Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. getSSLInspectionRules
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia

zia.getSSLInspectionRules

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia

    Use the zia_ssl_inspection_rules data source to get information about a ssl inspection rule in the Zscaler Internet Access.

    Example Usage

    # ZIA SSL Inspection by name
data "zia_ssl_inspection_rules" "this" {
    name = "SSL_Inspection_Rule01"
}

    # ZIA SSL Inspection by ID
data "zia_ssl_inspection_rules" "this" {
    id = "12365478"
}

    Using getSSLInspectionRules

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getSSLInspectionRules(args: GetSSLInspectionRulesArgs, opts?: InvokeOptions): Promise<GetSSLInspectionRulesResult>
function getSSLInspectionRulesOutput(args: GetSSLInspectionRulesOutputArgs, opts?: InvokeOptions): Output<GetSSLInspectionRulesResult>
    def get_ssl_inspection_rules(id: Optional[int] = None,
                             name: Optional[str] = None,
                             url_categories: Optional[Sequence[str]] = None,
                             opts: Optional[InvokeOptions] = None) -> GetSSLInspectionRulesResult
def get_ssl_inspection_rules_output(id: Optional[pulumi.Input[int]] = None,
                             name: Optional[pulumi.Input[str]] = None,
                             url_categories: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                             opts: Optional[InvokeOptions] = None) -> Output[GetSSLInspectionRulesResult]
    func LookupSSLInspectionRules(ctx *Context, args *LookupSSLInspectionRulesArgs, opts ...InvokeOption) (*LookupSSLInspectionRulesResult, error)
func LookupSSLInspectionRulesOutput(ctx *Context, args *LookupSSLInspectionRulesOutputArgs, opts ...InvokeOption) LookupSSLInspectionRulesResultOutput

    > Note: This function is named LookupSSLInspectionRules in the Go SDK.

    public static class GetSSLInspectionRules 
{
    public static Task<GetSSLInspectionRulesResult> InvokeAsync(GetSSLInspectionRulesArgs args, InvokeOptions? opts = null)
    public static Output<GetSSLInspectionRulesResult> Invoke(GetSSLInspectionRulesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetSSLInspectionRulesResult> getSSLInspectionRules(GetSSLInspectionRulesArgs args, InvokeOptions options)
public static Output<GetSSLInspectionRulesResult> getSSLInspectionRules(GetSSLInspectionRulesArgs args, InvokeOptions options)

    fn::invoke:
  function: zia:index/getSSLInspectionRules:getSSLInspectionRules
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    UrlCategories List<string>
    The list of URL categories to which the DLP policy rule must be applied.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    UrlCategories []string
    The list of URL categories to which the DLP policy rule must be applied.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    urlCategories List<String>
    The list of URL categories to which the DLP policy rule must be applied.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    urlCategories string[]
    The list of URL categories to which the DLP policy rule must be applied.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    url_categories Sequence[str]
    The list of URL categories to which the DLP policy rule must be applied.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    urlCategories List<String>
    The list of URL categories to which the DLP policy rule must be applied.

    getSSLInspectionRules Result

    The following output properties are available:

    Actions List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesAction>
    Action taken when the traffic matches policy
    CloudApplications List<string>
    The list of URL categories to which the DLP policy rule must be applied.
    Departments List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesDepartment>
    ID pairs of departments for which the rule is applied.
    Description string
    The description of the workload group
    DestIpGroups List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesDestIpGroup>
    ID pairs of destination IP address groups for which the rule is applied.
    DeviceGroups List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesDeviceGroup>
    ID pairs of device groups for which the rule is applied.
    DeviceTrustLevels List<string>
    Lists device trust levels for which the rule must be applied (for devices managed using Zscaler Client Connector).
    Devices List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesDevice>
    ID pairs of devices for which the rule is applied
    Groups List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesGroup>
    ID pairs of groups for which the rule is applied. If not set, rule is applied for all groups.
    Id int
    A unique identifier assigned to the workload group
    Labels List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesLabel>
    ID pairs of labels associated with the rule.
    LastModifiedBies List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesLastModifiedBy>
    A nested block with details about who last modified the workload group.
    LastModifiedTime int
    Timestamp when the workload group was last modified.
    LocationGroups List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesLocationGroup>
    ID pairs of location groups to which the rule is applied. When empty, it implies applying to all location groups.
    Locations List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesLocation>
    ID pairs of locations to which the rule is applied. When empty, it implies applying to all locations.
    Name string
    The name of the workload group
    Order int
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    Platforms List<string>
    Zscaler Client Connector device platforms for which this rule is applied. Supported Values: SCAN_IOS, SCAN_ANDROID, SCAN_MACOS, SCAN_WINDOWS, NO_CLIENT_CONNECTOR, SCAN_LINUX
    ProxyGateways List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesProxyGateway>
    When using ZPA Gateway forwarding, name-ID pairs of ZPA Application Segments for which the rule is applicable.
    Rank int
    The admin rank specified for the rule based on your assigned admin rank. Admin rank determines the rule order that can be specified for the rule. Admin rank can be configured if it is enabled in the Advanced Settings.
    RoadWarriorForKerberos bool
    Indicates whether this rule is applied to remote users that use PAC with Kerberos authentication.
    SourceIpGroups List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesSourceIpGroup>
    ID pairs of source IP address groups for which the rule is applied.
    State string
    The state of the rule indicating whether it is enabled or disabled. Supported values: ENABLED or DISABLED
    TimeWindows List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesTimeWindow>
    The time intervals during which the rule applies
    UserAgentTypes List<string>
    A list of user agent types the rule applies to.
    Users List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesUser>
    The list of preconfigured workload groups to which the policy must be applied.
    WorkloadGroups List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesWorkloadGroup>
    The list of preconfigured workload groups to which the policy must be applied.
    ZpaAppSegments List<zscaler.PulumiPackage.Zia.Outputs.GetSSLInspectionRulesZpaAppSegment>
    The list of ZPA Application Segments for which this rule is applicable (applicable only for ZPA Gateway forwarding).
    UrlCategories List<string>
    The list of URL categories to which the DLP policy rule must be applied.
    Actions []GetSSLInspectionRulesAction
    Action taken when the traffic matches policy
    CloudApplications []string
    The list of URL categories to which the DLP policy rule must be applied.
    Departments []GetSSLInspectionRulesDepartment
    ID pairs of departments for which the rule is applied.
    Description string
    The description of the workload group
    DestIpGroups []GetSSLInspectionRulesDestIpGroup
    ID pairs of destination IP address groups for which the rule is applied.
    DeviceGroups []GetSSLInspectionRulesDeviceGroup
    ID pairs of device groups for which the rule is applied.
    DeviceTrustLevels []string
    Lists device trust levels for which the rule must be applied (for devices managed using Zscaler Client Connector).
    Devices []GetSSLInspectionRulesDevice
    ID pairs of devices for which the rule is applied
    Groups []GetSSLInspectionRulesGroup
    ID pairs of groups for which the rule is applied. If not set, rule is applied for all groups.
    Id int
    A unique identifier assigned to the workload group
    Labels []GetSSLInspectionRulesLabel
    ID pairs of labels associated with the rule.
    LastModifiedBies []GetSSLInspectionRulesLastModifiedBy
    A nested block with details about who last modified the workload group.
    LastModifiedTime int
    Timestamp when the workload group was last modified.
    LocationGroups []GetSSLInspectionRulesLocationGroup
    ID pairs of location groups to which the rule is applied. When empty, it implies applying to all location groups.
    Locations []GetSSLInspectionRulesLocation
    ID pairs of locations to which the rule is applied. When empty, it implies applying to all locations.
    Name string
    The name of the workload group
    Order int
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    Platforms []string
    Zscaler Client Connector device platforms for which this rule is applied. Supported Values: SCAN_IOS, SCAN_ANDROID, SCAN_MACOS, SCAN_WINDOWS, NO_CLIENT_CONNECTOR, SCAN_LINUX
    ProxyGateways []GetSSLInspectionRulesProxyGateway
    When using ZPA Gateway forwarding, name-ID pairs of ZPA Application Segments for which the rule is applicable.
    Rank int
    The admin rank specified for the rule based on your assigned admin rank. Admin rank determines the rule order that can be specified for the rule. Admin rank can be configured if it is enabled in the Advanced Settings.
    RoadWarriorForKerberos bool
    Indicates whether this rule is applied to remote users that use PAC with Kerberos authentication.
    SourceIpGroups []GetSSLInspectionRulesSourceIpGroup
    ID pairs of source IP address groups for which the rule is applied.
    State string
    The state of the rule indicating whether it is enabled or disabled. Supported values: ENABLED or DISABLED
    TimeWindows []GetSSLInspectionRulesTimeWindow
    The time intervals during which the rule applies
    UserAgentTypes []string
    A list of user agent types the rule applies to.
    Users []GetSSLInspectionRulesUser
    The list of preconfigured workload groups to which the policy must be applied.
    WorkloadGroups []GetSSLInspectionRulesWorkloadGroup
    The list of preconfigured workload groups to which the policy must be applied.
    ZpaAppSegments []GetSSLInspectionRulesZpaAppSegment
    The list of ZPA Application Segments for which this rule is applicable (applicable only for ZPA Gateway forwarding).
    UrlCategories []string
    The list of URL categories to which the DLP policy rule must be applied.
    actions List<GetSSLInspectionRulesAction>
    Action taken when the traffic matches policy
    cloudApplications List<String>
    The list of URL categories to which the DLP policy rule must be applied.
    departments List<GetSSLInspectionRulesDepartment>
    ID pairs of departments for which the rule is applied.
    description String
    The description of the workload group
    destIpGroups List<GetSSLInspectionRulesDestIpGroup>
    ID pairs of destination IP address groups for which the rule is applied.
    deviceGroups List<GetSSLInspectionRulesDeviceGroup>
    ID pairs of device groups for which the rule is applied.
    deviceTrustLevels List<String>
    Lists device trust levels for which the rule must be applied (for devices managed using Zscaler Client Connector).
    devices List<GetSSLInspectionRulesDevice>
    ID pairs of devices for which the rule is applied
    groups List<GetSSLInspectionRulesGroup>
    ID pairs of groups for which the rule is applied. If not set, rule is applied for all groups.
    id Integer
    A unique identifier assigned to the workload group
    labels List<GetSSLInspectionRulesLabel>
    ID pairs of labels associated with the rule.
    lastModifiedBies List<GetSSLInspectionRulesLastModifiedBy>
    A nested block with details about who last modified the workload group.
    lastModifiedTime Integer
    Timestamp when the workload group was last modified.
    locationGroups List<GetSSLInspectionRulesLocationGroup>
    ID pairs of location groups to which the rule is applied. When empty, it implies applying to all location groups.
    locations List<GetSSLInspectionRulesLocation>
    ID pairs of locations to which the rule is applied. When empty, it implies applying to all locations.
    name String
    The name of the workload group
    order Integer
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    platforms List<String>
    Zscaler Client Connector device platforms for which this rule is applied. Supported Values: SCAN_IOS, SCAN_ANDROID, SCAN_MACOS, SCAN_WINDOWS, NO_CLIENT_CONNECTOR, SCAN_LINUX
    proxyGateways List<GetSSLInspectionRulesProxyGateway>
    When using ZPA Gateway forwarding, name-ID pairs of ZPA Application Segments for which the rule is applicable.
    rank Integer
    The admin rank specified for the rule based on your assigned admin rank. Admin rank determines the rule order that can be specified for the rule. Admin rank can be configured if it is enabled in the Advanced Settings.
    roadWarriorForKerberos Boolean
    Indicates whether this rule is applied to remote users that use PAC with Kerberos authentication.
    sourceIpGroups List<GetSSLInspectionRulesSourceIpGroup>
    ID pairs of source IP address groups for which the rule is applied.
    state String
    The state of the rule indicating whether it is enabled or disabled. Supported values: ENABLED or DISABLED
    timeWindows List<GetSSLInspectionRulesTimeWindow>
    The time intervals during which the rule applies
    userAgentTypes List<String>
    A list of user agent types the rule applies to.
    users List<GetSSLInspectionRulesUser>
    The list of preconfigured workload groups to which the policy must be applied.
    workloadGroups List<GetSSLInspectionRulesWorkloadGroup>
    The list of preconfigured workload groups to which the policy must be applied.
    zpaAppSegments List<GetSSLInspectionRulesZpaAppSegment>
    The list of ZPA Application Segments for which this rule is applicable (applicable only for ZPA Gateway forwarding).
    urlCategories List<String>
    The list of URL categories to which the DLP policy rule must be applied.
    actions GetSSLInspectionRulesAction[]
    Action taken when the traffic matches policy
    cloudApplications string[]
    The list of URL categories to which the DLP policy rule must be applied.
    departments GetSSLInspectionRulesDepartment[]
    ID pairs of departments for which the rule is applied.
    description string
    The description of the workload group
    destIpGroups GetSSLInspectionRulesDestIpGroup[]
    ID pairs of destination IP address groups for which the rule is applied.
    deviceGroups GetSSLInspectionRulesDeviceGroup[]
    ID pairs of device groups for which the rule is applied.
    deviceTrustLevels string[]
    Lists device trust levels for which the rule must be applied (for devices managed using Zscaler Client Connector).
    devices GetSSLInspectionRulesDevice[]
    ID pairs of devices for which the rule is applied
    groups GetSSLInspectionRulesGroup[]
    ID pairs of groups for which the rule is applied. If not set, rule is applied for all groups.
    id number
    A unique identifier assigned to the workload group
    labels GetSSLInspectionRulesLabel[]
    ID pairs of labels associated with the rule.
    lastModifiedBies GetSSLInspectionRulesLastModifiedBy[]
    A nested block with details about who last modified the workload group.
    lastModifiedTime number
    Timestamp when the workload group was last modified.
    locationGroups GetSSLInspectionRulesLocationGroup[]
    ID pairs of location groups to which the rule is applied. When empty, it implies applying to all location groups.
    locations GetSSLInspectionRulesLocation[]
    ID pairs of locations to which the rule is applied. When empty, it implies applying to all locations.
    name string
    The name of the workload group
    order number
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    platforms string[]
    Zscaler Client Connector device platforms for which this rule is applied. Supported Values: SCAN_IOS, SCAN_ANDROID, SCAN_MACOS, SCAN_WINDOWS, NO_CLIENT_CONNECTOR, SCAN_LINUX
    proxyGateways GetSSLInspectionRulesProxyGateway[]
    When using ZPA Gateway forwarding, name-ID pairs of ZPA Application Segments for which the rule is applicable.
    rank number
    The admin rank specified for the rule based on your assigned admin rank. Admin rank determines the rule order that can be specified for the rule. Admin rank can be configured if it is enabled in the Advanced Settings.
    roadWarriorForKerberos boolean
    Indicates whether this rule is applied to remote users that use PAC with Kerberos authentication.
    sourceIpGroups GetSSLInspectionRulesSourceIpGroup[]
    ID pairs of source IP address groups for which the rule is applied.
    state string
    The state of the rule indicating whether it is enabled or disabled. Supported values: ENABLED or DISABLED
    timeWindows GetSSLInspectionRulesTimeWindow[]
    The time intervals during which the rule applies
    userAgentTypes string[]
    A list of user agent types the rule applies to.
    users GetSSLInspectionRulesUser[]
    The list of preconfigured workload groups to which the policy must be applied.
    workloadGroups GetSSLInspectionRulesWorkloadGroup[]
    The list of preconfigured workload groups to which the policy must be applied.
    zpaAppSegments GetSSLInspectionRulesZpaAppSegment[]
    The list of ZPA Application Segments for which this rule is applicable (applicable only for ZPA Gateway forwarding).
    urlCategories string[]
    The list of URL categories to which the DLP policy rule must be applied.
    actions Sequence[GetSSLInspectionRulesAction]
    Action taken when the traffic matches policy
    cloud_applications Sequence[str]
    The list of URL categories to which the DLP policy rule must be applied.
    departments Sequence[GetSSLInspectionRulesDepartment]
    ID pairs of departments for which the rule is applied.
    description str
    The description of the workload group
    dest_ip_groups Sequence[GetSSLInspectionRulesDestIpGroup]
    ID pairs of destination IP address groups for which the rule is applied.
    device_groups Sequence[GetSSLInspectionRulesDeviceGroup]
    ID pairs of device groups for which the rule is applied.
    device_trust_levels Sequence[str]
    Lists device trust levels for which the rule must be applied (for devices managed using Zscaler Client Connector).
    devices Sequence[GetSSLInspectionRulesDevice]
    ID pairs of devices for which the rule is applied
    groups Sequence[GetSSLInspectionRulesGroup]
    ID pairs of groups for which the rule is applied. If not set, rule is applied for all groups.
    id int
    A unique identifier assigned to the workload group
    labels Sequence[GetSSLInspectionRulesLabel]
    ID pairs of labels associated with the rule.
    last_modified_bies Sequence[GetSSLInspectionRulesLastModifiedBy]
    A nested block with details about who last modified the workload group.
    last_modified_time int
    Timestamp when the workload group was last modified.
    location_groups Sequence[GetSSLInspectionRulesLocationGroup]
    ID pairs of location groups to which the rule is applied. When empty, it implies applying to all location groups.
    locations Sequence[GetSSLInspectionRulesLocation]
    ID pairs of locations to which the rule is applied. When empty, it implies applying to all locations.
    name str
    The name of the workload group
    order int
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    platforms Sequence[str]
    Zscaler Client Connector device platforms for which this rule is applied. Supported Values: SCAN_IOS, SCAN_ANDROID, SCAN_MACOS, SCAN_WINDOWS, NO_CLIENT_CONNECTOR, SCAN_LINUX
    proxy_gateways Sequence[GetSSLInspectionRulesProxyGateway]
    When using ZPA Gateway forwarding, name-ID pairs of ZPA Application Segments for which the rule is applicable.
    rank int
    The admin rank specified for the rule based on your assigned admin rank. Admin rank determines the rule order that can be specified for the rule. Admin rank can be configured if it is enabled in the Advanced Settings.
    road_warrior_for_kerberos bool
    Indicates whether this rule is applied to remote users that use PAC with Kerberos authentication.
    source_ip_groups Sequence[GetSSLInspectionRulesSourceIpGroup]
    ID pairs of source IP address groups for which the rule is applied.
    state str
    The state of the rule indicating whether it is enabled or disabled. Supported values: ENABLED or DISABLED
    time_windows Sequence[GetSSLInspectionRulesTimeWindow]
    The time intervals during which the rule applies
    user_agent_types Sequence[str]
    A list of user agent types the rule applies to.
    users Sequence[GetSSLInspectionRulesUser]
    The list of preconfigured workload groups to which the policy must be applied.
    workload_groups Sequence[GetSSLInspectionRulesWorkloadGroup]
    The list of preconfigured workload groups to which the policy must be applied.
    zpa_app_segments Sequence[GetSSLInspectionRulesZpaAppSegment]
    The list of ZPA Application Segments for which this rule is applicable (applicable only for ZPA Gateway forwarding).
    url_categories Sequence[str]
    The list of URL categories to which the DLP policy rule must be applied.
    actions List<Property Map>
    Action taken when the traffic matches policy
    cloudApplications List<String>
    The list of URL categories to which the DLP policy rule must be applied.
    departments List<Property Map>
    ID pairs of departments for which the rule is applied.
    description String
    The description of the workload group
    destIpGroups List<Property Map>
    ID pairs of destination IP address groups for which the rule is applied.
    deviceGroups List<Property Map>
    ID pairs of device groups for which the rule is applied.
    deviceTrustLevels List<String>
    Lists device trust levels for which the rule must be applied (for devices managed using Zscaler Client Connector).
    devices List<Property Map>
    ID pairs of devices for which the rule is applied
    groups List<Property Map>
    ID pairs of groups for which the rule is applied. If not set, rule is applied for all groups.
    id Number
    A unique identifier assigned to the workload group
    labels List<Property Map>
    ID pairs of labels associated with the rule.
    lastModifiedBies List<Property Map>
    A nested block with details about who last modified the workload group.
    lastModifiedTime Number
    Timestamp when the workload group was last modified.
    locationGroups List<Property Map>
    ID pairs of location groups to which the rule is applied. When empty, it implies applying to all location groups.
    locations List<Property Map>
    ID pairs of locations to which the rule is applied. When empty, it implies applying to all locations.
    name String
    The name of the workload group
    order Number
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    platforms List<String>
    Zscaler Client Connector device platforms for which this rule is applied. Supported Values: SCAN_IOS, SCAN_ANDROID, SCAN_MACOS, SCAN_WINDOWS, NO_CLIENT_CONNECTOR, SCAN_LINUX
    proxyGateways List<Property Map>
    When using ZPA Gateway forwarding, name-ID pairs of ZPA Application Segments for which the rule is applicable.
    rank Number
    The admin rank specified for the rule based on your assigned admin rank. Admin rank determines the rule order that can be specified for the rule. Admin rank can be configured if it is enabled in the Advanced Settings.
    roadWarriorForKerberos Boolean
    Indicates whether this rule is applied to remote users that use PAC with Kerberos authentication.
    sourceIpGroups List<Property Map>
    ID pairs of source IP address groups for which the rule is applied.
    state String
    The state of the rule indicating whether it is enabled or disabled. Supported values: ENABLED or DISABLED
    timeWindows List<Property Map>
    The time intervals during which the rule applies
    userAgentTypes List<String>
    A list of user agent types the rule applies to.
    users List<Property Map>
    The list of preconfigured workload groups to which the policy must be applied.
    workloadGroups List<Property Map>
    The list of preconfigured workload groups to which the policy must be applied.
    zpaAppSegments List<Property Map>
    The list of ZPA Application Segments for which this rule is applicable (applicable only for ZPA Gateway forwarding).
    urlCategories List<String>
    The list of URL categories to which the DLP policy rule must be applied.

    Supporting Types

    GetSSLInspectionRulesAction

    DoNotDecryptSubActions List<zscaler.PulumiPackage.Zia.Inputs.GetSSLInspectionRulesActionDoNotDecryptSubAction>
    Action taken when bypassing SSL intercept
    OverrideDefaultCertificate bool
    Whether to override the default SSL interception certificate.
    ShowEun bool
    Whether to show End User Notification (EUN).
    ShowEunatp bool
    Whether to display the EUN ATP page.
    SslInterceptionCerts List<zscaler.PulumiPackage.Zia.Inputs.GetSSLInspectionRulesActionSslInterceptionCert>
    Action taken when enabling SSL intercept
    Type string
    The action type for this rule. Possible values: BLOCK, DECRYPT, or DO_NOT_DECRYPT.
    DecryptSubActions List<zscaler.PulumiPackage.Zia.Inputs.GetSSLInspectionRulesActionDecryptSubAction>
    DoNotDecryptSubActions []GetSSLInspectionRulesActionDoNotDecryptSubAction
    Action taken when bypassing SSL intercept
    OverrideDefaultCertificate bool
    Whether to override the default SSL interception certificate.
    ShowEun bool
    Whether to show End User Notification (EUN).
    ShowEunatp bool
    Whether to display the EUN ATP page.
    SslInterceptionCerts []GetSSLInspectionRulesActionSslInterceptionCert
    Action taken when enabling SSL intercept
    Type string
    The action type for this rule. Possible values: BLOCK, DECRYPT, or DO_NOT_DECRYPT.
    DecryptSubActions []GetSSLInspectionRulesActionDecryptSubAction
    doNotDecryptSubActions List<GetSSLInspectionRulesActionDoNotDecryptSubAction>
    Action taken when bypassing SSL intercept
    overrideDefaultCertificate Boolean
    Whether to override the default SSL interception certificate.
    showEun Boolean
    Whether to show End User Notification (EUN).
    showEunatp Boolean
    Whether to display the EUN ATP page.
    sslInterceptionCerts List<GetSSLInspectionRulesActionSslInterceptionCert>
    Action taken when enabling SSL intercept
    type String
    The action type for this rule. Possible values: BLOCK, DECRYPT, or DO_NOT_DECRYPT.
    decryptSubActions List<GetSSLInspectionRulesActionDecryptSubAction>
    doNotDecryptSubActions GetSSLInspectionRulesActionDoNotDecryptSubAction[]
    Action taken when bypassing SSL intercept
    overrideDefaultCertificate boolean
    Whether to override the default SSL interception certificate.
    showEun boolean
    Whether to show End User Notification (EUN).
    showEunatp boolean
    Whether to display the EUN ATP page.
    sslInterceptionCerts GetSSLInspectionRulesActionSslInterceptionCert[]
    Action taken when enabling SSL intercept
    type string
    The action type for this rule. Possible values: BLOCK, DECRYPT, or DO_NOT_DECRYPT.
    decryptSubActions GetSSLInspectionRulesActionDecryptSubAction[]
    do_not_decrypt_sub_actions Sequence[GetSSLInspectionRulesActionDoNotDecryptSubAction]
    Action taken when bypassing SSL intercept
    override_default_certificate bool
    Whether to override the default SSL interception certificate.
    show_eun bool
    Whether to show End User Notification (EUN).
    show_eunatp bool
    Whether to display the EUN ATP page.
    ssl_interception_certs Sequence[GetSSLInspectionRulesActionSslInterceptionCert]
    Action taken when enabling SSL intercept
    type str
    The action type for this rule. Possible values: BLOCK, DECRYPT, or DO_NOT_DECRYPT.
    decrypt_sub_actions Sequence[GetSSLInspectionRulesActionDecryptSubAction]
    doNotDecryptSubActions List<Property Map>
    Action taken when bypassing SSL intercept
    overrideDefaultCertificate Boolean
    Whether to override the default SSL interception certificate.
    showEun Boolean
    Whether to show End User Notification (EUN).
    showEunatp Boolean
    Whether to display the EUN ATP page.
    sslInterceptionCerts List<Property Map>
    Action taken when enabling SSL intercept
    type String
    The action type for this rule. Possible values: BLOCK, DECRYPT, or DO_NOT_DECRYPT.
    decryptSubActions List<Property Map>

    GetSSLInspectionRulesActionDecryptSubAction

    BlockSslTrafficWithNoSniEnabled bool
    Whether to block SSL traffic when SNI is not present.
    BlockUndecrypt bool
    Http2Enabled bool
    MinClientTlsVersion string
    MinServerTlsVersion string
    OcspCheck bool
    Whether to enable OCSP check.
    ServerCertificates string
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    BlockSslTrafficWithNoSniEnabled bool
    Whether to block SSL traffic when SNI is not present.
    BlockUndecrypt bool
    Http2Enabled bool
    MinClientTlsVersion string
    MinServerTlsVersion string
    OcspCheck bool
    Whether to enable OCSP check.
    ServerCertificates string
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    blockSslTrafficWithNoSniEnabled Boolean
    Whether to block SSL traffic when SNI is not present.
    blockUndecrypt Boolean
    http2Enabled Boolean
    minClientTlsVersion String
    minServerTlsVersion String
    ocspCheck Boolean
    Whether to enable OCSP check.
    serverCertificates String
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    blockSslTrafficWithNoSniEnabled boolean
    Whether to block SSL traffic when SNI is not present.
    blockUndecrypt boolean
    http2Enabled boolean
    minClientTlsVersion string
    minServerTlsVersion string
    ocspCheck boolean
    Whether to enable OCSP check.
    serverCertificates string
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    block_ssl_traffic_with_no_sni_enabled bool
    Whether to block SSL traffic when SNI is not present.
    block_undecrypt bool
    http2_enabled bool
    min_client_tls_version str
    min_server_tls_version str
    ocsp_check bool
    Whether to enable OCSP check.
    server_certificates str
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    blockSslTrafficWithNoSniEnabled Boolean
    Whether to block SSL traffic when SNI is not present.
    blockUndecrypt Boolean
    http2Enabled Boolean
    minClientTlsVersion String
    minServerTlsVersion String
    ocspCheck Boolean
    Whether to enable OCSP check.
    serverCertificates String
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.

    GetSSLInspectionRulesActionDoNotDecryptSubAction

    BlockSslTrafficWithNoSniEnabled bool
    Whether to block SSL traffic when SNI is not present.
    BypassOtherPolicies bool
    Whether to bypass other policies when action is set to DO_NOT_DECRYPT.
    MinTlsVersion string
    The minimum TLS version allowed when action is DO_NOT_DECRYPT.
    OcspCheck bool
    Whether to enable OCSP check.
    ServerCertificates string
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    BlockSslTrafficWithNoSniEnabled bool
    Whether to block SSL traffic when SNI is not present.
    BypassOtherPolicies bool
    Whether to bypass other policies when action is set to DO_NOT_DECRYPT.
    MinTlsVersion string
    The minimum TLS version allowed when action is DO_NOT_DECRYPT.
    OcspCheck bool
    Whether to enable OCSP check.
    ServerCertificates string
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    blockSslTrafficWithNoSniEnabled Boolean
    Whether to block SSL traffic when SNI is not present.
    bypassOtherPolicies Boolean
    Whether to bypass other policies when action is set to DO_NOT_DECRYPT.
    minTlsVersion String
    The minimum TLS version allowed when action is DO_NOT_DECRYPT.
    ocspCheck Boolean
    Whether to enable OCSP check.
    serverCertificates String
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    blockSslTrafficWithNoSniEnabled boolean
    Whether to block SSL traffic when SNI is not present.
    bypassOtherPolicies boolean
    Whether to bypass other policies when action is set to DO_NOT_DECRYPT.
    minTlsVersion string
    The minimum TLS version allowed when action is DO_NOT_DECRYPT.
    ocspCheck boolean
    Whether to enable OCSP check.
    serverCertificates string
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    block_ssl_traffic_with_no_sni_enabled bool
    Whether to block SSL traffic when SNI is not present.
    bypass_other_policies bool
    Whether to bypass other policies when action is set to DO_NOT_DECRYPT.
    min_tls_version str
    The minimum TLS version allowed when action is DO_NOT_DECRYPT.
    ocsp_check bool
    Whether to enable OCSP check.
    server_certificates str
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.
    blockSslTrafficWithNoSniEnabled Boolean
    Whether to block SSL traffic when SNI is not present.
    bypassOtherPolicies Boolean
    Whether to bypass other policies when action is set to DO_NOT_DECRYPT.
    minTlsVersion String
    The minimum TLS version allowed when action is DO_NOT_DECRYPT.
    ocspCheck Boolean
    Whether to enable OCSP check.
    serverCertificates String
    Action to take on server certificates. Valid values might include ALLOW, BLOCK, or PASS_THRU.

    GetSSLInspectionRulesActionSslInterceptionCert

    Id int
    Unique identifier for the SSL Inspection
    Id int
    Unique identifier for the SSL Inspection
    id Integer
    Unique identifier for the SSL Inspection
    id number
    Unique identifier for the SSL Inspection
    id int
    Unique identifier for the SSL Inspection
    id Number
    Unique identifier for the SSL Inspection

    GetSSLInspectionRulesDepartment

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesDestIpGroup

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesDevice

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesDeviceGroup

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesGroup

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesLabel

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesLastModifiedBy

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesLocation

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesLocationGroup

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesProxyGateway

    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesSourceIpGroup

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesTimeWindow

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesUser

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesWorkloadGroup

    Description string
    The description of the workload group
    Expression string
    The expression used within the workload group.
    ExpressionJsons List<zscaler.PulumiPackage.Zia.Inputs.GetSSLInspectionRulesWorkloadGroupExpressionJson>
    A nested block describing the JSON expression for the workload group.
    Id int
    Unique identifier for the SSL Inspection
    LastModifiedBies List<zscaler.PulumiPackage.Zia.Inputs.GetSSLInspectionRulesWorkloadGroupLastModifiedBy>
    A nested block with details about who last modified the workload group.
    LastModifiedTime int
    Timestamp when the workload group was last modified.
    Name string
    Name of the SSL Inspection
    Description string
    The description of the workload group
    Expression string
    The expression used within the workload group.
    ExpressionJsons []GetSSLInspectionRulesWorkloadGroupExpressionJson
    A nested block describing the JSON expression for the workload group.
    Id int
    Unique identifier for the SSL Inspection
    LastModifiedBies []GetSSLInspectionRulesWorkloadGroupLastModifiedBy
    A nested block with details about who last modified the workload group.
    LastModifiedTime int
    Timestamp when the workload group was last modified.
    Name string
    Name of the SSL Inspection
    description String
    The description of the workload group
    expression String
    The expression used within the workload group.
    expressionJsons List<GetSSLInspectionRulesWorkloadGroupExpressionJson>
    A nested block describing the JSON expression for the workload group.
    id Integer
    Unique identifier for the SSL Inspection
    lastModifiedBies List<GetSSLInspectionRulesWorkloadGroupLastModifiedBy>
    A nested block with details about who last modified the workload group.
    lastModifiedTime Integer
    Timestamp when the workload group was last modified.
    name String
    Name of the SSL Inspection
    description string
    The description of the workload group
    expression string
    The expression used within the workload group.
    expressionJsons GetSSLInspectionRulesWorkloadGroupExpressionJson[]
    A nested block describing the JSON expression for the workload group.
    id number
    Unique identifier for the SSL Inspection
    lastModifiedBies GetSSLInspectionRulesWorkloadGroupLastModifiedBy[]
    A nested block with details about who last modified the workload group.
    lastModifiedTime number
    Timestamp when the workload group was last modified.
    name string
    Name of the SSL Inspection
    description str
    The description of the workload group
    expression str
    The expression used within the workload group.
    expression_jsons Sequence[GetSSLInspectionRulesWorkloadGroupExpressionJson]
    A nested block describing the JSON expression for the workload group.
    id int
    Unique identifier for the SSL Inspection
    last_modified_bies Sequence[GetSSLInspectionRulesWorkloadGroupLastModifiedBy]
    A nested block with details about who last modified the workload group.
    last_modified_time int
    Timestamp when the workload group was last modified.
    name str
    Name of the SSL Inspection
    description String
    The description of the workload group
    expression String
    The expression used within the workload group.
    expressionJsons List<Property Map>
    A nested block describing the JSON expression for the workload group.
    id Number
    Unique identifier for the SSL Inspection
    lastModifiedBies List<Property Map>
    A nested block with details about who last modified the workload group.
    lastModifiedTime Number
    Timestamp when the workload group was last modified.
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesWorkloadGroupExpressionJson

    ExpressionContainers List<zscaler.PulumiPackage.Zia.Inputs.GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainer>
    Contains one or more tag types (and associated tags) combined using logical operators within a workload group
    ExpressionContainers []GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainer
    Contains one or more tag types (and associated tags) combined using logical operators within a workload group
    expressionContainers List<GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainer>
    Contains one or more tag types (and associated tags) combined using logical operators within a workload group
    expressionContainers GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainer[]
    Contains one or more tag types (and associated tags) combined using logical operators within a workload group
    expression_containers Sequence[GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainer]
    Contains one or more tag types (and associated tags) combined using logical operators within a workload group
    expressionContainers List<Property Map>
    Contains one or more tag types (and associated tags) combined using logical operators within a workload group

    GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainer

    Operator string
    The operator (either AND or OR) used to create logical relationships among tag types
    TagContainers List<zscaler.PulumiPackage.Zia.Inputs.GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainer>
    Contains one or more tags and the logical operator used to combine the tags within a tag type
    TagType string
    The tag type selected from a predefined list
    Operator string
    The operator (either AND or OR) used to create logical relationships among tag types
    TagContainers []GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainer
    Contains one or more tags and the logical operator used to combine the tags within a tag type
    TagType string
    The tag type selected from a predefined list
    operator String
    The operator (either AND or OR) used to create logical relationships among tag types
    tagContainers List<GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainer>
    Contains one or more tags and the logical operator used to combine the tags within a tag type
    tagType String
    The tag type selected from a predefined list
    operator string
    The operator (either AND or OR) used to create logical relationships among tag types
    tagContainers GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainer[]
    Contains one or more tags and the logical operator used to combine the tags within a tag type
    tagType string
    The tag type selected from a predefined list
    operator str
    The operator (either AND or OR) used to create logical relationships among tag types
    tag_containers Sequence[GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainer]
    Contains one or more tags and the logical operator used to combine the tags within a tag type
    tag_type str
    The tag type selected from a predefined list
    operator String
    The operator (either AND or OR) used to create logical relationships among tag types
    tagContainers List<Property Map>
    Contains one or more tags and the logical operator used to combine the tags within a tag type
    tagType String
    The tag type selected from a predefined list

    GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainer

    Operator string
    The operator (either AND or OR) used to create logical relationships among tag types
    Tags List<zscaler.PulumiPackage.Zia.Inputs.GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainerTag>
    Operator string
    The operator (either AND or OR) used to create logical relationships among tag types
    Tags []GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainerTag
    operator String
    The operator (either AND or OR) used to create logical relationships among tag types
    tags List<GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainerTag>
    operator string
    The operator (either AND or OR) used to create logical relationships among tag types
    tags GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainerTag[]
    operator str
    The operator (either AND or OR) used to create logical relationships among tag types
    tags Sequence[GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainerTag]
    operator String
    The operator (either AND or OR) used to create logical relationships among tag types
    tags List<Property Map>

    GetSSLInspectionRulesWorkloadGroupExpressionJsonExpressionContainerTagContainerTag

    Key string
    Value string
    Key string
    Value string
    key String
    value String
    key string
    value string
    key str
    value str
    key String
    value String

    GetSSLInspectionRulesWorkloadGroupLastModifiedBy

    Extensions Dictionary<string, string>
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    Extensions map[string]string
    Additional information about the time window.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    extensions Map<String,String>
    Additional information about the time window.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    extensions {[key: string]: string}
    Additional information about the time window.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    extensions Mapping[str, str]
    Additional information about the time window.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    extensions Map<String>
    Additional information about the time window.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    GetSSLInspectionRulesZpaAppSegment

    ExternalId string
    Indicates the external ID. Applicable only when this reference is of an external entity.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    ExternalId string
    Indicates the external ID. Applicable only when this reference is of an external entity.
    Id int
    Unique identifier for the SSL Inspection
    Name string
    Name of the SSL Inspection
    externalId String
    Indicates the external ID. Applicable only when this reference is of an external entity.
    id Integer
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection
    externalId string
    Indicates the external ID. Applicable only when this reference is of an external entity.
    id number
    Unique identifier for the SSL Inspection
    name string
    Name of the SSL Inspection
    external_id str
    Indicates the external ID. Applicable only when this reference is of an external entity.
    id int
    Unique identifier for the SSL Inspection
    name str
    Name of the SSL Inspection
    externalId String
    Indicates the external ID. Applicable only when this reference is of an external entity.
    id Number
    Unique identifier for the SSL Inspection
    name String
    Name of the SSL Inspection

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
    zscaler/pulumi-zia