checkpoint.getManagementAccessRulebase

checkpoint 3.0.0, Mar 30 26

Viewing docs for checkpoint 3.0.0
published on Monday, Mar 30, 2026 by checkpointsw

checkpointsw/terraform-provider-checkpoint

Viewing docs for checkpoint 3.0.0
published on Monday, Mar 30, 2026 by checkpointsw

checkpointsw/terraform-provider-checkpoint

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const accessRulebase = checkpoint.getManagementAccessRulebase({
    name: "Network",
});

import pulumi
import pulumi_checkpoint as checkpoint

access_rulebase = checkpoint.get_management_access_rulebase(name="Network")

package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v3/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := checkpoint.GetManagementAccessRulebase(ctx, &checkpoint.GetManagementAccessRulebaseArgs{
			Name: pulumi.StringRef("Network"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var accessRulebase = Checkpoint.GetManagementAccessRulebase.Invoke(new()
    {
        Name = "Network",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.CheckpointFunctions;
import com.pulumi.checkpoint.inputs.GetManagementAccessRulebaseArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var accessRulebase = CheckpointFunctions.getManagementAccessRulebase(GetManagementAccessRulebaseArgs.builder()
            .name("Network")
            .build());

    }
}

variables:
  accessRulebase:
    fn::invoke:
      function: checkpoint:getManagementAccessRulebase
      arguments:
        name: Network

Using getManagementAccessRulebase

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getManagementAccessRulebase(args: GetManagementAccessRulebaseArgs, opts?: InvokeOptions): Promise<GetManagementAccessRulebaseResult>
function getManagementAccessRulebaseOutput(args: GetManagementAccessRulebaseOutputArgs, opts?: InvokeOptions): Output<GetManagementAccessRulebaseResult>

def get_management_access_rulebase(dereference_group_members: Optional[bool] = None,
                                   filter: Optional[str] = None,
                                   filter_settings: Optional[GetManagementAccessRulebaseFilterSettings] = None,
                                   hits_settings: Optional[GetManagementAccessRulebaseHitsSettings] = None,
                                   id: Optional[str] = None,
                                   limit: Optional[float] = None,
                                   name: Optional[str] = None,
                                   offset: Optional[float] = None,
                                   orders: Optional[Sequence[GetManagementAccessRulebaseOrder]] = None,
                                   package: Optional[str] = None,
                                   show_as_ranges: Optional[bool] = None,
                                   show_hits: Optional[bool] = None,
                                   show_membership: Optional[bool] = None,
                                   uid: Optional[str] = None,
                                   opts: Optional[InvokeOptions] = None) -> GetManagementAccessRulebaseResult
def get_management_access_rulebase_output(dereference_group_members: Optional[pulumi.Input[bool]] = None,
                                   filter: Optional[pulumi.Input[str]] = None,
                                   filter_settings: Optional[pulumi.Input[GetManagementAccessRulebaseFilterSettingsArgs]] = None,
                                   hits_settings: Optional[pulumi.Input[GetManagementAccessRulebaseHitsSettingsArgs]] = None,
                                   id: Optional[pulumi.Input[str]] = None,
                                   limit: Optional[pulumi.Input[float]] = None,
                                   name: Optional[pulumi.Input[str]] = None,
                                   offset: Optional[pulumi.Input[float]] = None,
                                   orders: Optional[pulumi.Input[Sequence[pulumi.Input[GetManagementAccessRulebaseOrderArgs]]]] = None,
                                   package: Optional[pulumi.Input[str]] = None,
                                   show_as_ranges: Optional[pulumi.Input[bool]] = None,
                                   show_hits: Optional[pulumi.Input[bool]] = None,
                                   show_membership: Optional[pulumi.Input[bool]] = None,
                                   uid: Optional[pulumi.Input[str]] = None,
                                   opts: Optional[InvokeOptions] = None) -> Output[GetManagementAccessRulebaseResult]

func GetManagementAccessRulebase(ctx *Context, args *GetManagementAccessRulebaseArgs, opts ...InvokeOption) (*GetManagementAccessRulebaseResult, error)
func GetManagementAccessRulebaseOutput(ctx *Context, args *GetManagementAccessRulebaseOutputArgs, opts ...InvokeOption) GetManagementAccessRulebaseResultOutput

> Note: This function is named GetManagementAccessRulebase in the Go SDK.

public static class GetManagementAccessRulebase 
{
    public static Task<GetManagementAccessRulebaseResult> InvokeAsync(GetManagementAccessRulebaseArgs args, InvokeOptions? opts = null)
    public static Output<GetManagementAccessRulebaseResult> Invoke(GetManagementAccessRulebaseInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetManagementAccessRulebaseResult> getManagementAccessRulebase(GetManagementAccessRulebaseArgs args, InvokeOptions options)
public static Output<GetManagementAccessRulebaseResult> getManagementAccessRulebase(GetManagementAccessRulebaseArgs args, InvokeOptions options)

fn::invoke:
  function: checkpoint:index/getManagementAccessRulebase:getManagementAccessRulebase
  arguments:
    # arguments dictionary

The following arguments are supported:

DereferenceGroupMembers bool: Indicates whether to dereference "members" field by details level for every object in reply.
Filter string: APN name.
FilterSettings GetManagementAccessRulebaseFilterSettings: Enable enforce end user domain. filter_settings blocks are documented below.
HitsSettings GetManagementAccessRulebaseHitsSettings: hits_settings blocks are documented below.
Id string
Limit double: The maximal number of returned results.
Name string: Object name. Must be unique in the domain.
Offset double: Number of the results to initially skip.
Orders List<GetManagementAccessRulebaseOrder>: Sorts the results by search criteria. Automatically sorts the results by Name, in the ascending order. orders blocks are documented below.
Package string: Name of the package.
ShowAsRanges bool: When true, the source, destination and services & applications parameters are displayed as ranges of IP addresses and port numbers rather than network objects. Objects that are not represented using IP addresses or port numbers are presented as objects. In addition, the response of each rule does not contain the parameters: source, source-negate, destination, destination-negate, service and service-negate, but instead it contains the parameters:source-ranges, destination-ranges and service-ranges. Note: Requesting to show rules as ranges is limited up to 20 rules per request, otherwise an error is returned. If you wish to request more rules, use the offset and limit parameters to limit your request.
ShowHits bool: show hits.
ShowMembership bool: Indicates whether to calculate and show "groups" field for every object in reply.
Uid string: Object unique identifier.

DereferenceGroupMembers bool: Indicates whether to dereference "members" field by details level for every object in reply.
Filter string: APN name.
FilterSettings GetManagementAccessRulebaseFilterSettings: Enable enforce end user domain. filter_settings blocks are documented below.
HitsSettings GetManagementAccessRulebaseHitsSettings: hits_settings blocks are documented below.
Id string
Limit float64: The maximal number of returned results.
Name string: Object name. Must be unique in the domain.
Offset float64: Number of the results to initially skip.
Orders []GetManagementAccessRulebaseOrder: Sorts the results by search criteria. Automatically sorts the results by Name, in the ascending order. orders blocks are documented below.
Package string: Name of the package.
ShowAsRanges bool: When true, the source, destination and services & applications parameters are displayed as ranges of IP addresses and port numbers rather than network objects. Objects that are not represented using IP addresses or port numbers are presented as objects. In addition, the response of each rule does not contain the parameters: source, source-negate, destination, destination-negate, service and service-negate, but instead it contains the parameters:source-ranges, destination-ranges and service-ranges. Note: Requesting to show rules as ranges is limited up to 20 rules per request, otherwise an error is returned. If you wish to request more rules, use the offset and limit parameters to limit your request.
ShowHits bool: show hits.
ShowMembership bool: Indicates whether to calculate and show "groups" field for every object in reply.
Uid string: Object unique identifier.

dereferenceGroupMembers Boolean: Indicates whether to dereference "members" field by details level for every object in reply.
filter String: APN name.
filterSettings GetManagementAccessRulebaseFilterSettings: Enable enforce end user domain. filter_settings blocks are documented below.
hitsSettings GetManagementAccessRulebaseHitsSettings: hits_settings blocks are documented below.
id String
limit Double: The maximal number of returned results.
name String: Object name. Must be unique in the domain.
offset Double: Number of the results to initially skip.
orders List<GetManagementAccessRulebaseOrder>: Sorts the results by search criteria. Automatically sorts the results by Name, in the ascending order. orders blocks are documented below.
package_ String: Name of the package.
showAsRanges Boolean: When true, the source, destination and services & applications parameters are displayed as ranges of IP addresses and port numbers rather than network objects. Objects that are not represented using IP addresses or port numbers are presented as objects. In addition, the response of each rule does not contain the parameters: source, source-negate, destination, destination-negate, service and service-negate, but instead it contains the parameters:source-ranges, destination-ranges and service-ranges. Note: Requesting to show rules as ranges is limited up to 20 rules per request, otherwise an error is returned. If you wish to request more rules, use the offset and limit parameters to limit your request.
showHits Boolean: show hits.
showMembership Boolean: Indicates whether to calculate and show "groups" field for every object in reply.
uid String: Object unique identifier.

dereferenceGroupMembers boolean: Indicates whether to dereference "members" field by details level for every object in reply.
filter string: APN name.
filterSettings GetManagementAccessRulebaseFilterSettings: Enable enforce end user domain. filter_settings blocks are documented below.
hitsSettings GetManagementAccessRulebaseHitsSettings: hits_settings blocks are documented below.
id string
limit number: The maximal number of returned results.
name string: Object name. Must be unique in the domain.
offset number: Number of the results to initially skip.
orders GetManagementAccessRulebaseOrder[]: Sorts the results by search criteria. Automatically sorts the results by Name, in the ascending order. orders blocks are documented below.
package string: Name of the package.
showAsRanges boolean: When true, the source, destination and services & applications parameters are displayed as ranges of IP addresses and port numbers rather than network objects. Objects that are not represented using IP addresses or port numbers are presented as objects. In addition, the response of each rule does not contain the parameters: source, source-negate, destination, destination-negate, service and service-negate, but instead it contains the parameters:source-ranges, destination-ranges and service-ranges. Note: Requesting to show rules as ranges is limited up to 20 rules per request, otherwise an error is returned. If you wish to request more rules, use the offset and limit parameters to limit your request.
showHits boolean: show hits.
showMembership boolean: Indicates whether to calculate and show "groups" field for every object in reply.
uid string: Object unique identifier.

dereference_group_members bool: Indicates whether to dereference "members" field by details level for every object in reply.
filter str: APN name.
filter_settings GetManagementAccessRulebaseFilterSettings: Enable enforce end user domain. filter_settings blocks are documented below.
hits_settings GetManagementAccessRulebaseHitsSettings: hits_settings blocks are documented below.
id str
limit float: The maximal number of returned results.
name str: Object name. Must be unique in the domain.
offset float: Number of the results to initially skip.
orders Sequence[GetManagementAccessRulebaseOrder]: Sorts the results by search criteria. Automatically sorts the results by Name, in the ascending order. orders blocks are documented below.
package str: Name of the package.
show_as_ranges bool: When true, the source, destination and services & applications parameters are displayed as ranges of IP addresses and port numbers rather than network objects. Objects that are not represented using IP addresses or port numbers are presented as objects. In addition, the response of each rule does not contain the parameters: source, source-negate, destination, destination-negate, service and service-negate, but instead it contains the parameters:source-ranges, destination-ranges and service-ranges. Note: Requesting to show rules as ranges is limited up to 20 rules per request, otherwise an error is returned. If you wish to request more rules, use the offset and limit parameters to limit your request.
show_hits bool: show hits.
show_membership bool: Indicates whether to calculate and show "groups" field for every object in reply.
uid str: Object unique identifier.

dereferenceGroupMembers Boolean: Indicates whether to dereference "members" field by details level for every object in reply.
filter String: APN name.
filterSettings Property Map: Enable enforce end user domain. filter_settings blocks are documented below.
hitsSettings Property Map: hits_settings blocks are documented below.
id String
limit Number: The maximal number of returned results.
name String: Object name. Must be unique in the domain.
offset Number: Number of the results to initially skip.
orders List<Property Map>: Sorts the results by search criteria. Automatically sorts the results by Name, in the ascending order. orders blocks are documented below.
package String: Name of the package.
showAsRanges Boolean: When true, the source, destination and services & applications parameters are displayed as ranges of IP addresses and port numbers rather than network objects. Objects that are not represented using IP addresses or port numbers are presented as objects. In addition, the response of each rule does not contain the parameters: source, source-negate, destination, destination-negate, service and service-negate, but instead it contains the parameters:source-ranges, destination-ranges and service-ranges. Note: Requesting to show rules as ranges is limited up to 20 rules per request, otherwise an error is returned. If you wish to request more rules, use the offset and limit parameters to limit your request.
showHits Boolean: show hits.
showMembership Boolean: Indicates whether to calculate and show "groups" field for every object in reply.
uid String: Object unique identifier.

getManagementAccessRulebase Result

The following output properties are available:

Id string
Rulebases List<GetManagementAccessRulebaseRulebase>
DereferenceGroupMembers bool
Filter string
FilterSettings GetManagementAccessRulebaseFilterSettings
HitsSettings GetManagementAccessRulebaseHitsSettings
Limit double
Name string
Offset double
Orders List<GetManagementAccessRulebaseOrder>
Package string
ShowAsRanges bool
ShowHits bool
ShowMembership bool
Uid string

Id string
Rulebases []GetManagementAccessRulebaseRulebase
DereferenceGroupMembers bool
Filter string
FilterSettings GetManagementAccessRulebaseFilterSettings
HitsSettings GetManagementAccessRulebaseHitsSettings
Limit float64
Name string
Offset float64
Orders []GetManagementAccessRulebaseOrder
Package string
ShowAsRanges bool
ShowHits bool
ShowMembership bool
Uid string

id String
rulebases List<GetManagementAccessRulebaseRulebase>
dereferenceGroupMembers Boolean
filter String
filterSettings GetManagementAccessRulebaseFilterSettings
hitsSettings GetManagementAccessRulebaseHitsSettings
limit Double
name String
offset Double
orders List<GetManagementAccessRulebaseOrder>
package_ String
showAsRanges Boolean
showHits Boolean
showMembership Boolean
uid String

id string
rulebases GetManagementAccessRulebaseRulebase[]
dereferenceGroupMembers boolean
filter string
filterSettings GetManagementAccessRulebaseFilterSettings
hitsSettings GetManagementAccessRulebaseHitsSettings
limit number
name string
offset number
orders GetManagementAccessRulebaseOrder[]
package string
showAsRanges boolean
showHits boolean
showMembership boolean
uid string

id str
rulebases Sequence[GetManagementAccessRulebaseRulebase]
dereference_group_members bool
filter str
filter_settings GetManagementAccessRulebaseFilterSettings
hits_settings GetManagementAccessRulebaseHitsSettings
limit float
name str
offset float
orders Sequence[GetManagementAccessRulebaseOrder]
package str
show_as_ranges bool
show_hits bool
show_membership bool
uid str

id String
rulebases List<Property Map>
dereferenceGroupMembers Boolean
filter String
filterSettings Property Map
hitsSettings Property Map
limit Number
name String
offset Number
orders List<Property Map>
package String
showAsRanges Boolean
showHits Boolean
showMembership Boolean
uid String

Supporting Types

GetManagementAccessRulebaseFilterSettings

ExpandGroupMembers bool: When true, if the search expression contains a UID or a name of a group object, results will include rules that match on at least one member of the group.
ExpandGroupWithExclusionMembers bool: When true, if the search expression contains a UID or a name of a group-with-exclusion object, results will include rules that match at least one member of the "include" part and is not a member of the "except" part.
MatchOnAny bool: Whether to match on 'Any' object.
MatchOnGroupWithExclusion bool: Whether to match on a group-with-exclusion.
MatchOnNegate bool: Whether to match on a negated cell.
SearchMode string: When set to 'general', both the Full Text Search and Packet Search are enabled. In this mode, Packet Search will not match on 'Any' object, a negated cell or a group-with-exclusion. When the search-mode is set to 'packet', by default, the match on 'Any' object, a negated cell or a group-with-exclusion are enabled. packet-search-settings may be provided to change the default behavior.

ExpandGroupMembers bool: When true, if the search expression contains a UID or a name of a group object, results will include rules that match on at least one member of the group.
ExpandGroupWithExclusionMembers bool: When true, if the search expression contains a UID or a name of a group-with-exclusion object, results will include rules that match at least one member of the "include" part and is not a member of the "except" part.
MatchOnAny bool: Whether to match on 'Any' object.
MatchOnGroupWithExclusion bool: Whether to match on a group-with-exclusion.
MatchOnNegate bool: Whether to match on a negated cell.
SearchMode string: When set to 'general', both the Full Text Search and Packet Search are enabled. In this mode, Packet Search will not match on 'Any' object, a negated cell or a group-with-exclusion. When the search-mode is set to 'packet', by default, the match on 'Any' object, a negated cell or a group-with-exclusion are enabled. packet-search-settings may be provided to change the default behavior.

expandGroupMembers Boolean: When true, if the search expression contains a UID or a name of a group object, results will include rules that match on at least one member of the group.
expandGroupWithExclusionMembers Boolean: When true, if the search expression contains a UID or a name of a group-with-exclusion object, results will include rules that match at least one member of the "include" part and is not a member of the "except" part.
matchOnAny Boolean: Whether to match on 'Any' object.
matchOnGroupWithExclusion Boolean: Whether to match on a group-with-exclusion.
matchOnNegate Boolean: Whether to match on a negated cell.
searchMode String: When set to 'general', both the Full Text Search and Packet Search are enabled. In this mode, Packet Search will not match on 'Any' object, a negated cell or a group-with-exclusion. When the search-mode is set to 'packet', by default, the match on 'Any' object, a negated cell or a group-with-exclusion are enabled. packet-search-settings may be provided to change the default behavior.

expandGroupMembers boolean: When true, if the search expression contains a UID or a name of a group object, results will include rules that match on at least one member of the group.
expandGroupWithExclusionMembers boolean: When true, if the search expression contains a UID or a name of a group-with-exclusion object, results will include rules that match at least one member of the "include" part and is not a member of the "except" part.
matchOnAny boolean: Whether to match on 'Any' object.
matchOnGroupWithExclusion boolean: Whether to match on a group-with-exclusion.
matchOnNegate boolean: Whether to match on a negated cell.
searchMode string: When set to 'general', both the Full Text Search and Packet Search are enabled. In this mode, Packet Search will not match on 'Any' object, a negated cell or a group-with-exclusion. When the search-mode is set to 'packet', by default, the match on 'Any' object, a negated cell or a group-with-exclusion are enabled. packet-search-settings may be provided to change the default behavior.

expand_group_members bool: When true, if the search expression contains a UID or a name of a group object, results will include rules that match on at least one member of the group.
expand_group_with_exclusion_members bool: When true, if the search expression contains a UID or a name of a group-with-exclusion object, results will include rules that match at least one member of the "include" part and is not a member of the "except" part.
match_on_any bool: Whether to match on 'Any' object.
match_on_group_with_exclusion bool: Whether to match on a group-with-exclusion.
match_on_negate bool: Whether to match on a negated cell.
search_mode str: When set to 'general', both the Full Text Search and Packet Search are enabled. In this mode, Packet Search will not match on 'Any' object, a negated cell or a group-with-exclusion. When the search-mode is set to 'packet', by default, the match on 'Any' object, a negated cell or a group-with-exclusion are enabled. packet-search-settings may be provided to change the default behavior.

expandGroupMembers Boolean: When true, if the search expression contains a UID or a name of a group object, results will include rules that match on at least one member of the group.
expandGroupWithExclusionMembers Boolean: When true, if the search expression contains a UID or a name of a group-with-exclusion object, results will include rules that match at least one member of the "include" part and is not a member of the "except" part.
matchOnAny Boolean: Whether to match on 'Any' object.
matchOnGroupWithExclusion Boolean: Whether to match on a group-with-exclusion.
matchOnNegate Boolean: Whether to match on a negated cell.
searchMode String: When set to 'general', both the Full Text Search and Packet Search are enabled. In this mode, Packet Search will not match on 'Any' object, a negated cell or a group-with-exclusion. When the search-mode is set to 'packet', by default, the match on 'Any' object, a negated cell or a group-with-exclusion are enabled. packet-search-settings may be provided to change the default behavior.