Zscaler Private Access v1.0.2 published on Friday, Jun 20, 2025 by Zscaler
zpa.ApplicationSegmentPRA
The zpa_application_segment_pra resource creates an application segment for Privileged Remote Access in the Zscaler Private Access cloud. This resource can then be referenced in an access policy rule, access policy timeout rule, access policy client forwarding rule and inspection policy. This resource supports Privileged Remote Access for both RDP and SSH.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";
const _this = new zpa.ApplicationSegmentPRA("this", {
description: "PRA_Example",
enabled: true,
healthReporting: "ON_ACCESS",
bypassType: "NEVER",
isCnameEnabled: true,
tcpPortRanges: [
"22",
"22",
"3389",
"3389",
],
domainNames: [
"ssh_pra.example.com",
"rdp_pra.example.com",
],
segmentGroupId: zpa_segment_group["this"].id,
serverGroups: [{
ids: [zpa_server_group["this"].id],
}],
commonAppsDtos: [{
appsConfigs: [
{
domain: "ssh_pra.example.com",
applicationProtocol: "SSH",
applicationPort: "22",
enabled: true,
appTypes: ["SECURE_REMOTE_ACCESS"],
},
{
domain: "rdp_pra.example.com",
applicationProtocol: "RDP",
connectionSecurity: "ANY",
applicationPort: "3389",
enabled: true,
appTypes: ["SECURE_REMOTE_ACCESS"],
},
],
}],
});
import pulumi
import zscaler_pulumi_zpa as zpa
this = zpa.ApplicationSegmentPRA("this",
description="PRA_Example",
enabled=True,
health_reporting="ON_ACCESS",
bypass_type="NEVER",
is_cname_enabled=True,
tcp_port_ranges=[
"22",
"22",
"3389",
"3389",
],
domain_names=[
"ssh_pra.example.com",
"rdp_pra.example.com",
],
segment_group_id=zpa_segment_group["this"]["id"],
server_groups=[{
"ids": [zpa_server_group["this"]["id"]],
}],
common_apps_dtos=[{
"apps_configs": [
{
"domain": "ssh_pra.example.com",
"application_protocol": "SSH",
"application_port": "22",
"enabled": True,
"app_types": ["SECURE_REMOTE_ACCESS"],
},
{
"domain": "rdp_pra.example.com",
"application_protocol": "RDP",
"connection_security": "ANY",
"application_port": "3389",
"enabled": True,
"app_types": ["SECURE_REMOTE_ACCESS"],
},
],
}])
package main
import (
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := zpa.NewApplicationSegmentPRA(ctx, "this", &zpa.ApplicationSegmentPRAArgs{
Description: pulumi.String("PRA_Example"),
Enabled: pulumi.Bool(true),
HealthReporting: pulumi.String("ON_ACCESS"),
BypassType: pulumi.String("NEVER"),
IsCnameEnabled: pulumi.Bool(true),
TcpPortRanges: pulumi.StringArray{
pulumi.String("22"),
pulumi.String("22"),
pulumi.String("3389"),
pulumi.String("3389"),
},
DomainNames: pulumi.StringArray{
pulumi.String("ssh_pra.example.com"),
pulumi.String("rdp_pra.example.com"),
},
SegmentGroupId: pulumi.Any(zpa_segment_group.This.Id),
ServerGroups: zpa.ApplicationSegmentPRAServerGroupArray{
&zpa.ApplicationSegmentPRAServerGroupArgs{
Ids: pulumi.StringArray{
zpa_server_group.This.Id,
},
},
},
CommonAppsDtos: zpa.ApplicationSegmentPRACommonAppsDtoArray{
&zpa.ApplicationSegmentPRACommonAppsDtoArgs{
AppsConfigs: zpa.ApplicationSegmentPRACommonAppsDtoAppsConfigArray{
&zpa.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs{
Domain: pulumi.String("ssh_pra.example.com"),
ApplicationProtocol: pulumi.String("SSH"),
ApplicationPort: pulumi.String("22"),
Enabled: pulumi.Bool(true),
AppTypes: pulumi.StringArray{
pulumi.String("SECURE_REMOTE_ACCESS"),
},
},
&zpa.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs{
Domain: pulumi.String("rdp_pra.example.com"),
ApplicationProtocol: pulumi.String("RDP"),
ConnectionSecurity: pulumi.String("ANY"),
ApplicationPort: pulumi.String("3389"),
Enabled: pulumi.Bool(true),
AppTypes: pulumi.StringArray{
pulumi.String("SECURE_REMOTE_ACCESS"),
},
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;
return await Deployment.RunAsync(() =>
{
var @this = new Zpa.ApplicationSegmentPRA("this", new()
{
Description = "PRA_Example",
Enabled = true,
HealthReporting = "ON_ACCESS",
BypassType = "NEVER",
IsCnameEnabled = true,
TcpPortRanges = new[]
{
"22",
"22",
"3389",
"3389",
},
DomainNames = new[]
{
"ssh_pra.example.com",
"rdp_pra.example.com",
},
SegmentGroupId = zpa_segment_group.This.Id,
ServerGroups = new[]
{
new Zpa.Inputs.ApplicationSegmentPRAServerGroupArgs
{
Ids = new[]
{
zpa_server_group.This.Id,
},
},
},
CommonAppsDtos = new[]
{
new Zpa.Inputs.ApplicationSegmentPRACommonAppsDtoArgs
{
AppsConfigs = new[]
{
new Zpa.Inputs.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs
{
Domain = "ssh_pra.example.com",
ApplicationProtocol = "SSH",
ApplicationPort = "22",
Enabled = true,
AppTypes = new[]
{
"SECURE_REMOTE_ACCESS",
},
},
new Zpa.Inputs.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs
{
Domain = "rdp_pra.example.com",
ApplicationProtocol = "RDP",
ConnectionSecurity = "ANY",
ApplicationPort = "3389",
Enabled = true,
AppTypes = new[]
{
"SECURE_REMOTE_ACCESS",
},
},
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ApplicationSegmentPRA;
import com.pulumi.zpa.ApplicationSegmentPRAArgs;
import com.pulumi.zpa.inputs.ApplicationSegmentPRAServerGroupArgs;
import com.pulumi.zpa.inputs.ApplicationSegmentPRACommonAppsDtoArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var this_ = new ApplicationSegmentPRA("this", ApplicationSegmentPRAArgs.builder()
.description("PRA_Example")
.enabled(true)
.healthReporting("ON_ACCESS")
.bypassType("NEVER")
.isCnameEnabled(true)
.tcpPortRanges(
"22",
"22",
"3389",
"3389")
.domainNames(
"ssh_pra.example.com",
"rdp_pra.example.com")
.segmentGroupId(zpa_segment_group.this().id())
.serverGroups(ApplicationSegmentPRAServerGroupArgs.builder()
.ids(zpa_server_group.this().id())
.build())
.commonAppsDtos(ApplicationSegmentPRACommonAppsDtoArgs.builder()
.appsConfigs(
ApplicationSegmentPRACommonAppsDtoAppsConfigArgs.builder()
.domain("ssh_pra.example.com")
.applicationProtocol("SSH")
.applicationPort("22")
.enabled(true)
.appTypes("SECURE_REMOTE_ACCESS")
.build(),
ApplicationSegmentPRACommonAppsDtoAppsConfigArgs.builder()
.domain("rdp_pra.example.com")
.applicationProtocol("RDP")
.connectionSecurity("ANY")
.applicationPort("3389")
.enabled(true)
.appTypes("SECURE_REMOTE_ACCESS")
.build())
.build())
.build());
}
}
resources:
this:
type: zpa:ApplicationSegmentPRA
properties:
description: PRA_Example
enabled: true
healthReporting: ON_ACCESS
bypassType: NEVER
isCnameEnabled: true
tcpPortRanges:
- '22'
- '22'
- '3389'
- '3389'
domainNames:
- ssh_pra.example.com
- rdp_pra.example.com
segmentGroupId: ${zpa_segment_group.this.id}
serverGroups:
- ids:
- ${zpa_server_group.this.id}
commonAppsDtos:
- appsConfigs:
- domain: ssh_pra.example.com
applicationProtocol: SSH
applicationPort: '22'
enabled: true
appTypes:
- SECURE_REMOTE_ACCESS
- domain: rdp_pra.example.com
applicationProtocol: RDP
connectionSecurity: ANY
applicationPort: '3389'
enabled: true
appTypes:
- SECURE_REMOTE_ACCESS
Create ApplicationSegmentPRA Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ApplicationSegmentPRA(name: string, args: ApplicationSegmentPRAArgs, opts?: CustomResourceOptions);@overload
def ApplicationSegmentPRA(resource_name: str,
args: ApplicationSegmentPRAArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ApplicationSegmentPRA(resource_name: str,
opts: Optional[ResourceOptions] = None,
domain_names: Optional[Sequence[str]] = None,
segment_group_id: Optional[str] = None,
double_encrypt: Optional[bool] = None,
tcp_port_ranges: Optional[Sequence[str]] = None,
description: Optional[str] = None,
common_apps_dtos: Optional[Sequence[ApplicationSegmentPRACommonAppsDtoArgs]] = None,
bypass_on_reauth: Optional[bool] = None,
enabled: Optional[bool] = None,
fqdn_dns_check: Optional[bool] = None,
health_check_type: Optional[str] = None,
health_reporting: Optional[str] = None,
icmp_access_type: Optional[str] = None,
ip_anchored: Optional[bool] = None,
is_cname_enabled: Optional[bool] = None,
config_space: Optional[str] = None,
name: Optional[str] = None,
is_incomplete_dr_config: Optional[bool] = None,
passive_health_enabled: Optional[bool] = None,
bypass_type: Optional[str] = None,
select_connector_close_to_app: Optional[bool] = None,
server_groups: Optional[Sequence[ApplicationSegmentPRAServerGroupArgs]] = None,
tcp_keep_alive: Optional[str] = None,
tcp_port_range: Optional[Sequence[ApplicationSegmentPRATcpPortRangeArgs]] = None,
microtenant_id: Optional[str] = None,
udp_port_range: Optional[Sequence[ApplicationSegmentPRAUdpPortRangeArgs]] = None,
udp_port_ranges: Optional[Sequence[str]] = None,
use_in_dr_mode: Optional[bool] = None)func NewApplicationSegmentPRA(ctx *Context, name string, args ApplicationSegmentPRAArgs, opts ...ResourceOption) (*ApplicationSegmentPRA, error)public ApplicationSegmentPRA(string name, ApplicationSegmentPRAArgs args, CustomResourceOptions? opts = null)
public ApplicationSegmentPRA(String name, ApplicationSegmentPRAArgs args)
public ApplicationSegmentPRA(String name, ApplicationSegmentPRAArgs args, CustomResourceOptions options)
type: zpa:ApplicationSegmentPRA
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ApplicationSegmentPRAArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ApplicationSegmentPRAArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ApplicationSegmentPRAArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ApplicationSegmentPRAArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ApplicationSegmentPRAArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var applicationSegmentPRAResource = new Zpa.ApplicationSegmentPRA("applicationSegmentPRAResource", new()
{
DomainNames = new[]
{
"string",
},
SegmentGroupId = "string",
DoubleEncrypt = false,
TcpPortRanges = new[]
{
"string",
},
Description = "string",
CommonAppsDtos = new[]
{
new Zpa.Inputs.ApplicationSegmentPRACommonAppsDtoArgs
{
AppsConfigs = new[]
{
new Zpa.Inputs.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs
{
AppId = "string",
AppTypes = new[]
{
"string",
},
ApplicationPort = "string",
ApplicationProtocol = "string",
ConnectionSecurity = "string",
Domain = "string",
Enabled = false,
Name = "string",
PraAppId = "string",
},
},
},
},
BypassOnReauth = false,
Enabled = false,
FqdnDnsCheck = false,
HealthCheckType = "string",
HealthReporting = "string",
IcmpAccessType = "string",
IpAnchored = false,
IsCnameEnabled = false,
ConfigSpace = "string",
Name = "string",
IsIncompleteDrConfig = false,
PassiveHealthEnabled = false,
BypassType = "string",
SelectConnectorCloseToApp = false,
ServerGroups = new[]
{
new Zpa.Inputs.ApplicationSegmentPRAServerGroupArgs
{
Ids = new[]
{
"string",
},
},
},
TcpKeepAlive = "string",
TcpPortRange = new[]
{
new Zpa.Inputs.ApplicationSegmentPRATcpPortRangeArgs
{
From = "string",
To = "string",
},
},
MicrotenantId = "string",
UdpPortRange = new[]
{
new Zpa.Inputs.ApplicationSegmentPRAUdpPortRangeArgs
{
From = "string",
To = "string",
},
},
UdpPortRanges = new[]
{
"string",
},
UseInDrMode = false,
});
example, err := zpa.NewApplicationSegmentPRA(ctx, "applicationSegmentPRAResource", &zpa.ApplicationSegmentPRAArgs{
DomainNames: pulumi.StringArray{
pulumi.String("string"),
},
SegmentGroupId: pulumi.String("string"),
DoubleEncrypt: pulumi.Bool(false),
TcpPortRanges: pulumi.StringArray{
pulumi.String("string"),
},
Description: pulumi.String("string"),
CommonAppsDtos: zpa.ApplicationSegmentPRACommonAppsDtoArray{
&zpa.ApplicationSegmentPRACommonAppsDtoArgs{
AppsConfigs: zpa.ApplicationSegmentPRACommonAppsDtoAppsConfigArray{
&zpa.ApplicationSegmentPRACommonAppsDtoAppsConfigArgs{
AppId: pulumi.String("string"),
AppTypes: pulumi.StringArray{
pulumi.String("string"),
},
ApplicationPort: pulumi.String("string"),
ApplicationProtocol: pulumi.String("string"),
ConnectionSecurity: pulumi.String("string"),
Domain: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Name: pulumi.String("string"),
PraAppId: pulumi.String("string"),
},
},
},
},
BypassOnReauth: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
FqdnDnsCheck: pulumi.Bool(false),
HealthCheckType: pulumi.String("string"),
HealthReporting: pulumi.String("string"),
IcmpAccessType: pulumi.String("string"),
IpAnchored: pulumi.Bool(false),
IsCnameEnabled: pulumi.Bool(false),
ConfigSpace: pulumi.String("string"),
Name: pulumi.String("string"),
IsIncompleteDrConfig: pulumi.Bool(false),
PassiveHealthEnabled: pulumi.Bool(false),
BypassType: pulumi.String("string"),
SelectConnectorCloseToApp: pulumi.Bool(false),
ServerGroups: zpa.ApplicationSegmentPRAServerGroupArray{
&zpa.ApplicationSegmentPRAServerGroupArgs{
Ids: pulumi.StringArray{
pulumi.String("string"),
},
},
},
TcpKeepAlive: pulumi.String("string"),
TcpPortRange: zpa.ApplicationSegmentPRATcpPortRangeArray{
&zpa.ApplicationSegmentPRATcpPortRangeArgs{
From: pulumi.String("string"),
To: pulumi.String("string"),
},
},
MicrotenantId: pulumi.String("string"),
UdpPortRange: zpa.ApplicationSegmentPRAUdpPortRangeArray{
&zpa.ApplicationSegmentPRAUdpPortRangeArgs{
From: pulumi.String("string"),
To: pulumi.String("string"),
},
},
UdpPortRanges: pulumi.StringArray{
pulumi.String("string"),
},
UseInDrMode: pulumi.Bool(false),
})
var applicationSegmentPRAResource = new ApplicationSegmentPRA("applicationSegmentPRAResource", ApplicationSegmentPRAArgs.builder()
.domainNames("string")
.segmentGroupId("string")
.doubleEncrypt(false)
.tcpPortRanges("string")
.description("string")
.commonAppsDtos(ApplicationSegmentPRACommonAppsDtoArgs.builder()
.appsConfigs(ApplicationSegmentPRACommonAppsDtoAppsConfigArgs.builder()
.appId("string")
.appTypes("string")
.applicationPort("string")
.applicationProtocol("string")
.connectionSecurity("string")
.domain("string")
.enabled(false)
.name("string")
.praAppId("string")
.build())
.build())
.bypassOnReauth(false)
.enabled(false)
.fqdnDnsCheck(false)
.healthCheckType("string")
.healthReporting("string")
.icmpAccessType("string")
.ipAnchored(false)
.isCnameEnabled(false)
.configSpace("string")
.name("string")
.isIncompleteDrConfig(false)
.passiveHealthEnabled(false)
.bypassType("string")
.selectConnectorCloseToApp(false)
.serverGroups(ApplicationSegmentPRAServerGroupArgs.builder()
.ids("string")
.build())
.tcpKeepAlive("string")
.tcpPortRange(ApplicationSegmentPRATcpPortRangeArgs.builder()
.from("string")
.to("string")
.build())
.microtenantId("string")
.udpPortRange(ApplicationSegmentPRAUdpPortRangeArgs.builder()
.from("string")
.to("string")
.build())
.udpPortRanges("string")
.useInDrMode(false)
.build());
application_segment_pra_resource = zpa.ApplicationSegmentPRA("applicationSegmentPRAResource",
domain_names=["string"],
segment_group_id="string",
double_encrypt=False,
tcp_port_ranges=["string"],
description="string",
common_apps_dtos=[{
"apps_configs": [{
"app_id": "string",
"app_types": ["string"],
"application_port": "string",
"application_protocol": "string",
"connection_security": "string",
"domain": "string",
"enabled": False,
"name": "string",
"pra_app_id": "string",
}],
}],
bypass_on_reauth=False,
enabled=False,
fqdn_dns_check=False,
health_check_type="string",
health_reporting="string",
icmp_access_type="string",
ip_anchored=False,
is_cname_enabled=False,
config_space="string",
name="string",
is_incomplete_dr_config=False,
passive_health_enabled=False,
bypass_type="string",
select_connector_close_to_app=False,
server_groups=[{
"ids": ["string"],
}],
tcp_keep_alive="string",
tcp_port_range=[{
"from_": "string",
"to": "string",
}],
microtenant_id="string",
udp_port_range=[{
"from_": "string",
"to": "string",
}],
udp_port_ranges=["string"],
use_in_dr_mode=False)
const applicationSegmentPRAResource = new zpa.ApplicationSegmentPRA("applicationSegmentPRAResource", {
domainNames: ["string"],
segmentGroupId: "string",
doubleEncrypt: false,
tcpPortRanges: ["string"],
description: "string",
commonAppsDtos: [{
appsConfigs: [{
appId: "string",
appTypes: ["string"],
applicationPort: "string",
applicationProtocol: "string",
connectionSecurity: "string",
domain: "string",
enabled: false,
name: "string",
praAppId: "string",
}],
}],
bypassOnReauth: false,
enabled: false,
fqdnDnsCheck: false,
healthCheckType: "string",
healthReporting: "string",
icmpAccessType: "string",
ipAnchored: false,
isCnameEnabled: false,
configSpace: "string",
name: "string",
isIncompleteDrConfig: false,
passiveHealthEnabled: false,
bypassType: "string",
selectConnectorCloseToApp: false,
serverGroups: [{
ids: ["string"],
}],
tcpKeepAlive: "string",
tcpPortRange: [{
from: "string",
to: "string",
}],
microtenantId: "string",
udpPortRange: [{
from: "string",
to: "string",
}],
udpPortRanges: ["string"],
useInDrMode: false,
});
type: zpa:ApplicationSegmentPRA
properties:
bypassOnReauth: false
bypassType: string
commonAppsDtos:
- appsConfigs:
- appId: string
appTypes:
- string
applicationPort: string
applicationProtocol: string
connectionSecurity: string
domain: string
enabled: false
name: string
praAppId: string
configSpace: string
description: string
domainNames:
- string
doubleEncrypt: false
enabled: false
fqdnDnsCheck: false
healthCheckType: string
healthReporting: string
icmpAccessType: string
ipAnchored: false
isCnameEnabled: false
isIncompleteDrConfig: false
microtenantId: string
name: string
passiveHealthEnabled: false
segmentGroupId: string
selectConnectorCloseToApp: false
serverGroups:
- ids:
- string
tcpKeepAlive: string
tcpPortRange:
- from: string
to: string
tcpPortRanges:
- string
udpPortRange:
- from: string
to: string
udpPortRanges:
- string
useInDrMode: false
ApplicationSegmentPRA Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ApplicationSegmentPRA resource accepts the following input properties:
- Domain
Names List<string> - List of domains and IPs.
- Segment
Group stringId - Bypass
On boolReauth - Bypass
Type string - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- Common
Apps List<zscaler.Dtos Pulumi Package. Zpa. Inputs. Application Segment PRACommon Apps Dto> - Config
Space string - Description string
- Description of the application.
- Double
Encrypt bool - Whether Double Encryption is enabled or disabled for the app.
- Enabled bool
- Fqdn
Dns boolCheck - Health
Check stringType - Health
Reporting string - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- Icmp
Access stringType - Ip
Anchored bool - Is
Cname boolEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- Is
Incomplete boolDr Config - Microtenant
Id string - Name string
- Name of the application.
- Passive
Health boolEnabled - Select
Connector boolClose To App - Server
Groups List<zscaler.Pulumi Package. Zpa. Inputs. Application Segment PRAServer Group> - Tcp
Keep stringAlive - Tcp
Port List<zscaler.Range Pulumi Package. Zpa. Inputs. Application Segment PRATcp Port Range> - tcp port range
- Tcp
Port List<string>Ranges - TCP port ranges used to access the app.
- Udp
Port List<zscaler.Range Pulumi Package. Zpa. Inputs. Application Segment PRAUdp Port Range> - udp port range
- Udp
Port List<string>Ranges - UDP port ranges used to access the app.
- Use
In boolDr Mode
- Domain
Names []string - List of domains and IPs.
- Segment
Group stringId - Bypass
On boolReauth - Bypass
Type string - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- Common
Apps []ApplicationDtos Segment PRACommon Apps Dto Args - Config
Space string - Description string
- Description of the application.
- Double
Encrypt bool - Whether Double Encryption is enabled or disabled for the app.
- Enabled bool
- Fqdn
Dns boolCheck - Health
Check stringType - Health
Reporting string - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- Icmp
Access stringType - Ip
Anchored bool - Is
Cname boolEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- Is
Incomplete boolDr Config - Microtenant
Id string - Name string
- Name of the application.
- Passive
Health boolEnabled - Select
Connector boolClose To App - Server
Groups []ApplicationSegment PRAServer Group Args - Tcp
Keep stringAlive - Tcp
Port []ApplicationRange Segment PRATcp Port Range Args - tcp port range
- Tcp
Port []stringRanges - TCP port ranges used to access the app.
- Udp
Port []ApplicationRange Segment PRAUdp Port Range Args - udp port range
- Udp
Port []stringRanges - UDP port ranges used to access the app.
- Use
In boolDr Mode
- domain
Names List<String> - List of domains and IPs.
- segment
Group StringId - bypass
On BooleanReauth - bypass
Type String - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- common
Apps List<ApplicationDtos Segment PRACommon Apps Dto> - config
Space String - description String
- Description of the application.
- double
Encrypt Boolean - Whether Double Encryption is enabled or disabled for the app.
- enabled Boolean
- fqdn
Dns BooleanCheck - health
Check StringType - health
Reporting String - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- icmp
Access StringType - ip
Anchored Boolean - is
Cname BooleanEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- is
Incomplete BooleanDr Config - microtenant
Id String - name String
- Name of the application.
- passive
Health BooleanEnabled - select
Connector BooleanClose To App - server
Groups List<ApplicationSegment PRAServer Group> - tcp
Keep StringAlive - tcp
Port List<ApplicationRange Segment PRATcp Port Range> - tcp port range
- tcp
Port List<String>Ranges - TCP port ranges used to access the app.
- udp
Port List<ApplicationRange Segment PRAUdp Port Range> - udp port range
- udp
Port List<String>Ranges - UDP port ranges used to access the app.
- use
In BooleanDr Mode
- domain
Names string[] - List of domains and IPs.
- segment
Group stringId - bypass
On booleanReauth - bypass
Type string - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- common
Apps ApplicationDtos Segment PRACommon Apps Dto[] - config
Space string - description string
- Description of the application.
- double
Encrypt boolean - Whether Double Encryption is enabled or disabled for the app.
- enabled boolean
- fqdn
Dns booleanCheck - health
Check stringType - health
Reporting string - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- icmp
Access stringType - ip
Anchored boolean - is
Cname booleanEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- is
Incomplete booleanDr Config - microtenant
Id string - name string
- Name of the application.
- passive
Health booleanEnabled - select
Connector booleanClose To App - server
Groups ApplicationSegment PRAServer Group[] - tcp
Keep stringAlive - tcp
Port ApplicationRange Segment PRATcp Port Range[] - tcp port range
- tcp
Port string[]Ranges - TCP port ranges used to access the app.
- udp
Port ApplicationRange Segment PRAUdp Port Range[] - udp port range
- udp
Port string[]Ranges - UDP port ranges used to access the app.
- use
In booleanDr Mode
- domain_
names Sequence[str] - List of domains and IPs.
- segment_
group_ strid - bypass_
on_ boolreauth - bypass_
type str - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- common_
apps_ Sequence[Applicationdtos Segment PRACommon Apps Dto Args] - config_
space str - description str
- Description of the application.
- double_
encrypt bool - Whether Double Encryption is enabled or disabled for the app.
- enabled bool
- fqdn_
dns_ boolcheck - health_
check_ strtype - health_
reporting str - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- icmp_
access_ strtype - ip_
anchored bool - is_
cname_ boolenabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- is_
incomplete_ booldr_ config - microtenant_
id str - name str
- Name of the application.
- passive_
health_ boolenabled - select_
connector_ boolclose_ to_ app - server_
groups Sequence[ApplicationSegment PRAServer Group Args] - tcp_
keep_ stralive - tcp_
port_ Sequence[Applicationrange Segment PRATcp Port Range Args] - tcp port range
- tcp_
port_ Sequence[str]ranges - TCP port ranges used to access the app.
- udp_
port_ Sequence[Applicationrange Segment PRAUdp Port Range Args] - udp port range
- udp_
port_ Sequence[str]ranges - UDP port ranges used to access the app.
- use_
in_ booldr_ mode
- domain
Names List<String> - List of domains and IPs.
- segment
Group StringId - bypass
On BooleanReauth - bypass
Type String - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- common
Apps List<Property Map>Dtos - config
Space String - description String
- Description of the application.
- double
Encrypt Boolean - Whether Double Encryption is enabled or disabled for the app.
- enabled Boolean
- fqdn
Dns BooleanCheck - health
Check StringType - health
Reporting String - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- icmp
Access StringType - ip
Anchored Boolean - is
Cname BooleanEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- is
Incomplete BooleanDr Config - microtenant
Id String - name String
- Name of the application.
- passive
Health BooleanEnabled - select
Connector BooleanClose To App - server
Groups List<Property Map> - tcp
Keep StringAlive - tcp
Port List<Property Map>Range - tcp port range
- tcp
Port List<String>Ranges - TCP port ranges used to access the app.
- udp
Port List<Property Map>Range - udp port range
- udp
Port List<String>Ranges - UDP port ranges used to access the app.
- use
In BooleanDr Mode
Outputs
All input properties are implicitly available as output properties. Additionally, the ApplicationSegmentPRA resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing ApplicationSegmentPRA Resource
Get an existing ApplicationSegmentPRA resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ApplicationSegmentPRAState, opts?: CustomResourceOptions): ApplicationSegmentPRA@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
bypass_on_reauth: Optional[bool] = None,
bypass_type: Optional[str] = None,
common_apps_dtos: Optional[Sequence[ApplicationSegmentPRACommonAppsDtoArgs]] = None,
config_space: Optional[str] = None,
description: Optional[str] = None,
domain_names: Optional[Sequence[str]] = None,
double_encrypt: Optional[bool] = None,
enabled: Optional[bool] = None,
fqdn_dns_check: Optional[bool] = None,
health_check_type: Optional[str] = None,
health_reporting: Optional[str] = None,
icmp_access_type: Optional[str] = None,
ip_anchored: Optional[bool] = None,
is_cname_enabled: Optional[bool] = None,
is_incomplete_dr_config: Optional[bool] = None,
microtenant_id: Optional[str] = None,
name: Optional[str] = None,
passive_health_enabled: Optional[bool] = None,
segment_group_id: Optional[str] = None,
select_connector_close_to_app: Optional[bool] = None,
server_groups: Optional[Sequence[ApplicationSegmentPRAServerGroupArgs]] = None,
tcp_keep_alive: Optional[str] = None,
tcp_port_range: Optional[Sequence[ApplicationSegmentPRATcpPortRangeArgs]] = None,
tcp_port_ranges: Optional[Sequence[str]] = None,
udp_port_range: Optional[Sequence[ApplicationSegmentPRAUdpPortRangeArgs]] = None,
udp_port_ranges: Optional[Sequence[str]] = None,
use_in_dr_mode: Optional[bool] = None) -> ApplicationSegmentPRAfunc GetApplicationSegmentPRA(ctx *Context, name string, id IDInput, state *ApplicationSegmentPRAState, opts ...ResourceOption) (*ApplicationSegmentPRA, error)public static ApplicationSegmentPRA Get(string name, Input<string> id, ApplicationSegmentPRAState? state, CustomResourceOptions? opts = null)public static ApplicationSegmentPRA get(String name, Output<String> id, ApplicationSegmentPRAState state, CustomResourceOptions options)resources: _: type: zpa:ApplicationSegmentPRA get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Bypass
On boolReauth - Bypass
Type string - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- Common
Apps List<zscaler.Dtos Pulumi Package. Zpa. Inputs. Application Segment PRACommon Apps Dto> - Config
Space string - Description string
- Description of the application.
- Domain
Names List<string> - List of domains and IPs.
- Double
Encrypt bool - Whether Double Encryption is enabled or disabled for the app.
- Enabled bool
- Fqdn
Dns boolCheck - Health
Check stringType - Health
Reporting string - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- Icmp
Access stringType - Ip
Anchored bool - Is
Cname boolEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- Is
Incomplete boolDr Config - Microtenant
Id string - Name string
- Name of the application.
- Passive
Health boolEnabled - Segment
Group stringId - Select
Connector boolClose To App - Server
Groups List<zscaler.Pulumi Package. Zpa. Inputs. Application Segment PRAServer Group> - Tcp
Keep stringAlive - Tcp
Port List<zscaler.Range Pulumi Package. Zpa. Inputs. Application Segment PRATcp Port Range> - tcp port range
- Tcp
Port List<string>Ranges - TCP port ranges used to access the app.
- Udp
Port List<zscaler.Range Pulumi Package. Zpa. Inputs. Application Segment PRAUdp Port Range> - udp port range
- Udp
Port List<string>Ranges - UDP port ranges used to access the app.
- Use
In boolDr Mode
- Bypass
On boolReauth - Bypass
Type string - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- Common
Apps []ApplicationDtos Segment PRACommon Apps Dto Args - Config
Space string - Description string
- Description of the application.
- Domain
Names []string - List of domains and IPs.
- Double
Encrypt bool - Whether Double Encryption is enabled or disabled for the app.
- Enabled bool
- Fqdn
Dns boolCheck - Health
Check stringType - Health
Reporting string - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- Icmp
Access stringType - Ip
Anchored bool - Is
Cname boolEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- Is
Incomplete boolDr Config - Microtenant
Id string - Name string
- Name of the application.
- Passive
Health boolEnabled - Segment
Group stringId - Select
Connector boolClose To App - Server
Groups []ApplicationSegment PRAServer Group Args - Tcp
Keep stringAlive - Tcp
Port []ApplicationRange Segment PRATcp Port Range Args - tcp port range
- Tcp
Port []stringRanges - TCP port ranges used to access the app.
- Udp
Port []ApplicationRange Segment PRAUdp Port Range Args - udp port range
- Udp
Port []stringRanges - UDP port ranges used to access the app.
- Use
In boolDr Mode
- bypass
On BooleanReauth - bypass
Type String - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- common
Apps List<ApplicationDtos Segment PRACommon Apps Dto> - config
Space String - description String
- Description of the application.
- domain
Names List<String> - List of domains and IPs.
- double
Encrypt Boolean - Whether Double Encryption is enabled or disabled for the app.
- enabled Boolean
- fqdn
Dns BooleanCheck - health
Check StringType - health
Reporting String - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- icmp
Access StringType - ip
Anchored Boolean - is
Cname BooleanEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- is
Incomplete BooleanDr Config - microtenant
Id String - name String
- Name of the application.
- passive
Health BooleanEnabled - segment
Group StringId - select
Connector BooleanClose To App - server
Groups List<ApplicationSegment PRAServer Group> - tcp
Keep StringAlive - tcp
Port List<ApplicationRange Segment PRATcp Port Range> - tcp port range
- tcp
Port List<String>Ranges - TCP port ranges used to access the app.
- udp
Port List<ApplicationRange Segment PRAUdp Port Range> - udp port range
- udp
Port List<String>Ranges - UDP port ranges used to access the app.
- use
In BooleanDr Mode
- bypass
On booleanReauth - bypass
Type string - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- common
Apps ApplicationDtos Segment PRACommon Apps Dto[] - config
Space string - description string
- Description of the application.
- domain
Names string[] - List of domains and IPs.
- double
Encrypt boolean - Whether Double Encryption is enabled or disabled for the app.
- enabled boolean
- fqdn
Dns booleanCheck - health
Check stringType - health
Reporting string - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- icmp
Access stringType - ip
Anchored boolean - is
Cname booleanEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- is
Incomplete booleanDr Config - microtenant
Id string - name string
- Name of the application.
- passive
Health booleanEnabled - segment
Group stringId - select
Connector booleanClose To App - server
Groups ApplicationSegment PRAServer Group[] - tcp
Keep stringAlive - tcp
Port ApplicationRange Segment PRATcp Port Range[] - tcp port range
- tcp
Port string[]Ranges - TCP port ranges used to access the app.
- udp
Port ApplicationRange Segment PRAUdp Port Range[] - udp port range
- udp
Port string[]Ranges - UDP port ranges used to access the app.
- use
In booleanDr Mode
- bypass_
on_ boolreauth - bypass_
type str - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- common_
apps_ Sequence[Applicationdtos Segment PRACommon Apps Dto Args] - config_
space str - description str
- Description of the application.
- domain_
names Sequence[str] - List of domains and IPs.
- double_
encrypt bool - Whether Double Encryption is enabled or disabled for the app.
- enabled bool
- fqdn_
dns_ boolcheck - health_
check_ strtype - health_
reporting str - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- icmp_
access_ strtype - ip_
anchored bool - is_
cname_ boolenabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- is_
incomplete_ booldr_ config - microtenant_
id str - name str
- Name of the application.
- passive_
health_ boolenabled - segment_
group_ strid - select_
connector_ boolclose_ to_ app - server_
groups Sequence[ApplicationSegment PRAServer Group Args] - tcp_
keep_ stralive - tcp_
port_ Sequence[Applicationrange Segment PRATcp Port Range Args] - tcp port range
- tcp_
port_ Sequence[str]ranges - TCP port ranges used to access the app.
- udp_
port_ Sequence[Applicationrange Segment PRAUdp Port Range Args] - udp port range
- udp_
port_ Sequence[str]ranges - UDP port ranges used to access the app.
- use_
in_ booldr_ mode
- bypass
On BooleanReauth - bypass
Type String - Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
- common
Apps List<Property Map>Dtos - config
Space String - description String
- Description of the application.
- domain
Names List<String> - List of domains and IPs.
- double
Encrypt Boolean - Whether Double Encryption is enabled or disabled for the app.
- enabled Boolean
- fqdn
Dns BooleanCheck - health
Check StringType - health
Reporting String - Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
- icmp
Access StringType - ip
Anchored Boolean - is
Cname BooleanEnabled - Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
- is
Incomplete BooleanDr Config - microtenant
Id String - name String
- Name of the application.
- passive
Health BooleanEnabled - segment
Group StringId - select
Connector BooleanClose To App - server
Groups List<Property Map> - tcp
Keep StringAlive - tcp
Port List<Property Map>Range - tcp port range
- tcp
Port List<String>Ranges - TCP port ranges used to access the app.
- udp
Port List<Property Map>Range - udp port range
- udp
Port List<String>Ranges - UDP port ranges used to access the app.
- use
In BooleanDr Mode
Supporting Types
ApplicationSegmentPRACommonAppsDto, ApplicationSegmentPRACommonAppsDtoArgs
ApplicationSegmentPRACommonAppsDtoAppsConfig, ApplicationSegmentPRACommonAppsDtoAppsConfigArgs
- App
Id string - App
Types List<string> - Application
Port string - Application
Protocol string - Connection
Security string - Domain string
- Enabled bool
- Name string
- Pra
App stringId
- App
Id string - App
Types []string - Application
Port string - Application
Protocol string - Connection
Security string - Domain string
- Enabled bool
- Name string
- Pra
App stringId
- app
Id String - app
Types List<String> - application
Port String - application
Protocol String - connection
Security String - domain String
- enabled Boolean
- name String
- pra
App StringId
- app
Id string - app
Types string[] - application
Port string - application
Protocol string - connection
Security string - domain string
- enabled boolean
- name string
- pra
App stringId
- app_
id str - app_
types Sequence[str] - application_
port str - application_
protocol str - connection_
security str - domain str
- enabled bool
- name str
- pra_
app_ strid
- app
Id String - app
Types List<String> - application
Port String - application
Protocol String - connection
Security String - domain String
- enabled Boolean
- name String
- pra
App StringId
ApplicationSegmentPRAServerGroup, ApplicationSegmentPRAServerGroupArgs
- Ids List<string>
- Ids []string
- ids List<String>
- ids string[]
- ids Sequence[str]
- ids List<String>
ApplicationSegmentPRATcpPortRange, ApplicationSegmentPRATcpPortRangeArgs
ApplicationSegmentPRAUdpPortRange, ApplicationSegmentPRAUdpPortRangeArgs
Import
Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZPA configurations into Terraform-compliant HashiCorp Configuration Language.
Visit
Application Segment can be imported by using <APPLICATION SEGMENT ID> or <APPLICATION SEGMENT NAME> as the import ID.
$ pulumi import zpa:index/applicationSegmentPRA:ApplicationSegmentPRA example <application_segment_id>
or
$ pulumi import zpa:index/applicationSegmentPRA:ApplicationSegmentPRA example <application_segment_name>
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- zpa zscaler/pulumi-zpa
- License
- MIT
- Notes
- This Pulumi package is based on the
zpaTerraform Provider.
