Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Checkpoint Provider
  4. API Docs
  5. getManagementDataAccessRule
Viewing docs for checkpoint 3.2.0
published on Monday, Jun 15, 2026 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

checkpoint.getManagementDataAccessRule

Viewing docs for checkpoint 3.2.0
published on Monday, Jun 15, 2026 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

    Use this data source to get information on an existing Check Point Access Rule.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const accessRule = new checkpoint.ManagementAccessRule("access_rule", {
    name: "My Rule",
    layer: "Network",
    position: {
        top: "top",
    },
    sources: ["Any"],
    destinations: ["Any"],
    services: ["Any"],
    contents: ["Any"],
    times: ["Any"],
    installOns: ["Policy Targets"],
    track: {
        type: "Log",
        accounting: false,
        alert: "none",
        enableFirewallSession: false,
        perConnection: true,
        perSession: false,
    },
    customFields: {},
    vpn: "Any",
});
const dataAccessRule = checkpoint.getManagementDataAccessRuleOutput({
    name: accessRule.name,
    layer: accessRule.layer,
});

    import pulumi
import pulumi_checkpoint as checkpoint

access_rule = checkpoint.ManagementAccessRule("access_rule",
    name="My Rule",
    layer="Network",
    position={
        "top": "top",
    },
    sources=["Any"],
    destinations=["Any"],
    services=["Any"],
    contents=["Any"],
    times=["Any"],
    install_ons=["Policy Targets"],
    track={
        "type": "Log",
        "accounting": False,
        "alert": "none",
        "enable_firewall_session": False,
        "per_connection": True,
        "per_session": False,
    },
    custom_fields={},
    vpn="Any")
data_access_rule = checkpoint.get_management_data_access_rule_output(name=access_rule.name,
    layer=access_rule.layer)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v3/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		accessRule, err := checkpoint.NewManagementAccessRule(ctx, "access_rule", &checkpoint.ManagementAccessRuleArgs{
			Name:  pulumi.String("My Rule"),
			Layer: pulumi.String("Network"),
			Position: &checkpoint.ManagementAccessRulePositionArgs{
				Top: pulumi.String("top"),
			},
			Sources: pulumi.StringArray{
				pulumi.String("Any"),
			},
			Destinations: pulumi.StringArray{
				pulumi.String("Any"),
			},
			Services: pulumi.StringArray{
				pulumi.String("Any"),
			},
			Contents: pulumi.StringArray{
				pulumi.String("Any"),
			},
			Times: pulumi.StringArray{
				pulumi.String("Any"),
			},
			InstallOns: pulumi.StringArray{
				pulumi.String("Policy Targets"),
			},
			Track: &checkpoint.ManagementAccessRuleTrackArgs{
				Type:                  pulumi.String("Log"),
				Accounting:            pulumi.Bool(false),
				Alert:                 pulumi.String("none"),
				EnableFirewallSession: pulumi.Bool(false),
				PerConnection:         pulumi.Bool(true),
				PerSession:            pulumi.Bool(false),
			},
			CustomFields: &checkpoint.ManagementAccessRuleCustomFieldsArgs{},
			Vpn:          pulumi.String("Any"),
		})
		if err != nil {
			return err
		}
		_ = checkpoint.GetManagementDataAccessRuleOutput(ctx, checkpoint.GetManagementDataAccessRuleOutputArgs{
			Name:  accessRule.Name,
			Layer: accessRule.Layer,
		}, nil)
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var accessRule = new Checkpoint.ManagementAccessRule("access_rule", new()
    {
        Name = "My Rule",
        Layer = "Network",
        Position = new Checkpoint.Inputs.ManagementAccessRulePositionArgs
        {
            Top = "top",
        },
        Sources = new[]
        {
            "Any",
        },
        Destinations = new[]
        {
            "Any",
        },
        Services = new[]
        {
            "Any",
        },
        Contents = new[]
        {
            "Any",
        },
        Times = new[]
        {
            "Any",
        },
        InstallOns = new[]
        {
            "Policy Targets",
        },
        Track = new Checkpoint.Inputs.ManagementAccessRuleTrackArgs
        {
            Type = "Log",
            Accounting = false,
            Alert = "none",
            EnableFirewallSession = false,
            PerConnection = true,
            PerSession = false,
        },
        CustomFields = null,
        Vpn = "Any",
    });

    var dataAccessRule = Checkpoint.GetManagementDataAccessRule.Invoke(new()
    {
        Name = accessRule.Name,
        Layer = accessRule.Layer,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.ManagementAccessRule;
import com.pulumi.checkpoint.ManagementAccessRuleArgs;
import com.pulumi.checkpoint.inputs.ManagementAccessRulePositionArgs;
import com.pulumi.checkpoint.inputs.ManagementAccessRuleTrackArgs;
import com.pulumi.checkpoint.inputs.ManagementAccessRuleCustomFieldsArgs;
import com.pulumi.checkpoint.CheckpointFunctions;
import com.pulumi.checkpoint.inputs.GetManagementDataAccessRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var accessRule = new ManagementAccessRule("accessRule", ManagementAccessRuleArgs.builder()
            .name("My Rule")
            .layer("Network")
            .position(ManagementAccessRulePositionArgs.builder()
                .top("top")
                .build())
            .sources("Any")
            .destinations("Any")
            .services("Any")
            .contents("Any")
            .times("Any")
            .installOns("Policy Targets")
            .track(ManagementAccessRuleTrackArgs.builder()
                .type("Log")
                .accounting(false)
                .alert("none")
                .enableFirewallSession(false)
                .perConnection(true)
                .perSession(false)
                .build())
            .customFields(ManagementAccessRuleCustomFieldsArgs.builder()
                .build())
            .vpn("Any")
            .build());

        final var dataAccessRule = CheckpointFunctions.getManagementDataAccessRule(GetManagementDataAccessRuleArgs.builder()
            .name(accessRule.name())
            .layer(accessRule.layer())
            .build());

    }
}

    resources:
  accessRule:
    type: checkpoint:ManagementAccessRule
    name: access_rule
    properties:
      name: My Rule
      layer: Network
      position:
        top: top
      sources:
        - Any
      destinations:
        - Any
      services:
        - Any
      contents:
        - Any
      times:
        - Any
      installOns:
        - Policy Targets
      track:
        type: Log
        accounting: false
        alert: none
        enableFirewallSession: false
        perConnection: true
        perSession: false
      customFields: {}
      vpn: Any
variables:
  dataAccessRule:
    fn::invoke:
      function: checkpoint:getManagementDataAccessRule
      arguments:
        name: ${accessRule.name}
        layer: ${accessRule.layer}

    Example coming soon!

    Using getManagementDataAccessRule

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getManagementDataAccessRule(args: GetManagementDataAccessRuleArgs, opts?: InvokeOptions): Promise<GetManagementDataAccessRuleResult>
function getManagementDataAccessRuleOutput(args: GetManagementDataAccessRuleOutputArgs, opts?: InvokeOptions): Output<GetManagementDataAccessRuleResult>
    def get_management_data_access_rule(fields_with_uid_identifiers: Optional[Sequence[str]] = None,
                                    id: Optional[str] = None,
                                    layer: Optional[str] = None,
                                    name: Optional[str] = None,
                                    uid: Optional[str] = None,
                                    opts: Optional[InvokeOptions] = None) -> GetManagementDataAccessRuleResult
def get_management_data_access_rule_output(fields_with_uid_identifiers: pulumi.Input[Optional[Sequence[pulumi.Input[str]]]] = None,
                                    id: pulumi.Input[Optional[str]] = None,
                                    layer: pulumi.Input[Optional[str]] = None,
                                    name: pulumi.Input[Optional[str]] = None,
                                    uid: pulumi.Input[Optional[str]] = None,
                                    opts: Optional[InvokeOptions] = None) -> Output[GetManagementDataAccessRuleResult]
    func GetManagementDataAccessRule(ctx *Context, args *GetManagementDataAccessRuleArgs, opts ...InvokeOption) (*GetManagementDataAccessRuleResult, error)
func GetManagementDataAccessRuleOutput(ctx *Context, args *GetManagementDataAccessRuleOutputArgs, opts ...InvokeOption) GetManagementDataAccessRuleResultOutput

    > Note: This function is named GetManagementDataAccessRule in the Go SDK.

    public static class GetManagementDataAccessRule 
{
    public static Task<GetManagementDataAccessRuleResult> InvokeAsync(GetManagementDataAccessRuleArgs args, InvokeOptions? opts = null)
    public static Output<GetManagementDataAccessRuleResult> Invoke(GetManagementDataAccessRuleInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetManagementDataAccessRuleResult> getManagementDataAccessRule(GetManagementDataAccessRuleArgs args, InvokeOptions options)
public static Output<GetManagementDataAccessRuleResult> getManagementDataAccessRule(GetManagementDataAccessRuleArgs args, InvokeOptions options)

    fn::invoke:
  function: checkpoint:index/getManagementDataAccessRule:getManagementDataAccessRule
  arguments:
    # arguments dictionary
    data "checkpoint_getmanagementdataaccessrule" "name" {
    # arguments
}

    The following arguments are supported:

    Layer string
    Layer that the rule belongs to identified by the name or UID.
    FieldsWithUidIdentifiers List<string>
    List of resource fields that will use object UIDs as object identifiers. Default is object name.
    Id string
    Name string
    Rule name.
    Uid string
    Object unique identifier.
    Layer string
    Layer that the rule belongs to identified by the name or UID.
    FieldsWithUidIdentifiers []string
    List of resource fields that will use object UIDs as object identifiers. Default is object name.
    Id string
    Name string
    Rule name.
    Uid string
    Object unique identifier.
    layer string
    Layer that the rule belongs to identified by the name or UID.
    fields_with_uid_identifiers list(string)
    List of resource fields that will use object UIDs as object identifiers. Default is object name.
    id string
    name string
    Rule name.
    uid string
    Object unique identifier.
    layer String
    Layer that the rule belongs to identified by the name or UID.
    fieldsWithUidIdentifiers List<String>
    List of resource fields that will use object UIDs as object identifiers. Default is object name.
    id String
    name String
    Rule name.
    uid String
    Object unique identifier.
    layer string
    Layer that the rule belongs to identified by the name or UID.
    fieldsWithUidIdentifiers string[]
    List of resource fields that will use object UIDs as object identifiers. Default is object name.
    id string
    name string
    Rule name.
    uid string
    Object unique identifier.
    layer str
    Layer that the rule belongs to identified by the name or UID.
    fields_with_uid_identifiers Sequence[str]
    List of resource fields that will use object UIDs as object identifiers. Default is object name.
    id str
    name str
    Rule name.
    uid str
    Object unique identifier.
    layer String
    Layer that the rule belongs to identified by the name or UID.
    fieldsWithUidIdentifiers List<String>
    List of resource fields that will use object UIDs as object identifiers. Default is object name.
    id String
    name String
    Rule name.
    uid String
    Object unique identifier.

    getManagementDataAccessRule Result

    The following output properties are available:

    Supporting Types

    GetManagementDataAccessRuleActionSetting

    GetManagementDataAccessRuleCustomField

    Field1 string
    First custom field.
    Field2 string
    Second custom field.
    Field3 string
    Third custom field.
    Field1 string
    First custom field.
    Field2 string
    Second custom field.
    Field3 string
    Third custom field.
    field1 string
    First custom field.
    field2 string
    Second custom field.
    field3 string
    Third custom field.
    field1 String
    First custom field.
    field2 String
    Second custom field.
    field3 String
    Third custom field.
    field1 string
    First custom field.
    field2 string
    Second custom field.
    field3 string
    Third custom field.
    field1 str
    First custom field.
    field2 str
    Second custom field.
    field3 str
    Third custom field.
    field1 String
    First custom field.
    field2 String
    Second custom field.
    field3 String
    Third custom field.

    GetManagementDataAccessRuleTrack

    Accounting bool
    Turns accounting for track on and off.
    Alert string
    Type of alert for the track.
    EnableFirewallSession bool
    Determine whether to generate session log to firewall only connections.
    PerConnection bool
    Determines whether to perform the log per connection.
    PerSession bool
    Determines whether to perform the log per session.
    Type string
    "Log", "Extended Log", "Detailed Log", "None".
    Accounting bool
    Turns accounting for track on and off.
    Alert string
    Type of alert for the track.
    EnableFirewallSession bool
    Determine whether to generate session log to firewall only connections.
    PerConnection bool
    Determines whether to perform the log per connection.
    PerSession bool
    Determines whether to perform the log per session.
    Type string
    "Log", "Extended Log", "Detailed Log", "None".
    accounting bool
    Turns accounting for track on and off.
    alert string
    Type of alert for the track.
    enable_firewall_session bool
    Determine whether to generate session log to firewall only connections.
    per_connection bool
    Determines whether to perform the log per connection.
    per_session bool
    Determines whether to perform the log per session.
    type string
    "Log", "Extended Log", "Detailed Log", "None".
    accounting Boolean
    Turns accounting for track on and off.
    alert String
    Type of alert for the track.
    enableFirewallSession Boolean
    Determine whether to generate session log to firewall only connections.
    perConnection Boolean
    Determines whether to perform the log per connection.
    perSession Boolean
    Determines whether to perform the log per session.
    type String
    "Log", "Extended Log", "Detailed Log", "None".
    accounting boolean
    Turns accounting for track on and off.
    alert string
    Type of alert for the track.
    enableFirewallSession boolean
    Determine whether to generate session log to firewall only connections.
    perConnection boolean
    Determines whether to perform the log per connection.
    perSession boolean
    Determines whether to perform the log per session.
    type string
    "Log", "Extended Log", "Detailed Log", "None".
    accounting bool
    Turns accounting for track on and off.
    alert str
    Type of alert for the track.
    enable_firewall_session bool
    Determine whether to generate session log to firewall only connections.
    per_connection bool
    Determines whether to perform the log per connection.
    per_session bool
    Determines whether to perform the log per session.
    type str
    "Log", "Extended Log", "Detailed Log", "None".
    accounting Boolean
    Turns accounting for track on and off.
    alert String
    Type of alert for the track.
    enableFirewallSession Boolean
    Determine whether to generate session log to firewall only connections.
    perConnection Boolean
    Determines whether to perform the log per connection.
    perSession Boolean
    Determines whether to perform the log per session.
    type String
    "Log", "Extended Log", "Detailed Log", "None".

    GetManagementDataAccessRuleUserCheck

    Confirm string
    CustomFrequencies []GetManagementDataAccessRuleUserCheckCustomFrequency
    Custom Frequency blocks are documented below.
    Frequency string
    Interaction string
    confirm string
    custom_frequencies list(object)
    Custom Frequency blocks are documented below.
    frequency string
    interaction string
    confirm string
    customFrequencies GetManagementDataAccessRuleUserCheckCustomFrequency[]
    Custom Frequency blocks are documented below.
    frequency string
    interaction string
    confirm String
    customFrequencies List<Property Map>
    Custom Frequency blocks are documented below.
    frequency String
    interaction String

    GetManagementDataAccessRuleUserCheckCustomFrequency

    Every double
    Unit string
    Every float64
    Unit string
    every number
    unit string
    every Double
    unit String
    every number
    unit string
    every float
    unit str
    every Number
    unit String

    GetManagementDataAccessRuleVpnDirectional

    From string
    From VPN community.
    To string
    To VPN community.
    From string
    From VPN community.
    To string
    To VPN community.
    from string
    From VPN community.
    to string
    To VPN community.
    from String
    From VPN community.
    to String
    To VPN community.
    from string
    From VPN community.
    to string
    To VPN community.
    from_ str
    From VPN community.
    to str
    To VPN community.
    from String
    From VPN community.
    to String
    To VPN community.

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    Viewing docs for checkpoint 3.2.0
    published on Monday, Jun 15, 2026 by checkpointsw
    Schema (JSON)
    checkpointsw/terraform-provider-checkpoint

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial