1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. getCasbMalwareRules
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler

zia.getCasbMalwareRules

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler

    Use the zia_casb_malware_rules data source to get information about SaaS Security Data at Rest Scanning Malware Detection rules based on the specified rule type

    Example Usage

    By Name

    
    data "zia_casb_malware_rules" "this" {
      name = "SaaS_ITSM_App_Rule"
      type = "OFLCASB_AVP_ITSM"
    }
    

    By ID

    
    data "zia_casb_malware_rules" "this" {
      id = 154658
      type = "OFLCASB_AVP_ITSM"
    }
    

    Using getCasbMalwareRules

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCasbMalwareRules(args: GetCasbMalwareRulesArgs, opts?: InvokeOptions): Promise<GetCasbMalwareRulesResult>
    function getCasbMalwareRulesOutput(args: GetCasbMalwareRulesOutputArgs, opts?: InvokeOptions): Output<GetCasbMalwareRulesResult>
    def get_casb_malware_rules(id: Optional[int] = None,
                               name: Optional[str] = None,
                               type: Optional[str] = None,
                               opts: Optional[InvokeOptions] = None) -> GetCasbMalwareRulesResult
    def get_casb_malware_rules_output(id: Optional[pulumi.Input[int]] = None,
                               name: Optional[pulumi.Input[str]] = None,
                               type: Optional[pulumi.Input[str]] = None,
                               opts: Optional[InvokeOptions] = None) -> Output[GetCasbMalwareRulesResult]
    func LookupCasbMalwareRules(ctx *Context, args *LookupCasbMalwareRulesArgs, opts ...InvokeOption) (*LookupCasbMalwareRulesResult, error)
    func LookupCasbMalwareRulesOutput(ctx *Context, args *LookupCasbMalwareRulesOutputArgs, opts ...InvokeOption) LookupCasbMalwareRulesResultOutput

    > Note: This function is named LookupCasbMalwareRules in the Go SDK.

    public static class GetCasbMalwareRules 
    {
        public static Task<GetCasbMalwareRulesResult> InvokeAsync(GetCasbMalwareRulesArgs args, InvokeOptions? opts = null)
        public static Output<GetCasbMalwareRulesResult> Invoke(GetCasbMalwareRulesInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetCasbMalwareRulesResult> getCasbMalwareRules(GetCasbMalwareRulesArgs args, InvokeOptions options)
    public static Output<GetCasbMalwareRulesResult> getCasbMalwareRules(GetCasbMalwareRulesArgs args, InvokeOptions options)
    
    fn::invoke:
      function: zia:index/getCasbMalwareRules:getCasbMalwareRules
      arguments:
        # arguments dictionary

    The following arguments are supported:

    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    Type string
    The type of SaaS Security Data at Rest Scanning Malware rule. Supported Values:

    • ANY,
    • OFLCASB_AVP_FILE
    • OFLCASB_AVP_EMAIL
    • OFLCASB_AVP_CRM
    • OFLCASB_AVP_ITSM
    • OFLCASB_AVP_COLLAB
    • OFLCASB_AVP_REPO
    • OFLCASB_AVP_STORAGE
    • OFLCASB_AVP_GENAI
    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    Type string
    The type of SaaS Security Data at Rest Scanning Malware rule. Supported Values:

    • ANY,
    • OFLCASB_AVP_FILE
    • OFLCASB_AVP_EMAIL
    • OFLCASB_AVP_CRM
    • OFLCASB_AVP_ITSM
    • OFLCASB_AVP_COLLAB
    • OFLCASB_AVP_REPO
    • OFLCASB_AVP_STORAGE
    • OFLCASB_AVP_GENAI
    id Integer
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.
    type String
    The type of SaaS Security Data at Rest Scanning Malware rule. Supported Values:

    • ANY,
    • OFLCASB_AVP_FILE
    • OFLCASB_AVP_EMAIL
    • OFLCASB_AVP_CRM
    • OFLCASB_AVP_ITSM
    • OFLCASB_AVP_COLLAB
    • OFLCASB_AVP_REPO
    • OFLCASB_AVP_STORAGE
    • OFLCASB_AVP_GENAI
    id number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name string
    Rule name.
    type string
    The type of SaaS Security Data at Rest Scanning Malware rule. Supported Values:

    • ANY,
    • OFLCASB_AVP_FILE
    • OFLCASB_AVP_EMAIL
    • OFLCASB_AVP_CRM
    • OFLCASB_AVP_ITSM
    • OFLCASB_AVP_COLLAB
    • OFLCASB_AVP_REPO
    • OFLCASB_AVP_STORAGE
    • OFLCASB_AVP_GENAI
    id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name str
    Rule name.
    type str
    The type of SaaS Security Data at Rest Scanning Malware rule. Supported Values:

    • ANY,
    • OFLCASB_AVP_FILE
    • OFLCASB_AVP_EMAIL
    • OFLCASB_AVP_CRM
    • OFLCASB_AVP_ITSM
    • OFLCASB_AVP_COLLAB
    • OFLCASB_AVP_REPO
    • OFLCASB_AVP_STORAGE
    • OFLCASB_AVP_GENAI
    id Number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.
    type String
    The type of SaaS Security Data at Rest Scanning Malware rule. Supported Values:

    • ANY,
    • OFLCASB_AVP_FILE
    • OFLCASB_AVP_EMAIL
    • OFLCASB_AVP_CRM
    • OFLCASB_AVP_ITSM
    • OFLCASB_AVP_COLLAB
    • OFLCASB_AVP_REPO
    • OFLCASB_AVP_STORAGE
    • OFLCASB_AVP_GENAI

    getCasbMalwareRules Result

    The following output properties are available:

    AccessControl string
    (string) Access privilege of this rule based on the admin's RBA state.
    Action string
    (string) The configured action for the policy rule
    Buckets List<zscaler.PulumiPackage.Zia.Outputs.GetCasbMalwareRulesBucket>
    CasbEmailLabels List<zscaler.PulumiPackage.Zia.Outputs.GetCasbMalwareRulesCasbEmailLabel>
    CasbTombstoneTemplates List<zscaler.PulumiPackage.Zia.Outputs.GetCasbMalwareRulesCasbTombstoneTemplate>
    CloudAppTenantIds List<zscaler.PulumiPackage.Zia.Outputs.GetCasbMalwareRulesCloudAppTenantId>
    CloudAppTenants List<zscaler.PulumiPackage.Zia.Outputs.GetCasbMalwareRulesCloudAppTenant>
    Id int
    (int) A unique identifier for the tombstone template.
    Labels List<zscaler.PulumiPackage.Zia.Outputs.GetCasbMalwareRulesLabel>
    LastModifiedBies List<zscaler.PulumiPackage.Zia.Outputs.GetCasbMalwareRulesLastModifiedBy>
    LastModifiedTime int
    (int) Last modification time of the rule.
    Name string
    (string) The configured name of the tombstone template.
    Order int
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    QuarantineLocation string
    (string) Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    ScanInboundEmailLink string
    State string
    (string) Administrative state of the rule.
    Type string
    AccessControl string
    (string) Access privilege of this rule based on the admin's RBA state.
    Action string
    (string) The configured action for the policy rule
    Buckets []GetCasbMalwareRulesBucket
    CasbEmailLabels []GetCasbMalwareRulesCasbEmailLabel
    CasbTombstoneTemplates []GetCasbMalwareRulesCasbTombstoneTemplate
    CloudAppTenantIds []GetCasbMalwareRulesCloudAppTenantId
    CloudAppTenants []GetCasbMalwareRulesCloudAppTenant
    Id int
    (int) A unique identifier for the tombstone template.
    Labels []GetCasbMalwareRulesLabel
    LastModifiedBies []GetCasbMalwareRulesLastModifiedBy
    LastModifiedTime int
    (int) Last modification time of the rule.
    Name string
    (string) The configured name of the tombstone template.
    Order int
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    QuarantineLocation string
    (string) Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    ScanInboundEmailLink string
    State string
    (string) Administrative state of the rule.
    Type string
    accessControl String
    (string) Access privilege of this rule based on the admin's RBA state.
    action String
    (string) The configured action for the policy rule
    buckets List<GetCasbMalwareRulesBucket>
    casbEmailLabels List<GetCasbMalwareRulesCasbEmailLabel>
    casbTombstoneTemplates List<GetCasbMalwareRulesCasbTombstoneTemplate>
    cloudAppTenantIds List<GetCasbMalwareRulesCloudAppTenantId>
    cloudAppTenants List<GetCasbMalwareRulesCloudAppTenant>
    id Integer
    (int) A unique identifier for the tombstone template.
    labels List<GetCasbMalwareRulesLabel>
    lastModifiedBies List<GetCasbMalwareRulesLastModifiedBy>
    lastModifiedTime Integer
    (int) Last modification time of the rule.
    name String
    (string) The configured name of the tombstone template.
    order Integer
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    quarantineLocation String
    (string) Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    scanInboundEmailLink String
    state String
    (string) Administrative state of the rule.
    type String
    accessControl string
    (string) Access privilege of this rule based on the admin's RBA state.
    action string
    (string) The configured action for the policy rule
    buckets GetCasbMalwareRulesBucket[]
    casbEmailLabels GetCasbMalwareRulesCasbEmailLabel[]
    casbTombstoneTemplates GetCasbMalwareRulesCasbTombstoneTemplate[]
    cloudAppTenantIds GetCasbMalwareRulesCloudAppTenantId[]
    cloudAppTenants GetCasbMalwareRulesCloudAppTenant[]
    id number
    (int) A unique identifier for the tombstone template.
    labels GetCasbMalwareRulesLabel[]
    lastModifiedBies GetCasbMalwareRulesLastModifiedBy[]
    lastModifiedTime number
    (int) Last modification time of the rule.
    name string
    (string) The configured name of the tombstone template.
    order number
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    quarantineLocation string
    (string) Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    scanInboundEmailLink string
    state string
    (string) Administrative state of the rule.
    type string
    access_control str
    (string) Access privilege of this rule based on the admin's RBA state.
    action str
    (string) The configured action for the policy rule
    buckets Sequence[GetCasbMalwareRulesBucket]
    casb_email_labels Sequence[GetCasbMalwareRulesCasbEmailLabel]
    casb_tombstone_templates Sequence[GetCasbMalwareRulesCasbTombstoneTemplate]
    cloud_app_tenant_ids Sequence[GetCasbMalwareRulesCloudAppTenantId]
    cloud_app_tenants Sequence[GetCasbMalwareRulesCloudAppTenant]
    id int
    (int) A unique identifier for the tombstone template.
    labels Sequence[GetCasbMalwareRulesLabel]
    last_modified_bies Sequence[GetCasbMalwareRulesLastModifiedBy]
    last_modified_time int
    (int) Last modification time of the rule.
    name str
    (string) The configured name of the tombstone template.
    order int
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    quarantine_location str
    (string) Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    scan_inbound_email_link str
    state str
    (string) Administrative state of the rule.
    type str
    accessControl String
    (string) Access privilege of this rule based on the admin's RBA state.
    action String
    (string) The configured action for the policy rule
    buckets List<Property Map>
    casbEmailLabels List<Property Map>
    casbTombstoneTemplates List<Property Map>
    cloudAppTenantIds List<Property Map>
    cloudAppTenants List<Property Map>
    id Number
    (int) A unique identifier for the tombstone template.
    labels List<Property Map>
    lastModifiedBies List<Property Map>
    lastModifiedTime Number
    (int) Last modification time of the rule.
    name String
    (string) The configured name of the tombstone template.
    order Number
    (int) Order of rule execution with respect to other SaaS Security Data at Rest Scanning DLP rules.
    quarantineLocation String
    (string) Location where all the quarantined files are moved and necessary actions are taken by either deleting or restoring the data
    scanInboundEmailLink String
    state String
    (string) Administrative state of the rule.
    type String

    Supporting Types

    GetCasbMalwareRulesBucket

    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbMalwareRulesCasbEmailLabel

    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbMalwareRulesCasbTombstoneTemplate

    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbMalwareRulesCloudAppTenant

    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbMalwareRulesCloudAppTenantId

    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbMalwareRulesLabel

    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    id Integer
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.
    id number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name string
    Rule name.
    id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name str
    Rule name.
    id Number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.

    GetCasbMalwareRulesLastModifiedBy

    Extensions Dictionary<string, string>
    Additional information about the entity
    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    Extensions map[string]string
    Additional information about the entity
    Id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    Name string
    Rule name.
    extensions Map<String,String>
    Additional information about the entity
    id Integer
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.
    extensions {[key: string]: string}
    Additional information about the entity
    id number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name string
    Rule name.
    extensions Mapping[str, str]
    Additional information about the entity
    id int
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name str
    Rule name.
    extensions Map<String>
    Additional information about the entity
    id Number
    The type of SaaS Security Data at Rest Scanning Malware ruleData at Rest Scanning DLP rule.
    name String
    Rule name.

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler