1. Pulumi Registry
  2. Zscaler Private Access (ZPA)
  3. API Docs
  4. ApplicationSegment
  5. ApplicationSegmentInspection
zpa logo
Zscaler Private Access v0.0.4, Jan 30 23

zpa.ApplicationSegment.ApplicationSegmentInspection

The zpa_application_segment_inspection resource creates an inspection application segment in the Zscaler Private Access cloud. This resource can then be referenced in an access policy inspection rule. This resource supports Inspection for both HTTP and HTTPS.

Example Usage

using System.Collections.Generic;
using Pulumi;
using Zpa = Pulumi.Zpa;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var jenkins = Zpa.BrowserCertificate.GetBaCertificate.Invoke(new()
    {
        Name = "jenkins.securitygeek.io",
    });

    var @this = new Zpa.ApplicationSegment.ApplicationSegmentInspection("this", new()
    {
        Description = "ZPA_Inspection_Example",
        Enabled = true,
        HealthReporting = "ON_ACCESS",
        BypassType = "NEVER",
        IsCnameEnabled = true,
        TcpPortRanges = new[]
        {
            "443",
            "443",
        },
        DomainNames = new[]
        {
            "jenkins.example.com",
        },
        SegmentGroupId = zpa_segment_group.This.Id,
        ServerGroups = new[]
        {
            new Zpa.ApplicationSegment.Inputs.ApplicationSegmentInspectionServerGroupArgs
            {
                Ids = new[]
                {
                    zpa_server_group.This.Id,
                },
            },
        },
        CommonAppsDto = new Zpa.ApplicationSegment.Inputs.ApplicationSegmentInspectionCommonAppsDtoArgs
        {
            AppsConfigs = new[]
            {
                new Zpa.ApplicationSegment.Inputs.ApplicationSegmentInspectionCommonAppsDtoAppsConfigArgs
                {
                    Name = "jenkins.example.com",
                    Domain = "jenkins.example.com",
                    ApplicationProtocol = "HTTPS",
                    ApplicationPort = "443",
                    CertificateId = jenkins.Apply(getBaCertificateResult => getBaCertificateResult.Id),
                    Enabled = true,
                    AppTypes = new[]
                    {
                        "INSPECT",
                    },
                },
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa/ApplicationSegment"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa/BrowserCertificate"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		jenkins, err := BrowserCertificate.GetBaCertificate(ctx, &browsercertificate.GetBaCertificateArgs{
			Name: pulumi.StringRef("jenkins.securitygeek.io"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = ApplicationSegment.NewApplicationSegmentInspection(ctx, "this", &ApplicationSegment.ApplicationSegmentInspectionArgs{
			Description:     pulumi.String("ZPA_Inspection_Example"),
			Enabled:         pulumi.Bool(true),
			HealthReporting: pulumi.String("ON_ACCESS"),
			BypassType:      pulumi.String("NEVER"),
			IsCnameEnabled:  pulumi.Bool(true),
			TcpPortRanges: pulumi.StringArray{
				pulumi.String("443"),
				pulumi.String("443"),
			},
			DomainNames: pulumi.StringArray{
				pulumi.String("jenkins.example.com"),
			},
			SegmentGroupId: pulumi.Any(zpa_segment_group.This.Id),
			ServerGroups: applicationsegment.ApplicationSegmentInspectionServerGroupArray{
				&applicationsegment.ApplicationSegmentInspectionServerGroupArgs{
					Ids: pulumi.StringArray{
						zpa_server_group.This.Id,
					},
				},
			},
			CommonAppsDto: &applicationsegment.ApplicationSegmentInspectionCommonAppsDtoArgs{
				AppsConfigs: applicationsegment.ApplicationSegmentInspectionCommonAppsDtoAppsConfigArray{
					&applicationsegment.ApplicationSegmentInspectionCommonAppsDtoAppsConfigArgs{
						Name:                pulumi.String("jenkins.example.com"),
						Domain:              pulumi.String("jenkins.example.com"),
						ApplicationProtocol: pulumi.String("HTTPS"),
						ApplicationPort:     pulumi.String("443"),
						CertificateId:       *pulumi.String(jenkins.Id),
						Enabled:             pulumi.Bool(true),
						AppTypes: pulumi.StringArray{
							pulumi.String("INSPECT"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.BrowserCertificate.BrowserCertificateFunctions;
import com.pulumi.zpa.BrowserCertificate.inputs.GetBaCertificateArgs;
import com.pulumi.zpa.ApplicationSegment.ApplicationSegmentInspection;
import com.pulumi.zpa.ApplicationSegment.ApplicationSegmentInspectionArgs;
import com.pulumi.zpa.ApplicationSegment.inputs.ApplicationSegmentInspectionServerGroupArgs;
import com.pulumi.zpa.ApplicationSegment.inputs.ApplicationSegmentInspectionCommonAppsDtoArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var jenkins = BrowserCertificateFunctions.getBaCertificate(GetBaCertificateArgs.builder()
            .name("jenkins.securitygeek.io")
            .build());

        var this_ = new ApplicationSegmentInspection("this", ApplicationSegmentInspectionArgs.builder()        
            .description("ZPA_Inspection_Example")
            .enabled(true)
            .healthReporting("ON_ACCESS")
            .bypassType("NEVER")
            .isCnameEnabled(true)
            .tcpPortRanges(            
                "443",
                "443")
            .domainNames("jenkins.example.com")
            .segmentGroupId(zpa_segment_group.this().id())
            .serverGroups(ApplicationSegmentInspectionServerGroupArgs.builder()
                .ids(zpa_server_group.this().id())
                .build())
            .commonAppsDto(ApplicationSegmentInspectionCommonAppsDtoArgs.builder()
                .appsConfigs(ApplicationSegmentInspectionCommonAppsDtoAppsConfigArgs.builder()
                    .name("jenkins.example.com")
                    .domain("jenkins.example.com")
                    .applicationProtocol("HTTPS")
                    .applicationPort("443")
                    .certificateId(jenkins.applyValue(getBaCertificateResult -> getBaCertificateResult.id()))
                    .enabled(true)
                    .appTypes("INSPECT")
                    .build())
                .build())
            .build());

    }
}

import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

jenkins = zpa.BrowserCertificate.get_ba_certificate(name="jenkins.securitygeek.io")
this = zpa.application_segment.ApplicationSegmentInspection("this",
    description="ZPA_Inspection_Example",
    enabled=True,
    health_reporting="ON_ACCESS",
    bypass_type="NEVER",
    is_cname_enabled=True,
    tcp_port_ranges=[
        "443",
        "443",
    ],
    domain_names=["jenkins.example.com"],
    segment_group_id=zpa_segment_group["this"]["id"],
    server_groups=[zpa.application_segment.ApplicationSegmentInspectionServerGroupArgs(
        ids=[zpa_server_group["this"]["id"]],
    )],
    common_apps_dto=zpa.application_segment.ApplicationSegmentInspectionCommonAppsDtoArgs(
        apps_configs=[zpa.application_segment.ApplicationSegmentInspectionCommonAppsDtoAppsConfigArgs(
            name="jenkins.example.com",
            domain="jenkins.example.com",
            application_protocol="HTTPS",
            application_port="443",
            certificate_id=jenkins.id,
            enabled=True,
            app_types=["INSPECT"],
        )],
    ))

import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@pulumi/zpa";
import * as zpa from "@zscaler/pulumi-zpa";

const jenkins = zpa.BrowserCertificate.getBaCertificate({
    name: "jenkins.securitygeek.io",
});
const _this = new zpa.applicationsegment.ApplicationSegmentInspection("this", {
    description: "ZPA_Inspection_Example",
    enabled: true,
    healthReporting: "ON_ACCESS",
    bypassType: "NEVER",
    isCnameEnabled: true,
    tcpPortRanges: [
        "443",
        "443",
    ],
    domainNames: ["jenkins.example.com"],
    segmentGroupId: zpa_segment_group["this"].id,
    serverGroups: [{
        ids: [zpa_server_group["this"].id],
    }],
    commonAppsDto: {
        appsConfigs: [{
            name: "jenkins.example.com",
            domain: "jenkins.example.com",
            applicationProtocol: "HTTPS",
            applicationPort: "443",
            certificateId: jenkins.then(jenkins => jenkins.id),
            enabled: true,
            appTypes: ["INSPECT"],
        }],
    },
});

resources:
  this:
    type: zpa:ApplicationSegment:ApplicationSegmentInspection
    properties:
      description: ZPA_Inspection_Example
      enabled: true
      healthReporting: ON_ACCESS
      bypassType: NEVER
      isCnameEnabled: true
      tcpPortRanges:
        - '443'
        - '443'
      domainNames:
        - jenkins.example.com
      segmentGroupId: ${zpa_segment_group.this.id}
      serverGroups:
        - ids:
            - ${zpa_server_group.this.id}
      commonAppsDto:
        appsConfigs:
          - name: jenkins.example.com
            domain: jenkins.example.com
            applicationProtocol: HTTPS
            applicationPort: '443'
            certificateId: ${jenkins.id}
            enabled: true
            appTypes:
              - INSPECT
variables:
  jenkins:
    fn::invoke:
      Function: zpa:BrowserCertificate:getBaCertificate
      Arguments:
        name: jenkins.securitygeek.io

Create ApplicationSegmentInspection Resource

new ApplicationSegmentInspection(name: string, args: ApplicationSegmentInspectionArgs, opts?: CustomResourceOptions);
@overload
def ApplicationSegmentInspection(resource_name: str,
                                 opts: Optional[ResourceOptions] = None,
                                 bypass_type: Optional[str] = None,
                                 common_apps_dto: Optional[_applicationsegment.ApplicationSegmentInspectionCommonAppsDtoArgs] = None,
                                 config_space: Optional[str] = None,
                                 description: Optional[str] = None,
                                 domain_names: Optional[Sequence[str]] = None,
                                 double_encrypt: Optional[bool] = None,
                                 enabled: Optional[bool] = None,
                                 health_check_type: Optional[str] = None,
                                 health_reporting: Optional[str] = None,
                                 icmp_access_type: Optional[str] = None,
                                 ip_anchored: Optional[bool] = None,
                                 is_cname_enabled: Optional[bool] = None,
                                 name: Optional[str] = None,
                                 passive_health_enabled: Optional[bool] = None,
                                 segment_group_id: Optional[str] = None,
                                 segment_group_name: Optional[str] = None,
                                 server_groups: Optional[Sequence[_applicationsegment.ApplicationSegmentInspectionServerGroupArgs]] = None,
                                 tcp_port_ranges: Optional[Sequence[str]] = None,
                                 udp_port_ranges: Optional[Sequence[str]] = None)
@overload
def ApplicationSegmentInspection(resource_name: str,
                                 args: ApplicationSegmentInspectionArgs,
                                 opts: Optional[ResourceOptions] = None)
func NewApplicationSegmentInspection(ctx *Context, name string, args ApplicationSegmentInspectionArgs, opts ...ResourceOption) (*ApplicationSegmentInspection, error)
public ApplicationSegmentInspection(string name, ApplicationSegmentInspectionArgs args, CustomResourceOptions? opts = null)
public ApplicationSegmentInspection(String name, ApplicationSegmentInspectionArgs args)
public ApplicationSegmentInspection(String name, ApplicationSegmentInspectionArgs args, CustomResourceOptions options)

type: zpa:ApplicationSegment:ApplicationSegmentInspection
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ApplicationSegmentInspectionArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args ApplicationSegmentInspectionArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args ApplicationSegmentInspectionArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ApplicationSegmentInspectionArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args ApplicationSegmentInspectionArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

ApplicationSegmentInspection Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The ApplicationSegmentInspection resource accepts the following input properties:

SegmentGroupId string

List of Segment Group IDs

ServerGroups List<zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentInspectionServerGroupArgs>

List of Server Group IDs

BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

CommonAppsDto zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentInspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
ConfigSpace string

(Optional)

Description string

(Optional) Description of the application.

DomainNames List<string>

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

Whether this application is enabled or not

HealthCheckType string

(Optional)

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string

(Optional)

IpAnchored bool

(Optional)

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the Inspection Application Segment.

PassiveHealthEnabled bool

(Optional)

SegmentGroupName string
TcpPortRanges List<string>

TCP port ranges used to access the app.

UdpPortRanges List<string>

UDP port ranges used to access the app.

SegmentGroupId string

List of Segment Group IDs

ServerGroups []ApplicationSegmentInspectionServerGroupArgs

List of Server Group IDs

BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

CommonAppsDto ApplicationSegmentInspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
ConfigSpace string

(Optional)

Description string

(Optional) Description of the application.

DomainNames []string

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

Whether this application is enabled or not

HealthCheckType string

(Optional)

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string

(Optional)

IpAnchored bool

(Optional)

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the Inspection Application Segment.

PassiveHealthEnabled bool

(Optional)

SegmentGroupName string
TcpPortRanges []string

TCP port ranges used to access the app.

UdpPortRanges []string

UDP port ranges used to access the app.

segmentGroupId String

List of Segment Group IDs

serverGroups List<InspectionServerGroupArgs>

List of Server Group IDs

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto InspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace String

(Optional)

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

Whether this application is enabled or not

healthCheckType String

(Optional)

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String

(Optional)

ipAnchored Boolean

(Optional)

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the Inspection Application Segment.

passiveHealthEnabled Boolean

(Optional)

segmentGroupName String
tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

segmentGroupId string

List of Segment Group IDs

serverGroups ApplicationSegmentInspectionServerGroupArgs[]

List of Server Group IDs

bypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto ApplicationSegmentInspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace string

(Optional)

description string

(Optional) Description of the application.

domainNames string[]

List of domains and IPs.

doubleEncrypt boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled boolean

Whether this application is enabled or not

healthCheckType string

(Optional)

healthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType string

(Optional)

ipAnchored boolean

(Optional)

isCnameEnabled boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name string

Name of the Inspection Application Segment.

passiveHealthEnabled boolean

(Optional)

segmentGroupName string
tcpPortRanges string[]

TCP port ranges used to access the app.

udpPortRanges string[]

UDP port ranges used to access the app.

segment_group_id str

List of Segment Group IDs

server_groups ApplicationSegmentInspectionServerGroupArgs]

List of Server Group IDs

bypass_type str

(Optional) Indicates whether users can bypass ZPA to access applications.

common_apps_dto ApplicationSegmentInspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
config_space str

(Optional)

description str

(Optional) Description of the application.

domain_names Sequence[str]

List of domains and IPs.

double_encrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled bool

Whether this application is enabled or not

health_check_type str

(Optional)

health_reporting str

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmp_access_type str

(Optional)

ip_anchored bool

(Optional)

is_cname_enabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name str

Name of the Inspection Application Segment.

passive_health_enabled bool

(Optional)

segment_group_name str
tcp_port_ranges Sequence[str]

TCP port ranges used to access the app.

udp_port_ranges Sequence[str]

UDP port ranges used to access the app.

segmentGroupId String

List of Segment Group IDs

serverGroups List<Property Map>

List of Server Group IDs

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto Property Map

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace String

(Optional)

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

Whether this application is enabled or not

healthCheckType String

(Optional)

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String

(Optional)

ipAnchored Boolean

(Optional)

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the Inspection Application Segment.

passiveHealthEnabled Boolean

(Optional)

segmentGroupName String
tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

Outputs

All input properties are implicitly available as output properties. Additionally, the ApplicationSegmentInspection resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

Id string

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id str

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

Look up Existing ApplicationSegmentInspection Resource

Get an existing ApplicationSegmentInspection resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ApplicationSegmentInspectionState, opts?: CustomResourceOptions): ApplicationSegmentInspection
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        bypass_type: Optional[str] = None,
        common_apps_dto: Optional[_applicationsegment.ApplicationSegmentInspectionCommonAppsDtoArgs] = None,
        config_space: Optional[str] = None,
        description: Optional[str] = None,
        domain_names: Optional[Sequence[str]] = None,
        double_encrypt: Optional[bool] = None,
        enabled: Optional[bool] = None,
        health_check_type: Optional[str] = None,
        health_reporting: Optional[str] = None,
        icmp_access_type: Optional[str] = None,
        ip_anchored: Optional[bool] = None,
        is_cname_enabled: Optional[bool] = None,
        name: Optional[str] = None,
        passive_health_enabled: Optional[bool] = None,
        segment_group_id: Optional[str] = None,
        segment_group_name: Optional[str] = None,
        server_groups: Optional[Sequence[_applicationsegment.ApplicationSegmentInspectionServerGroupArgs]] = None,
        tcp_port_ranges: Optional[Sequence[str]] = None,
        udp_port_ranges: Optional[Sequence[str]] = None) -> ApplicationSegmentInspection
func GetApplicationSegmentInspection(ctx *Context, name string, id IDInput, state *ApplicationSegmentInspectionState, opts ...ResourceOption) (*ApplicationSegmentInspection, error)
public static ApplicationSegmentInspection Get(string name, Input<string> id, ApplicationSegmentInspectionState? state, CustomResourceOptions? opts = null)
public static ApplicationSegmentInspection get(String name, Output<String> id, ApplicationSegmentInspectionState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

CommonAppsDto zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentInspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
ConfigSpace string

(Optional)

Description string

(Optional) Description of the application.

DomainNames List<string>

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

Whether this application is enabled or not

HealthCheckType string

(Optional)

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string

(Optional)

IpAnchored bool

(Optional)

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the Inspection Application Segment.

PassiveHealthEnabled bool

(Optional)

SegmentGroupId string

List of Segment Group IDs

SegmentGroupName string
ServerGroups List<zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentInspectionServerGroupArgs>

List of Server Group IDs

TcpPortRanges List<string>

TCP port ranges used to access the app.

UdpPortRanges List<string>

UDP port ranges used to access the app.

BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

CommonAppsDto ApplicationSegmentInspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
ConfigSpace string

(Optional)

Description string

(Optional) Description of the application.

DomainNames []string

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

Whether this application is enabled or not

HealthCheckType string

(Optional)

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string

(Optional)

IpAnchored bool

(Optional)

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the Inspection Application Segment.

PassiveHealthEnabled bool

(Optional)

SegmentGroupId string

List of Segment Group IDs

SegmentGroupName string
ServerGroups []ApplicationSegmentInspectionServerGroupArgs

List of Server Group IDs

TcpPortRanges []string

TCP port ranges used to access the app.

UdpPortRanges []string

UDP port ranges used to access the app.

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto InspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace String

(Optional)

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

Whether this application is enabled or not

healthCheckType String

(Optional)

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String

(Optional)

ipAnchored Boolean

(Optional)

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the Inspection Application Segment.

passiveHealthEnabled Boolean

(Optional)

segmentGroupId String

List of Segment Group IDs

segmentGroupName String
serverGroups List<InspectionServerGroupArgs>

List of Server Group IDs

tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

bypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto ApplicationSegmentInspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace string

(Optional)

description string

(Optional) Description of the application.

domainNames string[]

List of domains and IPs.

doubleEncrypt boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled boolean

Whether this application is enabled or not

healthCheckType string

(Optional)

healthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType string

(Optional)

ipAnchored boolean

(Optional)

isCnameEnabled boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name string

Name of the Inspection Application Segment.

passiveHealthEnabled boolean

(Optional)

segmentGroupId string

List of Segment Group IDs

segmentGroupName string
serverGroups ApplicationSegmentInspectionServerGroupArgs[]

List of Server Group IDs

tcpPortRanges string[]

TCP port ranges used to access the app.

udpPortRanges string[]

UDP port ranges used to access the app.

bypass_type str

(Optional) Indicates whether users can bypass ZPA to access applications.

common_apps_dto ApplicationSegmentInspectionCommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
config_space str

(Optional)

description str

(Optional) Description of the application.

domain_names Sequence[str]

List of domains and IPs.

double_encrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled bool

Whether this application is enabled or not

health_check_type str

(Optional)

health_reporting str

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmp_access_type str

(Optional)

ip_anchored bool

(Optional)

is_cname_enabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name str

Name of the Inspection Application Segment.

passive_health_enabled bool

(Optional)

segment_group_id str

List of Segment Group IDs

segment_group_name str
server_groups ApplicationSegmentInspectionServerGroupArgs]

List of Server Group IDs

tcp_port_ranges Sequence[str]

TCP port ranges used to access the app.

udp_port_ranges Sequence[str]

UDP port ranges used to access the app.

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto Property Map

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace String

(Optional)

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

Whether this application is enabled or not

healthCheckType String

(Optional)

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String

(Optional)

ipAnchored Boolean

(Optional)

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the Inspection Application Segment.

passiveHealthEnabled Boolean

(Optional)

segmentGroupId String

List of Segment Group IDs

segmentGroupName String
serverGroups List<Property Map>

List of Server Group IDs

tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

Supporting Types

ApplicationSegmentInspectionCommonAppsDto

ApplicationSegmentInspectionCommonAppsDtoAppsConfig

AllowOptions bool
AppId string
AppTypes List<string>

Indicates the type of application as inspection. Supported value: INSPECT

ApplicationPort string

Port for the Inspection Application Segment.

ApplicationProtocol string

Protocol for the Inspection Application Segment.. Supported values: HTTP and HTTPS

CertificateId string

ID of the signing certificate. This field is required if the applicationProtocol is set to HTTPS. The certificateId is not supported if the applicationProtocol is set to HTTP.

CertificateName string
Cname string
Description string

(Optional) Description of the application.

Domain string

Domain name of the Inspection Application Segment.

Enabled bool

Whether this application is enabled or not

Hidden bool
Id string
LocalDomain string
Name string

Name of the Inspection Application Segment.

Portal bool
TrustUntrustedCert bool
AllowOptions bool
AppId string
AppTypes []string

Indicates the type of application as inspection. Supported value: INSPECT

ApplicationPort string

Port for the Inspection Application Segment.

ApplicationProtocol string

Protocol for the Inspection Application Segment.. Supported values: HTTP and HTTPS

CertificateId string

ID of the signing certificate. This field is required if the applicationProtocol is set to HTTPS. The certificateId is not supported if the applicationProtocol is set to HTTP.

CertificateName string
Cname string
Description string

(Optional) Description of the application.

Domain string

Domain name of the Inspection Application Segment.

Enabled bool

Whether this application is enabled or not

Hidden bool
Id string
LocalDomain string
Name string

Name of the Inspection Application Segment.

Portal bool
TrustUntrustedCert bool
allowOptions Boolean
appId String
appTypes List<String>

Indicates the type of application as inspection. Supported value: INSPECT

applicationPort String

Port for the Inspection Application Segment.

applicationProtocol String

Protocol for the Inspection Application Segment.. Supported values: HTTP and HTTPS

certificateId String

ID of the signing certificate. This field is required if the applicationProtocol is set to HTTPS. The certificateId is not supported if the applicationProtocol is set to HTTP.

certificateName String
cname String
description String

(Optional) Description of the application.

domain String

Domain name of the Inspection Application Segment.

enabled Boolean

Whether this application is enabled or not

hidden Boolean
id String
localDomain String
name String

Name of the Inspection Application Segment.

portal Boolean
trustUntrustedCert Boolean
allowOptions boolean
appId string
appTypes string[]

Indicates the type of application as inspection. Supported value: INSPECT

applicationPort string

Port for the Inspection Application Segment.

applicationProtocol string

Protocol for the Inspection Application Segment.. Supported values: HTTP and HTTPS

certificateId string

ID of the signing certificate. This field is required if the applicationProtocol is set to HTTPS. The certificateId is not supported if the applicationProtocol is set to HTTP.

certificateName string
cname string
description string

(Optional) Description of the application.

domain string

Domain name of the Inspection Application Segment.

enabled boolean

Whether this application is enabled or not

hidden boolean
id string
localDomain string
name string

Name of the Inspection Application Segment.

portal boolean
trustUntrustedCert boolean
allow_options bool
app_id str
app_types Sequence[str]

Indicates the type of application as inspection. Supported value: INSPECT

application_port str

Port for the Inspection Application Segment.

application_protocol str

Protocol for the Inspection Application Segment.. Supported values: HTTP and HTTPS

certificate_id str

ID of the signing certificate. This field is required if the applicationProtocol is set to HTTPS. The certificateId is not supported if the applicationProtocol is set to HTTP.

certificate_name str
cname str
description str

(Optional) Description of the application.

domain str

Domain name of the Inspection Application Segment.

enabled bool

Whether this application is enabled or not

hidden bool
id str
local_domain str
name str

Name of the Inspection Application Segment.

portal bool
trust_untrusted_cert bool
allowOptions Boolean
appId String
appTypes List<String>

Indicates the type of application as inspection. Supported value: INSPECT

applicationPort String

Port for the Inspection Application Segment.

applicationProtocol String

Protocol for the Inspection Application Segment.. Supported values: HTTP and HTTPS

certificateId String

ID of the signing certificate. This field is required if the applicationProtocol is set to HTTPS. The certificateId is not supported if the applicationProtocol is set to HTTP.

certificateName String
cname String
description String

(Optional) Description of the application.

domain String

Domain name of the Inspection Application Segment.

enabled Boolean

Whether this application is enabled or not

hidden Boolean
id String
localDomain String
name String

Name of the Inspection Application Segment.

portal Boolean
trustUntrustedCert Boolean

ApplicationSegmentInspectionServerGroup

Ids List<string>
Ids []string
ids List<String>
ids string[]
ids Sequence[str]
ids List<String>

Import

Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZPA configurations into Terraform-compliant HashiCorp Configuration Language. Visit Inspection Application Segment can be imported by using <APPLICATION SEGMENT ID> or <APPLICATION SEGMENT NAME> as the import ID.

 $ pulumi import zpa:ApplicationSegment/applicationSegmentInspection:ApplicationSegmentInspection example <application_segment_id>

or

 $ pulumi import zpa:ApplicationSegment/applicationSegmentInspection:ApplicationSegmentInspection example <application_segment_name>

Package Details

Repository
zpa zscaler/pulumi-zpa
License
MIT
Notes

This Pulumi package is based on the zpa Terraform Provider.