Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. FirewallFilteringDestinationGroups
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
zscaler/pulumi-zia

zia.FirewallFilteringDestinationGroups

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
zscaler/pulumi-zia

    The zia_firewall_filtering_destination_groups resource allows the creation and management of ZIA Cloud Firewall IP destination groups in the Zscaler Internet Access. This resource can then be associated with a ZIA cloud firewall filtering rule.

    Example Usage

    # IP Destination Group of Type DSTN_FQDN
resource "zia_firewall_filtering_destination_groups" "dstn_fqdn" {
  name        = "Example Destination FQDN"
  description = "Example Destination FQDN"
  type        = "DSTN_FQDN"
  addresses = [ "test1.acme.com", "test2.acme.com", "test3.acme.com" ]
}

    # IP Destination Group of Type DSTN_IP
resource "zia_firewall_filtering_destination_groups" "example_dstn_ip" {
  name        = "Example Destination IP"
  description = "Example Destination IP"
  type        = "DSTN_IP"
  addresses = ["3.217.228.0-3.217.231.255",
    "3.235.112.0-3.235.119.255",
    "52.23.61.0-52.23.62.25",
    "35.80.88.0-35.80.95.255"]
}

    # IP Destination Group of Type DSTN_DOMAIN
resource "zia_firewall_filtering_destination_groups" "example_dstn_domain" {
  name          = "Example Destination Domain"
  description   = "Example Destination Domain"
  type          = "DSTN_DOMAIN"
  addresses     = ["acme.com", "acme1.com"]
}

    # IP Destination Group of Type DSTN_OTHER
resource "zia_firewall_filtering_destination_groups" "example_dstn_other" {
  name          = "Example Destination Other"
  description   = "Example Destination Other"
  type          = "DSTN_OTHER"
  countries     = ["COUNTRY_CA"]
  ip_categories = ["CUSTOM_01", "CUSTOM_02"]
}

    Create FirewallFilteringDestinationGroups Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new FirewallFilteringDestinationGroups(name: string, args?: FirewallFilteringDestinationGroupsArgs, opts?: CustomResourceOptions);
    @overload
def FirewallFilteringDestinationGroups(resource_name: str,
                                       args: Optional[FirewallFilteringDestinationGroupsArgs] = None,
                                       opts: Optional[ResourceOptions] = None)

@overload
def FirewallFilteringDestinationGroups(resource_name: str,
                                       opts: Optional[ResourceOptions] = None,
                                       addresses: Optional[Sequence[str]] = None,
                                       countries: Optional[Sequence[str]] = None,
                                       description: Optional[str] = None,
                                       ip_categories: Optional[Sequence[str]] = None,
                                       name: Optional[str] = None,
                                       type: Optional[str] = None)
    func NewFirewallFilteringDestinationGroups(ctx *Context, name string, args *FirewallFilteringDestinationGroupsArgs, opts ...ResourceOption) (*FirewallFilteringDestinationGroups, error)
    public FirewallFilteringDestinationGroups(string name, FirewallFilteringDestinationGroupsArgs? args = null, CustomResourceOptions? opts = null)
    public FirewallFilteringDestinationGroups(String name, FirewallFilteringDestinationGroupsArgs args)
public FirewallFilteringDestinationGroups(String name, FirewallFilteringDestinationGroupsArgs args, CustomResourceOptions options)

    type: zia:FirewallFilteringDestinationGroups
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args FirewallFilteringDestinationGroupsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FirewallFilteringDestinationGroupsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FirewallFilteringDestinationGroupsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FirewallFilteringDestinationGroupsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FirewallFilteringDestinationGroupsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var firewallFilteringDestinationGroupsResource = new Zia.FirewallFilteringDestinationGroups("firewallFilteringDestinationGroupsResource", new()
{
    Addresses = new[]
    {
        "string",
    },
    Countries = new[]
    {
        "string",
    },
    Description = "string",
    IpCategories = new[]
    {
        "string",
    },
    Name = "string",
    Type = "string",
});

    example, err := zia.NewFirewallFilteringDestinationGroups(ctx, "firewallFilteringDestinationGroupsResource", &zia.FirewallFilteringDestinationGroupsArgs{
	Addresses: pulumi.StringArray{
		pulumi.String("string"),
	},
	Countries: pulumi.StringArray{
		pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	IpCategories: pulumi.StringArray{
		pulumi.String("string"),
	},
	Name: pulumi.String("string"),
	Type: pulumi.String("string"),
})

    var firewallFilteringDestinationGroupsResource = new FirewallFilteringDestinationGroups("firewallFilteringDestinationGroupsResource", FirewallFilteringDestinationGroupsArgs.builder()
    .addresses("string")
    .countries("string")
    .description("string")
    .ipCategories("string")
    .name("string")
    .type("string")
    .build());

    firewall_filtering_destination_groups_resource = zia.FirewallFilteringDestinationGroups("firewallFilteringDestinationGroupsResource",
    addresses=["string"],
    countries=["string"],
    description="string",
    ip_categories=["string"],
    name="string",
    type="string")

    const firewallFilteringDestinationGroupsResource = new zia.FirewallFilteringDestinationGroups("firewallFilteringDestinationGroupsResource", {
    addresses: ["string"],
    countries: ["string"],
    description: "string",
    ipCategories: ["string"],
    name: "string",
    type: "string",
});

    type: zia:FirewallFilteringDestinationGroups
properties:
    addresses:
        - string
    countries:
        - string
    description: string
    ipCategories:
        - string
    name: string
    type: string

    FirewallFilteringDestinationGroups Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The FirewallFilteringDestinationGroups resource accepts the following input properties:

    Addresses List<string>
    Destination IP addresses within the group
    Countries List<string>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    Description string
    Additional information about the destination IP group
    IpCategories List<string>
    List of URL categories for which rule must be applied
    Name string
    Destination IP group name
    Type string
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    Addresses []string
    Destination IP addresses within the group
    Countries []string
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    Description string
    Additional information about the destination IP group
    IpCategories []string
    List of URL categories for which rule must be applied
    Name string
    Destination IP group name
    Type string
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    addresses List<String>
    Destination IP addresses within the group
    countries List<String>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    description String
    Additional information about the destination IP group
    ipCategories List<String>
    List of URL categories for which rule must be applied
    name String
    Destination IP group name
    type String
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    addresses string[]
    Destination IP addresses within the group
    countries string[]
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    description string
    Additional information about the destination IP group
    ipCategories string[]
    List of URL categories for which rule must be applied
    name string
    Destination IP group name
    type string
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    addresses Sequence[str]
    Destination IP addresses within the group
    countries Sequence[str]
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    description str
    Additional information about the destination IP group
    ip_categories Sequence[str]
    List of URL categories for which rule must be applied
    name str
    Destination IP group name
    type str
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    addresses List<String>
    Destination IP addresses within the group
    countries List<String>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    description String
    Additional information about the destination IP group
    ipCategories List<String>
    List of URL categories for which rule must be applied
    name String
    Destination IP group name
    type String
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)

    Outputs

    All input properties are implicitly available as output properties. Additionally, the FirewallFilteringDestinationGroups resource produces the following output properties:

    GroupId int
    Unique identifer for the destination IP group
    Id string
    The provider-assigned unique ID for this managed resource.
    GroupId int
    Unique identifer for the destination IP group
    Id string
    The provider-assigned unique ID for this managed resource.
    groupId Integer
    Unique identifer for the destination IP group
    id String
    The provider-assigned unique ID for this managed resource.
    groupId number
    Unique identifer for the destination IP group
    id string
    The provider-assigned unique ID for this managed resource.
    group_id int
    Unique identifer for the destination IP group
    id str
    The provider-assigned unique ID for this managed resource.
    groupId Number
    Unique identifer for the destination IP group
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing FirewallFilteringDestinationGroups Resource

    Get an existing FirewallFilteringDestinationGroups resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: FirewallFilteringDestinationGroupsState, opts?: CustomResourceOptions): FirewallFilteringDestinationGroups
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        addresses: Optional[Sequence[str]] = None,
        countries: Optional[Sequence[str]] = None,
        description: Optional[str] = None,
        group_id: Optional[int] = None,
        ip_categories: Optional[Sequence[str]] = None,
        name: Optional[str] = None,
        type: Optional[str] = None) -> FirewallFilteringDestinationGroups
    func GetFirewallFilteringDestinationGroups(ctx *Context, name string, id IDInput, state *FirewallFilteringDestinationGroupsState, opts ...ResourceOption) (*FirewallFilteringDestinationGroups, error)
    public static FirewallFilteringDestinationGroups Get(string name, Input<string> id, FirewallFilteringDestinationGroupsState? state, CustomResourceOptions? opts = null)
    public static FirewallFilteringDestinationGroups get(String name, Output<String> id, FirewallFilteringDestinationGroupsState state, CustomResourceOptions options)
    resources:  _:    type: zia:FirewallFilteringDestinationGroups    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Addresses List<string>
    Destination IP addresses within the group
    Countries List<string>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    Description string
    Additional information about the destination IP group
    GroupId int
    Unique identifer for the destination IP group
    IpCategories List<string>
    List of URL categories for which rule must be applied
    Name string
    Destination IP group name
    Type string
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    Addresses []string
    Destination IP addresses within the group
    Countries []string
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    Description string
    Additional information about the destination IP group
    GroupId int
    Unique identifer for the destination IP group
    IpCategories []string
    List of URL categories for which rule must be applied
    Name string
    Destination IP group name
    Type string
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    addresses List<String>
    Destination IP addresses within the group
    countries List<String>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    description String
    Additional information about the destination IP group
    groupId Integer
    Unique identifer for the destination IP group
    ipCategories List<String>
    List of URL categories for which rule must be applied
    name String
    Destination IP group name
    type String
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    addresses string[]
    Destination IP addresses within the group
    countries string[]
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    description string
    Additional information about the destination IP group
    groupId number
    Unique identifer for the destination IP group
    ipCategories string[]
    List of URL categories for which rule must be applied
    name string
    Destination IP group name
    type string
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    addresses Sequence[str]
    Destination IP addresses within the group
    countries Sequence[str]
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    description str
    Additional information about the destination IP group
    group_id int
    Unique identifer for the destination IP group
    ip_categories Sequence[str]
    List of URL categories for which rule must be applied
    name str
    Destination IP group name
    type str
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)
    addresses List<String>
    Destination IP addresses within the group
    countries List<String>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    description String
    Additional information about the destination IP group
    groupId Number
    Unique identifer for the destination IP group
    ipCategories List<String>
    List of URL categories for which rule must be applied
    name String
    Destination IP group name
    type String
    Destination IP group type (i.e., the group can contain destination IP addresses or FQDNs)

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZIA configurations into Terraform-compliant HashiCorp Configuration Language.

    Visit

    zia_firewall_filtering_destination_groups can be imported by using <GROUP_ID> or <GROUP_NAME> as the import ID.

    For example:

    $ pulumi import zia:index/firewallFilteringDestinationGroups:FirewallFilteringDestinationGroups example <group_id>

    or

    $ pulumi import zia:index/firewallFilteringDestinationGroups:FirewallFilteringDestinationGroups example <group_name>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
    zscaler/pulumi-zia