1. Packages
  2. Packages
  3. Panos Provider
  4. API Docs
  5. getAuthenticationPolicyRules
Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

panos.getAuthenticationPolicyRules

Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

    Using getAuthenticationPolicyRules

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAuthenticationPolicyRules(args: GetAuthenticationPolicyRulesArgs, opts?: InvokeOptions): Promise<GetAuthenticationPolicyRulesResult>
function getAuthenticationPolicyRulesOutput(args: GetAuthenticationPolicyRulesOutputArgs, opts?: InvokeOptions): Output<GetAuthenticationPolicyRulesResult>
    def get_authentication_policy_rules(location: Optional[GetAuthenticationPolicyRulesLocation] = None,
                                    position: Optional[GetAuthenticationPolicyRulesPosition] = None,
                                    rules: Optional[Sequence[GetAuthenticationPolicyRulesRule]] = None,
                                    opts: Optional[InvokeOptions] = None) -> GetAuthenticationPolicyRulesResult
def get_authentication_policy_rules_output(location: Optional[pulumi.Input[GetAuthenticationPolicyRulesLocationArgs]] = None,
                                    position: Optional[pulumi.Input[GetAuthenticationPolicyRulesPositionArgs]] = None,
                                    rules: Optional[pulumi.Input[Sequence[pulumi.Input[GetAuthenticationPolicyRulesRuleArgs]]]] = None,
                                    opts: Optional[InvokeOptions] = None) -> Output[GetAuthenticationPolicyRulesResult]
    func LookupAuthenticationPolicyRules(ctx *Context, args *LookupAuthenticationPolicyRulesArgs, opts ...InvokeOption) (*LookupAuthenticationPolicyRulesResult, error)
func LookupAuthenticationPolicyRulesOutput(ctx *Context, args *LookupAuthenticationPolicyRulesOutputArgs, opts ...InvokeOption) LookupAuthenticationPolicyRulesResultOutput

    > Note: This function is named LookupAuthenticationPolicyRules in the Go SDK.

    public static class GetAuthenticationPolicyRules 
{
    public static Task<GetAuthenticationPolicyRulesResult> InvokeAsync(GetAuthenticationPolicyRulesArgs args, InvokeOptions? opts = null)
    public static Output<GetAuthenticationPolicyRulesResult> Invoke(GetAuthenticationPolicyRulesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetAuthenticationPolicyRulesResult> getAuthenticationPolicyRules(GetAuthenticationPolicyRulesArgs args, InvokeOptions options)
public static Output<GetAuthenticationPolicyRulesResult> getAuthenticationPolicyRules(GetAuthenticationPolicyRulesArgs args, InvokeOptions options)

    fn::invoke:
  function: panos:index/getAuthenticationPolicyRules:getAuthenticationPolicyRules
  arguments:
    # arguments dictionary

    The following arguments are supported:

    getAuthenticationPolicyRules Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    Location GetAuthenticationPolicyRulesLocation
    The location of this object.
    Position GetAuthenticationPolicyRulesPosition
    Rules List<GetAuthenticationPolicyRulesRule>
    Id string
    The provider-assigned unique ID for this managed resource.
    Location GetAuthenticationPolicyRulesLocation
    The location of this object.
    Position GetAuthenticationPolicyRulesPosition
    Rules []GetAuthenticationPolicyRulesRule
    id String
    The provider-assigned unique ID for this managed resource.
    location GetAuthenticationPolicyRulesLocation
    The location of this object.
    position GetAuthenticationPolicyRulesPosition
    rules List<GetAuthenticationPolicyRulesRule>
    id string
    The provider-assigned unique ID for this managed resource.
    location GetAuthenticationPolicyRulesLocation
    The location of this object.
    position GetAuthenticationPolicyRulesPosition
    rules GetAuthenticationPolicyRulesRule[]
    id str
    The provider-assigned unique ID for this managed resource.
    location GetAuthenticationPolicyRulesLocation
    The location of this object.
    position GetAuthenticationPolicyRulesPosition
    rules Sequence[GetAuthenticationPolicyRulesRule]
    id String
    The provider-assigned unique ID for this managed resource.
    location Property Map
    The location of this object.
    position Property Map
    rules List<Property Map>

    Supporting Types

    GetAuthenticationPolicyRulesLocation

    DeviceGroup GetAuthenticationPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    Shared GetAuthenticationPolicyRulesLocationShared
    Located in a shared rulebase
    Vsys GetAuthenticationPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    DeviceGroup GetAuthenticationPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    Shared GetAuthenticationPolicyRulesLocationShared
    Located in a shared rulebase
    Vsys GetAuthenticationPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    deviceGroup GetAuthenticationPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    shared GetAuthenticationPolicyRulesLocationShared
    Located in a shared rulebase
    vsys GetAuthenticationPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    deviceGroup GetAuthenticationPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    shared GetAuthenticationPolicyRulesLocationShared
    Located in a shared rulebase
    vsys GetAuthenticationPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    device_group GetAuthenticationPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    shared GetAuthenticationPolicyRulesLocationShared
    Located in a shared rulebase
    vsys GetAuthenticationPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    deviceGroup Property Map
    Located in a specific device group rulebase
    shared Property Map
    Located in a shared rulebase
    vsys Property Map
    Located in a specific vsys rulebase

    GetAuthenticationPolicyRulesLocationDeviceGroup

    Name string
    The device group name
    PanoramaDevice string
    The panorama device
    Rulebase string
    The rulebase
    Name string
    The device group name
    PanoramaDevice string
    The panorama device
    Rulebase string
    The rulebase
    name String
    The device group name
    panoramaDevice String
    The panorama device
    rulebase String
    The rulebase
    name string
    The device group name
    panoramaDevice string
    The panorama device
    rulebase string
    The rulebase
    name str
    The device group name
    panorama_device str
    The panorama device
    rulebase str
    The rulebase
    name String
    The device group name
    panoramaDevice String
    The panorama device
    rulebase String
    The rulebase

    GetAuthenticationPolicyRulesLocationShared

    Rulebase string
    Rulebase name
    Rulebase string
    Rulebase name
    rulebase String
    Rulebase name
    rulebase string
    Rulebase name
    rulebase str
    Rulebase name
    rulebase String
    Rulebase name

    GetAuthenticationPolicyRulesLocationVsys

    Name string
    The vsys name
    NgfwDevice string
    The NGFW device
    Name string
    The vsys name
    NgfwDevice string
    The NGFW device
    name String
    The vsys name
    ngfwDevice String
    The NGFW device
    name string
    The vsys name
    ngfwDevice string
    The NGFW device
    name str
    The vsys name
    ngfw_device str
    The NGFW device
    name String
    The vsys name
    ngfwDevice String
    The NGFW device

    GetAuthenticationPolicyRulesPosition

    Where string
    Directly bool
    Pivot string
    Where string
    Directly bool
    Pivot string
    where String
    directly Boolean
    pivot String
    where string
    directly boolean
    pivot string
    where str
    directly bool
    pivot str
    where String
    directly Boolean
    pivot String

    GetAuthenticationPolicyRulesRule

    AuditCommentVersion string
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    AuthenticationEnforcement string
    Authentication enforcement object to use for authentication.
    Categories List<string>
    Description string
    DestinationAddresses List<string>
    DestinationHips List<string>
    DestinationZones List<string>
    Disabled bool
    Disable the rule
    GroupTag string
    LogAuthenticationTimeout bool
    LogSetting string
    Log setting for forwarding authentication logs
    Name string
    NegateDestination bool
    NegateSource bool
    Services List<string>
    SourceAddresses List<string>
    SourceHips List<string>
    SourceUsers List<string>
    SourceZones List<string>
    Tags List<string>
    Target GetAuthenticationPolicyRulesRuleTarget
    Timeout double
    expiration timer (minutes)
    AuditCommentVersion string
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    AuthenticationEnforcement string
    Authentication enforcement object to use for authentication.
    Categories []string
    Description string
    DestinationAddresses []string
    DestinationHips []string
    DestinationZones []string
    Disabled bool
    Disable the rule
    GroupTag string
    LogAuthenticationTimeout bool
    LogSetting string
    Log setting for forwarding authentication logs
    Name string
    NegateDestination bool
    NegateSource bool
    Services []string
    SourceAddresses []string
    SourceHips []string
    SourceUsers []string
    SourceZones []string
    Tags []string
    Target GetAuthenticationPolicyRulesRuleTarget
    Timeout float64
    expiration timer (minutes)
    auditCommentVersion String
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    authenticationEnforcement String
    Authentication enforcement object to use for authentication.
    categories List<String>
    description String
    destinationAddresses List<String>
    destinationHips List<String>
    destinationZones List<String>
    disabled Boolean
    Disable the rule
    groupTag String
    logAuthenticationTimeout Boolean
    logSetting String
    Log setting for forwarding authentication logs
    name String
    negateDestination Boolean
    negateSource Boolean
    services List<String>
    sourceAddresses List<String>
    sourceHips List<String>
    sourceUsers List<String>
    sourceZones List<String>
    tags List<String>
    target GetAuthenticationPolicyRulesRuleTarget
    timeout Double
    expiration timer (minutes)
    auditCommentVersion string
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    authenticationEnforcement string
    Authentication enforcement object to use for authentication.
    categories string[]
    description string
    destinationAddresses string[]
    destinationHips string[]
    destinationZones string[]
    disabled boolean
    Disable the rule
    groupTag string
    logAuthenticationTimeout boolean
    logSetting string
    Log setting for forwarding authentication logs
    name string
    negateDestination boolean
    negateSource boolean
    services string[]
    sourceAddresses string[]
    sourceHips string[]
    sourceUsers string[]
    sourceZones string[]
    tags string[]
    target GetAuthenticationPolicyRulesRuleTarget
    timeout number
    expiration timer (minutes)
    audit_comment_version str
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    authentication_enforcement str
    Authentication enforcement object to use for authentication.
    categories Sequence[str]
    description str
    destination_addresses Sequence[str]
    destination_hips Sequence[str]
    destination_zones Sequence[str]
    disabled bool
    Disable the rule
    group_tag str
    log_authentication_timeout bool
    log_setting str
    Log setting for forwarding authentication logs
    name str
    negate_destination bool
    negate_source bool
    services Sequence[str]
    source_addresses Sequence[str]
    source_hips Sequence[str]
    source_users Sequence[str]
    source_zones Sequence[str]
    tags Sequence[str]
    target GetAuthenticationPolicyRulesRuleTarget
    timeout float
    expiration timer (minutes)
    auditCommentVersion String
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    authenticationEnforcement String
    Authentication enforcement object to use for authentication.
    categories List<String>
    description String
    destinationAddresses List<String>
    destinationHips List<String>
    destinationZones List<String>
    disabled Boolean
    Disable the rule
    groupTag String
    logAuthenticationTimeout Boolean
    logSetting String
    Log setting for forwarding authentication logs
    name String
    negateDestination Boolean
    negateSource Boolean
    services List<String>
    sourceAddresses List<String>
    sourceHips List<String>
    sourceUsers List<String>
    sourceZones List<String>
    tags List<String>
    target Property Map
    timeout Number
    expiration timer (minutes)

    GetAuthenticationPolicyRulesRuleTarget

    Devices List<GetAuthenticationPolicyRulesRuleTargetDevice>
    Negate bool
    Target to all but these specified devices and tags
    Tags List<string>
    Devices []GetAuthenticationPolicyRulesRuleTargetDevice
    Negate bool
    Target to all but these specified devices and tags
    Tags []string
    devices List<GetAuthenticationPolicyRulesRuleTargetDevice>
    negate Boolean
    Target to all but these specified devices and tags
    tags List<String>
    devices GetAuthenticationPolicyRulesRuleTargetDevice[]
    negate boolean
    Target to all but these specified devices and tags
    tags string[]
    devices Sequence[GetAuthenticationPolicyRulesRuleTargetDevice]
    negate bool
    Target to all but these specified devices and tags
    tags Sequence[str]
    devices List<Property Map>
    negate Boolean
    Target to all but these specified devices and tags
    tags List<String>

    GetAuthenticationPolicyRulesRuleTargetDevice

    GetAuthenticationPolicyRulesRuleTargetDeviceVsy

    Name string
    Name string
    name String
    name string
    name str
    name String

    Package Details

    Repository
    panos paloaltonetworks/terraform-provider-panos
    License
    Notes
    This Pulumi package is based on the panos Terraform Provider.
    Viewing docs for panos 2.0.11
    published on Tuesday, Apr 28, 2026 by paloaltonetworks
    Schema (JSON)
    paloaltonetworks/terraform-provider-panos
      Try Pulumi Cloud free. Your team will thank you.