1. Packages
  2. Databricks Provider
  3. API Docs
  4. AccountNetworkPolicy
Databricks v1.71.0 published on Monday, Jun 9, 2025 by Pulumi

databricks.AccountNetworkPolicy

Explore with Pulumi AI

databricks logo
Databricks v1.71.0 published on Monday, Jun 9, 2025 by Pulumi

    Import

    As of terraform v1.5, resources can be imported through configuration.

    hcl

    import {

    id = network_policy_id

    to = databricks_account_network_policy.this

    }

    If you are using an older version of terraform, you can import the resource using cli as follows:

    $ pulumi import databricks:index/accountNetworkPolicy:AccountNetworkPolicy databricks_account_network_policy network_policy_id
    

    Create AccountNetworkPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AccountNetworkPolicy(name: string, args?: AccountNetworkPolicyArgs, opts?: CustomResourceOptions);
    @overload
    def AccountNetworkPolicy(resource_name: str,
                             args: Optional[AccountNetworkPolicyArgs] = None,
                             opts: Optional[ResourceOptions] = None)
    
    @overload
    def AccountNetworkPolicy(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             account_id: Optional[str] = None,
                             egress: Optional[AccountNetworkPolicyEgressArgs] = None,
                             network_policy_id: Optional[str] = None)
    func NewAccountNetworkPolicy(ctx *Context, name string, args *AccountNetworkPolicyArgs, opts ...ResourceOption) (*AccountNetworkPolicy, error)
    public AccountNetworkPolicy(string name, AccountNetworkPolicyArgs? args = null, CustomResourceOptions? opts = null)
    public AccountNetworkPolicy(String name, AccountNetworkPolicyArgs args)
    public AccountNetworkPolicy(String name, AccountNetworkPolicyArgs args, CustomResourceOptions options)
    
    type: databricks:AccountNetworkPolicy
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var accountNetworkPolicyResource = new Databricks.AccountNetworkPolicy("accountNetworkPolicyResource", new()
    {
        AccountId = "string",
        Egress = new Databricks.Inputs.AccountNetworkPolicyEgressArgs
        {
            NetworkAccess = new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessArgs
            {
                RestrictionMode = "string",
                AllowedInternetDestinations = new[]
                {
                    new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs
                    {
                        Destination = "string",
                        InternetDestinationType = "string",
                    },
                },
                AllowedStorageDestinations = new[]
                {
                    new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs
                    {
                        AzureStorageAccount = "string",
                        AzureStorageService = "string",
                        BucketName = "string",
                        Region = "string",
                        StorageDestinationType = "string",
                    },
                },
                PolicyEnforcement = new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs
                {
                    DryRunModeProductFilters = new[]
                    {
                        "string",
                    },
                    EnforcementMode = "string",
                },
            },
        },
        NetworkPolicyId = "string",
    });
    
    example, err := databricks.NewAccountNetworkPolicy(ctx, "accountNetworkPolicyResource", &databricks.AccountNetworkPolicyArgs{
    	AccountId: pulumi.String("string"),
    	Egress: &databricks.AccountNetworkPolicyEgressArgs{
    		NetworkAccess: &databricks.AccountNetworkPolicyEgressNetworkAccessArgs{
    			RestrictionMode: pulumi.String("string"),
    			AllowedInternetDestinations: databricks.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArray{
    				&databricks.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs{
    					Destination:             pulumi.String("string"),
    					InternetDestinationType: pulumi.String("string"),
    				},
    			},
    			AllowedStorageDestinations: databricks.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArray{
    				&databricks.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs{
    					AzureStorageAccount:    pulumi.String("string"),
    					AzureStorageService:    pulumi.String("string"),
    					BucketName:             pulumi.String("string"),
    					Region:                 pulumi.String("string"),
    					StorageDestinationType: pulumi.String("string"),
    				},
    			},
    			PolicyEnforcement: &databricks.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs{
    				DryRunModeProductFilters: pulumi.StringArray{
    					pulumi.String("string"),
    				},
    				EnforcementMode: pulumi.String("string"),
    			},
    		},
    	},
    	NetworkPolicyId: pulumi.String("string"),
    })
    
    var accountNetworkPolicyResource = new AccountNetworkPolicy("accountNetworkPolicyResource", AccountNetworkPolicyArgs.builder()
        .accountId("string")
        .egress(AccountNetworkPolicyEgressArgs.builder()
            .networkAccess(AccountNetworkPolicyEgressNetworkAccessArgs.builder()
                .restrictionMode("string")
                .allowedInternetDestinations(AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs.builder()
                    .destination("string")
                    .internetDestinationType("string")
                    .build())
                .allowedStorageDestinations(AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs.builder()
                    .azureStorageAccount("string")
                    .azureStorageService("string")
                    .bucketName("string")
                    .region("string")
                    .storageDestinationType("string")
                    .build())
                .policyEnforcement(AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs.builder()
                    .dryRunModeProductFilters("string")
                    .enforcementMode("string")
                    .build())
                .build())
            .build())
        .networkPolicyId("string")
        .build());
    
    account_network_policy_resource = databricks.AccountNetworkPolicy("accountNetworkPolicyResource",
        account_id="string",
        egress={
            "network_access": {
                "restriction_mode": "string",
                "allowed_internet_destinations": [{
                    "destination": "string",
                    "internet_destination_type": "string",
                }],
                "allowed_storage_destinations": [{
                    "azure_storage_account": "string",
                    "azure_storage_service": "string",
                    "bucket_name": "string",
                    "region": "string",
                    "storage_destination_type": "string",
                }],
                "policy_enforcement": {
                    "dry_run_mode_product_filters": ["string"],
                    "enforcement_mode": "string",
                },
            },
        },
        network_policy_id="string")
    
    const accountNetworkPolicyResource = new databricks.AccountNetworkPolicy("accountNetworkPolicyResource", {
        accountId: "string",
        egress: {
            networkAccess: {
                restrictionMode: "string",
                allowedInternetDestinations: [{
                    destination: "string",
                    internetDestinationType: "string",
                }],
                allowedStorageDestinations: [{
                    azureStorageAccount: "string",
                    azureStorageService: "string",
                    bucketName: "string",
                    region: "string",
                    storageDestinationType: "string",
                }],
                policyEnforcement: {
                    dryRunModeProductFilters: ["string"],
                    enforcementMode: "string",
                },
            },
        },
        networkPolicyId: "string",
    });
    
    type: databricks:AccountNetworkPolicy
    properties:
        accountId: string
        egress:
            networkAccess:
                allowedInternetDestinations:
                    - destination: string
                      internetDestinationType: string
                allowedStorageDestinations:
                    - azureStorageAccount: string
                      azureStorageService: string
                      bucketName: string
                      region: string
                      storageDestinationType: string
                policyEnforcement:
                    dryRunModeProductFilters:
                        - string
                    enforcementMode: string
                restrictionMode: string
        networkPolicyId: string
    

    AccountNetworkPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AccountNetworkPolicy resource accepts the following input properties:

    AccountId string
    The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    NetworkPolicyId string
    The unique identifier for the network policy
    AccountId string
    The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    NetworkPolicyId string
    The unique identifier for the network policy
    accountId String
    The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    networkPolicyId String
    The unique identifier for the network policy
    accountId string
    The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    networkPolicyId string
    The unique identifier for the network policy
    account_id str
    The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    network_policy_id str
    The unique identifier for the network policy
    accountId String
    The associated account ID for this Network Policy object
    egress Property Map
    The network policies applying for egress traffic
    networkPolicyId String
    The unique identifier for the network policy

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AccountNetworkPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AccountNetworkPolicy Resource

    Get an existing AccountNetworkPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AccountNetworkPolicyState, opts?: CustomResourceOptions): AccountNetworkPolicy
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            account_id: Optional[str] = None,
            egress: Optional[AccountNetworkPolicyEgressArgs] = None,
            network_policy_id: Optional[str] = None) -> AccountNetworkPolicy
    func GetAccountNetworkPolicy(ctx *Context, name string, id IDInput, state *AccountNetworkPolicyState, opts ...ResourceOption) (*AccountNetworkPolicy, error)
    public static AccountNetworkPolicy Get(string name, Input<string> id, AccountNetworkPolicyState? state, CustomResourceOptions? opts = null)
    public static AccountNetworkPolicy get(String name, Output<String> id, AccountNetworkPolicyState state, CustomResourceOptions options)
    resources:  _:    type: databricks:AccountNetworkPolicy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    NetworkPolicyId string
    The unique identifier for the network policy
    AccountId string
    The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    NetworkPolicyId string
    The unique identifier for the network policy
    accountId String
    The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    networkPolicyId String
    The unique identifier for the network policy
    accountId string
    The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    networkPolicyId string
    The unique identifier for the network policy
    account_id str
    The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    network_policy_id str
    The unique identifier for the network policy
    accountId String
    The associated account ID for this Network Policy object
    egress Property Map
    The network policies applying for egress traffic
    networkPolicyId String
    The unique identifier for the network policy

    Supporting Types

    AccountNetworkPolicyEgress, AccountNetworkPolicyEgressArgs

    NetworkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    NetworkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    networkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    networkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    network_access AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    networkAccess Property Map
    The access policy enforced for egress traffic to the internet

    AccountNetworkPolicyEgressNetworkAccess, AccountNetworkPolicyEgressNetworkAccessArgs

    RestrictionMode string
    The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    RestrictionMode string
    The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations []AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations []AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode string
    The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination[]
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination[]
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restriction_mode str
    The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowed_internet_destinations Sequence[AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination]
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_storage_destinations Sequence[AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination]
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policy_enforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<Property Map>
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<Property Map>
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement Property Map
    Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

    AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination, AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs

    Destination string
    The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    Destination string
    The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination str
    The internet destination to which access will be allowed. Format dependent on the destination type
    internet_destination_type str
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

    AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination, AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs

    AzureStorageAccount string
    The Azure storage account name
    AzureStorageService string
    The Azure storage service type (blob, dfs, etc.)
    BucketName string
    Region string
    The region of the S3 bucket
    StorageDestinationType string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    AzureStorageAccount string
    The Azure storage account name
    AzureStorageService string
    The Azure storage service type (blob, dfs, etc.)
    BucketName string
    Region string
    The region of the S3 bucket
    StorageDestinationType string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    The Azure storage account name
    azureStorageService String
    The Azure storage service type (blob, dfs, etc.)
    bucketName String
    region String
    The region of the S3 bucket
    storageDestinationType String
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount string
    The Azure storage account name
    azureStorageService string
    The Azure storage service type (blob, dfs, etc.)
    bucketName string
    region string
    The region of the S3 bucket
    storageDestinationType string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azure_storage_account str
    The Azure storage account name
    azure_storage_service str
    The Azure storage service type (blob, dfs, etc.)
    bucket_name str
    region str
    The region of the S3 bucket
    storage_destination_type str
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    The Azure storage account name
    azureStorageService String
    The Azure storage service type (blob, dfs, etc.)
    bucketName String
    region String
    The region of the S3 bucket
    storageDestinationType String
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

    AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement, AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs

    DryRunModeProductFilters List<string>
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    DryRunModeProductFilters []string
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters string[]
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dry_run_mode_product_filters Sequence[str]
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcement_mode str
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo
    Databricks v1.71.0 published on Monday, Jun 9, 2025 by Pulumi