databricks.getAccountNetworkPolicy

Databricks v1.109.0, Sep 8 26

Viewing docs for Databricks v1.109.0
published on Tuesday, Sep 8, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-databricks

Viewing docs for Databricks v1.109.0
published on Tuesday, Sep 8, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-databricks

Example Usage

Referring to a network policy by id:

Example coming soon!

Example coming soon!

Example coming soon!

Example coming soon!

Example coming soon!

variables:
  this:
    fn::invoke:
      function: databricks:getAccountNetworkPolicy
      arguments:
        policyId: test

pulumi {
  required_providers {
    databricks = {
      source = "pulumi/databricks"
    }
  }
}

data "databricks_getaccountnetworkpolicy" "this" {
  policy_id = "test"
}

Using getAccountNetworkPolicy

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getAccountNetworkPolicy(args: GetAccountNetworkPolicyArgs, opts?: InvokeOptions): Promise<GetAccountNetworkPolicyResult>
function getAccountNetworkPolicyOutput(args: GetAccountNetworkPolicyOutputArgs, opts?: InvokeOutputOptions): Output<GetAccountNetworkPolicyResult>

def get_account_network_policy(network_policy_id: Optional[str] = None,
                               opts: Optional[InvokeOptions] = None) -> GetAccountNetworkPolicyResult
def get_account_network_policy_output(network_policy_id: pulumi.Input[Optional[str]] = None,
                               opts: Optional[InvokeOutputOptions] = None) -> Output[GetAccountNetworkPolicyResult]

func LookupAccountNetworkPolicy(ctx *Context, args *LookupAccountNetworkPolicyArgs, opts ...InvokeOption) (*LookupAccountNetworkPolicyResult, error)
func LookupAccountNetworkPolicyOutput(ctx *Context, args *LookupAccountNetworkPolicyOutputArgs, opts ...InvokeOption) LookupAccountNetworkPolicyResultOutput

> Note: This function is named LookupAccountNetworkPolicy in the Go SDK.

public static class GetAccountNetworkPolicy 
{
    public static Task<GetAccountNetworkPolicyResult> InvokeAsync(GetAccountNetworkPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetAccountNetworkPolicyResult> Invoke(GetAccountNetworkPolicyInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetAccountNetworkPolicyResult> Invoke(GetAccountNetworkPolicyInvokeArgs args, InvokeOutputOptions opts)
}

public static CompletableFuture<GetAccountNetworkPolicyResult> getAccountNetworkPolicy(GetAccountNetworkPolicyArgs args, InvokeOptions options)
public static Output<GetAccountNetworkPolicyResult> getAccountNetworkPolicy(GetAccountNetworkPolicyArgs args, InvokeOptions options)
public static Output<GetAccountNetworkPolicyResult> getAccountNetworkPolicy(GetAccountNetworkPolicyArgs args, InvokeOutputOptions options)

fn::invoke:
  function: databricks:index/getAccountNetworkPolicy:getAccountNetworkPolicy
  arguments:
    # arguments dictionary

data "databricks_get_account_network_policy" "name" {
    # arguments
}

The following arguments are supported:

NetworkPolicyId string: The unique identifier for the network policy

NetworkPolicyId string: The unique identifier for the network policy

network_policy_id string: The unique identifier for the network policy

networkPolicyId String: The unique identifier for the network policy

networkPolicyId string: The unique identifier for the network policy

network_policy_id str: The unique identifier for the network policy

networkPolicyId String: The unique identifier for the network policy

getAccountNetworkPolicy Result

The following output properties are available:

AccountId string: (string) - The associated account ID for this Network Policy object
Egress GetAccountNetworkPolicyEgress: (NetworkPolicyEgress) - The network policies applying for egress traffic
Ingress GetAccountNetworkPolicyIngress: (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
IngressDryRun GetAccountNetworkPolicyIngressDryRun: (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
NetworkPolicyId string: (string) - The unique identifier for the network policy

AccountId string: (string) - The associated account ID for this Network Policy object
Egress GetAccountNetworkPolicyEgress: (NetworkPolicyEgress) - The network policies applying for egress traffic
Ingress GetAccountNetworkPolicyIngress: (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
IngressDryRun GetAccountNetworkPolicyIngressDryRun: (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
NetworkPolicyId string: (string) - The unique identifier for the network policy

account_id string: (string) - The associated account ID for this Network Policy object
egress object: (NetworkPolicyEgress) - The network policies applying for egress traffic
ingress object: (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
ingress_dry_run object: (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
network_policy_id string: (string) - The unique identifier for the network policy

accountId String: (string) - The associated account ID for this Network Policy object
egress GetAccountNetworkPolicyEgress: (NetworkPolicyEgress) - The network policies applying for egress traffic
ingress GetAccountNetworkPolicyIngress: (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
ingressDryRun GetAccountNetworkPolicyIngressDryRun: (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
networkPolicyId String: (string) - The unique identifier for the network policy

accountId string: (string) - The associated account ID for this Network Policy object
egress GetAccountNetworkPolicyEgress: (NetworkPolicyEgress) - The network policies applying for egress traffic
ingress GetAccountNetworkPolicyIngress: (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
ingressDryRun GetAccountNetworkPolicyIngressDryRun: (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
networkPolicyId string: (string) - The unique identifier for the network policy

account_id str: (string) - The associated account ID for this Network Policy object
egress GetAccountNetworkPolicyEgress: (NetworkPolicyEgress) - The network policies applying for egress traffic
ingress GetAccountNetworkPolicyIngress: (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
ingress_dry_run GetAccountNetworkPolicyIngressDryRun: (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
network_policy_id str: (string) - The unique identifier for the network policy

accountId String: (string) - The associated account ID for this Network Policy object
egress Property Map: (NetworkPolicyEgress) - The network policies applying for egress traffic
ingress Property Map: (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
ingressDryRun Property Map: (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
networkPolicyId String: (string) - The unique identifier for the network policy

Supporting Types

GetAccountNetworkPolicyEgress

NetworkAccess GetAccountNetworkPolicyEgressNetworkAccess: (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

NetworkAccess GetAccountNetworkPolicyEgressNetworkAccess: (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

network_access object: (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

networkAccess GetAccountNetworkPolicyEgressNetworkAccess: (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

networkAccess GetAccountNetworkPolicyEgressNetworkAccess: (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

network_access GetAccountNetworkPolicyEgressNetworkAccess: (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

networkAccess Property Map: (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

GetAccountNetworkPolicyEgressNetworkAccess

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowedDatabricksDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination>: (list of EgressNetworkPolicyNetworkAccessPolicyDatabricksDestination) - List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
AllowedInternetDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
AllowedStorageDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>: (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
BlockedInternetDestinations List<GetAccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination>: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
PolicyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement: (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowedDatabricksDestinations []GetAccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination: (list of EgressNetworkPolicyNetworkAccessPolicyDatabricksDestination) - List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
AllowedInternetDestinations []GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
AllowedStorageDestinations []GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination: (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
BlockedInternetDestinations []GetAccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
PolicyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement: (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

restriction_mode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowed_databricks_destinations list(object): (list of EgressNetworkPolicyNetworkAccessPolicyDatabricksDestination) - List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowed_internet_destinations list(object): (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowed_storage_destinations list(object): (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
blocked_internet_destinations list(object): (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
policy_enforcement object: (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowedDatabricksDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination>: (list of EgressNetworkPolicyNetworkAccessPolicyDatabricksDestination) - List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowedInternetDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowedStorageDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>: (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
blockedInternetDestinations List<GetAccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination>: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
policyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement: (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

restrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowedDatabricksDestinations GetAccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination[]: (list of EgressNetworkPolicyNetworkAccessPolicyDatabricksDestination) - List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowedInternetDestinations GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination[]: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowedStorageDestinations GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination[]: (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
blockedInternetDestinations GetAccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination[]: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
policyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement: (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

restriction_mode str: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowed_databricks_destinations Sequence[GetAccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination]: (list of EgressNetworkPolicyNetworkAccessPolicyDatabricksDestination) - List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowed_internet_destinations Sequence[GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination]: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowed_storage_destinations Sequence[GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination]: (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
blocked_internet_destinations Sequence[GetAccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination]: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
policy_enforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement: (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowedDatabricksDestinations List<Property Map>: (list of EgressNetworkPolicyNetworkAccessPolicyDatabricksDestination) - List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowedInternetDestinations List<Property Map>: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
allowedStorageDestinations List<Property Map>: (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
blockedInternetDestinations List<Property Map>: (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned
policyEnforcement Property Map: (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

GetAccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination

WorkspaceIds List<int>: (list of integer) - The workspace IDs to allow egress traffic to

WorkspaceIds []int: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids list(number): (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Integer>: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds number[]: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids Sequence[int]: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Number>: (list of integer) - The workspace IDs to allow egress traffic to

GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination

Destination string: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
InternetDestinationType string: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

Destination string: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
InternetDestinationType string: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination string: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internet_destination_type string: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination String: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internetDestinationType String: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination string: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internetDestinationType string: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination str: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internet_destination_type str: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination String: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internetDestinationType String: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination

AzureStorageAccount string: (string) - The Azure storage account name
AzureStorageService string: (string) - The Azure storage service type (blob, dfs, etc.)
BucketName string: (string)
Region string: (string)
StorageDestinationType string: (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

AzureStorageAccount string: (string) - The Azure storage account name
AzureStorageService string: (string) - The Azure storage service type (blob, dfs, etc.)
BucketName string: (string)
Region string: (string)
StorageDestinationType string: (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

azure_storage_account string: (string) - The Azure storage account name
azure_storage_service string: (string) - The Azure storage service type (blob, dfs, etc.)
bucket_name string: (string)
region string: (string)
storage_destination_type string: (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

azureStorageAccount String: (string) - The Azure storage account name
azureStorageService String: (string) - The Azure storage service type (blob, dfs, etc.)
bucketName String: (string)
region String: (string)
storageDestinationType String: (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

azureStorageAccount string: (string) - The Azure storage account name
azureStorageService string: (string) - The Azure storage service type (blob, dfs, etc.)
bucketName string: (string)
region string: (string)
storageDestinationType string: (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

azure_storage_account str: (string) - The Azure storage account name
azure_storage_service str: (string) - The Azure storage service type (blob, dfs, etc.)
bucket_name str: (string)
region str: (string)
storage_destination_type str: (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

azureStorageAccount String: (string) - The Azure storage account name
azureStorageService String: (string) - The Azure storage service type (blob, dfs, etc.)
bucketName String: (string)
region String: (string)
storageDestinationType String: (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

GetAccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination

Destination string: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
InternetDestinationType string: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

Destination string: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
InternetDestinationType string: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination string: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internet_destination_type string: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination String: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internetDestinationType String: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination string: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internetDestinationType string: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination str: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internet_destination_type str: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

destination String: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
internetDestinationType String: (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement

DryRunModeProductFilters List<string>: (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
EnforcementMode string: (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

DryRunModeProductFilters []string: (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
EnforcementMode string: (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

dry_run_mode_product_filters list(string): (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
enforcement_mode string: (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

dryRunModeProductFilters List<String>: (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
enforcementMode String: (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

dryRunModeProductFilters string[]: (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
enforcementMode string: (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

dry_run_mode_product_filters Sequence[str]: (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
enforcement_mode str: (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

dryRunModeProductFilters List<String>: (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
enforcementMode String: (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

GetAccountNetworkPolicyIngress

CrossWorkspaceAccess GetAccountNetworkPolicyIngressCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
PrivateAccess GetAccountNetworkPolicyIngressPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
PublicAccess GetAccountNetworkPolicyIngressPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

CrossWorkspaceAccess GetAccountNetworkPolicyIngressCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
PrivateAccess GetAccountNetworkPolicyIngressPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
PublicAccess GetAccountNetworkPolicyIngressPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

cross_workspace_access object: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
private_access object: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
public_access object: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

crossWorkspaceAccess GetAccountNetworkPolicyIngressCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
privateAccess GetAccountNetworkPolicyIngressPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
publicAccess GetAccountNetworkPolicyIngressPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

crossWorkspaceAccess GetAccountNetworkPolicyIngressCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
privateAccess GetAccountNetworkPolicyIngressPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
publicAccess GetAccountNetworkPolicyIngressPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

cross_workspace_access GetAccountNetworkPolicyIngressCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
private_access GetAccountNetworkPolicyIngressPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
public_access GetAccountNetworkPolicyIngressPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

crossWorkspaceAccess Property Map: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
privateAccess Property Map: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
publicAccess Property Map: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

GetAccountNetworkPolicyIngressCrossWorkspaceAccess

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules List<GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules List<GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules []GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules []GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode str: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules Sequence[GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules Sequence[GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRule

Authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestination

AccountApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOrigin

AllSourceWorkspaces bool: (boolean) - Matches all source workspaces
SelectedWorkspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

AllSourceWorkspaces bool: (boolean) - Matches all source workspaces
SelectedWorkspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

all_source_workspaces bool: (boolean) - Matches all source workspaces
selected_workspaces object: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces Boolean: (boolean) - Matches all source workspaces
selectedWorkspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces boolean: (boolean) - Matches all source workspaces
selectedWorkspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

all_source_workspaces bool: (boolean) - Matches all source workspaces
selected_workspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces Boolean: (boolean) - Matches all source workspaces
selectedWorkspaces Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces

WorkspaceIds List<int>: (list of integer) - The workspace IDs to allow egress traffic to

WorkspaceIds []int: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids list(number): (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Integer>: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds number[]: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids Sequence[int]: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Number>: (list of integer) - The workspace IDs to allow egress traffic to

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRule

Authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestination

AccountApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOrigin

AllSourceWorkspaces bool: (boolean) - Matches all source workspaces
SelectedWorkspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

AllSourceWorkspaces bool: (boolean) - Matches all source workspaces
SelectedWorkspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

all_source_workspaces bool: (boolean) - Matches all source workspaces
selected_workspaces object: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces Boolean: (boolean) - Matches all source workspaces
selectedWorkspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces boolean: (boolean) - Matches all source workspaces
selectedWorkspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

all_source_workspaces bool: (boolean) - Matches all source workspaces
selected_workspaces GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces Boolean: (boolean) - Matches all source workspaces
selectedWorkspaces Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces

WorkspaceIds List<int>: (list of integer) - The workspace IDs to allow egress traffic to

WorkspaceIds []int: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids list(number): (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Integer>: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds number[]: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids Sequence[int]: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Number>: (list of integer) - The workspace IDs to allow egress traffic to

GetAccountNetworkPolicyIngressDryRun

CrossWorkspaceAccess GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
PrivateAccess GetAccountNetworkPolicyIngressDryRunPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
PublicAccess GetAccountNetworkPolicyIngressDryRunPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

CrossWorkspaceAccess GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
PrivateAccess GetAccountNetworkPolicyIngressDryRunPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
PublicAccess GetAccountNetworkPolicyIngressDryRunPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

cross_workspace_access object: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
private_access object: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
public_access object: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

crossWorkspaceAccess GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
privateAccess GetAccountNetworkPolicyIngressDryRunPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
publicAccess GetAccountNetworkPolicyIngressDryRunPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

crossWorkspaceAccess GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
privateAccess GetAccountNetworkPolicyIngressDryRunPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
publicAccess GetAccountNetworkPolicyIngressDryRunPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

cross_workspace_access GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccess: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
private_access GetAccountNetworkPolicyIngressDryRunPrivateAccess: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
public_access GetAccountNetworkPolicyIngressDryRunPublicAccess: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

crossWorkspaceAccess Property Map: (CustomerFacingIngressNetworkPolicyCrossWorkspaceAccess)
privateAccess Property Map: (CustomerFacingIngressNetworkPolicyPrivateAccess) - The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed
publicAccess Property Map: (CustomerFacingIngressNetworkPolicyPublicAccess) - The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccess

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules List<GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules List<GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules []GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules []GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode str: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules Sequence[GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules Sequence[GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRule

Authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestination

AccountApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOrigin

AllSourceWorkspaces bool: (boolean) - Matches all source workspaces
SelectedWorkspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

AllSourceWorkspaces bool: (boolean) - Matches all source workspaces
SelectedWorkspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

all_source_workspaces bool: (boolean) - Matches all source workspaces
selected_workspaces object: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces Boolean: (boolean) - Matches all source workspaces
selectedWorkspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces boolean: (boolean) - Matches all source workspaces
selectedWorkspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

all_source_workspaces bool: (boolean) - Matches all source workspaces
selected_workspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces Boolean: (boolean) - Matches all source workspaces
selectedWorkspaces Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces

WorkspaceIds List<int>: (list of integer) - The workspace IDs to allow egress traffic to

WorkspaceIds []int: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids list(number): (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Integer>: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds number[]: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids Sequence[int]: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Number>: (list of integer) - The workspace IDs to allow egress traffic to

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRule

Authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestination

AccountApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOrigin

AllSourceWorkspaces bool: (boolean) - Matches all source workspaces
SelectedWorkspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

AllSourceWorkspaces bool: (boolean) - Matches all source workspaces
SelectedWorkspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

all_source_workspaces bool: (boolean) - Matches all source workspaces
selected_workspaces object: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces Boolean: (boolean) - Matches all source workspaces
selectedWorkspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces boolean: (boolean) - Matches all source workspaces
selectedWorkspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

all_source_workspaces bool: (boolean) - Matches all source workspaces
selected_workspaces GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

allSourceWorkspaces Boolean: (boolean) - Matches all source workspaces
selectedWorkspaces Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceIdList) - Specific source workspace IDs to match

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces

WorkspaceIds List<int>: (list of integer) - The workspace IDs to allow egress traffic to

WorkspaceIds []int: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids list(number): (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Integer>: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds number[]: (list of integer) - The workspace IDs to allow egress traffic to

workspace_ids Sequence[int]: (list of integer) - The workspace IDs to allow egress traffic to

workspaceIds List<Number>: (list of integer) - The workspace IDs to allow egress traffic to

GetAccountNetworkPolicyIngressDryRunPrivateAccess

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules List<GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules List<GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules []GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules []GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode str: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules Sequence[GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules Sequence[GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRule

Authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestination

AccountApi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOrigin

AllPrivateAccess bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
AllRegisteredEndpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
AzureWorkspacePrivateLink bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
Endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

AllPrivateAccess bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
AllRegisteredEndpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
AzureWorkspacePrivateLink bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
Endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

all_private_access bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
all_registered_endpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azure_workspace_private_link bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints object: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess Boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints Boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink Boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

all_private_access bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
all_registered_endpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azure_workspace_private_link bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess Boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints Boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink Boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints Property Map: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleOriginEndpoints

EndpointIds List<string>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

EndpointIds []string: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpoint_ids list(string): (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds List<String>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds string[]: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpoint_ids Sequence[str]: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds List<String>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRule

Authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestination

AccountApi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOrigin

AllPrivateAccess bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
AllRegisteredEndpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
AzureWorkspacePrivateLink bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
Endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

AllPrivateAccess bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
AllRegisteredEndpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
AzureWorkspacePrivateLink bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
Endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

all_private_access bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
all_registered_endpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azure_workspace_private_link bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints object: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess Boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints Boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink Boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

all_private_access bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
all_registered_endpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azure_workspace_private_link bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess Boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints Boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink Boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints Property Map: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

GetAccountNetworkPolicyIngressDryRunPrivateAccessDenyRuleOriginEndpoints

EndpointIds List<string>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

EndpointIds []string: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpoint_ids list(string): (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds List<String>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds string[]: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpoint_ids Sequence[str]: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds List<String>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

GetAccountNetworkPolicyIngressDryRunPublicAccess

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules List<GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules List<GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules []GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules []GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode str: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules Sequence[GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules Sequence[GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule

Authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination

AccountApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin

AllIpRanges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
ExcludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
IncludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

AllIpRanges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
ExcludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
IncludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

all_ip_ranges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excluded_ip_ranges object: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
included_ip_ranges object: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges Boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

all_ip_ranges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excluded_ip_ranges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
included_ip_ranges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges Boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges Property Map: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges Property Map: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges

IpRanges List<string>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

IpRanges []string: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges list(string): (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges string[]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges Sequence[str]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges

IpRanges List<string>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

IpRanges []string: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges list(string): (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges string[]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges Sequence[str]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule

Authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination

AccountApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin

AllIpRanges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
ExcludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
IncludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

AllIpRanges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
ExcludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
IncludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

all_ip_ranges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excluded_ip_ranges object: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
included_ip_ranges object: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges Boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

all_ip_ranges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excluded_ip_ranges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
included_ip_ranges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges Boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges Property Map: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges Property Map: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges

IpRanges List<string>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

IpRanges []string: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges list(string): (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges string[]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges Sequence[str]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges

IpRanges List<string>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

IpRanges []string: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges list(string): (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges string[]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges Sequence[str]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

GetAccountNetworkPolicyIngressPrivateAccess

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules List<GetAccountNetworkPolicyIngressPrivateAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules List<GetAccountNetworkPolicyIngressPrivateAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules []GetAccountNetworkPolicyIngressPrivateAccessAllowRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules []GetAccountNetworkPolicyIngressPrivateAccessDenyRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<GetAccountNetworkPolicyIngressPrivateAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<GetAccountNetworkPolicyIngressPrivateAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules GetAccountNetworkPolicyIngressPrivateAccessAllowRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules GetAccountNetworkPolicyIngressPrivateAccessDenyRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode str: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules Sequence[GetAccountNetworkPolicyIngressPrivateAccessAllowRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules Sequence[GetAccountNetworkPolicyIngressPrivateAccessDenyRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

GetAccountNetworkPolicyIngressPrivateAccessAllowRule

Authentication GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestination

AccountApi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOrigin

AllPrivateAccess bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
AllRegisteredEndpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
AzureWorkspacePrivateLink bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
Endpoints GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

AllPrivateAccess bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
AllRegisteredEndpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
AzureWorkspacePrivateLink bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
Endpoints GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

all_private_access bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
all_registered_endpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azure_workspace_private_link bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints object: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess Boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints Boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink Boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

all_private_access bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
all_registered_endpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azure_workspace_private_link bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess Boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints Boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink Boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints Property Map: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

GetAccountNetworkPolicyIngressPrivateAccessAllowRuleOriginEndpoints

EndpointIds List<string>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

EndpointIds []string: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpoint_ids list(string): (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds List<String>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds string[]: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpoint_ids Sequence[str]: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds List<String>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

GetAccountNetworkPolicyIngressPrivateAccessDenyRule

Authentication GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestination

AccountApi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOrigin

AllPrivateAccess bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
AllRegisteredEndpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
AzureWorkspacePrivateLink bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
Endpoints GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

AllPrivateAccess bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
AllRegisteredEndpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
AzureWorkspacePrivateLink bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
Endpoints GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

all_private_access bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
all_registered_endpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azure_workspace_private_link bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints object: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess Boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints Boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink Boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

all_private_access bool: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
all_registered_endpoints bool: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azure_workspace_private_link bool: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

allPrivateAccess Boolean: (boolean) - Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
allRegisteredEndpoints Boolean: (boolean) - Matches requests arriving through any endpoint registered to the account. Must be set to true when specified
azureWorkspacePrivateLink Boolean: (boolean) - Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified
endpoints Property Map: (CustomerFacingIngressNetworkPolicyEndpoints) - Matches requests arriving through any of the specified registered endpoints

GetAccountNetworkPolicyIngressPrivateAccessDenyRuleOriginEndpoints

EndpointIds List<string>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

EndpointIds []string: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpoint_ids list(string): (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds List<String>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds string[]: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpoint_ids Sequence[str]: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

endpointIds List<String>: (list of string) - The IDs of the registered endpoints. Must contain at least one endpoint ID

GetAccountNetworkPolicyIngressPublicAccess

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules List<GetAccountNetworkPolicyIngressPublicAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules List<GetAccountNetworkPolicyIngressPublicAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

RestrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
AllowRules []GetAccountNetworkPolicyIngressPublicAccessAllowRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
DenyRules []GetAccountNetworkPolicyIngressPublicAccessDenyRule: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules list(object): (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<GetAccountNetworkPolicyIngressPublicAccessAllowRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<GetAccountNetworkPolicyIngressPublicAccessDenyRule>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode string: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules GetAccountNetworkPolicyIngressPublicAccessAllowRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules GetAccountNetworkPolicyIngressPublicAccessDenyRule[]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restriction_mode str: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allow_rules Sequence[GetAccountNetworkPolicyIngressPublicAccessAllowRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
deny_rules Sequence[GetAccountNetworkPolicyIngressPublicAccessDenyRule]: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

restrictionMode String: (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
allowRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
denyRules List<Property Map>: (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

GetAccountNetworkPolicyIngressPublicAccessAllowRule

Authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination

AccountApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin

AllIpRanges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
ExcludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
IncludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

AllIpRanges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
ExcludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
IncludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

all_ip_ranges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excluded_ip_ranges object: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
included_ip_ranges object: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges Boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

all_ip_ranges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excluded_ip_ranges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
included_ip_ranges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges Boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges Property Map: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges Property Map: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges

IpRanges List<string>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

IpRanges []string: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges list(string): (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges string[]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges Sequence[str]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges

IpRanges List<string>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

IpRanges []string: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges list(string): (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges string[]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges Sequence[str]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

GetAccountNetworkPolicyIngressPublicAccessDenyRule

Authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

Authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
Destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
Label string: (string) - The label for this ingress rule
Origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication object: (CustomerFacingIngressNetworkPolicyAuthentication)
destination object: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin object: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label string: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication: (CustomerFacingIngressNetworkPolicyAuthentication)
destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label str: (string) - The label for this ingress rule
origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

authentication Property Map: (CustomerFacingIngressNetworkPolicyAuthentication)
destination Property Map: (string) - The internet destination to which access will be allowed. Format dependent on the destination type
label String: (string) - The label for this ingress rule
origin Property Map: (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication

Identities List<GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

Identities []GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
IdentityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities list(object): (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity[]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType string: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities Sequence[GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity]: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identity_type str: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

identities List<Property Map>: (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
identityType String: (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

PrincipalId int: (integer)
PrincipalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id number: (integer)
principal_type string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Integer: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId number: (integer)
principalType string: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principal_id int: (integer)
principal_type str: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

principalId Number: (integer)
principalType String: (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination

AccountApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

AccountApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
AccountDatabricksOne GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
AccountUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
AllDestinations bool: (boolean) - Must be set to true
AppsRuntime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
LakebaseRuntime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
WorkspaceApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
WorkspaceUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api object: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one object: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui object: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime object: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime object: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api object: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui object: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations boolean: (boolean) - Must be set to true
appsRuntime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

account_api GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
account_databricks_one GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
account_ui GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
all_destinations bool: (boolean) - Must be set to true
apps_runtime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebase_runtime GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspace_api GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspace_ui GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

accountApi Property Map: (CustomerFacingIngressNetworkPolicyAccountApiDestination) - Matches requests to account-level APIs. Can only be used in the account-level network policy
accountDatabricksOne Property Map: (CustomerFacingIngressNetworkPolicyAccountDatabricksOneDestination) - Account DatabricksOne destination is not supported
accountUi Property Map: (CustomerFacingIngressNetworkPolicyAccountUiDestination) - Matches requests to the account console UI. Can only be used in the account-level network policy
allDestinations Boolean: (boolean) - Must be set to true
appsRuntime Property Map: (CustomerFacingIngressNetworkPolicyAppsRuntimeDestination)
lakebaseRuntime Property Map: (CustomerFacingIngressNetworkPolicyLakebaseRuntimeDestination)
workspaceApi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
workspaceUi Property Map: (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination)

GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountDatabricksOne

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAccountUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationAppsRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationLakebaseRuntime

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes List<string>: (list of string)

ScopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
Scopes []string: (list of string)

scope_qualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes list(string): (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

scopeQualifier string: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes string[]: (list of string)

scope_qualifier str: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes Sequence[str]: (list of string)

scopeQualifier String: (string) - Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: API_SCOPE_QUALIFIER_ALL, API_SCOPE_QUALIFIER_READ
scopes List<String>: (list of string)

GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi

AllDestinations bool: (boolean) - Must be set to true

AllDestinations bool: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

allDestinations boolean: (boolean) - Must be set to true

all_destinations bool: (boolean) - Must be set to true

allDestinations Boolean: (boolean) - Must be set to true

GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin

AllIpRanges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
ExcludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
IncludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

AllIpRanges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
ExcludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
IncludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

all_ip_ranges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excluded_ip_ranges object: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
included_ip_ranges object: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges Boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

all_ip_ranges bool: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excluded_ip_ranges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
included_ip_ranges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

allIpRanges Boolean: (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
excludedIpRanges Property Map: (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
includedIpRanges Property Map: (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges

IpRanges List<string>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

IpRanges []string: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges list(string): (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges string[]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges Sequence[str]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges

IpRanges List<string>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

IpRanges []string: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges list(string): (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges string[]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ip_ranges Sequence[str]: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

ipRanges List<String>: (list of string) - We only support IPv4 and IPv4 CIDR notation for now

Package Details

Repository: databricks pulumi/pulumi-databricks
License: Apache-2.0
Notes: This Pulumi package is based on the databricks Terraform Provider.

Viewing docs for Databricks v1.109.0
published on Tuesday, Sep 8, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-databricks

databricks.getAccountNetworkPolicy

On this page

On this page

Example Usage

Using getAccountNetworkPolicy

getAccountNetworkPolicy Result

Supporting Types

GetAccountNetworkPolicyEgress

GetAccountNetworkPolicyEgressNetworkAccess

GetAccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestination

GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination

GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination

GetAccountNetworkPolicyEgressNetworkAccessBlockedInternetDestination

GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement

GetAccountNetworkPolicyIngress

GetAccountNetworkPolicyIngressCrossWorkspaceAccess

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRule

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthentication

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleAuthenticationIdentity

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestination

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountApi

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAccountUi

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationAppsRuntime

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOrigin

GetAccountNetworkPolicyIngressCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRule

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthentication

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleAuthenticationIdentity

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestination

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountApi

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAccountUi

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationAppsRuntime

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOrigin

GetAccountNetworkPolicyIngressCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces

GetAccountNetworkPolicyIngressDryRun

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccess

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRule

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthentication

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleAuthenticationIdentity

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestination

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountApi

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountDatabricksOne

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAccountUi

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationAppsRuntime

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationLakebaseRuntime

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceApi

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleDestinationWorkspaceUi

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOrigin

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRuleOriginSelectedWorkspaces

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRule

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthentication

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleAuthenticationIdentity

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestination

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountApi

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountDatabricksOne

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAccountUi

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationAppsRuntime

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationLakebaseRuntime

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceApi

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleDestinationWorkspaceUi

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOrigin

GetAccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRuleOriginSelectedWorkspaces

GetAccountNetworkPolicyIngressDryRunPrivateAccess

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRule

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthentication

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleAuthenticationIdentity

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestination

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountApi

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountDatabricksOne

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAccountUi

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationAppsRuntime

GetAccountNetworkPolicyIngressDryRunPrivateAccessAllowRuleDestinationLakebaseRuntime