Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Zscaler Private Access (ZPA)
  4. API Docs
  5. ApplicationSegment
Viewing docs for Zscaler Private Access v1.0.4
published on Monday, Jun 29, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zpa

zpa.ApplicationSegment

zpa logo
Viewing docs for Zscaler Private Access v1.0.4
published on Monday, Jun 29, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zpa

    The zpa_application_segment resource creates an application segment in the Zscaler Private Access cloud. This resource can then be referenced in an access policy rule, access policy timeout rule or access policy client forwarding rule.

    Zenith Community - ZPA Application Segment

    ZPA Terraform provider Video Series Ep7 - Application Segment

    Example 1 Usage

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

// ZPA Segment Group resource
const thisSegmentGroup = new zpa.SegmentGroup("this", {
    name: "Example",
    description: "Example",
    enabled: true,
});
// ZPA App Connector Group resource
const thisConnectorGroup = new zpa.ConnectorGroup("this", {
    name: "Example",
    description: "Example",
    enabled: true,
    cityCountry: "San Jose, CA",
    countryCode: "US",
    latitude: "37.338",
    longitude: "-121.8863",
    location: "San Jose, CA, US",
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    overrideVersionProfile: true,
    versionProfileId: "0",
    dnsQueryType: "IPV4",
});
// ZPA Server Group resource
const thisServerGroup = new zpa.ServerGroup("this", {
    name: "Example",
    description: "Example",
    enabled: true,
    dynamicDiscovery: false,
    appConnectorGroups: [{
        ids: [thisConnectorGroup.id],
    }],
}, {
    dependsOn: [thisConnectorGroup],
});
// ZPA Application Segment resource
const _this = new zpa.ApplicationSegment("this", {
    name: "Example",
    description: "Example",
    enabled: true,
    healthReporting: "ON_ACCESS",
    bypassType: "NEVER",
    isCnameEnabled: true,
    tcpPortRanges: [
        "8080",
        "8080",
    ],
    domainNames: ["server.acme.com"],
    segmentGroupId: thisSegmentGroup.id,
    serverGroups: [{
        ids: [thisServerGroup.id],
    }],
}, {
    dependsOn: [
        thisServerGroup,
        thisSegmentGroup,
    ],
});

    import pulumi
import zscaler_pulumi_zpa as zpa

# ZPA Segment Group resource
this_segment_group = zpa.SegmentGroup("this",
    name="Example",
    description="Example",
    enabled=True)
# ZPA App Connector Group resource
this_connector_group = zpa.ConnectorGroup("this",
    name="Example",
    description="Example",
    enabled=True,
    city_country="San Jose, CA",
    country_code="US",
    latitude="37.338",
    longitude="-121.8863",
    location="San Jose, CA, US",
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    override_version_profile=True,
    version_profile_id="0",
    dns_query_type="IPV4")
# ZPA Server Group resource
this_server_group = zpa.ServerGroup("this",
    name="Example",
    description="Example",
    enabled=True,
    dynamic_discovery=False,
    app_connector_groups=[{
        "ids": [this_connector_group.id],
    }],
    opts = pulumi.ResourceOptions(depends_on=[this_connector_group]))
# ZPA Application Segment resource
this = zpa.ApplicationSegment("this",
    name="Example",
    description="Example",
    enabled=True,
    health_reporting="ON_ACCESS",
    bypass_type="NEVER",
    is_cname_enabled=True,
    tcp_port_ranges=[
        "8080",
        "8080",
    ],
    domain_names=["server.acme.com"],
    segment_group_id=this_segment_group.id,
    server_groups=[{
        "ids": [this_server_group.id],
    }],
    opts = pulumi.ResourceOptions(depends_on=[
            this_server_group,
            this_segment_group,
        ]))

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// ZPA Segment Group resource
		thisSegmentGroup, err := zpa.NewSegmentGroup(ctx, "this", &zpa.SegmentGroupArgs{
			Name:        pulumi.String("Example"),
			Description: pulumi.String("Example"),
			Enabled:     pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		// ZPA App Connector Group resource
		thisConnectorGroup, err := zpa.NewConnectorGroup(ctx, "this", &zpa.ConnectorGroupArgs{
			Name:                   pulumi.String("Example"),
			Description:            pulumi.String("Example"),
			Enabled:                pulumi.Bool(true),
			CityCountry:            pulumi.String("San Jose, CA"),
			CountryCode:            pulumi.String("US"),
			Latitude:               pulumi.String("37.338"),
			Longitude:              pulumi.String("-121.8863"),
			Location:               pulumi.String("San Jose, CA, US"),
			UpgradeDay:             pulumi.String("SUNDAY"),
			UpgradeTimeInSecs:      pulumi.String("66600"),
			OverrideVersionProfile: pulumi.Bool(true),
			VersionProfileId:       pulumi.String("0"),
			DnsQueryType:           pulumi.String("IPV4"),
		})
		if err != nil {
			return err
		}
		// ZPA Server Group resource
		thisServerGroup, err := zpa.NewServerGroup(ctx, "this", &zpa.ServerGroupArgs{
			Name:             pulumi.String("Example"),
			Description:      pulumi.String("Example"),
			Enabled:          pulumi.Bool(true),
			DynamicDiscovery: pulumi.Bool(false),
			AppConnectorGroups: zpa.ServerGroupAppConnectorGroupArray{
				&zpa.ServerGroupAppConnectorGroupArgs{
					Ids: pulumi.StringArray{
						thisConnectorGroup.ID(),
					},
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			thisConnectorGroup,
		}))
		if err != nil {
			return err
		}
		// ZPA Application Segment resource
		_, err = zpa.NewApplicationSegment(ctx, "this", &zpa.ApplicationSegmentArgs{
			Name:            pulumi.String("Example"),
			Description:     pulumi.String("Example"),
			Enabled:         pulumi.Bool(true),
			HealthReporting: pulumi.String("ON_ACCESS"),
			BypassType:      pulumi.String("NEVER"),
			IsCnameEnabled:  pulumi.Bool(true),
			TcpPortRanges: pulumi.StringArray{
				pulumi.String("8080"),
				pulumi.String("8080"),
			},
			DomainNames: pulumi.StringArray{
				pulumi.String("server.acme.com"),
			},
			SegmentGroupId: thisSegmentGroup.ID(),
			ServerGroups: zpa.ApplicationSegmentServerGroupArray{
				&zpa.ApplicationSegmentServerGroupArgs{
					Ids: pulumi.StringArray{
						thisServerGroup.ID(),
					},
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			thisServerGroup,
			thisSegmentGroup,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    // ZPA Segment Group resource
    var thisSegmentGroup = new Zpa.SegmentGroup("this", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
    });

    // ZPA App Connector Group resource
    var thisConnectorGroup = new Zpa.ConnectorGroup("this", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        CityCountry = "San Jose, CA",
        CountryCode = "US",
        Latitude = "37.338",
        Longitude = "-121.8863",
        Location = "San Jose, CA, US",
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        OverrideVersionProfile = true,
        VersionProfileId = "0",
        DnsQueryType = "IPV4",
    });

    // ZPA Server Group resource
    var thisServerGroup = new Zpa.ServerGroup("this", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        DynamicDiscovery = false,
        AppConnectorGroups = new[]
        {
            new Zpa.Inputs.ServerGroupAppConnectorGroupArgs
            {
                Ids = new[]
                {
                    thisConnectorGroup.Id,
                },
            },
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            thisConnectorGroup,
        },
    });

    // ZPA Application Segment resource
    var @this = new Zpa.ApplicationSegment("this", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        HealthReporting = "ON_ACCESS",
        BypassType = "NEVER",
        IsCnameEnabled = true,
        TcpPortRanges = new[]
        {
            "8080",
            "8080",
        },
        DomainNames = new[]
        {
            "server.acme.com",
        },
        SegmentGroupId = thisSegmentGroup.Id,
        ServerGroups = new[]
        {
            new Zpa.Inputs.ApplicationSegmentServerGroupArgs
            {
                Ids = new[]
                {
                    thisServerGroup.Id,
                },
            },
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            thisServerGroup,
            thisSegmentGroup,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.SegmentGroup;
import com.pulumi.zpa.SegmentGroupArgs;
import com.pulumi.zpa.ConnectorGroup;
import com.pulumi.zpa.ConnectorGroupArgs;
import com.pulumi.zpa.ServerGroup;
import com.pulumi.zpa.ServerGroupArgs;
import com.pulumi.zpa.inputs.ServerGroupAppConnectorGroupArgs;
import com.pulumi.zpa.ApplicationSegment;
import com.pulumi.zpa.ApplicationSegmentArgs;
import com.pulumi.zpa.inputs.ApplicationSegmentServerGroupArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // ZPA Segment Group resource
        var thisSegmentGroup = new SegmentGroup("thisSegmentGroup", SegmentGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .build());

        // ZPA App Connector Group resource
        var thisConnectorGroup = new ConnectorGroup("thisConnectorGroup", ConnectorGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .cityCountry("San Jose, CA")
            .countryCode("US")
            .latitude("37.338")
            .longitude("-121.8863")
            .location("San Jose, CA, US")
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .overrideVersionProfile(true)
            .versionProfileId("0")
            .dnsQueryType("IPV4")
            .build());

        // ZPA Server Group resource
        var thisServerGroup = new ServerGroup("thisServerGroup", ServerGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .dynamicDiscovery(false)
            .appConnectorGroups(ServerGroupAppConnectorGroupArgs.builder()
                .ids(thisConnectorGroup.id())
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(thisConnectorGroup)
                .build());

        // ZPA Application Segment resource
        var this_ = new ApplicationSegment("this", ApplicationSegmentArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .healthReporting("ON_ACCESS")
            .bypassType("NEVER")
            .isCnameEnabled(true)
            .tcpPortRanges(            
                "8080",
                "8080")
            .domainNames("server.acme.com")
            .segmentGroupId(thisSegmentGroup.id())
            .serverGroups(ApplicationSegmentServerGroupArgs.builder()
                .ids(thisServerGroup.id())
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(                
                    thisServerGroup,
                    thisSegmentGroup)
                .build());

    }
}

    resources:
  # ZPA Application Segment resource
  this:
    type: zpa:ApplicationSegment
    properties:
      name: Example
      description: Example
      enabled: true
      healthReporting: ON_ACCESS
      bypassType: NEVER
      isCnameEnabled: true
      tcpPortRanges:
        - '8080'
        - '8080'
      domainNames:
        - server.acme.com
      segmentGroupId: ${thisSegmentGroup.id}
      serverGroups:
        - ids:
            - ${thisServerGroup.id}
    options:
      dependsOn:
        - ${thisServerGroup}
        - ${thisSegmentGroup}
  # ZPA Segment Group resource
  thisSegmentGroup:
    type: zpa:SegmentGroup
    name: this
    properties:
      name: Example
      description: Example
      enabled: true
  # ZPA Server Group resource
  thisServerGroup:
    type: zpa:ServerGroup
    name: this
    properties:
      name: Example
      description: Example
      enabled: true
      dynamicDiscovery: false
      appConnectorGroups:
        - ids:
            - ${thisConnectorGroup.id}
    options:
      dependsOn:
        - ${thisConnectorGroup}
  # ZPA App Connector Group resource
  thisConnectorGroup:
    type: zpa:ConnectorGroup
    name: this
    properties:
      name: Example
      description: Example
      enabled: true
      cityCountry: San Jose, CA
      countryCode: US
      latitude: '37.338'
      longitude: '-121.8863'
      location: San Jose, CA, US
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      overrideVersionProfile: true
      versionProfileId: 0
      dnsQueryType: IPV4

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

# ZPA Application Segment resource
resource "zpa_applicationsegment" "this" {
  depends_on       = [zpa_servergroup.this, zpa_segmentgroup.this]
  name             = "Example"
  description      = "Example"
  enabled          = true
  health_reporting = "ON_ACCESS"
  bypass_type      = "NEVER"
  is_cname_enabled = true
  tcp_port_ranges  = ["8080", "8080"]
  domain_names     = ["server.acme.com"]
  segment_group_id = zpa_segmentgroup.this.id
  server_groups {
    ids = [zpa_servergroup.this.id]
  }
}
# ZPA Segment Group resource
resource "zpa_segmentgroup" "this" {
  name        = "Example"
  description = "Example"
  enabled     = true
}
# ZPA Server Group resource
resource "zpa_servergroup" "this" {
  depends_on        = [zpa_connectorgroup.this]
  name              = "Example"
  description       = "Example"
  enabled           = true
  dynamic_discovery = false
  app_connector_groups {
    ids = [zpa_connectorgroup.this.id]
  }
}
# ZPA App Connector Group resource
resource "zpa_connectorgroup" "this" {
  name                     = "Example"
  description              = "Example"
  enabled                  = true
  city_country             = "San Jose, CA"
  country_code             = "US"
  latitude                 = "37.338"
  longitude                = "-121.8863"
  location                 = "San Jose, CA, US"
  upgrade_day              = "SUNDAY"
  upgrade_time_in_secs     = "66600"
  override_version_profile = true
  version_profile_id       = 0
  dns_query_type           = "IPV4"
}

    Example 2 Usage

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    resources:
  # ZPA Application Segment resource
  this:
    type: zpa:ApplicationSegment
    properties:
      name: Example
      description: Example
      enabled: true
      healthReporting: ON_ACCESS
      bypassType: NEVER
      isCnameEnabled: true
      tcpPortRanges:
        - from: '8080'
          to: '8080'
      udpPortRanges:
        - from: '8080'
          to: '8080'
      domainNames:
        - server.acme.com
      segmentGroupId: ${thisSegmentGroup.id}
      serverGroups:
        - ids:
            - ${thisServerGroup.id}
    options:
      dependsOn:
        - ${thisServerGroup}
        - ${thisSegmentGroup}
  # ZPA Segment Group resource
  thisSegmentGroup:
    type: zpa:SegmentGroup
    name: this
    properties:
      name: Example
      description: Example
      enabled: true
  # ZPA Server Group resource
  thisServerGroup:
    type: zpa:ServerGroup
    name: this
    properties:
      name: Example
      description: Example
      enabled: true
      dynamicDiscovery: false
      appConnectorGroups:
        - ids:
            - ${thisConnectorGroup.id}
    options:
      dependsOn:
        - ${thisConnectorGroup}
  # ZPA App Connector Group resource
  thisConnectorGroup:
    type: zpa:ConnectorGroup
    name: this
    properties:
      name: Example
      description: Example
      enabled: true
      cityCountry: San Jose, CA
      countryCode: US
      latitude: '37.338'
      longitude: '-121.8863'
      location: San Jose, CA, US
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      overrideVersionProfile: true
      versionProfileId: 0
      dnsQueryType: IPV4_IPV6

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

# ZPA Application Segment resource
resource "zpa_applicationsegment" "this" {
  depends_on       = [zpa_servergroup.this, zpa_segmentgroup.this]
  name             = "Example"
  description      = "Example"
  enabled          = true
  health_reporting = "ON_ACCESS"
  bypass_type      = "NEVER"
  is_cname_enabled = true
  tcp_port_ranges = [{
    "from" = "8080"
    "to"   = "8080"
  }]
  udp_port_ranges = [{
    "from" = "8080"
    "to"   = "8080"
  }]
  domain_names     = ["server.acme.com"]
  segment_group_id = zpa_segmentgroup.this.id
  server_groups {
    ids = [zpa_servergroup.this.id]
  }
}
# ZPA Segment Group resource
resource "zpa_segmentgroup" "this" {
  name        = "Example"
  description = "Example"
  enabled     = true
}
# ZPA Server Group resource
resource "zpa_servergroup" "this" {
  depends_on        = [zpa_connectorgroup.this]
  name              = "Example"
  description       = "Example"
  enabled           = true
  dynamic_discovery = false
  app_connector_groups {
    ids = [zpa_connectorgroup.this.id]
  }
}
# ZPA App Connector Group resource
resource "zpa_connectorgroup" "this" {
  name                     = "Example"
  description              = "Example"
  enabled                  = true
  city_country             = "San Jose, CA"
  country_code             = "US"
  latitude                 = "37.338"
  longitude                = "-121.8863"
  location                 = "San Jose, CA, US"
  upgrade_day              = "SUNDAY"
  upgrade_time_in_secs     = "66600"
  override_version_profile = true
  version_profile_id       = 0
  dns_query_type           = "IPV4_IPV6"
}

    Example 3 Usage - Application Segment Extranet Configuration

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const _this = zpa.getLocationController({
    name: "ExtranetLocation01 | zscalerbeta.net",
    ziaErName: "NewExtranet 8432",
});
const thisGetLocationGroupController = zpa.getLocationGroupController({
    locationName: "ExtranetLocation01",
    ziaErName: "NewExtranet 8432",
});
const thisGetExtranetResourcePartner = zpa.getExtranetResourcePartner({
    name: "NewExtranet 8432",
});
const thisSegmentGroup = new zpa.SegmentGroup("this", {
    name: "Example",
    description: "Example",
    enabled: true,
});
const thisServerGroup = new zpa.ServerGroup("this", {
    name: "Example",
    description: "Example",
    enabled: true,
    dynamicDiscovery: true,
    extranetEnabled: true,
    extranetDtos: [{
        zpnErId: thisGetExtranetResourcePartner.then(thisGetExtranetResourcePartner => thisGetExtranetResourcePartner.id),
        locationDtos: [{
            id: _this.then(_this => _this.id),
        }],
        locationGroupDtos: [{
            id: thisGetLocationGroupController.then(thisGetLocationGroupController => thisGetLocationGroupController.id),
        }],
    }],
});
const thisApplicationSegment = new zpa.ApplicationSegment("this", {
    name: "app01.acme.com",
    description: "app01.acme.com",
    enabled: true,
    healthReporting: "NONE",
    healthCheckType: "NONE",
    bypassType: "NEVER",
    isCnameEnabled: true,
    tcpPortRanges: [
        "8080",
        "8080",
    ],
    domainNames: ["app01.acme.com"],
    segmentGroupId: thisSegmentGroup.id,
    serverGroups: [{
        ids: [thisServerGroup.id],
    }],
    zpnErIds: [{
        ids: [thisGetExtranetResourcePartner.then(thisGetExtranetResourcePartner => thisGetExtranetResourcePartner.id)],
    }],
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

this = zpa.get_location_controller(name="ExtranetLocation01 | zscalerbeta.net",
    zia_er_name="NewExtranet 8432")
this_get_location_group_controller = zpa.get_location_group_controller(location_name="ExtranetLocation01",
    zia_er_name="NewExtranet 8432")
this_get_extranet_resource_partner = zpa.get_extranet_resource_partner(name="NewExtranet 8432")
this_segment_group = zpa.SegmentGroup("this",
    name="Example",
    description="Example",
    enabled=True)
this_server_group = zpa.ServerGroup("this",
    name="Example",
    description="Example",
    enabled=True,
    dynamic_discovery=True,
    extranet_enabled=True,
    extranet_dtos=[{
        "zpn_er_id": this_get_extranet_resource_partner.id,
        "location_dtos": [{
            "id": this.id,
        }],
        "location_group_dtos": [{
            "id": this_get_location_group_controller.id,
        }],
    }])
this_application_segment = zpa.ApplicationSegment("this",
    name="app01.acme.com",
    description="app01.acme.com",
    enabled=True,
    health_reporting="NONE",
    health_check_type="NONE",
    bypass_type="NEVER",
    is_cname_enabled=True,
    tcp_port_ranges=[
        "8080",
        "8080",
    ],
    domain_names=["app01.acme.com"],
    segment_group_id=this_segment_group.id,
    server_groups=[{
        "ids": [this_server_group.id],
    }],
    zpn_er_ids=[{
        "ids": [this_get_extranet_resource_partner.id],
    }])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		this, err := zpa.GetLocationController(ctx, &zpa.GetLocationControllerArgs{
			Name:      "ExtranetLocation01 | zscalerbeta.net",
			ZiaErName: "NewExtranet 8432",
		}, nil)
		if err != nil {
			return err
		}
		thisGetLocationGroupController, err := zpa.GetLocationGroupController(ctx, &zpa.GetLocationGroupControllerArgs{
			LocationName: "ExtranetLocation01",
			ZiaErName:    "NewExtranet 8432",
		}, nil)
		if err != nil {
			return err
		}
		thisGetExtranetResourcePartner, err := zpa.GetExtranetResourcePartner(ctx, &zpa.GetExtranetResourcePartnerArgs{
			Name: pulumi.StringRef("NewExtranet 8432"),
		}, nil)
		if err != nil {
			return err
		}
		thisSegmentGroup, err := zpa.NewSegmentGroup(ctx, "this", &zpa.SegmentGroupArgs{
			Name:        pulumi.String("Example"),
			Description: pulumi.String("Example"),
			Enabled:     pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		thisServerGroup, err := zpa.NewServerGroup(ctx, "this", &zpa.ServerGroupArgs{
			Name:             pulumi.String("Example"),
			Description:      pulumi.String("Example"),
			Enabled:          pulumi.Bool(true),
			DynamicDiscovery: pulumi.Bool(true),
			ExtranetEnabled:  pulumi.Bool(true),
			ExtranetDtos: zpa.ServerGroupExtranetDtoArray{
				&zpa.ServerGroupExtranetDtoArgs{
					ZpnErId: pulumi.String(thisGetExtranetResourcePartner.Id),
					LocationDtos: zpa.ServerGroupExtranetDtoLocationDtoArray{
						&zpa.ServerGroupExtranetDtoLocationDtoArgs{
							Id: pulumi.String(this.Id),
						},
					},
					LocationGroupDtos: zpa.ServerGroupExtranetDtoLocationGroupDtoArray{
						&zpa.ServerGroupExtranetDtoLocationGroupDtoArgs{
							Id: pulumi.String(thisGetLocationGroupController.Id),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = zpa.NewApplicationSegment(ctx, "this", &zpa.ApplicationSegmentArgs{
			Name:            pulumi.String("app01.acme.com"),
			Description:     pulumi.String("app01.acme.com"),
			Enabled:         pulumi.Bool(true),
			HealthReporting: pulumi.String("NONE"),
			HealthCheckType: pulumi.String("NONE"),
			BypassType:      pulumi.String("NEVER"),
			IsCnameEnabled:  pulumi.Bool(true),
			TcpPortRanges: pulumi.StringArray{
				pulumi.String("8080"),
				pulumi.String("8080"),
			},
			DomainNames: pulumi.StringArray{
				pulumi.String("app01.acme.com"),
			},
			SegmentGroupId: thisSegmentGroup.ID(),
			ServerGroups: zpa.ApplicationSegmentServerGroupArray{
				&zpa.ApplicationSegmentServerGroupArgs{
					Ids: pulumi.StringArray{
						thisServerGroup.ID(),
					},
				},
			},
			ZpnErIds: zpa.ApplicationSegmentZpnErIdArray{
				&zpa.ApplicationSegmentZpnErIdArgs{
					Ids: pulumi.StringArray{
						pulumi.String(thisGetExtranetResourcePartner.Id),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var @this = Zpa.GetLocationController.Invoke(new()
    {
        Name = "ExtranetLocation01 | zscalerbeta.net",
        ZiaErName = "NewExtranet 8432",
    });

    var thisGetLocationGroupController = Zpa.GetLocationGroupController.Invoke(new()
    {
        LocationName = "ExtranetLocation01",
        ZiaErName = "NewExtranet 8432",
    });

    var thisGetExtranetResourcePartner = Zpa.GetExtranetResourcePartner.Invoke(new()
    {
        Name = "NewExtranet 8432",
    });

    var thisSegmentGroup = new Zpa.SegmentGroup("this", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
    });

    var thisServerGroup = new Zpa.ServerGroup("this", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        DynamicDiscovery = true,
        ExtranetEnabled = true,
        ExtranetDtos = new[]
        {
            new Zpa.Inputs.ServerGroupExtranetDtoArgs
            {
                ZpnErId = thisGetExtranetResourcePartner.Apply(getExtranetResourcePartnerResult => getExtranetResourcePartnerResult.Id),
                LocationDtos = new[]
                {
                    new Zpa.Inputs.ServerGroupExtranetDtoLocationDtoArgs
                    {
                        Id = @this.Apply(@this => @this.Apply(getLocationControllerResult => getLocationControllerResult.Id)),
                    },
                },
                LocationGroupDtos = new[]
                {
                    new Zpa.Inputs.ServerGroupExtranetDtoLocationGroupDtoArgs
                    {
                        Id = thisGetLocationGroupController.Apply(getLocationGroupControllerResult => getLocationGroupControllerResult.Id),
                    },
                },
            },
        },
    });

    var thisApplicationSegment = new Zpa.ApplicationSegment("this", new()
    {
        Name = "app01.acme.com",
        Description = "app01.acme.com",
        Enabled = true,
        HealthReporting = "NONE",
        HealthCheckType = "NONE",
        BypassType = "NEVER",
        IsCnameEnabled = true,
        TcpPortRanges = new[]
        {
            "8080",
            "8080",
        },
        DomainNames = new[]
        {
            "app01.acme.com",
        },
        SegmentGroupId = thisSegmentGroup.Id,
        ServerGroups = new[]
        {
            new Zpa.Inputs.ApplicationSegmentServerGroupArgs
            {
                Ids = new[]
                {
                    thisServerGroup.Id,
                },
            },
        },
        ZpnErIds = new[]
        {
            new Zpa.Inputs.ApplicationSegmentZpnErIdArgs
            {
                Ids = new[]
                {
                    thisGetExtranetResourcePartner.Apply(getExtranetResourcePartnerResult => getExtranetResourcePartnerResult.Id),
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetLocationControllerArgs;
import com.pulumi.zpa.inputs.GetLocationGroupControllerArgs;
import com.pulumi.zpa.inputs.GetExtranetResourcePartnerArgs;
import com.pulumi.zpa.SegmentGroup;
import com.pulumi.zpa.SegmentGroupArgs;
import com.pulumi.zpa.ServerGroup;
import com.pulumi.zpa.ServerGroupArgs;
import com.pulumi.zpa.inputs.ServerGroupExtranetDtoArgs;
import com.pulumi.zpa.inputs.ServerGroupExtranetDtoLocationDtoArgs;
import com.pulumi.zpa.inputs.ServerGroupExtranetDtoLocationGroupDtoArgs;
import com.pulumi.zpa.ApplicationSegment;
import com.pulumi.zpa.ApplicationSegmentArgs;
import com.pulumi.zpa.inputs.ApplicationSegmentServerGroupArgs;
import com.pulumi.zpa.inputs.ApplicationSegmentZpnErIdArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var this = ZpaFunctions.getLocationController(GetLocationControllerArgs.builder()
            .name("ExtranetLocation01 | zscalerbeta.net")
            .ziaErName("NewExtranet 8432")
            .build());

        final var thisGetLocationGroupController = ZpaFunctions.getLocationGroupController(GetLocationGroupControllerArgs.builder()
            .locationName("ExtranetLocation01")
            .ziaErName("NewExtranet 8432")
            .build());

        final var thisGetExtranetResourcePartner = ZpaFunctions.getExtranetResourcePartner(GetExtranetResourcePartnerArgs.builder()
            .name("NewExtranet 8432")
            .build());

        var thisSegmentGroup = new SegmentGroup("thisSegmentGroup", SegmentGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .build());

        var thisServerGroup = new ServerGroup("thisServerGroup", ServerGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .dynamicDiscovery(true)
            .extranetEnabled(true)
            .extranetDtos(ServerGroupExtranetDtoArgs.builder()
                .zpnErId(thisGetExtranetResourcePartner.id())
                .locationDtos(ServerGroupExtranetDtoLocationDtoArgs.builder()
                    .id(this_.id())
                    .build())
                .locationGroupDtos(ServerGroupExtranetDtoLocationGroupDtoArgs.builder()
                    .id(thisGetLocationGroupController.id())
                    .build())
                .build())
            .build());

        var thisApplicationSegment = new ApplicationSegment("thisApplicationSegment", ApplicationSegmentArgs.builder()
            .name("app01.acme.com")
            .description("app01.acme.com")
            .enabled(true)
            .healthReporting("NONE")
            .healthCheckType("NONE")
            .bypassType("NEVER")
            .isCnameEnabled(true)
            .tcpPortRanges(            
                "8080",
                "8080")
            .domainNames("app01.acme.com")
            .segmentGroupId(thisSegmentGroup.id())
            .serverGroups(ApplicationSegmentServerGroupArgs.builder()
                .ids(thisServerGroup.id())
                .build())
            .zpnErIds(ApplicationSegmentZpnErIdArgs.builder()
                .ids(thisGetExtranetResourcePartner.id())
                .build())
            .build());

    }
}

    resources:
  thisSegmentGroup:
    type: zpa:SegmentGroup
    name: this
    properties:
      name: Example
      description: Example
      enabled: true
  thisServerGroup:
    type: zpa:ServerGroup
    name: this
    properties:
      name: Example
      description: Example
      enabled: true
      dynamicDiscovery: true
      extranetEnabled: true
      extranetDtos:
        - zpnErId: ${thisGetExtranetResourcePartner.id}
          locationDtos:
            - id: ${this.id}
          locationGroupDtos:
            - id: ${thisGetLocationGroupController.id}
  thisApplicationSegment:
    type: zpa:ApplicationSegment
    name: this
    properties:
      name: app01.acme.com
      description: app01.acme.com
      enabled: true
      healthReporting: NONE
      healthCheckType: NONE
      bypassType: NEVER
      isCnameEnabled: true
      tcpPortRanges:
        - '8080'
        - '8080'
      domainNames:
        - app01.acme.com
      segmentGroupId: ${thisSegmentGroup.id}
      serverGroups:
        - ids:
            - ${thisServerGroup.id}
      zpnErIds:
        - ids:
            - ${thisGetExtranetResourcePartner.id}
variables:
  this:
    fn::invoke:
      function: zpa:getLocationController
      arguments:
        name: ExtranetLocation01 | zscalerbeta.net
        ziaErName: NewExtranet 8432
  thisGetLocationGroupController:
    fn::invoke:
      function: zpa:getLocationGroupController
      arguments:
        locationName: ExtranetLocation01
        ziaErName: NewExtranet 8432
  thisGetExtranetResourcePartner:
    fn::invoke:
      function: zpa:getExtranetResourcePartner
      arguments:
        name: NewExtranet 8432

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

data "zpa_getlocationcontroller" "this" {
  name        = "ExtranetLocation01 | zscalerbeta.net"
  zia_er_name = "NewExtranet 8432"
}
data "zpa_getlocationgroupcontroller" "thisGetLocationGroupController" {
  location_name = "ExtranetLocation01"
  zia_er_name   = "NewExtranet 8432"
}
data "zpa_getextranetresourcepartner" "thisGetExtranetResourcePartner" {
  name = "NewExtranet 8432"
}

resource "zpa_segmentgroup" "this" {
  name        = "Example"
  description = "Example"
  enabled     = true
}
resource "zpa_servergroup" "this" {
  name              = "Example"
  description       = "Example"
  enabled           = true
  dynamic_discovery = true
  extranet_enabled  = true
  extranet_dtos {
    zpn_er_id = data.zpa_getextranetresourcepartner.thisGetExtranetResourcePartner.id
    location_dtos {
      id = data.zpa_getlocationcontroller.this.id
    }
    location_group_dtos {
      id = data.zpa_getlocationgroupcontroller.thisGetLocationGroupController.id
    }
  }
}
resource "zpa_applicationsegment" "this" {
  name              = "app01.acme.com"
  description       = "app01.acme.com"
  enabled           = true
  health_reporting  = "NONE"
  health_check_type = "NONE"
  bypass_type       = "NEVER"
  is_cname_enabled  = true
  tcp_port_ranges   = ["8080", "8080"]
  domain_names      = ["app01.acme.com"]
  segment_group_id  = zpa_segmentgroup.this.id
  server_groups {
    ids = [zpa_servergroup.this.id]
  }
  zpn_er_ids {
    ids = [data.zpa_getextranetresourcepartner.thisGetExtranetResourcePartner.id]
  }
}

    Create ApplicationSegment Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ApplicationSegment(name: string, args: ApplicationSegmentArgs, opts?: CustomResourceOptions);
    @overload
def ApplicationSegment(resource_name: str,
                       args: ApplicationSegmentArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def ApplicationSegment(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       domain_names: Optional[Sequence[str]] = None,
                       match_style: Optional[str] = None,
                       name: Optional[str] = None,
                       config_space: Optional[str] = None,
                       description: Optional[str] = None,
                       bypass_on_reauth: Optional[bool] = None,
                       double_encrypt: Optional[bool] = None,
                       enabled: Optional[bool] = None,
                       fqdn_dns_check: Optional[bool] = None,
                       health_check_type: Optional[str] = None,
                       health_reporting: Optional[str] = None,
                       icmp_access_type: Optional[str] = None,
                       inspect_traffic_with_zia: Optional[bool] = None,
                       ip_anchored: Optional[bool] = None,
                       is_cname_enabled: Optional[bool] = None,
                       is_incomplete_dr_config: Optional[bool] = None,
                       api_protection_enabled: Optional[bool] = None,
                       bypass_type: Optional[str] = None,
                       passive_health_enabled: Optional[bool] = None,
                       microtenant_id: Optional[str] = None,
                       policy_style: Optional[bool] = None,
                       segment_group_id: Optional[str] = None,
                       segment_group_name: Optional[str] = None,
                       select_connector_close_to_app: Optional[bool] = None,
                       server_groups: Optional[Sequence[ApplicationSegmentServerGroupArgs]] = None,
                       share_to_microtenants: Optional[Sequence[str]] = None,
                       tcp_keep_alive: Optional[str] = None,
                       tcp_port_range: Optional[Sequence[ApplicationSegmentTcpPortRangeArgs]] = None,
                       tcp_port_ranges: Optional[Sequence[str]] = None,
                       udp_port_range: Optional[Sequence[ApplicationSegmentUdpPortRangeArgs]] = None,
                       udp_port_ranges: Optional[Sequence[str]] = None,
                       use_in_dr_mode: Optional[bool] = None,
                       weighted_load_balancing: Optional[bool] = None,
                       zpn_er_ids: Optional[Sequence[ApplicationSegmentZpnErIdArgs]] = None)
    func NewApplicationSegment(ctx *Context, name string, args ApplicationSegmentArgs, opts ...ResourceOption) (*ApplicationSegment, error)
    public ApplicationSegment(string name, ApplicationSegmentArgs args, CustomResourceOptions? opts = null)
    public ApplicationSegment(String name, ApplicationSegmentArgs args)
public ApplicationSegment(String name, ApplicationSegmentArgs args, CustomResourceOptions options)

    type: zpa:ApplicationSegment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "zpa_applicationsegment" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ApplicationSegmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ApplicationSegmentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ApplicationSegmentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ApplicationSegmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ApplicationSegmentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var applicationSegmentResource = new Zpa.ApplicationSegment("applicationSegmentResource", new()
{
    DomainNames = new[]
    {
        "string",
    },
    MatchStyle = "string",
    Name = "string",
    ConfigSpace = "string",
    Description = "string",
    BypassOnReauth = false,
    DoubleEncrypt = false,
    Enabled = false,
    FqdnDnsCheck = false,
    HealthCheckType = "string",
    HealthReporting = "string",
    IcmpAccessType = "string",
    InspectTrafficWithZia = false,
    IpAnchored = false,
    IsCnameEnabled = false,
    IsIncompleteDrConfig = false,
    ApiProtectionEnabled = false,
    BypassType = "string",
    PassiveHealthEnabled = false,
    MicrotenantId = "string",
    PolicyStyle = false,
    SegmentGroupId = "string",
    SegmentGroupName = "string",
    SelectConnectorCloseToApp = false,
    ServerGroups = new[]
    {
        new Zpa.Inputs.ApplicationSegmentServerGroupArgs
        {
            Ids = new[]
            {
                "string",
            },
        },
    },
    ShareToMicrotenants = new[]
    {
        "string",
    },
    TcpKeepAlive = "string",
    TcpPortRange = new[]
    {
        new Zpa.Inputs.ApplicationSegmentTcpPortRangeArgs
        {
            From = "string",
            To = "string",
        },
    },
    TcpPortRanges = new[]
    {
        "string",
    },
    UdpPortRange = new[]
    {
        new Zpa.Inputs.ApplicationSegmentUdpPortRangeArgs
        {
            From = "string",
            To = "string",
        },
    },
    UdpPortRanges = new[]
    {
        "string",
    },
    UseInDrMode = false,
    WeightedLoadBalancing = false,
    ZpnErIds = new[]
    {
        new Zpa.Inputs.ApplicationSegmentZpnErIdArgs
        {
            Ids = new[]
            {
                "string",
            },
        },
    },
});

    example, err := zpa.NewApplicationSegment(ctx, "applicationSegmentResource", &zpa.ApplicationSegmentArgs{
	DomainNames: pulumi.StringArray{
		pulumi.String("string"),
	},
	MatchStyle:                pulumi.String("string"),
	Name:                      pulumi.String("string"),
	ConfigSpace:               pulumi.String("string"),
	Description:               pulumi.String("string"),
	BypassOnReauth:            pulumi.Bool(false),
	DoubleEncrypt:             pulumi.Bool(false),
	Enabled:                   pulumi.Bool(false),
	FqdnDnsCheck:              pulumi.Bool(false),
	HealthCheckType:           pulumi.String("string"),
	HealthReporting:           pulumi.String("string"),
	IcmpAccessType:            pulumi.String("string"),
	InspectTrafficWithZia:     pulumi.Bool(false),
	IpAnchored:                pulumi.Bool(false),
	IsCnameEnabled:            pulumi.Bool(false),
	IsIncompleteDrConfig:      pulumi.Bool(false),
	ApiProtectionEnabled:      pulumi.Bool(false),
	BypassType:                pulumi.String("string"),
	PassiveHealthEnabled:      pulumi.Bool(false),
	MicrotenantId:             pulumi.String("string"),
	PolicyStyle:               pulumi.Bool(false),
	SegmentGroupId:            pulumi.String("string"),
	SegmentGroupName:          pulumi.String("string"),
	SelectConnectorCloseToApp: pulumi.Bool(false),
	ServerGroups: zpa.ApplicationSegmentServerGroupArray{
		&zpa.ApplicationSegmentServerGroupArgs{
			Ids: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	ShareToMicrotenants: pulumi.StringArray{
		pulumi.String("string"),
	},
	TcpKeepAlive: pulumi.String("string"),
	TcpPortRange: zpa.ApplicationSegmentTcpPortRangeArray{
		&zpa.ApplicationSegmentTcpPortRangeArgs{
			From: pulumi.String("string"),
			To:   pulumi.String("string"),
		},
	},
	TcpPortRanges: pulumi.StringArray{
		pulumi.String("string"),
	},
	UdpPortRange: zpa.ApplicationSegmentUdpPortRangeArray{
		&zpa.ApplicationSegmentUdpPortRangeArgs{
			From: pulumi.String("string"),
			To:   pulumi.String("string"),
		},
	},
	UdpPortRanges: pulumi.StringArray{
		pulumi.String("string"),
	},
	UseInDrMode:           pulumi.Bool(false),
	WeightedLoadBalancing: pulumi.Bool(false),
	ZpnErIds: zpa.ApplicationSegmentZpnErIdArray{
		&zpa.ApplicationSegmentZpnErIdArgs{
			Ids: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
})

    resource "zpa_applicationsegment" "applicationSegmentResource" {
  domain_names                  = ["string"]
  match_style                   = "string"
  name                          = "string"
  config_space                  = "string"
  description                   = "string"
  bypass_on_reauth              = false
  double_encrypt                = false
  enabled                       = false
  fqdn_dns_check                = false
  health_check_type             = "string"
  health_reporting              = "string"
  icmp_access_type              = "string"
  inspect_traffic_with_zia      = false
  ip_anchored                   = false
  is_cname_enabled              = false
  is_incomplete_dr_config       = false
  api_protection_enabled        = false
  bypass_type                   = "string"
  passive_health_enabled        = false
  microtenant_id                = "string"
  policy_style                  = false
  segment_group_id              = "string"
  segment_group_name            = "string"
  select_connector_close_to_app = false
  server_groups {
    ids = ["string"]
  }
  share_to_microtenants = ["string"]
  tcp_keep_alive        = "string"
  tcp_port_range {
    from = "string"
    to   = "string"
  }
  tcp_port_ranges = ["string"]
  udp_port_range {
    from = "string"
    to   = "string"
  }
  udp_port_ranges         = ["string"]
  use_in_dr_mode          = false
  weighted_load_balancing = false
  zpn_er_ids {
    ids = ["string"]
  }
}

    var applicationSegmentResource = new ApplicationSegment("applicationSegmentResource", ApplicationSegmentArgs.builder()
    .domainNames("string")
    .matchStyle("string")
    .name("string")
    .configSpace("string")
    .description("string")
    .bypassOnReauth(false)
    .doubleEncrypt(false)
    .enabled(false)
    .fqdnDnsCheck(false)
    .healthCheckType("string")
    .healthReporting("string")
    .icmpAccessType("string")
    .inspectTrafficWithZia(false)
    .ipAnchored(false)
    .isCnameEnabled(false)
    .isIncompleteDrConfig(false)
    .apiProtectionEnabled(false)
    .bypassType("string")
    .passiveHealthEnabled(false)
    .microtenantId("string")
    .policyStyle(false)
    .segmentGroupId("string")
    .segmentGroupName("string")
    .selectConnectorCloseToApp(false)
    .serverGroups(ApplicationSegmentServerGroupArgs.builder()
        .ids("string")
        .build())
    .shareToMicrotenants("string")
    .tcpKeepAlive("string")
    .tcpPortRange(ApplicationSegmentTcpPortRangeArgs.builder()
        .from("string")
        .to("string")
        .build())
    .tcpPortRanges("string")
    .udpPortRange(ApplicationSegmentUdpPortRangeArgs.builder()
        .from("string")
        .to("string")
        .build())
    .udpPortRanges("string")
    .useInDrMode(false)
    .weightedLoadBalancing(false)
    .zpnErIds(ApplicationSegmentZpnErIdArgs.builder()
        .ids("string")
        .build())
    .build());

    application_segment_resource = zpa.ApplicationSegment("applicationSegmentResource",
    domain_names=["string"],
    match_style="string",
    name="string",
    config_space="string",
    description="string",
    bypass_on_reauth=False,
    double_encrypt=False,
    enabled=False,
    fqdn_dns_check=False,
    health_check_type="string",
    health_reporting="string",
    icmp_access_type="string",
    inspect_traffic_with_zia=False,
    ip_anchored=False,
    is_cname_enabled=False,
    is_incomplete_dr_config=False,
    api_protection_enabled=False,
    bypass_type="string",
    passive_health_enabled=False,
    microtenant_id="string",
    policy_style=False,
    segment_group_id="string",
    segment_group_name="string",
    select_connector_close_to_app=False,
    server_groups=[{
        "ids": ["string"],
    }],
    share_to_microtenants=["string"],
    tcp_keep_alive="string",
    tcp_port_range=[{
        "from_": "string",
        "to": "string",
    }],
    tcp_port_ranges=["string"],
    udp_port_range=[{
        "from_": "string",
        "to": "string",
    }],
    udp_port_ranges=["string"],
    use_in_dr_mode=False,
    weighted_load_balancing=False,
    zpn_er_ids=[{
        "ids": ["string"],
    }])

    const applicationSegmentResource = new zpa.ApplicationSegment("applicationSegmentResource", {
    domainNames: ["string"],
    matchStyle: "string",
    name: "string",
    configSpace: "string",
    description: "string",
    bypassOnReauth: false,
    doubleEncrypt: false,
    enabled: false,
    fqdnDnsCheck: false,
    healthCheckType: "string",
    healthReporting: "string",
    icmpAccessType: "string",
    inspectTrafficWithZia: false,
    ipAnchored: false,
    isCnameEnabled: false,
    isIncompleteDrConfig: false,
    apiProtectionEnabled: false,
    bypassType: "string",
    passiveHealthEnabled: false,
    microtenantId: "string",
    policyStyle: false,
    segmentGroupId: "string",
    segmentGroupName: "string",
    selectConnectorCloseToApp: false,
    serverGroups: [{
        ids: ["string"],
    }],
    shareToMicrotenants: ["string"],
    tcpKeepAlive: "string",
    tcpPortRange: [{
        from: "string",
        to: "string",
    }],
    tcpPortRanges: ["string"],
    udpPortRange: [{
        from: "string",
        to: "string",
    }],
    udpPortRanges: ["string"],
    useInDrMode: false,
    weightedLoadBalancing: false,
    zpnErIds: [{
        ids: ["string"],
    }],
});

    type: zpa:ApplicationSegment
properties:
    apiProtectionEnabled: false
    bypassOnReauth: false
    bypassType: string
    configSpace: string
    description: string
    domainNames:
        - string
    doubleEncrypt: false
    enabled: false
    fqdnDnsCheck: false
    healthCheckType: string
    healthReporting: string
    icmpAccessType: string
    inspectTrafficWithZia: false
    ipAnchored: false
    isCnameEnabled: false
    isIncompleteDrConfig: false
    matchStyle: string
    microtenantId: string
    name: string
    passiveHealthEnabled: false
    policyStyle: false
    segmentGroupId: string
    segmentGroupName: string
    selectConnectorCloseToApp: false
    serverGroups:
        - ids:
            - string
    shareToMicrotenants:
        - string
    tcpKeepAlive: string
    tcpPortRange:
        - from: string
          to: string
    tcpPortRanges:
        - string
    udpPortRange:
        - from: string
          to: string
    udpPortRanges:
        - string
    useInDrMode: false
    weightedLoadBalancing: false
    zpnErIds:
        - ids:
            - string

    ApplicationSegment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ApplicationSegment resource accepts the following input properties:

    DomainNames List<string>
    List of domains and IPs.
    ApiProtectionEnabled bool
    If set to true, designates the application segment for API traffic inspection
    BypassOnReauth bool
    BypassType string
    Indicates whether users can bypass ZPA to access applications.
    ConfigSpace string
    Description string
    Description of the application.
    DoubleEncrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    Enabled bool
    Whether this application is enabled or not.
    FqdnDnsCheck bool
    HealthCheckType string
    HealthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    IcmpAccessType string
    InspectTrafficWithZia bool
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    IpAnchored bool
    IsCnameEnabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    IsIncompleteDrConfig bool
    MatchStyle string
    MicrotenantId string
    Name string
    Name of the application.
    PassiveHealthEnabled bool
    PolicyStyle bool
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    SegmentGroupId string
    SegmentGroupName string
    SelectConnectorCloseToApp bool
    ServerGroups List<zscaler.PulumiPackage.Zpa.Inputs.ApplicationSegmentServerGroup>
    ShareToMicrotenants List<string>
    Share the Application Segment to microtenants
    TcpKeepAlive string
    TcpPortRange List<zscaler.PulumiPackage.Zpa.Inputs.ApplicationSegmentTcpPortRange>
    tcp port range
    TcpPortRanges List<string>
    TCP port ranges used to access the app.
    UdpPortRange List<zscaler.PulumiPackage.Zpa.Inputs.ApplicationSegmentUdpPortRange>
    udp port range
    UdpPortRanges List<string>
    UDP port ranges used to access the app.
    UseInDrMode bool
    WeightedLoadBalancing bool
    If set to true, designates the application segment for weighted load balancing
    ZpnErIds List<zscaler.PulumiPackage.Zpa.Inputs.ApplicationSegmentZpnErId>
    DomainNames []string
    List of domains and IPs.
    ApiProtectionEnabled bool
    If set to true, designates the application segment for API traffic inspection
    BypassOnReauth bool
    BypassType string
    Indicates whether users can bypass ZPA to access applications.
    ConfigSpace string
    Description string
    Description of the application.
    DoubleEncrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    Enabled bool
    Whether this application is enabled or not.
    FqdnDnsCheck bool
    HealthCheckType string
    HealthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    IcmpAccessType string
    InspectTrafficWithZia bool
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    IpAnchored bool
    IsCnameEnabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    IsIncompleteDrConfig bool
    MatchStyle string
    MicrotenantId string
    Name string
    Name of the application.
    PassiveHealthEnabled bool
    PolicyStyle bool
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    SegmentGroupId string
    SegmentGroupName string
    SelectConnectorCloseToApp bool
    ServerGroups []ApplicationSegmentServerGroupArgs
    ShareToMicrotenants []string
    Share the Application Segment to microtenants
    TcpKeepAlive string
    TcpPortRange []ApplicationSegmentTcpPortRangeArgs
    tcp port range
    TcpPortRanges []string
    TCP port ranges used to access the app.
    UdpPortRange []ApplicationSegmentUdpPortRangeArgs
    udp port range
    UdpPortRanges []string
    UDP port ranges used to access the app.
    UseInDrMode bool
    WeightedLoadBalancing bool
    If set to true, designates the application segment for weighted load balancing
    ZpnErIds []ApplicationSegmentZpnErIdArgs
    domain_names list(string)
    List of domains and IPs.
    api_protection_enabled bool
    If set to true, designates the application segment for API traffic inspection
    bypass_on_reauth bool
    bypass_type string
    Indicates whether users can bypass ZPA to access applications.
    config_space string
    description string
    Description of the application.
    double_encrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    enabled bool
    Whether this application is enabled or not.
    fqdn_dns_check bool
    health_check_type string
    health_reporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmp_access_type string
    inspect_traffic_with_zia bool
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ip_anchored bool
    is_cname_enabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    is_incomplete_dr_config bool
    match_style string
    microtenant_id string
    name string
    Name of the application.
    passive_health_enabled bool
    policy_style bool
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segment_group_id string
    segment_group_name string
    select_connector_close_to_app bool
    server_groups list(object)
    share_to_microtenants list(string)
    Share the Application Segment to microtenants
    tcp_keep_alive string
    tcp_port_range list(object)
    tcp port range
    tcp_port_ranges list(string)
    TCP port ranges used to access the app.
    udp_port_range list(object)
    udp port range
    udp_port_ranges list(string)
    UDP port ranges used to access the app.
    use_in_dr_mode bool
    weighted_load_balancing bool
    If set to true, designates the application segment for weighted load balancing
    zpn_er_ids list(object)
    domainNames List<String>
    List of domains and IPs.
    apiProtectionEnabled Boolean
    If set to true, designates the application segment for API traffic inspection
    bypassOnReauth Boolean
    bypassType String
    Indicates whether users can bypass ZPA to access applications.
    configSpace String
    description String
    Description of the application.
    doubleEncrypt Boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled Boolean
    Whether this application is enabled or not.
    fqdnDnsCheck Boolean
    healthCheckType String
    healthReporting String
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType String
    inspectTrafficWithZia Boolean
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ipAnchored Boolean
    isCnameEnabled Boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig Boolean
    matchStyle String
    microtenantId String
    name String
    Name of the application.
    passiveHealthEnabled Boolean
    policyStyle Boolean
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segmentGroupId String
    segmentGroupName String
    selectConnectorCloseToApp Boolean
    serverGroups List<ApplicationSegmentServerGroup>
    shareToMicrotenants List<String>
    Share the Application Segment to microtenants
    tcpKeepAlive String
    tcpPortRange List<ApplicationSegmentTcpPortRange>
    tcp port range
    tcpPortRanges List<String>
    TCP port ranges used to access the app.
    udpPortRange List<ApplicationSegmentUdpPortRange>
    udp port range
    udpPortRanges List<String>
    UDP port ranges used to access the app.
    useInDrMode Boolean
    weightedLoadBalancing Boolean
    If set to true, designates the application segment for weighted load balancing
    zpnErIds List<ApplicationSegmentZpnErId>
    domainNames string[]
    List of domains and IPs.
    apiProtectionEnabled boolean
    If set to true, designates the application segment for API traffic inspection
    bypassOnReauth boolean
    bypassType string
    Indicates whether users can bypass ZPA to access applications.
    configSpace string
    description string
    Description of the application.
    doubleEncrypt boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled boolean
    Whether this application is enabled or not.
    fqdnDnsCheck boolean
    healthCheckType string
    healthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType string
    inspectTrafficWithZia boolean
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ipAnchored boolean
    isCnameEnabled boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig boolean
    matchStyle string
    microtenantId string
    name string
    Name of the application.
    passiveHealthEnabled boolean
    policyStyle boolean
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segmentGroupId string
    segmentGroupName string
    selectConnectorCloseToApp boolean
    serverGroups ApplicationSegmentServerGroup[]
    shareToMicrotenants string[]
    Share the Application Segment to microtenants
    tcpKeepAlive string
    tcpPortRange ApplicationSegmentTcpPortRange[]
    tcp port range
    tcpPortRanges string[]
    TCP port ranges used to access the app.
    udpPortRange ApplicationSegmentUdpPortRange[]
    udp port range
    udpPortRanges string[]
    UDP port ranges used to access the app.
    useInDrMode boolean
    weightedLoadBalancing boolean
    If set to true, designates the application segment for weighted load balancing
    zpnErIds ApplicationSegmentZpnErId[]
    domain_names Sequence[str]
    List of domains and IPs.
    api_protection_enabled bool
    If set to true, designates the application segment for API traffic inspection
    bypass_on_reauth bool
    bypass_type str
    Indicates whether users can bypass ZPA to access applications.
    config_space str
    description str
    Description of the application.
    double_encrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    enabled bool
    Whether this application is enabled or not.
    fqdn_dns_check bool
    health_check_type str
    health_reporting str
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmp_access_type str
    inspect_traffic_with_zia bool
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ip_anchored bool
    is_cname_enabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    is_incomplete_dr_config bool
    match_style str
    microtenant_id str
    name str
    Name of the application.
    passive_health_enabled bool
    policy_style bool
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segment_group_id str
    segment_group_name str
    select_connector_close_to_app bool
    server_groups Sequence[ApplicationSegmentServerGroupArgs]
    share_to_microtenants Sequence[str]
    Share the Application Segment to microtenants
    tcp_keep_alive str
    tcp_port_range Sequence[ApplicationSegmentTcpPortRangeArgs]
    tcp port range
    tcp_port_ranges Sequence[str]
    TCP port ranges used to access the app.
    udp_port_range Sequence[ApplicationSegmentUdpPortRangeArgs]
    udp port range
    udp_port_ranges Sequence[str]
    UDP port ranges used to access the app.
    use_in_dr_mode bool
    weighted_load_balancing bool
    If set to true, designates the application segment for weighted load balancing
    zpn_er_ids Sequence[ApplicationSegmentZpnErIdArgs]
    domainNames List<String>
    List of domains and IPs.
    apiProtectionEnabled Boolean
    If set to true, designates the application segment for API traffic inspection
    bypassOnReauth Boolean
    bypassType String
    Indicates whether users can bypass ZPA to access applications.
    configSpace String
    description String
    Description of the application.
    doubleEncrypt Boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled Boolean
    Whether this application is enabled or not.
    fqdnDnsCheck Boolean
    healthCheckType String
    healthReporting String
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType String
    inspectTrafficWithZia Boolean
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ipAnchored Boolean
    isCnameEnabled Boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig Boolean
    matchStyle String
    microtenantId String
    name String
    Name of the application.
    passiveHealthEnabled Boolean
    policyStyle Boolean
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segmentGroupId String
    segmentGroupName String
    selectConnectorCloseToApp Boolean
    serverGroups List<Property Map>
    shareToMicrotenants List<String>
    Share the Application Segment to microtenants
    tcpKeepAlive String
    tcpPortRange List<Property Map>
    tcp port range
    tcpPortRanges List<String>
    TCP port ranges used to access the app.
    udpPortRange List<Property Map>
    udp port range
    udpPortRanges List<String>
    UDP port ranges used to access the app.
    useInDrMode Boolean
    weightedLoadBalancing Boolean
    If set to true, designates the application segment for weighted load balancing
    zpnErIds List<Property Map>

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ApplicationSegment resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ApplicationSegment Resource

    Get an existing ApplicationSegment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ApplicationSegmentState, opts?: CustomResourceOptions): ApplicationSegment
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        api_protection_enabled: Optional[bool] = None,
        bypass_on_reauth: Optional[bool] = None,
        bypass_type: Optional[str] = None,
        config_space: Optional[str] = None,
        description: Optional[str] = None,
        domain_names: Optional[Sequence[str]] = None,
        double_encrypt: Optional[bool] = None,
        enabled: Optional[bool] = None,
        fqdn_dns_check: Optional[bool] = None,
        health_check_type: Optional[str] = None,
        health_reporting: Optional[str] = None,
        icmp_access_type: Optional[str] = None,
        inspect_traffic_with_zia: Optional[bool] = None,
        ip_anchored: Optional[bool] = None,
        is_cname_enabled: Optional[bool] = None,
        is_incomplete_dr_config: Optional[bool] = None,
        match_style: Optional[str] = None,
        microtenant_id: Optional[str] = None,
        name: Optional[str] = None,
        passive_health_enabled: Optional[bool] = None,
        policy_style: Optional[bool] = None,
        segment_group_id: Optional[str] = None,
        segment_group_name: Optional[str] = None,
        select_connector_close_to_app: Optional[bool] = None,
        server_groups: Optional[Sequence[ApplicationSegmentServerGroupArgs]] = None,
        share_to_microtenants: Optional[Sequence[str]] = None,
        tcp_keep_alive: Optional[str] = None,
        tcp_port_range: Optional[Sequence[ApplicationSegmentTcpPortRangeArgs]] = None,
        tcp_port_ranges: Optional[Sequence[str]] = None,
        udp_port_range: Optional[Sequence[ApplicationSegmentUdpPortRangeArgs]] = None,
        udp_port_ranges: Optional[Sequence[str]] = None,
        use_in_dr_mode: Optional[bool] = None,
        weighted_load_balancing: Optional[bool] = None,
        zpn_er_ids: Optional[Sequence[ApplicationSegmentZpnErIdArgs]] = None) -> ApplicationSegment
    func GetApplicationSegment(ctx *Context, name string, id IDInput, state *ApplicationSegmentState, opts ...ResourceOption) (*ApplicationSegment, error)
    public static ApplicationSegment Get(string name, Input<string> id, ApplicationSegmentState? state, CustomResourceOptions? opts = null)
    public static ApplicationSegment get(String name, Output<String> id, ApplicationSegmentState state, CustomResourceOptions options)
    resources:  _:    type: zpa:ApplicationSegment    get:      id: ${id}
    import {
  to = zpa_applicationsegment.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApiProtectionEnabled bool
    If set to true, designates the application segment for API traffic inspection
    BypassOnReauth bool
    BypassType string
    Indicates whether users can bypass ZPA to access applications.
    ConfigSpace string
    Description string
    Description of the application.
    DomainNames List<string>
    List of domains and IPs.
    DoubleEncrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    Enabled bool
    Whether this application is enabled or not.
    FqdnDnsCheck bool
    HealthCheckType string
    HealthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    IcmpAccessType string
    InspectTrafficWithZia bool
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    IpAnchored bool
    IsCnameEnabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    IsIncompleteDrConfig bool
    MatchStyle string
    MicrotenantId string
    Name string
    Name of the application.
    PassiveHealthEnabled bool
    PolicyStyle bool
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    SegmentGroupId string
    SegmentGroupName string
    SelectConnectorCloseToApp bool
    ServerGroups List<zscaler.PulumiPackage.Zpa.Inputs.ApplicationSegmentServerGroup>
    ShareToMicrotenants List<string>
    Share the Application Segment to microtenants
    TcpKeepAlive string
    TcpPortRange List<zscaler.PulumiPackage.Zpa.Inputs.ApplicationSegmentTcpPortRange>
    tcp port range
    TcpPortRanges List<string>
    TCP port ranges used to access the app.
    UdpPortRange List<zscaler.PulumiPackage.Zpa.Inputs.ApplicationSegmentUdpPortRange>
    udp port range
    UdpPortRanges List<string>
    UDP port ranges used to access the app.
    UseInDrMode bool
    WeightedLoadBalancing bool
    If set to true, designates the application segment for weighted load balancing
    ZpnErIds List<zscaler.PulumiPackage.Zpa.Inputs.ApplicationSegmentZpnErId>
    ApiProtectionEnabled bool
    If set to true, designates the application segment for API traffic inspection
    BypassOnReauth bool
    BypassType string
    Indicates whether users can bypass ZPA to access applications.
    ConfigSpace string
    Description string
    Description of the application.
    DomainNames []string
    List of domains and IPs.
    DoubleEncrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    Enabled bool
    Whether this application is enabled or not.
    FqdnDnsCheck bool
    HealthCheckType string
    HealthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    IcmpAccessType string
    InspectTrafficWithZia bool
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    IpAnchored bool
    IsCnameEnabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    IsIncompleteDrConfig bool
    MatchStyle string
    MicrotenantId string
    Name string
    Name of the application.
    PassiveHealthEnabled bool
    PolicyStyle bool
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    SegmentGroupId string
    SegmentGroupName string
    SelectConnectorCloseToApp bool
    ServerGroups []ApplicationSegmentServerGroupArgs
    ShareToMicrotenants []string
    Share the Application Segment to microtenants
    TcpKeepAlive string
    TcpPortRange []ApplicationSegmentTcpPortRangeArgs
    tcp port range
    TcpPortRanges []string
    TCP port ranges used to access the app.
    UdpPortRange []ApplicationSegmentUdpPortRangeArgs
    udp port range
    UdpPortRanges []string
    UDP port ranges used to access the app.
    UseInDrMode bool
    WeightedLoadBalancing bool
    If set to true, designates the application segment for weighted load balancing
    ZpnErIds []ApplicationSegmentZpnErIdArgs
    api_protection_enabled bool
    If set to true, designates the application segment for API traffic inspection
    bypass_on_reauth bool
    bypass_type string
    Indicates whether users can bypass ZPA to access applications.
    config_space string
    description string
    Description of the application.
    domain_names list(string)
    List of domains and IPs.
    double_encrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    enabled bool
    Whether this application is enabled or not.
    fqdn_dns_check bool
    health_check_type string
    health_reporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmp_access_type string
    inspect_traffic_with_zia bool
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ip_anchored bool
    is_cname_enabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    is_incomplete_dr_config bool
    match_style string
    microtenant_id string
    name string
    Name of the application.
    passive_health_enabled bool
    policy_style bool
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segment_group_id string
    segment_group_name string
    select_connector_close_to_app bool
    server_groups list(object)
    share_to_microtenants list(string)
    Share the Application Segment to microtenants
    tcp_keep_alive string
    tcp_port_range list(object)
    tcp port range
    tcp_port_ranges list(string)
    TCP port ranges used to access the app.
    udp_port_range list(object)
    udp port range
    udp_port_ranges list(string)
    UDP port ranges used to access the app.
    use_in_dr_mode bool
    weighted_load_balancing bool
    If set to true, designates the application segment for weighted load balancing
    zpn_er_ids list(object)
    apiProtectionEnabled Boolean
    If set to true, designates the application segment for API traffic inspection
    bypassOnReauth Boolean
    bypassType String
    Indicates whether users can bypass ZPA to access applications.
    configSpace String
    description String
    Description of the application.
    domainNames List<String>
    List of domains and IPs.
    doubleEncrypt Boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled Boolean
    Whether this application is enabled or not.
    fqdnDnsCheck Boolean
    healthCheckType String
    healthReporting String
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType String
    inspectTrafficWithZia Boolean
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ipAnchored Boolean
    isCnameEnabled Boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig Boolean
    matchStyle String
    microtenantId String
    name String
    Name of the application.
    passiveHealthEnabled Boolean
    policyStyle Boolean
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segmentGroupId String
    segmentGroupName String
    selectConnectorCloseToApp Boolean
    serverGroups List<ApplicationSegmentServerGroup>
    shareToMicrotenants List<String>
    Share the Application Segment to microtenants
    tcpKeepAlive String
    tcpPortRange List<ApplicationSegmentTcpPortRange>
    tcp port range
    tcpPortRanges List<String>
    TCP port ranges used to access the app.
    udpPortRange List<ApplicationSegmentUdpPortRange>
    udp port range
    udpPortRanges List<String>
    UDP port ranges used to access the app.
    useInDrMode Boolean
    weightedLoadBalancing Boolean
    If set to true, designates the application segment for weighted load balancing
    zpnErIds List<ApplicationSegmentZpnErId>
    apiProtectionEnabled boolean
    If set to true, designates the application segment for API traffic inspection
    bypassOnReauth boolean
    bypassType string
    Indicates whether users can bypass ZPA to access applications.
    configSpace string
    description string
    Description of the application.
    domainNames string[]
    List of domains and IPs.
    doubleEncrypt boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled boolean
    Whether this application is enabled or not.
    fqdnDnsCheck boolean
    healthCheckType string
    healthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType string
    inspectTrafficWithZia boolean
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ipAnchored boolean
    isCnameEnabled boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig boolean
    matchStyle string
    microtenantId string
    name string
    Name of the application.
    passiveHealthEnabled boolean
    policyStyle boolean
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segmentGroupId string
    segmentGroupName string
    selectConnectorCloseToApp boolean
    serverGroups ApplicationSegmentServerGroup[]
    shareToMicrotenants string[]
    Share the Application Segment to microtenants
    tcpKeepAlive string
    tcpPortRange ApplicationSegmentTcpPortRange[]
    tcp port range
    tcpPortRanges string[]
    TCP port ranges used to access the app.
    udpPortRange ApplicationSegmentUdpPortRange[]
    udp port range
    udpPortRanges string[]
    UDP port ranges used to access the app.
    useInDrMode boolean
    weightedLoadBalancing boolean
    If set to true, designates the application segment for weighted load balancing
    zpnErIds ApplicationSegmentZpnErId[]
    api_protection_enabled bool
    If set to true, designates the application segment for API traffic inspection
    bypass_on_reauth bool
    bypass_type str
    Indicates whether users can bypass ZPA to access applications.
    config_space str
    description str
    Description of the application.
    domain_names Sequence[str]
    List of domains and IPs.
    double_encrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    enabled bool
    Whether this application is enabled or not.
    fqdn_dns_check bool
    health_check_type str
    health_reporting str
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmp_access_type str
    inspect_traffic_with_zia bool
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ip_anchored bool
    is_cname_enabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    is_incomplete_dr_config bool
    match_style str
    microtenant_id str
    name str
    Name of the application.
    passive_health_enabled bool
    policy_style bool
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segment_group_id str
    segment_group_name str
    select_connector_close_to_app bool
    server_groups Sequence[ApplicationSegmentServerGroupArgs]
    share_to_microtenants Sequence[str]
    Share the Application Segment to microtenants
    tcp_keep_alive str
    tcp_port_range Sequence[ApplicationSegmentTcpPortRangeArgs]
    tcp port range
    tcp_port_ranges Sequence[str]
    TCP port ranges used to access the app.
    udp_port_range Sequence[ApplicationSegmentUdpPortRangeArgs]
    udp port range
    udp_port_ranges Sequence[str]
    UDP port ranges used to access the app.
    use_in_dr_mode bool
    weighted_load_balancing bool
    If set to true, designates the application segment for weighted load balancing
    zpn_er_ids Sequence[ApplicationSegmentZpnErIdArgs]
    apiProtectionEnabled Boolean
    If set to true, designates the application segment for API traffic inspection
    bypassOnReauth Boolean
    bypassType String
    Indicates whether users can bypass ZPA to access applications.
    configSpace String
    description String
    Description of the application.
    domainNames List<String>
    List of domains and IPs.
    doubleEncrypt Boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled Boolean
    Whether this application is enabled or not.
    fqdnDnsCheck Boolean
    healthCheckType String
    healthReporting String
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType String
    inspectTrafficWithZia Boolean
    Indicates if Inspect Traffic with ZIA is enabled for the application.
    ipAnchored Boolean
    isCnameEnabled Boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig Boolean
    matchStyle String
    microtenantId String
    name String
    Name of the application.
    passiveHealthEnabled Boolean
    policyStyle Boolean
    Enable dual policy evaluation (resolve FQDN to Server IP and enforce policies based on Server IP and FQDN). false = NONE (disabled), true = DUAL_POLICY_EVAL (enabled). Default: disabled.
    segmentGroupId String
    segmentGroupName String
    selectConnectorCloseToApp Boolean
    serverGroups List<Property Map>
    shareToMicrotenants List<String>
    Share the Application Segment to microtenants
    tcpKeepAlive String
    tcpPortRange List<Property Map>
    tcp port range
    tcpPortRanges List<String>
    TCP port ranges used to access the app.
    udpPortRange List<Property Map>
    udp port range
    udpPortRanges List<String>
    UDP port ranges used to access the app.
    useInDrMode Boolean
    weightedLoadBalancing Boolean
    If set to true, designates the application segment for weighted load balancing
    zpnErIds List<Property Map>

    Supporting Types

    ApplicationSegmentServerGroup, ApplicationSegmentServerGroupArgs

    Ids List<string>
    Ids []string
    ids list(string)
    ids List<String>
    ids string[]
    ids Sequence[str]
    ids List<String>

    ApplicationSegmentTcpPortRange, ApplicationSegmentTcpPortRangeArgs

    From string
    To string
    From string
    To string
    from string
    to string
    from String
    to String
    from string
    to string
    from_ str
    to str
    from String
    to String

    ApplicationSegmentUdpPortRange, ApplicationSegmentUdpPortRangeArgs

    From string
    To string
    From string
    To string
    from string
    to string
    from String
    to String
    from string
    to string
    from_ str
    to str
    from String
    to String

    ApplicationSegmentZpnErId, ApplicationSegmentZpnErIdArgs

    Ids List<string>
    Ids []string
    ids list(string)
    ids List<String>
    ids string[]
    ids Sequence[str]
    ids List<String>

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZPA configurations into Terraform-compliant HashiCorp Configuration Language. Visit

    Application Segment can be imported by using <APPLICATION SEGMENT ID> or <APPLICATION SEGMENT NAME> as the import ID.

    $ pulumi import zpa:index/applicationSegment:ApplicationSegment example <application_segment_id>

    or

    $ pulumi import zpa:index/applicationSegment:ApplicationSegment example <application_segment_name>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zpa zscaler/pulumi-zpa
    License
    MIT
    Notes
    This Pulumi package is based on the zpa Terraform Provider.
    zpa logo
    Viewing docs for Zscaler Private Access v1.0.4
    published on Monday, Jun 29, 2026 by Zscaler
    Schema (JSON)
    zscaler/pulumi-zpa

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial