Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. getCloudAppControlRule
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia

zia.getCloudAppControlRule

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia

    Use the zia_cloud_app_control_rule data source to get information about a ZIA Cloud Application Control Policy in the Zscaler Internet Access cloud or via the API.

    Example Usage

    # Retrieve a Cloud App Control Policy by name
data "zia_cloud_app_control_rule" "this"{
    name = "Example"
    type = "STREAMING_MEDIA"
}

    Cloud Application Control - Rule Types vs Actions Matrix

    Note: Refer to this matrix when configuring types vs actions for each specific rules

    TypesActions
    ————————————–————————————————-
    AI_MLALLOW_AI_ML_WEB_USE
    AI_MLCAUTION_AI_ML_WEB_USE
    AI_MLDENY_AI_ML_WEB_USE
    AI_MLISOLATE_AI_ML_WEB_USE
    ————————————–————————————————-
    BUSINESS_PRODUCTIVITYALLOW_BUSINESS_PRODUCTIVITY_APPS
    BUSINESS_PRODUCTIVITYBLOCK_BUSINESS_PRODUCTIVITY_APPS
    BUSINESS_PRODUCTIVITYCAUTION_BUSINESS_PRODUCTIVITY_APPS
    BUSINESS_PRODUCTIVITYISOLATE_BUSINESS_PRODUCTIVITY_APPS
    ————————————–————————————————-
    CONSUMERALLOW_CONSUMER_APPS
    CONSUMERBLOCK_CONSUMER_APPS
    CONSUMERCAUTION_CONSUMER_APPS
    CONSUMERISOLATE_CONSUMER_APPS
    ————————————–————————————————-
    DNS_OVER_HTTPSALLOW_DNS_OVER_HTTPS_USE
    DNS_OVER_HTTPSDENY_DNS_OVER_HTTPS_USE
    ————————————–————————————————-
    ENTERPRISE_COLLABORATIONALLOW_ENTERPRISE_COLLABORATION_APPS
    ENTERPRISE_COLLABORATIONBLOCK_ENTERPRISE_COLLABORATION_APPS
    ENTERPRISE_COLLABORATIONCAUTION_ENTERPRISE_COLLABORATION_APPS
    ENTERPRISE_COLLABORATIONISOLATE_ENTERPRISE_COLLABORATION_APPS
    ————————————–————————————————-
    FILE_SHAREALLOW_FILE_SHARE_VIEW
    FILE_SHAREALLOW_FILE_SHARE_UPLOAD
    FILE_SHARECAUTION_FILE_SHARE_VIEW
    FILE_SHAREDENY_FILE_SHARE_VIEW
    FILE_SHAREDENY_FILE_SHARE_UPLOAD
    FILE_SHAREISOLATE_FILE_SHARE_VIEW
    ————————————–————————————————-
    FINANCEALLOW_FINANCE_USE
    FINANCECAUTION_FINANCE_USE
    FINANCEDENY_FINANCE_USE
    FINANCEISOLATE_FINANCE_USE
    ————————————–————————————————-
    HEALTH_CAREALLOW_HEALTH_CARE_USE
    HEALTH_CARECAUTION_HEALTH_CARE_USE
    HEALTH_CAREDENY_HEALTH_CARE_USE
    HEALTH_CAREISOLATE_HEALTH_CARE_USE
    ————————————–————————————————-
    HOSTING_PROVIDERALLOW_HOSTING_PROVIDER_USE
    HOSTING_PROVIDERCAUTION_HOSTING_PROVIDER_USE
    HOSTING_PROVIDERDENY_HOSTING_PROVIDER_USE
    HOSTING_PROVIDERISOLATE_HOSTING_PROVIDER_USE
    ————————————–————————————————-
    HUMAN_RESOURCESALLOW_HUMAN_RESOURCES_USE
    HUMAN_RESOURCESCAUTION_HUMAN_RESOURCES_USE
    HUMAN_RESOURCESDENY_HUMAN_RESOURCES_USE
    HUMAN_RESOURCESISOLATE_HUMAN_RESOURCES_USE
    ————————————–————————————————-
    INSTANT_MESSAGINGALLOW_CHAT
    INSTANT_MESSAGINGALLOW_FILE_TRANSFER_IN_CHAT
    INSTANT_MESSAGINGBLOCK_CHAT
    INSTANT_MESSAGINGBLOCK_FILE_TRANSFER_IN_CHAT
    INSTANT_MESSAGINGCAUTION_CHAT
    INSTANT_MESSAGINGISOLATE_CHAT
    ————————————–————————————————-
    IT_SERVICESALLOW_IT_SERVICES_USE
    IT_SERVICESCAUTION_LEGAL_USE
    IT_SERVICESDENY_IT_SERVICES_USE
    IT_SERVICESISOLATE_IT_SERVICES_USE
    ————————————–————————————————-
    LEGALALLOW_LEGAL_USE
    LEGALDENY_DNS_OVER_HTTPS_USE
    LEGALDENY_LEGAL_USE
    LEGALISOLATE_LEGAL_USE
    ————————————–————————————————-
    SALES_AND_MARKETINGALLOW_SALES_MARKETING_APPS
    SALES_AND_MARKETINGBLOCK_SALES_MARKETING_APPS
    SALES_AND_MARKETINGCAUTION_SALES_MARKETING_APPS
    SALES_AND_MARKETINGISOLATE_SALES_MARKETING_APPS
    ————————————–————————————————-
    STREAMING_MEDIAALLOW_STREAMING_VIEW_LISTEN
    STREAMING_MEDIAALLOW_STREAMING_UPLOAD
    STREAMING_MEDIABLOCK_STREAMING_UPLOAD
    STREAMING_MEDIACAUTION_STREAMING_VIEW_LISTEN
    STREAMING_MEDIAISOLATE_STREAMING_VIEW_LISTEN
    ————————————–————————————————-
    SOCIAL_NETWORKINGALLOW_SOCIAL_NETWORKING_VIEW
    SOCIAL_NETWORKINGALLOW_SOCIAL_NETWORKING_POST
    SOCIAL_NETWORKINGBLOCK_SOCIAL_NETWORKING_VIEW
    SOCIAL_NETWORKINGBLOCK_SOCIAL_NETWORKING_POST
    SOCIAL_NETWORKINGCAUTION_SOCIAL_NETWORKING_VIEW
    ————————————–————————————————-
    SYSTEM_AND_DEVELOPMENTALLOW_SYSTEM_DEVELOPMENT_APPS
    SYSTEM_AND_DEVELOPMENTALLOW_SYSTEM_DEVELOPMENT_UPLOAD
    SYSTEM_AND_DEVELOPMENTBLOCK_SYSTEM_DEVELOPMENT_APPS
    SYSTEM_AND_DEVELOPMENTBLOCK_SYSTEM_DEVELOPMENT_UPLOAD
    SYSTEM_AND_DEVELOPMENTCAUTION_SYSTEM_DEVELOPMENT_APPS
    SYSTEM_AND_DEVELOPMENTISOLATE_SALES_MARKETING_APPS
    ————————————–————————————————-
    WEBMAILALLOW_WEBMAIL_VIEW
    WEBMAILALLOW_WEBMAIL_ATTACHMENT_SEND
    WEBMAILALLOW_WEBMAIL_SEND
    WEBMAILCAUTION_WEBMAIL_VIEW
    WEBMAILBLOCK_WEBMAIL_VIEW
    WEBMAILBLOCK_WEBMAIL_ATTACHMENT_SEND
    WEBMAILBLOCK_WEBMAIL_SEND
    WEBMAILISOLATE_WEBMAIL_VIEW
    ————————————–————————————————-

    Cloud Application Control - Rule Types vs Tenant Profile Support

    Note: Refer to this matrix when configuring a Cloud App Control rule with Tenant Profile

    Reference

    TypeApplicationstenancy_profile_ids
    ———————————-——————————-———————
    BUSINESS_PRODUCTIVITY"GOOGLEANALYTICS"✅
    ———————————-——————————-———————
    ENTERPRISE_COLLABORATION"GOOGLECALENDAR"✅
    ENTERPRISE_COLLABORATION"GOOGLEKEEP"✅
    ENTERPRISE_COLLABORATION"GOOGLEMEET"✅
    ENTERPRISE_COLLABORATION"GOOGLESITES"✅
    ENTERPRISE_COLLABORATION"WEBEX"✅
    ENTERPRISE_COLLABORATION"SLACK"✅
    ENTERPRISE_COLLABORATION"WEBEX_TEAMS"✅
    ENTERPRISE_COLLABORATION"ZOOM"✅
    ———————————-——————————-———————
    FILE_SHARE"DROPBOX"✅
    FILE_SHARE"GDRIVE"✅
    FILE_SHARE"GPHOTOS"✅
    ———————————-——————————-———————
    HOSTING_PROVIDER"GCLOUDCOMPUTE"✅
    HOSTING_PROVIDER"AWS"✅
    HOSTING_PROVIDER"IBMSMARTCLOUD"✅
    HOSTING_PROVIDER"GAPPENGINE"✅
    HOSTING_PROVIDER"GOOGLE_CLOUD_PLATFORM"✅
    ———————————-——————————-———————
    IT_SERVICES"MSLOGINSERVICES"✅
    IT_SERVICES"GOOGLOGINSERVICE"✅
    IT_SERVICES"WEBEX_LOGIN_SERVICES"✅
    IT_SERVICES"ZOHO_LOGIN_SERVICES"✅
    ———————————-——————————-———————
    SOCIAL_NETWORKING"GOOGLE_GROUPS"✅
    SOCIAL_NETWORKING"GOOGLE_PLUS"✅
    ———————————-——————————-———————
    STREAMING_MEDIA"YOUTUBE"✅
    STREAMING_MEDIA"GOOGLE_STREAMING"✅
    ———————————-——————————-———————
    SYSTEM_AND_DEVELOPMENT"GOOGLE_DEVELOPERS"✅
    SYSTEM_AND_DEVELOPMENT"GOOGLEAPPMAKER"✅
    ———————————-——————————-———————
    WEBMAIL"GOOGLE_WEBMAIL"✅
    ———————————-——————————-———————

    Using getCloudAppControlRule

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCloudAppControlRule(args: GetCloudAppControlRuleArgs, opts?: InvokeOptions): Promise<GetCloudAppControlRuleResult>
function getCloudAppControlRuleOutput(args: GetCloudAppControlRuleOutputArgs, opts?: InvokeOptions): Output<GetCloudAppControlRuleResult>
    def get_cloud_app_control_rule(id: Optional[int] = None,
                               name: Optional[str] = None,
                               type: Optional[str] = None,
                               opts: Optional[InvokeOptions] = None) -> GetCloudAppControlRuleResult
def get_cloud_app_control_rule_output(id: Optional[pulumi.Input[int]] = None,
                               name: Optional[pulumi.Input[str]] = None,
                               type: Optional[pulumi.Input[str]] = None,
                               opts: Optional[InvokeOptions] = None) -> Output[GetCloudAppControlRuleResult]
    func LookupCloudAppControlRule(ctx *Context, args *LookupCloudAppControlRuleArgs, opts ...InvokeOption) (*LookupCloudAppControlRuleResult, error)
func LookupCloudAppControlRuleOutput(ctx *Context, args *LookupCloudAppControlRuleOutputArgs, opts ...InvokeOption) LookupCloudAppControlRuleResultOutput

    > Note: This function is named LookupCloudAppControlRule in the Go SDK.

    public static class GetCloudAppControlRule 
{
    public static Task<GetCloudAppControlRuleResult> InvokeAsync(GetCloudAppControlRuleArgs args, InvokeOptions? opts = null)
    public static Output<GetCloudAppControlRuleResult> Invoke(GetCloudAppControlRuleInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetCloudAppControlRuleResult> getCloudAppControlRule(GetCloudAppControlRuleArgs args, InvokeOptions options)
public static Output<GetCloudAppControlRuleResult> getCloudAppControlRule(GetCloudAppControlRuleArgs args, InvokeOptions options)

    fn::invoke:
  function: zia:index/getCloudAppControlRule:getCloudAppControlRule
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Id int
    Name string
    Type string
    Id int
    Name string
    Type string
    id Integer
    name String
    type String
    id number
    name string
    type string
    id int
    name str
    type str
    id Number
    name String
    type String

    getCloudAppControlRule Result

    The following output properties are available:

    AccessControl string
    Actions List<string>
    Applications List<string>
    BrowserEunTemplateId int
    CascadingEnabled bool
    CbiProfiles List<zscaler.PulumiPackage.Zia.Outputs.GetCloudAppControlRuleCbiProfile>
    Departments List<zscaler.PulumiPackage.Zia.Outputs.GetCloudAppControlRuleDepartment>
    Description string
    DeviceGroups List<zscaler.PulumiPackage.Zia.Outputs.GetCloudAppControlRuleDeviceGroup>
    DeviceTrustLevels List<string>
    Devices List<zscaler.PulumiPackage.Zia.Outputs.GetCloudAppControlRuleDevice>
    EnforceTimeValidity bool
    EunEnabled bool
    EunTemplateId int
    Groups List<zscaler.PulumiPackage.Zia.Outputs.GetCloudAppControlRuleGroup>
    Labels List<zscaler.PulumiPackage.Zia.Outputs.GetCloudAppControlRuleLabel>
    LastModifiedTime int
    LocationGroups List<zscaler.PulumiPackage.Zia.Outputs.GetCloudAppControlRuleLocationGroup>
    Locations List<zscaler.PulumiPackage.Zia.Outputs.GetCloudAppControlRuleLocation>
    NumberOfApplications int
    Order int
    Predefined bool
    Rank int
    SizeQuota int
    State string
    TimeQuota int
    UserAgentTypes List<string>
    Users List<zscaler.PulumiPackage.Zia.Outputs.GetCloudAppControlRuleUser>
    ValidityEndTime int
    ValidityStartTime int
    ValidityTimeZoneId string
    Id int
    Name string
    Type string
    AccessControl string
    Actions []string
    Applications []string
    BrowserEunTemplateId int
    CascadingEnabled bool
    CbiProfiles []GetCloudAppControlRuleCbiProfile
    Departments []GetCloudAppControlRuleDepartment
    Description string
    DeviceGroups []GetCloudAppControlRuleDeviceGroup
    DeviceTrustLevels []string
    Devices []GetCloudAppControlRuleDevice
    EnforceTimeValidity bool
    EunEnabled bool
    EunTemplateId int
    Groups []GetCloudAppControlRuleGroup
    Labels []GetCloudAppControlRuleLabel
    LastModifiedTime int
    LocationGroups []GetCloudAppControlRuleLocationGroup
    Locations []GetCloudAppControlRuleLocation
    NumberOfApplications int
    Order int
    Predefined bool
    Rank int
    SizeQuota int
    State string
    TimeQuota int
    UserAgentTypes []string
    Users []GetCloudAppControlRuleUser
    ValidityEndTime int
    ValidityStartTime int
    ValidityTimeZoneId string
    Id int
    Name string
    Type string
    accessControl String
    actions List<String>
    applications List<String>
    browserEunTemplateId Integer
    cascadingEnabled Boolean
    cbiProfiles List<GetCloudAppControlRuleCbiProfile>
    departments List<GetCloudAppControlRuleDepartment>
    description String
    deviceGroups List<GetCloudAppControlRuleDeviceGroup>
    deviceTrustLevels List<String>
    devices List<GetCloudAppControlRuleDevice>
    enforceTimeValidity Boolean
    eunEnabled Boolean
    eunTemplateId Integer
    groups List<GetCloudAppControlRuleGroup>
    labels List<GetCloudAppControlRuleLabel>
    lastModifiedTime Integer
    locationGroups List<GetCloudAppControlRuleLocationGroup>
    locations List<GetCloudAppControlRuleLocation>
    numberOfApplications Integer
    order Integer
    predefined Boolean
    rank Integer
    sizeQuota Integer
    state String
    timeQuota Integer
    userAgentTypes List<String>
    users List<GetCloudAppControlRuleUser>
    validityEndTime Integer
    validityStartTime Integer
    validityTimeZoneId String
    id Integer
    name String
    type String
    accessControl string
    actions string[]
    applications string[]
    browserEunTemplateId number
    cascadingEnabled boolean
    cbiProfiles GetCloudAppControlRuleCbiProfile[]
    departments GetCloudAppControlRuleDepartment[]
    description string
    deviceGroups GetCloudAppControlRuleDeviceGroup[]
    deviceTrustLevels string[]
    devices GetCloudAppControlRuleDevice[]
    enforceTimeValidity boolean
    eunEnabled boolean
    eunTemplateId number
    groups GetCloudAppControlRuleGroup[]
    labels GetCloudAppControlRuleLabel[]
    lastModifiedTime number
    locationGroups GetCloudAppControlRuleLocationGroup[]
    locations GetCloudAppControlRuleLocation[]
    numberOfApplications number
    order number
    predefined boolean
    rank number
    sizeQuota number
    state string
    timeQuota number
    userAgentTypes string[]
    users GetCloudAppControlRuleUser[]
    validityEndTime number
    validityStartTime number
    validityTimeZoneId string
    id number
    name string
    type string
    access_control str
    actions Sequence[str]
    applications Sequence[str]
    browser_eun_template_id int
    cascading_enabled bool
    cbi_profiles Sequence[GetCloudAppControlRuleCbiProfile]
    departments Sequence[GetCloudAppControlRuleDepartment]
    description str
    device_groups Sequence[GetCloudAppControlRuleDeviceGroup]
    device_trust_levels Sequence[str]
    devices Sequence[GetCloudAppControlRuleDevice]
    enforce_time_validity bool
    eun_enabled bool
    eun_template_id int
    groups Sequence[GetCloudAppControlRuleGroup]
    labels Sequence[GetCloudAppControlRuleLabel]
    last_modified_time int
    location_groups Sequence[GetCloudAppControlRuleLocationGroup]
    locations Sequence[GetCloudAppControlRuleLocation]
    number_of_applications int
    order int
    predefined bool
    rank int
    size_quota int
    state str
    time_quota int
    user_agent_types Sequence[str]
    users Sequence[GetCloudAppControlRuleUser]
    validity_end_time int
    validity_start_time int
    validity_time_zone_id str
    id int
    name str
    type str

    Supporting Types

    GetCloudAppControlRuleCbiProfile

    DefaultProfile bool
    The browser isolation profile URL
    Id string
    The universally unique identifier (UUID) for the browser isolation profile
    Name string
    Name of the browser isolation profile
    SandboxMode bool
    The browser isolation profile URL
    Url string
    The browser isolation profile URL
    DefaultProfile bool
    The browser isolation profile URL
    Id string
    The universally unique identifier (UUID) for the browser isolation profile
    Name string
    Name of the browser isolation profile
    SandboxMode bool
    The browser isolation profile URL
    Url string
    The browser isolation profile URL
    defaultProfile Boolean
    The browser isolation profile URL
    id String
    The universally unique identifier (UUID) for the browser isolation profile
    name String
    Name of the browser isolation profile
    sandboxMode Boolean
    The browser isolation profile URL
    url String
    The browser isolation profile URL
    defaultProfile boolean
    The browser isolation profile URL
    id string
    The universally unique identifier (UUID) for the browser isolation profile
    name string
    Name of the browser isolation profile
    sandboxMode boolean
    The browser isolation profile URL
    url string
    The browser isolation profile URL
    default_profile bool
    The browser isolation profile URL
    id str
    The universally unique identifier (UUID) for the browser isolation profile
    name str
    Name of the browser isolation profile
    sandbox_mode bool
    The browser isolation profile URL
    url str
    The browser isolation profile URL
    defaultProfile Boolean
    The browser isolation profile URL
    id String
    The universally unique identifier (UUID) for the browser isolation profile
    name String
    Name of the browser isolation profile
    sandboxMode Boolean
    The browser isolation profile URL
    url String
    The browser isolation profile URL

    GetCloudAppControlRuleDepartment

    Extensions Dictionary<string, string>
    Id int
    Name string
    Extensions map[string]string
    Id int
    Name string
    extensions Map<String,String>
    id Integer
    name String
    extensions {[key: string]: string}
    id number
    name string
    extensions Mapping[str, str]
    id int
    name str
    extensions Map<String>
    id Number
    name String

    GetCloudAppControlRuleDevice

    Extensions Dictionary<string, string>
    Id int
    Name string
    Extensions map[string]string
    Id int
    Name string
    extensions Map<String,String>
    id Integer
    name String
    extensions {[key: string]: string}
    id number
    name string
    extensions Mapping[str, str]
    id int
    name str
    extensions Map<String>
    id Number
    name String

    GetCloudAppControlRuleDeviceGroup

    Extensions Dictionary<string, string>
    Id int
    Name string
    Extensions map[string]string
    Id int
    Name string
    extensions Map<String,String>
    id Integer
    name String
    extensions {[key: string]: string}
    id number
    name string
    extensions Mapping[str, str]
    id int
    name str
    extensions Map<String>
    id Number
    name String

    GetCloudAppControlRuleGroup

    Extensions Dictionary<string, string>
    Id int
    Name string
    Extensions map[string]string
    Id int
    Name string
    extensions Map<String,String>
    id Integer
    name String
    extensions {[key: string]: string}
    id number
    name string
    extensions Mapping[str, str]
    id int
    name str
    extensions Map<String>
    id Number
    name String

    GetCloudAppControlRuleLabel

    Extensions Dictionary<string, string>
    Id int
    Name string
    Extensions map[string]string
    Id int
    Name string
    extensions Map<String,String>
    id Integer
    name String
    extensions {[key: string]: string}
    id number
    name string
    extensions Mapping[str, str]
    id int
    name str
    extensions Map<String>
    id Number
    name String

    GetCloudAppControlRuleLocation

    Extensions Dictionary<string, string>
    Id int
    Name string
    Extensions map[string]string
    Id int
    Name string
    extensions Map<String,String>
    id Integer
    name String
    extensions {[key: string]: string}
    id number
    name string
    extensions Mapping[str, str]
    id int
    name str
    extensions Map<String>
    id Number
    name String

    GetCloudAppControlRuleLocationGroup

    Extensions Dictionary<string, string>
    Id int
    Name string
    Extensions map[string]string
    Id int
    Name string
    extensions Map<String,String>
    id Integer
    name String
    extensions {[key: string]: string}
    id number
    name string
    extensions Mapping[str, str]
    id int
    name str
    extensions Map<String>
    id Number
    name String

    GetCloudAppControlRuleUser

    Extensions Dictionary<string, string>
    Id int
    Name string
    Extensions map[string]string
    Id int
    Name string
    extensions Map<String,String>
    id Integer
    name String
    extensions {[key: string]: string}
    id number
    name string
    extensions Mapping[str, str]
    id int
    name str
    extensions Map<String>
    id Number
    name String

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
    zscaler/pulumi-zia