1",
priority=500,
action="Deny",
rules=[azure.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs(
name="app_rule_collection1_rule1",
protocols=[
azure.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs(
type="Http",
port=80,
),
azure.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs(
type="Https",
port=443,
),
],
source_addresses=["10.0.0.1"],
destination_fqdns=[".microsoft.com"],
)],
)],
network_rule_collections=[azure.network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs(
name="network_rule_collection1",
priority=400,
action="Deny",
rules=[azure.network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs(
name="network_rule_collection1_rule1",
protocols=[
"TCP",
"UDP",
],
source_addresses=["10.0.0.1"],
destination_addresses=[
"192.168.1.1",
"192.168.1.2",
],
destination_ports=[
"80",
"1000-2000",
],
)],
)],
nat_rule_collections=[azure.network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs(
name="nat_rule_collection1",
priority=300,
action="Dnat",
rules=[azure.network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs(
name="nat_rule_collection1_rule1",
protocols=[
"TCP",
"UDP",
],
source_addresses=[
"10.0.0.1",
"10.0.0.2",
],
destination_address="192.168.1.1",
destination_ports=[
"80",
"1000-2000",
],
translated_address="192.168.0.1",
translated_port=8080,
)],
)])
Example coming soon!
Create FirewallPolicyRuleCollectionGroup Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new FirewallPolicyRuleCollectionGroup(name: string, args: FirewallPolicyRuleCollectionGroupArgs, opts?: CustomResourceOptions);@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
args: FirewallPolicyRuleCollectionGroupArgs,
opts: Optional[ResourceOptions] = None)
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
opts: Optional[ResourceOptions] = None,
firewall_policy_id: Optional[str] = None,
priority: Optional[int] = None,
application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
name: Optional[str] = None,
nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None)func NewFirewallPolicyRuleCollectionGroup(ctx *Context, name string, args FirewallPolicyRuleCollectionGroupArgs, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)public FirewallPolicyRuleCollectionGroup(string name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions? opts = null)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions options)
type: azure:network:FirewallPolicyRuleCollectionGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var firewallPolicyRuleCollectionGroupResource = new Azure.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", new()
{
FirewallPolicyId = "string",
Priority = 0,
ApplicationRuleCollections = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs
{
Action = "string",
Name = "string",
Priority = 0,
Rules = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs
{
Name = "string",
Description = "string",
DestinationAddresses = new[]
{
"string",
},
DestinationFqdnTags = new[]
{
"string",
},
DestinationFqdns = new[]
{
"string",
},
DestinationUrls = new[]
{
"string",
},
Protocols = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
{
Port = 0,
Type = "string",
},
},
SourceAddresses = new[]
{
"string",
},
SourceIpGroups = new[]
{
"string",
},
TerminateTls = false,
WebCategories = new[]
{
"string",
},
},
},
},
},
Name = "string",
NatRuleCollections = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs
{
Action = "string",
Name = "string",
Priority = 0,
Rules = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs
{
Name = "string",
Protocols = new[]
{
"string",
},
TranslatedPort = 0,
DestinationAddress = "string",
DestinationPorts = new[]
{
"string",
},
SourceAddresses = new[]
{
"string",
},
SourceIpGroups = new[]
{
"string",
},
TranslatedAddress = "string",
TranslatedFqdn = "string",
},
},
},
},
NetworkRuleCollections = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs
{
Action = "string",
Name = "string",
Priority = 0,
Rules = new[]
{
new Azure.Network.Inputs.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs
{
DestinationPorts = new[]
{
"string",
},
Name = "string",
Protocols = new[]
{
"string",
},
DestinationAddresses = new[]
{
"string",
},
DestinationFqdns = new[]
{
"string",
},
DestinationIpGroups = new[]
{
"string",
},
SourceAddresses = new[]
{
"string",
},
SourceIpGroups = new[]
{
"string",
},
},
},
},
},
});
example, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroupResource", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyId: pulumi.String("string"),
Priority: pulumi.Int(0),
ApplicationRuleCollections: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs{
Action: pulumi.String("string"),
Name: pulumi.String("string"),
Priority: pulumi.Int(0),
Rules: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs{
Name: pulumi.String("string"),
Description: pulumi.String("string"),
DestinationAddresses: pulumi.StringArray{
pulumi.String("string"),
},
DestinationFqdnTags: pulumi.StringArray{
pulumi.String("string"),
},
DestinationFqdns: pulumi.StringArray{
pulumi.String("string"),
},
DestinationUrls: pulumi.StringArray{
pulumi.String("string"),
},
Protocols: network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArray{
&network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs{
Port: pulumi.Int(0),
Type: pulumi.String("string"),
},
},
SourceAddresses: pulumi.StringArray{
pulumi.String("string"),
},
SourceIpGroups: pulumi.StringArray{
pulumi.String("string"),
},
TerminateTls: pulumi.Bool(false),
WebCategories: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
Name: pulumi.String("string"),
NatRuleCollections: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs{
Action: pulumi.String("string"),
Name: pulumi.String("string"),
Priority: pulumi.Int(0),
Rules: network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs{
Name: pulumi.String("string"),
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
TranslatedPort: pulumi.Int(0),
DestinationAddress: pulumi.String("string"),
DestinationPorts: pulumi.StringArray{
pulumi.String("string"),
},
SourceAddresses: pulumi.StringArray{
pulumi.String("string"),
},
SourceIpGroups: pulumi.StringArray{
pulumi.String("string"),
},
TranslatedAddress: pulumi.String("string"),
TranslatedFqdn: pulumi.String("string"),
},
},
},
},
NetworkRuleCollections: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs{
Action: pulumi.String("string"),
Name: pulumi.String("string"),
Priority: pulumi.Int(0),
Rules: network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArray{
&network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs{
DestinationPorts: pulumi.StringArray{
pulumi.String("string"),
},
Name: pulumi.String("string"),
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
DestinationAddresses: pulumi.StringArray{
pulumi.String("string"),
},
DestinationFqdns: pulumi.StringArray{
pulumi.String("string"),
},
DestinationIpGroups: pulumi.StringArray{
pulumi.String("string"),
},
SourceAddresses: pulumi.StringArray{
pulumi.String("string"),
},
SourceIpGroups: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
})
var firewallPolicyRuleCollectionGroupResource = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyId("string")
.priority(0)
.applicationRuleCollections(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs.builder()
.action("string")
.name("string")
.priority(0)
.rules(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs.builder()
.name("string")
.description("string")
.destinationAddresses("string")
.destinationFqdnTags("string")
.destinationFqdns("string")
.destinationUrls("string")
.protocols(FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs.builder()
.port(0)
.type("string")
.build())
.sourceAddresses("string")
.sourceIpGroups("string")
.terminateTls(false)
.webCategories("string")
.build())
.build())
.name("string")
.natRuleCollections(FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs.builder()
.action("string")
.name("string")
.priority(0)
.rules(FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs.builder()
.name("string")
.protocols("string")
.translatedPort(0)
.destinationAddress("string")
.destinationPorts("string")
.sourceAddresses("string")
.sourceIpGroups("string")
.translatedAddress("string")
.translatedFqdn("string")
.build())
.build())
.networkRuleCollections(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs.builder()
.action("string")
.name("string")
.priority(0)
.rules(FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs.builder()
.destinationPorts("string")
.name("string")
.protocols("string")
.destinationAddresses("string")
.destinationFqdns("string")
.destinationIpGroups("string")
.sourceAddresses("string")
.sourceIpGroups("string")
.build())
.build())
.build());
firewall_policy_rule_collection_group_resource = azure.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource",
firewall_policy_id="string",
priority=0,
application_rule_collections=[{
"action": "string",
"name": "string",
"priority": 0,
"rules": [{
"name": "string",
"description": "string",
"destination_addresses": ["string"],
"destination_fqdn_tags": ["string"],
"destination_fqdns": ["string"],
"destination_urls": ["string"],
"protocols": [{
"port": 0,
"type": "string",
}],
"source_addresses": ["string"],
"source_ip_groups": ["string"],
"terminate_tls": False,
"web_categories": ["string"],
}],
}],
name="string",
nat_rule_collections=[{
"action": "string",
"name": "string",
"priority": 0,
"rules": [{
"name": "string",
"protocols": ["string"],
"translated_port": 0,
"destination_address": "string",
"destination_ports": ["string"],
"source_addresses": ["string"],
"source_ip_groups": ["string"],
"translated_address": "string",
"translated_fqdn": "string",
}],
}],
network_rule_collections=[{
"action": "string",
"name": "string",
"priority": 0,
"rules": [{
"destination_ports": ["string"],
"name": "string",
"protocols": ["string"],
"destination_addresses": ["string"],
"destination_fqdns": ["string"],
"destination_ip_groups": ["string"],
"source_addresses": ["string"],
"source_ip_groups": ["string"],
}],
}])
const firewallPolicyRuleCollectionGroupResource = new azure.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", {
firewallPolicyId: "string",
priority: 0,
applicationRuleCollections: [{
action: "string",
name: "string",
priority: 0,
rules: [{
name: "string",
description: "string",
destinationAddresses: ["string"],
destinationFqdnTags: ["string"],
destinationFqdns: ["string"],
destinationUrls: ["string"],
protocols: [{
port: 0,
type: "string",
}],
sourceAddresses: ["string"],
sourceIpGroups: ["string"],
terminateTls: false,
webCategories: ["string"],
}],
}],
name: "string",
natRuleCollections: [{
action: "string",
name: "string",
priority: 0,
rules: [{
name: "string",
protocols: ["string"],
translatedPort: 0,
destinationAddress: "string",
destinationPorts: ["string"],
sourceAddresses: ["string"],
sourceIpGroups: ["string"],
translatedAddress: "string",
translatedFqdn: "string",
}],
}],
networkRuleCollections: [{
action: "string",
name: "string",
priority: 0,
rules: [{
destinationPorts: ["string"],
name: "string",
protocols: ["string"],
destinationAddresses: ["string"],
destinationFqdns: ["string"],
destinationIpGroups: ["string"],
sourceAddresses: ["string"],
sourceIpGroups: ["string"],
}],
}],
});
type: azure:network:FirewallPolicyRuleCollectionGroup
properties:
applicationRuleCollections:
- action: string
name: string
priority: 0
rules:
- description: string
destinationAddresses:
- string
destinationFqdnTags:
- string
destinationFqdns:
- string
destinationUrls:
- string
name: string
protocols:
- port: 0
type: string
sourceAddresses:
- string
sourceIpGroups:
- string
terminateTls: false
webCategories:
- string
firewallPolicyId: string
name: string
natRuleCollections:
- action: string
name: string
priority: 0
rules:
- destinationAddress: string
destinationPorts:
- string
name: string
protocols:
- string
sourceAddresses:
- string
sourceIpGroups:
- string
translatedAddress: string
translatedFqdn: string
translatedPort: 0
networkRuleCollections:
- action: string
name: string
priority: 0
rules:
- destinationAddresses:
- string
destinationFqdns:
- string
destinationIpGroups:
- string
destinationPorts:
- string
name: string
protocols:
- string
sourceAddresses:
- string
sourceIpGroups:
- string
priority: 0
FirewallPolicyRuleCollectionGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The FirewallPolicyRuleCollectionGroup resource accepts the following input properties:
- Firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> - One or more
application_rule_collectionblocks as defined below. - Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> - One or more
nat_rule_collectionblocks as defined below. - Network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> - One or more
network_rule_collectionblocks as defined below.
- Firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule []FirewallCollections Policy Rule Collection Group Application Rule Collection Args - One or more
application_rule_collectionblocks as defined below. - Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule []FirewallCollections Policy Rule Collection Group Nat Rule Collection Args - One or more
nat_rule_collectionblocks as defined below. - Network
Rule []FirewallCollections Policy Rule Collection Group Network Rule Collection Args - One or more
network_rule_collectionblocks as defined below.
- firewall
Policy StringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority Integer
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> - One or more
application_rule_collectionblocks as defined below. - name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> - One or more
nat_rule_collectionblocks as defined below. - network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> - One or more
network_rule_collectionblocks as defined below.
- firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority number
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule FirewallCollections Policy Rule Collection Group Application Rule Collection[] - One or more
application_rule_collectionblocks as defined below. - name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule FirewallCollections Policy Rule Collection Group Nat Rule Collection[] - One or more
nat_rule_collectionblocks as defined below. - network
Rule FirewallCollections Policy Rule Collection Group Network Rule Collection[] - One or more
network_rule_collectionblocks as defined below.
- firewall_
policy_ strid - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Application Rule Collection Args] - One or more
application_rule_collectionblocks as defined below. - name str
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Nat Rule Collection Args] - One or more
nat_rule_collectionblocks as defined below. - network_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Network Rule Collection Args] - One or more
network_rule_collectionblocks as defined below.
- firewall
Policy StringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- priority Number
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<Property Map>Collections - One or more
application_rule_collectionblocks as defined below. - name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<Property Map>Collections - One or more
nat_rule_collectionblocks as defined below. - network
Rule List<Property Map>Collections - One or more
network_rule_collectionblocks as defined below.
Outputs
All input properties are implicitly available as output properties. Additionally, the FirewallPolicyRuleCollectionGroup resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing FirewallPolicyRuleCollectionGroup Resource
Get an existing FirewallPolicyRuleCollectionGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: FirewallPolicyRuleCollectionGroupState, opts?: CustomResourceOptions): FirewallPolicyRuleCollectionGroup@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
application_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs]] = None,
firewall_policy_id: Optional[str] = None,
name: Optional[str] = None,
nat_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs]] = None,
network_rule_collections: Optional[Sequence[FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs]] = None,
priority: Optional[int] = None) -> FirewallPolicyRuleCollectionGroupfunc GetFirewallPolicyRuleCollectionGroup(ctx *Context, name string, id IDInput, state *FirewallPolicyRuleCollectionGroupState, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)public static FirewallPolicyRuleCollectionGroup Get(string name, Input<string> id, FirewallPolicyRuleCollectionGroupState? state, CustomResourceOptions? opts = null)public static FirewallPolicyRuleCollectionGroup get(String name, Output<String> id, FirewallPolicyRuleCollectionGroupState state, CustomResourceOptions options)resources: _: type: azure:network:FirewallPolicyRuleCollectionGroup get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> - One or more
application_rule_collectionblocks as defined below. - Firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> - One or more
nat_rule_collectionblocks as defined below. - Network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> - One or more
network_rule_collectionblocks as defined below. - Priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- Application
Rule []FirewallCollections Policy Rule Collection Group Application Rule Collection Args - One or more
application_rule_collectionblocks as defined below. - Firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- Nat
Rule []FirewallCollections Policy Rule Collection Group Nat Rule Collection Args - One or more
nat_rule_collectionblocks as defined below. - Network
Rule []FirewallCollections Policy Rule Collection Group Network Rule Collection Args - One or more
network_rule_collectionblocks as defined below. - Priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<FirewallCollections Policy Rule Collection Group Application Rule Collection> - One or more
application_rule_collectionblocks as defined below. - firewall
Policy StringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<FirewallCollections Policy Rule Collection Group Nat Rule Collection> - One or more
nat_rule_collectionblocks as defined below. - network
Rule List<FirewallCollections Policy Rule Collection Group Network Rule Collection> - One or more
network_rule_collectionblocks as defined below. - priority Integer
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule FirewallCollections Policy Rule Collection Group Application Rule Collection[] - One or more
application_rule_collectionblocks as defined below. - firewall
Policy stringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name string
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule FirewallCollections Policy Rule Collection Group Nat Rule Collection[] - One or more
nat_rule_collectionblocks as defined below. - network
Rule FirewallCollections Policy Rule Collection Group Network Rule Collection[] - One or more
network_rule_collectionblocks as defined below. - priority number
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Application Rule Collection Args] - One or more
application_rule_collectionblocks as defined below. - firewall_
policy_ strid - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name str
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Nat Rule Collection Args] - One or more
nat_rule_collectionblocks as defined below. - network_
rule_ Sequence[Firewallcollections Policy Rule Collection Group Network Rule Collection Args] - One or more
network_rule_collectionblocks as defined below. - priority int
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
- application
Rule List<Property Map>Collections - One or more
application_rule_collectionblocks as defined below. - firewall
Policy StringId - The ID of the Firewall Policy where the Firewall Policy Rule Collection Group should exist. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- name String
- The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
- nat
Rule List<Property Map>Collections - One or more
nat_rule_collectionblocks as defined below. - network
Rule List<Property Map>Collections - One or more
network_rule_collectionblocks as defined below. - priority Number
- The priority of the Firewall Policy Rule Collection Group. The range is 100-65000.
Supporting Types
FirewallPolicyRuleCollectionGroupApplicationRuleCollection, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionArgs
- Action string
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - Name string
- The name which should be used for this application rule collection.
- Priority int
- The priority of the application rule collection. The range is
100-65000. - Rules
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule> - One or more
rule(application rule) blocks as defined below.
- Action string
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - Name string
- The name which should be used for this application rule collection.
- Priority int
- The priority of the application rule collection. The range is
100-65000. - Rules
[]Firewall
Policy Rule Collection Group Application Rule Collection Rule - One or more
rule(application rule) blocks as defined below.
- action String
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - name String
- The name which should be used for this application rule collection.
- priority Integer
- The priority of the application rule collection. The range is
100-65000. - rules
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule> - One or more
rule(application rule) blocks as defined below.
- action string
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - name string
- The name which should be used for this application rule collection.
- priority number
- The priority of the application rule collection. The range is
100-65000. - rules
Firewall
Policy Rule Collection Group Application Rule Collection Rule[] - One or more
rule(application rule) blocks as defined below.
- action str
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - name str
- The name which should be used for this application rule collection.
- priority int
- The priority of the application rule collection. The range is
100-65000. - rules
Sequence[Firewall
Policy Rule Collection Group Application Rule Collection Rule] - One or more
rule(application rule) blocks as defined below.
- action String
- The action to take for the application rules in this collection. Possible values are
AllowandDeny. - name String
- The name which should be used for this application rule collection.
- priority Number
- The priority of the application rule collection. The range is
100-65000. - rules List<Property Map>
- One or more
rule(application rule) blocks as defined below.
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleArgs
- Name string
- The name which should be used for this rule.
- Description string
- The description which should be used for this rule.
- Destination
Addresses List<string> - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - List<string>
- Specifies a list of destination FQDN tags.
- Destination
Fqdns List<string> - Specifies a list of destination FQDNs.
- Destination
Urls List<string> - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - Protocols
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol> - Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - Source
Addresses List<string> - Specifies a list of source IP addresses (including CIDR and
*). - Source
Ip List<string>Groups - Specifies a list of source IP groups.
- Terminate
Tls bool - Boolean specifying if TLS shall be terminated (true) or not (false). Needs Premium SKU for Firewall Policy.
- Web
Categories List<string> - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- Name string
- The name which should be used for this rule.
- Description string
- The description which should be used for this rule.
- Destination
Addresses []string - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - []string
- Specifies a list of destination FQDN tags.
- Destination
Fqdns []string - Specifies a list of destination FQDNs.
- Destination
Urls []string - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - Protocols
[]Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol - Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - Source
Addresses []string - Specifies a list of source IP addresses (including CIDR and
*). - Source
Ip []stringGroups - Specifies a list of source IP groups.
- Terminate
Tls bool - Boolean specifying if TLS shall be terminated (true) or not (false). Needs Premium SKU for Firewall Policy.
- Web
Categories []string - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- name String
- The name which should be used for this rule.
- description String
- The description which should be used for this rule.
- destination
Addresses List<String> - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - List<String>
- Specifies a list of destination FQDN tags.
- destination
Fqdns List<String> - Specifies a list of destination FQDNs.
- destination
Urls List<String> - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - protocols
List<Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol> - Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - source
Addresses List<String> - Specifies a list of source IP addresses (including CIDR and
*). - source
Ip List<String>Groups - Specifies a list of source IP groups.
- terminate
Tls Boolean - Boolean specifying if TLS shall be terminated (true) or not (false). Needs Premium SKU for Firewall Policy.
- web
Categories List<String> - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- name string
- The name which should be used for this rule.
- description string
- The description which should be used for this rule.
- destination
Addresses string[] - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - string[]
- Specifies a list of destination FQDN tags.
- destination
Fqdns string[] - Specifies a list of destination FQDNs.
- destination
Urls string[] - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - protocols
Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol[] - Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - source
Addresses string[] - Specifies a list of source IP addresses (including CIDR and
*). - source
Ip string[]Groups - Specifies a list of source IP groups.
- terminate
Tls boolean - Boolean specifying if TLS shall be terminated (true) or not (false). Needs Premium SKU for Firewall Policy.
- web
Categories string[] - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- name str
- The name which should be used for this rule.
- description str
- The description which should be used for this rule.
- destination_
addresses Sequence[str] - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - Sequence[str]
- Specifies a list of destination FQDN tags.
- destination_
fqdns Sequence[str] - Specifies a list of destination FQDNs.
- destination_
urls Sequence[str] - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - protocols
Sequence[Firewall
Policy Rule Collection Group Application Rule Collection Rule Protocol] - Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - source_
addresses Sequence[str] - Specifies a list of source IP addresses (including CIDR and
*). - source_
ip_ Sequence[str]groups - Specifies a list of source IP groups.
- terminate_
tls bool - Boolean specifying if TLS shall be terminated (true) or not (false). Needs Premium SKU for Firewall Policy.
- web_
categories Sequence[str] - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
- name String
- The name which should be used for this rule.
- description String
- The description which should be used for this rule.
- destination
Addresses List<String> - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - List<String>
- Specifies a list of destination FQDN tags.
- destination
Fqdns List<String> - Specifies a list of destination FQDNs.
- destination
Urls List<String> - Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with
destination_fqdns. - protocols List<Property Map>
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - source
Addresses List<String> - Specifies a list of source IP addresses (including CIDR and
*). - source
Ip List<String>Groups - Specifies a list of source IP groups.
- terminate
Tls Boolean - Boolean specifying if TLS shall be terminated (true) or not (false). Needs Premium SKU for Firewall Policy.
- web
Categories List<String> - Specifies a list of web categories to which access is denied or allowed depending on the value of
actionabove. Needs Premium SKU for Firewall Policy.
FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol, FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocolArgs
FirewallPolicyRuleCollectionGroupNatRuleCollection, FirewallPolicyRuleCollectionGroupNatRuleCollectionArgs
- Action string
- The action to take for the nat rules in this collection. Currently, the only possible value is
Dnat. - Name string
- The name which should be used for this nat rule collection.
- Priority int
- The priority of the nat rule collection. The range is
100-65000. - Rules
List<Firewall
Policy Rule Collection Group Nat Rule Collection Rule> - A
rule(nat rule) block as defined above.
- Action string
- The action to take for the nat rules in this collection. Currently, the only possible value is
Dnat. - Name string
- The name which should be used for this nat rule collection.
- Priority int
- The priority of the nat rule collection. The range is
100-65000. - Rules
[]Firewall
Policy Rule Collection Group Nat Rule Collection Rule - A
rule(nat rule) block as defined above.
- action String
- The action to take for the nat rules in this collection. Currently, the only possible value is
Dnat. - name String
- The name which should be used for this nat rule collection.
- priority Integer
- The priority of the nat rule collection. The range is
100-65000. - rules
List<Firewall
Policy Rule Collection Group Nat Rule Collection Rule> - A
rule(nat rule) block as defined above.
- action string
- The action to take for the nat rules in this collection. Currently, the only possible value is
Dnat. - name string
- The name which should be used for this nat rule collection.
- priority number
- The priority of the nat rule collection. The range is
100-65000. - rules
Firewall
Policy Rule Collection Group Nat Rule Collection Rule[] - A
rule(nat rule) block as defined above.
- action str
- The action to take for the nat rules in this collection. Currently, the only possible value is
Dnat. - name str
- The name which should be used for this nat rule collection.
- priority int
- The priority of the nat rule collection. The range is
100-65000. - rules
Sequence[Firewall
Policy Rule Collection Group Nat Rule Collection Rule] - A
rule(nat rule) block as defined above.
- action String
- The action to take for the nat rules in this collection. Currently, the only possible value is
Dnat. - name String
- The name which should be used for this nat rule collection.
- priority Number
- The priority of the nat rule collection. The range is
100-65000. - rules List<Property Map>
- A
rule(nat rule) block as defined above.
FirewallPolicyRuleCollectionGroupNatRuleCollectionRule, FirewallPolicyRuleCollectionGroupNatRuleCollectionRuleArgs
- Name string
- The name which should be used for this rule.
- Protocols List<string>
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - Translated
Port int - Specifies the translated port.
- Destination
Address string - The destination IP address (including CIDR).
- Destination
Ports List<string> - Specifies a list of destination ports.
- Source
Addresses List<string> - Specifies a list of source IP addresses (including CIDR and
*). - Source
Ip List<string>Groups - Specifies a list of source IP groups.
- Translated
Address string - Specifies the translated address.
- Translated
Fqdn string - Specifies the translated FQDN.
- Name string
- The name which should be used for this rule.
- Protocols []string
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - Translated
Port int - Specifies the translated port.
- Destination
Address string - The destination IP address (including CIDR).
- Destination
Ports []string - Specifies a list of destination ports.
- Source
Addresses []string - Specifies a list of source IP addresses (including CIDR and
*). - Source
Ip []stringGroups - Specifies a list of source IP groups.
- Translated
Address string - Specifies the translated address.
- Translated
Fqdn string - Specifies the translated FQDN.
- name String
- The name which should be used for this rule.
- protocols List<String>
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - translated
Port Integer - Specifies the translated port.
- destination
Address String - The destination IP address (including CIDR).
- destination
Ports List<String> - Specifies a list of destination ports.
- source
Addresses List<String> - Specifies a list of source IP addresses (including CIDR and
*). - source
Ip List<String>Groups - Specifies a list of source IP groups.
- translated
Address String - Specifies the translated address.
- translated
Fqdn String - Specifies the translated FQDN.
- name string
- The name which should be used for this rule.
- protocols string[]
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - translated
Port number - Specifies the translated port.
- destination
Address string - The destination IP address (including CIDR).
- destination
Ports string[] - Specifies a list of destination ports.
- source
Addresses string[] - Specifies a list of source IP addresses (including CIDR and
*). - source
Ip string[]Groups - Specifies a list of source IP groups.
- translated
Address string - Specifies the translated address.
- translated
Fqdn string - Specifies the translated FQDN.
- name str
- The name which should be used for this rule.
- protocols Sequence[str]
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - translated_
port int - Specifies the translated port.
- destination_
address str - The destination IP address (including CIDR).
- destination_
ports Sequence[str] - Specifies a list of destination ports.
- source_
addresses Sequence[str] - Specifies a list of source IP addresses (including CIDR and
*). - source_
ip_ Sequence[str]groups - Specifies a list of source IP groups.
- translated_
address str - Specifies the translated address.
- translated_
fqdn str - Specifies the translated FQDN.
- name String
- The name which should be used for this rule.
- protocols List<String>
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - translated
Port Number - Specifies the translated port.
- destination
Address String - The destination IP address (including CIDR).
- destination
Ports List<String> - Specifies a list of destination ports.
- source
Addresses List<String> - Specifies a list of source IP addresses (including CIDR and
*). - source
Ip List<String>Groups - Specifies a list of source IP groups.
- translated
Address String - Specifies the translated address.
- translated
Fqdn String - Specifies the translated FQDN.
FirewallPolicyRuleCollectionGroupNetworkRuleCollection, FirewallPolicyRuleCollectionGroupNetworkRuleCollectionArgs
- Action string
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - Name string
- The name which should be used for this network rule collection.
- Priority int
- The priority of the network rule collection. The range is
100-65000. - Rules
List<Firewall
Policy Rule Collection Group Network Rule Collection Rule> - One or more
rule(network rule) blocks as defined above.
- Action string
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - Name string
- The name which should be used for this network rule collection.
- Priority int
- The priority of the network rule collection. The range is
100-65000. - Rules
[]Firewall
Policy Rule Collection Group Network Rule Collection Rule - One or more
rule(network rule) blocks as defined above.
- action String
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - name String
- The name which should be used for this network rule collection.
- priority Integer
- The priority of the network rule collection. The range is
100-65000. - rules
List<Firewall
Policy Rule Collection Group Network Rule Collection Rule> - One or more
rule(network rule) blocks as defined above.
- action string
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - name string
- The name which should be used for this network rule collection.
- priority number
- The priority of the network rule collection. The range is
100-65000. - rules
Firewall
Policy Rule Collection Group Network Rule Collection Rule[] - One or more
rule(network rule) blocks as defined above.
- action str
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - name str
- The name which should be used for this network rule collection.
- priority int
- The priority of the network rule collection. The range is
100-65000. - rules
Sequence[Firewall
Policy Rule Collection Group Network Rule Collection Rule] - One or more
rule(network rule) blocks as defined above.
- action String
- The action to take for the network rules in this collection. Possible values are
AllowandDeny. - name String
- The name which should be used for this network rule collection.
- priority Number
- The priority of the network rule collection. The range is
100-65000. - rules List<Property Map>
- One or more
rule(network rule) blocks as defined above.
FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule, FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRuleArgs
- Destination
Ports List<string> - Specifies a list of destination ports.
- Name string
- The name which should be used for this rule.
- Protocols List<string>
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - Destination
Addresses List<string> - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - Destination
Fqdns List<string> - Specifies a list of destination FQDNs.
- Destination
Ip List<string>Groups - Specifies a list of destination IP groups.
- Source
Addresses List<string> - Specifies a list of source IP addresses (including CIDR and
*). - Source
Ip List<string>Groups - Specifies a list of source IP groups.
- Destination
Ports []string - Specifies a list of destination ports.
- Name string
- The name which should be used for this rule.
- Protocols []string
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - Destination
Addresses []string - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - Destination
Fqdns []string - Specifies a list of destination FQDNs.
- Destination
Ip []stringGroups - Specifies a list of destination IP groups.
- Source
Addresses []string - Specifies a list of source IP addresses (including CIDR and
*). - Source
Ip []stringGroups - Specifies a list of source IP groups.
- destination
Ports List<String> - Specifies a list of destination ports.
- name String
- The name which should be used for this rule.
- protocols List<String>
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - destination
Addresses List<String> - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - destination
Fqdns List<String> - Specifies a list of destination FQDNs.
- destination
Ip List<String>Groups - Specifies a list of destination IP groups.
- source
Addresses List<String> - Specifies a list of source IP addresses (including CIDR and
*). - source
Ip List<String>Groups - Specifies a list of source IP groups.
- destination
Ports string[] - Specifies a list of destination ports.
- name string
- The name which should be used for this rule.
- protocols string[]
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - destination
Addresses string[] - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - destination
Fqdns string[] - Specifies a list of destination FQDNs.
- destination
Ip string[]Groups - Specifies a list of destination IP groups.
- source
Addresses string[] - Specifies a list of source IP addresses (including CIDR and
*). - source
Ip string[]Groups - Specifies a list of source IP groups.
- destination_
ports Sequence[str] - Specifies a list of destination ports.
- name str
- The name which should be used for this rule.
- protocols Sequence[str]
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - destination_
addresses Sequence[str] - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - destination_
fqdns Sequence[str] - Specifies a list of destination FQDNs.
- destination_
ip_ Sequence[str]groups - Specifies a list of destination IP groups.
- source_
addresses Sequence[str] - Specifies a list of source IP addresses (including CIDR and
*). - source_
ip_ Sequence[str]groups - Specifies a list of source IP groups.
- destination
Ports List<String> - Specifies a list of destination ports.
- name String
- The name which should be used for this rule.
- protocols List<String>
- Specifies a list of network protocols this rule applies to. Possible values are
TCP,UDP. - destination
Addresses List<String> - Specifies a list of destination IP addresses (including CIDR and
*) or Service Tags. - destination
Fqdns List<String> - Specifies a list of destination FQDNs.
- destination
Ip List<String>Groups - Specifies a list of destination IP groups.
- source
Addresses List<String> - Specifies a list of source IP addresses (including CIDR and
*). - source
Ip List<String>Groups - Specifies a list of source IP groups.
Import
Firewall Policy Rule Collection Groups can be imported using the resource id, e.g.
$ pulumi import azure:network/firewallPolicyRuleCollectionGroup:FirewallPolicyRuleCollectionGroup example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.Network/firewallPolicies/policy1/ruleCollectionGroups/gruop1
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
azurermTerraform Provider.
We recommend using Azure Native.
Viewing docs for Azure v4.42.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi
published on Monday, Mar 9, 2026 by Pulumi
