Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. CasbDlpRules
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
zscaler/pulumi-zia

zia.CasbDlpRules

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
zscaler/pulumi-zia
    Deprecated: zia.index/casbdlprules.CasbDlpRules has been deprecated in favor of zia.index/casbdlprule.CasbDlpRule

    The zia_casb_dlp_rules resource Adds a new SaaS Security Data at Rest Scanning DLP rule in the Zscaler Internet Access.

    Example Usage

    data "zia_casb_tenant" "this" {
  tenant_name = "Jira_Tenant01"
}

data "zia_dlp_incident_receiver_servers" "this" {
  name = "ZS_Incident_Receiver"
}

data "zia_rule_labels" "this" {
    name = "RuleLabel01
}

data "zia_dlp_engines" "this" {
    name = "PCI"
}

data "zia_admin_users" "this" {
    username = auditor01
}

resource "zia_casb_dlp_rules" "this" {
  name = "SaaS_ITSM_App_Rule"
  description = "SaaS_ITSM_App_Rule"
  order = 1
  rank = 7
  type = "OFLCASB_DLP_ITSM"
  action = "OFLCASB_DLP_REPORT_INCIDENT"
  severity = "RULE_SEVERITY_HIGH"
  without_content_inspection = false
  external_auditor_email = "jdoe@acme.com"
  file_types = [
        "FTCATEGORY_APPX",
        "FTCATEGORY_SQL",
  ]
  collaboration_scope = [
        "ANY",
  ]
  components = [
        "COMPONENT_ITSM_OBJECTS",
        "COMPONENT_ITSM_ATTACHMENTS",
  ]
 cloud_app_tenants {
    id = [data.zia_casb_tenant.this.tenant_id]
  }
 dlp_engines {
    id = [data.zia_dlp_engines.this.id]
  }
  object_types {
    id = [32, 33, 34]
  }
 labels {
    id = [data.zia_rule_labels.this.id]
  }
  zscaler_incident_receiver {
    id = data.zia_dlp_incident_receiver_servers.this.id
  }
  auditor_notification {
    id = data.zia_admin_users.this.id
  }
}

    Create CasbDlpRules Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CasbDlpRules(name: string, args?: CasbDlpRulesArgs, opts?: CustomResourceOptions);
    @overload
def CasbDlpRules(resource_name: str,
                 args: Optional[CasbDlpRulesArgs] = None,
                 opts: Optional[ResourceOptions] = None)

@overload
def CasbDlpRules(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 action: Optional[str] = None,
                 auditor_notifications: Optional[Sequence[CasbDlpRulesAuditorNotificationArgs]] = None,
                 bucket_owner: Optional[str] = None,
                 buckets: Optional[CasbDlpRulesBucketsArgs] = None,
                 casb_email_labels: Optional[Sequence[CasbDlpRulesCasbEmailLabelArgs]] = None,
                 casb_tombstone_templates: Optional[Sequence[CasbDlpRulesCasbTombstoneTemplateArgs]] = None,
                 cloud_app_tenants: Optional[CasbDlpRulesCloudAppTenantsArgs] = None,
                 collaboration_scopes: Optional[Sequence[str]] = None,
                 components: Optional[Sequence[str]] = None,
                 content_location: Optional[str] = None,
                 criteria_domain_profiles: Optional[CasbDlpRulesCriteriaDomainProfilesArgs] = None,
                 departments: Optional[CasbDlpRulesDepartmentsArgs] = None,
                 description: Optional[str] = None,
                 dlp_engines: Optional[CasbDlpRulesDlpEnginesArgs] = None,
                 domains: Optional[Sequence[str]] = None,
                 email_recipient_profiles: Optional[CasbDlpRulesEmailRecipientProfilesArgs] = None,
                 entity_groups: Optional[CasbDlpRulesEntityGroupsArgs] = None,
                 excluded_domain_profiles: Optional[CasbDlpRulesExcludedDomainProfilesArgs] = None,
                 external_auditor_email: Optional[str] = None,
                 file_types: Optional[Sequence[str]] = None,
                 groups: Optional[CasbDlpRulesGroupsArgs] = None,
                 include_criteria_domain_profile: Optional[bool] = None,
                 include_email_recipient_profile: Optional[bool] = None,
                 include_entity_groups: Optional[bool] = None,
                 included_domain_profiles: Optional[CasbDlpRulesIncludedDomainProfilesArgs] = None,
                 labels: Optional[CasbDlpRulesLabelsArgs] = None,
                 name: Optional[str] = None,
                 object_types: Optional[CasbDlpRulesObjectTypesArgs] = None,
                 order: Optional[int] = None,
                 quarantine_location: Optional[str] = None,
                 rank: Optional[int] = None,
                 recipient: Optional[str] = None,
                 redaction_profiles: Optional[Sequence[CasbDlpRulesRedactionProfileArgs]] = None,
                 severity: Optional[str] = None,
                 state: Optional[str] = None,
                 tags: Optional[Sequence[CasbDlpRulesTagArgs]] = None,
                 type: Optional[str] = None,
                 users: Optional[CasbDlpRulesUsersArgs] = None,
                 watermark_delete_old_version: Optional[bool] = None,
                 watermark_profiles: Optional[Sequence[CasbDlpRulesWatermarkProfileArgs]] = None,
                 without_content_inspection: Optional[bool] = None,
                 zscaler_incident_receivers: Optional[Sequence[CasbDlpRulesZscalerIncidentReceiverArgs]] = None)
    func NewCasbDlpRules(ctx *Context, name string, args *CasbDlpRulesArgs, opts ...ResourceOption) (*CasbDlpRules, error)
    public CasbDlpRules(string name, CasbDlpRulesArgs? args = null, CustomResourceOptions? opts = null)
    public CasbDlpRules(String name, CasbDlpRulesArgs args)
public CasbDlpRules(String name, CasbDlpRulesArgs args, CustomResourceOptions options)

    type: zia:CasbDlpRules
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args CasbDlpRulesArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CasbDlpRulesArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CasbDlpRulesArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CasbDlpRulesArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CasbDlpRulesArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    CasbDlpRules Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CasbDlpRules resource accepts the following input properties:

    Action string
    The configured action for the policy rule
    AuditorNotifications List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesAuditorNotification>
    Notification template used for DLP email alerts sent to the auditor
    BucketOwner string
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    Buckets zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesBuckets
    The buckets for the Zscaler service to inspect for sensitive data
    CasbEmailLabels List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesCasbEmailLabel>
    Name-ID of the email label associated with the rule
    CasbTombstoneTemplates List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesCasbTombstoneTemplate>
    Name-ID of the quarantine tombstone template associated with the rule
    CloudAppTenants zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesCloudAppTenants
    Name-ID pairs of the cloud application tenants for which the rule is applied
    CollaborationScopes List<string>
    Collaboration scope for the rule
    Components List<string>
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    ContentLocation string
    The location for the content that the Zscaler service inspects for sensitive data
    CriteriaDomainProfiles zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesCriteriaDomainProfiles
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    Departments zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesDepartments
    Name-ID pairs of departments for which rule must be applied
    Description string
    An admin editable text-based description of the rule
    DlpEngines zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesDlpEngines
    The list of DLP engines to which the DLP policy rule must be applied
    Domains List<string>
    The domain for the external organization sharing the channel
    EmailRecipientProfiles zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesEmailRecipientProfiles
    Name-ID pairs of recipient profiles for which the rule is applied
    EntityGroups zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesEntityGroups
    Name-ID pairs of entity groups that are part of the rule criteria
    ExcludedDomainProfiles zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesExcludedDomainProfiles
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    ExternalAuditorEmail string
    Email address of the external auditor to whom the DLP email alerts are sent
    FileTypes List<string>
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    Groups zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesGroups
    Name-ID pairs of groups for which the rule is applied
    IncludeCriteriaDomainProfile bool
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    IncludeEmailRecipientProfile bool
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    IncludeEntityGroups bool
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    IncludedDomainProfiles zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesIncludedDomainProfiles
    Name-ID pairs of domain profiles included in the criteria for the rule
    Labels zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesLabels
    Name-ID pairs of rule labels associated with the rule
    Name string
    Rule name
    ObjectTypes zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesObjectTypes
    List of object types for which the rule is applied
    Order int
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    QuarantineLocation string
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    Rank int
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    Recipient string
    Specifies if the email recipient is internal or external
    RedactionProfiles List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesRedactionProfile>
    Name-ID of the redaction profile in the criteria
    Severity string
    The severity level of the incidents that match the policy rule
    State string
    Administrative state of the rule
    Tags List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesTag>
    Tag applied to the rule
    Type string
    The type of SaaS Security Data at Rest Scanning DLP rule
    Users zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesUsers
    Name-ID pairs of users for which rule must be applied
    WatermarkDeleteOldVersion bool
    Specifies whether to delete an old version of the watermarked file
    WatermarkProfiles List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesWatermarkProfile>
    Watermark profile applied to the rule
    WithoutContentInspection bool
    If true, Content Matching is set to None
    ZscalerIncidentReceivers List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesZscalerIncidentReceiver>
    The Zscaler Incident Receiver details
    Action string
    The configured action for the policy rule
    AuditorNotifications []CasbDlpRulesAuditorNotificationArgs
    Notification template used for DLP email alerts sent to the auditor
    BucketOwner string
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    Buckets CasbDlpRulesBucketsArgs
    The buckets for the Zscaler service to inspect for sensitive data
    CasbEmailLabels []CasbDlpRulesCasbEmailLabelArgs
    Name-ID of the email label associated with the rule
    CasbTombstoneTemplates []CasbDlpRulesCasbTombstoneTemplateArgs
    Name-ID of the quarantine tombstone template associated with the rule
    CloudAppTenants CasbDlpRulesCloudAppTenantsArgs
    Name-ID pairs of the cloud application tenants for which the rule is applied
    CollaborationScopes []string
    Collaboration scope for the rule
    Components []string
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    ContentLocation string
    The location for the content that the Zscaler service inspects for sensitive data
    CriteriaDomainProfiles CasbDlpRulesCriteriaDomainProfilesArgs
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    Departments CasbDlpRulesDepartmentsArgs
    Name-ID pairs of departments for which rule must be applied
    Description string
    An admin editable text-based description of the rule
    DlpEngines CasbDlpRulesDlpEnginesArgs
    The list of DLP engines to which the DLP policy rule must be applied
    Domains []string
    The domain for the external organization sharing the channel
    EmailRecipientProfiles CasbDlpRulesEmailRecipientProfilesArgs
    Name-ID pairs of recipient profiles for which the rule is applied
    EntityGroups CasbDlpRulesEntityGroupsArgs
    Name-ID pairs of entity groups that are part of the rule criteria
    ExcludedDomainProfiles CasbDlpRulesExcludedDomainProfilesArgs
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    ExternalAuditorEmail string
    Email address of the external auditor to whom the DLP email alerts are sent
    FileTypes []string
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    Groups CasbDlpRulesGroupsArgs
    Name-ID pairs of groups for which the rule is applied
    IncludeCriteriaDomainProfile bool
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    IncludeEmailRecipientProfile bool
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    IncludeEntityGroups bool
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    IncludedDomainProfiles CasbDlpRulesIncludedDomainProfilesArgs
    Name-ID pairs of domain profiles included in the criteria for the rule
    Labels CasbDlpRulesLabelsArgs
    Name-ID pairs of rule labels associated with the rule
    Name string
    Rule name
    ObjectTypes CasbDlpRulesObjectTypesArgs
    List of object types for which the rule is applied
    Order int
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    QuarantineLocation string
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    Rank int
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    Recipient string
    Specifies if the email recipient is internal or external
    RedactionProfiles []CasbDlpRulesRedactionProfileArgs
    Name-ID of the redaction profile in the criteria
    Severity string
    The severity level of the incidents that match the policy rule
    State string
    Administrative state of the rule
    Tags []CasbDlpRulesTagArgs
    Tag applied to the rule
    Type string
    The type of SaaS Security Data at Rest Scanning DLP rule
    Users CasbDlpRulesUsersArgs
    Name-ID pairs of users for which rule must be applied
    WatermarkDeleteOldVersion bool
    Specifies whether to delete an old version of the watermarked file
    WatermarkProfiles []CasbDlpRulesWatermarkProfileArgs
    Watermark profile applied to the rule
    WithoutContentInspection bool
    If true, Content Matching is set to None
    ZscalerIncidentReceivers []CasbDlpRulesZscalerIncidentReceiverArgs
    The Zscaler Incident Receiver details
    action String
    The configured action for the policy rule
    auditorNotifications List<CasbDlpRulesAuditorNotification>
    Notification template used for DLP email alerts sent to the auditor
    bucketOwner String
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    buckets CasbDlpRulesBuckets
    The buckets for the Zscaler service to inspect for sensitive data
    casbEmailLabels List<CasbDlpRulesCasbEmailLabel>
    Name-ID of the email label associated with the rule
    casbTombstoneTemplates List<CasbDlpRulesCasbTombstoneTemplate>
    Name-ID of the quarantine tombstone template associated with the rule
    cloudAppTenants CasbDlpRulesCloudAppTenants
    Name-ID pairs of the cloud application tenants for which the rule is applied
    collaborationScopes List<String>
    Collaboration scope for the rule
    components List<String>
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    contentLocation String
    The location for the content that the Zscaler service inspects for sensitive data
    criteriaDomainProfiles CasbDlpRulesCriteriaDomainProfiles
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    departments CasbDlpRulesDepartments
    Name-ID pairs of departments for which rule must be applied
    description String
    An admin editable text-based description of the rule
    dlpEngines CasbDlpRulesDlpEngines
    The list of DLP engines to which the DLP policy rule must be applied
    domains List<String>
    The domain for the external organization sharing the channel
    emailRecipientProfiles CasbDlpRulesEmailRecipientProfiles
    Name-ID pairs of recipient profiles for which the rule is applied
    entityGroups CasbDlpRulesEntityGroups
    Name-ID pairs of entity groups that are part of the rule criteria
    excludedDomainProfiles CasbDlpRulesExcludedDomainProfiles
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    externalAuditorEmail String
    Email address of the external auditor to whom the DLP email alerts are sent
    fileTypes List<String>
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    groups CasbDlpRulesGroups
    Name-ID pairs of groups for which the rule is applied
    includeCriteriaDomainProfile Boolean
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEmailRecipientProfile Boolean
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEntityGroups Boolean
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    includedDomainProfiles CasbDlpRulesIncludedDomainProfiles
    Name-ID pairs of domain profiles included in the criteria for the rule
    labels CasbDlpRulesLabels
    Name-ID pairs of rule labels associated with the rule
    name String
    Rule name
    objectTypes CasbDlpRulesObjectTypes
    List of object types for which the rule is applied
    order Integer
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    quarantineLocation String
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    rank Integer
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    recipient String
    Specifies if the email recipient is internal or external
    redactionProfiles List<CasbDlpRulesRedactionProfile>
    Name-ID of the redaction profile in the criteria
    severity String
    The severity level of the incidents that match the policy rule
    state String
    Administrative state of the rule
    tags List<CasbDlpRulesTag>
    Tag applied to the rule
    type String
    The type of SaaS Security Data at Rest Scanning DLP rule
    users CasbDlpRulesUsers
    Name-ID pairs of users for which rule must be applied
    watermarkDeleteOldVersion Boolean
    Specifies whether to delete an old version of the watermarked file
    watermarkProfiles List<CasbDlpRulesWatermarkProfile>
    Watermark profile applied to the rule
    withoutContentInspection Boolean
    If true, Content Matching is set to None
    zscalerIncidentReceivers List<CasbDlpRulesZscalerIncidentReceiver>
    The Zscaler Incident Receiver details
    action string
    The configured action for the policy rule
    auditorNotifications CasbDlpRulesAuditorNotification[]
    Notification template used for DLP email alerts sent to the auditor
    bucketOwner string
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    buckets CasbDlpRulesBuckets
    The buckets for the Zscaler service to inspect for sensitive data
    casbEmailLabels CasbDlpRulesCasbEmailLabel[]
    Name-ID of the email label associated with the rule
    casbTombstoneTemplates CasbDlpRulesCasbTombstoneTemplate[]
    Name-ID of the quarantine tombstone template associated with the rule
    cloudAppTenants CasbDlpRulesCloudAppTenants
    Name-ID pairs of the cloud application tenants for which the rule is applied
    collaborationScopes string[]
    Collaboration scope for the rule
    components string[]
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    contentLocation string
    The location for the content that the Zscaler service inspects for sensitive data
    criteriaDomainProfiles CasbDlpRulesCriteriaDomainProfiles
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    departments CasbDlpRulesDepartments
    Name-ID pairs of departments for which rule must be applied
    description string
    An admin editable text-based description of the rule
    dlpEngines CasbDlpRulesDlpEngines
    The list of DLP engines to which the DLP policy rule must be applied
    domains string[]
    The domain for the external organization sharing the channel
    emailRecipientProfiles CasbDlpRulesEmailRecipientProfiles
    Name-ID pairs of recipient profiles for which the rule is applied
    entityGroups CasbDlpRulesEntityGroups
    Name-ID pairs of entity groups that are part of the rule criteria
    excludedDomainProfiles CasbDlpRulesExcludedDomainProfiles
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    externalAuditorEmail string
    Email address of the external auditor to whom the DLP email alerts are sent
    fileTypes string[]
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    groups CasbDlpRulesGroups
    Name-ID pairs of groups for which the rule is applied
    includeCriteriaDomainProfile boolean
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEmailRecipientProfile boolean
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEntityGroups boolean
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    includedDomainProfiles CasbDlpRulesIncludedDomainProfiles
    Name-ID pairs of domain profiles included in the criteria for the rule
    labels CasbDlpRulesLabels
    Name-ID pairs of rule labels associated with the rule
    name string
    Rule name
    objectTypes CasbDlpRulesObjectTypes
    List of object types for which the rule is applied
    order number
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    quarantineLocation string
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    rank number
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    recipient string
    Specifies if the email recipient is internal or external
    redactionProfiles CasbDlpRulesRedactionProfile[]
    Name-ID of the redaction profile in the criteria
    severity string
    The severity level of the incidents that match the policy rule
    state string
    Administrative state of the rule
    tags CasbDlpRulesTag[]
    Tag applied to the rule
    type string
    The type of SaaS Security Data at Rest Scanning DLP rule
    users CasbDlpRulesUsers
    Name-ID pairs of users for which rule must be applied
    watermarkDeleteOldVersion boolean
    Specifies whether to delete an old version of the watermarked file
    watermarkProfiles CasbDlpRulesWatermarkProfile[]
    Watermark profile applied to the rule
    withoutContentInspection boolean
    If true, Content Matching is set to None
    zscalerIncidentReceivers CasbDlpRulesZscalerIncidentReceiver[]
    The Zscaler Incident Receiver details
    action str
    The configured action for the policy rule
    auditor_notifications Sequence[CasbDlpRulesAuditorNotificationArgs]
    Notification template used for DLP email alerts sent to the auditor
    bucket_owner str
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    buckets CasbDlpRulesBucketsArgs
    The buckets for the Zscaler service to inspect for sensitive data
    casb_email_labels Sequence[CasbDlpRulesCasbEmailLabelArgs]
    Name-ID of the email label associated with the rule
    casb_tombstone_templates Sequence[CasbDlpRulesCasbTombstoneTemplateArgs]
    Name-ID of the quarantine tombstone template associated with the rule
    cloud_app_tenants CasbDlpRulesCloudAppTenantsArgs
    Name-ID pairs of the cloud application tenants for which the rule is applied
    collaboration_scopes Sequence[str]
    Collaboration scope for the rule
    components Sequence[str]
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    content_location str
    The location for the content that the Zscaler service inspects for sensitive data
    criteria_domain_profiles CasbDlpRulesCriteriaDomainProfilesArgs
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    departments CasbDlpRulesDepartmentsArgs
    Name-ID pairs of departments for which rule must be applied
    description str
    An admin editable text-based description of the rule
    dlp_engines CasbDlpRulesDlpEnginesArgs
    The list of DLP engines to which the DLP policy rule must be applied
    domains Sequence[str]
    The domain for the external organization sharing the channel
    email_recipient_profiles CasbDlpRulesEmailRecipientProfilesArgs
    Name-ID pairs of recipient profiles for which the rule is applied
    entity_groups CasbDlpRulesEntityGroupsArgs
    Name-ID pairs of entity groups that are part of the rule criteria
    excluded_domain_profiles CasbDlpRulesExcludedDomainProfilesArgs
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    external_auditor_email str
    Email address of the external auditor to whom the DLP email alerts are sent
    file_types Sequence[str]
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    groups CasbDlpRulesGroupsArgs
    Name-ID pairs of groups for which the rule is applied
    include_criteria_domain_profile bool
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    include_email_recipient_profile bool
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    include_entity_groups bool
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    included_domain_profiles CasbDlpRulesIncludedDomainProfilesArgs
    Name-ID pairs of domain profiles included in the criteria for the rule
    labels CasbDlpRulesLabelsArgs
    Name-ID pairs of rule labels associated with the rule
    name str
    Rule name
    object_types CasbDlpRulesObjectTypesArgs
    List of object types for which the rule is applied
    order int
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    quarantine_location str
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    rank int
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    recipient str
    Specifies if the email recipient is internal or external
    redaction_profiles Sequence[CasbDlpRulesRedactionProfileArgs]
    Name-ID of the redaction profile in the criteria
    severity str
    The severity level of the incidents that match the policy rule
    state str
    Administrative state of the rule
    tags Sequence[CasbDlpRulesTagArgs]
    Tag applied to the rule
    type str
    The type of SaaS Security Data at Rest Scanning DLP rule
    users CasbDlpRulesUsersArgs
    Name-ID pairs of users for which rule must be applied
    watermark_delete_old_version bool
    Specifies whether to delete an old version of the watermarked file
    watermark_profiles Sequence[CasbDlpRulesWatermarkProfileArgs]
    Watermark profile applied to the rule
    without_content_inspection bool
    If true, Content Matching is set to None
    zscaler_incident_receivers Sequence[CasbDlpRulesZscalerIncidentReceiverArgs]
    The Zscaler Incident Receiver details
    action String
    The configured action for the policy rule
    auditorNotifications List<Property Map>
    Notification template used for DLP email alerts sent to the auditor
    bucketOwner String
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    buckets Property Map
    The buckets for the Zscaler service to inspect for sensitive data
    casbEmailLabels List<Property Map>
    Name-ID of the email label associated with the rule
    casbTombstoneTemplates List<Property Map>
    Name-ID of the quarantine tombstone template associated with the rule
    cloudAppTenants Property Map
    Name-ID pairs of the cloud application tenants for which the rule is applied
    collaborationScopes List<String>
    Collaboration scope for the rule
    components List<String>
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    contentLocation String
    The location for the content that the Zscaler service inspects for sensitive data
    criteriaDomainProfiles Property Map
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    departments Property Map
    Name-ID pairs of departments for which rule must be applied
    description String
    An admin editable text-based description of the rule
    dlpEngines Property Map
    The list of DLP engines to which the DLP policy rule must be applied
    domains List<String>
    The domain for the external organization sharing the channel
    emailRecipientProfiles Property Map
    Name-ID pairs of recipient profiles for which the rule is applied
    entityGroups Property Map
    Name-ID pairs of entity groups that are part of the rule criteria
    excludedDomainProfiles Property Map
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    externalAuditorEmail String
    Email address of the external auditor to whom the DLP email alerts are sent
    fileTypes List<String>
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    groups Property Map
    Name-ID pairs of groups for which the rule is applied
    includeCriteriaDomainProfile Boolean
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEmailRecipientProfile Boolean
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEntityGroups Boolean
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    includedDomainProfiles Property Map
    Name-ID pairs of domain profiles included in the criteria for the rule
    labels Property Map
    Name-ID pairs of rule labels associated with the rule
    name String
    Rule name
    objectTypes Property Map
    List of object types for which the rule is applied
    order Number
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    quarantineLocation String
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    rank Number
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    recipient String
    Specifies if the email recipient is internal or external
    redactionProfiles List<Property Map>
    Name-ID of the redaction profile in the criteria
    severity String
    The severity level of the incidents that match the policy rule
    state String
    Administrative state of the rule
    tags List<Property Map>
    Tag applied to the rule
    type String
    The type of SaaS Security Data at Rest Scanning DLP rule
    users Property Map
    Name-ID pairs of users for which rule must be applied
    watermarkDeleteOldVersion Boolean
    Specifies whether to delete an old version of the watermarked file
    watermarkProfiles List<Property Map>
    Watermark profile applied to the rule
    withoutContentInspection Boolean
    If true, Content Matching is set to None
    zscalerIncidentReceivers List<Property Map>
    The Zscaler Incident Receiver details

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CasbDlpRules resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    RuleId int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    Id string
    The provider-assigned unique ID for this managed resource.
    RuleId int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    id String
    The provider-assigned unique ID for this managed resource.
    ruleId Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    id string
    The provider-assigned unique ID for this managed resource.
    ruleId number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    id str
    The provider-assigned unique ID for this managed resource.
    rule_id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    id String
    The provider-assigned unique ID for this managed resource.
    ruleId Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule

    Look up Existing CasbDlpRules Resource

    Get an existing CasbDlpRules resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CasbDlpRulesState, opts?: CustomResourceOptions): CasbDlpRules
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        auditor_notifications: Optional[Sequence[CasbDlpRulesAuditorNotificationArgs]] = None,
        bucket_owner: Optional[str] = None,
        buckets: Optional[CasbDlpRulesBucketsArgs] = None,
        casb_email_labels: Optional[Sequence[CasbDlpRulesCasbEmailLabelArgs]] = None,
        casb_tombstone_templates: Optional[Sequence[CasbDlpRulesCasbTombstoneTemplateArgs]] = None,
        cloud_app_tenants: Optional[CasbDlpRulesCloudAppTenantsArgs] = None,
        collaboration_scopes: Optional[Sequence[str]] = None,
        components: Optional[Sequence[str]] = None,
        content_location: Optional[str] = None,
        criteria_domain_profiles: Optional[CasbDlpRulesCriteriaDomainProfilesArgs] = None,
        departments: Optional[CasbDlpRulesDepartmentsArgs] = None,
        description: Optional[str] = None,
        dlp_engines: Optional[CasbDlpRulesDlpEnginesArgs] = None,
        domains: Optional[Sequence[str]] = None,
        email_recipient_profiles: Optional[CasbDlpRulesEmailRecipientProfilesArgs] = None,
        entity_groups: Optional[CasbDlpRulesEntityGroupsArgs] = None,
        excluded_domain_profiles: Optional[CasbDlpRulesExcludedDomainProfilesArgs] = None,
        external_auditor_email: Optional[str] = None,
        file_types: Optional[Sequence[str]] = None,
        groups: Optional[CasbDlpRulesGroupsArgs] = None,
        include_criteria_domain_profile: Optional[bool] = None,
        include_email_recipient_profile: Optional[bool] = None,
        include_entity_groups: Optional[bool] = None,
        included_domain_profiles: Optional[CasbDlpRulesIncludedDomainProfilesArgs] = None,
        labels: Optional[CasbDlpRulesLabelsArgs] = None,
        name: Optional[str] = None,
        object_types: Optional[CasbDlpRulesObjectTypesArgs] = None,
        order: Optional[int] = None,
        quarantine_location: Optional[str] = None,
        rank: Optional[int] = None,
        recipient: Optional[str] = None,
        redaction_profiles: Optional[Sequence[CasbDlpRulesRedactionProfileArgs]] = None,
        rule_id: Optional[int] = None,
        severity: Optional[str] = None,
        state: Optional[str] = None,
        tags: Optional[Sequence[CasbDlpRulesTagArgs]] = None,
        type: Optional[str] = None,
        users: Optional[CasbDlpRulesUsersArgs] = None,
        watermark_delete_old_version: Optional[bool] = None,
        watermark_profiles: Optional[Sequence[CasbDlpRulesWatermarkProfileArgs]] = None,
        without_content_inspection: Optional[bool] = None,
        zscaler_incident_receivers: Optional[Sequence[CasbDlpRulesZscalerIncidentReceiverArgs]] = None) -> CasbDlpRules
    func GetCasbDlpRules(ctx *Context, name string, id IDInput, state *CasbDlpRulesState, opts ...ResourceOption) (*CasbDlpRules, error)
    public static CasbDlpRules Get(string name, Input<string> id, CasbDlpRulesState? state, CustomResourceOptions? opts = null)
    public static CasbDlpRules get(String name, Output<String> id, CasbDlpRulesState state, CustomResourceOptions options)
    resources:  _:    type: zia:CasbDlpRules    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action string
    The configured action for the policy rule
    AuditorNotifications List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesAuditorNotification>
    Notification template used for DLP email alerts sent to the auditor
    BucketOwner string
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    Buckets zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesBuckets
    The buckets for the Zscaler service to inspect for sensitive data
    CasbEmailLabels List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesCasbEmailLabel>
    Name-ID of the email label associated with the rule
    CasbTombstoneTemplates List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesCasbTombstoneTemplate>
    Name-ID of the quarantine tombstone template associated with the rule
    CloudAppTenants zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesCloudAppTenants
    Name-ID pairs of the cloud application tenants for which the rule is applied
    CollaborationScopes List<string>
    Collaboration scope for the rule
    Components List<string>
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    ContentLocation string
    The location for the content that the Zscaler service inspects for sensitive data
    CriteriaDomainProfiles zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesCriteriaDomainProfiles
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    Departments zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesDepartments
    Name-ID pairs of departments for which rule must be applied
    Description string
    An admin editable text-based description of the rule
    DlpEngines zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesDlpEngines
    The list of DLP engines to which the DLP policy rule must be applied
    Domains List<string>
    The domain for the external organization sharing the channel
    EmailRecipientProfiles zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesEmailRecipientProfiles
    Name-ID pairs of recipient profiles for which the rule is applied
    EntityGroups zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesEntityGroups
    Name-ID pairs of entity groups that are part of the rule criteria
    ExcludedDomainProfiles zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesExcludedDomainProfiles
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    ExternalAuditorEmail string
    Email address of the external auditor to whom the DLP email alerts are sent
    FileTypes List<string>
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    Groups zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesGroups
    Name-ID pairs of groups for which the rule is applied
    IncludeCriteriaDomainProfile bool
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    IncludeEmailRecipientProfile bool
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    IncludeEntityGroups bool
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    IncludedDomainProfiles zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesIncludedDomainProfiles
    Name-ID pairs of domain profiles included in the criteria for the rule
    Labels zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesLabels
    Name-ID pairs of rule labels associated with the rule
    Name string
    Rule name
    ObjectTypes zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesObjectTypes
    List of object types for which the rule is applied
    Order int
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    QuarantineLocation string
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    Rank int
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    Recipient string
    Specifies if the email recipient is internal or external
    RedactionProfiles List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesRedactionProfile>
    Name-ID of the redaction profile in the criteria
    RuleId int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    Severity string
    The severity level of the incidents that match the policy rule
    State string
    Administrative state of the rule
    Tags List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesTag>
    Tag applied to the rule
    Type string
    The type of SaaS Security Data at Rest Scanning DLP rule
    Users zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesUsers
    Name-ID pairs of users for which rule must be applied
    WatermarkDeleteOldVersion bool
    Specifies whether to delete an old version of the watermarked file
    WatermarkProfiles List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesWatermarkProfile>
    Watermark profile applied to the rule
    WithoutContentInspection bool
    If true, Content Matching is set to None
    ZscalerIncidentReceivers List<zscaler.PulumiPackage.Zia.Inputs.CasbDlpRulesZscalerIncidentReceiver>
    The Zscaler Incident Receiver details
    Action string
    The configured action for the policy rule
    AuditorNotifications []CasbDlpRulesAuditorNotificationArgs
    Notification template used for DLP email alerts sent to the auditor
    BucketOwner string
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    Buckets CasbDlpRulesBucketsArgs
    The buckets for the Zscaler service to inspect for sensitive data
    CasbEmailLabels []CasbDlpRulesCasbEmailLabelArgs
    Name-ID of the email label associated with the rule
    CasbTombstoneTemplates []CasbDlpRulesCasbTombstoneTemplateArgs
    Name-ID of the quarantine tombstone template associated with the rule
    CloudAppTenants CasbDlpRulesCloudAppTenantsArgs
    Name-ID pairs of the cloud application tenants for which the rule is applied
    CollaborationScopes []string
    Collaboration scope for the rule
    Components []string
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    ContentLocation string
    The location for the content that the Zscaler service inspects for sensitive data
    CriteriaDomainProfiles CasbDlpRulesCriteriaDomainProfilesArgs
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    Departments CasbDlpRulesDepartmentsArgs
    Name-ID pairs of departments for which rule must be applied
    Description string
    An admin editable text-based description of the rule
    DlpEngines CasbDlpRulesDlpEnginesArgs
    The list of DLP engines to which the DLP policy rule must be applied
    Domains []string
    The domain for the external organization sharing the channel
    EmailRecipientProfiles CasbDlpRulesEmailRecipientProfilesArgs
    Name-ID pairs of recipient profiles for which the rule is applied
    EntityGroups CasbDlpRulesEntityGroupsArgs
    Name-ID pairs of entity groups that are part of the rule criteria
    ExcludedDomainProfiles CasbDlpRulesExcludedDomainProfilesArgs
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    ExternalAuditorEmail string
    Email address of the external auditor to whom the DLP email alerts are sent
    FileTypes []string
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    Groups CasbDlpRulesGroupsArgs
    Name-ID pairs of groups for which the rule is applied
    IncludeCriteriaDomainProfile bool
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    IncludeEmailRecipientProfile bool
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    IncludeEntityGroups bool
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    IncludedDomainProfiles CasbDlpRulesIncludedDomainProfilesArgs
    Name-ID pairs of domain profiles included in the criteria for the rule
    Labels CasbDlpRulesLabelsArgs
    Name-ID pairs of rule labels associated with the rule
    Name string
    Rule name
    ObjectTypes CasbDlpRulesObjectTypesArgs
    List of object types for which the rule is applied
    Order int
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    QuarantineLocation string
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    Rank int
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    Recipient string
    Specifies if the email recipient is internal or external
    RedactionProfiles []CasbDlpRulesRedactionProfileArgs
    Name-ID of the redaction profile in the criteria
    RuleId int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    Severity string
    The severity level of the incidents that match the policy rule
    State string
    Administrative state of the rule
    Tags []CasbDlpRulesTagArgs
    Tag applied to the rule
    Type string
    The type of SaaS Security Data at Rest Scanning DLP rule
    Users CasbDlpRulesUsersArgs
    Name-ID pairs of users for which rule must be applied
    WatermarkDeleteOldVersion bool
    Specifies whether to delete an old version of the watermarked file
    WatermarkProfiles []CasbDlpRulesWatermarkProfileArgs
    Watermark profile applied to the rule
    WithoutContentInspection bool
    If true, Content Matching is set to None
    ZscalerIncidentReceivers []CasbDlpRulesZscalerIncidentReceiverArgs
    The Zscaler Incident Receiver details
    action String
    The configured action for the policy rule
    auditorNotifications List<CasbDlpRulesAuditorNotification>
    Notification template used for DLP email alerts sent to the auditor
    bucketOwner String
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    buckets CasbDlpRulesBuckets
    The buckets for the Zscaler service to inspect for sensitive data
    casbEmailLabels List<CasbDlpRulesCasbEmailLabel>
    Name-ID of the email label associated with the rule
    casbTombstoneTemplates List<CasbDlpRulesCasbTombstoneTemplate>
    Name-ID of the quarantine tombstone template associated with the rule
    cloudAppTenants CasbDlpRulesCloudAppTenants
    Name-ID pairs of the cloud application tenants for which the rule is applied
    collaborationScopes List<String>
    Collaboration scope for the rule
    components List<String>
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    contentLocation String
    The location for the content that the Zscaler service inspects for sensitive data
    criteriaDomainProfiles CasbDlpRulesCriteriaDomainProfiles
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    departments CasbDlpRulesDepartments
    Name-ID pairs of departments for which rule must be applied
    description String
    An admin editable text-based description of the rule
    dlpEngines CasbDlpRulesDlpEngines
    The list of DLP engines to which the DLP policy rule must be applied
    domains List<String>
    The domain for the external organization sharing the channel
    emailRecipientProfiles CasbDlpRulesEmailRecipientProfiles
    Name-ID pairs of recipient profiles for which the rule is applied
    entityGroups CasbDlpRulesEntityGroups
    Name-ID pairs of entity groups that are part of the rule criteria
    excludedDomainProfiles CasbDlpRulesExcludedDomainProfiles
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    externalAuditorEmail String
    Email address of the external auditor to whom the DLP email alerts are sent
    fileTypes List<String>
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    groups CasbDlpRulesGroups
    Name-ID pairs of groups for which the rule is applied
    includeCriteriaDomainProfile Boolean
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEmailRecipientProfile Boolean
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEntityGroups Boolean
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    includedDomainProfiles CasbDlpRulesIncludedDomainProfiles
    Name-ID pairs of domain profiles included in the criteria for the rule
    labels CasbDlpRulesLabels
    Name-ID pairs of rule labels associated with the rule
    name String
    Rule name
    objectTypes CasbDlpRulesObjectTypes
    List of object types for which the rule is applied
    order Integer
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    quarantineLocation String
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    rank Integer
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    recipient String
    Specifies if the email recipient is internal or external
    redactionProfiles List<CasbDlpRulesRedactionProfile>
    Name-ID of the redaction profile in the criteria
    ruleId Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    severity String
    The severity level of the incidents that match the policy rule
    state String
    Administrative state of the rule
    tags List<CasbDlpRulesTag>
    Tag applied to the rule
    type String
    The type of SaaS Security Data at Rest Scanning DLP rule
    users CasbDlpRulesUsers
    Name-ID pairs of users for which rule must be applied
    watermarkDeleteOldVersion Boolean
    Specifies whether to delete an old version of the watermarked file
    watermarkProfiles List<CasbDlpRulesWatermarkProfile>
    Watermark profile applied to the rule
    withoutContentInspection Boolean
    If true, Content Matching is set to None
    zscalerIncidentReceivers List<CasbDlpRulesZscalerIncidentReceiver>
    The Zscaler Incident Receiver details
    action string
    The configured action for the policy rule
    auditorNotifications CasbDlpRulesAuditorNotification[]
    Notification template used for DLP email alerts sent to the auditor
    bucketOwner string
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    buckets CasbDlpRulesBuckets
    The buckets for the Zscaler service to inspect for sensitive data
    casbEmailLabels CasbDlpRulesCasbEmailLabel[]
    Name-ID of the email label associated with the rule
    casbTombstoneTemplates CasbDlpRulesCasbTombstoneTemplate[]
    Name-ID of the quarantine tombstone template associated with the rule
    cloudAppTenants CasbDlpRulesCloudAppTenants
    Name-ID pairs of the cloud application tenants for which the rule is applied
    collaborationScopes string[]
    Collaboration scope for the rule
    components string[]
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    contentLocation string
    The location for the content that the Zscaler service inspects for sensitive data
    criteriaDomainProfiles CasbDlpRulesCriteriaDomainProfiles
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    departments CasbDlpRulesDepartments
    Name-ID pairs of departments for which rule must be applied
    description string
    An admin editable text-based description of the rule
    dlpEngines CasbDlpRulesDlpEngines
    The list of DLP engines to which the DLP policy rule must be applied
    domains string[]
    The domain for the external organization sharing the channel
    emailRecipientProfiles CasbDlpRulesEmailRecipientProfiles
    Name-ID pairs of recipient profiles for which the rule is applied
    entityGroups CasbDlpRulesEntityGroups
    Name-ID pairs of entity groups that are part of the rule criteria
    excludedDomainProfiles CasbDlpRulesExcludedDomainProfiles
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    externalAuditorEmail string
    Email address of the external auditor to whom the DLP email alerts are sent
    fileTypes string[]
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    groups CasbDlpRulesGroups
    Name-ID pairs of groups for which the rule is applied
    includeCriteriaDomainProfile boolean
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEmailRecipientProfile boolean
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEntityGroups boolean
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    includedDomainProfiles CasbDlpRulesIncludedDomainProfiles
    Name-ID pairs of domain profiles included in the criteria for the rule
    labels CasbDlpRulesLabels
    Name-ID pairs of rule labels associated with the rule
    name string
    Rule name
    objectTypes CasbDlpRulesObjectTypes
    List of object types for which the rule is applied
    order number
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    quarantineLocation string
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    rank number
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    recipient string
    Specifies if the email recipient is internal or external
    redactionProfiles CasbDlpRulesRedactionProfile[]
    Name-ID of the redaction profile in the criteria
    ruleId number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    severity string
    The severity level of the incidents that match the policy rule
    state string
    Administrative state of the rule
    tags CasbDlpRulesTag[]
    Tag applied to the rule
    type string
    The type of SaaS Security Data at Rest Scanning DLP rule
    users CasbDlpRulesUsers
    Name-ID pairs of users for which rule must be applied
    watermarkDeleteOldVersion boolean
    Specifies whether to delete an old version of the watermarked file
    watermarkProfiles CasbDlpRulesWatermarkProfile[]
    Watermark profile applied to the rule
    withoutContentInspection boolean
    If true, Content Matching is set to None
    zscalerIncidentReceivers CasbDlpRulesZscalerIncidentReceiver[]
    The Zscaler Incident Receiver details
    action str
    The configured action for the policy rule
    auditor_notifications Sequence[CasbDlpRulesAuditorNotificationArgs]
    Notification template used for DLP email alerts sent to the auditor
    bucket_owner str
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    buckets CasbDlpRulesBucketsArgs
    The buckets for the Zscaler service to inspect for sensitive data
    casb_email_labels Sequence[CasbDlpRulesCasbEmailLabelArgs]
    Name-ID of the email label associated with the rule
    casb_tombstone_templates Sequence[CasbDlpRulesCasbTombstoneTemplateArgs]
    Name-ID of the quarantine tombstone template associated with the rule
    cloud_app_tenants CasbDlpRulesCloudAppTenantsArgs
    Name-ID pairs of the cloud application tenants for which the rule is applied
    collaboration_scopes Sequence[str]
    Collaboration scope for the rule
    components Sequence[str]
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    content_location str
    The location for the content that the Zscaler service inspects for sensitive data
    criteria_domain_profiles CasbDlpRulesCriteriaDomainProfilesArgs
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    departments CasbDlpRulesDepartmentsArgs
    Name-ID pairs of departments for which rule must be applied
    description str
    An admin editable text-based description of the rule
    dlp_engines CasbDlpRulesDlpEnginesArgs
    The list of DLP engines to which the DLP policy rule must be applied
    domains Sequence[str]
    The domain for the external organization sharing the channel
    email_recipient_profiles CasbDlpRulesEmailRecipientProfilesArgs
    Name-ID pairs of recipient profiles for which the rule is applied
    entity_groups CasbDlpRulesEntityGroupsArgs
    Name-ID pairs of entity groups that are part of the rule criteria
    excluded_domain_profiles CasbDlpRulesExcludedDomainProfilesArgs
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    external_auditor_email str
    Email address of the external auditor to whom the DLP email alerts are sent
    file_types Sequence[str]
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    groups CasbDlpRulesGroupsArgs
    Name-ID pairs of groups for which the rule is applied
    include_criteria_domain_profile bool
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    include_email_recipient_profile bool
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    include_entity_groups bool
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    included_domain_profiles CasbDlpRulesIncludedDomainProfilesArgs
    Name-ID pairs of domain profiles included in the criteria for the rule
    labels CasbDlpRulesLabelsArgs
    Name-ID pairs of rule labels associated with the rule
    name str
    Rule name
    object_types CasbDlpRulesObjectTypesArgs
    List of object types for which the rule is applied
    order int
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    quarantine_location str
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    rank int
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    recipient str
    Specifies if the email recipient is internal or external
    redaction_profiles Sequence[CasbDlpRulesRedactionProfileArgs]
    Name-ID of the redaction profile in the criteria
    rule_id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    severity str
    The severity level of the incidents that match the policy rule
    state str
    Administrative state of the rule
    tags Sequence[CasbDlpRulesTagArgs]
    Tag applied to the rule
    type str
    The type of SaaS Security Data at Rest Scanning DLP rule
    users CasbDlpRulesUsersArgs
    Name-ID pairs of users for which rule must be applied
    watermark_delete_old_version bool
    Specifies whether to delete an old version of the watermarked file
    watermark_profiles Sequence[CasbDlpRulesWatermarkProfileArgs]
    Watermark profile applied to the rule
    without_content_inspection bool
    If true, Content Matching is set to None
    zscaler_incident_receivers Sequence[CasbDlpRulesZscalerIncidentReceiverArgs]
    The Zscaler Incident Receiver details
    action String
    The configured action for the policy rule
    auditorNotifications List<Property Map>
    Notification template used for DLP email alerts sent to the auditor
    bucketOwner String
    A user who inspect their buckets for sensitive data. When you choose a user, their buckets are available in the Buckets field
    buckets Property Map
    The buckets for the Zscaler service to inspect for sensitive data
    casbEmailLabels List<Property Map>
    Name-ID of the email label associated with the rule
    casbTombstoneTemplates List<Property Map>
    Name-ID of the quarantine tombstone template associated with the rule
    cloudAppTenants Property Map
    Name-ID pairs of the cloud application tenants for which the rule is applied
    collaborationScopes List<String>
    Collaboration scope for the rule
    components List<String>
    List of components for which the rule is applied. Zscaler service inspects these components for sensitive data.
    contentLocation String
    The location for the content that the Zscaler service inspects for sensitive data
    criteriaDomainProfiles Property Map
    Name-ID pairs of domain profiles that are mandatory in the criteria for the rule
    departments Property Map
    Name-ID pairs of departments for which rule must be applied
    description String
    An admin editable text-based description of the rule
    dlpEngines Property Map
    The list of DLP engines to which the DLP policy rule must be applied
    domains List<String>
    The domain for the external organization sharing the channel
    emailRecipientProfiles Property Map
    Name-ID pairs of recipient profiles for which the rule is applied
    entityGroups Property Map
    Name-ID pairs of entity groups that are part of the rule criteria
    excludedDomainProfiles Property Map
    Name-ID pairs of domain profiles excluded in the criteria for the rule
    externalAuditorEmail String
    Email address of the external auditor to whom the DLP email alerts are sent
    fileTypes List<String>
    File type categories for which the policy is applied. If not set, the rule is applied across all file types.
    groups Property Map
    Name-ID pairs of groups for which the rule is applied
    includeCriteriaDomainProfile Boolean
    If true, criteriaDomainProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEmailRecipientProfile Boolean
    If true, emailRecipientProfiles is included as part of the criteria, else they are excluded from the criteria.
    includeEntityGroups Boolean
    If true, entityGroups is included as part of the criteria, else are excluded from the criteria
    includedDomainProfiles Property Map
    Name-ID pairs of domain profiles included in the criteria for the rule
    labels Property Map
    Name-ID pairs of rule labels associated with the rule
    name String
    Rule name
    objectTypes Property Map
    List of object types for which the rule is applied
    order Number
    Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules
    quarantineLocation String
    Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    rank Number
    Admin rank that is assigned to this rule. Mandatory when admin rank-based access restriction is enabled
    recipient String
    Specifies if the email recipient is internal or external
    redactionProfiles List<Property Map>
    Name-ID of the redaction profile in the criteria
    ruleId Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule
    severity String
    The severity level of the incidents that match the policy rule
    state String
    Administrative state of the rule
    tags List<Property Map>
    Tag applied to the rule
    type String
    The type of SaaS Security Data at Rest Scanning DLP rule
    users Property Map
    Name-ID pairs of users for which rule must be applied
    watermarkDeleteOldVersion Boolean
    Specifies whether to delete an old version of the watermarked file
    watermarkProfiles List<Property Map>
    Watermark profile applied to the rule
    withoutContentInspection Boolean
    If true, Content Matching is set to None
    zscalerIncidentReceivers List<Property Map>
    The Zscaler Incident Receiver details

    Supporting Types

    CasbDlpRulesAuditorNotification, CasbDlpRulesAuditorNotificationArgs

    Id int
    Id int
    id Integer
    id number
    id int
    id Number

    CasbDlpRulesBuckets, CasbDlpRulesBucketsArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesCasbEmailLabel, CasbDlpRulesCasbEmailLabelArgs

    Id int
    Id int
    id Integer
    id number
    id int
    id Number

    CasbDlpRulesCasbTombstoneTemplate, CasbDlpRulesCasbTombstoneTemplateArgs

    Id int
    Id int
    id Integer
    id number
    id int
    id Number

    CasbDlpRulesCloudAppTenants, CasbDlpRulesCloudAppTenantsArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesCriteriaDomainProfiles, CasbDlpRulesCriteriaDomainProfilesArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesDepartments, CasbDlpRulesDepartmentsArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesDlpEngines, CasbDlpRulesDlpEnginesArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesEmailRecipientProfiles, CasbDlpRulesEmailRecipientProfilesArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesEntityGroups, CasbDlpRulesEntityGroupsArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesExcludedDomainProfiles, CasbDlpRulesExcludedDomainProfilesArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesGroups, CasbDlpRulesGroupsArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesIncludedDomainProfiles, CasbDlpRulesIncludedDomainProfilesArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesLabels, CasbDlpRulesLabelsArgs

    Id int
    Id int
    id Integer
    id number
    id int
    id Number

    CasbDlpRulesObjectTypes, CasbDlpRulesObjectTypesArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesRedactionProfile, CasbDlpRulesRedactionProfileArgs

    Id int
    Id int
    id Integer
    id number
    id int
    id Number

    CasbDlpRulesTag, CasbDlpRulesTagArgs

    Id int
    Id int
    id Integer
    id number
    id int
    id Number

    CasbDlpRulesUsers, CasbDlpRulesUsersArgs

    Ids List<int>
    Ids []int
    ids List<Integer>
    ids number[]
    ids Sequence[int]
    ids List<Number>

    CasbDlpRulesWatermarkProfile, CasbDlpRulesWatermarkProfileArgs

    Id int
    Id int
    id Integer
    id number
    id int
    id Number

    CasbDlpRulesZscalerIncidentReceiver, CasbDlpRulesZscalerIncidentReceiverArgs

    Id int
    Id int
    id Integer
    id number
    id int
    id Number

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZIA configurations into Terraform-compliant HashiCorp Configuration Language.

    Visit

    zia_casb_dlp_rules can be imported by using <RULE_TYPE:RULE_ID> or <RULE_TYPE:RULE_NAME> as the import ID.

    For example:

    $ pulumi import zia:index/casbDlpRules:CasbDlpRules this <rule_type:rule_id>

    $ pulumi import zia:index/casbDlpRules:CasbDlpRules this <"rule_type:rule_name">

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
    zscaler/pulumi-zia