Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Databricks Provider
  4. API Docs
  5. AccountNetworkPolicy
Viewing docs for Databricks v1.109.0
published on Tuesday, Sep 8, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

databricks.AccountNetworkPolicy

databricks logo databricks logo
Viewing docs for Databricks v1.109.0
published on Tuesday, Sep 8, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

    GA

    API Documentation

    Network policies control which network destinations can be accessed from the Databricks environment.

    Each Databricks account includes a default policy named default-policy. This policy is:

    • Associated with any workspace lacking an explicit network policy assignment
    • Automatically associated with each newly created workspace
    • Reserved and cannot be deleted, but can be updated to customize the default network access rules for your account

    The default-policy provides a baseline security configuration that ensures all workspaces have network access controls in place.

    Note This resource can only be used with an account-level provider!

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const exampleNetworkPolicy = new databricks.AccountNetworkPolicy("example_network_policy", {
    networkPolicyId: "example-network-policy",
    egress: {
        networkAccess: {
            restrictionMode: "RESTRICTED_ACCESS",
            allowedInternetDestinations: [{
                destination: "example.com",
                internetDestinationType: "DNS_NAME",
            }],
            allowedStorageDestinations: [{
                bucketName: "example-aws-cloud-storage",
                region: "us-west-1",
                storageDestinationType: "AWS_S3",
            }],
            policyEnforcement: {
                enforcementMode: "ENFORCED",
            },
        },
    },
});

    import pulumi
import pulumi_databricks as databricks

example_network_policy = databricks.AccountNetworkPolicy("example_network_policy",
    network_policy_id="example-network-policy",
    egress={
        "network_access": {
            "restriction_mode": "RESTRICTED_ACCESS",
            "allowed_internet_destinations": [{
                "destination": "example.com",
                "internet_destination_type": "DNS_NAME",
            }],
            "allowed_storage_destinations": [{
                "bucket_name": "example-aws-cloud-storage",
                "region": "us-west-1",
                "storage_destination_type": "AWS_S3",
            }],
            "policy_enforcement": {
                "enforcement_mode": "ENFORCED",
            },
        },
    })

    package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := databricks.NewAccountNetworkPolicy(ctx, "example_network_policy", &databricks.AccountNetworkPolicyArgs{
			NetworkPolicyId: pulumi.String("example-network-policy"),
			Egress: &databricks.AccountNetworkPolicyEgressArgs{
				NetworkAccess: &databricks.AccountNetworkPolicyEgressNetworkAccessArgs{
					RestrictionMode: pulumi.String("RESTRICTED_ACCESS"),
					AllowedInternetDestinations: databricks.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArray{
						&databricks.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs{
							Destination:             pulumi.String("example.com"),
							InternetDestinationType: pulumi.String("DNS_NAME"),
						},
					},
					AllowedStorageDestinations: databricks.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArray{
						&databricks.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs{
							BucketName:             pulumi.String("example-aws-cloud-storage"),
							Region:                 pulumi.String("us-west-1"),
							StorageDestinationType: pulumi.String("AWS_S3"),
						},
					},
					PolicyEnforcement: &databricks.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs{
						EnforcementMode: pulumi.String("ENFORCED"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var exampleNetworkPolicy = new Databricks.AccountNetworkPolicy("example_network_policy", new()
    {
        NetworkPolicyId = "example-network-policy",
        Egress = new Databricks.Inputs.AccountNetworkPolicyEgressArgs
        {
            NetworkAccess = new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessArgs
            {
                RestrictionMode = "RESTRICTED_ACCESS",
                AllowedInternetDestinations = new[]
                {
                    new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs
                    {
                        Destination = "example.com",
                        InternetDestinationType = "DNS_NAME",
                    },
                },
                AllowedStorageDestinations = new[]
                {
                    new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs
                    {
                        BucketName = "example-aws-cloud-storage",
                        Region = "us-west-1",
                        StorageDestinationType = "AWS_S3",
                    },
                },
                PolicyEnforcement = new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs
                {
                    EnforcementMode = "ENFORCED",
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.AccountNetworkPolicy;
import com.pulumi.databricks.AccountNetworkPolicyArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyEgressArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyEgressNetworkAccessArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleNetworkPolicy = new AccountNetworkPolicy("exampleNetworkPolicy", AccountNetworkPolicyArgs.builder()
            .networkPolicyId("example-network-policy")
            .egress(AccountNetworkPolicyEgressArgs.builder()
                .networkAccess(AccountNetworkPolicyEgressNetworkAccessArgs.builder()
                    .restrictionMode("RESTRICTED_ACCESS")
                    .allowedInternetDestinations(AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs.builder()
                        .destination("example.com")
                        .internetDestinationType("DNS_NAME")
                        .build())
                    .allowedStorageDestinations(AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs.builder()
                        .bucketName("example-aws-cloud-storage")
                        .region("us-west-1")
                        .storageDestinationType("AWS_S3")
                        .build())
                    .policyEnforcement(AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs.builder()
                        .enforcementMode("ENFORCED")
                        .build())
                    .build())
                .build())
            .build());

    }
}

    resources:
  exampleNetworkPolicy:
    type: databricks:AccountNetworkPolicy
    name: example_network_policy
    properties:
      networkPolicyId: example-network-policy
      egress:
        networkAccess:
          restrictionMode: RESTRICTED_ACCESS
          allowedInternetDestinations:
            - destination: example.com
              internetDestinationType: DNS_NAME
          allowedStorageDestinations:
            - bucketName: example-aws-cloud-storage
              region: us-west-1
              storageDestinationType: AWS_S3
          policyEnforcement:
            enforcementMode: ENFORCED

    pulumi {
  required_providers {
    databricks = {
      source = "pulumi/databricks"
    }
  }
}

resource "databricks_accountnetworkpolicy" "example_network_policy" {
  network_policy_id = "example-network-policy"
  egress = {
    network_access = {
      restriction_mode = "RESTRICTED_ACCESS"
      allowed_internet_destinations = [{
        "destination"             = "example.com"
        "internetDestinationType" = "DNS_NAME"
      }]
      allowed_storage_destinations = [{
        "bucketName"             = "example-aws-cloud-storage"
        "region"                 = "us-west-1"
        "storageDestinationType" = "AWS_S3"
      }]
      policy_enforcement = {
        enforcement_mode = "ENFORCED"
      }
    }
  }
}

    Restrict ingress to private connectivity by only allowing requests from registered private endpoints:

    import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const examplePrivateAccessPolicy = new databricks.AccountNetworkPolicy("example_private_access_policy", {
    networkPolicyId: "example-private-access-policy",
    ingress: {
        privateAccess: {
            restrictionMode: "RESTRICTED_ACCESS",
            allowRules: [{
                origin: {
                    endpoints: {
                        endpointIds: ["example-private-endpoint-id"],
                    },
                },
            }],
        },
    },
});

    import pulumi
import pulumi_databricks as databricks

example_private_access_policy = databricks.AccountNetworkPolicy("example_private_access_policy",
    network_policy_id="example-private-access-policy",
    ingress={
        "private_access": {
            "restriction_mode": "RESTRICTED_ACCESS",
            "allow_rules": [{
                "origin": {
                    "endpoints": {
                        "endpoint_ids": ["example-private-endpoint-id"],
                    },
                },
            }],
        },
    })

    package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := databricks.NewAccountNetworkPolicy(ctx, "example_private_access_policy", &databricks.AccountNetworkPolicyArgs{
			NetworkPolicyId: pulumi.String("example-private-access-policy"),
			Ingress: &databricks.AccountNetworkPolicyIngressArgs{
				PrivateAccess: &databricks.AccountNetworkPolicyIngressPrivateAccessArgs{
					RestrictionMode: pulumi.String("RESTRICTED_ACCESS"),
					AllowRules: databricks.AccountNetworkPolicyIngressPrivateAccessAllowRuleArray{
						&databricks.AccountNetworkPolicyIngressPrivateAccessAllowRuleArgs{
							Origin: &databricks.AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginArgs{
								Endpoints: &databricks.AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpointsArgs{
									EndpointIds: pulumi.StringArray{
										pulumi.String("example-private-endpoint-id"),
									},
								},
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var examplePrivateAccessPolicy = new Databricks.AccountNetworkPolicy("example_private_access_policy", new()
    {
        NetworkPolicyId = "example-private-access-policy",
        Ingress = new Databricks.Inputs.AccountNetworkPolicyIngressArgs
        {
            PrivateAccess = new Databricks.Inputs.AccountNetworkPolicyIngressPrivateAccessArgs
            {
                RestrictionMode = "RESTRICTED_ACCESS",
                AllowRules = new[]
                {
                    new Databricks.Inputs.AccountNetworkPolicyIngressPrivateAccessAllowRuleArgs
                    {
                        Origin = new Databricks.Inputs.AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginArgs
                        {
                            Endpoints = new Databricks.Inputs.AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpointsArgs
                            {
                                EndpointIds = new[]
                                {
                                    "example-private-endpoint-id",
                                },
                            },
                        },
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.AccountNetworkPolicy;
import com.pulumi.databricks.AccountNetworkPolicyArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyIngressArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyIngressPrivateAccessArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyIngressPrivateAccessAllowRuleArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpointsArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var examplePrivateAccessPolicy = new AccountNetworkPolicy("examplePrivateAccessPolicy", AccountNetworkPolicyArgs.builder()
            .networkPolicyId("example-private-access-policy")
            .ingress(AccountNetworkPolicyIngressArgs.builder()
                .privateAccess(AccountNetworkPolicyIngressPrivateAccessArgs.builder()
                    .restrictionMode("RESTRICTED_ACCESS")
                    .allowRules(AccountNetworkPolicyIngressPrivateAccessAllowRuleArgs.builder()
                        .origin(AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginArgs.builder()
                            .endpoints(AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpointsArgs.builder()
                                .endpointIds("example-private-endpoint-id")
                                .build())
                            .build())
                        .build())
                    .build())
                .build())
            .build());

    }
}

    resources:
  examplePrivateAccessPolicy:
    type: databricks:AccountNetworkPolicy
    name: example_private_access_policy
    properties:
      networkPolicyId: example-private-access-policy
      ingress:
        privateAccess:
          restrictionMode: RESTRICTED_ACCESS
          allowRules:
            - origin:
                endpoints:
                  endpointIds:
                    - example-private-endpoint-id

    pulumi {
  required_providers {
    databricks = {
      source = "pulumi/databricks"
    }
  }
}

resource "databricks_accountnetworkpolicy" "example_private_access_policy" {
  network_policy_id = "example-private-access-policy"
  ingress = {
    private_access = {
      restriction_mode = "RESTRICTED_ACCESS"
      allow_rules = [{
        "origin" = {
          "endpoints" = {
            "endpointIds" = ["example-private-endpoint-id"]
          }
        }
      }]
    }
  }
}

    Create AccountNetworkPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AccountNetworkPolicy(name: string, args?: AccountNetworkPolicyArgs, opts?: CustomResourceOptions);
    @overload
def AccountNetworkPolicy(resource_name: str,
                         args: Optional[AccountNetworkPolicyArgs] = None,
                         opts: Optional[ResourceOptions] = None)

@overload
def AccountNetworkPolicy(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         account_id: Optional[str] = None,
                         egress: Optional[AccountNetworkPolicyEgressArgs] = None,
                         ingress: Optional[AccountNetworkPolicyIngressArgs] = None,
                         ingress_dry_run: Optional[AccountNetworkPolicyIngressDryRunArgs] = None,
                         network_policy_id: Optional[str] = None)
    func NewAccountNetworkPolicy(ctx *Context, name string, args *AccountNetworkPolicyArgs, opts ...ResourceOption) (*AccountNetworkPolicy, error)
    public AccountNetworkPolicy(string name, AccountNetworkPolicyArgs? args = null, CustomResourceOptions? opts = null)
    public AccountNetworkPolicy(String name, AccountNetworkPolicyArgs args)
public AccountNetworkPolicy(String name, AccountNetworkPolicyArgs args, CustomResourceOptions options)

    type: databricks:AccountNetworkPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "databricks_account_network_policy" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    AccountNetworkPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AccountNetworkPolicy resource accepts the following input properties:

    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    Ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    IngressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    The unique identifier for the network policy
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    Ingress AccountNetworkPolicyIngressArgs
    The network policies applying for ingress traffic
    IngressDryRun AccountNetworkPolicyIngressDryRunArgs
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    The unique identifier for the network policy
    account_id string
    (string) - The associated account ID for this Network Policy object
    egress object
    The network policies applying for egress traffic
    ingress object
    The network policies applying for ingress traffic
    ingress_dry_run object
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    network_policy_id string
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    ingressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    The unique identifier for the network policy
    accountId string
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    ingressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId string
    The unique identifier for the network policy
    account_id str
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngressArgs
    The network policies applying for ingress traffic
    ingress_dry_run AccountNetworkPolicyIngressDryRunArgs
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    network_policy_id str
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress Property Map
    The network policies applying for egress traffic
    ingress Property Map
    The network policies applying for ingress traffic
    ingressDryRun Property Map
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    The unique identifier for the network policy

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AccountNetworkPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AccountNetworkPolicy Resource

    Get an existing AccountNetworkPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AccountNetworkPolicyState, opts?: CustomResourceOptions): AccountNetworkPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        egress: Optional[AccountNetworkPolicyEgressArgs] = None,
        ingress: Optional[AccountNetworkPolicyIngressArgs] = None,
        ingress_dry_run: Optional[AccountNetworkPolicyIngressDryRunArgs] = None,
        network_policy_id: Optional[str] = None) -> AccountNetworkPolicy
    func GetAccountNetworkPolicy(ctx *Context, name string, id IDInput, state *AccountNetworkPolicyState, opts ...ResourceOption) (*AccountNetworkPolicy, error)
    public static AccountNetworkPolicy Get(string name, Input<string> id, AccountNetworkPolicyState? state, CustomResourceOptions? opts = null)
    public static AccountNetworkPolicy get(String name, Output<String> id, AccountNetworkPolicyState state, CustomResourceOptions options)
    resources:  _:    type: databricks:AccountNetworkPolicy    get:      id: ${id}
    import {
  to = databricks_account_network_policy.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    Ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    IngressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    The unique identifier for the network policy
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    Ingress AccountNetworkPolicyIngressArgs
    The network policies applying for ingress traffic
    IngressDryRun AccountNetworkPolicyIngressDryRunArgs
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    The unique identifier for the network policy
    account_id string
    (string) - The associated account ID for this Network Policy object
    egress object
    The network policies applying for egress traffic
    ingress object
    The network policies applying for ingress traffic
    ingress_dry_run object
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    network_policy_id string
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    ingressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    The unique identifier for the network policy
    accountId string
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    ingressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId string
    The unique identifier for the network policy
    account_id str
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngressArgs
    The network policies applying for ingress traffic
    ingress_dry_run AccountNetworkPolicyIngressDryRunArgs
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    network_policy_id str
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress Property Map
    The network policies applying for egress traffic
    ingress Property Map
    The network policies applying for ingress traffic
    ingressDryRun Property Map
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    The unique identifier for the network policy

    Supporting Types

    AccountNetworkPolicyEgress, AccountNetworkPolicyEgressArgs

    NetworkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    NetworkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    network_access object
    The access policy enforced for egress traffic to the internet
    networkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    networkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    network_access AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    networkAccess Property Map
    The access policy enforced for egress traffic to the internet

    AccountNetworkPolicyEgressNetworkAccess, AccountNetworkPolicyEgressNetworkAccessArgs

    RestrictionMode string
    AllowedDatabricksDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination>
    List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedInternetDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    BlockedInternetDestinations List<AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination>
    List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
    PolicyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    RestrictionMode string
    AllowedDatabricksDestinations []AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination
    List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedInternetDestinations []AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations []AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    BlockedInternetDestinations []AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination
    List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
    PolicyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restriction_mode string
    allowed_databricks_destinations list(object)
    List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_internet_destinations list(object)
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_storage_destinations list(object)
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    blocked_internet_destinations list(object)
    List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
    policy_enforcement object
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    allowedDatabricksDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination>
    List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedInternetDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    blockedInternetDestinations List<AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination>
    List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
    policyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode string
    allowedDatabricksDestinations AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination[]
    List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedInternetDestinations AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination[]
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination[]
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    blockedInternetDestinations AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination[]
    List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
    policyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restriction_mode str
    allowed_databricks_destinations Sequence[AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination]
    List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_internet_destinations Sequence[AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination]
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_storage_destinations Sequence[AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination]
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    blocked_internet_destinations Sequence[AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination]
    List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
    policy_enforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    allowedDatabricksDestinations List<Property Map>
    List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedInternetDestinations List<Property Map>
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<Property Map>
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    blockedInternetDestinations List<Property Map>
    List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
    policyEnforcement Property Map
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

    AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination, AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestinationArgs

    WorkspaceIds List<int>
    workspace_ids list(number)
    workspaceIds List<Integer>
    workspaceIds number[]
    workspace_ids Sequence[int]
    workspaceIds List<Number>

    AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination, AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs

    Destination string
    InternetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    Destination string
    InternetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    internet_destination_type string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    internetDestinationType String
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    internetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination str
    internet_destination_type str
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    internetDestinationType String
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

    AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination, AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs

    AzureStorageAccount string
    The Azure storage account name
    AzureStorageService string
    The Azure storage service type (blob, dfs, etc.)
    BucketName string
    Region string
    StorageDestinationType string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    AzureStorageAccount string
    The Azure storage account name
    AzureStorageService string
    The Azure storage service type (blob, dfs, etc.)
    BucketName string
    Region string
    StorageDestinationType string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azure_storage_account string
    The Azure storage account name
    azure_storage_service string
    The Azure storage service type (blob, dfs, etc.)
    bucket_name string
    region string
    storage_destination_type string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    The Azure storage account name
    azureStorageService String
    The Azure storage service type (blob, dfs, etc.)
    bucketName String
    region String
    storageDestinationType String
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount string
    The Azure storage account name
    azureStorageService string
    The Azure storage service type (blob, dfs, etc.)
    bucketName string
    region string
    storageDestinationType string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azure_storage_account str
    The Azure storage account name
    azure_storage_service str
    The Azure storage service type (blob, dfs, etc.)
    bucket_name str
    region str
    storage_destination_type str
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    The Azure storage account name
    azureStorageService String
    The Azure storage service type (blob, dfs, etc.)
    bucketName String
    region String
    storageDestinationType String
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

    AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination, AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestinationArgs

    Destination string
    InternetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    Destination string
    InternetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    internet_destination_type string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    internetDestinationType String
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    internetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination str
    internet_destination_type str
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    internetDestinationType String
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

    AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement, AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs

    DryRunModeProductFilters List<string>
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    DryRunModeProductFilters []string
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dry_run_mode_product_filters list(string)
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcement_mode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters string[]
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dry_run_mode_product_filters Sequence[str]
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcement_mode str
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

    AccountNetworkPolicyIngress, AccountNetworkPolicyIngressArgs

    CrossWorkspaceAccess AccountNetworkPolicyIngressCrossWorkspaceAccess
    PrivateAccess AccountNetworkPolicyIngressPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    PublicAccess AccountNetworkPolicyIngressPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    CrossWorkspaceAccess AccountNetworkPolicyIngressCrossWorkspaceAccess
    PrivateAccess AccountNetworkPolicyIngressPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    PublicAccess AccountNetworkPolicyIngressPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    cross_workspace_access object
    private_access object
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    public_access object
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    crossWorkspaceAccess AccountNetworkPolicyIngressCrossWorkspaceAccess
    privateAccess AccountNetworkPolicyIngressPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    publicAccess AccountNetworkPolicyIngressPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    crossWorkspaceAccess AccountNetworkPolicyIngressCrossWorkspaceAccess
    privateAccess AccountNetworkPolicyIngressPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    publicAccess AccountNetworkPolicyIngressPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    cross_workspace_access AccountNetworkPolicyIngressCrossWorkspaceAccess
    private_access AccountNetworkPolicyIngressPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    public_access AccountNetworkPolicyIngressPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    crossWorkspaceAccess Property Map
    privateAccess Property Map
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    publicAccess Property Map
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

    AccountNetworkPolicyIngressCrossWorkspaceAccess, AccountNetworkPolicyIngressCrossWorkspaceAccessArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRule, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthentication, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestination, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOrigin, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginArgs

    all_source_workspaces bool
    Matches all source workspaces
    selected_workspaces object
    Specific source workspace IDs to match
    allSourceWorkspaces Boolean
    Matches all source workspaces
    selectedWorkspaces Property Map
    Specific source workspace IDs to match

    AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces, AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginSelectedWorkspacesArgs

    WorkspaceIds List<int>
    workspace_ids list(number)
    workspaceIds List<Integer>
    workspaceIds number[]
    workspace_ids Sequence[int]
    workspaceIds List<Number>

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRule, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthentication, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestination, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOrigin, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginArgs

    all_source_workspaces bool
    Matches all source workspaces
    selected_workspaces object
    Specific source workspace IDs to match
    allSourceWorkspaces Boolean
    Matches all source workspaces
    selectedWorkspaces Property Map
    Specific source workspace IDs to match

    AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces, AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginSelectedWorkspacesArgs

    WorkspaceIds List<int>
    workspace_ids list(number)
    workspaceIds List<Integer>
    workspaceIds number[]
    workspace_ids Sequence[int]
    workspaceIds List<Number>

    AccountNetworkPolicyIngressDryRun, AccountNetworkPolicyIngressDryRunArgs

    CrossWorkspaceAccess AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess
    PrivateAccess AccountNetworkPolicyIngressDryRunPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    PublicAccess AccountNetworkPolicyIngressDryRunPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    CrossWorkspaceAccess AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess
    PrivateAccess AccountNetworkPolicyIngressDryRunPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    PublicAccess AccountNetworkPolicyIngressDryRunPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    cross_workspace_access object
    private_access object
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    public_access object
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    crossWorkspaceAccess AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess
    privateAccess AccountNetworkPolicyIngressDryRunPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    publicAccess AccountNetworkPolicyIngressDryRunPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    crossWorkspaceAccess AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess
    privateAccess AccountNetworkPolicyIngressDryRunPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    publicAccess AccountNetworkPolicyIngressDryRunPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    cross_workspace_access AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess
    private_access AccountNetworkPolicyIngressDryRunPrivateAccess
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    public_access AccountNetworkPolicyIngressDryRunPublicAccess
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access
    crossWorkspaceAccess Property Map
    privateAccess Property Map
    The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
    publicAccess Property Map
    The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRule, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthentication, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestination, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOrigin, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginArgs

    all_source_workspaces bool
    Matches all source workspaces
    selected_workspaces object
    Specific source workspace IDs to match
    allSourceWorkspaces Boolean
    Matches all source workspaces
    selectedWorkspaces Property Map
    Specific source workspace IDs to match

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginSelectedWorkspacesArgs

    WorkspaceIds List<int>
    workspace_ids list(number)
    workspaceIds List<Integer>
    workspaceIds number[]
    workspace_ids Sequence[int]
    workspaceIds List<Number>

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRule, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthentication, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestination, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOrigin, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginArgs

    all_source_workspaces bool
    Matches all source workspaces
    selected_workspaces object
    Specific source workspace IDs to match
    allSourceWorkspaces Boolean
    Matches all source workspaces
    selectedWorkspaces Property Map
    Specific source workspace IDs to match

    AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces, AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginSelectedWorkspacesArgs

    WorkspaceIds List<int>
    workspace_ids list(number)
    workspaceIds List<Integer>
    workspaceIds number[]
    workspace_ids Sequence[int]
    workspaceIds List<Number>

    AccountNetworkPolicyIngressDryRunPrivateAccess, AccountNetworkPolicyIngressDryRunPrivateAccessArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRule, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthentication, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestination, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOrigin, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginArgs

    AllPrivateAccess bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    AllRegisteredEndpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    AzureWorkspacePrivateLink bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    Endpoints AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    AllPrivateAccess bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    AllRegisteredEndpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    AzureWorkspacePrivateLink bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    Endpoints AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    all_private_access bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    all_registered_endpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azure_workspace_private_link bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints object
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess Boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints Boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink Boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    all_private_access bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    all_registered_endpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azure_workspace_private_link bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess Boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints Boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink Boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints Property Map
    Matches requests arriving through any of the specified registered endpoints

    AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints, AccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpointsArgs

    EndpointIds List<string>
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    EndpointIds []string
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpoint_ids list(string)
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds List<String>
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds string[]
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpoint_ids Sequence[str]
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds List<String>
    The IDs of the registered endpoints. Must contain at least one endpoint ID

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRule, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthentication, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestination, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOrigin, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginArgs

    AllPrivateAccess bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    AllRegisteredEndpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    AzureWorkspacePrivateLink bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    Endpoints AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    AllPrivateAccess bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    AllRegisteredEndpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    AzureWorkspacePrivateLink bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    Endpoints AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    all_private_access bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    all_registered_endpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azure_workspace_private_link bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints object
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess Boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints Boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink Boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    all_private_access bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    all_registered_endpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azure_workspace_private_link bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess Boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints Boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink Boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints Property Map
    Matches requests arriving through any of the specified registered endpoints

    AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints, AccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpointsArgs

    EndpointIds List<string>
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    EndpointIds []string
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpoint_ids list(string)
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds List<String>
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds string[]
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpoint_ids Sequence[str]
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds List<String>
    The IDs of the registered endpoints. Must contain at least one endpoint ID

    AccountNetworkPolicyIngressDryRunPublicAccess, AccountNetworkPolicyIngressDryRunPublicAccessArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRule, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginArgs

    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges object
    Excluded means: all public IP ranges except this one
    included_ip_ranges object
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    included_ip_ranges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    Will not allow IP ranges with private IPs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges list(string)
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges list(string)
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRule, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleArgs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginArgs

    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges object
    Excluded means: all public IP ranges except this one
    included_ip_ranges object
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    included_ip_ranges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    Will not allow IP ranges with private IPs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges list(string)
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges list(string)
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressPrivateAccess, AccountNetworkPolicyIngressPrivateAccessArgs

    AccountNetworkPolicyIngressPrivateAccessAllowRule, AccountNetworkPolicyIngressPrivateAccessAllowRuleArgs

    AccountNetworkPolicyIngressPrivateAccessAllowRuleAuthentication, AccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity, AccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressPrivateAccessAllowRuleDestination, AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi, AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi, AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime, AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressPrivateAccessAllowRuleOrigin, AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginArgs

    AllPrivateAccess bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    AllRegisteredEndpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    AzureWorkspacePrivateLink bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    Endpoints AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    AllPrivateAccess bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    AllRegisteredEndpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    AzureWorkspacePrivateLink bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    Endpoints AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    all_private_access bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    all_registered_endpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azure_workspace_private_link bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints object
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess Boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints Boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink Boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    all_private_access bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    all_registered_endpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azure_workspace_private_link bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess Boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints Boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink Boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints Property Map
    Matches requests arriving through any of the specified registered endpoints

    AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints, AccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpointsArgs

    EndpointIds List<string>
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    EndpointIds []string
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpoint_ids list(string)
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds List<String>
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds string[]
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpoint_ids Sequence[str]
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds List<String>
    The IDs of the registered endpoints. Must contain at least one endpoint ID

    AccountNetworkPolicyIngressPrivateAccessDenyRule, AccountNetworkPolicyIngressPrivateAccessDenyRuleArgs

    AccountNetworkPolicyIngressPrivateAccessDenyRuleAuthentication, AccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity, AccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressPrivateAccessDenyRuleDestination, AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi, AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi, AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime, AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressPrivateAccessDenyRuleOrigin, AccountNetworkPolicyIngressPrivateAccessDenyRuleOriginArgs

    AllPrivateAccess bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    AllRegisteredEndpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    AzureWorkspacePrivateLink bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    Endpoints AccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    AllPrivateAccess bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    AllRegisteredEndpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    AzureWorkspacePrivateLink bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    Endpoints AccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    all_private_access bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    all_registered_endpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azure_workspace_private_link bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints object
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess Boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints Boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink Boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    all_private_access bool
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    all_registered_endpoints bool
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azure_workspace_private_link bool
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints AccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints
    Matches requests arriving through any of the specified registered endpoints
    allPrivateAccess Boolean
    Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    allRegisteredEndpoints Boolean
    Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
    azureWorkspacePrivateLink Boolean
    Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
    endpoints Property Map
    Matches requests arriving through any of the specified registered endpoints

    AccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints, AccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpointsArgs

    EndpointIds List<string>
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    EndpointIds []string
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpoint_ids list(string)
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds List<String>
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds string[]
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpoint_ids Sequence[str]
    The IDs of the registered endpoints. Must contain at least one endpoint ID
    endpointIds List<String>
    The IDs of the registered endpoints. Must contain at least one endpoint ID

    AccountNetworkPolicyIngressPublicAccess, AccountNetworkPolicyIngressPublicAccessArgs

    AccountNetworkPolicyIngressPublicAccessAllowRule, AccountNetworkPolicyIngressPublicAccessAllowRuleArgs

    AccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication, AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity, AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestination, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressPublicAccessAllowRuleOrigin, AccountNetworkPolicyIngressPublicAccessAllowRuleOriginArgs

    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges object
    Excluded means: all public IP ranges except this one
    included_ip_ranges object
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    included_ip_ranges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    Will not allow IP ranges with private IPs

    AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges, AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges list(string)
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges, AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges list(string)
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressPublicAccessDenyRule, AccountNetworkPolicyIngressPublicAccessDenyRuleArgs

    AccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication, AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities list(object)
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity, AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id string
    principal_type string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestination, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationArgs

    AccountApi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    AccountApi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    AccountDatabricksOne AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    AccountUi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    AllDestinations bool
    AppsRuntime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime
    LakebaseRuntime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime
    WorkspaceApi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    WorkspaceUi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    account_api object
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one object
    Account DatabricksOne destination is not supported
    account_ui object
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime object
    lakebase_runtime object
    workspace_api object
    workspace_ui object
    accountApi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    accountApi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    accountUi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations boolean
    appsRuntime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime
    lakebaseRuntime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime
    workspaceApi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    workspaceUi AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    account_api AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    account_databricks_one AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne
    Account DatabricksOne destination is not supported
    account_ui AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi
    Matches requests to the account console UI. Can only be used in the account-level network policy
    all_destinations bool
    apps_runtime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime
    lakebase_runtime AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime
    workspace_api AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    workspace_ui AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    accountApi Property Map
    Matches requests to account-level APIs. Can only be used in the account-level network policy
    accountDatabricksOne Property Map
    Account DatabricksOne destination is not supported
    accountUi Property Map
    Matches requests to the account console UI. Can only be used in the account-level network policy
    allDestinations Boolean
    appsRuntime Property Map
    lakebaseRuntime Property Map
    workspaceApi Property Map
    workspaceUi Property Map

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOneArgs

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUiArgs

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntimeArgs

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntimeArgs

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApiArgs

    ScopeQualifier string
    Scopes List<string>
    ScopeQualifier string
    Scopes []string
    scope_qualifier string
    scopes list(string)
    scopeQualifier String
    scopes List<String>
    scopeQualifier string
    scopes string[]
    scope_qualifier str
    scopes Sequence[str]
    scopeQualifier String
    scopes List<String>

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressPublicAccessDenyRuleOrigin, AccountNetworkPolicyIngressPublicAccessDenyRuleOriginArgs

    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges object
    Excluded means: all public IP ranges except this one
    included_ip_ranges object
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    included_ip_ranges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    Will not allow IP ranges with private IPs

    AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges, AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges list(string)
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges, AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges list(string)
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo databricks logo
    Viewing docs for Databricks v1.109.0
    published on Tuesday, Sep 8, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-databricks

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial