panos.getAuthenticationPolicy

panos 2.0.11, Apr 28 26

Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks

paloaltonetworks/terraform-provider-panos

Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks

paloaltonetworks/terraform-provider-panos

Using getAuthenticationPolicy

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getAuthenticationPolicy(args: GetAuthenticationPolicyArgs, opts?: InvokeOptions): Promise<GetAuthenticationPolicyResult>
function getAuthenticationPolicyOutput(args: GetAuthenticationPolicyOutputArgs, opts?: InvokeOptions): Output<GetAuthenticationPolicyResult>

def get_authentication_policy(location: Optional[GetAuthenticationPolicyLocation] = None,
                              rules: Optional[Sequence[GetAuthenticationPolicyRule]] = None,
                              opts: Optional[InvokeOptions] = None) -> GetAuthenticationPolicyResult
def get_authentication_policy_output(location: Optional[pulumi.Input[GetAuthenticationPolicyLocationArgs]] = None,
                              rules: Optional[pulumi.Input[Sequence[pulumi.Input[GetAuthenticationPolicyRuleArgs]]]] = None,
                              opts: Optional[InvokeOptions] = None) -> Output[GetAuthenticationPolicyResult]

func LookupAuthenticationPolicy(ctx *Context, args *LookupAuthenticationPolicyArgs, opts ...InvokeOption) (*LookupAuthenticationPolicyResult, error)
func LookupAuthenticationPolicyOutput(ctx *Context, args *LookupAuthenticationPolicyOutputArgs, opts ...InvokeOption) LookupAuthenticationPolicyResultOutput

> Note: This function is named LookupAuthenticationPolicy in the Go SDK.

public static class GetAuthenticationPolicy 
{
    public static Task<GetAuthenticationPolicyResult> InvokeAsync(GetAuthenticationPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetAuthenticationPolicyResult> Invoke(GetAuthenticationPolicyInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetAuthenticationPolicyResult> getAuthenticationPolicy(GetAuthenticationPolicyArgs args, InvokeOptions options)
public static Output<GetAuthenticationPolicyResult> getAuthenticationPolicy(GetAuthenticationPolicyArgs args, InvokeOptions options)

fn::invoke:
  function: panos:index/getAuthenticationPolicy:getAuthenticationPolicy
  arguments:
    # arguments dictionary

The following arguments are supported:

Location GetAuthenticationPolicyLocation: The location of this object.
Rules List<GetAuthenticationPolicyRule>

Location GetAuthenticationPolicyLocation: The location of this object.
Rules []GetAuthenticationPolicyRule

location GetAuthenticationPolicyLocation: The location of this object.
rules List<GetAuthenticationPolicyRule>

location GetAuthenticationPolicyLocation: The location of this object.
rules GetAuthenticationPolicyRule[]

location GetAuthenticationPolicyLocation: The location of this object.
rules Sequence[GetAuthenticationPolicyRule]

location Property Map: The location of this object.
rules List<Property Map>

getAuthenticationPolicy Result

The following output properties are available:

Id string: The provider-assigned unique ID for this managed resource.
Location GetAuthenticationPolicyLocation: The location of this object.
Rules List<GetAuthenticationPolicyRule>

Id string: The provider-assigned unique ID for this managed resource.
Location GetAuthenticationPolicyLocation: The location of this object.
Rules []GetAuthenticationPolicyRule

id String: The provider-assigned unique ID for this managed resource.
location GetAuthenticationPolicyLocation: The location of this object.
rules List<GetAuthenticationPolicyRule>

id string: The provider-assigned unique ID for this managed resource.
location GetAuthenticationPolicyLocation: The location of this object.
rules GetAuthenticationPolicyRule[]

id str: The provider-assigned unique ID for this managed resource.
location GetAuthenticationPolicyLocation: The location of this object.
rules Sequence[GetAuthenticationPolicyRule]

id String: The provider-assigned unique ID for this managed resource.
location Property Map: The location of this object.
rules List<Property Map>

Supporting Types

GetAuthenticationPolicyLocation

DeviceGroup GetAuthenticationPolicyLocationDeviceGroup: Located in a specific device group rulebase
Shared GetAuthenticationPolicyLocationShared: Located in a shared rulebase
Vsys GetAuthenticationPolicyLocationVsys: Located in a specific vsys rulebase

DeviceGroup GetAuthenticationPolicyLocationDeviceGroup: Located in a specific device group rulebase
Shared GetAuthenticationPolicyLocationShared: Located in a shared rulebase
Vsys GetAuthenticationPolicyLocationVsys: Located in a specific vsys rulebase

deviceGroup GetAuthenticationPolicyLocationDeviceGroup: Located in a specific device group rulebase
shared GetAuthenticationPolicyLocationShared: Located in a shared rulebase
vsys GetAuthenticationPolicyLocationVsys: Located in a specific vsys rulebase

deviceGroup GetAuthenticationPolicyLocationDeviceGroup: Located in a specific device group rulebase
shared GetAuthenticationPolicyLocationShared: Located in a shared rulebase
vsys GetAuthenticationPolicyLocationVsys: Located in a specific vsys rulebase

device_group GetAuthenticationPolicyLocationDeviceGroup: Located in a specific device group rulebase
shared GetAuthenticationPolicyLocationShared: Located in a shared rulebase
vsys GetAuthenticationPolicyLocationVsys: Located in a specific vsys rulebase

deviceGroup Property Map: Located in a specific device group rulebase
shared Property Map: Located in a shared rulebase
vsys Property Map: Located in a specific vsys rulebase

GetAuthenticationPolicyLocationDeviceGroup

Name string: The device group name
PanoramaDevice string: The panorama device
Rulebase string: The rulebase

Name string: The device group name
PanoramaDevice string: The panorama device
Rulebase string: The rulebase

name String: The device group name
panoramaDevice String: The panorama device
rulebase String: The rulebase

name string: The device group name
panoramaDevice string: The panorama device
rulebase string: The rulebase

name str: The device group name
panorama_device str: The panorama device
rulebase str: The rulebase

name String: The device group name
panoramaDevice String: The panorama device
rulebase String: The rulebase

GetAuthenticationPolicyLocationShared

Rulebase string: Rulebase name

Rulebase string: Rulebase name

rulebase String: Rulebase name

rulebase string: Rulebase name

rulebase str: Rulebase name

rulebase String: Rulebase name

GetAuthenticationPolicyLocationVsys

Name string: The vsys name
NgfwDevice string: The NGFW device

Name string: The vsys name
NgfwDevice string: The NGFW device

name String: The vsys name
ngfwDevice String: The NGFW device

name string: The vsys name
ngfwDevice string: The NGFW device

name str: The vsys name
ngfw_device str: The NGFW device

name String: The vsys name
ngfwDevice String: The NGFW device

GetAuthenticationPolicyRule

AuditCommentVersion string: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
AuthenticationEnforcement string: Authentication enforcement object to use for authentication.
Categories List<string>
Description string
DestinationAddresses List<string>
DestinationHips List<string>
DestinationZones List<string>
Disabled bool: Disable the rule
GroupTag string
LogAuthenticationTimeout bool
LogSetting string: Log setting for forwarding authentication logs
Name string
NegateDestination bool
NegateSource bool
Services List<string>
SourceAddresses List<string>
SourceHips List<string>
SourceUsers List<string>
SourceZones List<string>
Tags List<string>
Target GetAuthenticationPolicyRuleTarget
Timeout double: expiration timer (minutes)

AuditCommentVersion string: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
AuthenticationEnforcement string: Authentication enforcement object to use for authentication.
Categories []string
Description string
DestinationAddresses []string
DestinationHips []string
DestinationZones []string
Disabled bool: Disable the rule
GroupTag string
LogAuthenticationTimeout bool
LogSetting string: Log setting for forwarding authentication logs
Name string
NegateDestination bool
NegateSource bool
Services []string
SourceAddresses []string
SourceHips []string
SourceUsers []string
SourceZones []string
Tags []string
Target GetAuthenticationPolicyRuleTarget
Timeout float64: expiration timer (minutes)

auditCommentVersion String: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
authenticationEnforcement String: Authentication enforcement object to use for authentication.
categories List<String>
description String
destinationAddresses List<String>
destinationHips List<String>
destinationZones List<String>
disabled Boolean: Disable the rule
groupTag String
logAuthenticationTimeout Boolean
logSetting String: Log setting for forwarding authentication logs
name String
negateDestination Boolean
negateSource Boolean
services List<String>
sourceAddresses List<String>
sourceHips List<String>
sourceUsers List<String>
sourceZones List<String>
tags List<String>
target GetAuthenticationPolicyRuleTarget
timeout Double: expiration timer (minutes)

auditCommentVersion string: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
authenticationEnforcement string: Authentication enforcement object to use for authentication.
categories string[]
description string
destinationAddresses string[]
destinationHips string[]
destinationZones string[]
disabled boolean: Disable the rule
groupTag string
logAuthenticationTimeout boolean
logSetting string: Log setting for forwarding authentication logs
name string
negateDestination boolean
negateSource boolean
services string[]
sourceAddresses string[]
sourceHips string[]
sourceUsers string[]
sourceZones string[]
tags string[]
target GetAuthenticationPolicyRuleTarget
timeout number: expiration timer (minutes)

audit_comment_version str: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
authentication_enforcement str: Authentication enforcement object to use for authentication.
categories Sequence[str]
description str
destination_addresses Sequence[str]
destination_hips Sequence[str]
destination_zones Sequence[str]
disabled bool: Disable the rule
group_tag str
log_authentication_timeout bool
log_setting str: Log setting for forwarding authentication logs
name str
negate_destination bool
negate_source bool
services Sequence[str]
source_addresses Sequence[str]
source_hips Sequence[str]
source_users Sequence[str]
source_zones Sequence[str]
tags Sequence[str]
target GetAuthenticationPolicyRuleTarget
timeout float: expiration timer (minutes)

auditCommentVersion String: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
authenticationEnforcement String: Authentication enforcement object to use for authentication.
categories List<String>
description String
destinationAddresses List<String>
destinationHips List<String>
destinationZones List<String>
disabled Boolean: Disable the rule
groupTag String
logAuthenticationTimeout Boolean
logSetting String: Log setting for forwarding authentication logs
name String
negateDestination Boolean
negateSource Boolean
services List<String>
sourceAddresses List<String>
sourceHips List<String>
sourceUsers List<String>
sourceZones List<String>
tags List<String>
target Property Map
timeout Number: expiration timer (minutes)