Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. getCasbDlpRules
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
zscaler/pulumi-zia

zia.getCasbDlpRules

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
zscaler/pulumi-zia

    Use the zia_casb_dlp_rules data source to get information about SaaS Security Data at Rest Scanning Data Loss Prevention (DLP) rules based on the specified rule type.

    Example Usage

    By Name

    
data "zia_casb_dlp_rules" "this" {
  name = "SaaS_ITSM_App_Rule"
  type = "OFLCASB_DLP_ITSM"
}

    By ID

    
data "zia_casb_dlp_rules" "this" {
  id = 154658
  type = "OFLCASB_DLP_ITSM"
}

    Using getCasbDlpRules

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCasbDlpRules(args: GetCasbDlpRulesArgs, opts?: InvokeOptions): Promise<GetCasbDlpRulesResult>
function getCasbDlpRulesOutput(args: GetCasbDlpRulesOutputArgs, opts?: InvokeOptions): Output<GetCasbDlpRulesResult>
    def get_casb_dlp_rules(id: Optional[int] = None,
                       name: Optional[str] = None,
                       type: Optional[str] = None,
                       opts: Optional[InvokeOptions] = None) -> GetCasbDlpRulesResult
def get_casb_dlp_rules_output(id: Optional[pulumi.Input[int]] = None,
                       name: Optional[pulumi.Input[str]] = None,
                       type: Optional[pulumi.Input[str]] = None,
                       opts: Optional[InvokeOptions] = None) -> Output[GetCasbDlpRulesResult]
    func LookupCasbDlpRules(ctx *Context, args *LookupCasbDlpRulesArgs, opts ...InvokeOption) (*LookupCasbDlpRulesResult, error)
func LookupCasbDlpRulesOutput(ctx *Context, args *LookupCasbDlpRulesOutputArgs, opts ...InvokeOption) LookupCasbDlpRulesResultOutput

    > Note: This function is named LookupCasbDlpRules in the Go SDK.

    public static class GetCasbDlpRules 
{
    public static Task<GetCasbDlpRulesResult> InvokeAsync(GetCasbDlpRulesArgs args, InvokeOptions? opts = null)
    public static Output<GetCasbDlpRulesResult> Invoke(GetCasbDlpRulesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetCasbDlpRulesResult> getCasbDlpRules(GetCasbDlpRulesArgs args, InvokeOptions options)
public static Output<GetCasbDlpRulesResult> getCasbDlpRules(GetCasbDlpRulesArgs args, InvokeOptions options)

    fn::invoke:
  function: zia:index/getCasbDlpRules:getCasbDlpRules
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Type string
    The type of SaaS Security Data at Rest Scanning DLP rule.

    • OFLCASB_DLP_FILE
    • OFLCASB_DLP_EMAIL
    • OFLCASB_DLP_CRM
    • OFLCASB_DLP_ITSM
    • OFLCASB_DLP_COLLAB
    • OFLCASB_DLP_REPO
    • OFLCASB_DLP_STORAGE
    • OFLCASB_DLP_GENAI
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Type string
    The type of SaaS Security Data at Rest Scanning DLP rule.

    • OFLCASB_DLP_FILE
    • OFLCASB_DLP_EMAIL
    • OFLCASB_DLP_CRM
    • OFLCASB_DLP_ITSM
    • OFLCASB_DLP_COLLAB
    • OFLCASB_DLP_REPO
    • OFLCASB_DLP_STORAGE
    • OFLCASB_DLP_GENAI
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    type String
    The type of SaaS Security Data at Rest Scanning DLP rule.

    • OFLCASB_DLP_FILE
    • OFLCASB_DLP_EMAIL
    • OFLCASB_DLP_CRM
    • OFLCASB_DLP_ITSM
    • OFLCASB_DLP_COLLAB
    • OFLCASB_DLP_REPO
    • OFLCASB_DLP_STORAGE
    • OFLCASB_DLP_GENAI
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    type string
    The type of SaaS Security Data at Rest Scanning DLP rule.

    • OFLCASB_DLP_FILE
    • OFLCASB_DLP_EMAIL
    • OFLCASB_DLP_CRM
    • OFLCASB_DLP_ITSM
    • OFLCASB_DLP_COLLAB
    • OFLCASB_DLP_REPO
    • OFLCASB_DLP_STORAGE
    • OFLCASB_DLP_GENAI
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    type str
    The type of SaaS Security Data at Rest Scanning DLP rule.

    • OFLCASB_DLP_FILE
    • OFLCASB_DLP_EMAIL
    • OFLCASB_DLP_CRM
    • OFLCASB_DLP_ITSM
    • OFLCASB_DLP_COLLAB
    • OFLCASB_DLP_REPO
    • OFLCASB_DLP_STORAGE
    • OFLCASB_DLP_GENAI
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    type String
    The type of SaaS Security Data at Rest Scanning DLP rule.

    • OFLCASB_DLP_FILE
    • OFLCASB_DLP_EMAIL
    • OFLCASB_DLP_CRM
    • OFLCASB_DLP_ITSM
    • OFLCASB_DLP_COLLAB
    • OFLCASB_DLP_REPO
    • OFLCASB_DLP_STORAGE
    • OFLCASB_DLP_GENAI

    getCasbDlpRules Result

    The following output properties are available:

    AccessControl string
    (string) Access privilege of this rule based on the admin's RBA state.
    Action string
    (string) The configured action for the policy rule.
    AuditorNotifications List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesAuditorNotification>
    BucketOwner string
    (string) A user who inspects their buckets for sensitive data.
    Buckets List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesBucket>
    CasbEmailLabels List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesCasbEmailLabel>
    CasbTombstoneTemplates List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesCasbTombstoneTemplate>
    CloudAppTenants List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesCloudAppTenant>
    CollaborationScopes List<string>
    (List of String) Collaboration scope for the rule.
    Components List<string>
    (List of String) List of components for which the rule is applied.
    ContentLocation string
    (string) The location for the content that the Zscaler service inspects for sensitive data.
    CriteriaDomainProfiles List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesCriteriaDomainProfile>
    Departments List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesDepartment>
    Description string
    (string) An admin editable text-based description of the rule.
    DlpEngines List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesDlpEngine>
    Domains List<string>
    (List of String) Domain for the external organization sharing the channel.
    EmailRecipientProfiles List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesEmailRecipientProfile>
    EntityGroups List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesEntityGroup>
    ExcludedDomainProfiles List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesExcludedDomainProfile>
    ExternalAuditorEmail string
    (string) Email address of the external auditor to whom the DLP email alerts are sent.
    FileTypes List<string>
    (List of String) File types to which the rule is applied.
    Groups List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesGroup>
    Id int
    (int) A unique identifier for the tombstone template.
    IncludeCriteriaDomainProfile bool
    (bool) If true, criteriaDomainProfiles is included in the criteria.
    IncludeEmailRecipientProfile bool
    (bool) If true, emailRecipientProfiles is included in the criteria.
    IncludeEntityGroups bool
    (bool) If true, entityGroups is included in the criteria.
    IncludedDomainProfiles List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesIncludedDomainProfile>
    Labels List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesLabel>
    LastModifiedTime int
    (int) Last modification time of the rule.
    Name string
    (string) The configured name of the tombstone template.
    NumberOfExternalCollaborators string
    (string) Number of external collaborators for files shared outside of an organization.
    NumberOfInternalCollaborators string
    (string) Number of internal collaborators for files shared within an organization.
    ObjectTypes List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesObjectType>
    Order int
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    QuarantineLocation string
    (string) Location where all quarantined files are moved for action.
    Rank int
    (int) Rank of the rule.
    Recipient string
    (string) Specifies if the email recipient is internal or external.
    RedactionProfiles List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesRedactionProfile>
    Severity string
    (string) The severity level of the incidents that match the policy rule.
    State string
    (string) Administrative state of the rule.
    Tags List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesTag>
    Type string
    Users List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesUser>
    WatermarkDeleteOldVersion bool
    (bool) Specifies whether to delete an old version of the watermarked file.
    WatermarkProfiles List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesWatermarkProfile>
    WithoutContentInspection bool
    (bool) If true, Content Matching is set to None.
    ZscalerIncidentReceivers List<zscaler.PulumiPackage.Zia.Outputs.GetCasbDlpRulesZscalerIncidentReceiver>
    AccessControl string
    (string) Access privilege of this rule based on the admin's RBA state.
    Action string
    (string) The configured action for the policy rule.
    AuditorNotifications []GetCasbDlpRulesAuditorNotification
    BucketOwner string
    (string) A user who inspects their buckets for sensitive data.
    Buckets []GetCasbDlpRulesBucket
    CasbEmailLabels []GetCasbDlpRulesCasbEmailLabel
    CasbTombstoneTemplates []GetCasbDlpRulesCasbTombstoneTemplate
    CloudAppTenants []GetCasbDlpRulesCloudAppTenant
    CollaborationScopes []string
    (List of String) Collaboration scope for the rule.
    Components []string
    (List of String) List of components for which the rule is applied.
    ContentLocation string
    (string) The location for the content that the Zscaler service inspects for sensitive data.
    CriteriaDomainProfiles []GetCasbDlpRulesCriteriaDomainProfile
    Departments []GetCasbDlpRulesDepartment
    Description string
    (string) An admin editable text-based description of the rule.
    DlpEngines []GetCasbDlpRulesDlpEngine
    Domains []string
    (List of String) Domain for the external organization sharing the channel.
    EmailRecipientProfiles []GetCasbDlpRulesEmailRecipientProfile
    EntityGroups []GetCasbDlpRulesEntityGroup
    ExcludedDomainProfiles []GetCasbDlpRulesExcludedDomainProfile
    ExternalAuditorEmail string
    (string) Email address of the external auditor to whom the DLP email alerts are sent.
    FileTypes []string
    (List of String) File types to which the rule is applied.
    Groups []GetCasbDlpRulesGroup
    Id int
    (int) A unique identifier for the tombstone template.
    IncludeCriteriaDomainProfile bool
    (bool) If true, criteriaDomainProfiles is included in the criteria.
    IncludeEmailRecipientProfile bool
    (bool) If true, emailRecipientProfiles is included in the criteria.
    IncludeEntityGroups bool
    (bool) If true, entityGroups is included in the criteria.
    IncludedDomainProfiles []GetCasbDlpRulesIncludedDomainProfile
    Labels []GetCasbDlpRulesLabel
    LastModifiedTime int
    (int) Last modification time of the rule.
    Name string
    (string) The configured name of the tombstone template.
    NumberOfExternalCollaborators string
    (string) Number of external collaborators for files shared outside of an organization.
    NumberOfInternalCollaborators string
    (string) Number of internal collaborators for files shared within an organization.
    ObjectTypes []GetCasbDlpRulesObjectType
    Order int
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    QuarantineLocation string
    (string) Location where all quarantined files are moved for action.
    Rank int
    (int) Rank of the rule.
    Recipient string
    (string) Specifies if the email recipient is internal or external.
    RedactionProfiles []GetCasbDlpRulesRedactionProfile
    Severity string
    (string) The severity level of the incidents that match the policy rule.
    State string
    (string) Administrative state of the rule.
    Tags []GetCasbDlpRulesTag
    Type string
    Users []GetCasbDlpRulesUser
    WatermarkDeleteOldVersion bool
    (bool) Specifies whether to delete an old version of the watermarked file.
    WatermarkProfiles []GetCasbDlpRulesWatermarkProfile
    WithoutContentInspection bool
    (bool) If true, Content Matching is set to None.
    ZscalerIncidentReceivers []GetCasbDlpRulesZscalerIncidentReceiver
    accessControl String
    (string) Access privilege of this rule based on the admin's RBA state.
    action String
    (string) The configured action for the policy rule.
    auditorNotifications List<GetCasbDlpRulesAuditorNotification>
    bucketOwner String
    (string) A user who inspects their buckets for sensitive data.
    buckets List<GetCasbDlpRulesBucket>
    casbEmailLabels List<GetCasbDlpRulesCasbEmailLabel>
    casbTombstoneTemplates List<GetCasbDlpRulesCasbTombstoneTemplate>
    cloudAppTenants List<GetCasbDlpRulesCloudAppTenant>
    collaborationScopes List<String>
    (List of String) Collaboration scope for the rule.
    components List<String>
    (List of String) List of components for which the rule is applied.
    contentLocation String
    (string) The location for the content that the Zscaler service inspects for sensitive data.
    criteriaDomainProfiles List<GetCasbDlpRulesCriteriaDomainProfile>
    departments List<GetCasbDlpRulesDepartment>
    description String
    (string) An admin editable text-based description of the rule.
    dlpEngines List<GetCasbDlpRulesDlpEngine>
    domains List<String>
    (List of String) Domain for the external organization sharing the channel.
    emailRecipientProfiles List<GetCasbDlpRulesEmailRecipientProfile>
    entityGroups List<GetCasbDlpRulesEntityGroup>
    excludedDomainProfiles List<GetCasbDlpRulesExcludedDomainProfile>
    externalAuditorEmail String
    (string) Email address of the external auditor to whom the DLP email alerts are sent.
    fileTypes List<String>
    (List of String) File types to which the rule is applied.
    groups List<GetCasbDlpRulesGroup>
    id Integer
    (int) A unique identifier for the tombstone template.
    includeCriteriaDomainProfile Boolean
    (bool) If true, criteriaDomainProfiles is included in the criteria.
    includeEmailRecipientProfile Boolean
    (bool) If true, emailRecipientProfiles is included in the criteria.
    includeEntityGroups Boolean
    (bool) If true, entityGroups is included in the criteria.
    includedDomainProfiles List<GetCasbDlpRulesIncludedDomainProfile>
    labels List<GetCasbDlpRulesLabel>
    lastModifiedTime Integer
    (int) Last modification time of the rule.
    name String
    (string) The configured name of the tombstone template.
    numberOfExternalCollaborators String
    (string) Number of external collaborators for files shared outside of an organization.
    numberOfInternalCollaborators String
    (string) Number of internal collaborators for files shared within an organization.
    objectTypes List<GetCasbDlpRulesObjectType>
    order Integer
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    quarantineLocation String
    (string) Location where all quarantined files are moved for action.
    rank Integer
    (int) Rank of the rule.
    recipient String
    (string) Specifies if the email recipient is internal or external.
    redactionProfiles List<GetCasbDlpRulesRedactionProfile>
    severity String
    (string) The severity level of the incidents that match the policy rule.
    state String
    (string) Administrative state of the rule.
    tags List<GetCasbDlpRulesTag>
    type String
    users List<GetCasbDlpRulesUser>
    watermarkDeleteOldVersion Boolean
    (bool) Specifies whether to delete an old version of the watermarked file.
    watermarkProfiles List<GetCasbDlpRulesWatermarkProfile>
    withoutContentInspection Boolean
    (bool) If true, Content Matching is set to None.
    zscalerIncidentReceivers List<GetCasbDlpRulesZscalerIncidentReceiver>
    accessControl string
    (string) Access privilege of this rule based on the admin's RBA state.
    action string
    (string) The configured action for the policy rule.
    auditorNotifications GetCasbDlpRulesAuditorNotification[]
    bucketOwner string
    (string) A user who inspects their buckets for sensitive data.
    buckets GetCasbDlpRulesBucket[]
    casbEmailLabels GetCasbDlpRulesCasbEmailLabel[]
    casbTombstoneTemplates GetCasbDlpRulesCasbTombstoneTemplate[]
    cloudAppTenants GetCasbDlpRulesCloudAppTenant[]
    collaborationScopes string[]
    (List of String) Collaboration scope for the rule.
    components string[]
    (List of String) List of components for which the rule is applied.
    contentLocation string
    (string) The location for the content that the Zscaler service inspects for sensitive data.
    criteriaDomainProfiles GetCasbDlpRulesCriteriaDomainProfile[]
    departments GetCasbDlpRulesDepartment[]
    description string
    (string) An admin editable text-based description of the rule.
    dlpEngines GetCasbDlpRulesDlpEngine[]
    domains string[]
    (List of String) Domain for the external organization sharing the channel.
    emailRecipientProfiles GetCasbDlpRulesEmailRecipientProfile[]
    entityGroups GetCasbDlpRulesEntityGroup[]
    excludedDomainProfiles GetCasbDlpRulesExcludedDomainProfile[]
    externalAuditorEmail string
    (string) Email address of the external auditor to whom the DLP email alerts are sent.
    fileTypes string[]
    (List of String) File types to which the rule is applied.
    groups GetCasbDlpRulesGroup[]
    id number
    (int) A unique identifier for the tombstone template.
    includeCriteriaDomainProfile boolean
    (bool) If true, criteriaDomainProfiles is included in the criteria.
    includeEmailRecipientProfile boolean
    (bool) If true, emailRecipientProfiles is included in the criteria.
    includeEntityGroups boolean
    (bool) If true, entityGroups is included in the criteria.
    includedDomainProfiles GetCasbDlpRulesIncludedDomainProfile[]
    labels GetCasbDlpRulesLabel[]
    lastModifiedTime number
    (int) Last modification time of the rule.
    name string
    (string) The configured name of the tombstone template.
    numberOfExternalCollaborators string
    (string) Number of external collaborators for files shared outside of an organization.
    numberOfInternalCollaborators string
    (string) Number of internal collaborators for files shared within an organization.
    objectTypes GetCasbDlpRulesObjectType[]
    order number
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    quarantineLocation string
    (string) Location where all quarantined files are moved for action.
    rank number
    (int) Rank of the rule.
    recipient string
    (string) Specifies if the email recipient is internal or external.
    redactionProfiles GetCasbDlpRulesRedactionProfile[]
    severity string
    (string) The severity level of the incidents that match the policy rule.
    state string
    (string) Administrative state of the rule.
    tags GetCasbDlpRulesTag[]
    type string
    users GetCasbDlpRulesUser[]
    watermarkDeleteOldVersion boolean
    (bool) Specifies whether to delete an old version of the watermarked file.
    watermarkProfiles GetCasbDlpRulesWatermarkProfile[]
    withoutContentInspection boolean
    (bool) If true, Content Matching is set to None.
    zscalerIncidentReceivers GetCasbDlpRulesZscalerIncidentReceiver[]
    access_control str
    (string) Access privilege of this rule based on the admin's RBA state.
    action str
    (string) The configured action for the policy rule.
    auditor_notifications Sequence[GetCasbDlpRulesAuditorNotification]
    bucket_owner str
    (string) A user who inspects their buckets for sensitive data.
    buckets Sequence[GetCasbDlpRulesBucket]
    casb_email_labels Sequence[GetCasbDlpRulesCasbEmailLabel]
    casb_tombstone_templates Sequence[GetCasbDlpRulesCasbTombstoneTemplate]
    cloud_app_tenants Sequence[GetCasbDlpRulesCloudAppTenant]
    collaboration_scopes Sequence[str]
    (List of String) Collaboration scope for the rule.
    components Sequence[str]
    (List of String) List of components for which the rule is applied.
    content_location str
    (string) The location for the content that the Zscaler service inspects for sensitive data.
    criteria_domain_profiles Sequence[GetCasbDlpRulesCriteriaDomainProfile]
    departments Sequence[GetCasbDlpRulesDepartment]
    description str
    (string) An admin editable text-based description of the rule.
    dlp_engines Sequence[GetCasbDlpRulesDlpEngine]
    domains Sequence[str]
    (List of String) Domain for the external organization sharing the channel.
    email_recipient_profiles Sequence[GetCasbDlpRulesEmailRecipientProfile]
    entity_groups Sequence[GetCasbDlpRulesEntityGroup]
    excluded_domain_profiles Sequence[GetCasbDlpRulesExcludedDomainProfile]
    external_auditor_email str
    (string) Email address of the external auditor to whom the DLP email alerts are sent.
    file_types Sequence[str]
    (List of String) File types to which the rule is applied.
    groups Sequence[GetCasbDlpRulesGroup]
    id int
    (int) A unique identifier for the tombstone template.
    include_criteria_domain_profile bool
    (bool) If true, criteriaDomainProfiles is included in the criteria.
    include_email_recipient_profile bool
    (bool) If true, emailRecipientProfiles is included in the criteria.
    include_entity_groups bool
    (bool) If true, entityGroups is included in the criteria.
    included_domain_profiles Sequence[GetCasbDlpRulesIncludedDomainProfile]
    labels Sequence[GetCasbDlpRulesLabel]
    last_modified_time int
    (int) Last modification time of the rule.
    name str
    (string) The configured name of the tombstone template.
    number_of_external_collaborators str
    (string) Number of external collaborators for files shared outside of an organization.
    number_of_internal_collaborators str
    (string) Number of internal collaborators for files shared within an organization.
    object_types Sequence[GetCasbDlpRulesObjectType]
    order int
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    quarantine_location str
    (string) Location where all quarantined files are moved for action.
    rank int
    (int) Rank of the rule.
    recipient str
    (string) Specifies if the email recipient is internal or external.
    redaction_profiles Sequence[GetCasbDlpRulesRedactionProfile]
    severity str
    (string) The severity level of the incidents that match the policy rule.
    state str
    (string) Administrative state of the rule.
    tags Sequence[GetCasbDlpRulesTag]
    type str
    users Sequence[GetCasbDlpRulesUser]
    watermark_delete_old_version bool
    (bool) Specifies whether to delete an old version of the watermarked file.
    watermark_profiles Sequence[GetCasbDlpRulesWatermarkProfile]
    without_content_inspection bool
    (bool) If true, Content Matching is set to None.
    zscaler_incident_receivers Sequence[GetCasbDlpRulesZscalerIncidentReceiver]
    accessControl String
    (string) Access privilege of this rule based on the admin's RBA state.
    action String
    (string) The configured action for the policy rule.
    auditorNotifications List<Property Map>
    bucketOwner String
    (string) A user who inspects their buckets for sensitive data.
    buckets List<Property Map>
    casbEmailLabels List<Property Map>
    casbTombstoneTemplates List<Property Map>
    cloudAppTenants List<Property Map>
    collaborationScopes List<String>
    (List of String) Collaboration scope for the rule.
    components List<String>
    (List of String) List of components for which the rule is applied.
    contentLocation String
    (string) The location for the content that the Zscaler service inspects for sensitive data.
    criteriaDomainProfiles List<Property Map>
    departments List<Property Map>
    description String
    (string) An admin editable text-based description of the rule.
    dlpEngines List<Property Map>
    domains List<String>
    (List of String) Domain for the external organization sharing the channel.
    emailRecipientProfiles List<Property Map>
    entityGroups List<Property Map>
    excludedDomainProfiles List<Property Map>
    externalAuditorEmail String
    (string) Email address of the external auditor to whom the DLP email alerts are sent.
    fileTypes List<String>
    (List of String) File types to which the rule is applied.
    groups List<Property Map>
    id Number
    (int) A unique identifier for the tombstone template.
    includeCriteriaDomainProfile Boolean
    (bool) If true, criteriaDomainProfiles is included in the criteria.
    includeEmailRecipientProfile Boolean
    (bool) If true, emailRecipientProfiles is included in the criteria.
    includeEntityGroups Boolean
    (bool) If true, entityGroups is included in the criteria.
    includedDomainProfiles List<Property Map>
    labels List<Property Map>
    lastModifiedTime Number
    (int) Last modification time of the rule.
    name String
    (string) The configured name of the tombstone template.
    numberOfExternalCollaborators String
    (string) Number of external collaborators for files shared outside of an organization.
    numberOfInternalCollaborators String
    (string) Number of internal collaborators for files shared within an organization.
    objectTypes List<Property Map>
    order Number
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    quarantineLocation String
    (string) Location where all quarantined files are moved for action.
    rank Number
    (int) Rank of the rule.
    recipient String
    (string) Specifies if the email recipient is internal or external.
    redactionProfiles List<Property Map>
    severity String
    (string) The severity level of the incidents that match the policy rule.
    state String
    (string) Administrative state of the rule.
    tags List<Property Map>
    type String
    users List<Property Map>
    watermarkDeleteOldVersion Boolean
    (bool) Specifies whether to delete an old version of the watermarked file.
    watermarkProfiles List<Property Map>
    withoutContentInspection Boolean
    (bool) If true, Content Matching is set to None.
    zscalerIncidentReceivers List<Property Map>

    Supporting Types

    GetCasbDlpRulesAuditorNotification

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesBucket

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesCasbEmailLabel

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesCasbTombstoneTemplate

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesCloudAppTenant

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesCriteriaDomainProfile

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesDepartment

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesDlpEngine

    Extensions Dictionary<string, string>
    (Map of String) Optional metadata for the DLP engine.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Extensions map[string]string
    (Map of String) Optional metadata for the DLP engine.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    extensions Map<String,String>
    (Map of String) Optional metadata for the DLP engine.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    extensions {[key: string]: string}
    (Map of String) Optional metadata for the DLP engine.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    extensions Mapping[str, str]
    (Map of String) Optional metadata for the DLP engine.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    extensions Map<String>
    (Map of String) Optional metadata for the DLP engine.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesEmailRecipientProfile

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesEntityGroup

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesExcludedDomainProfile

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesGroup

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesIncludedDomainProfile

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesLabel

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesObjectType

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesRedactionProfile

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesTag

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesUser

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesWatermarkProfile

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbDlpRulesZscalerIncidentReceiver

    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    System-generated identifier for the SaaS Security Data at Rest Scanning DLP rule.
    name String
    Rule name.

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
    zscaler/pulumi-zia