1. Pulumi Registry
  2. Zscaler Private Access (ZPA)
  3. API Docs
  4. ApplicationSegment
  5. ApplicationSegmentBrowserAccess
zpa logo
Zscaler Private Access v0.0.4, Jan 30 23

zpa.ApplicationSegment.ApplicationSegmentBrowserAccess

Import

Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZPA configurations into Terraform-compliant HashiCorp Configuration Language. Visit zpa_application_segment_browser_access Application Segment Browser Access can be imported by using <BROWSER ACCESS ID> or <<BROWSER ACCESS NAME> as the import ID. For example

 $ pulumi import zpa:ApplicationSegment/applicationSegmentBrowserAccess:ApplicationSegmentBrowserAccess example <browser_access_id>.

or

 $ pulumi import zpa:ApplicationSegment/applicationSegmentBrowserAccess:ApplicationSegmentBrowserAccess example <browser_access_name>

Example Usage

using System.Collections.Generic;
using Pulumi;
using Zpa = Pulumi.Zpa;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var testCert = Zpa.BrowserCertificate.GetBaCertificate.Invoke(new()
    {
        Name = "sales.acme.com",
    });

    // ZPA Segment Group resource
    var exampleSegmentGroup = new Zpa.SegmentGroup.SegmentGroup("exampleSegmentGroup", new()
    {
        Description = "Example",
        Enabled = true,
    });

    var exampleAppConnectorGroup = Zpa.AppConnectorGroup.GetAppConnectorGroup.Invoke(new()
    {
        Name = "AWS-Connector",
    });

    // ZPA Server Group resource
    var exampleServerGroup = new Zpa.ServerGroup.ServerGroup("exampleServerGroup", new()
    {
        Description = "Example",
        Enabled = true,
        DynamicDiscovery = true,
        AppConnectorGroups = new[]
        {
            new Zpa.ServerGroup.Inputs.ServerGroupAppConnectorGroupArgs
            {
                Ids = new[]
                {
                    exampleAppConnectorGroup.Apply(getAppConnectorGroupResult => getAppConnectorGroupResult.Id),
                },
            },
        },
    });

    // Create Browser Access Application
    var browserAccessApps = new Zpa.ApplicationSegment.ApplicationSegmentBrowserAccess("browserAccessApps", new()
    {
        Description = "Browser Access Apps",
        Enabled = true,
        HealthReporting = "ON_ACCESS",
        BypassType = "NEVER",
        TcpPortRanges = new[]
        {
            "80",
            "80",
        },
        DomainNames = new[]
        {
            "sales.acme.com",
        },
        SegmentGroupId = exampleSegmentGroup.Id,
        ClientlessApps = new[]
        {
            new Zpa.ApplicationSegment.Inputs.ApplicationSegmentBrowserAccessClientlessAppArgs
            {
                Name = "sales.acme.com",
                ApplicationProtocol = "HTTP",
                ApplicationPort = "80",
                CertificateId = testCert.Apply(getBaCertificateResult => getBaCertificateResult.Id),
                TrustUntrustedCert = true,
                Enabled = true,
                Domain = "sales.acme.com",
            },
        },
        ServerGroups = new[]
        {
            new Zpa.ApplicationSegment.Inputs.ApplicationSegmentBrowserAccessServerGroupArgs
            {
                Ids = new[]
                {
                    exampleServerGroup.Id,
                },
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa/AppConnectorGroup"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa/ApplicationSegment"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa/BrowserCertificate"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa/SegmentGroup"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa/ServerGroup"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		testCert, err := BrowserCertificate.GetBaCertificate(ctx, &browsercertificate.GetBaCertificateArgs{
			Name: pulumi.StringRef("sales.acme.com"),
		}, nil)
		if err != nil {
			return err
		}
		exampleSegmentGroup, err := SegmentGroup.NewSegmentGroup(ctx, "exampleSegmentGroup", &SegmentGroup.SegmentGroupArgs{
			Description: pulumi.String("Example"),
			Enabled:     pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		exampleAppConnectorGroup, err := AppConnectorGroup.GetAppConnectorGroup(ctx, &appconnectorgroup.GetAppConnectorGroupArgs{
			Name: pulumi.StringRef("AWS-Connector"),
		}, nil)
		if err != nil {
			return err
		}
		exampleServerGroup, err := ServerGroup.NewServerGroup(ctx, "exampleServerGroup", &ServerGroup.ServerGroupArgs{
			Description:      pulumi.String("Example"),
			Enabled:          pulumi.Bool(true),
			DynamicDiscovery: pulumi.Bool(true),
			AppConnectorGroups: servergroup.ServerGroupAppConnectorGroupArray{
				&servergroup.ServerGroupAppConnectorGroupArgs{
					Ids: pulumi.StringArray{
						*pulumi.String(exampleAppConnectorGroup.Id),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = ApplicationSegment.NewApplicationSegmentBrowserAccess(ctx, "browserAccessApps", &ApplicationSegment.ApplicationSegmentBrowserAccessArgs{
			Description:     pulumi.String("Browser Access Apps"),
			Enabled:         pulumi.Bool(true),
			HealthReporting: pulumi.String("ON_ACCESS"),
			BypassType:      pulumi.String("NEVER"),
			TcpPortRanges: pulumi.StringArray{
				pulumi.String("80"),
				pulumi.String("80"),
			},
			DomainNames: pulumi.StringArray{
				pulumi.String("sales.acme.com"),
			},
			SegmentGroupId: exampleSegmentGroup.ID(),
			ClientlessApps: applicationsegment.ApplicationSegmentBrowserAccessClientlessAppArray{
				&applicationsegment.ApplicationSegmentBrowserAccessClientlessAppArgs{
					Name:                pulumi.String("sales.acme.com"),
					ApplicationProtocol: pulumi.String("HTTP"),
					ApplicationPort:     pulumi.String("80"),
					CertificateId:       *pulumi.String(testCert.Id),
					TrustUntrustedCert:  pulumi.Bool(true),
					Enabled:             pulumi.Bool(true),
					Domain:              pulumi.String("sales.acme.com"),
				},
			},
			ServerGroups: applicationsegment.ApplicationSegmentBrowserAccessServerGroupArray{
				&applicationsegment.ApplicationSegmentBrowserAccessServerGroupArgs{
					Ids: pulumi.StringArray{
						exampleServerGroup.ID(),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.BrowserCertificate.BrowserCertificateFunctions;
import com.pulumi.zpa.BrowserCertificate.inputs.GetBaCertificateArgs;
import com.pulumi.zpa.SegmentGroup.SegmentGroup;
import com.pulumi.zpa.SegmentGroup.SegmentGroupArgs;
import com.pulumi.zpa.AppConnectorGroup.AppConnectorGroupFunctions;
import com.pulumi.zpa.AppConnectorGroup.inputs.GetAppConnectorGroupArgs;
import com.pulumi.zpa.ServerGroup.ServerGroup;
import com.pulumi.zpa.ServerGroup.ServerGroupArgs;
import com.pulumi.zpa.ServerGroup.inputs.ServerGroupAppConnectorGroupArgs;
import com.pulumi.zpa.ApplicationSegment.ApplicationSegmentBrowserAccess;
import com.pulumi.zpa.ApplicationSegment.ApplicationSegmentBrowserAccessArgs;
import com.pulumi.zpa.ApplicationSegment.inputs.ApplicationSegmentBrowserAccessClientlessAppArgs;
import com.pulumi.zpa.ApplicationSegment.inputs.ApplicationSegmentBrowserAccessServerGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testCert = BrowserCertificateFunctions.getBaCertificate(GetBaCertificateArgs.builder()
            .name("sales.acme.com")
            .build());

        var exampleSegmentGroup = new SegmentGroup("exampleSegmentGroup", SegmentGroupArgs.builder()        
            .description("Example")
            .enabled(true)
            .build());

        final var exampleAppConnectorGroup = AppConnectorGroupFunctions.getAppConnectorGroup(GetAppConnectorGroupArgs.builder()
            .name("AWS-Connector")
            .build());

        var exampleServerGroup = new ServerGroup("exampleServerGroup", ServerGroupArgs.builder()        
            .description("Example")
            .enabled(true)
            .dynamicDiscovery(true)
            .appConnectorGroups(ServerGroupAppConnectorGroupArgs.builder()
                .ids(exampleAppConnectorGroup.applyValue(getAppConnectorGroupResult -> getAppConnectorGroupResult.id()))
                .build())
            .build());

        var browserAccessApps = new ApplicationSegmentBrowserAccess("browserAccessApps", ApplicationSegmentBrowserAccessArgs.builder()        
            .description("Browser Access Apps")
            .enabled(true)
            .healthReporting("ON_ACCESS")
            .bypassType("NEVER")
            .tcpPortRanges(            
                "80",
                "80")
            .domainNames("sales.acme.com")
            .segmentGroupId(exampleSegmentGroup.id())
            .clientlessApps(ApplicationSegmentBrowserAccessClientlessAppArgs.builder()
                .name("sales.acme.com")
                .applicationProtocol("HTTP")
                .applicationPort("80")
                .certificateId(testCert.applyValue(getBaCertificateResult -> getBaCertificateResult.id()))
                .trustUntrustedCert(true)
                .enabled(true)
                .domain("sales.acme.com")
                .build())
            .serverGroups(ApplicationSegmentBrowserAccessServerGroupArgs.builder()
                .ids(exampleServerGroup.id())
                .build())
            .build());

    }
}

import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

test_cert = zpa.BrowserCertificate.get_ba_certificate(name="sales.acme.com")
# ZPA Segment Group resource
example_segment_group = zpa.segment_group.SegmentGroup("exampleSegmentGroup",
    description="Example",
    enabled=True)
example_app_connector_group = zpa.AppConnectorGroup.get_app_connector_group(name="AWS-Connector")
# ZPA Server Group resource
example_server_group = zpa.server_group.ServerGroup("exampleServerGroup",
    description="Example",
    enabled=True,
    dynamic_discovery=True,
    app_connector_groups=[zpa.server_group.ServerGroupAppConnectorGroupArgs(
        ids=[example_app_connector_group.id],
    )])
# Create Browser Access Application
browser_access_apps = zpa.application_segment.ApplicationSegmentBrowserAccess("browserAccessApps",
    description="Browser Access Apps",
    enabled=True,
    health_reporting="ON_ACCESS",
    bypass_type="NEVER",
    tcp_port_ranges=[
        "80",
        "80",
    ],
    domain_names=["sales.acme.com"],
    segment_group_id=example_segment_group.id,
    clientless_apps=[zpa.application_segment.ApplicationSegmentBrowserAccessClientlessAppArgs(
        name="sales.acme.com",
        application_protocol="HTTP",
        application_port="80",
        certificate_id=test_cert.id,
        trust_untrusted_cert=True,
        enabled=True,
        domain="sales.acme.com",
    )],
    server_groups=[zpa.application_segment.ApplicationSegmentBrowserAccessServerGroupArgs(
        ids=[example_server_group.id],
    )])

import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@pulumi/zpa";
import * as zpa from "@zscaler/pulumi-zpa";

const testCert = zpa.BrowserCertificate.getBaCertificate({
    name: "sales.acme.com",
});
// ZPA Segment Group resource
const exampleSegmentGroup = new zpa.segmentgroup.SegmentGroup("exampleSegmentGroup", {
    description: "Example",
    enabled: true,
});
const exampleAppConnectorGroup = zpa.AppConnectorGroup.getAppConnectorGroup({
    name: "AWS-Connector",
});
// ZPA Server Group resource
const exampleServerGroup = new zpa.servergroup.ServerGroup("exampleServerGroup", {
    description: "Example",
    enabled: true,
    dynamicDiscovery: true,
    appConnectorGroups: [{
        ids: [exampleAppConnectorGroup.then(exampleAppConnectorGroup => exampleAppConnectorGroup.id)],
    }],
});
// Create Browser Access Application
const browserAccessApps = new zpa.applicationsegment.ApplicationSegmentBrowserAccess("browserAccessApps", {
    description: "Browser Access Apps",
    enabled: true,
    healthReporting: "ON_ACCESS",
    bypassType: "NEVER",
    tcpPortRanges: [
        "80",
        "80",
    ],
    domainNames: ["sales.acme.com"],
    segmentGroupId: exampleSegmentGroup.id,
    clientlessApps: [{
        name: "sales.acme.com",
        applicationProtocol: "HTTP",
        applicationPort: "80",
        certificateId: testCert.then(testCert => testCert.id),
        trustUntrustedCert: true,
        enabled: true,
        domain: "sales.acme.com",
    }],
    serverGroups: [{
        ids: [exampleServerGroup.id],
    }],
});

resources:
  # Create Browser Access Application
  browserAccessApps:
    type: zpa:ApplicationSegment:ApplicationSegmentBrowserAccess
    properties:
      description: Browser Access Apps
      enabled: true
      healthReporting: ON_ACCESS
      bypassType: NEVER
      tcpPortRanges:
        - '80'
        - '80'
      domainNames:
        - sales.acme.com
      segmentGroupId: ${exampleSegmentGroup.id}
      clientlessApps:
        - name: sales.acme.com
          applicationProtocol: HTTP
          applicationPort: '80'
          certificateId: ${testCert.id}
          trustUntrustedCert: true
          enabled: true
          domain: sales.acme.com
      serverGroups:
        - ids:
            - ${exampleServerGroup.id}
  # ZPA Segment Group resource
  exampleSegmentGroup:
    type: zpa:SegmentGroup:SegmentGroup
    properties:
      description: Example
      enabled: true
  # ZPA Server Group resource
  exampleServerGroup:
    type: zpa:ServerGroup:ServerGroup
    properties:
      description: Example
      enabled: true
      dynamicDiscovery: true
      appConnectorGroups:
        - ids:
            - ${exampleAppConnectorGroup.id}
variables:
  testCert:
    fn::invoke:
      Function: zpa:BrowserCertificate:getBaCertificate
      Arguments:
        name: sales.acme.com
  exampleAppConnectorGroup:
    fn::invoke:
      Function: zpa:AppConnectorGroup:getAppConnectorGroup
      Arguments:
        name: AWS-Connector

Create ApplicationSegmentBrowserAccess Resource

new ApplicationSegmentBrowserAccess(name: string, args: ApplicationSegmentBrowserAccessArgs, opts?: CustomResourceOptions);
@overload
def ApplicationSegmentBrowserAccess(resource_name: str,
                                    opts: Optional[ResourceOptions] = None,
                                    bypass_type: Optional[str] = None,
                                    clientless_apps: Optional[Sequence[_applicationsegment.ApplicationSegmentBrowserAccessClientlessAppArgs]] = None,
                                    config_space: Optional[str] = None,
                                    description: Optional[str] = None,
                                    domain_names: Optional[Sequence[str]] = None,
                                    double_encrypt: Optional[bool] = None,
                                    enabled: Optional[bool] = None,
                                    health_check_type: Optional[str] = None,
                                    health_reporting: Optional[str] = None,
                                    icmp_access_type: Optional[str] = None,
                                    ip_anchored: Optional[bool] = None,
                                    is_cname_enabled: Optional[bool] = None,
                                    name: Optional[str] = None,
                                    passive_health_enabled: Optional[bool] = None,
                                    segment_group_id: Optional[str] = None,
                                    segment_group_name: Optional[str] = None,
                                    server_groups: Optional[Sequence[_applicationsegment.ApplicationSegmentBrowserAccessServerGroupArgs]] = None,
                                    tcp_port_ranges: Optional[Sequence[str]] = None,
                                    udp_port_ranges: Optional[Sequence[str]] = None)
@overload
def ApplicationSegmentBrowserAccess(resource_name: str,
                                    args: ApplicationSegmentBrowserAccessArgs,
                                    opts: Optional[ResourceOptions] = None)
func NewApplicationSegmentBrowserAccess(ctx *Context, name string, args ApplicationSegmentBrowserAccessArgs, opts ...ResourceOption) (*ApplicationSegmentBrowserAccess, error)
public ApplicationSegmentBrowserAccess(string name, ApplicationSegmentBrowserAccessArgs args, CustomResourceOptions? opts = null)
public ApplicationSegmentBrowserAccess(String name, ApplicationSegmentBrowserAccessArgs args)
public ApplicationSegmentBrowserAccess(String name, ApplicationSegmentBrowserAccessArgs args, CustomResourceOptions options)

type: zpa:ApplicationSegment:ApplicationSegmentBrowserAccess
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ApplicationSegmentBrowserAccessArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args ApplicationSegmentBrowserAccessArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args ApplicationSegmentBrowserAccessArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ApplicationSegmentBrowserAccessArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args ApplicationSegmentBrowserAccessArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

ApplicationSegmentBrowserAccess Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The ApplicationSegmentBrowserAccess resource accepts the following input properties:

ClientlessApps List<zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentBrowserAccessClientlessAppArgs>
DomainNames List<string>

List of domains and IPs.

SegmentGroupId string

List of Segment Group IDs

ServerGroups List<zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentBrowserAccessServerGroupArgs>

List of Server Group IDs

BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

ConfigSpace string

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

Description string

(Optional) Description of the application.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

(Optional) - Whether this app is enabled or not.

HealthCheckType string

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string
IpAnchored bool

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the application.

PassiveHealthEnabled bool
SegmentGroupName string
TcpPortRanges List<string>

TCP port ranges used to access the app.

UdpPortRanges List<string>

UDP port ranges used to access the app.

ClientlessApps []ApplicationSegmentBrowserAccessClientlessAppArgs
DomainNames []string

List of domains and IPs.

SegmentGroupId string

List of Segment Group IDs

ServerGroups []ApplicationSegmentBrowserAccessServerGroupArgs

List of Server Group IDs

BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

ConfigSpace string

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

Description string

(Optional) Description of the application.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

(Optional) - Whether this app is enabled or not.

HealthCheckType string

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string
IpAnchored bool

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the application.

PassiveHealthEnabled bool
SegmentGroupName string
TcpPortRanges []string

TCP port ranges used to access the app.

UdpPortRanges []string

UDP port ranges used to access the app.

clientlessApps List<BrowserAccessClientlessAppArgs>
domainNames List<String>

List of domains and IPs.

segmentGroupId String

List of Segment Group IDs

serverGroups List<BrowserAccessServerGroupArgs>

List of Server Group IDs

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

configSpace String

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

description String

(Optional) Description of the application.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

(Optional) - Whether this app is enabled or not.

healthCheckType String

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String
ipAnchored Boolean

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the application.

passiveHealthEnabled Boolean
segmentGroupName String
tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

clientlessApps ApplicationSegmentBrowserAccessClientlessAppArgs[]
domainNames string[]

List of domains and IPs.

segmentGroupId string

List of Segment Group IDs

serverGroups ApplicationSegmentBrowserAccessServerGroupArgs[]

List of Server Group IDs

bypassType string

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

configSpace string

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

description string

(Optional) Description of the application.

doubleEncrypt boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled boolean

(Optional) - Whether this app is enabled or not.

healthCheckType string

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

healthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType string
ipAnchored boolean

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

isCnameEnabled boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name string

Name of the application.

passiveHealthEnabled boolean
segmentGroupName string
tcpPortRanges string[]

TCP port ranges used to access the app.

udpPortRanges string[]

UDP port ranges used to access the app.

clientless_apps ApplicationSegmentBrowserAccessClientlessAppArgs]
domain_names Sequence[str]

List of domains and IPs.

segment_group_id str

List of Segment Group IDs

server_groups ApplicationSegmentBrowserAccessServerGroupArgs]

List of Server Group IDs

bypass_type str

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

config_space str

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

description str

(Optional) Description of the application.

double_encrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled bool

(Optional) - Whether this app is enabled or not.

health_check_type str

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

health_reporting str

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmp_access_type str
ip_anchored bool

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

is_cname_enabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name str

Name of the application.

passive_health_enabled bool
segment_group_name str
tcp_port_ranges Sequence[str]

TCP port ranges used to access the app.

udp_port_ranges Sequence[str]

UDP port ranges used to access the app.

clientlessApps List<Property Map>
domainNames List<String>

List of domains and IPs.

segmentGroupId String

List of Segment Group IDs

serverGroups List<Property Map>

List of Server Group IDs

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

configSpace String

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

description String

(Optional) Description of the application.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

(Optional) - Whether this app is enabled or not.

healthCheckType String

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String
ipAnchored Boolean

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the application.

passiveHealthEnabled Boolean
segmentGroupName String
tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

Outputs

All input properties are implicitly available as output properties. Additionally, the ApplicationSegmentBrowserAccess resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

Id string

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id str

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

Look up Existing ApplicationSegmentBrowserAccess Resource

Get an existing ApplicationSegmentBrowserAccess resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ApplicationSegmentBrowserAccessState, opts?: CustomResourceOptions): ApplicationSegmentBrowserAccess
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        bypass_type: Optional[str] = None,
        clientless_apps: Optional[Sequence[_applicationsegment.ApplicationSegmentBrowserAccessClientlessAppArgs]] = None,
        config_space: Optional[str] = None,
        description: Optional[str] = None,
        domain_names: Optional[Sequence[str]] = None,
        double_encrypt: Optional[bool] = None,
        enabled: Optional[bool] = None,
        health_check_type: Optional[str] = None,
        health_reporting: Optional[str] = None,
        icmp_access_type: Optional[str] = None,
        ip_anchored: Optional[bool] = None,
        is_cname_enabled: Optional[bool] = None,
        name: Optional[str] = None,
        passive_health_enabled: Optional[bool] = None,
        segment_group_id: Optional[str] = None,
        segment_group_name: Optional[str] = None,
        server_groups: Optional[Sequence[_applicationsegment.ApplicationSegmentBrowserAccessServerGroupArgs]] = None,
        tcp_port_ranges: Optional[Sequence[str]] = None,
        udp_port_ranges: Optional[Sequence[str]] = None) -> ApplicationSegmentBrowserAccess
func GetApplicationSegmentBrowserAccess(ctx *Context, name string, id IDInput, state *ApplicationSegmentBrowserAccessState, opts ...ResourceOption) (*ApplicationSegmentBrowserAccess, error)
public static ApplicationSegmentBrowserAccess Get(string name, Input<string> id, ApplicationSegmentBrowserAccessState? state, CustomResourceOptions? opts = null)
public static ApplicationSegmentBrowserAccess get(String name, Output<String> id, ApplicationSegmentBrowserAccessState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

ClientlessApps List<zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentBrowserAccessClientlessAppArgs>
ConfigSpace string

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

Description string

(Optional) Description of the application.

DomainNames List<string>

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

(Optional) - Whether this app is enabled or not.

HealthCheckType string

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string
IpAnchored bool

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the application.

PassiveHealthEnabled bool
SegmentGroupId string

List of Segment Group IDs

SegmentGroupName string
ServerGroups List<zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentBrowserAccessServerGroupArgs>

List of Server Group IDs

TcpPortRanges List<string>

TCP port ranges used to access the app.

UdpPortRanges List<string>

UDP port ranges used to access the app.

BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

ClientlessApps []ApplicationSegmentBrowserAccessClientlessAppArgs
ConfigSpace string

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

Description string

(Optional) Description of the application.

DomainNames []string

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

(Optional) - Whether this app is enabled or not.

HealthCheckType string

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string
IpAnchored bool

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the application.

PassiveHealthEnabled bool
SegmentGroupId string

List of Segment Group IDs

SegmentGroupName string
ServerGroups []ApplicationSegmentBrowserAccessServerGroupArgs

List of Server Group IDs

TcpPortRanges []string

TCP port ranges used to access the app.

UdpPortRanges []string

UDP port ranges used to access the app.

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

clientlessApps List<BrowserAccessClientlessAppArgs>
configSpace String

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

(Optional) - Whether this app is enabled or not.

healthCheckType String

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String
ipAnchored Boolean

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the application.

passiveHealthEnabled Boolean
segmentGroupId String

List of Segment Group IDs

segmentGroupName String
serverGroups List<BrowserAccessServerGroupArgs>

List of Server Group IDs

tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

bypassType string

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

clientlessApps ApplicationSegmentBrowserAccessClientlessAppArgs[]
configSpace string

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

description string

(Optional) Description of the application.

domainNames string[]

List of domains and IPs.

doubleEncrypt boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled boolean

(Optional) - Whether this app is enabled or not.

healthCheckType string

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

healthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType string
ipAnchored boolean

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

isCnameEnabled boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name string

Name of the application.

passiveHealthEnabled boolean
segmentGroupId string

List of Segment Group IDs

segmentGroupName string
serverGroups ApplicationSegmentBrowserAccessServerGroupArgs[]

List of Server Group IDs

tcpPortRanges string[]

TCP port ranges used to access the app.

udpPortRanges string[]

UDP port ranges used to access the app.

bypass_type str

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

clientless_apps ApplicationSegmentBrowserAccessClientlessAppArgs]
config_space str

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

description str

(Optional) Description of the application.

domain_names Sequence[str]

List of domains and IPs.

double_encrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled bool

(Optional) - Whether this app is enabled or not.

health_check_type str

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

health_reporting str

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmp_access_type str
ip_anchored bool

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

is_cname_enabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name str

Name of the application.

passive_health_enabled bool
segment_group_id str

List of Segment Group IDs

segment_group_name str
server_groups ApplicationSegmentBrowserAccessServerGroupArgs]

List of Server Group IDs

tcp_port_ranges Sequence[str]

TCP port ranges used to access the app.

udp_port_ranges Sequence[str]

UDP port ranges used to access the app.

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications. Default value is: NEVER and supported values are: ALWAYS, NEVER and ON_NET. The value NEVER indicates the use of the client forwarding policy.

clientlessApps List<Property Map>
configSpace String

(Optional) Default: DEFAULT. Supported values: DEFAULT, SIEM

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

(Optional) - Whether this app is enabled or not.

healthCheckType String

(Optional) Default: DEFAULT. Supported values: DEFAULT, NONE

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String
ipAnchored Boolean

(Optional) - If Source IP Anchoring for use with ZIA, is enabled or disabled for the app. Supported values are true and false

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the application.

passiveHealthEnabled Boolean
segmentGroupId String

List of Segment Group IDs

segmentGroupName String
serverGroups List<Property Map>

List of Server Group IDs

tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

Supporting Types

ApplicationSegmentBrowserAccessClientlessApp

ApplicationPort string

Port for the BA app.

ApplicationProtocol string

Protocol for the BA app. Supported values: HTTP and HTTPS

CertificateId string
Name string

Name of the application.

AllowOptions bool

If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.. Supported values: true and false

Cname string

(Optional)

Description string

(Optional) Description of the application.

Domain string

Domain name or IP address of the BA app.

Enabled bool

(Optional) - Whether this app is enabled or not.

Hidden bool

(Optional)

Id string
LocalDomain string

(Optional)

Path string

(Optional)

TrustUntrustedCert bool

(Optional)

ApplicationPort string

Port for the BA app.

ApplicationProtocol string

Protocol for the BA app. Supported values: HTTP and HTTPS

CertificateId string
Name string

Name of the application.

AllowOptions bool

If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.. Supported values: true and false

Cname string

(Optional)

Description string

(Optional) Description of the application.

Domain string

Domain name or IP address of the BA app.

Enabled bool

(Optional) - Whether this app is enabled or not.

Hidden bool

(Optional)

Id string
LocalDomain string

(Optional)

Path string

(Optional)

TrustUntrustedCert bool

(Optional)

applicationPort String

Port for the BA app.

applicationProtocol String

Protocol for the BA app. Supported values: HTTP and HTTPS

certificateId String
name String

Name of the application.

allowOptions Boolean

If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.. Supported values: true and false

cname String

(Optional)

description String

(Optional) Description of the application.

domain String

Domain name or IP address of the BA app.

enabled Boolean

(Optional) - Whether this app is enabled or not.

hidden Boolean

(Optional)

id String
localDomain String

(Optional)

path String

(Optional)

trustUntrustedCert Boolean

(Optional)

applicationPort string

Port for the BA app.

applicationProtocol string

Protocol for the BA app. Supported values: HTTP and HTTPS

certificateId string
name string

Name of the application.

allowOptions boolean

If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.. Supported values: true and false

cname string

(Optional)

description string

(Optional) Description of the application.

domain string

Domain name or IP address of the BA app.

enabled boolean

(Optional) - Whether this app is enabled or not.

hidden boolean

(Optional)

id string
localDomain string

(Optional)

path string

(Optional)

trustUntrustedCert boolean

(Optional)

application_port str

Port for the BA app.

application_protocol str

Protocol for the BA app. Supported values: HTTP and HTTPS

certificate_id str
name str

Name of the application.

allow_options bool

If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.. Supported values: true and false

cname str

(Optional)

description str

(Optional) Description of the application.

domain str

Domain name or IP address of the BA app.

enabled bool

(Optional) - Whether this app is enabled or not.

hidden bool

(Optional)

id str
local_domain str

(Optional)

path str

(Optional)

trust_untrusted_cert bool

(Optional)

applicationPort String

Port for the BA app.

applicationProtocol String

Protocol for the BA app. Supported values: HTTP and HTTPS

certificateId String
name String

Name of the application.

allowOptions Boolean

If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.. Supported values: true and false

cname String

(Optional)

description String

(Optional) Description of the application.

domain String

Domain name or IP address of the BA app.

enabled Boolean

(Optional) - Whether this app is enabled or not.

hidden Boolean

(Optional)

id String
localDomain String

(Optional)

path String

(Optional)

trustUntrustedCert Boolean

(Optional)

ApplicationSegmentBrowserAccessServerGroup

Ids List<string>
Ids []string
ids List<String>
ids string[]
ids Sequence[str]
ids List<String>

Package Details

Repository
zpa zscaler/pulumi-zpa
License
MIT
Notes

This Pulumi package is based on the zpa Terraform Provider.