1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. networksecurity
  5. SacRealm
Google Cloud v9.9.0 published on Wednesday, Jan 7, 2026 by Pulumi
gcp logo
Google Cloud v9.9.0 published on Wednesday, Jan 7, 2026 by Pulumi

    Secure Access Connect Realm resource

    To get more information about SacRealm, see:

    Example Usage

    Sac Realm Prisma Access

    import * as pulumi from "@pulumi/pulumi";
    import * as gcp from "@pulumi/gcp";
    
    const _default = new gcp.networksecurity.SacRealm("default", {
        name: "sac-realm-name",
        labels: {
            "label-one": "value-one",
        },
        securityService: "PALO_ALTO_PRISMA_ACCESS",
    });
    
    import pulumi
    import pulumi_gcp as gcp
    
    default = gcp.networksecurity.SacRealm("default",
        name="sac-realm-name",
        labels={
            "label-one": "value-one",
        },
        security_service="PALO_ALTO_PRISMA_ACCESS")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/networksecurity"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := networksecurity.NewSacRealm(ctx, "default", &networksecurity.SacRealmArgs{
    			Name: pulumi.String("sac-realm-name"),
    			Labels: pulumi.StringMap{
    				"label-one": pulumi.String("value-one"),
    			},
    			SecurityService: pulumi.String("PALO_ALTO_PRISMA_ACCESS"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Gcp = Pulumi.Gcp;
    
    return await Deployment.RunAsync(() => 
    {
        var @default = new Gcp.NetworkSecurity.SacRealm("default", new()
        {
            Name = "sac-realm-name",
            Labels = 
            {
                { "label-one", "value-one" },
            },
            SecurityService = "PALO_ALTO_PRISMA_ACCESS",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.gcp.networksecurity.SacRealm;
    import com.pulumi.gcp.networksecurity.SacRealmArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var default_ = new SacRealm("default", SacRealmArgs.builder()
                .name("sac-realm-name")
                .labels(Map.of("label-one", "value-one"))
                .securityService("PALO_ALTO_PRISMA_ACCESS")
                .build());
    
        }
    }
    
    resources:
      default:
        type: gcp:networksecurity:SacRealm
        properties:
          name: sac-realm-name
          labels:
            label-one: value-one
          securityService: PALO_ALTO_PRISMA_ACCESS
    

    Sac Realm Symantec Cloud Swg

    import * as pulumi from "@pulumi/pulumi";
    import * as gcp from "@pulumi/gcp";
    
    const _default = new gcp.networksecurity.SacRealm("default", {
        name: "sac-realm-name",
        labels: {
            "label-one": "value-one",
        },
        securityService: "SYMANTEC_CLOUD_SWG",
        symantecOptions: {
            secretPath: "secret-path",
        },
    });
    
    import pulumi
    import pulumi_gcp as gcp
    
    default = gcp.networksecurity.SacRealm("default",
        name="sac-realm-name",
        labels={
            "label-one": "value-one",
        },
        security_service="SYMANTEC_CLOUD_SWG",
        symantec_options={
            "secret_path": "secret-path",
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/networksecurity"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := networksecurity.NewSacRealm(ctx, "default", &networksecurity.SacRealmArgs{
    			Name: pulumi.String("sac-realm-name"),
    			Labels: pulumi.StringMap{
    				"label-one": pulumi.String("value-one"),
    			},
    			SecurityService: pulumi.String("SYMANTEC_CLOUD_SWG"),
    			SymantecOptions: &networksecurity.SacRealmSymantecOptionsArgs{
    				SecretPath: pulumi.String("secret-path"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Gcp = Pulumi.Gcp;
    
    return await Deployment.RunAsync(() => 
    {
        var @default = new Gcp.NetworkSecurity.SacRealm("default", new()
        {
            Name = "sac-realm-name",
            Labels = 
            {
                { "label-one", "value-one" },
            },
            SecurityService = "SYMANTEC_CLOUD_SWG",
            SymantecOptions = new Gcp.NetworkSecurity.Inputs.SacRealmSymantecOptionsArgs
            {
                SecretPath = "secret-path",
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.gcp.networksecurity.SacRealm;
    import com.pulumi.gcp.networksecurity.SacRealmArgs;
    import com.pulumi.gcp.networksecurity.inputs.SacRealmSymantecOptionsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var default_ = new SacRealm("default", SacRealmArgs.builder()
                .name("sac-realm-name")
                .labels(Map.of("label-one", "value-one"))
                .securityService("SYMANTEC_CLOUD_SWG")
                .symantecOptions(SacRealmSymantecOptionsArgs.builder()
                    .secretPath("secret-path")
                    .build())
                .build());
    
        }
    }
    
    resources:
      default:
        type: gcp:networksecurity:SacRealm
        properties:
          name: sac-realm-name
          labels:
            label-one: value-one
          securityService: SYMANTEC_CLOUD_SWG
          symantecOptions:
            secretPath: secret-path
    

    Create SacRealm Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SacRealm(name: string, args: SacRealmArgs, opts?: CustomResourceOptions);
    @overload
    def SacRealm(resource_name: str,
                 args: SacRealmArgs,
                 opts: Optional[ResourceOptions] = None)
    
    @overload
    def SacRealm(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 security_service: Optional[str] = None,
                 labels: Optional[Mapping[str, str]] = None,
                 name: Optional[str] = None,
                 project: Optional[str] = None,
                 symantec_options: Optional[SacRealmSymantecOptionsArgs] = None)
    func NewSacRealm(ctx *Context, name string, args SacRealmArgs, opts ...ResourceOption) (*SacRealm, error)
    public SacRealm(string name, SacRealmArgs args, CustomResourceOptions? opts = null)
    public SacRealm(String name, SacRealmArgs args)
    public SacRealm(String name, SacRealmArgs args, CustomResourceOptions options)
    
    type: gcp:networksecurity:SacRealm
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args SacRealmArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SacRealmArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SacRealmArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SacRealmArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SacRealmArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var sacRealmResource = new Gcp.NetworkSecurity.SacRealm("sacRealmResource", new()
    {
        SecurityService = "string",
        Labels = 
        {
            { "string", "string" },
        },
        Name = "string",
        Project = "string",
        SymantecOptions = new Gcp.NetworkSecurity.Inputs.SacRealmSymantecOptionsArgs
        {
            AvailableSymantecSites = new[]
            {
                "string",
            },
            SecretPath = "string",
            SymantecConnectionState = "string",
        },
    });
    
    example, err := networksecurity.NewSacRealm(ctx, "sacRealmResource", &networksecurity.SacRealmArgs{
    	SecurityService: pulumi.String("string"),
    	Labels: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	Name:    pulumi.String("string"),
    	Project: pulumi.String("string"),
    	SymantecOptions: &networksecurity.SacRealmSymantecOptionsArgs{
    		AvailableSymantecSites: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    		SecretPath:              pulumi.String("string"),
    		SymantecConnectionState: pulumi.String("string"),
    	},
    })
    
    var sacRealmResource = new SacRealm("sacRealmResource", SacRealmArgs.builder()
        .securityService("string")
        .labels(Map.of("string", "string"))
        .name("string")
        .project("string")
        .symantecOptions(SacRealmSymantecOptionsArgs.builder()
            .availableSymantecSites("string")
            .secretPath("string")
            .symantecConnectionState("string")
            .build())
        .build());
    
    sac_realm_resource = gcp.networksecurity.SacRealm("sacRealmResource",
        security_service="string",
        labels={
            "string": "string",
        },
        name="string",
        project="string",
        symantec_options={
            "available_symantec_sites": ["string"],
            "secret_path": "string",
            "symantec_connection_state": "string",
        })
    
    const sacRealmResource = new gcp.networksecurity.SacRealm("sacRealmResource", {
        securityService: "string",
        labels: {
            string: "string",
        },
        name: "string",
        project: "string",
        symantecOptions: {
            availableSymantecSites: ["string"],
            secretPath: "string",
            symantecConnectionState: "string",
        },
    });
    
    type: gcp:networksecurity:SacRealm
    properties:
        labels:
            string: string
        name: string
        project: string
        securityService: string
        symantecOptions:
            availableSymantecSites:
                - string
            secretPath: string
            symantecConnectionState: string
    

    SacRealm Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SacRealm resource accepts the following input properties:

    SecurityService string
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    Labels Dictionary<string, string>

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    Name string
    Identifier. Resource name.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    SymantecOptions SacRealmSymantecOptions
    Configuration required for Symantec realms. Structure is documented below.
    SecurityService string
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    Labels map[string]string

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    Name string
    Identifier. Resource name.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    SymantecOptions SacRealmSymantecOptionsArgs
    Configuration required for Symantec realms. Structure is documented below.
    securityService String
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    labels Map<String,String>

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    name String
    Identifier. Resource name.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    symantecOptions SacRealmSymantecOptions
    Configuration required for Symantec realms. Structure is documented below.
    securityService string
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    labels {[key: string]: string}

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    name string
    Identifier. Resource name.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    symantecOptions SacRealmSymantecOptions
    Configuration required for Symantec realms. Structure is documented below.
    security_service str
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    labels Mapping[str, str]

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    name str
    Identifier. Resource name.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    symantec_options SacRealmSymantecOptionsArgs
    Configuration required for Symantec realms. Structure is documented below.
    securityService String
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    labels Map<String>

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    name String
    Identifier. Resource name.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    symantecOptions Property Map
    Configuration required for Symantec realms. Structure is documented below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SacRealm resource produces the following output properties:

    CreateTime string
    Timestamp when the realm was created.
    EffectiveLabels Dictionary<string, string>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Id string
    The provider-assigned unique ID for this managed resource.
    PairingKeys List<SacRealmPairingKey>
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    State string
    State of the realm.
    UpdateTime string
    Timestamp when the realm was last updated.
    CreateTime string
    Timestamp when the realm was created.
    EffectiveLabels map[string]string
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Id string
    The provider-assigned unique ID for this managed resource.
    PairingKeys []SacRealmPairingKey
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    State string
    State of the realm.
    UpdateTime string
    Timestamp when the realm was last updated.
    createTime String
    Timestamp when the realm was created.
    effectiveLabels Map<String,String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    id String
    The provider-assigned unique ID for this managed resource.
    pairingKeys List<SacRealmPairingKey>
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    state String
    State of the realm.
    updateTime String
    Timestamp when the realm was last updated.
    createTime string
    Timestamp when the realm was created.
    effectiveLabels {[key: string]: string}
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    id string
    The provider-assigned unique ID for this managed resource.
    pairingKeys SacRealmPairingKey[]
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    state string
    State of the realm.
    updateTime string
    Timestamp when the realm was last updated.
    create_time str
    Timestamp when the realm was created.
    effective_labels Mapping[str, str]
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    id str
    The provider-assigned unique ID for this managed resource.
    pairing_keys Sequence[SacRealmPairingKey]
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    state str
    State of the realm.
    update_time str
    Timestamp when the realm was last updated.
    createTime String
    Timestamp when the realm was created.
    effectiveLabels Map<String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    id String
    The provider-assigned unique ID for this managed resource.
    pairingKeys List<Property Map>
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    state String
    State of the realm.
    updateTime String
    Timestamp when the realm was last updated.

    Look up Existing SacRealm Resource

    Get an existing SacRealm resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SacRealmState, opts?: CustomResourceOptions): SacRealm
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            create_time: Optional[str] = None,
            effective_labels: Optional[Mapping[str, str]] = None,
            labels: Optional[Mapping[str, str]] = None,
            name: Optional[str] = None,
            pairing_keys: Optional[Sequence[SacRealmPairingKeyArgs]] = None,
            project: Optional[str] = None,
            pulumi_labels: Optional[Mapping[str, str]] = None,
            security_service: Optional[str] = None,
            state: Optional[str] = None,
            symantec_options: Optional[SacRealmSymantecOptionsArgs] = None,
            update_time: Optional[str] = None) -> SacRealm
    func GetSacRealm(ctx *Context, name string, id IDInput, state *SacRealmState, opts ...ResourceOption) (*SacRealm, error)
    public static SacRealm Get(string name, Input<string> id, SacRealmState? state, CustomResourceOptions? opts = null)
    public static SacRealm get(String name, Output<String> id, SacRealmState state, CustomResourceOptions options)
    resources:  _:    type: gcp:networksecurity:SacRealm    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CreateTime string
    Timestamp when the realm was created.
    EffectiveLabels Dictionary<string, string>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Labels Dictionary<string, string>

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    Name string
    Identifier. Resource name.
    PairingKeys List<SacRealmPairingKey>
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    SecurityService string
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    State string
    State of the realm.
    SymantecOptions SacRealmSymantecOptions
    Configuration required for Symantec realms. Structure is documented below.
    UpdateTime string
    Timestamp when the realm was last updated.
    CreateTime string
    Timestamp when the realm was created.
    EffectiveLabels map[string]string
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Labels map[string]string

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    Name string
    Identifier. Resource name.
    PairingKeys []SacRealmPairingKeyArgs
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    SecurityService string
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    State string
    State of the realm.
    SymantecOptions SacRealmSymantecOptionsArgs
    Configuration required for Symantec realms. Structure is documented below.
    UpdateTime string
    Timestamp when the realm was last updated.
    createTime String
    Timestamp when the realm was created.
    effectiveLabels Map<String,String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    labels Map<String,String>

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    name String
    Identifier. Resource name.
    pairingKeys List<SacRealmPairingKey>
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    securityService String
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    state String
    State of the realm.
    symantecOptions SacRealmSymantecOptions
    Configuration required for Symantec realms. Structure is documented below.
    updateTime String
    Timestamp when the realm was last updated.
    createTime string
    Timestamp when the realm was created.
    effectiveLabels {[key: string]: string}
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    labels {[key: string]: string}

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    name string
    Identifier. Resource name.
    pairingKeys SacRealmPairingKey[]
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    securityService string
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    state string
    State of the realm.
    symantecOptions SacRealmSymantecOptions
    Configuration required for Symantec realms. Structure is documented below.
    updateTime string
    Timestamp when the realm was last updated.
    create_time str
    Timestamp when the realm was created.
    effective_labels Mapping[str, str]
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    labels Mapping[str, str]

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    name str
    Identifier. Resource name.
    pairing_keys Sequence[SacRealmPairingKeyArgs]
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    security_service str
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    state str
    State of the realm.
    symantec_options SacRealmSymantecOptionsArgs
    Configuration required for Symantec realms. Structure is documented below.
    update_time str
    Timestamp when the realm was last updated.
    createTime String
    Timestamp when the realm was created.
    effectiveLabels Map<String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    labels Map<String>

    Optional labels in key:value format. For more information about labels, see Requirements for labels.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

    name String
    Identifier. Resource name.
    pairingKeys List<Property Map>
    Key to be shared with SSE service provider during pairing. Structure is documented below.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    securityService String
    SSE service provider associated with the realm. Possible values are: SECURITY_SERVICE_UNSPECIFIED, PALO_ALTO_PRISMA_ACCESS, SYMANTEC_CLOUD_SWG.
    state String
    State of the realm.
    symantecOptions Property Map
    Configuration required for Symantec realms. Structure is documented below.
    updateTime String
    Timestamp when the realm was last updated.

    Supporting Types

    SacRealmPairingKey, SacRealmPairingKeyArgs

    ExpireTime string
    (Output) Timestamp in UTC of when this resource is considered expired. It expires 7 days after creation.
    Key string
    (Output) Key value.
    ExpireTime string
    (Output) Timestamp in UTC of when this resource is considered expired. It expires 7 days after creation.
    Key string
    (Output) Key value.
    expireTime String
    (Output) Timestamp in UTC of when this resource is considered expired. It expires 7 days after creation.
    key String
    (Output) Key value.
    expireTime string
    (Output) Timestamp in UTC of when this resource is considered expired. It expires 7 days after creation.
    key string
    (Output) Key value.
    expire_time str
    (Output) Timestamp in UTC of when this resource is considered expired. It expires 7 days after creation.
    key str
    (Output) Key value.
    expireTime String
    (Output) Timestamp in UTC of when this resource is considered expired. It expires 7 days after creation.
    key String
    (Output) Key value.

    SacRealmSymantecOptions, SacRealmSymantecOptionsArgs

    AvailableSymantecSites List<string>
    (Output) Symantec site IDs which the user can choose to connect to.
    SecretPath string
    API Key used to call Symantec APIs on the user's behalf. Required if using Symantec Cloud SWG. P4SA account needs permissions granted to read this secret. A secret ID, secret name, or secret URI can be specified, but it will be parsed and stored as a secret URI in the form projects/{projectNumber}/secrets/my-secret.
    SymantecConnectionState string
    (Output) Connection status to Symantec API
    AvailableSymantecSites []string
    (Output) Symantec site IDs which the user can choose to connect to.
    SecretPath string
    API Key used to call Symantec APIs on the user's behalf. Required if using Symantec Cloud SWG. P4SA account needs permissions granted to read this secret. A secret ID, secret name, or secret URI can be specified, but it will be parsed and stored as a secret URI in the form projects/{projectNumber}/secrets/my-secret.
    SymantecConnectionState string
    (Output) Connection status to Symantec API
    availableSymantecSites List<String>
    (Output) Symantec site IDs which the user can choose to connect to.
    secretPath String
    API Key used to call Symantec APIs on the user's behalf. Required if using Symantec Cloud SWG. P4SA account needs permissions granted to read this secret. A secret ID, secret name, or secret URI can be specified, but it will be parsed and stored as a secret URI in the form projects/{projectNumber}/secrets/my-secret.
    symantecConnectionState String
    (Output) Connection status to Symantec API
    availableSymantecSites string[]
    (Output) Symantec site IDs which the user can choose to connect to.
    secretPath string
    API Key used to call Symantec APIs on the user's behalf. Required if using Symantec Cloud SWG. P4SA account needs permissions granted to read this secret. A secret ID, secret name, or secret URI can be specified, but it will be parsed and stored as a secret URI in the form projects/{projectNumber}/secrets/my-secret.
    symantecConnectionState string
    (Output) Connection status to Symantec API
    available_symantec_sites Sequence[str]
    (Output) Symantec site IDs which the user can choose to connect to.
    secret_path str
    API Key used to call Symantec APIs on the user's behalf. Required if using Symantec Cloud SWG. P4SA account needs permissions granted to read this secret. A secret ID, secret name, or secret URI can be specified, but it will be parsed and stored as a secret URI in the form projects/{projectNumber}/secrets/my-secret.
    symantec_connection_state str
    (Output) Connection status to Symantec API
    availableSymantecSites List<String>
    (Output) Symantec site IDs which the user can choose to connect to.
    secretPath String
    API Key used to call Symantec APIs on the user's behalf. Required if using Symantec Cloud SWG. P4SA account needs permissions granted to read this secret. A secret ID, secret name, or secret URI can be specified, but it will be parsed and stored as a secret URI in the form projects/{projectNumber}/secrets/my-secret.
    symantecConnectionState String
    (Output) Connection status to Symantec API

    Import

    SacRealm can be imported using any of these accepted formats:

    • projects/{{project}}/locations/global/sacRealms/{{name}}

    • {{project}}/{{name}}

    • {{name}}

    When using the pulumi import command, SacRealm can be imported using one of the formats above. For example:

    $ pulumi import gcp:networksecurity/sacRealm:SacRealm default projects/{{project}}/locations/global/sacRealms/{{name}}
    
    $ pulumi import gcp:networksecurity/sacRealm:SacRealm default {{project}}/{{name}}
    
    $ pulumi import gcp:networksecurity/sacRealm:SacRealm default {{name}}
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud v9.9.0 published on Wednesday, Jan 7, 2026 by Pulumi
      Meet Neo: Your AI Platform Teammate