Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Nutanix
  4. API Docs
  5. NetworkSecurityPolicyV2
Viewing docs for Nutanix v0.16.0
published on Tuesday, May 26, 2026 by Piers Karsenbarg
Schema (JSON)
pierskarsenbarg/pulumi-nutanix

nutanix.NetworkSecurityPolicyV2

nutanix logo
Viewing docs for Nutanix v0.16.0
published on Tuesday, May 26, 2026 by Piers Karsenbarg
Schema (JSON)
pierskarsenbarg/pulumi-nutanix

    Create a Network Security Policy

    Example

    import * as pulumi from "@pulumi/pulumi";
import * as nutanix from "@pierskarsenbarg/nutanix";

// Network Security Policy TWO_ENV_ISOLATION Rule
const isolation_nsp = new nutanix.NetworkSecurityPolicyV2("isolation-nsp", {
    name: "isolation_policy",
    description: "isolation policy example",
    state: "SAVE",
    type: "ISOLATION",
    rules: [{
        type: "TWO_ENV_ISOLATION",
        specs: [{
            twoEnvIsolationRuleSpecs: [{
                firstIsolationGroups: ["ba250e3e-1db1-4950-917f-a9e2ea35b8e3"],
                secondIsolationGroups: ["ab520e1d-4950-1db1-917f-a9e2ea35b8e3"],
            }],
        }],
    }],
    isHitlogEnabled: true,
});
// Network Security Policy with GLOBAL scope (VMs resolved by category across all VPCs)
const global_nsp = new nutanix.NetworkSecurityPolicyV2("global-nsp", {
    name: "my-global-policy",
    description: "Application policy with global scope",
    state: "SAVE",
    type: "APPLICATION",
    scope: "GLOBAL",
    rules: [{
        type: "APPLICATION",
        specs: [{
            applicationRuleSpecs: [{
                securedGroupCategoryReferences: [example.id],
                serviceGroupReferences: [exampleNutanixServiceGroupsV2.id],
                srcAddressGroupReferences: [exampleNutanixAddressGroupsV2.id],
            }],
        }],
    }],
});

    import pulumi
import pulumi_nutanix as nutanix

# Network Security Policy TWO_ENV_ISOLATION Rule
isolation_nsp = nutanix.NetworkSecurityPolicyV2("isolation-nsp",
    name="isolation_policy",
    description="isolation policy example",
    state="SAVE",
    type="ISOLATION",
    rules=[{
        "type": "TWO_ENV_ISOLATION",
        "specs": [{
            "two_env_isolation_rule_specs": [{
                "first_isolation_groups": ["ba250e3e-1db1-4950-917f-a9e2ea35b8e3"],
                "second_isolation_groups": ["ab520e1d-4950-1db1-917f-a9e2ea35b8e3"],
            }],
        }],
    }],
    is_hitlog_enabled=True)
# Network Security Policy with GLOBAL scope (VMs resolved by category across all VPCs)
global_nsp = nutanix.NetworkSecurityPolicyV2("global-nsp",
    name="my-global-policy",
    description="Application policy with global scope",
    state="SAVE",
    type="APPLICATION",
    scope="GLOBAL",
    rules=[{
        "type": "APPLICATION",
        "specs": [{
            "application_rule_specs": [{
                "secured_group_category_references": [example["id"]],
                "service_group_references": [example_nutanix_service_groups_v2["id"]],
                "src_address_group_references": [example_nutanix_address_groups_v2["id"]],
            }],
        }],
    }])

    package main

import (
	"github.com/pierskarsenbarg/pulumi-nutanix/sdk/go/nutanix"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Network Security Policy TWO_ENV_ISOLATION Rule
		_, err := nutanix.NewNetworkSecurityPolicyV2(ctx, "isolation-nsp", &nutanix.NetworkSecurityPolicyV2Args{
			Name:        pulumi.String("isolation_policy"),
			Description: pulumi.String("isolation policy example"),
			State:       pulumi.String("SAVE"),
			Type:        pulumi.String("ISOLATION"),
			Rules: nutanix.NetworkSecurityPolicyV2RuleArray{
				&nutanix.NetworkSecurityPolicyV2RuleArgs{
					Type: pulumi.String("TWO_ENV_ISOLATION"),
					Specs: nutanix.NetworkSecurityPolicyV2RuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecArgs{
							TwoEnvIsolationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs{
									FirstIsolationGroups: pulumi.StringArray{
										pulumi.String("ba250e3e-1db1-4950-917f-a9e2ea35b8e3"),
									},
									SecondIsolationGroups: pulumi.StringArray{
										pulumi.String("ab520e1d-4950-1db1-917f-a9e2ea35b8e3"),
									},
								},
							},
						},
					},
				},
			},
			IsHitlogEnabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		// Network Security Policy with GLOBAL scope (VMs resolved by category across all VPCs)
		_, err = nutanix.NewNetworkSecurityPolicyV2(ctx, "global-nsp", &nutanix.NetworkSecurityPolicyV2Args{
			Name:        pulumi.String("my-global-policy"),
			Description: pulumi.String("Application policy with global scope"),
			State:       pulumi.String("SAVE"),
			Type:        pulumi.String("APPLICATION"),
			Scope:       pulumi.String("GLOBAL"),
			Rules: nutanix.NetworkSecurityPolicyV2RuleArray{
				&nutanix.NetworkSecurityPolicyV2RuleArgs{
					Type: pulumi.String("APPLICATION"),
					Specs: nutanix.NetworkSecurityPolicyV2RuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecArgs{
							ApplicationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs{
									SecuredGroupCategoryReferences: pulumi.StringArray{
										example.Id,
									},
									ServiceGroupReferences: pulumi.StringArray{
										exampleNutanixServiceGroupsV2.Id,
									},
									SrcAddressGroupReferences: pulumi.StringArray{
										exampleNutanixAddressGroupsV2.Id,
									},
								},
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Nutanix = PiersKarsenbarg.Nutanix;

return await Deployment.RunAsync(() => 
{
    // Network Security Policy TWO_ENV_ISOLATION Rule
    var isolation_nsp = new Nutanix.NetworkSecurityPolicyV2("isolation-nsp", new()
    {
        Name = "isolation_policy",
        Description = "isolation policy example",
        State = "SAVE",
        Type = "ISOLATION",
        Rules = new[]
        {
            new Nutanix.Inputs.NetworkSecurityPolicyV2RuleArgs
            {
                Type = "TWO_ENV_ISOLATION",
                Specs = new[]
                {
                    new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecArgs
                    {
                        TwoEnvIsolationRuleSpecs = new[]
                        {
                            new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs
                            {
                                FirstIsolationGroups = new[]
                                {
                                    "ba250e3e-1db1-4950-917f-a9e2ea35b8e3",
                                },
                                SecondIsolationGroups = new[]
                                {
                                    "ab520e1d-4950-1db1-917f-a9e2ea35b8e3",
                                },
                            },
                        },
                    },
                },
            },
        },
        IsHitlogEnabled = true,
    });

    // Network Security Policy with GLOBAL scope (VMs resolved by category across all VPCs)
    var global_nsp = new Nutanix.NetworkSecurityPolicyV2("global-nsp", new()
    {
        Name = "my-global-policy",
        Description = "Application policy with global scope",
        State = "SAVE",
        Type = "APPLICATION",
        Scope = "GLOBAL",
        Rules = new[]
        {
            new Nutanix.Inputs.NetworkSecurityPolicyV2RuleArgs
            {
                Type = "APPLICATION",
                Specs = new[]
                {
                    new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecArgs
                    {
                        ApplicationRuleSpecs = new[]
                        {
                            new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs
                            {
                                SecuredGroupCategoryReferences = new[]
                                {
                                    example.Id,
                                },
                                ServiceGroupReferences = new[]
                                {
                                    exampleNutanixServiceGroupsV2.Id,
                                },
                                SrcAddressGroupReferences = new[]
                                {
                                    exampleNutanixAddressGroupsV2.Id,
                                },
                            },
                        },
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nutanix.NetworkSecurityPolicyV2;
import com.pulumi.nutanix.NetworkSecurityPolicyV2Args;
import com.pulumi.nutanix.inputs.NetworkSecurityPolicyV2RuleArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Network Security Policy TWO_ENV_ISOLATION Rule
        var isolation_nsp = new NetworkSecurityPolicyV2("isolation-nsp", NetworkSecurityPolicyV2Args.builder()
            .name("isolation_policy")
            .description("isolation policy example")
            .state("SAVE")
            .type("ISOLATION")
            .rules(NetworkSecurityPolicyV2RuleArgs.builder()
                .type("TWO_ENV_ISOLATION")
                .specs(NetworkSecurityPolicyV2RuleSpecArgs.builder()
                    .twoEnvIsolationRuleSpecs(NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs.builder()
                        .firstIsolationGroups("ba250e3e-1db1-4950-917f-a9e2ea35b8e3")
                        .secondIsolationGroups("ab520e1d-4950-1db1-917f-a9e2ea35b8e3")
                        .build())
                    .build())
                .build())
            .isHitlogEnabled(true)
            .build());

        // Network Security Policy with GLOBAL scope (VMs resolved by category across all VPCs)
        var global_nsp = new NetworkSecurityPolicyV2("global-nsp", NetworkSecurityPolicyV2Args.builder()
            .name("my-global-policy")
            .description("Application policy with global scope")
            .state("SAVE")
            .type("APPLICATION")
            .scope("GLOBAL")
            .rules(NetworkSecurityPolicyV2RuleArgs.builder()
                .type("APPLICATION")
                .specs(NetworkSecurityPolicyV2RuleSpecArgs.builder()
                    .applicationRuleSpecs(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs.builder()
                        .securedGroupCategoryReferences(example.id())
                        .serviceGroupReferences(exampleNutanixServiceGroupsV2.id())
                        .srcAddressGroupReferences(exampleNutanixAddressGroupsV2.id())
                        .build())
                    .build())
                .build())
            .build());

    }
}

    resources:
  # Network Security Policy TWO_ENV_ISOLATION Rule
  isolation-nsp:
    type: nutanix:NetworkSecurityPolicyV2
    properties:
      name: isolation_policy
      description: isolation policy example
      state: SAVE
      type: ISOLATION
      rules:
        - type: TWO_ENV_ISOLATION
          specs:
            - twoEnvIsolationRuleSpecs:
                - firstIsolationGroups:
                    - ba250e3e-1db1-4950-917f-a9e2ea35b8e3
                  secondIsolationGroups:
                    - ab520e1d-4950-1db1-917f-a9e2ea35b8e3
      isHitlogEnabled: true
  # Network Security Policy with GLOBAL scope (VMs resolved by category across all VPCs)
  global-nsp:
    type: nutanix:NetworkSecurityPolicyV2
    properties:
      name: my-global-policy
      description: Application policy with global scope
      state: SAVE
      type: APPLICATION
      scope: GLOBAL
      rules:
        - type: APPLICATION
          specs:
            - applicationRuleSpecs:
                - securedGroupCategoryReferences:
                    - ${example.id}
                  serviceGroupReferences:
                    - ${exampleNutanixServiceGroupsV2.id}
                  srcAddressGroupReferences:
                    - ${exampleNutanixAddressGroupsV2.id}

    pulumi {
  required_providers {
    nutanix = {
      source = "pulumi/nutanix"
    }
  }
}

# Network Security Policy TWO_ENV_ISOLATION Rule
resource "nutanix_networksecuritypolicyv2" "isolation-nsp" {
  name        = "isolation_policy"
  description = "isolation policy example"
  state       = "SAVE"
  type        = "ISOLATION"
  rules {
    type = "TWO_ENV_ISOLATION"
    specs {
      two_env_isolation_rule_specs {
        first_isolation_groups  = ["ba250e3e-1db1-4950-917f-a9e2ea35b8e3"]
        second_isolation_groups = ["ab520e1d-4950-1db1-917f-a9e2ea35b8e3"]
      }
    }
  }
  is_hitlog_enabled = true
}
# Network Security Policy with GLOBAL scope (VMs resolved by category across all VPCs)
resource "nutanix_networksecuritypolicyv2" "global-nsp" {
  name        = "my-global-policy"
  description = "Application policy with global scope"
  state       = "SAVE"
  type        = "APPLICATION"
  scope       = "GLOBAL"
  rules {
    type = "APPLICATION"
    specs {
      application_rule_specs {
        secured_group_category_references = [example.id]
        service_group_references          = [exampleNutanixServiceGroupsV2.id]
        src_address_group_references      = [exampleNutanixAddressGroupsV2.id]
      }
    }
  }
}

    Create NetworkSecurityPolicyV2 Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new NetworkSecurityPolicyV2(name: string, args: NetworkSecurityPolicyV2Args, opts?: CustomResourceOptions);
    @overload
def NetworkSecurityPolicyV2(resource_name: str,
                            args: NetworkSecurityPolicyV2Args,
                            opts: Optional[ResourceOptions] = None)

@overload
def NetworkSecurityPolicyV2(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            type: Optional[str] = None,
                            description: Optional[str] = None,
                            is_hitlog_enabled: Optional[bool] = None,
                            is_ipv6_traffic_allowed: Optional[bool] = None,
                            name: Optional[str] = None,
                            rules: Optional[Sequence[NetworkSecurityPolicyV2RuleArgs]] = None,
                            scope: Optional[str] = None,
                            state: Optional[str] = None,
                            vpc_references: Optional[Sequence[str]] = None)
    func NewNetworkSecurityPolicyV2(ctx *Context, name string, args NetworkSecurityPolicyV2Args, opts ...ResourceOption) (*NetworkSecurityPolicyV2, error)
    public NetworkSecurityPolicyV2(string name, NetworkSecurityPolicyV2Args args, CustomResourceOptions? opts = null)
    public NetworkSecurityPolicyV2(String name, NetworkSecurityPolicyV2Args args)
public NetworkSecurityPolicyV2(String name, NetworkSecurityPolicyV2Args args, CustomResourceOptions options)

    type: nutanix:NetworkSecurityPolicyV2
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "nutanix_networksecuritypolicyv2" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var networkSecurityPolicyV2Resource = new Nutanix.NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource", new()
{
    Type = "string",
    Description = "string",
    IsHitlogEnabled = false,
    IsIpv6TrafficAllowed = false,
    Name = "string",
    Rules = new[]
    {
        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleArgs
        {
            Specs = new[]
            {
                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecArgs
                {
                    ApplicationRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs
                        {
                            SecuredGroupCategoryReferences = new[]
                            {
                                "string",
                            },
                            SecuredGroupCategoryAssociatedEntityType = "string",
                            SecuredGroupEntityGroupReference = "string",
                            DestCategoryReferences = new[]
                            {
                                "string",
                            },
                            DestEntityGroupReference = "string",
                            DestSubnets = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs
                                {
                                    PrefixLength = 0,
                                    Value = "string",
                                },
                            },
                            IcmpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs
                                {
                                    Code = 0,
                                    IsAllAllowed = false,
                                    Type = 0,
                                },
                            },
                            IsAllProtocolAllowed = false,
                            NetworkFunctionChainReference = "string",
                            NetworkFunctionReference = "string",
                            DestAddressGroupReferences = new[]
                            {
                                "string",
                            },
                            DestCategoryAssociatedEntityType = "string",
                            ServiceGroupReferences = new[]
                            {
                                "string",
                            },
                            DestAllowSpec = "string",
                            SrcAddressGroupReferences = new[]
                            {
                                "string",
                            },
                            SrcAllowSpec = "string",
                            SrcCategoryAssociatedEntityType = "string",
                            SrcCategoryReferences = new[]
                            {
                                "string",
                            },
                            SrcEntityGroupReference = "string",
                            SrcSubnets = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs
                                {
                                    PrefixLength = 0,
                                    Value = "string",
                                },
                            },
                            TcpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs
                                {
                                    EndPort = 0,
                                    StartPort = 0,
                                },
                            },
                            UdpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs
                                {
                                    EndPort = 0,
                                    StartPort = 0,
                                },
                            },
                        },
                    },
                    IntraEntityGroupRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs
                        {
                            SecuredGroupAction = "string",
                            IcmpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpServiceArgs
                                {
                                    Code = 0,
                                    IsAllAllowed = false,
                                    Type = 0,
                                },
                            },
                            SecuredGroupCategoryAssociatedEntityType = "string",
                            SecuredGroupCategoryReferences = new[]
                            {
                                "string",
                            },
                            SecuredGroupEntityGroupReference = "string",
                            SecuredGroupServiceReferences = new[]
                            {
                                "string",
                            },
                            TcpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpServiceArgs
                                {
                                    EndPort = 0,
                                    StartPort = 0,
                                },
                            },
                            UdpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpServiceArgs
                                {
                                    EndPort = 0,
                                    StartPort = 0,
                                },
                            },
                        },
                    },
                    MultiEnvIsolationRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs
                        {
                            Specs = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs
                                {
                                    AllToAllIsolationGroups = new[]
                                    {
                                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs
                                        {
                                            IsolationGroups = new[]
                                            {
                                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs
                                                {
                                                    GroupCategoryReferences = new[]
                                                    {
                                                        "string",
                                                    },
                                                    GroupCategoryAssociatedEntityType = "string",
                                                    GroupEntityGroupReference = "string",
                                                },
                                            },
                                        },
                                    },
                                },
                            },
                        },
                    },
                    TwoEnvIsolationRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs
                        {
                            FirstIsolationGroups = new[]
                            {
                                "string",
                            },
                            SecondIsolationGroups = new[]
                            {
                                "string",
                            },
                        },
                    },
                },
            },
            Type = "string",
            Description = "string",
            ExtId = "string",
            Links = new[]
            {
                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleLinkArgs
                {
                    Href = "string",
                    Rel = "string",
                },
            },
        },
    },
    Scope = "string",
    State = "string",
    VpcReferences = new[]
    {
        "string",
    },
});

    example, err := nutanix.NewNetworkSecurityPolicyV2(ctx, "networkSecurityPolicyV2Resource", &nutanix.NetworkSecurityPolicyV2Args{
	Type:                 pulumi.String("string"),
	Description:          pulumi.String("string"),
	IsHitlogEnabled:      pulumi.Bool(false),
	IsIpv6TrafficAllowed: pulumi.Bool(false),
	Name:                 pulumi.String("string"),
	Rules: nutanix.NetworkSecurityPolicyV2RuleArray{
		&nutanix.NetworkSecurityPolicyV2RuleArgs{
			Specs: nutanix.NetworkSecurityPolicyV2RuleSpecArray{
				&nutanix.NetworkSecurityPolicyV2RuleSpecArgs{
					ApplicationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs{
							SecuredGroupCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SecuredGroupCategoryAssociatedEntityType: pulumi.String("string"),
							SecuredGroupEntityGroupReference:         pulumi.String("string"),
							DestCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							DestEntityGroupReference: pulumi.String("string"),
							DestSubnets: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs{
									PrefixLength: pulumi.Int(0),
									Value:        pulumi.String("string"),
								},
							},
							IcmpServices: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs{
									Code:         pulumi.Int(0),
									IsAllAllowed: pulumi.Bool(false),
									Type:         pulumi.Int(0),
								},
							},
							IsAllProtocolAllowed:          pulumi.Bool(false),
							NetworkFunctionChainReference: pulumi.String("string"),
							NetworkFunctionReference:      pulumi.String("string"),
							DestAddressGroupReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							DestCategoryAssociatedEntityType: pulumi.String("string"),
							ServiceGroupReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							DestAllowSpec: pulumi.String("string"),
							SrcAddressGroupReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SrcAllowSpec:                    pulumi.String("string"),
							SrcCategoryAssociatedEntityType: pulumi.String("string"),
							SrcCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SrcEntityGroupReference: pulumi.String("string"),
							SrcSubnets: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs{
									PrefixLength: pulumi.Int(0),
									Value:        pulumi.String("string"),
								},
							},
							TcpServices: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs{
									EndPort:   pulumi.Int(0),
									StartPort: pulumi.Int(0),
								},
							},
							UdpServices: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs{
									EndPort:   pulumi.Int(0),
									StartPort: pulumi.Int(0),
								},
							},
						},
					},
					IntraEntityGroupRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs{
							SecuredGroupAction: pulumi.String("string"),
							IcmpServices: nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpServiceArgs{
									Code:         pulumi.Int(0),
									IsAllAllowed: pulumi.Bool(false),
									Type:         pulumi.Int(0),
								},
							},
							SecuredGroupCategoryAssociatedEntityType: pulumi.String("string"),
							SecuredGroupCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SecuredGroupEntityGroupReference: pulumi.String("string"),
							SecuredGroupServiceReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							TcpServices: nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpServiceArgs{
									EndPort:   pulumi.Int(0),
									StartPort: pulumi.Int(0),
								},
							},
							UdpServices: nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpServiceArgs{
									EndPort:   pulumi.Int(0),
									StartPort: pulumi.Int(0),
								},
							},
						},
					},
					MultiEnvIsolationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs{
							Specs: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs{
									AllToAllIsolationGroups: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArray{
										&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs{
											IsolationGroups: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArray{
												&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs{
													GroupCategoryReferences: pulumi.StringArray{
														pulumi.String("string"),
													},
													GroupCategoryAssociatedEntityType: pulumi.String("string"),
													GroupEntityGroupReference:         pulumi.String("string"),
												},
											},
										},
									},
								},
							},
						},
					},
					TwoEnvIsolationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs{
							FirstIsolationGroups: pulumi.StringArray{
								pulumi.String("string"),
							},
							SecondIsolationGroups: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
				},
			},
			Type:        pulumi.String("string"),
			Description: pulumi.String("string"),
			ExtId:       pulumi.String("string"),
			Links: nutanix.NetworkSecurityPolicyV2RuleLinkArray{
				&nutanix.NetworkSecurityPolicyV2RuleLinkArgs{
					Href: pulumi.String("string"),
					Rel:  pulumi.String("string"),
				},
			},
		},
	},
	Scope: pulumi.String("string"),
	State: pulumi.String("string"),
	VpcReferences: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    resource "nutanix_networksecuritypolicyv2" "networkSecurityPolicyV2Resource" {
  type                    = "string"
  description             = "string"
  is_hitlog_enabled       = false
  is_ipv6_traffic_allowed = false
  name                    = "string"
  rules {
    specs {
      application_rule_specs {
        secured_group_category_references             = ["string"]
        secured_group_category_associated_entity_type = "string"
        secured_group_entity_group_reference          = "string"
        dest_category_references                      = ["string"]
        dest_entity_group_reference                   = "string"
        dest_subnets {
          prefix_length = 0
          value         = "string"
        }
        icmp_services {
          code           = 0
          is_all_allowed = false
          type           = 0
        }
        is_all_protocol_allowed              = false
        network_function_chain_reference     = "string"
        network_function_reference           = "string"
        dest_address_group_references        = ["string"]
        dest_category_associated_entity_type = "string"
        service_group_references             = ["string"]
        dest_allow_spec                      = "string"
        src_address_group_references         = ["string"]
        src_allow_spec                       = "string"
        src_category_associated_entity_type  = "string"
        src_category_references              = ["string"]
        src_entity_group_reference           = "string"
        src_subnets {
          prefix_length = 0
          value         = "string"
        }
        tcp_services {
          end_port   = 0
          start_port = 0
        }
        udp_services {
          end_port   = 0
          start_port = 0
        }
      }
      intra_entity_group_rule_specs {
        secured_group_action = "string"
        icmp_services {
          code           = 0
          is_all_allowed = false
          type           = 0
        }
        secured_group_category_associated_entity_type = "string"
        secured_group_category_references             = ["string"]
        secured_group_entity_group_reference          = "string"
        secured_group_service_references              = ["string"]
        tcp_services {
          end_port   = 0
          start_port = 0
        }
        udp_services {
          end_port   = 0
          start_port = 0
        }
      }
      multi_env_isolation_rule_specs {
        specs {
          all_to_all_isolation_groups {
            isolation_groups {
              group_category_references             = ["string"]
              group_category_associated_entity_type = "string"
              group_entity_group_reference          = "string"
            }
          }
        }
      }
      two_env_isolation_rule_specs {
        first_isolation_groups  = ["string"]
        second_isolation_groups = ["string"]
      }
    }
    type        = "string"
    description = "string"
    ext_id      = "string"
    links {
      href = "string"
      rel  = "string"
    }
  }
  scope          = "string"
  state          = "string"
  vpc_references = ["string"]
}

    var networkSecurityPolicyV2Resource = new NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource", NetworkSecurityPolicyV2Args.builder()
    .type("string")
    .description("string")
    .isHitlogEnabled(false)
    .isIpv6TrafficAllowed(false)
    .name("string")
    .rules(NetworkSecurityPolicyV2RuleArgs.builder()
        .specs(NetworkSecurityPolicyV2RuleSpecArgs.builder()
            .applicationRuleSpecs(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs.builder()
                .securedGroupCategoryReferences("string")
                .securedGroupCategoryAssociatedEntityType("string")
                .securedGroupEntityGroupReference("string")
                .destCategoryReferences("string")
                .destEntityGroupReference("string")
                .destSubnets(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs.builder()
                    .prefixLength(0)
                    .value("string")
                    .build())
                .icmpServices(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs.builder()
                    .code(0)
                    .isAllAllowed(false)
                    .type(0)
                    .build())
                .isAllProtocolAllowed(false)
                .networkFunctionChainReference("string")
                .networkFunctionReference("string")
                .destAddressGroupReferences("string")
                .destCategoryAssociatedEntityType("string")
                .serviceGroupReferences("string")
                .destAllowSpec("string")
                .srcAddressGroupReferences("string")
                .srcAllowSpec("string")
                .srcCategoryAssociatedEntityType("string")
                .srcCategoryReferences("string")
                .srcEntityGroupReference("string")
                .srcSubnets(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs.builder()
                    .prefixLength(0)
                    .value("string")
                    .build())
                .tcpServices(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs.builder()
                    .endPort(0)
                    .startPort(0)
                    .build())
                .udpServices(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs.builder()
                    .endPort(0)
                    .startPort(0)
                    .build())
                .build())
            .intraEntityGroupRuleSpecs(NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs.builder()
                .securedGroupAction("string")
                .icmpServices(NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpServiceArgs.builder()
                    .code(0)
                    .isAllAllowed(false)
                    .type(0)
                    .build())
                .securedGroupCategoryAssociatedEntityType("string")
                .securedGroupCategoryReferences("string")
                .securedGroupEntityGroupReference("string")
                .securedGroupServiceReferences("string")
                .tcpServices(NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpServiceArgs.builder()
                    .endPort(0)
                    .startPort(0)
                    .build())
                .udpServices(NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpServiceArgs.builder()
                    .endPort(0)
                    .startPort(0)
                    .build())
                .build())
            .multiEnvIsolationRuleSpecs(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs.builder()
                .specs(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs.builder()
                    .allToAllIsolationGroups(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs.builder()
                        .isolationGroups(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs.builder()
                            .groupCategoryReferences("string")
                            .groupCategoryAssociatedEntityType("string")
                            .groupEntityGroupReference("string")
                            .build())
                        .build())
                    .build())
                .build())
            .twoEnvIsolationRuleSpecs(NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs.builder()
                .firstIsolationGroups("string")
                .secondIsolationGroups("string")
                .build())
            .build())
        .type("string")
        .description("string")
        .extId("string")
        .links(NetworkSecurityPolicyV2RuleLinkArgs.builder()
            .href("string")
            .rel("string")
            .build())
        .build())
    .scope("string")
    .state("string")
    .vpcReferences("string")
    .build());

    network_security_policy_v2_resource = nutanix.NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource",
    type="string",
    description="string",
    is_hitlog_enabled=False,
    is_ipv6_traffic_allowed=False,
    name="string",
    rules=[{
        "specs": [{
            "application_rule_specs": [{
                "secured_group_category_references": ["string"],
                "secured_group_category_associated_entity_type": "string",
                "secured_group_entity_group_reference": "string",
                "dest_category_references": ["string"],
                "dest_entity_group_reference": "string",
                "dest_subnets": [{
                    "prefix_length": 0,
                    "value": "string",
                }],
                "icmp_services": [{
                    "code": 0,
                    "is_all_allowed": False,
                    "type": 0,
                }],
                "is_all_protocol_allowed": False,
                "network_function_chain_reference": "string",
                "network_function_reference": "string",
                "dest_address_group_references": ["string"],
                "dest_category_associated_entity_type": "string",
                "service_group_references": ["string"],
                "dest_allow_spec": "string",
                "src_address_group_references": ["string"],
                "src_allow_spec": "string",
                "src_category_associated_entity_type": "string",
                "src_category_references": ["string"],
                "src_entity_group_reference": "string",
                "src_subnets": [{
                    "prefix_length": 0,
                    "value": "string",
                }],
                "tcp_services": [{
                    "end_port": 0,
                    "start_port": 0,
                }],
                "udp_services": [{
                    "end_port": 0,
                    "start_port": 0,
                }],
            }],
            "intra_entity_group_rule_specs": [{
                "secured_group_action": "string",
                "icmp_services": [{
                    "code": 0,
                    "is_all_allowed": False,
                    "type": 0,
                }],
                "secured_group_category_associated_entity_type": "string",
                "secured_group_category_references": ["string"],
                "secured_group_entity_group_reference": "string",
                "secured_group_service_references": ["string"],
                "tcp_services": [{
                    "end_port": 0,
                    "start_port": 0,
                }],
                "udp_services": [{
                    "end_port": 0,
                    "start_port": 0,
                }],
            }],
            "multi_env_isolation_rule_specs": [{
                "specs": [{
                    "all_to_all_isolation_groups": [{
                        "isolation_groups": [{
                            "group_category_references": ["string"],
                            "group_category_associated_entity_type": "string",
                            "group_entity_group_reference": "string",
                        }],
                    }],
                }],
            }],
            "two_env_isolation_rule_specs": [{
                "first_isolation_groups": ["string"],
                "second_isolation_groups": ["string"],
            }],
        }],
        "type": "string",
        "description": "string",
        "ext_id": "string",
        "links": [{
            "href": "string",
            "rel": "string",
        }],
    }],
    scope="string",
    state="string",
    vpc_references=["string"])

    const networkSecurityPolicyV2Resource = new nutanix.NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource", {
    type: "string",
    description: "string",
    isHitlogEnabled: false,
    isIpv6TrafficAllowed: false,
    name: "string",
    rules: [{
        specs: [{
            applicationRuleSpecs: [{
                securedGroupCategoryReferences: ["string"],
                securedGroupCategoryAssociatedEntityType: "string",
                securedGroupEntityGroupReference: "string",
                destCategoryReferences: ["string"],
                destEntityGroupReference: "string",
                destSubnets: [{
                    prefixLength: 0,
                    value: "string",
                }],
                icmpServices: [{
                    code: 0,
                    isAllAllowed: false,
                    type: 0,
                }],
                isAllProtocolAllowed: false,
                networkFunctionChainReference: "string",
                networkFunctionReference: "string",
                destAddressGroupReferences: ["string"],
                destCategoryAssociatedEntityType: "string",
                serviceGroupReferences: ["string"],
                destAllowSpec: "string",
                srcAddressGroupReferences: ["string"],
                srcAllowSpec: "string",
                srcCategoryAssociatedEntityType: "string",
                srcCategoryReferences: ["string"],
                srcEntityGroupReference: "string",
                srcSubnets: [{
                    prefixLength: 0,
                    value: "string",
                }],
                tcpServices: [{
                    endPort: 0,
                    startPort: 0,
                }],
                udpServices: [{
                    endPort: 0,
                    startPort: 0,
                }],
            }],
            intraEntityGroupRuleSpecs: [{
                securedGroupAction: "string",
                icmpServices: [{
                    code: 0,
                    isAllAllowed: false,
                    type: 0,
                }],
                securedGroupCategoryAssociatedEntityType: "string",
                securedGroupCategoryReferences: ["string"],
                securedGroupEntityGroupReference: "string",
                securedGroupServiceReferences: ["string"],
                tcpServices: [{
                    endPort: 0,
                    startPort: 0,
                }],
                udpServices: [{
                    endPort: 0,
                    startPort: 0,
                }],
            }],
            multiEnvIsolationRuleSpecs: [{
                specs: [{
                    allToAllIsolationGroups: [{
                        isolationGroups: [{
                            groupCategoryReferences: ["string"],
                            groupCategoryAssociatedEntityType: "string",
                            groupEntityGroupReference: "string",
                        }],
                    }],
                }],
            }],
            twoEnvIsolationRuleSpecs: [{
                firstIsolationGroups: ["string"],
                secondIsolationGroups: ["string"],
            }],
        }],
        type: "string",
        description: "string",
        extId: "string",
        links: [{
            href: "string",
            rel: "string",
        }],
    }],
    scope: "string",
    state: "string",
    vpcReferences: ["string"],
});

    type: nutanix:NetworkSecurityPolicyV2
properties:
    description: string
    isHitlogEnabled: false
    isIpv6TrafficAllowed: false
    name: string
    rules:
        - description: string
          extId: string
          links:
            - href: string
              rel: string
          specs:
            - applicationRuleSpecs:
                - destAddressGroupReferences:
                    - string
                  destAllowSpec: string
                  destCategoryAssociatedEntityType: string
                  destCategoryReferences:
                    - string
                  destEntityGroupReference: string
                  destSubnets:
                    - prefixLength: 0
                      value: string
                  icmpServices:
                    - code: 0
                      isAllAllowed: false
                      type: 0
                  isAllProtocolAllowed: false
                  networkFunctionChainReference: string
                  networkFunctionReference: string
                  securedGroupCategoryAssociatedEntityType: string
                  securedGroupCategoryReferences:
                    - string
                  securedGroupEntityGroupReference: string
                  serviceGroupReferences:
                    - string
                  srcAddressGroupReferences:
                    - string
                  srcAllowSpec: string
                  srcCategoryAssociatedEntityType: string
                  srcCategoryReferences:
                    - string
                  srcEntityGroupReference: string
                  srcSubnets:
                    - prefixLength: 0
                      value: string
                  tcpServices:
                    - endPort: 0
                      startPort: 0
                  udpServices:
                    - endPort: 0
                      startPort: 0
              intraEntityGroupRuleSpecs:
                - icmpServices:
                    - code: 0
                      isAllAllowed: false
                      type: 0
                  securedGroupAction: string
                  securedGroupCategoryAssociatedEntityType: string
                  securedGroupCategoryReferences:
                    - string
                  securedGroupEntityGroupReference: string
                  securedGroupServiceReferences:
                    - string
                  tcpServices:
                    - endPort: 0
                      startPort: 0
                  udpServices:
                    - endPort: 0
                      startPort: 0
              multiEnvIsolationRuleSpecs:
                - specs:
                    - allToAllIsolationGroups:
                        - isolationGroups:
                            - groupCategoryAssociatedEntityType: string
                              groupCategoryReferences:
                                - string
                              groupEntityGroupReference: string
              twoEnvIsolationRuleSpecs:
                - firstIsolationGroups:
                    - string
                  secondIsolationGroups:
                    - string
          type: string
    scope: string
    state: string
    type: string
    vpcReferences:
        - string

    NetworkSecurityPolicyV2 Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The NetworkSecurityPolicyV2 resource accepts the following input properties:

    Type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    Description string
    A user defined annotation for a policy.
    IsHitlogEnabled bool
    If Hitlog is enabled.
    IsIpv6TrafficAllowed bool
    If Ipv6 Traffic is allowed.
    Name string
    Name of the Flow Network Security Policy.
    Rules List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2Rule>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    Scope string
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    State string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    VpcReferences List<string>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    Type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    Description string
    A user defined annotation for a policy.
    IsHitlogEnabled bool
    If Hitlog is enabled.
    IsIpv6TrafficAllowed bool
    If Ipv6 Traffic is allowed.
    Name string
    Name of the Flow Network Security Policy.
    Rules []NetworkSecurityPolicyV2RuleArgs
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    Scope string
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    State string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    VpcReferences []string
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    description string
    A user defined annotation for a policy.
    is_hitlog_enabled bool
    If Hitlog is enabled.
    is_ipv6_traffic_allowed bool
    If Ipv6 Traffic is allowed.
    name string
    Name of the Flow Network Security Policy.
    rules list(object)
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope string
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    state string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    vpc_references list(string)
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    type String
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    description String
    A user defined annotation for a policy.
    isHitlogEnabled Boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed Boolean
    If Ipv6 Traffic is allowed.
    name String
    Name of the Flow Network Security Policy.
    rules List<NetworkSecurityPolicyV2Rule>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope String
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    state String
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    vpcReferences List<String>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    description string
    A user defined annotation for a policy.
    isHitlogEnabled boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed boolean
    If Ipv6 Traffic is allowed.
    name string
    Name of the Flow Network Security Policy.
    rules NetworkSecurityPolicyV2Rule[]
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope string
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    state string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    vpcReferences string[]
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    type str
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    description str
    A user defined annotation for a policy.
    is_hitlog_enabled bool
    If Hitlog is enabled.
    is_ipv6_traffic_allowed bool
    If Ipv6 Traffic is allowed.
    name str
    Name of the Flow Network Security Policy.
    rules Sequence[NetworkSecurityPolicyV2RuleArgs]
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope str
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    state str
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    vpc_references Sequence[str]
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    type String
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    description String
    A user defined annotation for a policy.
    isHitlogEnabled Boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed Boolean
    If Ipv6 Traffic is allowed.
    name String
    Name of the Flow Network Security Policy.
    rules List<Property Map>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope String
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    state String
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    vpcReferences List<String>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the NetworkSecurityPolicyV2 resource produces the following output properties:

    CreatedBy string
    created by.
    CreationTime string
    creation time of NSP
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    Id string
    The provider-assigned unique ID for this managed resource.
    IsSystemDefined bool
    Is system defined NSP
    LastUpdateTime string
    last updated time
    Links List<PiersKarsenbarg.Nutanix.Outputs.NetworkSecurityPolicyV2Link>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    SecuredGroups List<string>
    Uuids of the secured groups in the NSP.
    TenantId string
    A globally unique identifier that represents the tenant that owns this entity
    CreatedBy string
    created by.
    CreationTime string
    creation time of NSP
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    Id string
    The provider-assigned unique ID for this managed resource.
    IsSystemDefined bool
    Is system defined NSP
    LastUpdateTime string
    last updated time
    Links []NetworkSecurityPolicyV2Link
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    SecuredGroups []string
    Uuids of the secured groups in the NSP.
    TenantId string
    A globally unique identifier that represents the tenant that owns this entity
    created_by string
    created by.
    creation_time string
    creation time of NSP
    ext_id string
    A globally unique identifier of an instance that is suitable for external consumption.
    id string
    The provider-assigned unique ID for this managed resource.
    is_system_defined bool
    Is system defined NSP
    last_update_time string
    last updated time
    links list(object)
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    secured_groups list(string)
    Uuids of the secured groups in the NSP.
    tenant_id string
    A globally unique identifier that represents the tenant that owns this entity
    createdBy String
    created by.
    creationTime String
    creation time of NSP
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    id String
    The provider-assigned unique ID for this managed resource.
    isSystemDefined Boolean
    Is system defined NSP
    lastUpdateTime String
    last updated time
    links List<NetworkSecurityPolicyV2Link>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    securedGroups List<String>
    Uuids of the secured groups in the NSP.
    tenantId String
    A globally unique identifier that represents the tenant that owns this entity
    createdBy string
    created by.
    creationTime string
    creation time of NSP
    extId string
    A globally unique identifier of an instance that is suitable for external consumption.
    id string
    The provider-assigned unique ID for this managed resource.
    isSystemDefined boolean
    Is system defined NSP
    lastUpdateTime string
    last updated time
    links NetworkSecurityPolicyV2Link[]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    securedGroups string[]
    Uuids of the secured groups in the NSP.
    tenantId string
    A globally unique identifier that represents the tenant that owns this entity
    created_by str
    created by.
    creation_time str
    creation time of NSP
    ext_id str
    A globally unique identifier of an instance that is suitable for external consumption.
    id str
    The provider-assigned unique ID for this managed resource.
    is_system_defined bool
    Is system defined NSP
    last_update_time str
    last updated time
    links Sequence[NetworkSecurityPolicyV2Link]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    secured_groups Sequence[str]
    Uuids of the secured groups in the NSP.
    tenant_id str
    A globally unique identifier that represents the tenant that owns this entity
    createdBy String
    created by.
    creationTime String
    creation time of NSP
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    id String
    The provider-assigned unique ID for this managed resource.
    isSystemDefined Boolean
    Is system defined NSP
    lastUpdateTime String
    last updated time
    links List<Property Map>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    securedGroups List<String>
    Uuids of the secured groups in the NSP.
    tenantId String
    A globally unique identifier that represents the tenant that owns this entity

    Look up Existing NetworkSecurityPolicyV2 Resource

    Get an existing NetworkSecurityPolicyV2 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NetworkSecurityPolicyV2State, opts?: CustomResourceOptions): NetworkSecurityPolicyV2
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        created_by: Optional[str] = None,
        creation_time: Optional[str] = None,
        description: Optional[str] = None,
        ext_id: Optional[str] = None,
        is_hitlog_enabled: Optional[bool] = None,
        is_ipv6_traffic_allowed: Optional[bool] = None,
        is_system_defined: Optional[bool] = None,
        last_update_time: Optional[str] = None,
        links: Optional[Sequence[NetworkSecurityPolicyV2LinkArgs]] = None,
        name: Optional[str] = None,
        rules: Optional[Sequence[NetworkSecurityPolicyV2RuleArgs]] = None,
        scope: Optional[str] = None,
        secured_groups: Optional[Sequence[str]] = None,
        state: Optional[str] = None,
        tenant_id: Optional[str] = None,
        type: Optional[str] = None,
        vpc_references: Optional[Sequence[str]] = None) -> NetworkSecurityPolicyV2
    func GetNetworkSecurityPolicyV2(ctx *Context, name string, id IDInput, state *NetworkSecurityPolicyV2State, opts ...ResourceOption) (*NetworkSecurityPolicyV2, error)
    public static NetworkSecurityPolicyV2 Get(string name, Input<string> id, NetworkSecurityPolicyV2State? state, CustomResourceOptions? opts = null)
    public static NetworkSecurityPolicyV2 get(String name, Output<String> id, NetworkSecurityPolicyV2State state, CustomResourceOptions options)
    resources:  _:    type: nutanix:NetworkSecurityPolicyV2    get:      id: ${id}
    import {
  to = nutanix_networksecuritypolicyv2.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CreatedBy string
    created by.
    CreationTime string
    creation time of NSP
    Description string
    A user defined annotation for a policy.
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    IsHitlogEnabled bool
    If Hitlog is enabled.
    IsIpv6TrafficAllowed bool
    If Ipv6 Traffic is allowed.
    IsSystemDefined bool
    Is system defined NSP
    LastUpdateTime string
    last updated time
    Links List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2Link>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    Name string
    Name of the Flow Network Security Policy.
    Rules List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2Rule>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    Scope string
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    SecuredGroups List<string>
    Uuids of the secured groups in the NSP.
    State string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    TenantId string
    A globally unique identifier that represents the tenant that owns this entity
    Type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    VpcReferences List<string>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    CreatedBy string
    created by.
    CreationTime string
    creation time of NSP
    Description string
    A user defined annotation for a policy.
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    IsHitlogEnabled bool
    If Hitlog is enabled.
    IsIpv6TrafficAllowed bool
    If Ipv6 Traffic is allowed.
    IsSystemDefined bool
    Is system defined NSP
    LastUpdateTime string
    last updated time
    Links []NetworkSecurityPolicyV2LinkArgs
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    Name string
    Name of the Flow Network Security Policy.
    Rules []NetworkSecurityPolicyV2RuleArgs
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    Scope string
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    SecuredGroups []string
    Uuids of the secured groups in the NSP.
    State string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    TenantId string
    A globally unique identifier that represents the tenant that owns this entity
    Type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    VpcReferences []string
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    created_by string
    created by.
    creation_time string
    creation time of NSP
    description string
    A user defined annotation for a policy.
    ext_id string
    A globally unique identifier of an instance that is suitable for external consumption.
    is_hitlog_enabled bool
    If Hitlog is enabled.
    is_ipv6_traffic_allowed bool
    If Ipv6 Traffic is allowed.
    is_system_defined bool
    Is system defined NSP
    last_update_time string
    last updated time
    links list(object)
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    name string
    Name of the Flow Network Security Policy.
    rules list(object)
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope string
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    secured_groups list(string)
    Uuids of the secured groups in the NSP.
    state string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    tenant_id string
    A globally unique identifier that represents the tenant that owns this entity
    type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    vpc_references list(string)
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    createdBy String
    created by.
    creationTime String
    creation time of NSP
    description String
    A user defined annotation for a policy.
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    isHitlogEnabled Boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed Boolean
    If Ipv6 Traffic is allowed.
    isSystemDefined Boolean
    Is system defined NSP
    lastUpdateTime String
    last updated time
    links List<NetworkSecurityPolicyV2Link>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    name String
    Name of the Flow Network Security Policy.
    rules List<NetworkSecurityPolicyV2Rule>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope String
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    securedGroups List<String>
    Uuids of the secured groups in the NSP.
    state String
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    tenantId String
    A globally unique identifier that represents the tenant that owns this entity
    type String
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    vpcReferences List<String>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    createdBy string
    created by.
    creationTime string
    creation time of NSP
    description string
    A user defined annotation for a policy.
    extId string
    A globally unique identifier of an instance that is suitable for external consumption.
    isHitlogEnabled boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed boolean
    If Ipv6 Traffic is allowed.
    isSystemDefined boolean
    Is system defined NSP
    lastUpdateTime string
    last updated time
    links NetworkSecurityPolicyV2Link[]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    name string
    Name of the Flow Network Security Policy.
    rules NetworkSecurityPolicyV2Rule[]
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope string
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    securedGroups string[]
    Uuids of the secured groups in the NSP.
    state string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    tenantId string
    A globally unique identifier that represents the tenant that owns this entity
    type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    vpcReferences string[]
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    created_by str
    created by.
    creation_time str
    creation time of NSP
    description str
    A user defined annotation for a policy.
    ext_id str
    A globally unique identifier of an instance that is suitable for external consumption.
    is_hitlog_enabled bool
    If Hitlog is enabled.
    is_ipv6_traffic_allowed bool
    If Ipv6 Traffic is allowed.
    is_system_defined bool
    Is system defined NSP
    last_update_time str
    last updated time
    links Sequence[NetworkSecurityPolicyV2LinkArgs]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    name str
    Name of the Flow Network Security Policy.
    rules Sequence[NetworkSecurityPolicyV2RuleArgs]
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope str
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    secured_groups Sequence[str]
    Uuids of the secured groups in the NSP.
    state str
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    tenant_id str
    A globally unique identifier that represents the tenant that owns this entity
    type str
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    vpc_references Sequence[str]
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    createdBy String
    created by.
    creationTime String
    creation time of NSP
    description String
    A user defined annotation for a policy.
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    isHitlogEnabled Boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed Boolean
    If Ipv6 Traffic is allowed.
    isSystemDefined Boolean
    Is system defined NSP
    lastUpdateTime String
    last updated time
    links List<Property Map>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    name String
    Name of the Flow Network Security Policy.
    rules List<Property Map>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope String
    Defines the scope of the policy. Acceptable values are "ALL_VLAN", "ALL_VPC", "VPC_LIST", and "GLOBAL".
    securedGroups List<String>
    Uuids of the secured groups in the NSP.
    state String
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    tenantId String
    A globally unique identifier that represents the tenant that owns this entity
    type String
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION", "SHAREDSERVICE".
    vpcReferences List<String>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.

    Supporting Types

    Href string
    Rel string
    Href string
    Rel string
    href string
    rel string
    href String
    rel String
    href string
    rel string
    href str
    rel str
    href String
    rel String

    NetworkSecurityPolicyV2Rule, NetworkSecurityPolicyV2RuleArgs

    Specs List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpec>
    Spec for rules.
    Type string
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP", "MULTI_ENV_ISOLATION", "SHARED_SERVICE".
    Description string
    A user defined annotation for a rule.
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    Links List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleLink>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    Specs []NetworkSecurityPolicyV2RuleSpec
    Spec for rules.
    Type string
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP", "MULTI_ENV_ISOLATION", "SHARED_SERVICE".
    Description string
    A user defined annotation for a rule.
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    Links []NetworkSecurityPolicyV2RuleLink
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    specs list(object)
    Spec for rules.
    type string
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP", "MULTI_ENV_ISOLATION", "SHARED_SERVICE".
    description string
    A user defined annotation for a rule.
    ext_id string
    A globally unique identifier of an instance that is suitable for external consumption.
    links list(object)
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    specs List<NetworkSecurityPolicyV2RuleSpec>
    Spec for rules.
    type String
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP", "MULTI_ENV_ISOLATION", "SHARED_SERVICE".
    description String
    A user defined annotation for a rule.
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    links List<NetworkSecurityPolicyV2RuleLink>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    specs NetworkSecurityPolicyV2RuleSpec[]
    Spec for rules.
    type string
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP", "MULTI_ENV_ISOLATION", "SHARED_SERVICE".
    description string
    A user defined annotation for a rule.
    extId string
    A globally unique identifier of an instance that is suitable for external consumption.
    links NetworkSecurityPolicyV2RuleLink[]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    specs Sequence[NetworkSecurityPolicyV2RuleSpec]
    Spec for rules.
    type str
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP", "MULTI_ENV_ISOLATION", "SHARED_SERVICE".
    description str
    A user defined annotation for a rule.
    ext_id str
    A globally unique identifier of an instance that is suitable for external consumption.
    links Sequence[NetworkSecurityPolicyV2RuleLink]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    specs List<Property Map>
    Spec for rules.
    type String
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP", "MULTI_ENV_ISOLATION", "SHARED_SERVICE".
    description String
    A user defined annotation for a rule.
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    links List<Property Map>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    Href string
    Rel string
    Href string
    Rel string
    href string
    rel string
    href String
    rel String
    href string
    rel string
    href str
    rel str
    href String
    rel String

    NetworkSecurityPolicyV2RuleSpec, NetworkSecurityPolicyV2RuleSpecArgs

    application_rule_specs list(object)
    Application Rule Spec.
    intra_entity_group_rule_specs list(object)
    Intra entity group Rule Spec
    multi_env_isolation_rule_specs list(object)
    Multi Environment Isolation Rule Spec.
    two_env_isolation_rule_specs list(object)
    Two Environment Isolation Rule Spec.
    applicationRuleSpecs List<Property Map>
    Application Rule Spec.
    intraEntityGroupRuleSpecs List<Property Map>
    Intra entity group Rule Spec
    multiEnvIsolationRuleSpecs List<Property Map>
    Multi Environment Isolation Rule Spec.
    twoEnvIsolationRuleSpecs List<Property Map>
    Two Environment Isolation Rule Spec.

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpec, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs

    SecuredGroupCategoryReferences List<string>
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    DestAddressGroupReferences List<string>
    A list of address group references.
    DestAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    DestCategoryAssociatedEntityType string
    Entity type for the destination category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    DestCategoryReferences List<string>
    List of categories that define a set of network endpoints as outbound.
    DestEntityGroupReference string
    Reference to the destination entity group.
    DestSubnets List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet>
    destination subnet value
    IcmpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService>
    icmp services
    IsAllProtocolAllowed bool
    Denotes if rule allows traffic for all protocol.
    NetworkFunctionChainReference string
    A reference to the network function chain in the rule.
    NetworkFunctionReference string
    A reference to the network function in the rule.
    SecuredGroupCategoryAssociatedEntityType string
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    SecuredGroupEntityGroupReference string
    Reference to the secured group entity group.
    ServiceGroupReferences List<string>
    A list of service group references.
    SrcAddressGroupReferences List<string>
    A list of address group references.
    SrcAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    SrcCategoryAssociatedEntityType string
    Entity type for the source category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    SrcCategoryReferences List<string>
    List of categories that define a set of network endpoints as inbound.
    SrcEntityGroupReference string
    Reference to the source entity group.
    SrcSubnets List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet>
    source subnet value
    TcpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService>
    tcp services
    UdpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService>
    udp services
    SecuredGroupCategoryReferences []string
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    DestAddressGroupReferences []string
    A list of address group references.
    DestAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    DestCategoryAssociatedEntityType string
    Entity type for the destination category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    DestCategoryReferences []string
    List of categories that define a set of network endpoints as outbound.
    DestEntityGroupReference string
    Reference to the destination entity group.
    DestSubnets []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet
    destination subnet value
    IcmpServices []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService
    icmp services
    IsAllProtocolAllowed bool
    Denotes if rule allows traffic for all protocol.
    NetworkFunctionChainReference string
    A reference to the network function chain in the rule.
    NetworkFunctionReference string
    A reference to the network function in the rule.
    SecuredGroupCategoryAssociatedEntityType string
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    SecuredGroupEntityGroupReference string
    Reference to the secured group entity group.
    ServiceGroupReferences []string
    A list of service group references.
    SrcAddressGroupReferences []string
    A list of address group references.
    SrcAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    SrcCategoryAssociatedEntityType string
    Entity type for the source category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    SrcCategoryReferences []string
    List of categories that define a set of network endpoints as inbound.
    SrcEntityGroupReference string
    Reference to the source entity group.
    SrcSubnets []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet
    source subnet value
    TcpServices []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService
    tcp services
    UdpServices []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService
    udp services
    secured_group_category_references list(string)
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    dest_address_group_references list(string)
    A list of address group references.
    dest_allow_spec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    dest_category_associated_entity_type string
    Entity type for the destination category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    dest_category_references list(string)
    List of categories that define a set of network endpoints as outbound.
    dest_entity_group_reference string
    Reference to the destination entity group.
    dest_subnets list(object)
    destination subnet value
    icmp_services list(object)
    icmp services
    is_all_protocol_allowed bool
    Denotes if rule allows traffic for all protocol.
    network_function_chain_reference string
    A reference to the network function chain in the rule.
    network_function_reference string
    A reference to the network function in the rule.
    secured_group_category_associated_entity_type string
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    secured_group_entity_group_reference string
    Reference to the secured group entity group.
    service_group_references list(string)
    A list of service group references.
    src_address_group_references list(string)
    A list of address group references.
    src_allow_spec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    src_category_associated_entity_type string
    Entity type for the source category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    src_category_references list(string)
    List of categories that define a set of network endpoints as inbound.
    src_entity_group_reference string
    Reference to the source entity group.
    src_subnets list(object)
    source subnet value
    tcp_services list(object)
    tcp services
    udp_services list(object)
    udp services
    securedGroupCategoryReferences List<String>
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    destAddressGroupReferences List<String>
    A list of address group references.
    destAllowSpec String
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    destCategoryAssociatedEntityType String
    Entity type for the destination category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    destCategoryReferences List<String>
    List of categories that define a set of network endpoints as outbound.
    destEntityGroupReference String
    Reference to the destination entity group.
    destSubnets List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet>
    destination subnet value
    icmpServices List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService>
    icmp services
    isAllProtocolAllowed Boolean
    Denotes if rule allows traffic for all protocol.
    networkFunctionChainReference String
    A reference to the network function chain in the rule.
    networkFunctionReference String
    A reference to the network function in the rule.
    securedGroupCategoryAssociatedEntityType String
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    securedGroupEntityGroupReference String
    Reference to the secured group entity group.
    serviceGroupReferences List<String>
    A list of service group references.
    srcAddressGroupReferences List<String>
    A list of address group references.
    srcAllowSpec String
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    srcCategoryAssociatedEntityType String
    Entity type for the source category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    srcCategoryReferences List<String>
    List of categories that define a set of network endpoints as inbound.
    srcEntityGroupReference String
    Reference to the source entity group.
    srcSubnets List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet>
    source subnet value
    tcpServices List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService>
    tcp services
    udpServices List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService>
    udp services
    securedGroupCategoryReferences string[]
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    destAddressGroupReferences string[]
    A list of address group references.
    destAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    destCategoryAssociatedEntityType string
    Entity type for the destination category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    destCategoryReferences string[]
    List of categories that define a set of network endpoints as outbound.
    destEntityGroupReference string
    Reference to the destination entity group.
    destSubnets NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet[]
    destination subnet value
    icmpServices NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService[]
    icmp services
    isAllProtocolAllowed boolean
    Denotes if rule allows traffic for all protocol.
    networkFunctionChainReference string
    A reference to the network function chain in the rule.
    networkFunctionReference string
    A reference to the network function in the rule.
    securedGroupCategoryAssociatedEntityType string
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    securedGroupEntityGroupReference string
    Reference to the secured group entity group.
    serviceGroupReferences string[]
    A list of service group references.
    srcAddressGroupReferences string[]
    A list of address group references.
    srcAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    srcCategoryAssociatedEntityType string
    Entity type for the source category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    srcCategoryReferences string[]
    List of categories that define a set of network endpoints as inbound.
    srcEntityGroupReference string
    Reference to the source entity group.
    srcSubnets NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet[]
    source subnet value
    tcpServices NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService[]
    tcp services
    udpServices NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService[]
    udp services
    secured_group_category_references Sequence[str]
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    dest_address_group_references Sequence[str]
    A list of address group references.
    dest_allow_spec str
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    dest_category_associated_entity_type str
    Entity type for the destination category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    dest_category_references Sequence[str]
    List of categories that define a set of network endpoints as outbound.
    dest_entity_group_reference str
    Reference to the destination entity group.
    dest_subnets Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet]
    destination subnet value
    icmp_services Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService]
    icmp services
    is_all_protocol_allowed bool
    Denotes if rule allows traffic for all protocol.
    network_function_chain_reference str
    A reference to the network function chain in the rule.
    network_function_reference str
    A reference to the network function in the rule.
    secured_group_category_associated_entity_type str
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    secured_group_entity_group_reference str
    Reference to the secured group entity group.
    service_group_references Sequence[str]
    A list of service group references.
    src_address_group_references Sequence[str]
    A list of address group references.
    src_allow_spec str
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    src_category_associated_entity_type str
    Entity type for the source category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    src_category_references Sequence[str]
    List of categories that define a set of network endpoints as inbound.
    src_entity_group_reference str
    Reference to the source entity group.
    src_subnets Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet]
    source subnet value
    tcp_services Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService]
    tcp services
    udp_services Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService]
    udp services
    securedGroupCategoryReferences List<String>
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    destAddressGroupReferences List<String>
    A list of address group references.
    destAllowSpec String
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    destCategoryAssociatedEntityType String
    Entity type for the destination category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    destCategoryReferences List<String>
    List of categories that define a set of network endpoints as outbound.
    destEntityGroupReference String
    Reference to the destination entity group.
    destSubnets List<Property Map>
    destination subnet value
    icmpServices List<Property Map>
    icmp services
    isAllProtocolAllowed Boolean
    Denotes if rule allows traffic for all protocol.
    networkFunctionChainReference String
    A reference to the network function chain in the rule.
    networkFunctionReference String
    A reference to the network function in the rule.
    securedGroupCategoryAssociatedEntityType String
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    securedGroupEntityGroupReference String
    Reference to the secured group entity group.
    serviceGroupReferences List<String>
    A list of service group references.
    srcAddressGroupReferences List<String>
    A list of address group references.
    srcAllowSpec String
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    srcCategoryAssociatedEntityType String
    Entity type for the source category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    srcCategoryReferences List<String>
    List of categories that define a set of network endpoints as inbound.
    srcEntityGroupReference String
    Reference to the source entity group.
    srcSubnets List<Property Map>
    source subnet value
    tcpServices List<Property Map>
    tcp services
    udpServices List<Property Map>
    udp services

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs

    prefix_length number
    value string
    prefixLength Integer
    value String
    prefixLength number
    value string
    prefixLength Number
    value String

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs

    Code int
    Icmp service Code. Ignore this field if Code has to be ANY.
    IsAllAllowed bool
    Set this field to true if both Type and Code is ANY.
    Type int
    Icmp service Type. Ignore this field if Type has to be ANY.
    Code int
    Icmp service Code. Ignore this field if Code has to be ANY.
    IsAllAllowed bool
    Set this field to true if both Type and Code is ANY.
    Type int
    Icmp service Type. Ignore this field if Type has to be ANY.
    code number
    Icmp service Code. Ignore this field if Code has to be ANY.
    is_all_allowed bool
    Set this field to true if both Type and Code is ANY.
    type number
    Icmp service Type. Ignore this field if Type has to be ANY.
    code Integer
    Icmp service Code. Ignore this field if Code has to be ANY.
    isAllAllowed Boolean
    Set this field to true if both Type and Code is ANY.
    type Integer
    Icmp service Type. Ignore this field if Type has to be ANY.
    code number
    Icmp service Code. Ignore this field if Code has to be ANY.
    isAllAllowed boolean
    Set this field to true if both Type and Code is ANY.
    type number
    Icmp service Type. Ignore this field if Type has to be ANY.
    code int
    Icmp service Code. Ignore this field if Code has to be ANY.
    is_all_allowed bool
    Set this field to true if both Type and Code is ANY.
    type int
    Icmp service Type. Ignore this field if Type has to be ANY.
    code Number
    Icmp service Code. Ignore this field if Code has to be ANY.
    isAllAllowed Boolean
    Set this field to true if both Type and Code is ANY.
    type Number
    Icmp service Type. Ignore this field if Type has to be ANY.

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs

    prefix_length number
    value string
    prefixLength Integer
    value String
    prefixLength number
    value string
    prefixLength Number
    value String

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs

    EndPort int
    end port
    StartPort int
    start port
    EndPort int
    end port
    StartPort int
    start port
    end_port number
    end port
    start_port number
    start port
    endPort Integer
    end port
    startPort Integer
    start port
    endPort number
    end port
    startPort number
    start port
    end_port int
    end port
    start_port int
    start port
    endPort Number
    end port
    startPort Number
    start port

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs

    EndPort int
    end port
    StartPort int
    start port
    EndPort int
    end port
    StartPort int
    start port
    end_port number
    end port
    start_port number
    start port
    endPort Integer
    end port
    startPort Integer
    start port
    endPort number
    end port
    startPort number
    start port
    end_port int
    end port
    start_port int
    start port
    endPort Number
    end port
    startPort Number
    start port

    NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpec, NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs

    SecuredGroupAction string
    Whether traffic between intra secured group entities should be allowed or denied. Acceptable values are "ALLOW", "DENY".
    IcmpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpService>
    ICMP type/code for the rule.
    SecuredGroupCategoryAssociatedEntityType string
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    SecuredGroupCategoryReferences List<string>
    List of category references for the secured group.
    SecuredGroupEntityGroupReference string
    Reference to the secured group entity group.
    SecuredGroupServiceReferences List<string>
    List of service group references for the secured group.
    TcpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpService>
    TCP port ranges for the rule.
    UdpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpService>
    UDP port ranges for the rule.
    SecuredGroupAction string
    Whether traffic between intra secured group entities should be allowed or denied. Acceptable values are "ALLOW", "DENY".
    IcmpServices []NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpService
    ICMP type/code for the rule.
    SecuredGroupCategoryAssociatedEntityType string
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    SecuredGroupCategoryReferences []string
    List of category references for the secured group.
    SecuredGroupEntityGroupReference string
    Reference to the secured group entity group.
    SecuredGroupServiceReferences []string
    List of service group references for the secured group.
    TcpServices []NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpService
    TCP port ranges for the rule.
    UdpServices []NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpService
    UDP port ranges for the rule.
    secured_group_action string
    Whether traffic between intra secured group entities should be allowed or denied. Acceptable values are "ALLOW", "DENY".
    icmp_services list(object)
    ICMP type/code for the rule.
    secured_group_category_associated_entity_type string
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    secured_group_category_references list(string)
    List of category references for the secured group.
    secured_group_entity_group_reference string
    Reference to the secured group entity group.
    secured_group_service_references list(string)
    List of service group references for the secured group.
    tcp_services list(object)
    TCP port ranges for the rule.
    udp_services list(object)
    UDP port ranges for the rule.
    securedGroupAction String
    Whether traffic between intra secured group entities should be allowed or denied. Acceptable values are "ALLOW", "DENY".
    icmpServices List<NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpService>
    ICMP type/code for the rule.
    securedGroupCategoryAssociatedEntityType String
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    securedGroupCategoryReferences List<String>
    List of category references for the secured group.
    securedGroupEntityGroupReference String
    Reference to the secured group entity group.
    securedGroupServiceReferences List<String>
    List of service group references for the secured group.
    tcpServices List<NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpService>
    TCP port ranges for the rule.
    udpServices List<NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpService>
    UDP port ranges for the rule.
    securedGroupAction string
    Whether traffic between intra secured group entities should be allowed or denied. Acceptable values are "ALLOW", "DENY".
    icmpServices NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpService[]
    ICMP type/code for the rule.
    securedGroupCategoryAssociatedEntityType string
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    securedGroupCategoryReferences string[]
    List of category references for the secured group.
    securedGroupEntityGroupReference string
    Reference to the secured group entity group.
    securedGroupServiceReferences string[]
    List of service group references for the secured group.
    tcpServices NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpService[]
    TCP port ranges for the rule.
    udpServices NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpService[]
    UDP port ranges for the rule.
    secured_group_action str
    Whether traffic between intra secured group entities should be allowed or denied. Acceptable values are "ALLOW", "DENY".
    icmp_services Sequence[NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpService]
    ICMP type/code for the rule.
    secured_group_category_associated_entity_type str
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    secured_group_category_references Sequence[str]
    List of category references for the secured group.
    secured_group_entity_group_reference str
    Reference to the secured group entity group.
    secured_group_service_references Sequence[str]
    List of service group references for the secured group.
    tcp_services Sequence[NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpService]
    TCP port ranges for the rule.
    udp_services Sequence[NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpService]
    UDP port ranges for the rule.
    securedGroupAction String
    Whether traffic between intra secured group entities should be allowed or denied. Acceptable values are "ALLOW", "DENY".
    icmpServices List<Property Map>
    ICMP type/code for the rule.
    securedGroupCategoryAssociatedEntityType String
    Entity type for the secured group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    securedGroupCategoryReferences List<String>
    List of category references for the secured group.
    securedGroupEntityGroupReference String
    Reference to the secured group entity group.
    securedGroupServiceReferences List<String>
    List of service group references for the secured group.
    tcpServices List<Property Map>
    TCP port ranges for the rule.
    udpServices List<Property Map>
    UDP port ranges for the rule.

    NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpService, NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecIcmpServiceArgs

    Code int
    Icmp service Code. Ignore this field if Code has to be ANY.
    IsAllAllowed bool
    Set this field to true if both Type and Code is ANY.
    Type int
    Icmp service Type. Ignore this field if Type has to be ANY.
    Code int
    Icmp service Code. Ignore this field if Code has to be ANY.
    IsAllAllowed bool
    Set this field to true if both Type and Code is ANY.
    Type int
    Icmp service Type. Ignore this field if Type has to be ANY.
    code number
    Icmp service Code. Ignore this field if Code has to be ANY.
    is_all_allowed bool
    Set this field to true if both Type and Code is ANY.
    type number
    Icmp service Type. Ignore this field if Type has to be ANY.
    code Integer
    Icmp service Code. Ignore this field if Code has to be ANY.
    isAllAllowed Boolean
    Set this field to true if both Type and Code is ANY.
    type Integer
    Icmp service Type. Ignore this field if Type has to be ANY.
    code number
    Icmp service Code. Ignore this field if Code has to be ANY.
    isAllAllowed boolean
    Set this field to true if both Type and Code is ANY.
    type number
    Icmp service Type. Ignore this field if Type has to be ANY.
    code int
    Icmp service Code. Ignore this field if Code has to be ANY.
    is_all_allowed bool
    Set this field to true if both Type and Code is ANY.
    type int
    Icmp service Type. Ignore this field if Type has to be ANY.
    code Number
    Icmp service Code. Ignore this field if Code has to be ANY.
    isAllAllowed Boolean
    Set this field to true if both Type and Code is ANY.
    type Number
    Icmp service Type. Ignore this field if Type has to be ANY.

    NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpService, NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecTcpServiceArgs

    EndPort int
    end port
    StartPort int
    start port
    EndPort int
    end port
    StartPort int
    start port
    end_port number
    end port
    start_port number
    start port
    endPort Integer
    end port
    startPort Integer
    start port
    endPort number
    end port
    startPort number
    start port
    end_port int
    end port
    start_port int
    start port
    endPort Number
    end port
    startPort Number
    start port

    NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpService, NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecUdpServiceArgs

    EndPort int
    end port
    StartPort int
    start port
    EndPort int
    end port
    StartPort int
    start port
    end_port number
    end port
    start_port number
    start port
    endPort Integer
    end port
    startPort Integer
    start port
    endPort number
    end port
    startPort number
    start port
    end_port int
    end port
    start_port int
    start port
    endPort Number
    end port
    startPort Number
    start port

    NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpec, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs

    specs list(object)
    Multi Environment Isolation Rule Spec.
    specs List<Property Map>
    Multi Environment Isolation Rule Spec.

    NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpec, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs

    all_to_all_isolation_groups list(object)
    all to all isolation groups
    allToAllIsolationGroups List<Property Map>
    all to all isolation groups

    NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroup, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs

    IsolationGroups []NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup
    Denotes the list of secured groups that will be used in All to All mutual isolation.
    isolation_groups list(object)
    Denotes the list of secured groups that will be used in All to All mutual isolation.
    isolationGroups List<NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup>
    Denotes the list of secured groups that will be used in All to All mutual isolation.
    isolationGroups NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup[]
    Denotes the list of secured groups that will be used in All to All mutual isolation.
    isolation_groups Sequence[NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup]
    Denotes the list of secured groups that will be used in All to All mutual isolation.
    isolationGroups List<Property Map>
    Denotes the list of secured groups that will be used in All to All mutual isolation.

    NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs

    GroupCategoryReferences List<string>
    External identifiers of categories belonging to the isolation group.
    GroupCategoryAssociatedEntityType string
    Entity type for the group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    GroupEntityGroupReference string
    Reference to the entity group for the isolation group.
    GroupCategoryReferences []string
    External identifiers of categories belonging to the isolation group.
    GroupCategoryAssociatedEntityType string
    Entity type for the group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    GroupEntityGroupReference string
    Reference to the entity group for the isolation group.
    group_category_references list(string)
    External identifiers of categories belonging to the isolation group.
    group_category_associated_entity_type string
    Entity type for the group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    group_entity_group_reference string
    Reference to the entity group for the isolation group.
    groupCategoryReferences List<String>
    External identifiers of categories belonging to the isolation group.
    groupCategoryAssociatedEntityType String
    Entity type for the group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    groupEntityGroupReference String
    Reference to the entity group for the isolation group.
    groupCategoryReferences string[]
    External identifiers of categories belonging to the isolation group.
    groupCategoryAssociatedEntityType string
    Entity type for the group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    groupEntityGroupReference string
    Reference to the entity group for the isolation group.
    group_category_references Sequence[str]
    External identifiers of categories belonging to the isolation group.
    group_category_associated_entity_type str
    Entity type for the group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    group_entity_group_reference str
    Reference to the entity group for the isolation group.
    groupCategoryReferences List<String>
    External identifiers of categories belonging to the isolation group.
    groupCategoryAssociatedEntityType String
    Entity type for the group category. Acceptable values are "SUBNET", "VM", "VPC". Default is "VM".
    groupEntityGroupReference String
    Reference to the entity group for the isolation group.

    NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpec, NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs

    FirstIsolationGroups List<string>
    Denotes the first group of category uuids that will be used in an isolation policy.
    SecondIsolationGroups List<string>
    Denotes the second group of category uuids that will be used in an isolation policy.
    FirstIsolationGroups []string
    Denotes the first group of category uuids that will be used in an isolation policy.
    SecondIsolationGroups []string
    Denotes the second group of category uuids that will be used in an isolation policy.
    first_isolation_groups list(string)
    Denotes the first group of category uuids that will be used in an isolation policy.
    second_isolation_groups list(string)
    Denotes the second group of category uuids that will be used in an isolation policy.
    firstIsolationGroups List<String>
    Denotes the first group of category uuids that will be used in an isolation policy.
    secondIsolationGroups List<String>
    Denotes the second group of category uuids that will be used in an isolation policy.
    firstIsolationGroups string[]
    Denotes the first group of category uuids that will be used in an isolation policy.
    secondIsolationGroups string[]
    Denotes the second group of category uuids that will be used in an isolation policy.
    first_isolation_groups Sequence[str]
    Denotes the first group of category uuids that will be used in an isolation policy.
    second_isolation_groups Sequence[str]
    Denotes the second group of category uuids that will be used in an isolation policy.
    firstIsolationGroups List<String>
    Denotes the first group of category uuids that will be used in an isolation policy.
    secondIsolationGroups List<String>
    Denotes the second group of category uuids that will be used in an isolation policy.

    Package Details

    Repository
    nutanix pierskarsenbarg/pulumi-nutanix
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the nutanix Terraform Provider.
    nutanix logo
    Viewing docs for Nutanix v0.16.0
    published on Tuesday, May 26, 2026 by Piers Karsenbarg
    Schema (JSON)
    pierskarsenbarg/pulumi-nutanix

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial