Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Checkpoint Provider
  4. API Docs
  5. ManagementGuidelineCellApprovals
Viewing docs for checkpoint 3.3.0
published on Thursday, Jul 30, 2026 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

checkpoint.ManagementGuidelineCellApprovals

Viewing docs for checkpoint 3.3.0
published on Thursday, Jul 30, 2026 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

    This resource allows you to execute Check Point Guideline Cell Approvals.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const rule1 = new checkpoint.ManagementAccessRule("rule1", {
    name: "test-rule-for-approval",
    layer: "Network",
    position: {
        top: "top",
    },
});
const example = new checkpoint.ManagementGroup("example", {name: "approvalTestGroup"});
const guideline1 = new checkpoint.ManagementGuideline("guideline1", {
    name: "Corporate policy",
    accessLayers: [{
        accessLayer: "Network",
    }],
    guidelineGroups: [{
        name: example.name,
        position: {
            top: "top",
        },
    }],
});
const exampleManagementGuidelineCellApprovals = new checkpoint.ManagementGuidelineCellApprovals("example", {
    guideline: guideline1.name,
    comment: "This is approved for all segments",
    from: "any",
    to: "any",
    approvals: [{
        rules: [{
            layer: "Network",
            rule: rule1.name,
        }],
    }],
});

    import pulumi
import pulumi_checkpoint as checkpoint

rule1 = checkpoint.ManagementAccessRule("rule1",
    name="test-rule-for-approval",
    layer="Network",
    position={
        "top": "top",
    })
example = checkpoint.ManagementGroup("example", name="approvalTestGroup")
guideline1 = checkpoint.ManagementGuideline("guideline1",
    name="Corporate policy",
    access_layers=[{
        "access_layer": "Network",
    }],
    guideline_groups=[{
        "name": example.name,
        "position": {
            "top": "top",
        },
    }])
example_management_guideline_cell_approvals = checkpoint.ManagementGuidelineCellApprovals("example",
    guideline=guideline1.name,
    comment="This is approved for all segments",
    from_="any",
    to="any",
    approvals=[{
        "rules": [{
            "layer": "Network",
            "rule": rule1.name,
        }],
    }])

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v3/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		rule1, err := checkpoint.NewManagementAccessRule(ctx, "rule1", &checkpoint.ManagementAccessRuleArgs{
			Name:  pulumi.String("test-rule-for-approval"),
			Layer: pulumi.String("Network"),
			Position: &checkpoint.ManagementAccessRulePositionArgs{
				Top: pulumi.String("top"),
			},
		})
		if err != nil {
			return err
		}
		example, err := checkpoint.NewManagementGroup(ctx, "example", &checkpoint.ManagementGroupArgs{
			Name: pulumi.String("approvalTestGroup"),
		})
		if err != nil {
			return err
		}
		guideline1, err := checkpoint.NewManagementGuideline(ctx, "guideline1", &checkpoint.ManagementGuidelineArgs{
			Name: pulumi.String("Corporate policy"),
			AccessLayers: checkpoint.ManagementGuidelineAccessLayerArray{
				&checkpoint.ManagementGuidelineAccessLayerArgs{
					AccessLayer: pulumi.String("Network"),
				},
			},
			GuidelineGroups: checkpoint.ManagementGuidelineGuidelineGroupArray{
				&checkpoint.ManagementGuidelineGuidelineGroupArgs{
					Name: example.Name,
					Position: &checkpoint.ManagementGuidelineGuidelineGroupPositionArgs{
						Top: pulumi.String("top"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = checkpoint.NewManagementGuidelineCellApprovals(ctx, "example", &checkpoint.ManagementGuidelineCellApprovalsArgs{
			Guideline: guideline1.Name,
			Comment:   pulumi.String("This is approved for all segments"),
			From:      pulumi.String("any"),
			To:        pulumi.String("any"),
			Approvals: checkpoint.ManagementGuidelineCellApprovalsApprovalArray{
				&checkpoint.ManagementGuidelineCellApprovalsApprovalArgs{
					Rules: checkpoint.ManagementGuidelineCellApprovalsApprovalRuleArray{
						&checkpoint.ManagementGuidelineCellApprovalsApprovalRuleArgs{
							Layer: pulumi.String("Network"),
							Rule:  rule1.Name,
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var rule1 = new Checkpoint.ManagementAccessRule("rule1", new()
    {
        Name = "test-rule-for-approval",
        Layer = "Network",
        Position = new Checkpoint.Inputs.ManagementAccessRulePositionArgs
        {
            Top = "top",
        },
    });

    var example = new Checkpoint.ManagementGroup("example", new()
    {
        Name = "approvalTestGroup",
    });

    var guideline1 = new Checkpoint.ManagementGuideline("guideline1", new()
    {
        Name = "Corporate policy",
        AccessLayers = new[]
        {
            new Checkpoint.Inputs.ManagementGuidelineAccessLayerArgs
            {
                AccessLayer = "Network",
            },
        },
        GuidelineGroups = new[]
        {
            new Checkpoint.Inputs.ManagementGuidelineGuidelineGroupArgs
            {
                Name = example.Name,
                Position = new Checkpoint.Inputs.ManagementGuidelineGuidelineGroupPositionArgs
                {
                    Top = "top",
                },
            },
        },
    });

    var exampleManagementGuidelineCellApprovals = new Checkpoint.ManagementGuidelineCellApprovals("example", new()
    {
        Guideline = guideline1.Name,
        Comment = "This is approved for all segments",
        From = "any",
        To = "any",
        Approvals = new[]
        {
            new Checkpoint.Inputs.ManagementGuidelineCellApprovalsApprovalArgs
            {
                Rules = new[]
                {
                    new Checkpoint.Inputs.ManagementGuidelineCellApprovalsApprovalRuleArgs
                    {
                        Layer = "Network",
                        Rule = rule1.Name,
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.ManagementAccessRule;
import com.pulumi.checkpoint.ManagementAccessRuleArgs;
import com.pulumi.checkpoint.inputs.ManagementAccessRulePositionArgs;
import com.pulumi.checkpoint.ManagementGroup;
import com.pulumi.checkpoint.ManagementGroupArgs;
import com.pulumi.checkpoint.ManagementGuideline;
import com.pulumi.checkpoint.ManagementGuidelineArgs;
import com.pulumi.checkpoint.inputs.ManagementGuidelineAccessLayerArgs;
import com.pulumi.checkpoint.inputs.ManagementGuidelineGuidelineGroupArgs;
import com.pulumi.checkpoint.inputs.ManagementGuidelineGuidelineGroupPositionArgs;
import com.pulumi.checkpoint.ManagementGuidelineCellApprovals;
import com.pulumi.checkpoint.ManagementGuidelineCellApprovalsArgs;
import com.pulumi.checkpoint.inputs.ManagementGuidelineCellApprovalsApprovalArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var rule1 = new ManagementAccessRule("rule1", ManagementAccessRuleArgs.builder()
            .name("test-rule-for-approval")
            .layer("Network")
            .position(ManagementAccessRulePositionArgs.builder()
                .top("top")
                .build())
            .build());

        var example = new ManagementGroup("example", ManagementGroupArgs.builder()
            .name("approvalTestGroup")
            .build());

        var guideline1 = new ManagementGuideline("guideline1", ManagementGuidelineArgs.builder()
            .name("Corporate policy")
            .accessLayers(ManagementGuidelineAccessLayerArgs.builder()
                .accessLayer("Network")
                .build())
            .guidelineGroups(ManagementGuidelineGuidelineGroupArgs.builder()
                .name(example.name())
                .position(ManagementGuidelineGuidelineGroupPositionArgs.builder()
                    .top("top")
                    .build())
                .build())
            .build());

        var exampleManagementGuidelineCellApprovals = new ManagementGuidelineCellApprovals("exampleManagementGuidelineCellApprovals", ManagementGuidelineCellApprovalsArgs.builder()
            .guideline(guideline1.name())
            .comment("This is approved for all segments")
            .from("any")
            .to("any")
            .approvals(ManagementGuidelineCellApprovalsApprovalArgs.builder()
                .rules(ManagementGuidelineCellApprovalsApprovalRuleArgs.builder()
                    .layer("Network")
                    .rule(rule1.name())
                    .build())
                .build())
            .build());

    }
}

    resources:
  rule1:
    type: checkpoint:ManagementAccessRule
    properties:
      name: test-rule-for-approval
      layer: Network
      position:
        top: top
  example:
    type: checkpoint:ManagementGroup
    properties:
      name: approvalTestGroup
  guideline1:
    type: checkpoint:ManagementGuideline
    properties:
      name: Corporate policy
      accessLayers:
        - accessLayer: Network
      guidelineGroups:
        - name: ${example.name}
          position:
            top: top
  exampleManagementGuidelineCellApprovals:
    type: checkpoint:ManagementGuidelineCellApprovals
    name: example
    properties:
      guideline: ${guideline1.name}
      comment: This is approved for all segments
      from: any
      to: any
      approvals:
        - rules:
            - layer: Network
              rule: ${rule1.name}

    Example coming soon!

    Create ManagementGuidelineCellApprovals Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ManagementGuidelineCellApprovals(name: string, args: ManagementGuidelineCellApprovalsArgs, opts?: CustomResourceOptions);
    @overload
def ManagementGuidelineCellApprovals(resource_name: str,
                                     args: ManagementGuidelineCellApprovalsArgs,
                                     opts: Optional[ResourceOptions] = None)

@overload
def ManagementGuidelineCellApprovals(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     approvals: Optional[Sequence[ManagementGuidelineCellApprovalsApprovalArgs]] = None,
                                     comment: Optional[str] = None,
                                     guideline: Optional[str] = None,
                                     delete_scope: Optional[str] = None,
                                     from_: Optional[str] = None,
                                     from_type: Optional[str] = None,
                                     ignore_errors: Optional[bool] = None,
                                     ignore_warnings: Optional[bool] = None,
                                     management_guideline_cell_approvals_id: Optional[str] = None,
                                     policy_package: Optional[str] = None,
                                     to: Optional[str] = None,
                                     to_type: Optional[str] = None)
    func NewManagementGuidelineCellApprovals(ctx *Context, name string, args ManagementGuidelineCellApprovalsArgs, opts ...ResourceOption) (*ManagementGuidelineCellApprovals, error)
    public ManagementGuidelineCellApprovals(string name, ManagementGuidelineCellApprovalsArgs args, CustomResourceOptions? opts = null)
    public ManagementGuidelineCellApprovals(String name, ManagementGuidelineCellApprovalsArgs args)
public ManagementGuidelineCellApprovals(String name, ManagementGuidelineCellApprovalsArgs args, CustomResourceOptions options)

    type: checkpoint:ManagementGuidelineCellApprovals
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "checkpoint_management_guideline_cell_approvals" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ManagementGuidelineCellApprovalsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ManagementGuidelineCellApprovalsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ManagementGuidelineCellApprovalsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ManagementGuidelineCellApprovalsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ManagementGuidelineCellApprovalsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var managementGuidelineCellApprovalsResource = new Checkpoint.ManagementGuidelineCellApprovals("managementGuidelineCellApprovalsResource", new()
{
    Approvals = new[]
    {
        new Checkpoint.Inputs.ManagementGuidelineCellApprovalsApprovalArgs
        {
            Rules = new[]
            {
                new Checkpoint.Inputs.ManagementGuidelineCellApprovalsApprovalRuleArgs
                {
                    Layer = "string",
                    Rule = "string",
                },
            },
        },
    },
    Comment = "string",
    Guideline = "string",
    DeleteScope = "string",
    From = "string",
    FromType = "string",
    IgnoreErrors = false,
    IgnoreWarnings = false,
    ManagementGuidelineCellApprovalsId = "string",
    PolicyPackage = "string",
    To = "string",
    ToType = "string",
});

    example, err := checkpoint.NewManagementGuidelineCellApprovals(ctx, "managementGuidelineCellApprovalsResource", &checkpoint.ManagementGuidelineCellApprovalsArgs{
	Approvals: checkpoint.ManagementGuidelineCellApprovalsApprovalArray{
		&checkpoint.ManagementGuidelineCellApprovalsApprovalArgs{
			Rules: checkpoint.ManagementGuidelineCellApprovalsApprovalRuleArray{
				&checkpoint.ManagementGuidelineCellApprovalsApprovalRuleArgs{
					Layer: pulumi.String("string"),
					Rule:  pulumi.String("string"),
				},
			},
		},
	},
	Comment:                            pulumi.String("string"),
	Guideline:                          pulumi.String("string"),
	DeleteScope:                        pulumi.String("string"),
	From:                               pulumi.String("string"),
	FromType:                           pulumi.String("string"),
	IgnoreErrors:                       pulumi.Bool(false),
	IgnoreWarnings:                     pulumi.Bool(false),
	ManagementGuidelineCellApprovalsId: pulumi.String("string"),
	PolicyPackage:                      pulumi.String("string"),
	To:                                 pulumi.String("string"),
	ToType:                             pulumi.String("string"),
})

    resource "checkpoint_management_guideline_cell_approvals" "managementGuidelineCellApprovalsResource" {
  lifecycle {
    create_before_destroy = true
  }
  approvals {
    rules {
      layer = "string"
      rule  = "string"
    }
  }
  comment                                = "string"
  guideline                              = "string"
  delete_scope                           = "string"
  from                                   = "string"
  from_type                              = "string"
  ignore_errors                          = false
  ignore_warnings                        = false
  management_guideline_cell_approvals_id = "string"
  policy_package                         = "string"
  to                                     = "string"
  to_type                                = "string"
}

    var managementGuidelineCellApprovalsResource = new ManagementGuidelineCellApprovals("managementGuidelineCellApprovalsResource", ManagementGuidelineCellApprovalsArgs.builder()
    .approvals(ManagementGuidelineCellApprovalsApprovalArgs.builder()
        .rules(ManagementGuidelineCellApprovalsApprovalRuleArgs.builder()
            .layer("string")
            .rule("string")
            .build())
        .build())
    .comment("string")
    .guideline("string")
    .deleteScope("string")
    .from("string")
    .fromType("string")
    .ignoreErrors(false)
    .ignoreWarnings(false)
    .managementGuidelineCellApprovalsId("string")
    .policyPackage("string")
    .to("string")
    .toType("string")
    .build());

    management_guideline_cell_approvals_resource = checkpoint.ManagementGuidelineCellApprovals("managementGuidelineCellApprovalsResource",
    approvals=[{
        "rules": [{
            "layer": "string",
            "rule": "string",
        }],
    }],
    comment="string",
    guideline="string",
    delete_scope="string",
    from_="string",
    from_type="string",
    ignore_errors=False,
    ignore_warnings=False,
    management_guideline_cell_approvals_id="string",
    policy_package="string",
    to="string",
    to_type="string")

    const managementGuidelineCellApprovalsResource = new checkpoint.ManagementGuidelineCellApprovals("managementGuidelineCellApprovalsResource", {
    approvals: [{
        rules: [{
            layer: "string",
            rule: "string",
        }],
    }],
    comment: "string",
    guideline: "string",
    deleteScope: "string",
    from: "string",
    fromType: "string",
    ignoreErrors: false,
    ignoreWarnings: false,
    managementGuidelineCellApprovalsId: "string",
    policyPackage: "string",
    to: "string",
    toType: "string",
});

    type: checkpoint:ManagementGuidelineCellApprovals
properties:
    approvals:
        - rules:
            - layer: string
              rule: string
    comment: string
    deleteScope: string
    from: string
    fromType: string
    guideline: string
    ignoreErrors: false
    ignoreWarnings: false
    managementGuidelineCellApprovalsId: string
    policyPackage: string
    to: string
    toType: string

    ManagementGuidelineCellApprovals Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ManagementGuidelineCellApprovals resource accepts the following input properties:

    Approvals List<ManagementGuidelineCellApprovalsApproval>
    List of approved rules.approvals blocks are documented below.
    Comment string
    Comment on the approvals. The same comment to all the requested approvals.
    Guideline string
    The guideline (identified by UID or name) in which we approve the violation.
    DeleteScope string
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    From string
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    FromType string
    The type of the segment in the 'from' axis.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementGuidelineCellApprovalsId string
    PolicyPackage string
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    To string
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    ToType string
    The type of the segment in the 'to' axis.
    Approvals []ManagementGuidelineCellApprovalsApprovalArgs
    List of approved rules.approvals blocks are documented below.
    Comment string
    Comment on the approvals. The same comment to all the requested approvals.
    Guideline string
    The guideline (identified by UID or name) in which we approve the violation.
    DeleteScope string
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    From string
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    FromType string
    The type of the segment in the 'from' axis.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementGuidelineCellApprovalsId string
    PolicyPackage string
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    To string
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    ToType string
    The type of the segment in the 'to' axis.
    approvals list(object)
    List of approved rules.approvals blocks are documented below.
    comment string
    Comment on the approvals. The same comment to all the requested approvals.
    guideline string
    The guideline (identified by UID or name) in which we approve the violation.
    delete_scope string
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from string
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    from_type string
    The type of the segment in the 'from' axis.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    management_guideline_cell_approvals_id string
    policy_package string
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to string
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    to_type string
    The type of the segment in the 'to' axis.
    approvals List<ManagementGuidelineCellApprovalsApproval>
    List of approved rules.approvals blocks are documented below.
    comment String
    Comment on the approvals. The same comment to all the requested approvals.
    guideline String
    The guideline (identified by UID or name) in which we approve the violation.
    deleteScope String
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from String
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    fromType String
    The type of the segment in the 'from' axis.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementGuidelineCellApprovalsId String
    policyPackage String
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to String
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    toType String
    The type of the segment in the 'to' axis.
    approvals ManagementGuidelineCellApprovalsApproval[]
    List of approved rules.approvals blocks are documented below.
    comment string
    Comment on the approvals. The same comment to all the requested approvals.
    guideline string
    The guideline (identified by UID or name) in which we approve the violation.
    deleteScope string
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from string
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    fromType string
    The type of the segment in the 'from' axis.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    managementGuidelineCellApprovalsId string
    policyPackage string
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to string
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    toType string
    The type of the segment in the 'to' axis.
    approvals Sequence[ManagementGuidelineCellApprovalsApprovalArgs]
    List of approved rules.approvals blocks are documented below.
    comment str
    Comment on the approvals. The same comment to all the requested approvals.
    guideline str
    The guideline (identified by UID or name) in which we approve the violation.
    delete_scope str
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from_ str
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    from_type str
    The type of the segment in the 'from' axis.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    management_guideline_cell_approvals_id str
    policy_package str
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to str
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    to_type str
    The type of the segment in the 'to' axis.
    approvals List<Property Map>
    List of approved rules.approvals blocks are documented below.
    comment String
    Comment on the approvals. The same comment to all the requested approvals.
    guideline String
    The guideline (identified by UID or name) in which we approve the violation.
    deleteScope String
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from String
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    fromType String
    The type of the segment in the 'from' axis.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementGuidelineCellApprovalsId String
    policyPackage String
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to String
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    toType String
    The type of the segment in the 'to' axis.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ManagementGuidelineCellApprovals resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ManagementGuidelineCellApprovals Resource

    Get an existing ManagementGuidelineCellApprovals resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ManagementGuidelineCellApprovalsState, opts?: CustomResourceOptions): ManagementGuidelineCellApprovals
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        approvals: Optional[Sequence[ManagementGuidelineCellApprovalsApprovalArgs]] = None,
        comment: Optional[str] = None,
        delete_scope: Optional[str] = None,
        from_: Optional[str] = None,
        from_type: Optional[str] = None,
        guideline: Optional[str] = None,
        ignore_errors: Optional[bool] = None,
        ignore_warnings: Optional[bool] = None,
        management_guideline_cell_approvals_id: Optional[str] = None,
        policy_package: Optional[str] = None,
        to: Optional[str] = None,
        to_type: Optional[str] = None) -> ManagementGuidelineCellApprovals
    func GetManagementGuidelineCellApprovals(ctx *Context, name string, id IDInput, state *ManagementGuidelineCellApprovalsState, opts ...ResourceOption) (*ManagementGuidelineCellApprovals, error)
    public static ManagementGuidelineCellApprovals Get(string name, Input<string> id, ManagementGuidelineCellApprovalsState? state, CustomResourceOptions? opts = null)
    public static ManagementGuidelineCellApprovals get(String name, Output<String> id, ManagementGuidelineCellApprovalsState state, CustomResourceOptions options)
    resources:  _:    type: checkpoint:ManagementGuidelineCellApprovals    get:      id: ${id}
    import {
  to = checkpoint_management_guideline_cell_approvals.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Approvals List<ManagementGuidelineCellApprovalsApproval>
    List of approved rules.approvals blocks are documented below.
    Comment string
    Comment on the approvals. The same comment to all the requested approvals.
    DeleteScope string
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    From string
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    FromType string
    The type of the segment in the 'from' axis.
    Guideline string
    The guideline (identified by UID or name) in which we approve the violation.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementGuidelineCellApprovalsId string
    PolicyPackage string
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    To string
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    ToType string
    The type of the segment in the 'to' axis.
    Approvals []ManagementGuidelineCellApprovalsApprovalArgs
    List of approved rules.approvals blocks are documented below.
    Comment string
    Comment on the approvals. The same comment to all the requested approvals.
    DeleteScope string
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    From string
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    FromType string
    The type of the segment in the 'from' axis.
    Guideline string
    The guideline (identified by UID or name) in which we approve the violation.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementGuidelineCellApprovalsId string
    PolicyPackage string
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    To string
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    ToType string
    The type of the segment in the 'to' axis.
    approvals list(object)
    List of approved rules.approvals blocks are documented below.
    comment string
    Comment on the approvals. The same comment to all the requested approvals.
    delete_scope string
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from string
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    from_type string
    The type of the segment in the 'from' axis.
    guideline string
    The guideline (identified by UID or name) in which we approve the violation.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    management_guideline_cell_approvals_id string
    policy_package string
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to string
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    to_type string
    The type of the segment in the 'to' axis.
    approvals List<ManagementGuidelineCellApprovalsApproval>
    List of approved rules.approvals blocks are documented below.
    comment String
    Comment on the approvals. The same comment to all the requested approvals.
    deleteScope String
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from String
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    fromType String
    The type of the segment in the 'from' axis.
    guideline String
    The guideline (identified by UID or name) in which we approve the violation.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementGuidelineCellApprovalsId String
    policyPackage String
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to String
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    toType String
    The type of the segment in the 'to' axis.
    approvals ManagementGuidelineCellApprovalsApproval[]
    List of approved rules.approvals blocks are documented below.
    comment string
    Comment on the approvals. The same comment to all the requested approvals.
    deleteScope string
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from string
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    fromType string
    The type of the segment in the 'from' axis.
    guideline string
    The guideline (identified by UID or name) in which we approve the violation.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    managementGuidelineCellApprovalsId string
    policyPackage string
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to string
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    toType string
    The type of the segment in the 'to' axis.
    approvals Sequence[ManagementGuidelineCellApprovalsApprovalArgs]
    List of approved rules.approvals blocks are documented below.
    comment str
    Comment on the approvals. The same comment to all the requested approvals.
    delete_scope str
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from_ str
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    from_type str
    The type of the segment in the 'from' axis.
    guideline str
    The guideline (identified by UID or name) in which we approve the violation.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    management_guideline_cell_approvals_id str
    policy_package str
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to str
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    to_type str
    The type of the segment in the 'to' axis.
    approvals List<Property Map>
    List of approved rules.approvals blocks are documented below.
    comment String
    Comment on the approvals. The same comment to all the requested approvals.
    deleteScope String
    Indicates whether to delete all the approval scope, or only remove the requested cell from the scope. Relevant only for guideline approvals. This field is only relevant on delete - it is sent when the resource is destroyed and has no effect on create or update. To change its value, update it in the configuration and run pulumi up (so the value is stored in state) before destroying.
    from String
    "from" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "to" is also 'any'). This field is mandatory if "from-type" is 'Network Group'.
    fromType String
    The type of the segment in the 'from' axis.
    guideline String
    The guideline (identified by UID or name) in which we approve the violation.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementGuidelineCellApprovalsId String
    policyPackage String
    The policy package (identified by UID or name) in which we approve the violation. This field is mandatory only if the ordered-access-layer (first layer in path) is from a global domain with AGP.
    to String
    "to" segment (identified by UID or name), or 'any' to approved the rule across all cells (possible only if "from" is also 'any'). This field is mandatory if "to-type" is 'Network Group'.
    toType String
    The type of the segment in the 'to' axis.

    Supporting Types

    ManagementGuidelineCellApprovalsApproval, ManagementGuidelineCellApprovalsApprovalArgs

    Rules List<ManagementGuidelineCellApprovalsApprovalRule>
    The full paths (pairs of layer and rule) of the approved rules.rules blocks are documented below.
    Rules []ManagementGuidelineCellApprovalsApprovalRule
    The full paths (pairs of layer and rule) of the approved rules.rules blocks are documented below.
    rules list(object)
    The full paths (pairs of layer and rule) of the approved rules.rules blocks are documented below.
    rules List<ManagementGuidelineCellApprovalsApprovalRule>
    The full paths (pairs of layer and rule) of the approved rules.rules blocks are documented below.
    rules ManagementGuidelineCellApprovalsApprovalRule[]
    The full paths (pairs of layer and rule) of the approved rules.rules blocks are documented below.
    rules Sequence[ManagementGuidelineCellApprovalsApprovalRule]
    The full paths (pairs of layer and rule) of the approved rules.rules blocks are documented below.
    rules List<Property Map>
    The full paths (pairs of layer and rule) of the approved rules.rules blocks are documented below.

    ManagementGuidelineCellApprovalsApprovalRule, ManagementGuidelineCellApprovalsApprovalRuleArgs

    Layer string
    The Layer identifier (name or UID).
    Rule string
    The rule identifier (name if unique, rule position number in rule-base or UID).
    Layer string
    The Layer identifier (name or UID).
    Rule string
    The rule identifier (name if unique, rule position number in rule-base or UID).
    layer string
    The Layer identifier (name or UID).
    rule string
    The rule identifier (name if unique, rule position number in rule-base or UID).
    layer String
    The Layer identifier (name or UID).
    rule String
    The rule identifier (name if unique, rule position number in rule-base or UID).
    layer string
    The Layer identifier (name or UID).
    rule string
    The rule identifier (name if unique, rule position number in rule-base or UID).
    layer str
    The Layer identifier (name or UID).
    rule str
    The rule identifier (name if unique, rule position number in rule-base or UID).
    layer String
    The Layer identifier (name or UID).
    rule String
    The rule identifier (name if unique, rule position number in rule-base or UID).

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    Viewing docs for checkpoint 3.3.0
    published on Thursday, Jul 30, 2026 by checkpointsw
    Schema (JSON)
    checkpointsw/terraform-provider-checkpoint

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial