1. Packages
  2. Nsxt Provider
  3. API Docs
  4. PolicyIntrusionServicePolicy
nsxt 3.8.1 published on Wednesday, Apr 30, 2025 by vmware

nsxt.PolicyIntrusionServicePolicy

Explore with Pulumi AI

nsxt logo
nsxt 3.8.1 published on Wednesday, Apr 30, 2025 by vmware

    Create PolicyIntrusionServicePolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new PolicyIntrusionServicePolicy(name: string, args: PolicyIntrusionServicePolicyArgs, opts?: CustomResourceOptions);
    @overload
    def PolicyIntrusionServicePolicy(resource_name: str,
                                     args: PolicyIntrusionServicePolicyArgs,
                                     opts: Optional[ResourceOptions] = None)
    
    @overload
    def PolicyIntrusionServicePolicy(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     display_name: Optional[str] = None,
                                     comments: Optional[str] = None,
                                     context: Optional[PolicyIntrusionServicePolicyContextArgs] = None,
                                     description: Optional[str] = None,
                                     domain: Optional[str] = None,
                                     locked: Optional[bool] = None,
                                     nsx_id: Optional[str] = None,
                                     policy_intrusion_service_policy_id: Optional[str] = None,
                                     rules: Optional[Sequence[PolicyIntrusionServicePolicyRuleArgs]] = None,
                                     sequence_number: Optional[float] = None,
                                     stateful: Optional[bool] = None,
                                     tags: Optional[Sequence[PolicyIntrusionServicePolicyTagArgs]] = None)
    func NewPolicyIntrusionServicePolicy(ctx *Context, name string, args PolicyIntrusionServicePolicyArgs, opts ...ResourceOption) (*PolicyIntrusionServicePolicy, error)
    public PolicyIntrusionServicePolicy(string name, PolicyIntrusionServicePolicyArgs args, CustomResourceOptions? opts = null)
    public PolicyIntrusionServicePolicy(String name, PolicyIntrusionServicePolicyArgs args)
    public PolicyIntrusionServicePolicy(String name, PolicyIntrusionServicePolicyArgs args, CustomResourceOptions options)
    
    type: nsxt:PolicyIntrusionServicePolicy
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args PolicyIntrusionServicePolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PolicyIntrusionServicePolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PolicyIntrusionServicePolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PolicyIntrusionServicePolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PolicyIntrusionServicePolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var policyIntrusionServicePolicyResource = new Nsxt.PolicyIntrusionServicePolicy("policyIntrusionServicePolicyResource", new()
    {
        DisplayName = "string",
        Comments = "string",
        Context = new Nsxt.Inputs.PolicyIntrusionServicePolicyContextArgs
        {
            ProjectId = "string",
        },
        Description = "string",
        Domain = "string",
        Locked = false,
        NsxId = "string",
        PolicyIntrusionServicePolicyId = "string",
        Rules = new[]
        {
            new Nsxt.Inputs.PolicyIntrusionServicePolicyRuleArgs
            {
                DisplayName = "string",
                IdsProfiles = new[]
                {
                    "string",
                },
                NsxId = "string",
                Path = "string",
                Direction = "string",
                Disabled = false,
                DestinationGroups = new[]
                {
                    "string",
                },
                Description = "string",
                IpVersion = "string",
                LogLabel = "string",
                Logged = false,
                Profiles = new[]
                {
                    "string",
                },
                DestinationsExcluded = false,
                Action = "string",
                Notes = "string",
                Revision = 0,
                RuleId = 0,
                Scopes = new[]
                {
                    "string",
                },
                SequenceNumber = 0,
                ServiceEntries = new Nsxt.Inputs.PolicyIntrusionServicePolicyRuleServiceEntriesArgs
                {
                    AlgorithmEntries = new[]
                    {
                        new Nsxt.Inputs.PolicyIntrusionServicePolicyRuleServiceEntriesAlgorithmEntryArgs
                        {
                            Algorithm = "string",
                            DestinationPort = "string",
                            Description = "string",
                            DisplayName = "string",
                            SourcePorts = new[]
                            {
                                "string",
                            },
                        },
                    },
                    EtherTypeEntries = new[]
                    {
                        new Nsxt.Inputs.PolicyIntrusionServicePolicyRuleServiceEntriesEtherTypeEntryArgs
                        {
                            EtherType = 0,
                            Description = "string",
                            DisplayName = "string",
                        },
                    },
                    IcmpEntries = new[]
                    {
                        new Nsxt.Inputs.PolicyIntrusionServicePolicyRuleServiceEntriesIcmpEntryArgs
                        {
                            Protocol = "string",
                            Description = "string",
                            DisplayName = "string",
                            IcmpCode = "string",
                            IcmpType = "string",
                        },
                    },
                    IgmpEntries = new[]
                    {
                        new Nsxt.Inputs.PolicyIntrusionServicePolicyRuleServiceEntriesIgmpEntryArgs
                        {
                            Description = "string",
                            DisplayName = "string",
                        },
                    },
                    IpProtocolEntries = new[]
                    {
                        new Nsxt.Inputs.PolicyIntrusionServicePolicyRuleServiceEntriesIpProtocolEntryArgs
                        {
                            Protocol = 0,
                            Description = "string",
                            DisplayName = "string",
                        },
                    },
                    L4PortSetEntries = new[]
                    {
                        new Nsxt.Inputs.PolicyIntrusionServicePolicyRuleServiceEntriesL4PortSetEntryArgs
                        {
                            Protocol = "string",
                            Description = "string",
                            DestinationPorts = new[]
                            {
                                "string",
                            },
                            DisplayName = "string",
                            SourcePorts = new[]
                            {
                                "string",
                            },
                        },
                    },
                },
                Services = new[]
                {
                    "string",
                },
                SourceGroups = new[]
                {
                    "string",
                },
                SourcesExcluded = false,
                Tags = new[]
                {
                    new Nsxt.Inputs.PolicyIntrusionServicePolicyRuleTagArgs
                    {
                        Scope = "string",
                        Tag = "string",
                    },
                },
            },
        },
        SequenceNumber = 0,
        Stateful = false,
        Tags = new[]
        {
            new Nsxt.Inputs.PolicyIntrusionServicePolicyTagArgs
            {
                Scope = "string",
                Tag = "string",
            },
        },
    });
    
    example, err := nsxt.NewPolicyIntrusionServicePolicy(ctx, "policyIntrusionServicePolicyResource", &nsxt.PolicyIntrusionServicePolicyArgs{
    	DisplayName: pulumi.String("string"),
    	Comments:    pulumi.String("string"),
    	Context: &nsxt.PolicyIntrusionServicePolicyContextArgs{
    		ProjectId: pulumi.String("string"),
    	},
    	Description:                    pulumi.String("string"),
    	Domain:                         pulumi.String("string"),
    	Locked:                         pulumi.Bool(false),
    	NsxId:                          pulumi.String("string"),
    	PolicyIntrusionServicePolicyId: pulumi.String("string"),
    	Rules: nsxt.PolicyIntrusionServicePolicyRuleArray{
    		&nsxt.PolicyIntrusionServicePolicyRuleArgs{
    			DisplayName: pulumi.String("string"),
    			IdsProfiles: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			NsxId:     pulumi.String("string"),
    			Path:      pulumi.String("string"),
    			Direction: pulumi.String("string"),
    			Disabled:  pulumi.Bool(false),
    			DestinationGroups: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			Description: pulumi.String("string"),
    			IpVersion:   pulumi.String("string"),
    			LogLabel:    pulumi.String("string"),
    			Logged:      pulumi.Bool(false),
    			Profiles: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			DestinationsExcluded: pulumi.Bool(false),
    			Action:               pulumi.String("string"),
    			Notes:                pulumi.String("string"),
    			Revision:             pulumi.Float64(0),
    			RuleId:               pulumi.Float64(0),
    			Scopes: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			SequenceNumber: pulumi.Float64(0),
    			ServiceEntries: &nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesArgs{
    				AlgorithmEntries: nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesAlgorithmEntryArray{
    					&nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesAlgorithmEntryArgs{
    						Algorithm:       pulumi.String("string"),
    						DestinationPort: pulumi.String("string"),
    						Description:     pulumi.String("string"),
    						DisplayName:     pulumi.String("string"),
    						SourcePorts: pulumi.StringArray{
    							pulumi.String("string"),
    						},
    					},
    				},
    				EtherTypeEntries: nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesEtherTypeEntryArray{
    					&nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesEtherTypeEntryArgs{
    						EtherType:   pulumi.Float64(0),
    						Description: pulumi.String("string"),
    						DisplayName: pulumi.String("string"),
    					},
    				},
    				IcmpEntries: nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesIcmpEntryArray{
    					&nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesIcmpEntryArgs{
    						Protocol:    pulumi.String("string"),
    						Description: pulumi.String("string"),
    						DisplayName: pulumi.String("string"),
    						IcmpCode:    pulumi.String("string"),
    						IcmpType:    pulumi.String("string"),
    					},
    				},
    				IgmpEntries: nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesIgmpEntryArray{
    					&nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesIgmpEntryArgs{
    						Description: pulumi.String("string"),
    						DisplayName: pulumi.String("string"),
    					},
    				},
    				IpProtocolEntries: nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesIpProtocolEntryArray{
    					&nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesIpProtocolEntryArgs{
    						Protocol:    pulumi.Float64(0),
    						Description: pulumi.String("string"),
    						DisplayName: pulumi.String("string"),
    					},
    				},
    				L4PortSetEntries: nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesL4PortSetEntryArray{
    					&nsxt.PolicyIntrusionServicePolicyRuleServiceEntriesL4PortSetEntryArgs{
    						Protocol:    pulumi.String("string"),
    						Description: pulumi.String("string"),
    						DestinationPorts: pulumi.StringArray{
    							pulumi.String("string"),
    						},
    						DisplayName: pulumi.String("string"),
    						SourcePorts: pulumi.StringArray{
    							pulumi.String("string"),
    						},
    					},
    				},
    			},
    			Services: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			SourceGroups: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			SourcesExcluded: pulumi.Bool(false),
    			Tags: nsxt.PolicyIntrusionServicePolicyRuleTagArray{
    				&nsxt.PolicyIntrusionServicePolicyRuleTagArgs{
    					Scope: pulumi.String("string"),
    					Tag:   pulumi.String("string"),
    				},
    			},
    		},
    	},
    	SequenceNumber: pulumi.Float64(0),
    	Stateful:       pulumi.Bool(false),
    	Tags: nsxt.PolicyIntrusionServicePolicyTagArray{
    		&nsxt.PolicyIntrusionServicePolicyTagArgs{
    			Scope: pulumi.String("string"),
    			Tag:   pulumi.String("string"),
    		},
    	},
    })
    
    var policyIntrusionServicePolicyResource = new PolicyIntrusionServicePolicy("policyIntrusionServicePolicyResource", PolicyIntrusionServicePolicyArgs.builder()
        .displayName("string")
        .comments("string")
        .context(PolicyIntrusionServicePolicyContextArgs.builder()
            .projectId("string")
            .build())
        .description("string")
        .domain("string")
        .locked(false)
        .nsxId("string")
        .policyIntrusionServicePolicyId("string")
        .rules(PolicyIntrusionServicePolicyRuleArgs.builder()
            .displayName("string")
            .idsProfiles("string")
            .nsxId("string")
            .path("string")
            .direction("string")
            .disabled(false)
            .destinationGroups("string")
            .description("string")
            .ipVersion("string")
            .logLabel("string")
            .logged(false)
            .profiles("string")
            .destinationsExcluded(false)
            .action("string")
            .notes("string")
            .revision(0)
            .ruleId(0)
            .scopes("string")
            .sequenceNumber(0)
            .serviceEntries(PolicyIntrusionServicePolicyRuleServiceEntriesArgs.builder()
                .algorithmEntries(PolicyIntrusionServicePolicyRuleServiceEntriesAlgorithmEntryArgs.builder()
                    .algorithm("string")
                    .destinationPort("string")
                    .description("string")
                    .displayName("string")
                    .sourcePorts("string")
                    .build())
                .etherTypeEntries(PolicyIntrusionServicePolicyRuleServiceEntriesEtherTypeEntryArgs.builder()
                    .etherType(0)
                    .description("string")
                    .displayName("string")
                    .build())
                .icmpEntries(PolicyIntrusionServicePolicyRuleServiceEntriesIcmpEntryArgs.builder()
                    .protocol("string")
                    .description("string")
                    .displayName("string")
                    .icmpCode("string")
                    .icmpType("string")
                    .build())
                .igmpEntries(PolicyIntrusionServicePolicyRuleServiceEntriesIgmpEntryArgs.builder()
                    .description("string")
                    .displayName("string")
                    .build())
                .ipProtocolEntries(PolicyIntrusionServicePolicyRuleServiceEntriesIpProtocolEntryArgs.builder()
                    .protocol(0)
                    .description("string")
                    .displayName("string")
                    .build())
                .l4PortSetEntries(PolicyIntrusionServicePolicyRuleServiceEntriesL4PortSetEntryArgs.builder()
                    .protocol("string")
                    .description("string")
                    .destinationPorts("string")
                    .displayName("string")
                    .sourcePorts("string")
                    .build())
                .build())
            .services("string")
            .sourceGroups("string")
            .sourcesExcluded(false)
            .tags(PolicyIntrusionServicePolicyRuleTagArgs.builder()
                .scope("string")
                .tag("string")
                .build())
            .build())
        .sequenceNumber(0)
        .stateful(false)
        .tags(PolicyIntrusionServicePolicyTagArgs.builder()
            .scope("string")
            .tag("string")
            .build())
        .build());
    
    policy_intrusion_service_policy_resource = nsxt.PolicyIntrusionServicePolicy("policyIntrusionServicePolicyResource",
        display_name="string",
        comments="string",
        context={
            "project_id": "string",
        },
        description="string",
        domain="string",
        locked=False,
        nsx_id="string",
        policy_intrusion_service_policy_id="string",
        rules=[{
            "display_name": "string",
            "ids_profiles": ["string"],
            "nsx_id": "string",
            "path": "string",
            "direction": "string",
            "disabled": False,
            "destination_groups": ["string"],
            "description": "string",
            "ip_version": "string",
            "log_label": "string",
            "logged": False,
            "profiles": ["string"],
            "destinations_excluded": False,
            "action": "string",
            "notes": "string",
            "revision": 0,
            "rule_id": 0,
            "scopes": ["string"],
            "sequence_number": 0,
            "service_entries": {
                "algorithm_entries": [{
                    "algorithm": "string",
                    "destination_port": "string",
                    "description": "string",
                    "display_name": "string",
                    "source_ports": ["string"],
                }],
                "ether_type_entries": [{
                    "ether_type": 0,
                    "description": "string",
                    "display_name": "string",
                }],
                "icmp_entries": [{
                    "protocol": "string",
                    "description": "string",
                    "display_name": "string",
                    "icmp_code": "string",
                    "icmp_type": "string",
                }],
                "igmp_entries": [{
                    "description": "string",
                    "display_name": "string",
                }],
                "ip_protocol_entries": [{
                    "protocol": 0,
                    "description": "string",
                    "display_name": "string",
                }],
                "l4_port_set_entries": [{
                    "protocol": "string",
                    "description": "string",
                    "destination_ports": ["string"],
                    "display_name": "string",
                    "source_ports": ["string"],
                }],
            },
            "services": ["string"],
            "source_groups": ["string"],
            "sources_excluded": False,
            "tags": [{
                "scope": "string",
                "tag": "string",
            }],
        }],
        sequence_number=0,
        stateful=False,
        tags=[{
            "scope": "string",
            "tag": "string",
        }])
    
    const policyIntrusionServicePolicyResource = new nsxt.PolicyIntrusionServicePolicy("policyIntrusionServicePolicyResource", {
        displayName: "string",
        comments: "string",
        context: {
            projectId: "string",
        },
        description: "string",
        domain: "string",
        locked: false,
        nsxId: "string",
        policyIntrusionServicePolicyId: "string",
        rules: [{
            displayName: "string",
            idsProfiles: ["string"],
            nsxId: "string",
            path: "string",
            direction: "string",
            disabled: false,
            destinationGroups: ["string"],
            description: "string",
            ipVersion: "string",
            logLabel: "string",
            logged: false,
            profiles: ["string"],
            destinationsExcluded: false,
            action: "string",
            notes: "string",
            revision: 0,
            ruleId: 0,
            scopes: ["string"],
            sequenceNumber: 0,
            serviceEntries: {
                algorithmEntries: [{
                    algorithm: "string",
                    destinationPort: "string",
                    description: "string",
                    displayName: "string",
                    sourcePorts: ["string"],
                }],
                etherTypeEntries: [{
                    etherType: 0,
                    description: "string",
                    displayName: "string",
                }],
                icmpEntries: [{
                    protocol: "string",
                    description: "string",
                    displayName: "string",
                    icmpCode: "string",
                    icmpType: "string",
                }],
                igmpEntries: [{
                    description: "string",
                    displayName: "string",
                }],
                ipProtocolEntries: [{
                    protocol: 0,
                    description: "string",
                    displayName: "string",
                }],
                l4PortSetEntries: [{
                    protocol: "string",
                    description: "string",
                    destinationPorts: ["string"],
                    displayName: "string",
                    sourcePorts: ["string"],
                }],
            },
            services: ["string"],
            sourceGroups: ["string"],
            sourcesExcluded: false,
            tags: [{
                scope: "string",
                tag: "string",
            }],
        }],
        sequenceNumber: 0,
        stateful: false,
        tags: [{
            scope: "string",
            tag: "string",
        }],
    });
    
    type: nsxt:PolicyIntrusionServicePolicy
    properties:
        comments: string
        context:
            projectId: string
        description: string
        displayName: string
        domain: string
        locked: false
        nsxId: string
        policyIntrusionServicePolicyId: string
        rules:
            - action: string
              description: string
              destinationGroups:
                - string
              destinationsExcluded: false
              direction: string
              disabled: false
              displayName: string
              idsProfiles:
                - string
              ipVersion: string
              logLabel: string
              logged: false
              notes: string
              nsxId: string
              path: string
              profiles:
                - string
              revision: 0
              ruleId: 0
              scopes:
                - string
              sequenceNumber: 0
              serviceEntries:
                algorithmEntries:
                    - algorithm: string
                      description: string
                      destinationPort: string
                      displayName: string
                      sourcePorts:
                        - string
                etherTypeEntries:
                    - description: string
                      displayName: string
                      etherType: 0
                icmpEntries:
                    - description: string
                      displayName: string
                      icmpCode: string
                      icmpType: string
                      protocol: string
                igmpEntries:
                    - description: string
                      displayName: string
                ipProtocolEntries:
                    - description: string
                      displayName: string
                      protocol: 0
                l4PortSetEntries:
                    - description: string
                      destinationPorts:
                        - string
                      displayName: string
                      protocol: string
                      sourcePorts:
                        - string
              services:
                - string
              sourceGroups:
                - string
              sourcesExcluded: false
              tags:
                - scope: string
                  tag: string
        sequenceNumber: 0
        stateful: false
        tags:
            - scope: string
              tag: string
    

    PolicyIntrusionServicePolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The PolicyIntrusionServicePolicy resource accepts the following input properties:

    DisplayName string
    Display name of the resource.
    Comments string
    Comments for IDS policy lock/unlock.
    Context PolicyIntrusionServicePolicyContext
    The context which the object belongs to
    Description string
    Description of the resource.
    Domain string
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    Locked bool
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    PolicyIntrusionServicePolicyId string
    ID of the IDS Policy.
    Rules List<PolicyIntrusionServicePolicyRule>
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    SequenceNumber double
    This field is used to resolve conflicts between IDS policies across domains.
    Stateful bool
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    Tags List<PolicyIntrusionServicePolicyTag>
    A list of scope + tag pairs to associate with this policy.
    DisplayName string
    Display name of the resource.
    Comments string
    Comments for IDS policy lock/unlock.
    Context PolicyIntrusionServicePolicyContextArgs
    The context which the object belongs to
    Description string
    Description of the resource.
    Domain string
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    Locked bool
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    PolicyIntrusionServicePolicyId string
    ID of the IDS Policy.
    Rules []PolicyIntrusionServicePolicyRuleArgs
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    SequenceNumber float64
    This field is used to resolve conflicts between IDS policies across domains.
    Stateful bool
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    Tags []PolicyIntrusionServicePolicyTagArgs
    A list of scope + tag pairs to associate with this policy.
    displayName String
    Display name of the resource.
    comments String
    Comments for IDS policy lock/unlock.
    context PolicyIntrusionServicePolicyContext
    The context which the object belongs to
    description String
    Description of the resource.
    domain String
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    locked Boolean
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    policyIntrusionServicePolicyId String
    ID of the IDS Policy.
    rules List<PolicyIntrusionServicePolicyRule>
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    sequenceNumber Double
    This field is used to resolve conflicts between IDS policies across domains.
    stateful Boolean
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    tags List<PolicyIntrusionServicePolicyTag>
    A list of scope + tag pairs to associate with this policy.
    displayName string
    Display name of the resource.
    comments string
    Comments for IDS policy lock/unlock.
    context PolicyIntrusionServicePolicyContext
    The context which the object belongs to
    description string
    Description of the resource.
    domain string
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    locked boolean
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    nsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    policyIntrusionServicePolicyId string
    ID of the IDS Policy.
    rules PolicyIntrusionServicePolicyRule[]
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    sequenceNumber number
    This field is used to resolve conflicts between IDS policies across domains.
    stateful boolean
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    tags PolicyIntrusionServicePolicyTag[]
    A list of scope + tag pairs to associate with this policy.
    display_name str
    Display name of the resource.
    comments str
    Comments for IDS policy lock/unlock.
    context PolicyIntrusionServicePolicyContextArgs
    The context which the object belongs to
    description str
    Description of the resource.
    domain str
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    locked bool
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    nsx_id str
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    policy_intrusion_service_policy_id str
    ID of the IDS Policy.
    rules Sequence[PolicyIntrusionServicePolicyRuleArgs]
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    sequence_number float
    This field is used to resolve conflicts between IDS policies across domains.
    stateful bool
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    tags Sequence[PolicyIntrusionServicePolicyTagArgs]
    A list of scope + tag pairs to associate with this policy.
    displayName String
    Display name of the resource.
    comments String
    Comments for IDS policy lock/unlock.
    context Property Map
    The context which the object belongs to
    description String
    Description of the resource.
    domain String
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    locked Boolean
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    policyIntrusionServicePolicyId String
    ID of the IDS Policy.
    rules List<Property Map>
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    sequenceNumber Number
    This field is used to resolve conflicts between IDS policies across domains.
    stateful Boolean
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    tags List<Property Map>
    A list of scope + tag pairs to associate with this policy.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the PolicyIntrusionServicePolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Path string
    The NSX policy path for this rule.
    Revision double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    Id string
    The provider-assigned unique ID for this managed resource.
    Path string
    The NSX policy path for this rule.
    Revision float64
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    id String
    The provider-assigned unique ID for this managed resource.
    path String
    The NSX policy path for this rule.
    revision Double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    id string
    The provider-assigned unique ID for this managed resource.
    path string
    The NSX policy path for this rule.
    revision number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    id str
    The provider-assigned unique ID for this managed resource.
    path str
    The NSX policy path for this rule.
    revision float
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    id String
    The provider-assigned unique ID for this managed resource.
    path String
    The NSX policy path for this rule.
    revision Number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.

    Look up Existing PolicyIntrusionServicePolicy Resource

    Get an existing PolicyIntrusionServicePolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: PolicyIntrusionServicePolicyState, opts?: CustomResourceOptions): PolicyIntrusionServicePolicy
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            comments: Optional[str] = None,
            context: Optional[PolicyIntrusionServicePolicyContextArgs] = None,
            description: Optional[str] = None,
            display_name: Optional[str] = None,
            domain: Optional[str] = None,
            locked: Optional[bool] = None,
            nsx_id: Optional[str] = None,
            path: Optional[str] = None,
            policy_intrusion_service_policy_id: Optional[str] = None,
            revision: Optional[float] = None,
            rules: Optional[Sequence[PolicyIntrusionServicePolicyRuleArgs]] = None,
            sequence_number: Optional[float] = None,
            stateful: Optional[bool] = None,
            tags: Optional[Sequence[PolicyIntrusionServicePolicyTagArgs]] = None) -> PolicyIntrusionServicePolicy
    func GetPolicyIntrusionServicePolicy(ctx *Context, name string, id IDInput, state *PolicyIntrusionServicePolicyState, opts ...ResourceOption) (*PolicyIntrusionServicePolicy, error)
    public static PolicyIntrusionServicePolicy Get(string name, Input<string> id, PolicyIntrusionServicePolicyState? state, CustomResourceOptions? opts = null)
    public static PolicyIntrusionServicePolicy get(String name, Output<String> id, PolicyIntrusionServicePolicyState state, CustomResourceOptions options)
    resources:  _:    type: nsxt:PolicyIntrusionServicePolicy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Comments string
    Comments for IDS policy lock/unlock.
    Context PolicyIntrusionServicePolicyContext
    The context which the object belongs to
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    Domain string
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    Locked bool
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    Path string
    The NSX policy path for this rule.
    PolicyIntrusionServicePolicyId string
    ID of the IDS Policy.
    Revision double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    Rules List<PolicyIntrusionServicePolicyRule>
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    SequenceNumber double
    This field is used to resolve conflicts between IDS policies across domains.
    Stateful bool
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    Tags List<PolicyIntrusionServicePolicyTag>
    A list of scope + tag pairs to associate with this policy.
    Comments string
    Comments for IDS policy lock/unlock.
    Context PolicyIntrusionServicePolicyContextArgs
    The context which the object belongs to
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    Domain string
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    Locked bool
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    Path string
    The NSX policy path for this rule.
    PolicyIntrusionServicePolicyId string
    ID of the IDS Policy.
    Revision float64
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    Rules []PolicyIntrusionServicePolicyRuleArgs
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    SequenceNumber float64
    This field is used to resolve conflicts between IDS policies across domains.
    Stateful bool
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    Tags []PolicyIntrusionServicePolicyTagArgs
    A list of scope + tag pairs to associate with this policy.
    comments String
    Comments for IDS policy lock/unlock.
    context PolicyIntrusionServicePolicyContext
    The context which the object belongs to
    description String
    Description of the resource.
    displayName String
    Display name of the resource.
    domain String
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    locked Boolean
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path String
    The NSX policy path for this rule.
    policyIntrusionServicePolicyId String
    ID of the IDS Policy.
    revision Double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    rules List<PolicyIntrusionServicePolicyRule>
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    sequenceNumber Double
    This field is used to resolve conflicts between IDS policies across domains.
    stateful Boolean
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    tags List<PolicyIntrusionServicePolicyTag>
    A list of scope + tag pairs to associate with this policy.
    comments string
    Comments for IDS policy lock/unlock.
    context PolicyIntrusionServicePolicyContext
    The context which the object belongs to
    description string
    Description of the resource.
    displayName string
    Display name of the resource.
    domain string
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    locked boolean
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    nsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path string
    The NSX policy path for this rule.
    policyIntrusionServicePolicyId string
    ID of the IDS Policy.
    revision number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    rules PolicyIntrusionServicePolicyRule[]
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    sequenceNumber number
    This field is used to resolve conflicts between IDS policies across domains.
    stateful boolean
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    tags PolicyIntrusionServicePolicyTag[]
    A list of scope + tag pairs to associate with this policy.
    comments str
    Comments for IDS policy lock/unlock.
    context PolicyIntrusionServicePolicyContextArgs
    The context which the object belongs to
    description str
    Description of the resource.
    display_name str
    Display name of the resource.
    domain str
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    locked bool
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    nsx_id str
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path str
    The NSX policy path for this rule.
    policy_intrusion_service_policy_id str
    ID of the IDS Policy.
    revision float
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    rules Sequence[PolicyIntrusionServicePolicyRuleArgs]
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    sequence_number float
    This field is used to resolve conflicts between IDS policies across domains.
    stateful bool
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    tags Sequence[PolicyIntrusionServicePolicyTagArgs]
    A list of scope + tag pairs to associate with this policy.
    comments String
    Comments for IDS policy lock/unlock.
    context Property Map
    The context which the object belongs to
    description String
    Description of the resource.
    displayName String
    Display name of the resource.
    domain String
    The domain to use for the resource. This domain must already exist. For VMware Cloud on AWS use cgw. If not specified, this field is default to default.
    locked Boolean
    Indicates whether the policy should be locked. If locked by a user, no other user would be able to modify this policy.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path String
    The NSX policy path for this rule.
    policyIntrusionServicePolicyId String
    ID of the IDS Policy.
    revision Number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    rules List<Property Map>
    A repeatable block to specify rules for the Policy. Each rule includes the following fields:
    sequenceNumber Number
    This field is used to resolve conflicts between IDS policies across domains.
    stateful Boolean
    If true, state of the network connects are tracked and a stateful packet inspection is performed. Default is true.
    tags List<Property Map>
    A list of scope + tag pairs to associate with this policy.

    Supporting Types

    PolicyIntrusionServicePolicyContext, PolicyIntrusionServicePolicyContextArgs

    ProjectId string
    The ID of the project which the object belongs to
    ProjectId string
    The ID of the project which the object belongs to
    projectId String
    The ID of the project which the object belongs to
    projectId string
    The ID of the project which the object belongs to
    project_id str
    The ID of the project which the object belongs to
    projectId String
    The ID of the project which the object belongs to

    PolicyIntrusionServicePolicyRule, PolicyIntrusionServicePolicyRuleArgs

    DisplayName string
    Display name of the resource.
    IdsProfiles List<string>
    Set of IDS profile paths relevant for this rule.
    Action string
    Rule action, one of DETECT, DETECT_PREVENT. Default is DETECT.
    Description string
    Description of the resource.
    DestinationGroups List<string>
    Set of group paths that serve as destination for this rule.
    DestinationsExcluded bool
    A boolean value indicating negation of destination groups.
    Direction string
    Traffic direction, one of IN, OUT or IN_OUT. Default is IN_OUT.
    Disabled bool
    Flag to disable this rule. Default is false.
    IpVersion string
    Version of IP protocol, one of IPV4, IPV6, IPV4_IPV6. Default is IPV4_IPV6.
    LogLabel string
    Additional information (string) which will be propagated to the rule syslog.
    Logged bool
    Flag to enable packet logging. Default is false.
    Notes string
    Additional notes on changes.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    Path string
    The NSX policy path for this rule.
    Profiles List<string>
    List of profiles
    Revision double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    RuleId double
    Unique positive number that is assigned by the system and is useful for debugging.
    Scopes List<string>
    Set of policy object paths where the rule is applied.
    SequenceNumber double
    This field is used to resolve conflicts between IDS policies across domains.
    ServiceEntries PolicyIntrusionServicePolicyRuleServiceEntries
    List of services to match
    Services List<string>
    Set of service paths to match.
    SourceGroups List<string>
    Set of group paths that serve as source for this rule.
    SourcesExcluded bool
    A boolean value indicating negation of source groups.
    Tags List<PolicyIntrusionServicePolicyRuleTag>
    A list of scope + tag pairs to associate with this Rule.
    DisplayName string
    Display name of the resource.
    IdsProfiles []string
    Set of IDS profile paths relevant for this rule.
    Action string
    Rule action, one of DETECT, DETECT_PREVENT. Default is DETECT.
    Description string
    Description of the resource.
    DestinationGroups []string
    Set of group paths that serve as destination for this rule.
    DestinationsExcluded bool
    A boolean value indicating negation of destination groups.
    Direction string
    Traffic direction, one of IN, OUT or IN_OUT. Default is IN_OUT.
    Disabled bool
    Flag to disable this rule. Default is false.
    IpVersion string
    Version of IP protocol, one of IPV4, IPV6, IPV4_IPV6. Default is IPV4_IPV6.
    LogLabel string
    Additional information (string) which will be propagated to the rule syslog.
    Logged bool
    Flag to enable packet logging. Default is false.
    Notes string
    Additional notes on changes.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    Path string
    The NSX policy path for this rule.
    Profiles []string
    List of profiles
    Revision float64
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    RuleId float64
    Unique positive number that is assigned by the system and is useful for debugging.
    Scopes []string
    Set of policy object paths where the rule is applied.
    SequenceNumber float64
    This field is used to resolve conflicts between IDS policies across domains.
    ServiceEntries PolicyIntrusionServicePolicyRuleServiceEntries
    List of services to match
    Services []string
    Set of service paths to match.
    SourceGroups []string
    Set of group paths that serve as source for this rule.
    SourcesExcluded bool
    A boolean value indicating negation of source groups.
    Tags []PolicyIntrusionServicePolicyRuleTag
    A list of scope + tag pairs to associate with this Rule.
    displayName String
    Display name of the resource.
    idsProfiles List<String>
    Set of IDS profile paths relevant for this rule.
    action String
    Rule action, one of DETECT, DETECT_PREVENT. Default is DETECT.
    description String
    Description of the resource.
    destinationGroups List<String>
    Set of group paths that serve as destination for this rule.
    destinationsExcluded Boolean
    A boolean value indicating negation of destination groups.
    direction String
    Traffic direction, one of IN, OUT or IN_OUT. Default is IN_OUT.
    disabled Boolean
    Flag to disable this rule. Default is false.
    ipVersion String
    Version of IP protocol, one of IPV4, IPV6, IPV4_IPV6. Default is IPV4_IPV6.
    logLabel String
    Additional information (string) which will be propagated to the rule syslog.
    logged Boolean
    Flag to enable packet logging. Default is false.
    notes String
    Additional notes on changes.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path String
    The NSX policy path for this rule.
    profiles List<String>
    List of profiles
    revision Double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    ruleId Double
    Unique positive number that is assigned by the system and is useful for debugging.
    scopes List<String>
    Set of policy object paths where the rule is applied.
    sequenceNumber Double
    This field is used to resolve conflicts between IDS policies across domains.
    serviceEntries PolicyIntrusionServicePolicyRuleServiceEntries
    List of services to match
    services List<String>
    Set of service paths to match.
    sourceGroups List<String>
    Set of group paths that serve as source for this rule.
    sourcesExcluded Boolean
    A boolean value indicating negation of source groups.
    tags List<PolicyIntrusionServicePolicyRuleTag>
    A list of scope + tag pairs to associate with this Rule.
    displayName string
    Display name of the resource.
    idsProfiles string[]
    Set of IDS profile paths relevant for this rule.
    action string
    Rule action, one of DETECT, DETECT_PREVENT. Default is DETECT.
    description string
    Description of the resource.
    destinationGroups string[]
    Set of group paths that serve as destination for this rule.
    destinationsExcluded boolean
    A boolean value indicating negation of destination groups.
    direction string
    Traffic direction, one of IN, OUT or IN_OUT. Default is IN_OUT.
    disabled boolean
    Flag to disable this rule. Default is false.
    ipVersion string
    Version of IP protocol, one of IPV4, IPV6, IPV4_IPV6. Default is IPV4_IPV6.
    logLabel string
    Additional information (string) which will be propagated to the rule syslog.
    logged boolean
    Flag to enable packet logging. Default is false.
    notes string
    Additional notes on changes.
    nsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path string
    The NSX policy path for this rule.
    profiles string[]
    List of profiles
    revision number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    ruleId number
    Unique positive number that is assigned by the system and is useful for debugging.
    scopes string[]
    Set of policy object paths where the rule is applied.
    sequenceNumber number
    This field is used to resolve conflicts between IDS policies across domains.
    serviceEntries PolicyIntrusionServicePolicyRuleServiceEntries
    List of services to match
    services string[]
    Set of service paths to match.
    sourceGroups string[]
    Set of group paths that serve as source for this rule.
    sourcesExcluded boolean
    A boolean value indicating negation of source groups.
    tags PolicyIntrusionServicePolicyRuleTag[]
    A list of scope + tag pairs to associate with this Rule.
    display_name str
    Display name of the resource.
    ids_profiles Sequence[str]
    Set of IDS profile paths relevant for this rule.
    action str
    Rule action, one of DETECT, DETECT_PREVENT. Default is DETECT.
    description str
    Description of the resource.
    destination_groups Sequence[str]
    Set of group paths that serve as destination for this rule.
    destinations_excluded bool
    A boolean value indicating negation of destination groups.
    direction str
    Traffic direction, one of IN, OUT or IN_OUT. Default is IN_OUT.
    disabled bool
    Flag to disable this rule. Default is false.
    ip_version str
    Version of IP protocol, one of IPV4, IPV6, IPV4_IPV6. Default is IPV4_IPV6.
    log_label str
    Additional information (string) which will be propagated to the rule syslog.
    logged bool
    Flag to enable packet logging. Default is false.
    notes str
    Additional notes on changes.
    nsx_id str
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path str
    The NSX policy path for this rule.
    profiles Sequence[str]
    List of profiles
    revision float
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    rule_id float
    Unique positive number that is assigned by the system and is useful for debugging.
    scopes Sequence[str]
    Set of policy object paths where the rule is applied.
    sequence_number float
    This field is used to resolve conflicts between IDS policies across domains.
    service_entries PolicyIntrusionServicePolicyRuleServiceEntries
    List of services to match
    services Sequence[str]
    Set of service paths to match.
    source_groups Sequence[str]
    Set of group paths that serve as source for this rule.
    sources_excluded bool
    A boolean value indicating negation of source groups.
    tags Sequence[PolicyIntrusionServicePolicyRuleTag]
    A list of scope + tag pairs to associate with this Rule.
    displayName String
    Display name of the resource.
    idsProfiles List<String>
    Set of IDS profile paths relevant for this rule.
    action String
    Rule action, one of DETECT, DETECT_PREVENT. Default is DETECT.
    description String
    Description of the resource.
    destinationGroups List<String>
    Set of group paths that serve as destination for this rule.
    destinationsExcluded Boolean
    A boolean value indicating negation of destination groups.
    direction String
    Traffic direction, one of IN, OUT or IN_OUT. Default is IN_OUT.
    disabled Boolean
    Flag to disable this rule. Default is false.
    ipVersion String
    Version of IP protocol, one of IPV4, IPV6, IPV4_IPV6. Default is IPV4_IPV6.
    logLabel String
    Additional information (string) which will be propagated to the rule syslog.
    logged Boolean
    Flag to enable packet logging. Default is false.
    notes String
    Additional notes on changes.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path String
    The NSX policy path for this rule.
    profiles List<String>
    List of profiles
    revision Number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    ruleId Number
    Unique positive number that is assigned by the system and is useful for debugging.
    scopes List<String>
    Set of policy object paths where the rule is applied.
    sequenceNumber Number
    This field is used to resolve conflicts between IDS policies across domains.
    serviceEntries Property Map
    List of services to match
    services List<String>
    Set of service paths to match.
    sourceGroups List<String>
    Set of group paths that serve as source for this rule.
    sourcesExcluded Boolean
    A boolean value indicating negation of source groups.
    tags List<Property Map>
    A list of scope + tag pairs to associate with this Rule.

    PolicyIntrusionServicePolicyRuleServiceEntries, PolicyIntrusionServicePolicyRuleServiceEntriesArgs

    algorithmEntries List<Property Map>
    Algorithm type service entry
    etherTypeEntries List<Property Map>
    Ether type service entry
    icmpEntries List<Property Map>
    ICMP type service entry
    igmpEntries List<Property Map>
    IGMP type service entry
    ipProtocolEntries List<Property Map>
    IP Protocol type service entry
    l4PortSetEntries List<Property Map>
    L4 port set type service entry

    PolicyIntrusionServicePolicyRuleServiceEntriesAlgorithmEntry, PolicyIntrusionServicePolicyRuleServiceEntriesAlgorithmEntryArgs

    Algorithm string
    Algorithm
    DestinationPort string
    A single destination port
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    SourcePorts List<string>
    Set of source ports or ranges
    Algorithm string
    Algorithm
    DestinationPort string
    A single destination port
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    SourcePorts []string
    Set of source ports or ranges
    algorithm String
    Algorithm
    destinationPort String
    A single destination port
    description String
    Description of the resource.
    displayName String
    Display name of the resource.
    sourcePorts List<String>
    Set of source ports or ranges
    algorithm string
    Algorithm
    destinationPort string
    A single destination port
    description string
    Description of the resource.
    displayName string
    Display name of the resource.
    sourcePorts string[]
    Set of source ports or ranges
    algorithm str
    Algorithm
    destination_port str
    A single destination port
    description str
    Description of the resource.
    display_name str
    Display name of the resource.
    source_ports Sequence[str]
    Set of source ports or ranges
    algorithm String
    Algorithm
    destinationPort String
    A single destination port
    description String
    Description of the resource.
    displayName String
    Display name of the resource.
    sourcePorts List<String>
    Set of source ports or ranges

    PolicyIntrusionServicePolicyRuleServiceEntriesEtherTypeEntry, PolicyIntrusionServicePolicyRuleServiceEntriesEtherTypeEntryArgs

    EtherType double
    Type of the encapsulated protocol
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    EtherType float64
    Type of the encapsulated protocol
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    etherType Double
    Type of the encapsulated protocol
    description String
    Description of the resource.
    displayName String
    Display name of the resource.
    etherType number
    Type of the encapsulated protocol
    description string
    Description of the resource.
    displayName string
    Display name of the resource.
    ether_type float
    Type of the encapsulated protocol
    description str
    Description of the resource.
    display_name str
    Display name of the resource.
    etherType Number
    Type of the encapsulated protocol
    description String
    Description of the resource.
    displayName String
    Display name of the resource.

    PolicyIntrusionServicePolicyRuleServiceEntriesIcmpEntry, PolicyIntrusionServicePolicyRuleServiceEntriesIcmpEntryArgs

    Protocol string
    Version of ICMP protocol (ICMPv4/ICMPv6)
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    IcmpCode string
    ICMP message code
    IcmpType string
    ICMP message type
    Protocol string
    Version of ICMP protocol (ICMPv4/ICMPv6)
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    IcmpCode string
    ICMP message code
    IcmpType string
    ICMP message type
    protocol String
    Version of ICMP protocol (ICMPv4/ICMPv6)
    description String
    Description of the resource.
    displayName String
    Display name of the resource.
    icmpCode String
    ICMP message code
    icmpType String
    ICMP message type
    protocol string
    Version of ICMP protocol (ICMPv4/ICMPv6)
    description string
    Description of the resource.
    displayName string
    Display name of the resource.
    icmpCode string
    ICMP message code
    icmpType string
    ICMP message type
    protocol str
    Version of ICMP protocol (ICMPv4/ICMPv6)
    description str
    Description of the resource.
    display_name str
    Display name of the resource.
    icmp_code str
    ICMP message code
    icmp_type str
    ICMP message type
    protocol String
    Version of ICMP protocol (ICMPv4/ICMPv6)
    description String
    Description of the resource.
    displayName String
    Display name of the resource.
    icmpCode String
    ICMP message code
    icmpType String
    ICMP message type

    PolicyIntrusionServicePolicyRuleServiceEntriesIgmpEntry, PolicyIntrusionServicePolicyRuleServiceEntriesIgmpEntryArgs

    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    description String
    Description of the resource.
    displayName String
    Display name of the resource.
    description string
    Description of the resource.
    displayName string
    Display name of the resource.
    description str
    Description of the resource.
    display_name str
    Display name of the resource.
    description String
    Description of the resource.
    displayName String
    Display name of the resource.

    PolicyIntrusionServicePolicyRuleServiceEntriesIpProtocolEntry, PolicyIntrusionServicePolicyRuleServiceEntriesIpProtocolEntryArgs

    Protocol double
    IP protocol number
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    Protocol float64
    IP protocol number
    Description string
    Description of the resource.
    DisplayName string
    Display name of the resource.
    protocol Double
    IP protocol number
    description String
    Description of the resource.
    displayName String
    Display name of the resource.
    protocol number
    IP protocol number
    description string
    Description of the resource.
    displayName string
    Display name of the resource.
    protocol float
    IP protocol number
    description str
    Description of the resource.
    display_name str
    Display name of the resource.
    protocol Number
    IP protocol number
    description String
    Description of the resource.
    displayName String
    Display name of the resource.

    PolicyIntrusionServicePolicyRuleServiceEntriesL4PortSetEntry, PolicyIntrusionServicePolicyRuleServiceEntriesL4PortSetEntryArgs

    Protocol string
    L4 Protocol
    Description string
    Description of the resource.
    DestinationPorts List<string>
    Set of destination ports
    DisplayName string
    Display name of the resource.
    SourcePorts List<string>
    Set of source ports
    Protocol string
    L4 Protocol
    Description string
    Description of the resource.
    DestinationPorts []string
    Set of destination ports
    DisplayName string
    Display name of the resource.
    SourcePorts []string
    Set of source ports
    protocol String
    L4 Protocol
    description String
    Description of the resource.
    destinationPorts List<String>
    Set of destination ports
    displayName String
    Display name of the resource.
    sourcePorts List<String>
    Set of source ports
    protocol string
    L4 Protocol
    description string
    Description of the resource.
    destinationPorts string[]
    Set of destination ports
    displayName string
    Display name of the resource.
    sourcePorts string[]
    Set of source ports
    protocol str
    L4 Protocol
    description str
    Description of the resource.
    destination_ports Sequence[str]
    Set of destination ports
    display_name str
    Display name of the resource.
    source_ports Sequence[str]
    Set of source ports
    protocol String
    L4 Protocol
    description String
    Description of the resource.
    destinationPorts List<String>
    Set of destination ports
    displayName String
    Display name of the resource.
    sourcePorts List<String>
    Set of source ports

    PolicyIntrusionServicePolicyRuleTag, PolicyIntrusionServicePolicyRuleTagArgs

    Scope string
    Set of policy object paths where the rule is applied.
    Tag string
    A list of scope + tag pairs to associate with this policy.
    Scope string
    Set of policy object paths where the rule is applied.
    Tag string
    A list of scope + tag pairs to associate with this policy.
    scope String
    Set of policy object paths where the rule is applied.
    tag String
    A list of scope + tag pairs to associate with this policy.
    scope string
    Set of policy object paths where the rule is applied.
    tag string
    A list of scope + tag pairs to associate with this policy.
    scope str
    Set of policy object paths where the rule is applied.
    tag str
    A list of scope + tag pairs to associate with this policy.
    scope String
    Set of policy object paths where the rule is applied.
    tag String
    A list of scope + tag pairs to associate with this policy.

    PolicyIntrusionServicePolicyTag, PolicyIntrusionServicePolicyTagArgs

    Scope string
    Set of policy object paths where the rule is applied.
    Tag string
    A list of scope + tag pairs to associate with this policy.
    Scope string
    Set of policy object paths where the rule is applied.
    Tag string
    A list of scope + tag pairs to associate with this policy.
    scope String
    Set of policy object paths where the rule is applied.
    tag String
    A list of scope + tag pairs to associate with this policy.
    scope string
    Set of policy object paths where the rule is applied.
    tag string
    A list of scope + tag pairs to associate with this policy.
    scope str
    Set of policy object paths where the rule is applied.
    tag str
    A list of scope + tag pairs to associate with this policy.
    scope String
    Set of policy object paths where the rule is applied.
    tag String
    A list of scope + tag pairs to associate with this policy.

    Package Details

    Repository
    nsxt vmware/terraform-provider-nsxt
    License
    Notes
    This Pulumi package is based on the nsxt Terraform Provider.
    nsxt logo
    nsxt 3.8.1 published on Wednesday, Apr 30, 2025 by vmware