1. Packages
  2. Twingate
  3. API Docs
  4. TwingateResource
Twingate v3.5.0 published on Monday, Sep 22, 2025 by Twingate
twingate/pulumi-twingate

twingate.TwingateResource

Get Started
twingate logo
Twingate v3.5.0 published on Monday, Sep 22, 2025 by Twingate
twingate/pulumi-twingate

    Resources in Twingate represent servers on the private network that clients can connect to. Resources can be defined by IP, CIDR range, FQDN, or DNS zone. For more information, see the Twingate documentation.

    Create TwingateResource Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new TwingateResource(name: string, args: TwingateResourceArgs, opts?: CustomResourceOptions);
    @overload
def TwingateResource(resource_name: str,
                     args: TwingateResourceArgs,
                     opts: Optional[ResourceOptions] = None)

@overload
def TwingateResource(resource_name: str,
                     opts: Optional[ResourceOptions] = None,
                     address: Optional[str] = None,
                     remote_network_id: Optional[str] = None,
                     is_authoritative: Optional[bool] = None,
                     alias: Optional[str] = None,
                     approval_mode: Optional[str] = None,
                     is_active: Optional[bool] = None,
                     access_groups: Optional[Sequence[TwingateResourceAccessGroupArgs]] = None,
                     is_browser_shortcut_enabled: Optional[bool] = None,
                     is_visible: Optional[bool] = None,
                     name: Optional[str] = None,
                     protocols: Optional[TwingateResourceProtocolsArgs] = None,
                     access_services: Optional[Sequence[TwingateResourceAccessServiceArgs]] = None,
                     security_policy_id: Optional[str] = None,
                     tags: Optional[Mapping[str, str]] = None,
                     usage_based_autolock_duration_days: Optional[int] = None)
    func NewTwingateResource(ctx *Context, name string, args TwingateResourceArgs, opts ...ResourceOption) (*TwingateResource, error)
    public TwingateResource(string name, TwingateResourceArgs args, CustomResourceOptions? opts = null)
    public TwingateResource(String name, TwingateResourceArgs args)
public TwingateResource(String name, TwingateResourceArgs args, CustomResourceOptions options)

    type: twingate:TwingateResource
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args TwingateResourceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TwingateResourceArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TwingateResourceArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TwingateResourceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TwingateResourceArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var twingateResourceResource = new Twingate.TwingateResource("twingateResourceResource", new()
{
    Address = "string",
    RemoteNetworkId = "string",
    IsAuthoritative = false,
    Alias = "string",
    ApprovalMode = "string",
    IsActive = false,
    AccessGroups = new[]
    {
        new Twingate.Inputs.TwingateResourceAccessGroupArgs
        {
            ApprovalMode = "string",
            GroupId = "string",
            SecurityPolicyId = "string",
            UsageBasedAutolockDurationDays = 0,
        },
    },
    IsBrowserShortcutEnabled = false,
    IsVisible = false,
    Name = "string",
    Protocols = new Twingate.Inputs.TwingateResourceProtocolsArgs
    {
        AllowIcmp = false,
        Tcp = new Twingate.Inputs.TwingateResourceProtocolsTcpArgs
        {
            Policy = "string",
            Ports = new[]
            {
                "string",
            },
        },
        Udp = new Twingate.Inputs.TwingateResourceProtocolsUdpArgs
        {
            Policy = "string",
            Ports = new[]
            {
                "string",
            },
        },
    },
    AccessServices = new[]
    {
        new Twingate.Inputs.TwingateResourceAccessServiceArgs
        {
            ServiceAccountId = "string",
        },
    },
    SecurityPolicyId = "string",
    Tags = 
    {
        { "string", "string" },
    },
    UsageBasedAutolockDurationDays = 0,
});

    example, err := twingate.NewTwingateResource(ctx, "twingateResourceResource", &twingate.TwingateResourceArgs{
	Address:         pulumi.String("string"),
	RemoteNetworkId: pulumi.String("string"),
	IsAuthoritative: pulumi.Bool(false),
	Alias:           pulumi.String("string"),
	ApprovalMode:    pulumi.String("string"),
	IsActive:        pulumi.Bool(false),
	AccessGroups: twingate.TwingateResourceAccessGroupArray{
		&twingate.TwingateResourceAccessGroupArgs{
			ApprovalMode:                   pulumi.String("string"),
			GroupId:                        pulumi.String("string"),
			SecurityPolicyId:               pulumi.String("string"),
			UsageBasedAutolockDurationDays: pulumi.Int(0),
		},
	},
	IsBrowserShortcutEnabled: pulumi.Bool(false),
	IsVisible:                pulumi.Bool(false),
	Name:                     pulumi.String("string"),
	Protocols: &twingate.TwingateResourceProtocolsArgs{
		AllowIcmp: pulumi.Bool(false),
		Tcp: &twingate.TwingateResourceProtocolsTcpArgs{
			Policy: pulumi.String("string"),
			Ports: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		Udp: &twingate.TwingateResourceProtocolsUdpArgs{
			Policy: pulumi.String("string"),
			Ports: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	AccessServices: twingate.TwingateResourceAccessServiceArray{
		&twingate.TwingateResourceAccessServiceArgs{
			ServiceAccountId: pulumi.String("string"),
		},
	},
	SecurityPolicyId: pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	UsageBasedAutolockDurationDays: pulumi.Int(0),
})

    var twingateResourceResource = new TwingateResource("twingateResourceResource", TwingateResourceArgs.builder()
    .address("string")
    .remoteNetworkId("string")
    .isAuthoritative(false)
    .alias("string")
    .approvalMode("string")
    .isActive(false)
    .accessGroups(TwingateResourceAccessGroupArgs.builder()
        .approvalMode("string")
        .groupId("string")
        .securityPolicyId("string")
        .usageBasedAutolockDurationDays(0)
        .build())
    .isBrowserShortcutEnabled(false)
    .isVisible(false)
    .name("string")
    .protocols(TwingateResourceProtocolsArgs.builder()
        .allowIcmp(false)
        .tcp(TwingateResourceProtocolsTcpArgs.builder()
            .policy("string")
            .ports("string")
            .build())
        .udp(TwingateResourceProtocolsUdpArgs.builder()
            .policy("string")
            .ports("string")
            .build())
        .build())
    .accessServices(TwingateResourceAccessServiceArgs.builder()
        .serviceAccountId("string")
        .build())
    .securityPolicyId("string")
    .tags(Map.of("string", "string"))
    .usageBasedAutolockDurationDays(0)
    .build());

    twingate_resource_resource = twingate.TwingateResource("twingateResourceResource",
    address="string",
    remote_network_id="string",
    is_authoritative=False,
    alias="string",
    approval_mode="string",
    is_active=False,
    access_groups=[{
        "approval_mode": "string",
        "group_id": "string",
        "security_policy_id": "string",
        "usage_based_autolock_duration_days": 0,
    }],
    is_browser_shortcut_enabled=False,
    is_visible=False,
    name="string",
    protocols={
        "allow_icmp": False,
        "tcp": {
            "policy": "string",
            "ports": ["string"],
        },
        "udp": {
            "policy": "string",
            "ports": ["string"],
        },
    },
    access_services=[{
        "service_account_id": "string",
    }],
    security_policy_id="string",
    tags={
        "string": "string",
    },
    usage_based_autolock_duration_days=0)

    const twingateResourceResource = new twingate.TwingateResource("twingateResourceResource", {
    address: "string",
    remoteNetworkId: "string",
    isAuthoritative: false,
    alias: "string",
    approvalMode: "string",
    isActive: false,
    accessGroups: [{
        approvalMode: "string",
        groupId: "string",
        securityPolicyId: "string",
        usageBasedAutolockDurationDays: 0,
    }],
    isBrowserShortcutEnabled: false,
    isVisible: false,
    name: "string",
    protocols: {
        allowIcmp: false,
        tcp: {
            policy: "string",
            ports: ["string"],
        },
        udp: {
            policy: "string",
            ports: ["string"],
        },
    },
    accessServices: [{
        serviceAccountId: "string",
    }],
    securityPolicyId: "string",
    tags: {
        string: "string",
    },
    usageBasedAutolockDurationDays: 0,
});

    type: twingate:TwingateResource
properties:
    accessGroups:
        - approvalMode: string
          groupId: string
          securityPolicyId: string
          usageBasedAutolockDurationDays: 0
    accessServices:
        - serviceAccountId: string
    address: string
    alias: string
    approvalMode: string
    isActive: false
    isAuthoritative: false
    isBrowserShortcutEnabled: false
    isVisible: false
    name: string
    protocols:
        allowIcmp: false
        tcp:
            policy: string
            ports:
                - string
        udp:
            policy: string
            ports:
                - string
    remoteNetworkId: string
    securityPolicyId: string
    tags:
        string: string
    usageBasedAutolockDurationDays: 0

    TwingateResource Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The TwingateResource resource accepts the following input properties:

    Address string
    The Resource's IP/CIDR or FQDN/DNS zone
    RemoteNetworkId string
    Remote Network ID where the Resource lives
    AccessGroups List<Twingate.Twingate.Inputs.TwingateResourceAccessGroup>
    Restrict access to certain group
    AccessServices List<Twingate.Twingate.Inputs.TwingateResourceAccessService>
    Restrict access to certain service account
    Alias string
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    ApprovalMode string
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    IsActive bool
    Set the resource as active or inactive. Default is true.
    IsAuthoritative bool
    IsBrowserShortcutEnabled bool
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    IsVisible bool
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    Name string
    The name of the Resource
    Protocols Twingate.Twingate.Inputs.TwingateResourceProtocols
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    SecurityPolicyId string
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    Tags Dictionary<string, string>
    A map of key-value pair tags to set on this resource.
    UsageBasedAutolockDurationDays int
    The usage-based auto-lock duration for the Resource (in days).
    Address string
    The Resource's IP/CIDR or FQDN/DNS zone
    RemoteNetworkId string
    Remote Network ID where the Resource lives
    AccessGroups []TwingateResourceAccessGroupArgs
    Restrict access to certain group
    AccessServices []TwingateResourceAccessServiceArgs
    Restrict access to certain service account
    Alias string
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    ApprovalMode string
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    IsActive bool
    Set the resource as active or inactive. Default is true.
    IsAuthoritative bool
    IsBrowserShortcutEnabled bool
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    IsVisible bool
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    Name string
    The name of the Resource
    Protocols TwingateResourceProtocolsArgs
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    SecurityPolicyId string
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    Tags map[string]string
    A map of key-value pair tags to set on this resource.
    UsageBasedAutolockDurationDays int
    The usage-based auto-lock duration for the Resource (in days).
    address String
    The Resource's IP/CIDR or FQDN/DNS zone
    remoteNetworkId String
    Remote Network ID where the Resource lives
    accessGroups List<TwingateResourceAccessGroup>
    Restrict access to certain group
    accessServices List<TwingateResourceAccessService>
    Restrict access to certain service account
    alias String
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    approvalMode String
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    isActive Boolean
    Set the resource as active or inactive. Default is true.
    isAuthoritative Boolean
    isBrowserShortcutEnabled Boolean
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    isVisible Boolean
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    name String
    The name of the Resource
    protocols TwingateResourceProtocols
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    securityPolicyId String
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    tags Map<String,String>
    A map of key-value pair tags to set on this resource.
    usageBasedAutolockDurationDays Integer
    The usage-based auto-lock duration for the Resource (in days).
    address string
    The Resource's IP/CIDR or FQDN/DNS zone
    remoteNetworkId string
    Remote Network ID where the Resource lives
    accessGroups TwingateResourceAccessGroup[]
    Restrict access to certain group
    accessServices TwingateResourceAccessService[]
    Restrict access to certain service account
    alias string
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    approvalMode string
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    isActive boolean
    Set the resource as active or inactive. Default is true.
    isAuthoritative boolean
    isBrowserShortcutEnabled boolean
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    isVisible boolean
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    name string
    The name of the Resource
    protocols TwingateResourceProtocols
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    securityPolicyId string
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    tags {[key: string]: string}
    A map of key-value pair tags to set on this resource.
    usageBasedAutolockDurationDays number
    The usage-based auto-lock duration for the Resource (in days).
    address str
    The Resource's IP/CIDR or FQDN/DNS zone
    remote_network_id str
    Remote Network ID where the Resource lives
    access_groups Sequence[TwingateResourceAccessGroupArgs]
    Restrict access to certain group
    access_services Sequence[TwingateResourceAccessServiceArgs]
    Restrict access to certain service account
    alias str
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    approval_mode str
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    is_active bool
    Set the resource as active or inactive. Default is true.
    is_authoritative bool
    is_browser_shortcut_enabled bool
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    is_visible bool
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    name str
    The name of the Resource
    protocols TwingateResourceProtocolsArgs
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    security_policy_id str
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    tags Mapping[str, str]
    A map of key-value pair tags to set on this resource.
    usage_based_autolock_duration_days int
    The usage-based auto-lock duration for the Resource (in days).
    address String
    The Resource's IP/CIDR or FQDN/DNS zone
    remoteNetworkId String
    Remote Network ID where the Resource lives
    accessGroups List<Property Map>
    Restrict access to certain group
    accessServices List<Property Map>
    Restrict access to certain service account
    alias String
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    approvalMode String
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    isActive Boolean
    Set the resource as active or inactive. Default is true.
    isAuthoritative Boolean
    isBrowserShortcutEnabled Boolean
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    isVisible Boolean
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    name String
    The name of the Resource
    protocols Property Map
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    securityPolicyId String
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    tags Map<String>
    A map of key-value pair tags to set on this resource.
    usageBasedAutolockDurationDays Number
    The usage-based auto-lock duration for the Resource (in days).

    Outputs

    All input properties are implicitly available as output properties. Additionally, the TwingateResource resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    TagsAll Dictionary<string, string>
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    Id string
    The provider-assigned unique ID for this managed resource.
    TagsAll map[string]string
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    id String
    The provider-assigned unique ID for this managed resource.
    tagsAll Map<String,String>
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    id string
    The provider-assigned unique ID for this managed resource.
    tagsAll {[key: string]: string}
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    id str
    The provider-assigned unique ID for this managed resource.
    tags_all Mapping[str, str]
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    id String
    The provider-assigned unique ID for this managed resource.
    tagsAll Map<String>
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.

    Look up Existing TwingateResource Resource

    Get an existing TwingateResource resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: TwingateResourceState, opts?: CustomResourceOptions): TwingateResource
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_groups: Optional[Sequence[TwingateResourceAccessGroupArgs]] = None,
        access_services: Optional[Sequence[TwingateResourceAccessServiceArgs]] = None,
        address: Optional[str] = None,
        alias: Optional[str] = None,
        approval_mode: Optional[str] = None,
        is_active: Optional[bool] = None,
        is_authoritative: Optional[bool] = None,
        is_browser_shortcut_enabled: Optional[bool] = None,
        is_visible: Optional[bool] = None,
        name: Optional[str] = None,
        protocols: Optional[TwingateResourceProtocolsArgs] = None,
        remote_network_id: Optional[str] = None,
        security_policy_id: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None,
        usage_based_autolock_duration_days: Optional[int] = None) -> TwingateResource
    func GetTwingateResource(ctx *Context, name string, id IDInput, state *TwingateResourceState, opts ...ResourceOption) (*TwingateResource, error)
    public static TwingateResource Get(string name, Input<string> id, TwingateResourceState? state, CustomResourceOptions? opts = null)
    public static TwingateResource get(String name, Output<String> id, TwingateResourceState state, CustomResourceOptions options)
    resources:  _:    type: twingate:TwingateResource    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccessGroups List<Twingate.Twingate.Inputs.TwingateResourceAccessGroup>
    Restrict access to certain group
    AccessServices List<Twingate.Twingate.Inputs.TwingateResourceAccessService>
    Restrict access to certain service account
    Address string
    The Resource's IP/CIDR or FQDN/DNS zone
    Alias string
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    ApprovalMode string
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    IsActive bool
    Set the resource as active or inactive. Default is true.
    IsAuthoritative bool
    IsBrowserShortcutEnabled bool
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    IsVisible bool
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    Name string
    The name of the Resource
    Protocols Twingate.Twingate.Inputs.TwingateResourceProtocols
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    RemoteNetworkId string
    Remote Network ID where the Resource lives
    SecurityPolicyId string
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    Tags Dictionary<string, string>
    A map of key-value pair tags to set on this resource.
    TagsAll Dictionary<string, string>
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    UsageBasedAutolockDurationDays int
    The usage-based auto-lock duration for the Resource (in days).
    AccessGroups []TwingateResourceAccessGroupArgs
    Restrict access to certain group
    AccessServices []TwingateResourceAccessServiceArgs
    Restrict access to certain service account
    Address string
    The Resource's IP/CIDR or FQDN/DNS zone
    Alias string
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    ApprovalMode string
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    IsActive bool
    Set the resource as active or inactive. Default is true.
    IsAuthoritative bool
    IsBrowserShortcutEnabled bool
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    IsVisible bool
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    Name string
    The name of the Resource
    Protocols TwingateResourceProtocolsArgs
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    RemoteNetworkId string
    Remote Network ID where the Resource lives
    SecurityPolicyId string
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    Tags map[string]string
    A map of key-value pair tags to set on this resource.
    TagsAll map[string]string
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    UsageBasedAutolockDurationDays int
    The usage-based auto-lock duration for the Resource (in days).
    accessGroups List<TwingateResourceAccessGroup>
    Restrict access to certain group
    accessServices List<TwingateResourceAccessService>
    Restrict access to certain service account
    address String
    The Resource's IP/CIDR or FQDN/DNS zone
    alias String
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    approvalMode String
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    isActive Boolean
    Set the resource as active or inactive. Default is true.
    isAuthoritative Boolean
    isBrowserShortcutEnabled Boolean
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    isVisible Boolean
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    name String
    The name of the Resource
    protocols TwingateResourceProtocols
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    remoteNetworkId String
    Remote Network ID where the Resource lives
    securityPolicyId String
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    tags Map<String,String>
    A map of key-value pair tags to set on this resource.
    tagsAll Map<String,String>
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    usageBasedAutolockDurationDays Integer
    The usage-based auto-lock duration for the Resource (in days).
    accessGroups TwingateResourceAccessGroup[]
    Restrict access to certain group
    accessServices TwingateResourceAccessService[]
    Restrict access to certain service account
    address string
    The Resource's IP/CIDR or FQDN/DNS zone
    alias string
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    approvalMode string
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    isActive boolean
    Set the resource as active or inactive. Default is true.
    isAuthoritative boolean
    isBrowserShortcutEnabled boolean
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    isVisible boolean
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    name string
    The name of the Resource
    protocols TwingateResourceProtocols
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    remoteNetworkId string
    Remote Network ID where the Resource lives
    securityPolicyId string
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    tags {[key: string]: string}
    A map of key-value pair tags to set on this resource.
    tagsAll {[key: string]: string}
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    usageBasedAutolockDurationDays number
    The usage-based auto-lock duration for the Resource (in days).
    access_groups Sequence[TwingateResourceAccessGroupArgs]
    Restrict access to certain group
    access_services Sequence[TwingateResourceAccessServiceArgs]
    Restrict access to certain service account
    address str
    The Resource's IP/CIDR or FQDN/DNS zone
    alias str
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    approval_mode str
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    is_active bool
    Set the resource as active or inactive. Default is true.
    is_authoritative bool
    is_browser_shortcut_enabled bool
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    is_visible bool
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    name str
    The name of the Resource
    protocols TwingateResourceProtocolsArgs
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    remote_network_id str
    Remote Network ID where the Resource lives
    security_policy_id str
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    tags Mapping[str, str]
    A map of key-value pair tags to set on this resource.
    tags_all Mapping[str, str]
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    usage_based_autolock_duration_days int
    The usage-based auto-lock duration for the Resource (in days).
    accessGroups List<Property Map>
    Restrict access to certain group
    accessServices List<Property Map>
    Restrict access to certain service account
    address String
    The Resource's IP/CIDR or FQDN/DNS zone
    alias String
    Set a DNS alias address for the Resource. Must be a DNS-valid name string.
    approvalMode String
    This will set the approval model for the Resource. The valid values are AUTOMATIC and MANUAL.
    isActive Boolean
    Set the resource as active or inactive. Default is true.
    isAuthoritative Boolean
    isBrowserShortcutEnabled Boolean
    Controls whether an "Open in Browser" shortcut will be shown for this Resource in the Twingate Client. Default is false.
    isVisible Boolean
    Controls whether this Resource will be visible in the main Resource list in the Twingate Client. Default is true.
    name String
    The name of the Resource
    protocols Property Map
    Restrict access to certain protocols and ports. By default or when this argument is not defined, there is no restriction, and all protocols and ports are allowed.
    remoteNetworkId String
    Remote Network ID where the Resource lives
    securityPolicyId String
    The ID of a twingate.getTwingateSecurityPolicy to set as this Resource's Security Policy. Default is Default Policy.
    tags Map<String>
    A map of key-value pair tags to set on this resource.
    tagsAll Map<String>
    A map of key-value pairs that represents all tags on this resource, including default tags from provider configuration.
    usageBasedAutolockDurationDays Number
    The usage-based auto-lock duration for the Resource (in days).

    Supporting Types

    TwingateResourceAccessGroup, TwingateResourceAccessGroupArgs

    ApprovalMode string
    This will set the approval model on the edge. The valid values are AUTOMATIC and MANUAL.
    GroupId string
    Group ID that will have permission to access the Resource.
    SecurityPolicyId string
    The ID of a twingate.getTwingateSecurityPolicy to use as the access policy for the group IDs in the access block.
    UsageBasedAutolockDurationDays int
    The usage-based auto-lock duration configured on the edge (in days).
    ApprovalMode string
    This will set the approval model on the edge. The valid values are AUTOMATIC and MANUAL.
    GroupId string
    Group ID that will have permission to access the Resource.
    SecurityPolicyId string
    The ID of a twingate.getTwingateSecurityPolicy to use as the access policy for the group IDs in the access block.
    UsageBasedAutolockDurationDays int
    The usage-based auto-lock duration configured on the edge (in days).
    approvalMode String
    This will set the approval model on the edge. The valid values are AUTOMATIC and MANUAL.
    groupId String
    Group ID that will have permission to access the Resource.
    securityPolicyId String
    The ID of a twingate.getTwingateSecurityPolicy to use as the access policy for the group IDs in the access block.
    usageBasedAutolockDurationDays Integer
    The usage-based auto-lock duration configured on the edge (in days).
    approvalMode string
    This will set the approval model on the edge. The valid values are AUTOMATIC and MANUAL.
    groupId string
    Group ID that will have permission to access the Resource.
    securityPolicyId string
    The ID of a twingate.getTwingateSecurityPolicy to use as the access policy for the group IDs in the access block.
    usageBasedAutolockDurationDays number
    The usage-based auto-lock duration configured on the edge (in days).
    approval_mode str
    This will set the approval model on the edge. The valid values are AUTOMATIC and MANUAL.
    group_id str
    Group ID that will have permission to access the Resource.
    security_policy_id str
    The ID of a twingate.getTwingateSecurityPolicy to use as the access policy for the group IDs in the access block.
    usage_based_autolock_duration_days int
    The usage-based auto-lock duration configured on the edge (in days).
    approvalMode String
    This will set the approval model on the edge. The valid values are AUTOMATIC and MANUAL.
    groupId String
    Group ID that will have permission to access the Resource.
    securityPolicyId String
    The ID of a twingate.getTwingateSecurityPolicy to use as the access policy for the group IDs in the access block.
    usageBasedAutolockDurationDays Number
    The usage-based auto-lock duration configured on the edge (in days).

    TwingateResourceAccessService, TwingateResourceAccessServiceArgs

    ServiceAccountId string
    The ID of the service account that should have access to this Resource.
    ServiceAccountId string
    The ID of the service account that should have access to this Resource.
    serviceAccountId String
    The ID of the service account that should have access to this Resource.
    serviceAccountId string
    The ID of the service account that should have access to this Resource.
    service_account_id str
    The ID of the service account that should have access to this Resource.
    serviceAccountId String
    The ID of the service account that should have access to this Resource.

    TwingateResourceProtocols, TwingateResourceProtocolsArgs

    allowIcmp Boolean
    Whether to allow ICMP (ping) traffic
    tcp Property Map
    udp Property Map

    TwingateResourceProtocolsTcp, TwingateResourceProtocolsTcpArgs

    Policy string
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    Ports List<string>
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    Policy string
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    Ports []string
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    policy String
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    ports List<String>
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    policy string
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    ports string[]
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    policy str
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    ports Sequence[str]
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    policy String
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    ports List<String>
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port

    TwingateResourceProtocolsUdp, TwingateResourceProtocolsUdpArgs

    Policy string
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    Ports List<string>
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    Policy string
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    Ports []string
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    policy String
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    ports List<String>
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    policy string
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    ports string[]
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    policy str
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    ports Sequence[str]
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port
    policy String
    Whether to allow or deny all ports, or restrict protocol access within certain port ranges: Can be RESTRICTED (only listed ports are allowed), ALLOW_ALL, or DENY_ALL
    ports List<String>
    List of port ranges between 1 and 65535 inclusive, in the format 100-200 for a range, or 8080 for a single port

    Import

    $ pulumi import twingate:index/twingateResource:TwingateResource resource UmVzb3VyY2U6MzQwNDQ3

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    twingate Twingate/pulumi-twingate
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the twingate Terraform Provider.
    twingate logo
    Twingate v3.5.0 published on Monday, Sep 22, 2025 by Twingate
    twingate/pulumi-twingate
      Meet Neo: Your AI Platform Teammate