1. Pulumi Registry
  2. Zscaler Private Access (ZPA)
  3. API Docs
  4. ApplicationSegment
  5. ApplicationSegmentPRA
zpa logo
Zscaler Private Access v0.0.4, Jan 30 23

zpa.ApplicationSegment.ApplicationSegmentPRA

The zpa_application_segment_pra resource creates an application segment for Privileged Remote Access in the Zscaler Private Access cloud. This resource can then be referenced in an access policy rule, access policy timeout rule, access policy client forwarding rule and inspection policy. This resource supports Privileged Remote Access for both RDP and SSH.

Example Usage

using System.Collections.Generic;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var @this = new Zpa.ApplicationSegment.ApplicationSegmentPRA("this", new()
    {
        Description = "PRA_Example",
        Enabled = true,
        HealthReporting = "ON_ACCESS",
        BypassType = "NEVER",
        IsCnameEnabled = true,
        TcpPortRanges = new[]
        {
            "22",
            "22",
            "3389",
            "3389",
        },
        DomainNames = new[]
        {
            "ssh_pra.example.com",
            "rdp_pra.example.com",
        },
        SegmentGroupId = zpa_segment_group.This.Id,
        ServerGroups = new[]
        {
            new Zpa.ApplicationSegment.Inputs.ApplicationSegmentPRAServerGroupArgs
            {
                Ids = new[]
                {
                    zpa_server_group.This.Id,
                },
            },
        },
        CommonAppsDto = new Zpa.ApplicationSegment.Inputs.ApplicationSegmentPRACommonAppsDtoArgs
        {
            AppsConfigs = new[]
            {
                new Zpa.ApplicationSegment.Inputs.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs
                {
                    Name = "ssh_pra",
                    Domain = "ssh_pra.example.com",
                    ApplicationProtocol = "SSH",
                    ApplicationPort = "22",
                    Enabled = true,
                    AppTypes = new[]
                    {
                        "SECURE_REMOTE_ACCESS",
                    },
                },
                new Zpa.ApplicationSegment.Inputs.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs
                {
                    Name = "rdp_pra",
                    Domain = "rdp_pra.example.com",
                    ApplicationProtocol = "RDP",
                    ConnectionSecurity = "ANY",
                    ApplicationPort = "3389",
                    Enabled = true,
                    AppTypes = new[]
                    {
                        "SECURE_REMOTE_ACCESS",
                    },
                },
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa/ApplicationSegment"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ApplicationSegment.NewApplicationSegmentPRA(ctx, "this", &ApplicationSegment.ApplicationSegmentPRAArgs{
			Description:     pulumi.String("PRA_Example"),
			Enabled:         pulumi.Bool(true),
			HealthReporting: pulumi.String("ON_ACCESS"),
			BypassType:      pulumi.String("NEVER"),
			IsCnameEnabled:  pulumi.Bool(true),
			TcpPortRanges: pulumi.StringArray{
				pulumi.String("22"),
				pulumi.String("22"),
				pulumi.String("3389"),
				pulumi.String("3389"),
			},
			DomainNames: pulumi.StringArray{
				pulumi.String("ssh_pra.example.com"),
				pulumi.String("rdp_pra.example.com"),
			},
			SegmentGroupId: pulumi.Any(zpa_segment_group.This.Id),
			ServerGroups: applicationsegment.ApplicationSegmentPRAServerGroupArray{
				&applicationsegment.ApplicationSegmentPRAServerGroupArgs{
					Ids: pulumi.StringArray{
						zpa_server_group.This.Id,
					},
				},
			},
			CommonAppsDto: &applicationsegment.ApplicationSegmentPRACommonAppsDtoArgs{
				AppsConfigs: applicationsegment.ApplicationSegmentPRACommonAppsDtoAppsConfigArray{
					&applicationsegment.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs{
						Name:                pulumi.String("ssh_pra"),
						Domain:              pulumi.String("ssh_pra.example.com"),
						ApplicationProtocol: pulumi.String("SSH"),
						ApplicationPort:     pulumi.String("22"),
						Enabled:             pulumi.Bool(true),
						AppTypes: pulumi.StringArray{
							pulumi.String("SECURE_REMOTE_ACCESS"),
						},
					},
					&applicationsegment.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs{
						Name:                pulumi.String("rdp_pra"),
						Domain:              pulumi.String("rdp_pra.example.com"),
						ApplicationProtocol: pulumi.String("RDP"),
						ConnectionSecurity:  pulumi.String("ANY"),
						ApplicationPort:     pulumi.String("3389"),
						Enabled:             pulumi.Bool(true),
						AppTypes: pulumi.StringArray{
							pulumi.String("SECURE_REMOTE_ACCESS"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ApplicationSegment.ApplicationSegmentPRA;
import com.pulumi.zpa.ApplicationSegment.ApplicationSegmentPRAArgs;
import com.pulumi.zpa.ApplicationSegment.inputs.ApplicationSegmentPRAServerGroupArgs;
import com.pulumi.zpa.ApplicationSegment.inputs.ApplicationSegmentPRACommonAppsDtoArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var this_ = new ApplicationSegmentPRA("this", ApplicationSegmentPRAArgs.builder()        
            .description("PRA_Example")
            .enabled(true)
            .healthReporting("ON_ACCESS")
            .bypassType("NEVER")
            .isCnameEnabled(true)
            .tcpPortRanges(            
                "22",
                "22",
                "3389",
                "3389")
            .domainNames(            
                "ssh_pra.example.com",
                "rdp_pra.example.com")
            .segmentGroupId(zpa_segment_group.this().id())
            .serverGroups(ApplicationSegmentPRAServerGroupArgs.builder()
                .ids(zpa_server_group.this().id())
                .build())
            .commonAppsDto(ApplicationSegmentPRACommonAppsDtoArgs.builder()
                .appsConfigs(                
                    ApplicationSegmentPRACommonAppsDtoAppsConfigArgs.builder()
                        .name("ssh_pra")
                        .domain("ssh_pra.example.com")
                        .applicationProtocol("SSH")
                        .applicationPort("22")
                        .enabled(true)
                        .appTypes("SECURE_REMOTE_ACCESS")
                        .build(),
                    ApplicationSegmentPRACommonAppsDtoAppsConfigArgs.builder()
                        .name("rdp_pra")
                        .domain("rdp_pra.example.com")
                        .applicationProtocol("RDP")
                        .connectionSecurity("ANY")
                        .applicationPort("3389")
                        .enabled(true)
                        .appTypes("SECURE_REMOTE_ACCESS")
                        .build())
                .build())
            .build());

    }
}

import pulumi
import zscaler_pulumi_zpa as zpa

this = zpa.application_segment.ApplicationSegmentPRA("this",
    description="PRA_Example",
    enabled=True,
    health_reporting="ON_ACCESS",
    bypass_type="NEVER",
    is_cname_enabled=True,
    tcp_port_ranges=[
        "22",
        "22",
        "3389",
        "3389",
    ],
    domain_names=[
        "ssh_pra.example.com",
        "rdp_pra.example.com",
    ],
    segment_group_id=zpa_segment_group["this"]["id"],
    server_groups=[zpa.application_segment.ApplicationSegmentPRAServerGroupArgs(
        ids=[zpa_server_group["this"]["id"]],
    )],
    common_apps_dto=zpa.application_segment.ApplicationSegmentPRACommonAppsDtoArgs(
        apps_configs=[
            zpa.application_segment.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs(
                name="ssh_pra",
                domain="ssh_pra.example.com",
                application_protocol="SSH",
                application_port="22",
                enabled=True,
                app_types=["SECURE_REMOTE_ACCESS"],
            ),
            zpa.application_segment.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs(
                name="rdp_pra",
                domain="rdp_pra.example.com",
                application_protocol="RDP",
                connection_security="ANY",
                application_port="3389",
                enabled=True,
                app_types=["SECURE_REMOTE_ACCESS"],
            ),
        ],
    ))

import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@zscaler/pulumi-zpa";

const _this = new zpa.applicationsegment.ApplicationSegmentPRA("this", {
    description: "PRA_Example",
    enabled: true,
    healthReporting: "ON_ACCESS",
    bypassType: "NEVER",
    isCnameEnabled: true,
    tcpPortRanges: [
        "22",
        "22",
        "3389",
        "3389",
    ],
    domainNames: [
        "ssh_pra.example.com",
        "rdp_pra.example.com",
    ],
    segmentGroupId: zpa_segment_group["this"].id,
    serverGroups: [{
        ids: [zpa_server_group["this"].id],
    }],
    commonAppsDto: {
        appsConfigs: [
            {
                name: "ssh_pra",
                domain: "ssh_pra.example.com",
                applicationProtocol: "SSH",
                applicationPort: "22",
                enabled: true,
                appTypes: ["SECURE_REMOTE_ACCESS"],
            },
            {
                name: "rdp_pra",
                domain: "rdp_pra.example.com",
                applicationProtocol: "RDP",
                connectionSecurity: "ANY",
                applicationPort: "3389",
                enabled: true,
                appTypes: ["SECURE_REMOTE_ACCESS"],
            },
        ],
    },
});

resources:
  this:
    type: zpa:ApplicationSegment:ApplicationSegmentPRA
    properties:
      description: PRA_Example
      enabled: true
      healthReporting: ON_ACCESS
      bypassType: NEVER
      isCnameEnabled: true
      tcpPortRanges:
        - '22'
        - '22'
        - '3389'
        - '3389'
      domainNames:
        - ssh_pra.example.com
        - rdp_pra.example.com
      segmentGroupId: ${zpa_segment_group.this.id}
      serverGroups:
        - ids:
            - ${zpa_server_group.this.id}
      commonAppsDto:
        appsConfigs:
          - name: ssh_pra
            domain: ssh_pra.example.com
            applicationProtocol: SSH
            applicationPort: '22'
            enabled: true
            appTypes:
              - SECURE_REMOTE_ACCESS
          - name: rdp_pra
            domain: rdp_pra.example.com
            applicationProtocol: RDP
            connectionSecurity: ANY
            applicationPort: '3389'
            enabled: true
            appTypes:
              - SECURE_REMOTE_ACCESS

Create ApplicationSegmentPRA Resource

new ApplicationSegmentPRA(name: string, args: ApplicationSegmentPRAArgs, opts?: CustomResourceOptions);
@overload
def ApplicationSegmentPRA(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          bypass_type: Optional[str] = None,
                          common_apps_dto: Optional[_applicationsegment.ApplicationSegmentPRACommonAppsDtoArgs] = None,
                          config_space: Optional[str] = None,
                          description: Optional[str] = None,
                          domain_names: Optional[Sequence[str]] = None,
                          double_encrypt: Optional[bool] = None,
                          enabled: Optional[bool] = None,
                          health_check_type: Optional[str] = None,
                          health_reporting: Optional[str] = None,
                          icmp_access_type: Optional[str] = None,
                          ip_anchored: Optional[bool] = None,
                          is_cname_enabled: Optional[bool] = None,
                          name: Optional[str] = None,
                          passive_health_enabled: Optional[bool] = None,
                          segment_group_id: Optional[str] = None,
                          segment_group_name: Optional[str] = None,
                          server_groups: Optional[Sequence[_applicationsegment.ApplicationSegmentPRAServerGroupArgs]] = None,
                          tcp_port_ranges: Optional[Sequence[str]] = None,
                          udp_port_ranges: Optional[Sequence[str]] = None)
@overload
def ApplicationSegmentPRA(resource_name: str,
                          args: ApplicationSegmentPRAArgs,
                          opts: Optional[ResourceOptions] = None)
func NewApplicationSegmentPRA(ctx *Context, name string, args ApplicationSegmentPRAArgs, opts ...ResourceOption) (*ApplicationSegmentPRA, error)
public ApplicationSegmentPRA(string name, ApplicationSegmentPRAArgs args, CustomResourceOptions? opts = null)
public ApplicationSegmentPRA(String name, ApplicationSegmentPRAArgs args)
public ApplicationSegmentPRA(String name, ApplicationSegmentPRAArgs args, CustomResourceOptions options)

type: zpa:ApplicationSegment:ApplicationSegmentPRA
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ApplicationSegmentPRAArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args ApplicationSegmentPRAArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args ApplicationSegmentPRAArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ApplicationSegmentPRAArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args ApplicationSegmentPRAArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

ApplicationSegmentPRA Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The ApplicationSegmentPRA resource accepts the following input properties:

SegmentGroupId string

List of Segment Group IDs

ServerGroups List<zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentPRAServerGroupArgs>

List of Server Group IDs

BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

CommonAppsDto zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentPRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
ConfigSpace string

(Optional)

Description string

(Optional) Description of the application.

DomainNames List<string>

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

Whether this application is enabled or not

HealthCheckType string

(Optional)

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string

(Optional)

IpAnchored bool

(Optional)

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the Privileged Remote Access

PassiveHealthEnabled bool

(Optional)

SegmentGroupName string
TcpPortRanges List<string>

TCP port ranges used to access the app.

UdpPortRanges List<string>

UDP port ranges used to access the app.

SegmentGroupId string

List of Segment Group IDs

ServerGroups []ApplicationSegmentPRAServerGroupArgs

List of Server Group IDs

BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

CommonAppsDto ApplicationSegmentPRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
ConfigSpace string

(Optional)

Description string

(Optional) Description of the application.

DomainNames []string

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

Whether this application is enabled or not

HealthCheckType string

(Optional)

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string

(Optional)

IpAnchored bool

(Optional)

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the Privileged Remote Access

PassiveHealthEnabled bool

(Optional)

SegmentGroupName string
TcpPortRanges []string

TCP port ranges used to access the app.

UdpPortRanges []string

UDP port ranges used to access the app.

segmentGroupId String

List of Segment Group IDs

serverGroups List<PRAServerGroupArgs>

List of Server Group IDs

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto PRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace String

(Optional)

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

Whether this application is enabled or not

healthCheckType String

(Optional)

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String

(Optional)

ipAnchored Boolean

(Optional)

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the Privileged Remote Access

passiveHealthEnabled Boolean

(Optional)

segmentGroupName String
tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

segmentGroupId string

List of Segment Group IDs

serverGroups ApplicationSegmentPRAServerGroupArgs[]

List of Server Group IDs

bypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto ApplicationSegmentPRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace string

(Optional)

description string

(Optional) Description of the application.

domainNames string[]

List of domains and IPs.

doubleEncrypt boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled boolean

Whether this application is enabled or not

healthCheckType string

(Optional)

healthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType string

(Optional)

ipAnchored boolean

(Optional)

isCnameEnabled boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name string

Name of the Privileged Remote Access

passiveHealthEnabled boolean

(Optional)

segmentGroupName string
tcpPortRanges string[]

TCP port ranges used to access the app.

udpPortRanges string[]

UDP port ranges used to access the app.

segment_group_id str

List of Segment Group IDs

server_groups ApplicationSegmentPRAServerGroupArgs]

List of Server Group IDs

bypass_type str

(Optional) Indicates whether users can bypass ZPA to access applications.

common_apps_dto ApplicationSegmentPRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
config_space str

(Optional)

description str

(Optional) Description of the application.

domain_names Sequence[str]

List of domains and IPs.

double_encrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled bool

Whether this application is enabled or not

health_check_type str

(Optional)

health_reporting str

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmp_access_type str

(Optional)

ip_anchored bool

(Optional)

is_cname_enabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name str

Name of the Privileged Remote Access

passive_health_enabled bool

(Optional)

segment_group_name str
tcp_port_ranges Sequence[str]

TCP port ranges used to access the app.

udp_port_ranges Sequence[str]

UDP port ranges used to access the app.

segmentGroupId String

List of Segment Group IDs

serverGroups List<Property Map>

List of Server Group IDs

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto Property Map

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace String

(Optional)

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

Whether this application is enabled or not

healthCheckType String

(Optional)

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String

(Optional)

ipAnchored Boolean

(Optional)

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the Privileged Remote Access

passiveHealthEnabled Boolean

(Optional)

segmentGroupName String
tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

Outputs

All input properties are implicitly available as output properties. Additionally, the ApplicationSegmentPRA resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

Id string

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id str

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

Look up Existing ApplicationSegmentPRA Resource

Get an existing ApplicationSegmentPRA resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ApplicationSegmentPRAState, opts?: CustomResourceOptions): ApplicationSegmentPRA
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        bypass_type: Optional[str] = None,
        common_apps_dto: Optional[_applicationsegment.ApplicationSegmentPRACommonAppsDtoArgs] = None,
        config_space: Optional[str] = None,
        description: Optional[str] = None,
        domain_names: Optional[Sequence[str]] = None,
        double_encrypt: Optional[bool] = None,
        enabled: Optional[bool] = None,
        health_check_type: Optional[str] = None,
        health_reporting: Optional[str] = None,
        icmp_access_type: Optional[str] = None,
        ip_anchored: Optional[bool] = None,
        is_cname_enabled: Optional[bool] = None,
        name: Optional[str] = None,
        passive_health_enabled: Optional[bool] = None,
        segment_group_id: Optional[str] = None,
        segment_group_name: Optional[str] = None,
        server_groups: Optional[Sequence[_applicationsegment.ApplicationSegmentPRAServerGroupArgs]] = None,
        tcp_port_ranges: Optional[Sequence[str]] = None,
        udp_port_ranges: Optional[Sequence[str]] = None) -> ApplicationSegmentPRA
func GetApplicationSegmentPRA(ctx *Context, name string, id IDInput, state *ApplicationSegmentPRAState, opts ...ResourceOption) (*ApplicationSegmentPRA, error)
public static ApplicationSegmentPRA Get(string name, Input<string> id, ApplicationSegmentPRAState? state, CustomResourceOptions? opts = null)
public static ApplicationSegmentPRA get(String name, Output<String> id, ApplicationSegmentPRAState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

CommonAppsDto zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentPRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
ConfigSpace string

(Optional)

Description string

(Optional) Description of the application.

DomainNames List<string>

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

Whether this application is enabled or not

HealthCheckType string

(Optional)

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string

(Optional)

IpAnchored bool

(Optional)

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the Privileged Remote Access

PassiveHealthEnabled bool

(Optional)

SegmentGroupId string

List of Segment Group IDs

SegmentGroupName string
ServerGroups List<zscaler.PulumiPackage.Zpa.ApplicationSegment.Inputs.ApplicationSegmentPRAServerGroupArgs>

List of Server Group IDs

TcpPortRanges List<string>

TCP port ranges used to access the app.

UdpPortRanges List<string>

UDP port ranges used to access the app.

BypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

CommonAppsDto ApplicationSegmentPRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
ConfigSpace string

(Optional)

Description string

(Optional) Description of the application.

DomainNames []string

List of domains and IPs.

DoubleEncrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

Enabled bool

Whether this application is enabled or not

HealthCheckType string

(Optional)

HealthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

IcmpAccessType string

(Optional)

IpAnchored bool

(Optional)

IsCnameEnabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

Name string

Name of the Privileged Remote Access

PassiveHealthEnabled bool

(Optional)

SegmentGroupId string

List of Segment Group IDs

SegmentGroupName string
ServerGroups []ApplicationSegmentPRAServerGroupArgs

List of Server Group IDs

TcpPortRanges []string

TCP port ranges used to access the app.

UdpPortRanges []string

UDP port ranges used to access the app.

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto PRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace String

(Optional)

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

Whether this application is enabled or not

healthCheckType String

(Optional)

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String

(Optional)

ipAnchored Boolean

(Optional)

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the Privileged Remote Access

passiveHealthEnabled Boolean

(Optional)

segmentGroupId String

List of Segment Group IDs

segmentGroupName String
serverGroups List<PRAServerGroupArgs>

List of Server Group IDs

tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

bypassType string

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto ApplicationSegmentPRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace string

(Optional)

description string

(Optional) Description of the application.

domainNames string[]

List of domains and IPs.

doubleEncrypt boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled boolean

Whether this application is enabled or not

healthCheckType string

(Optional)

healthReporting string

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType string

(Optional)

ipAnchored boolean

(Optional)

isCnameEnabled boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name string

Name of the Privileged Remote Access

passiveHealthEnabled boolean

(Optional)

segmentGroupId string

List of Segment Group IDs

segmentGroupName string
serverGroups ApplicationSegmentPRAServerGroupArgs[]

List of Server Group IDs

tcpPortRanges string[]

TCP port ranges used to access the app.

udpPortRanges string[]

UDP port ranges used to access the app.

bypass_type str

(Optional) Indicates whether users can bypass ZPA to access applications.

common_apps_dto ApplicationSegmentPRACommonAppsDtoArgs

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
config_space str

(Optional)

description str

(Optional) Description of the application.

domain_names Sequence[str]

List of domains and IPs.

double_encrypt bool

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled bool

Whether this application is enabled or not

health_check_type str

(Optional)

health_reporting str

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmp_access_type str

(Optional)

ip_anchored bool

(Optional)

is_cname_enabled bool

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name str

Name of the Privileged Remote Access

passive_health_enabled bool

(Optional)

segment_group_id str

List of Segment Group IDs

segment_group_name str
server_groups ApplicationSegmentPRAServerGroupArgs]

List of Server Group IDs

tcp_port_ranges Sequence[str]

TCP port ranges used to access the app.

udp_port_ranges Sequence[str]

UDP port ranges used to access the app.

bypassType String

(Optional) Indicates whether users can bypass ZPA to access applications.

commonAppsDto Property Map

List of applications (e.g., Inspection, Browser Access or Privileged Remote Access)

  • apps_config: - (Required) List of applications to be configured
configSpace String

(Optional)

description String

(Optional) Description of the application.

domainNames List<String>

List of domains and IPs.

doubleEncrypt Boolean

(Optional) Whether Double Encryption is enabled or disabled for the app.

enabled Boolean

Whether this application is enabled or not

healthCheckType String

(Optional)

healthReporting String

(Optional) Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.

icmpAccessType String

(Optional)

ipAnchored Boolean

(Optional)

isCnameEnabled Boolean

(Optional) Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.

name String

Name of the Privileged Remote Access

passiveHealthEnabled Boolean

(Optional)

segmentGroupId String

List of Segment Group IDs

segmentGroupName String
serverGroups List<Property Map>

List of Server Group IDs

tcpPortRanges List<String>

TCP port ranges used to access the app.

udpPortRanges List<String>

UDP port ranges used to access the app.

Supporting Types

ApplicationSegmentPRACommonAppsDto

ApplicationSegmentPRACommonAppsDtoAppsConfig

AllowOptions bool
AppId string
AppTypes List<string>

Indicates the type of application as Privileged Remote Access. Supported value: SECURE_REMOTE_ACCESS

ApplicationPort string

Port for the Privileged Remote Access

ApplicationProtocol string

Protocol for the Privileged Remote Access. Supported values: RDP and SSH

Cname string
ConnectionSecurity string

Parameter required when application_protocol is of type RDP

Description string

(Optional) Description of the application.

Domain string

Domain name of the Privileged Remote Access

Enabled bool

Whether this application is enabled or not

Hidden bool
Id string
LocalDomain string
Name string

Name of the Privileged Remote Access

Portal bool
AllowOptions bool
AppId string
AppTypes []string

Indicates the type of application as Privileged Remote Access. Supported value: SECURE_REMOTE_ACCESS

ApplicationPort string

Port for the Privileged Remote Access

ApplicationProtocol string

Protocol for the Privileged Remote Access. Supported values: RDP and SSH

Cname string
ConnectionSecurity string

Parameter required when application_protocol is of type RDP

Description string

(Optional) Description of the application.

Domain string

Domain name of the Privileged Remote Access

Enabled bool

Whether this application is enabled or not

Hidden bool
Id string
LocalDomain string
Name string

Name of the Privileged Remote Access

Portal bool
allowOptions Boolean
appId String
appTypes List<String>

Indicates the type of application as Privileged Remote Access. Supported value: SECURE_REMOTE_ACCESS

applicationPort String

Port for the Privileged Remote Access

applicationProtocol String

Protocol for the Privileged Remote Access. Supported values: RDP and SSH

cname String
connectionSecurity String

Parameter required when application_protocol is of type RDP

description String

(Optional) Description of the application.

domain String

Domain name of the Privileged Remote Access

enabled Boolean

Whether this application is enabled or not

hidden Boolean
id String
localDomain String
name String

Name of the Privileged Remote Access

portal Boolean
allowOptions boolean
appId string
appTypes string[]

Indicates the type of application as Privileged Remote Access. Supported value: SECURE_REMOTE_ACCESS

applicationPort string

Port for the Privileged Remote Access

applicationProtocol string

Protocol for the Privileged Remote Access. Supported values: RDP and SSH

cname string
connectionSecurity string

Parameter required when application_protocol is of type RDP

description string

(Optional) Description of the application.

domain string

Domain name of the Privileged Remote Access

enabled boolean

Whether this application is enabled or not

hidden boolean
id string
localDomain string
name string

Name of the Privileged Remote Access

portal boolean
allow_options bool
app_id str
app_types Sequence[str]

Indicates the type of application as Privileged Remote Access. Supported value: SECURE_REMOTE_ACCESS

application_port str

Port for the Privileged Remote Access

application_protocol str

Protocol for the Privileged Remote Access. Supported values: RDP and SSH

cname str
connection_security str

Parameter required when application_protocol is of type RDP

description str

(Optional) Description of the application.

domain str

Domain name of the Privileged Remote Access

enabled bool

Whether this application is enabled or not

hidden bool
id str
local_domain str
name str

Name of the Privileged Remote Access

portal bool
allowOptions Boolean
appId String
appTypes List<String>

Indicates the type of application as Privileged Remote Access. Supported value: SECURE_REMOTE_ACCESS

applicationPort String

Port for the Privileged Remote Access

applicationProtocol String

Protocol for the Privileged Remote Access. Supported values: RDP and SSH

cname String
connectionSecurity String

Parameter required when application_protocol is of type RDP

description String

(Optional) Description of the application.

domain String

Domain name of the Privileged Remote Access

enabled Boolean

Whether this application is enabled or not

hidden Boolean
id String
localDomain String
name String

Name of the Privileged Remote Access

portal Boolean

ApplicationSegmentPRAServerGroup

Ids List<string>
Ids []string
ids List<String>
ids string[]
ids Sequence[str]
ids List<String>

Import

Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZPA configurations into Terraform-compliant HashiCorp Configuration Language. Visit Application Segment can be imported by using <APPLICATION SEGMENT ID> or <APPLICATION SEGMENT NAME> as the import ID.

 $ pulumi import zpa:ApplicationSegment/applicationSegmentPRA:ApplicationSegmentPRA example <application_segment_id>

or

 $ pulumi import zpa:ApplicationSegment/applicationSegmentPRA:ApplicationSegmentPRA example <application_segment_name>

Package Details

Repository
zpa zscaler/pulumi-zpa
License
MIT
Notes

This Pulumi package is based on the zpa Terraform Provider.