Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Juniper Mist Provider
  4. API Docs
  5. org
  6. Servicepolicy
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

junipermist.org.Servicepolicy

junipermist logo
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

    This resource manages WAN Assurance Service Policies (Application Policies).

    The Service Policies can be used in the servicePolicies object by referencing the Service Policy ID as the servicepolicyId in:

    • the Gateway configuration (mist_device_gateway.service_policies)
    • the Gateway Templates (mist_org_gatewaytemplate.service_policies)
    • the HUB Profiles (mist_org_deviceprofile_gateway.service_policies) They can be used to manage common policies between multiples configurations

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";

const servicepolicyOne = new junipermist.org.Servicepolicy("servicepolicy_one", {
    orgId: terraformTest.id,
    tenants: ["guest"],
    services: ["guest-internet"],
    action: "allow",
    idp: {
        enabled: true,
        profile: "standard",
        alertOnly: true,
    },
    name: "Guest-IDP",
});

    import pulumi
import pulumi_juniper_mist as junipermist

servicepolicy_one = junipermist.org.Servicepolicy("servicepolicy_one",
    org_id=terraform_test["id"],
    tenants=["guest"],
    services=["guest-internet"],
    action="allow",
    idp={
        "enabled": True,
        "profile": "standard",
        "alert_only": True,
    },
    name="Guest-IDP")

    package main

import (
	"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := org.NewServicepolicy(ctx, "servicepolicy_one", &org.ServicepolicyArgs{
			OrgId: pulumi.Any(terraformTest.Id),
			Tenants: pulumi.StringArray{
				pulumi.String("guest"),
			},
			Services: pulumi.StringArray{
				pulumi.String("guest-internet"),
			},
			Action: pulumi.String("allow"),
			Idp: &org.ServicepolicyIdpArgs{
				Enabled:   pulumi.Bool(true),
				Profile:   pulumi.String("standard"),
				AlertOnly: pulumi.Bool(true),
			},
			Name: pulumi.String("Guest-IDP"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;

return await Deployment.RunAsync(() => 
{
    var servicepolicyOne = new JuniperMist.Org.Servicepolicy("servicepolicy_one", new()
    {
        OrgId = terraformTest.Id,
        Tenants = new[]
        {
            "guest",
        },
        Services = new[]
        {
            "guest-internet",
        },
        Action = "allow",
        Idp = new JuniperMist.Org.Inputs.ServicepolicyIdpArgs
        {
            Enabled = true,
            Profile = "standard",
            AlertOnly = true,
        },
        Name = "Guest-IDP",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.Servicepolicy;
import com.pulumi.junipermist.org.ServicepolicyArgs;
import com.pulumi.junipermist.org.inputs.ServicepolicyIdpArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var servicepolicyOne = new Servicepolicy("servicepolicyOne", ServicepolicyArgs.builder()
            .orgId(terraformTest.id())
            .tenants("guest")
            .services("guest-internet")
            .action("allow")
            .idp(ServicepolicyIdpArgs.builder()
                .enabled(true)
                .profile("standard")
                .alertOnly(true)
                .build())
            .name("Guest-IDP")
            .build());

    }
}

    resources:
  servicepolicyOne:
    type: junipermist:org:Servicepolicy
    name: servicepolicy_one
    properties:
      orgId: ${terraformTest.id}
      tenants:
        - guest
      services:
        - guest-internet
      action: allow
      idp:
        enabled: true
        profile: standard
        alertOnly: true
      name: Guest-IDP

    pulumi {
  required_providers {
    junipermist = {
      source = "pulumi/junipermist"
    }
  }
}

resource "junipermist_org_servicepolicy" "servicepolicy_one" {
  org_id   = terraformTest.id
  tenants  = ["guest"]
  services = ["guest-internet"]
  action   = "allow"
  idp = {
    enabled    = true
    profile    = "standard"
    alert_only = true
  }
  name = "Guest-IDP"
}

    Create Servicepolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Servicepolicy(name: string, args: ServicepolicyArgs, opts?: CustomResourceOptions);
    @overload
def Servicepolicy(resource_name: str,
                  args: ServicepolicyArgs,
                  opts: Optional[ResourceOptions] = None)

@overload
def Servicepolicy(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  org_id: Optional[str] = None,
                  local_routing: Optional[bool] = None,
                  antivirus: Optional[ServicepolicyAntivirusArgs] = None,
                  appqoe: Optional[ServicepolicyAppqoeArgs] = None,
                  ewfs: Optional[Sequence[ServicepolicyEwfArgs]] = None,
                  idp: Optional[ServicepolicyIdpArgs] = None,
                  aamw: Optional[ServicepolicyAamwArgs] = None,
                  name: Optional[str] = None,
                  action: Optional[str] = None,
                  path_preference: Optional[str] = None,
                  services: Optional[Sequence[str]] = None,
                  ssl_proxy: Optional[ServicepolicySslProxyArgs] = None,
                  tenants: Optional[Sequence[str]] = None)
    func NewServicepolicy(ctx *Context, name string, args ServicepolicyArgs, opts ...ResourceOption) (*Servicepolicy, error)
    public Servicepolicy(string name, ServicepolicyArgs args, CustomResourceOptions? opts = null)
    public Servicepolicy(String name, ServicepolicyArgs args)
public Servicepolicy(String name, ServicepolicyArgs args, CustomResourceOptions options)

    type: junipermist:org:Servicepolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "junipermist_org_servicepolicy" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ServicepolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ServicepolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ServicepolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ServicepolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ServicepolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var servicepolicyResource = new JuniperMist.Org.Servicepolicy("servicepolicyResource", new()
{
    OrgId = "string",
    LocalRouting = false,
    Antivirus = new JuniperMist.Org.Inputs.ServicepolicyAntivirusArgs
    {
        AvprofileId = "string",
        Enabled = false,
        Profile = "string",
    },
    Appqoe = new JuniperMist.Org.Inputs.ServicepolicyAppqoeArgs
    {
        Enabled = false,
    },
    Ewfs = new[]
    {
        new JuniperMist.Org.Inputs.ServicepolicyEwfArgs
        {
            AlertOnly = false,
            BlockMessage = "string",
            Enabled = false,
            Profile = "string",
        },
    },
    Idp = new JuniperMist.Org.Inputs.ServicepolicyIdpArgs
    {
        AlertOnly = false,
        Enabled = false,
        IdpprofileId = "string",
        Profile = "string",
    },
    Aamw = new JuniperMist.Org.Inputs.ServicepolicyAamwArgs
    {
        AamwprofileId = "string",
        Enabled = false,
        Profile = "string",
    },
    Name = "string",
    Action = "string",
    PathPreference = "string",
    Services = new[]
    {
        "string",
    },
    SslProxy = new JuniperMist.Org.Inputs.ServicepolicySslProxyArgs
    {
        CiphersCategory = "string",
        Enabled = false,
    },
    Tenants = new[]
    {
        "string",
    },
});

    example, err := org.NewServicepolicy(ctx, "servicepolicyResource", &org.ServicepolicyArgs{
	OrgId:        pulumi.String("string"),
	LocalRouting: pulumi.Bool(false),
	Antivirus: &org.ServicepolicyAntivirusArgs{
		AvprofileId: pulumi.String("string"),
		Enabled:     pulumi.Bool(false),
		Profile:     pulumi.String("string"),
	},
	Appqoe: &org.ServicepolicyAppqoeArgs{
		Enabled: pulumi.Bool(false),
	},
	Ewfs: org.ServicepolicyEwfArray{
		&org.ServicepolicyEwfArgs{
			AlertOnly:    pulumi.Bool(false),
			BlockMessage: pulumi.String("string"),
			Enabled:      pulumi.Bool(false),
			Profile:      pulumi.String("string"),
		},
	},
	Idp: &org.ServicepolicyIdpArgs{
		AlertOnly:    pulumi.Bool(false),
		Enabled:      pulumi.Bool(false),
		IdpprofileId: pulumi.String("string"),
		Profile:      pulumi.String("string"),
	},
	Aamw: &org.ServicepolicyAamwArgs{
		AamwprofileId: pulumi.String("string"),
		Enabled:       pulumi.Bool(false),
		Profile:       pulumi.String("string"),
	},
	Name:           pulumi.String("string"),
	Action:         pulumi.String("string"),
	PathPreference: pulumi.String("string"),
	Services: pulumi.StringArray{
		pulumi.String("string"),
	},
	SslProxy: &org.ServicepolicySslProxyArgs{
		CiphersCategory: pulumi.String("string"),
		Enabled:         pulumi.Bool(false),
	},
	Tenants: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    resource "junipermist_org_servicepolicy" "servicepolicyResource" {
  lifecycle {
    create_before_destroy = true
  }
  org_id        = "string"
  local_routing = false
  antivirus = {
    avprofile_id = "string"
    enabled      = false
    profile      = "string"
  }
  appqoe = {
    enabled = false
  }
  ewfs {
    alert_only    = false
    block_message = "string"
    enabled       = false
    profile       = "string"
  }
  idp = {
    alert_only    = false
    enabled       = false
    idpprofile_id = "string"
    profile       = "string"
  }
  aamw = {
    aamwprofile_id = "string"
    enabled        = false
    profile        = "string"
  }
  name            = "string"
  action          = "string"
  path_preference = "string"
  services        = ["string"]
  ssl_proxy = {
    ciphers_category = "string"
    enabled          = false
  }
  tenants = ["string"]
}

    var servicepolicyResource = new Servicepolicy("servicepolicyResource", ServicepolicyArgs.builder()
    .orgId("string")
    .localRouting(false)
    .antivirus(ServicepolicyAntivirusArgs.builder()
        .avprofileId("string")
        .enabled(false)
        .profile("string")
        .build())
    .appqoe(ServicepolicyAppqoeArgs.builder()
        .enabled(false)
        .build())
    .ewfs(ServicepolicyEwfArgs.builder()
        .alertOnly(false)
        .blockMessage("string")
        .enabled(false)
        .profile("string")
        .build())
    .idp(ServicepolicyIdpArgs.builder()
        .alertOnly(false)
        .enabled(false)
        .idpprofileId("string")
        .profile("string")
        .build())
    .aamw(ServicepolicyAamwArgs.builder()
        .aamwprofileId("string")
        .enabled(false)
        .profile("string")
        .build())
    .name("string")
    .action("string")
    .pathPreference("string")
    .services("string")
    .sslProxy(ServicepolicySslProxyArgs.builder()
        .ciphersCategory("string")
        .enabled(false)
        .build())
    .tenants("string")
    .build());

    servicepolicy_resource = junipermist.org.Servicepolicy("servicepolicyResource",
    org_id="string",
    local_routing=False,
    antivirus={
        "avprofile_id": "string",
        "enabled": False,
        "profile": "string",
    },
    appqoe={
        "enabled": False,
    },
    ewfs=[{
        "alert_only": False,
        "block_message": "string",
        "enabled": False,
        "profile": "string",
    }],
    idp={
        "alert_only": False,
        "enabled": False,
        "idpprofile_id": "string",
        "profile": "string",
    },
    aamw={
        "aamwprofile_id": "string",
        "enabled": False,
        "profile": "string",
    },
    name="string",
    action="string",
    path_preference="string",
    services=["string"],
    ssl_proxy={
        "ciphers_category": "string",
        "enabled": False,
    },
    tenants=["string"])

    const servicepolicyResource = new junipermist.org.Servicepolicy("servicepolicyResource", {
    orgId: "string",
    localRouting: false,
    antivirus: {
        avprofileId: "string",
        enabled: false,
        profile: "string",
    },
    appqoe: {
        enabled: false,
    },
    ewfs: [{
        alertOnly: false,
        blockMessage: "string",
        enabled: false,
        profile: "string",
    }],
    idp: {
        alertOnly: false,
        enabled: false,
        idpprofileId: "string",
        profile: "string",
    },
    aamw: {
        aamwprofileId: "string",
        enabled: false,
        profile: "string",
    },
    name: "string",
    action: "string",
    pathPreference: "string",
    services: ["string"],
    sslProxy: {
        ciphersCategory: "string",
        enabled: false,
    },
    tenants: ["string"],
});

    type: junipermist:org:Servicepolicy
properties:
    aamw:
        aamwprofileId: string
        enabled: false
        profile: string
    action: string
    antivirus:
        avprofileId: string
        enabled: false
        profile: string
    appqoe:
        enabled: false
    ewfs:
        - alertOnly: false
          blockMessage: string
          enabled: false
          profile: string
    idp:
        alertOnly: false
        enabled: false
        idpprofileId: string
        profile: string
    localRouting: false
    name: string
    orgId: string
    pathPreference: string
    services:
        - string
    sslProxy:
        ciphersCategory: string
        enabled: false
    tenants:
        - string

    Servicepolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Servicepolicy resource accepts the following input properties:

    OrgId string
    Organization that owns this service policy
    Aamw Pulumi.JuniperMist.Org.Inputs.ServicepolicyAamw
    Advanced anti-malware settings applied by this service policy
    Action string
    Allow or deny action for traffic matched by this service policy
    Antivirus Pulumi.JuniperMist.Org.Inputs.ServicepolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    Appqoe Pulumi.JuniperMist.Org.Inputs.ServicepolicyAppqoe
    Application QoE settings applied by this service policy
    Ewfs List<Pulumi.JuniperMist.Org.Inputs.ServicepolicyEwf>
    Enhanced web filtering rules applied by this service policy
    Idp Pulumi.JuniperMist.Org.Inputs.ServicepolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    LocalRouting bool
    Whether the policy permits access within the same VRF
    Name string
    Display name of the service policy
    PathPreference string
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    Services List<string>
    Application services or groups matched by this policy
    SslProxy Pulumi.JuniperMist.Org.Inputs.ServicepolicySslProxy
    SSL proxy inspection settings applied by this service policy
    Tenants List<string>
    Tenant names matched by this service policy
    OrgId string
    Organization that owns this service policy
    Aamw ServicepolicyAamwArgs
    Advanced anti-malware settings applied by this service policy
    Action string
    Allow or deny action for traffic matched by this service policy
    Antivirus ServicepolicyAntivirusArgs
    Malware and virus inspection settings applied by this service policy
    Appqoe ServicepolicyAppqoeArgs
    Application QoE settings applied by this service policy
    Ewfs []ServicepolicyEwfArgs
    Enhanced web filtering rules applied by this service policy
    Idp ServicepolicyIdpArgs
    Intrusion detection and prevention settings applied by this service policy
    LocalRouting bool
    Whether the policy permits access within the same VRF
    Name string
    Display name of the service policy
    PathPreference string
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    Services []string
    Application services or groups matched by this policy
    SslProxy ServicepolicySslProxyArgs
    SSL proxy inspection settings applied by this service policy
    Tenants []string
    Tenant names matched by this service policy
    org_id string
    Organization that owns this service policy
    aamw object
    Advanced anti-malware settings applied by this service policy
    action string
    Allow or deny action for traffic matched by this service policy
    antivirus object
    Malware and virus inspection settings applied by this service policy
    appqoe object
    Application QoE settings applied by this service policy
    ewfs list(object)
    Enhanced web filtering rules applied by this service policy
    idp object
    Intrusion detection and prevention settings applied by this service policy
    local_routing bool
    Whether the policy permits access within the same VRF
    name string
    Display name of the service policy
    path_preference string
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services list(string)
    Application services or groups matched by this policy
    ssl_proxy object
    SSL proxy inspection settings applied by this service policy
    tenants list(string)
    Tenant names matched by this service policy
    orgId String
    Organization that owns this service policy
    aamw ServicepolicyAamw
    Advanced anti-malware settings applied by this service policy
    action String
    Allow or deny action for traffic matched by this service policy
    antivirus ServicepolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    appqoe ServicepolicyAppqoe
    Application QoE settings applied by this service policy
    ewfs List<ServicepolicyEwf>
    Enhanced web filtering rules applied by this service policy
    idp ServicepolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    localRouting Boolean
    Whether the policy permits access within the same VRF
    name String
    Display name of the service policy
    pathPreference String
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services List<String>
    Application services or groups matched by this policy
    sslProxy ServicepolicySslProxy
    SSL proxy inspection settings applied by this service policy
    tenants List<String>
    Tenant names matched by this service policy
    orgId string
    Organization that owns this service policy
    aamw ServicepolicyAamw
    Advanced anti-malware settings applied by this service policy
    action string
    Allow or deny action for traffic matched by this service policy
    antivirus ServicepolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    appqoe ServicepolicyAppqoe
    Application QoE settings applied by this service policy
    ewfs ServicepolicyEwf[]
    Enhanced web filtering rules applied by this service policy
    idp ServicepolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    localRouting boolean
    Whether the policy permits access within the same VRF
    name string
    Display name of the service policy
    pathPreference string
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services string[]
    Application services or groups matched by this policy
    sslProxy ServicepolicySslProxy
    SSL proxy inspection settings applied by this service policy
    tenants string[]
    Tenant names matched by this service policy
    org_id str
    Organization that owns this service policy
    aamw ServicepolicyAamwArgs
    Advanced anti-malware settings applied by this service policy
    action str
    Allow or deny action for traffic matched by this service policy
    antivirus ServicepolicyAntivirusArgs
    Malware and virus inspection settings applied by this service policy
    appqoe ServicepolicyAppqoeArgs
    Application QoE settings applied by this service policy
    ewfs Sequence[ServicepolicyEwfArgs]
    Enhanced web filtering rules applied by this service policy
    idp ServicepolicyIdpArgs
    Intrusion detection and prevention settings applied by this service policy
    local_routing bool
    Whether the policy permits access within the same VRF
    name str
    Display name of the service policy
    path_preference str
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services Sequence[str]
    Application services or groups matched by this policy
    ssl_proxy ServicepolicySslProxyArgs
    SSL proxy inspection settings applied by this service policy
    tenants Sequence[str]
    Tenant names matched by this service policy
    orgId String
    Organization that owns this service policy
    aamw Property Map
    Advanced anti-malware settings applied by this service policy
    action String
    Allow or deny action for traffic matched by this service policy
    antivirus Property Map
    Malware and virus inspection settings applied by this service policy
    appqoe Property Map
    Application QoE settings applied by this service policy
    ewfs List<Property Map>
    Enhanced web filtering rules applied by this service policy
    idp Property Map
    Intrusion detection and prevention settings applied by this service policy
    localRouting Boolean
    Whether the policy permits access within the same VRF
    name String
    Display name of the service policy
    pathPreference String
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services List<String>
    Application services or groups matched by this policy
    sslProxy Property Map
    SSL proxy inspection settings applied by this service policy
    tenants List<String>
    Tenant names matched by this service policy

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Servicepolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Servicepolicy Resource

    Get an existing Servicepolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ServicepolicyState, opts?: CustomResourceOptions): Servicepolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        aamw: Optional[ServicepolicyAamwArgs] = None,
        action: Optional[str] = None,
        antivirus: Optional[ServicepolicyAntivirusArgs] = None,
        appqoe: Optional[ServicepolicyAppqoeArgs] = None,
        ewfs: Optional[Sequence[ServicepolicyEwfArgs]] = None,
        idp: Optional[ServicepolicyIdpArgs] = None,
        local_routing: Optional[bool] = None,
        name: Optional[str] = None,
        org_id: Optional[str] = None,
        path_preference: Optional[str] = None,
        services: Optional[Sequence[str]] = None,
        ssl_proxy: Optional[ServicepolicySslProxyArgs] = None,
        tenants: Optional[Sequence[str]] = None) -> Servicepolicy
    func GetServicepolicy(ctx *Context, name string, id IDInput, state *ServicepolicyState, opts ...ResourceOption) (*Servicepolicy, error)
    public static Servicepolicy Get(string name, Input<string> id, ServicepolicyState? state, CustomResourceOptions? opts = null)
    public static Servicepolicy get(String name, Output<String> id, ServicepolicyState state, CustomResourceOptions options)
    resources:  _:    type: junipermist:org:Servicepolicy    get:      id: ${id}
    import {
  to = junipermist_org_servicepolicy.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Aamw Pulumi.JuniperMist.Org.Inputs.ServicepolicyAamw
    Advanced anti-malware settings applied by this service policy
    Action string
    Allow or deny action for traffic matched by this service policy
    Antivirus Pulumi.JuniperMist.Org.Inputs.ServicepolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    Appqoe Pulumi.JuniperMist.Org.Inputs.ServicepolicyAppqoe
    Application QoE settings applied by this service policy
    Ewfs List<Pulumi.JuniperMist.Org.Inputs.ServicepolicyEwf>
    Enhanced web filtering rules applied by this service policy
    Idp Pulumi.JuniperMist.Org.Inputs.ServicepolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    LocalRouting bool
    Whether the policy permits access within the same VRF
    Name string
    Display name of the service policy
    OrgId string
    Organization that owns this service policy
    PathPreference string
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    Services List<string>
    Application services or groups matched by this policy
    SslProxy Pulumi.JuniperMist.Org.Inputs.ServicepolicySslProxy
    SSL proxy inspection settings applied by this service policy
    Tenants List<string>
    Tenant names matched by this service policy
    Aamw ServicepolicyAamwArgs
    Advanced anti-malware settings applied by this service policy
    Action string
    Allow or deny action for traffic matched by this service policy
    Antivirus ServicepolicyAntivirusArgs
    Malware and virus inspection settings applied by this service policy
    Appqoe ServicepolicyAppqoeArgs
    Application QoE settings applied by this service policy
    Ewfs []ServicepolicyEwfArgs
    Enhanced web filtering rules applied by this service policy
    Idp ServicepolicyIdpArgs
    Intrusion detection and prevention settings applied by this service policy
    LocalRouting bool
    Whether the policy permits access within the same VRF
    Name string
    Display name of the service policy
    OrgId string
    Organization that owns this service policy
    PathPreference string
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    Services []string
    Application services or groups matched by this policy
    SslProxy ServicepolicySslProxyArgs
    SSL proxy inspection settings applied by this service policy
    Tenants []string
    Tenant names matched by this service policy
    aamw object
    Advanced anti-malware settings applied by this service policy
    action string
    Allow or deny action for traffic matched by this service policy
    antivirus object
    Malware and virus inspection settings applied by this service policy
    appqoe object
    Application QoE settings applied by this service policy
    ewfs list(object)
    Enhanced web filtering rules applied by this service policy
    idp object
    Intrusion detection and prevention settings applied by this service policy
    local_routing bool
    Whether the policy permits access within the same VRF
    name string
    Display name of the service policy
    org_id string
    Organization that owns this service policy
    path_preference string
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services list(string)
    Application services or groups matched by this policy
    ssl_proxy object
    SSL proxy inspection settings applied by this service policy
    tenants list(string)
    Tenant names matched by this service policy
    aamw ServicepolicyAamw
    Advanced anti-malware settings applied by this service policy
    action String
    Allow or deny action for traffic matched by this service policy
    antivirus ServicepolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    appqoe ServicepolicyAppqoe
    Application QoE settings applied by this service policy
    ewfs List<ServicepolicyEwf>
    Enhanced web filtering rules applied by this service policy
    idp ServicepolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    localRouting Boolean
    Whether the policy permits access within the same VRF
    name String
    Display name of the service policy
    orgId String
    Organization that owns this service policy
    pathPreference String
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services List<String>
    Application services or groups matched by this policy
    sslProxy ServicepolicySslProxy
    SSL proxy inspection settings applied by this service policy
    tenants List<String>
    Tenant names matched by this service policy
    aamw ServicepolicyAamw
    Advanced anti-malware settings applied by this service policy
    action string
    Allow or deny action for traffic matched by this service policy
    antivirus ServicepolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    appqoe ServicepolicyAppqoe
    Application QoE settings applied by this service policy
    ewfs ServicepolicyEwf[]
    Enhanced web filtering rules applied by this service policy
    idp ServicepolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    localRouting boolean
    Whether the policy permits access within the same VRF
    name string
    Display name of the service policy
    orgId string
    Organization that owns this service policy
    pathPreference string
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services string[]
    Application services or groups matched by this policy
    sslProxy ServicepolicySslProxy
    SSL proxy inspection settings applied by this service policy
    tenants string[]
    Tenant names matched by this service policy
    aamw ServicepolicyAamwArgs
    Advanced anti-malware settings applied by this service policy
    action str
    Allow or deny action for traffic matched by this service policy
    antivirus ServicepolicyAntivirusArgs
    Malware and virus inspection settings applied by this service policy
    appqoe ServicepolicyAppqoeArgs
    Application QoE settings applied by this service policy
    ewfs Sequence[ServicepolicyEwfArgs]
    Enhanced web filtering rules applied by this service policy
    idp ServicepolicyIdpArgs
    Intrusion detection and prevention settings applied by this service policy
    local_routing bool
    Whether the policy permits access within the same VRF
    name str
    Display name of the service policy
    org_id str
    Organization that owns this service policy
    path_preference str
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services Sequence[str]
    Application services or groups matched by this policy
    ssl_proxy ServicepolicySslProxyArgs
    SSL proxy inspection settings applied by this service policy
    tenants Sequence[str]
    Tenant names matched by this service policy
    aamw Property Map
    Advanced anti-malware settings applied by this service policy
    action String
    Allow or deny action for traffic matched by this service policy
    antivirus Property Map
    Malware and virus inspection settings applied by this service policy
    appqoe Property Map
    Application QoE settings applied by this service policy
    ewfs List<Property Map>
    Enhanced web filtering rules applied by this service policy
    idp Property Map
    Intrusion detection and prevention settings applied by this service policy
    localRouting Boolean
    Whether the policy permits access within the same VRF
    name String
    Display name of the service policy
    orgId String
    Organization that owns this service policy
    pathPreference String
    By default, we derive all paths available and use them, optionally, you can customize by using pathPreference
    services List<String>
    Application services or groups matched by this policy
    sslProxy Property Map
    SSL proxy inspection settings applied by this service policy
    tenants List<String>
    Tenant names matched by this service policy

    Supporting Types

    ServicepolicyAamw, ServicepolicyAamwArgs

    AamwprofileId string
    Organization-level advanced anti-malware profile ID; takes precedence over inline profile settings
    Enabled bool
    Whether advanced anti-malware inspection is enabled for the service policy
    Profile string
    Built-in advanced anti-malware inspection profile to apply
    AamwprofileId string
    Organization-level advanced anti-malware profile ID; takes precedence over inline profile settings
    Enabled bool
    Whether advanced anti-malware inspection is enabled for the service policy
    Profile string
    Built-in advanced anti-malware inspection profile to apply
    aamwprofile_id string
    Organization-level advanced anti-malware profile ID; takes precedence over inline profile settings
    enabled bool
    Whether advanced anti-malware inspection is enabled for the service policy
    profile string
    Built-in advanced anti-malware inspection profile to apply
    aamwprofileId String
    Organization-level advanced anti-malware profile ID; takes precedence over inline profile settings
    enabled Boolean
    Whether advanced anti-malware inspection is enabled for the service policy
    profile String
    Built-in advanced anti-malware inspection profile to apply
    aamwprofileId string
    Organization-level advanced anti-malware profile ID; takes precedence over inline profile settings
    enabled boolean
    Whether advanced anti-malware inspection is enabled for the service policy
    profile string
    Built-in advanced anti-malware inspection profile to apply
    aamwprofile_id str
    Organization-level advanced anti-malware profile ID; takes precedence over inline profile settings
    enabled bool
    Whether advanced anti-malware inspection is enabled for the service policy
    profile str
    Built-in advanced anti-malware inspection profile to apply
    aamwprofileId String
    Organization-level advanced anti-malware profile ID; takes precedence over inline profile settings
    enabled Boolean
    Whether advanced anti-malware inspection is enabled for the service policy
    profile String
    Built-in advanced anti-malware inspection profile to apply

    ServicepolicyAntivirus, ServicepolicyAntivirusArgs

    AvprofileId string
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    Enabled bool
    Whether antivirus inspection is enabled for the service policy
    Profile string
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    AvprofileId string
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    Enabled bool
    Whether antivirus inspection is enabled for the service policy
    Profile string
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofile_id string
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled bool
    Whether antivirus inspection is enabled for the service policy
    profile string
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofileId String
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled Boolean
    Whether antivirus inspection is enabled for the service policy
    profile String
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofileId string
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled boolean
    Whether antivirus inspection is enabled for the service policy
    profile string
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofile_id str
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled bool
    Whether antivirus inspection is enabled for the service policy
    profile str
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofileId String
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled Boolean
    Whether antivirus inspection is enabled for the service policy
    profile String
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key

    ServicepolicyAppqoe, ServicepolicyAppqoeArgs

    Enabled bool
    Whether application QoE is enabled for the service policy
    Enabled bool
    Whether application QoE is enabled for the service policy
    enabled bool
    Whether application QoE is enabled for the service policy
    enabled Boolean
    Whether application QoE is enabled for the service policy
    enabled boolean
    Whether application QoE is enabled for the service policy
    enabled bool
    Whether application QoE is enabled for the service policy
    enabled Boolean
    Whether application QoE is enabled for the service policy

    ServicepolicyEwf, ServicepolicyEwfArgs

    AlertOnly bool
    Whether matching enhanced web filtering traffic is logged without being blocked
    BlockMessage string
    Message returned when enhanced web filtering blocks a request
    Enabled bool
    Whether this enhanced web filtering rule is enabled
    Profile string
    Enhanced web filtering profile applied by this rule
    AlertOnly bool
    Whether matching enhanced web filtering traffic is logged without being blocked
    BlockMessage string
    Message returned when enhanced web filtering blocks a request
    Enabled bool
    Whether this enhanced web filtering rule is enabled
    Profile string
    Enhanced web filtering profile applied by this rule
    alert_only bool
    Whether matching enhanced web filtering traffic is logged without being blocked
    block_message string
    Message returned when enhanced web filtering blocks a request
    enabled bool
    Whether this enhanced web filtering rule is enabled
    profile string
    Enhanced web filtering profile applied by this rule
    alertOnly Boolean
    Whether matching enhanced web filtering traffic is logged without being blocked
    blockMessage String
    Message returned when enhanced web filtering blocks a request
    enabled Boolean
    Whether this enhanced web filtering rule is enabled
    profile String
    Enhanced web filtering profile applied by this rule
    alertOnly boolean
    Whether matching enhanced web filtering traffic is logged without being blocked
    blockMessage string
    Message returned when enhanced web filtering blocks a request
    enabled boolean
    Whether this enhanced web filtering rule is enabled
    profile string
    Enhanced web filtering profile applied by this rule
    alert_only bool
    Whether matching enhanced web filtering traffic is logged without being blocked
    block_message str
    Message returned when enhanced web filtering blocks a request
    enabled bool
    Whether this enhanced web filtering rule is enabled
    profile str
    Enhanced web filtering profile applied by this rule
    alertOnly Boolean
    Whether matching enhanced web filtering traffic is logged without being blocked
    blockMessage String
    Message returned when enhanced web filtering blocks a request
    enabled Boolean
    Whether this enhanced web filtering rule is enabled
    profile String
    Enhanced web filtering profile applied by this rule

    ServicepolicyIdp, ServicepolicyIdpArgs

    AlertOnly bool
    Whether to alert without enforcing IDP prevention actions
    Enabled bool
    Whether IDP inspection is enabled for the policy
    IdpprofileId string
    org_level IDP Profile can be used, this takes precedence over profile
    Profile string
    enum: Custom, strict (default), standard or keys from idp_profiles
    AlertOnly bool
    Whether to alert without enforcing IDP prevention actions
    Enabled bool
    Whether IDP inspection is enabled for the policy
    IdpprofileId string
    org_level IDP Profile can be used, this takes precedence over profile
    Profile string
    enum: Custom, strict (default), standard or keys from idp_profiles
    alert_only bool
    Whether to alert without enforcing IDP prevention actions
    enabled bool
    Whether IDP inspection is enabled for the policy
    idpprofile_id string
    org_level IDP Profile can be used, this takes precedence over profile
    profile string
    enum: Custom, strict (default), standard or keys from idp_profiles
    alertOnly Boolean
    Whether to alert without enforcing IDP prevention actions
    enabled Boolean
    Whether IDP inspection is enabled for the policy
    idpprofileId String
    org_level IDP Profile can be used, this takes precedence over profile
    profile String
    enum: Custom, strict (default), standard or keys from idp_profiles
    alertOnly boolean
    Whether to alert without enforcing IDP prevention actions
    enabled boolean
    Whether IDP inspection is enabled for the policy
    idpprofileId string
    org_level IDP Profile can be used, this takes precedence over profile
    profile string
    enum: Custom, strict (default), standard or keys from idp_profiles
    alert_only bool
    Whether to alert without enforcing IDP prevention actions
    enabled bool
    Whether IDP inspection is enabled for the policy
    idpprofile_id str
    org_level IDP Profile can be used, this takes precedence over profile
    profile str
    enum: Custom, strict (default), standard or keys from idp_profiles
    alertOnly Boolean
    Whether to alert without enforcing IDP prevention actions
    enabled Boolean
    Whether IDP inspection is enabled for the policy
    idpprofileId String
    org_level IDP Profile can be used, this takes precedence over profile
    profile String
    enum: Custom, strict (default), standard or keys from idp_profiles

    ServicepolicySslProxy, ServicepolicySslProxyArgs

    CiphersCategory string
    Allowed cipher strength category for SSL proxy inspection
    Enabled bool
    Whether SSL proxy inspection is enabled for the service policy
    CiphersCategory string
    Allowed cipher strength category for SSL proxy inspection
    Enabled bool
    Whether SSL proxy inspection is enabled for the service policy
    ciphers_category string
    Allowed cipher strength category for SSL proxy inspection
    enabled bool
    Whether SSL proxy inspection is enabled for the service policy
    ciphersCategory String
    Allowed cipher strength category for SSL proxy inspection
    enabled Boolean
    Whether SSL proxy inspection is enabled for the service policy
    ciphersCategory string
    Allowed cipher strength category for SSL proxy inspection
    enabled boolean
    Whether SSL proxy inspection is enabled for the service policy
    ciphers_category str
    Allowed cipher strength category for SSL proxy inspection
    enabled bool
    Whether SSL proxy inspection is enabled for the service policy
    ciphersCategory String
    Allowed cipher strength category for SSL proxy inspection
    enabled Boolean
    Whether SSL proxy inspection is enabled for the service policy

    Import

    Using pulumi import, import junipermist.org.Servicepolicy with: Org Service Policy can be imported by specifying the orgId and the servicepolicyId

    $ pulumi import junipermist:org/servicepolicy:Servicepolicy servicepolicy_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    junipermist pulumi/pulumi-junipermist
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mist Terraform Provider.
    junipermist logo
    Viewing docs for Juniper Mist v0.11.2
    published on Saturday, Jul 11, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-junipermist

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial