panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks
panos.getSecurityPolicyRules
Explore with Pulumi AI
panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks
Using getSecurityPolicyRules
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getSecurityPolicyRules(args: GetSecurityPolicyRulesArgs, opts?: InvokeOptions): Promise<GetSecurityPolicyRulesResult>
function getSecurityPolicyRulesOutput(args: GetSecurityPolicyRulesOutputArgs, opts?: InvokeOptions): Output<GetSecurityPolicyRulesResult>
def get_security_policy_rules(location: Optional[GetSecurityPolicyRulesLocation] = None,
position: Optional[GetSecurityPolicyRulesPosition] = None,
rules: Optional[Sequence[GetSecurityPolicyRulesRule]] = None,
opts: Optional[InvokeOptions] = None) -> GetSecurityPolicyRulesResult
def get_security_policy_rules_output(location: Optional[pulumi.Input[GetSecurityPolicyRulesLocationArgs]] = None,
position: Optional[pulumi.Input[GetSecurityPolicyRulesPositionArgs]] = None,
rules: Optional[pulumi.Input[Sequence[pulumi.Input[GetSecurityPolicyRulesRuleArgs]]]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetSecurityPolicyRulesResult]
func LookupSecurityPolicyRules(ctx *Context, args *LookupSecurityPolicyRulesArgs, opts ...InvokeOption) (*LookupSecurityPolicyRulesResult, error)
func LookupSecurityPolicyRulesOutput(ctx *Context, args *LookupSecurityPolicyRulesOutputArgs, opts ...InvokeOption) LookupSecurityPolicyRulesResultOutput
> Note: This function is named LookupSecurityPolicyRules
in the Go SDK.
public static class GetSecurityPolicyRules
{
public static Task<GetSecurityPolicyRulesResult> InvokeAsync(GetSecurityPolicyRulesArgs args, InvokeOptions? opts = null)
public static Output<GetSecurityPolicyRulesResult> Invoke(GetSecurityPolicyRulesInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetSecurityPolicyRulesResult> getSecurityPolicyRules(GetSecurityPolicyRulesArgs args, InvokeOptions options)
public static Output<GetSecurityPolicyRulesResult> getSecurityPolicyRules(GetSecurityPolicyRulesArgs args, InvokeOptions options)
fn::invoke:
function: panos:index/getSecurityPolicyRules:getSecurityPolicyRules
arguments:
# arguments dictionary
The following arguments are supported:
- Location
Get
Security Policy Rules Location - The location of this object.
- Position
Get
Security Policy Rules Position - Rules
List<Get
Security Policy Rules Rule>
- Location
Get
Security Policy Rules Location - The location of this object.
- Position
Get
Security Policy Rules Position - Rules
[]Get
Security Policy Rules Rule
- location
Get
Security Policy Rules Location - The location of this object.
- position
Get
Security Policy Rules Position - rules
List<Get
Security Policy Rules Rule>
- location
Get
Security Policy Rules Location - The location of this object.
- position
Get
Security Policy Rules Position - rules
Get
Security Policy Rules Rule[]
- location
Get
Security Policy Rules Location - The location of this object.
- position
Get
Security Policy Rules Position - rules
Sequence[Get
Security Policy Rules Rule]
- location Property Map
- The location of this object.
- position Property Map
- rules List<Property Map>
getSecurityPolicyRules Result
The following output properties are available:
- Id string
- The provider-assigned unique ID for this managed resource.
- Location
Get
Security Policy Rules Location - The location of this object.
- Position
Get
Security Policy Rules Position - Rules
List<Get
Security Policy Rules Rule>
- Id string
- The provider-assigned unique ID for this managed resource.
- Location
Get
Security Policy Rules Location - The location of this object.
- Position
Get
Security Policy Rules Position - Rules
[]Get
Security Policy Rules Rule
- id String
- The provider-assigned unique ID for this managed resource.
- location
Get
Security Policy Rules Location - The location of this object.
- position
Get
Security Policy Rules Position - rules
List<Get
Security Policy Rules Rule>
- id string
- The provider-assigned unique ID for this managed resource.
- location
Get
Security Policy Rules Location - The location of this object.
- position
Get
Security Policy Rules Position - rules
Get
Security Policy Rules Rule[]
- id str
- The provider-assigned unique ID for this managed resource.
- location
Get
Security Policy Rules Location - The location of this object.
- position
Get
Security Policy Rules Position - rules
Sequence[Get
Security Policy Rules Rule]
- id String
- The provider-assigned unique ID for this managed resource.
- location Property Map
- The location of this object.
- position Property Map
- rules List<Property Map>
Supporting Types
GetSecurityPolicyRulesLocation
- Device
Group GetSecurity Policy Rules Location Device Group - Located in a specific device group.
- Get
Security Policy Rules Location Shared - Located in a shared rulebase
- Vsys
Get
Security Policy Rules Location Vsys - Located in a specific vsys.
- Device
Group GetSecurity Policy Rules Location Device Group - Located in a specific device group.
- Get
Security Policy Rules Location Shared - Located in a shared rulebase
- Vsys
Get
Security Policy Rules Location Vsys - Located in a specific vsys.
- device
Group GetSecurity Policy Rules Location Device Group - Located in a specific device group.
- Get
Security Policy Rules Location Shared - Located in a shared rulebase
- vsys
Get
Security Policy Rules Location Vsys - Located in a specific vsys.
- device
Group GetSecurity Policy Rules Location Device Group - Located in a specific device group.
- Get
Security Policy Rules Location Shared - Located in a shared rulebase
- vsys
Get
Security Policy Rules Location Vsys - Located in a specific vsys.
- device_
group GetSecurity Policy Rules Location Device Group - Located in a specific device group.
- Get
Security Policy Rules Location Shared - Located in a shared rulebase
- vsys
Get
Security Policy Rules Location Vsys - Located in a specific vsys.
- device
Group Property Map - Located in a specific device group.
- Property Map
- Located in a shared rulebase
- vsys Property Map
- Located in a specific vsys.
GetSecurityPolicyRulesLocationDeviceGroup
- Name string
- The device group.
- Panorama
Device string - The panorama device.
- Rulebase string
- The rulebase.
- Name string
- The device group.
- Panorama
Device string - The panorama device.
- Rulebase string
- The rulebase.
- name String
- The device group.
- panorama
Device String - The panorama device.
- rulebase String
- The rulebase.
- name string
- The device group.
- panorama
Device string - The panorama device.
- rulebase string
- The rulebase.
- name str
- The device group.
- panorama_
device str - The panorama device.
- rulebase str
- The rulebase.
- name String
- The device group.
- panorama
Device String - The panorama device.
- rulebase String
- The rulebase.
GetSecurityPolicyRulesLocationShared
- Rulebase string
- Rulebase name
- Rulebase string
- Rulebase name
- rulebase String
- Rulebase name
- rulebase string
- Rulebase name
- rulebase str
- Rulebase name
- rulebase String
- Rulebase name
GetSecurityPolicyRulesLocationVsys
- Name string
- The vsys name
- Ngfw
Device string - The NGFW device
- Name string
- The vsys name
- Ngfw
Device string - The NGFW device
- name String
- The vsys name
- ngfw
Device String - The NGFW device
- name string
- The vsys name
- ngfw
Device string - The NGFW device
- name str
- The vsys name
- ngfw_
device str - The NGFW device
- name String
- The vsys name
- ngfw
Device String - The NGFW device
GetSecurityPolicyRulesPosition
GetSecurityPolicyRulesRule
- Action string
- Applications List<string>
- Categories List<string>
- Description string
- Destination
Addresses List<string> - Destination
Hips List<string> - Destination
Zones List<string> - Disable
Inspect bool - Disable
Server boolResponse Inspection - Disable inspection of server side traffic
- Disabled bool
- Disable the rule
- Group
Tag string - Icmp
Unreachable bool - Send ICMP unreachable error when action is drop or reset
- Log
End bool - Log at session end (required for certain ACC tables)
- Log
Setting string - Log
Start bool - Log at session start
- Name string
- Negate
Destination bool - Negate
Source bool - Profile
Setting GetSecurity Policy Rules Rule Profile Setting - Qos
Get
Security Policy Rules Rule Qos - Rule
Type string - Schedule string
- Services List<string>
- Source
Addresses List<string> - Source
Hips List<string> - Source
Imeis List<string> - Source
Imsis List<string> - Source
Nw List<string>Slices - Source
Users List<string> - Source
Zones List<string> - List<string>
- Target
Get
Security Policy Rules Rule Target
- Action string
- Applications []string
- Categories []string
- Description string
- Destination
Addresses []string - Destination
Hips []string - Destination
Zones []string - Disable
Inspect bool - Disable
Server boolResponse Inspection - Disable inspection of server side traffic
- Disabled bool
- Disable the rule
- Group
Tag string - Icmp
Unreachable bool - Send ICMP unreachable error when action is drop or reset
- Log
End bool - Log at session end (required for certain ACC tables)
- Log
Setting string - Log
Start bool - Log at session start
- Name string
- Negate
Destination bool - Negate
Source bool - Profile
Setting GetSecurity Policy Rules Rule Profile Setting - Qos
Get
Security Policy Rules Rule Qos - Rule
Type string - Schedule string
- Services []string
- Source
Addresses []string - Source
Hips []string - Source
Imeis []string - Source
Imsis []string - Source
Nw []stringSlices - Source
Users []string - Source
Zones []string - []string
- Target
Get
Security Policy Rules Rule Target
- action String
- applications List<String>
- categories List<String>
- description String
- destination
Addresses List<String> - destination
Hips List<String> - destination
Zones List<String> - disable
Inspect Boolean - disable
Server BooleanResponse Inspection - Disable inspection of server side traffic
- disabled Boolean
- Disable the rule
- group
Tag String - icmp
Unreachable Boolean - Send ICMP unreachable error when action is drop or reset
- log
End Boolean - Log at session end (required for certain ACC tables)
- log
Setting String - log
Start Boolean - Log at session start
- name String
- negate
Destination Boolean - negate
Source Boolean - profile
Setting GetSecurity Policy Rules Rule Profile Setting - qos
Get
Security Policy Rules Rule Qos - rule
Type String - schedule String
- services List<String>
- source
Addresses List<String> - source
Hips List<String> - source
Imeis List<String> - source
Imsis List<String> - source
Nw List<String>Slices - source
Users List<String> - source
Zones List<String> - List<String>
- target
Get
Security Policy Rules Rule Target
- action string
- applications string[]
- categories string[]
- description string
- destination
Addresses string[] - destination
Hips string[] - destination
Zones string[] - disable
Inspect boolean - disable
Server booleanResponse Inspection - Disable inspection of server side traffic
- disabled boolean
- Disable the rule
- group
Tag string - icmp
Unreachable boolean - Send ICMP unreachable error when action is drop or reset
- log
End boolean - Log at session end (required for certain ACC tables)
- log
Setting string - log
Start boolean - Log at session start
- name string
- negate
Destination boolean - negate
Source boolean - profile
Setting GetSecurity Policy Rules Rule Profile Setting - qos
Get
Security Policy Rules Rule Qos - rule
Type string - schedule string
- services string[]
- source
Addresses string[] - source
Hips string[] - source
Imeis string[] - source
Imsis string[] - source
Nw string[]Slices - source
Users string[] - source
Zones string[] - string[]
- target
Get
Security Policy Rules Rule Target
- action str
- applications Sequence[str]
- categories Sequence[str]
- description str
- destination_
addresses Sequence[str] - destination_
hips Sequence[str] - destination_
zones Sequence[str] - disable_
inspect bool - disable_
server_ boolresponse_ inspection - Disable inspection of server side traffic
- disabled bool
- Disable the rule
- group_
tag str - icmp_
unreachable bool - Send ICMP unreachable error when action is drop or reset
- log_
end bool - Log at session end (required for certain ACC tables)
- log_
setting str - log_
start bool - Log at session start
- name str
- negate_
destination bool - negate_
source bool - profile_
setting GetSecurity Policy Rules Rule Profile Setting - qos
Get
Security Policy Rules Rule Qos - rule_
type str - schedule str
- services Sequence[str]
- source_
addresses Sequence[str] - source_
hips Sequence[str] - source_
imeis Sequence[str] - source_
imsis Sequence[str] - source_
nw_ Sequence[str]slices - source_
users Sequence[str] - source_
zones Sequence[str] - Sequence[str]
- target
Get
Security Policy Rules Rule Target
- action String
- applications List<String>
- categories List<String>
- description String
- destination
Addresses List<String> - destination
Hips List<String> - destination
Zones List<String> - disable
Inspect Boolean - disable
Server BooleanResponse Inspection - Disable inspection of server side traffic
- disabled Boolean
- Disable the rule
- group
Tag String - icmp
Unreachable Boolean - Send ICMP unreachable error when action is drop or reset
- log
End Boolean - Log at session end (required for certain ACC tables)
- log
Setting String - log
Start Boolean - Log at session start
- name String
- negate
Destination Boolean - negate
Source Boolean - profile
Setting Property Map - qos Property Map
- rule
Type String - schedule String
- services List<String>
- source
Addresses List<String> - source
Hips List<String> - source
Imeis List<String> - source
Imsis List<String> - source
Nw List<String>Slices - source
Users List<String> - source
Zones List<String> - List<String>
- target Property Map
GetSecurityPolicyRulesRuleProfileSetting
- groups List<String>
- profiles Property Map
GetSecurityPolicyRulesRuleProfileSettingProfiles
- Data
Filterings List<string> - File
Blockings List<string> - Gtps List<string>
- Sctps List<string>
- Spywares List<string>
- Url
Filterings List<string> - Viri List<string>
- Vulnerabilities List<string>
- Wildfire
Analyses List<string>
- Data
Filterings []string - File
Blockings []string - Gtps []string
- Sctps []string
- Spywares []string
- Url
Filterings []string - Viri []string
- Vulnerabilities []string
- Wildfire
Analyses []string
- data
Filterings List<String> - file
Blockings List<String> - gtps List<String>
- sctps List<String>
- spywares List<String>
- url
Filterings List<String> - viri List<String>
- vulnerabilities List<String>
- wildfire
Analyses List<String>
- data
Filterings string[] - file
Blockings string[] - gtps string[]
- sctps string[]
- spywares string[]
- url
Filterings string[] - viri string[]
- vulnerabilities string[]
- wildfire
Analyses string[]
- data_
filterings Sequence[str] - file_
blockings Sequence[str] - gtps Sequence[str]
- sctps Sequence[str]
- spywares Sequence[str]
- url_
filterings Sequence[str] - viri Sequence[str]
- vulnerabilities Sequence[str]
- wildfire_
analyses Sequence[str]
- data
Filterings List<String> - file
Blockings List<String> - gtps List<String>
- sctps List<String>
- spywares List<String>
- url
Filterings List<String> - viri List<String>
- vulnerabilities List<String>
- wildfire
Analyses List<String>
GetSecurityPolicyRulesRuleQos
GetSecurityPolicyRulesRuleQosMarking
- Follow
C2s GetFlow Security Policy Rules Rule Qos Marking Follow C2s Flow - Ip
Dscp string - IP DSCP
- Ip
Precedence string - IP Precedence
- Follow
C2s GetFlow Security Policy Rules Rule Qos Marking Follow C2s Flow - Ip
Dscp string - IP DSCP
- Ip
Precedence string - IP Precedence
- follow
C2s GetFlow Security Policy Rules Rule Qos Marking Follow C2s Flow - ip
Dscp String - IP DSCP
- ip
Precedence String - IP Precedence
- follow
C2s GetFlow Security Policy Rules Rule Qos Marking Follow C2s Flow - ip
Dscp string - IP DSCP
- ip
Precedence string - IP Precedence
- follow_
c2s_ Getflow Security Policy Rules Rule Qos Marking Follow C2s Flow - ip_
dscp str - IP DSCP
- ip_
precedence str - IP Precedence
- follow
C2s Property MapFlow - ip
Dscp String - IP DSCP
- ip
Precedence String - IP Precedence
GetSecurityPolicyRulesRuleTarget
- Devices
List<Get
Security Policy Rules Rule Target Device> - Negate bool
- Target to all but these specified devices and tags
- List<string>
- Devices
[]Get
Security Policy Rules Rule Target Device - Negate bool
- Target to all but these specified devices and tags
- []string
- devices
List<Get
Security Policy Rules Rule Target Device> - negate Boolean
- Target to all but these specified devices and tags
- List<String>
- devices
Get
Security Policy Rules Rule Target Device[] - negate boolean
- Target to all but these specified devices and tags
- string[]
- devices
Sequence[Get
Security Policy Rules Rule Target Device] - negate bool
- Target to all but these specified devices and tags
- Sequence[str]
- devices List<Property Map>
- negate Boolean
- Target to all but these specified devices and tags
- List<String>
GetSecurityPolicyRulesRuleTargetDevice
- name String
- vsys List<Property Map>
GetSecurityPolicyRulesRuleTargetDeviceVsy
- Name string
- Name string
- name String
- name string
- name str
- name String
Package Details
- Repository
- panos paloaltonetworks/terraform-provider-panos
- License
- Notes
- This Pulumi package is based on the
panos
Terraform Provider.
panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks