Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Databricks Provider
  3. API Docs
  4. getAccountNetworkPolicy
Databricks v1.74.0 published on Thursday, Aug 14, 2025 by Pulumi
pulumi/pulumi-databricks

databricks.getAccountNetworkPolicy

Explore with Pulumi AI

databricks logo
Databricks v1.74.0 published on Thursday, Aug 14, 2025 by Pulumi
pulumi/pulumi-databricks

    This data source can be used to get a single network policy.

    Note This data source can only be used with an account-level provider!

    Example Usage

    Referring to a network policy by id:

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    variables:
  this:
    fn::invoke:
      function: databricks:getAccountNetworkPolicy
      arguments:
        policyId: test

    Using getAccountNetworkPolicy

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAccountNetworkPolicy(args: GetAccountNetworkPolicyArgs, opts?: InvokeOptions): Promise<GetAccountNetworkPolicyResult>
function getAccountNetworkPolicyOutput(args: GetAccountNetworkPolicyOutputArgs, opts?: InvokeOptions): Output<GetAccountNetworkPolicyResult>
    def get_account_network_policy(account_id: Optional[str] = None,
                               egress: Optional[GetAccountNetworkPolicyEgress] = None,
                               network_policy_id: Optional[str] = None,
                               opts: Optional[InvokeOptions] = None) -> GetAccountNetworkPolicyResult
def get_account_network_policy_output(account_id: Optional[pulumi.Input[str]] = None,
                               egress: Optional[pulumi.Input[GetAccountNetworkPolicyEgressArgs]] = None,
                               network_policy_id: Optional[pulumi.Input[str]] = None,
                               opts: Optional[InvokeOptions] = None) -> Output[GetAccountNetworkPolicyResult]
    func LookupAccountNetworkPolicy(ctx *Context, args *LookupAccountNetworkPolicyArgs, opts ...InvokeOption) (*LookupAccountNetworkPolicyResult, error)
func LookupAccountNetworkPolicyOutput(ctx *Context, args *LookupAccountNetworkPolicyOutputArgs, opts ...InvokeOption) LookupAccountNetworkPolicyResultOutput

    > Note: This function is named LookupAccountNetworkPolicy in the Go SDK.

    public static class GetAccountNetworkPolicy 
{
    public static Task<GetAccountNetworkPolicyResult> InvokeAsync(GetAccountNetworkPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetAccountNetworkPolicyResult> Invoke(GetAccountNetworkPolicyInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetAccountNetworkPolicyResult> getAccountNetworkPolicy(GetAccountNetworkPolicyArgs args, InvokeOptions options)
public static Output<GetAccountNetworkPolicyResult> getAccountNetworkPolicy(GetAccountNetworkPolicyArgs args, InvokeOptions options)

    fn::invoke:
  function: databricks:index/getAccountNetworkPolicy:getAccountNetworkPolicy
  arguments:
    # arguments dictionary

    The following arguments are supported:

    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    NetworkPolicyId string
    The unique identifier for the network policy
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    NetworkPolicyId string
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    networkPolicyId String
    The unique identifier for the network policy
    accountId string
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    networkPolicyId string
    The unique identifier for the network policy
    account_id str
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    network_policy_id str
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress Property Map
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    networkPolicyId String
    The unique identifier for the network policy

    getAccountNetworkPolicy Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    NetworkPolicyId string
    (string) - The unique identifier for the network policy
    Id string
    The provider-assigned unique ID for this managed resource.
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    NetworkPolicyId string
    (string) - The unique identifier for the network policy
    id String
    The provider-assigned unique ID for this managed resource.
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    networkPolicyId String
    (string) - The unique identifier for the network policy
    id string
    The provider-assigned unique ID for this managed resource.
    accountId string
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    networkPolicyId string
    (string) - The unique identifier for the network policy
    id str
    The provider-assigned unique ID for this managed resource.
    account_id str
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    network_policy_id str
    (string) - The unique identifier for the network policy
    id String
    The provider-assigned unique ID for this managed resource.
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress Property Map
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    networkPolicyId String
    (string) - The unique identifier for the network policy

    Supporting Types

    GetAccountNetworkPolicyEgress

    NetworkAccess GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    NetworkAccess GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    network_access GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess Property Map
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

    GetAccountNetworkPolicyEgressNetworkAccess

    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations []GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations []GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination[]
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination[]
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restriction_mode str
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowed_internet_destinations Sequence[GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination]
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_storage_destinations Sequence[GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination]
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policy_enforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<Property Map>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<Property Map>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement Property Map
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

    GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination

    Destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    Destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination str
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internet_destination_type str
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

    GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination

    AzureStorageAccount string
    (string) - The Azure storage account name
    AzureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    BucketName string
    (string)
    Region string
    (string)
    StorageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    AzureStorageAccount string
    (string) - The Azure storage account name
    AzureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    BucketName string
    (string)
    Region string
    (string)
    StorageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    (string) - The Azure storage account name
    azureStorageService String
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName String
    (string)
    region String
    (string)
    storageDestinationType String
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount string
    (string) - The Azure storage account name
    azureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName string
    (string)
    region string
    (string)
    storageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azure_storage_account str
    (string) - The Azure storage account name
    azure_storage_service str
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucket_name str
    (string)
    region str
    (string)
    storage_destination_type str
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    (string) - The Azure storage account name
    azureStorageService String
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName String
    (string)
    region String
    (string)
    storageDestinationType String
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

    GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement

    DryRunModeProductFilters List<string>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    DryRunModeProductFilters []string
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters string[]
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dry_run_mode_product_filters Sequence[str]
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcement_mode str
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo
    Databricks v1.74.0 published on Thursday, Aug 14, 2025 by Pulumi
    pulumi/pulumi-databricks