1. Packages
  2. Zscaler Private Access (ZPA)
  3. API Docs
  4. CloudBrowserIsolationExternalProfile
Zscaler Private Access v1.0.2 published on Friday, Jun 20, 2025 by Zscaler
zscaler/pulumi-zpa

zpa.CloudBrowserIsolationExternalProfile

Get Started
zpa logo
Zscaler Private Access v1.0.2 published on Friday, Jun 20, 2025 by Zscaler
zscaler/pulumi-zpa

    The zpa_cloud_browser_isolation_external_profile resource creates a Cloud Browser Isolation external profile. This resource can then be used in as part of zpa.PolicyAccessIsolationRule when the action attribute is set to ISOLATE.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const thisCloudBrowserIsolationBanner = zpa.getCloudBrowserIsolationBanner({
    name: "Default",
});
const singapore = zpa.getCloudBrowserIsolationRegion({
    name: "Singapore",
});
const frankfurt = zpa.getCloudBrowserIsolationRegion({
    name: "Frankfurt",
});
const thisCloudBrowserIsolationCertificate = zpa.getCloudBrowserIsolationCertificate({
    name: "Zscaler Root Certificate",
});
const thisCloudBrowserIsolationExternalProfile = new zpa.CloudBrowserIsolationExternalProfile("thisCloudBrowserIsolationExternalProfile", {
    description: "CBI_Profile_Example",
    bannerId: thisCloudBrowserIsolationBanner.then(thisCloudBrowserIsolationBanner => thisCloudBrowserIsolationBanner.id),
    regionIds: [singapore.then(singapore => singapore.id)],
    certificateIds: [thisCloudBrowserIsolationCertificate.then(thisCloudBrowserIsolationCertificate => thisCloudBrowserIsolationCertificate.id)],
    userExperience: {
        forwardToZia: {
            enabled: true,
            organizationId: "***********",
            cloudName: "<cloud_name>",
            pacFileUrl: "https://pac.<cloud_name>/<cloud_name>/proxy.pac",
        },
        browserInBrowser: true,
        persistIsolationBar: true,
        translate: true,
        sessionPersistence: true,
    },
    securityControls: {
        copyPaste: "all",
        uploadDownload: "upstream",
        documentViewer: true,
        localRender: true,
        allowPrinting: true,
        restrictKeystrokes: true,
        flattenedPdf: true,
        deepLink: {
            enabled: true,
            applications: [
                "test1",
                "test",
            ],
        },
        watermark: {
            enabled: true,
            showUserId: true,
            showTimestamp: true,
            showMessage: true,
            message: "Zscaler CBI",
        },
    },
    debugMode: {
        allowed: true,
        filePassword: "***********",
    },
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

this_cloud_browser_isolation_banner = zpa.get_cloud_browser_isolation_banner(name="Default")
singapore = zpa.get_cloud_browser_isolation_region(name="Singapore")
frankfurt = zpa.get_cloud_browser_isolation_region(name="Frankfurt")
this_cloud_browser_isolation_certificate = zpa.get_cloud_browser_isolation_certificate(name="Zscaler Root Certificate")
this_cloud_browser_isolation_external_profile = zpa.CloudBrowserIsolationExternalProfile("thisCloudBrowserIsolationExternalProfile",
    description="CBI_Profile_Example",
    banner_id=this_cloud_browser_isolation_banner.id,
    region_ids=[singapore.id],
    certificate_ids=[this_cloud_browser_isolation_certificate.id],
    user_experience={
        "forward_to_zia": {
            "enabled": True,
            "organization_id": "***********",
            "cloud_name": "<cloud_name>",
            "pac_file_url": "https://pac.<cloud_name>/<cloud_name>/proxy.pac",
        },
        "browser_in_browser": True,
        "persist_isolation_bar": True,
        "translate": True,
        "session_persistence": True,
    },
    security_controls={
        "copy_paste": "all",
        "upload_download": "upstream",
        "document_viewer": True,
        "local_render": True,
        "allow_printing": True,
        "restrict_keystrokes": True,
        "flattened_pdf": True,
        "deep_link": {
            "enabled": True,
            "applications": [
                "test1",
                "test",
            ],
        },
        "watermark": {
            "enabled": True,
            "show_user_id": True,
            "show_timestamp": True,
            "show_message": True,
            "message": "Zscaler CBI",
        },
    },
    debug_mode={
        "allowed": True,
        "file_password": "***********",
    })

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		thisCloudBrowserIsolationBanner, err := zpa.LookupCloudBrowserIsolationBanner(ctx, &zpa.LookupCloudBrowserIsolationBannerArgs{
			Name: pulumi.StringRef("Default"),
		}, nil)
		if err != nil {
			return err
		}
		singapore, err := zpa.GetCloudBrowserIsolationRegion(ctx, &zpa.GetCloudBrowserIsolationRegionArgs{
			Name: pulumi.StringRef("Singapore"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = zpa.GetCloudBrowserIsolationRegion(ctx, &zpa.GetCloudBrowserIsolationRegionArgs{
			Name: pulumi.StringRef("Frankfurt"),
		}, nil)
		if err != nil {
			return err
		}
		thisCloudBrowserIsolationCertificate, err := zpa.LookupCloudBrowserIsolationCertificate(ctx, &zpa.LookupCloudBrowserIsolationCertificateArgs{
			Name: pulumi.StringRef("Zscaler Root Certificate"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = zpa.NewCloudBrowserIsolationExternalProfile(ctx, "thisCloudBrowserIsolationExternalProfile", &zpa.CloudBrowserIsolationExternalProfileArgs{
			Description: pulumi.String("CBI_Profile_Example"),
			BannerId:    pulumi.String(thisCloudBrowserIsolationBanner.Id),
			RegionIds: pulumi.StringArray{
				pulumi.String(singapore.Id),
			},
			CertificateIds: pulumi.StringArray{
				pulumi.String(thisCloudBrowserIsolationCertificate.Id),
			},
			UserExperience: &zpa.CloudBrowserIsolationExternalProfileUserExperienceArgs{
				ForwardToZia: &zpa.CloudBrowserIsolationExternalProfileUserExperienceForwardToZiaArgs{
					Enabled:        pulumi.Bool(true),
					OrganizationId: pulumi.String("***********"),
					CloudName:      pulumi.String("<cloud_name>"),
					PacFileUrl:     pulumi.String("https://pac.<cloud_name>/<cloud_name>/proxy.pac"),
				},
				BrowserInBrowser:    pulumi.Bool(true),
				PersistIsolationBar: pulumi.Bool(true),
				Translate:           pulumi.Bool(true),
				SessionPersistence:  pulumi.Bool(true),
			},
			SecurityControls: &zpa.CloudBrowserIsolationExternalProfileSecurityControlsArgs{
				CopyPaste:          pulumi.String("all"),
				UploadDownload:     pulumi.String("upstream"),
				DocumentViewer:     pulumi.Bool(true),
				LocalRender:        pulumi.Bool(true),
				AllowPrinting:      pulumi.Bool(true),
				RestrictKeystrokes: pulumi.Bool(true),
				FlattenedPdf:       pulumi.Bool(true),
				DeepLink: &zpa.CloudBrowserIsolationExternalProfileSecurityControlsDeepLinkArgs{
					Enabled: pulumi.Bool(true),
					Applications: pulumi.StringArray{
						pulumi.String("test1"),
						pulumi.String("test"),
					},
				},
				Watermark: &zpa.CloudBrowserIsolationExternalProfileSecurityControlsWatermarkArgs{
					Enabled:       pulumi.Bool(true),
					ShowUserId:    pulumi.Bool(true),
					ShowTimestamp: pulumi.Bool(true),
					ShowMessage:   pulumi.Bool(true),
					Message:       pulumi.String("Zscaler CBI"),
				},
			},
			DebugMode: &zpa.CloudBrowserIsolationExternalProfileDebugModeArgs{
				Allowed:      pulumi.Bool(true),
				FilePassword: pulumi.String("***********"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = Pulumi.Zpa;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var thisCloudBrowserIsolationBanner = Zpa.GetCloudBrowserIsolationBanner.Invoke(new()
    {
        Name = "Default",
    });

    var singapore = Zpa.GetCloudBrowserIsolationRegion.Invoke(new()
    {
        Name = "Singapore",
    });

    var frankfurt = Zpa.GetCloudBrowserIsolationRegion.Invoke(new()
    {
        Name = "Frankfurt",
    });

    var thisCloudBrowserIsolationCertificate = Zpa.GetCloudBrowserIsolationCertificate.Invoke(new()
    {
        Name = "Zscaler Root Certificate",
    });

    var thisCloudBrowserIsolationExternalProfile = new Zpa.CloudBrowserIsolationExternalProfile("thisCloudBrowserIsolationExternalProfile", new()
    {
        Description = "CBI_Profile_Example",
        BannerId = thisCloudBrowserIsolationBanner.Apply(getCloudBrowserIsolationBannerResult => getCloudBrowserIsolationBannerResult.Id),
        RegionIds = new[]
        {
            singapore.Apply(getCloudBrowserIsolationRegionResult => getCloudBrowserIsolationRegionResult.Id),
        },
        CertificateIds = new[]
        {
            thisCloudBrowserIsolationCertificate.Apply(getCloudBrowserIsolationCertificateResult => getCloudBrowserIsolationCertificateResult.Id),
        },
        UserExperience = new Zpa.Inputs.CloudBrowserIsolationExternalProfileUserExperienceArgs
        {
            ForwardToZia = new Zpa.Inputs.CloudBrowserIsolationExternalProfileUserExperienceForwardToZiaArgs
            {
                Enabled = true,
                OrganizationId = "***********",
                CloudName = "<cloud_name>",
                PacFileUrl = "https://pac.<cloud_name>/<cloud_name>/proxy.pac",
            },
            BrowserInBrowser = true,
            PersistIsolationBar = true,
            Translate = true,
            SessionPersistence = true,
        },
        SecurityControls = new Zpa.Inputs.CloudBrowserIsolationExternalProfileSecurityControlsArgs
        {
            CopyPaste = "all",
            UploadDownload = "upstream",
            DocumentViewer = true,
            LocalRender = true,
            AllowPrinting = true,
            RestrictKeystrokes = true,
            FlattenedPdf = true,
            DeepLink = new Zpa.Inputs.CloudBrowserIsolationExternalProfileSecurityControlsDeepLinkArgs
            {
                Enabled = true,
                Applications = new[]
                {
                    "test1",
                    "test",
                },
            },
            Watermark = new Zpa.Inputs.CloudBrowserIsolationExternalProfileSecurityControlsWatermarkArgs
            {
                Enabled = true,
                ShowUserId = true,
                ShowTimestamp = true,
                ShowMessage = true,
                Message = "Zscaler CBI",
            },
        },
        DebugMode = new Zpa.Inputs.CloudBrowserIsolationExternalProfileDebugModeArgs
        {
            Allowed = true,
            FilePassword = "***********",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetCloudBrowserIsolationBannerArgs;
import com.pulumi.zpa.inputs.GetCloudBrowserIsolationRegionArgs;
import com.pulumi.zpa.inputs.GetCloudBrowserIsolationCertificateArgs;
import com.pulumi.zpa.CloudBrowserIsolationExternalProfile;
import com.pulumi.zpa.CloudBrowserIsolationExternalProfileArgs;
import com.pulumi.zpa.inputs.CloudBrowserIsolationExternalProfileUserExperienceArgs;
import com.pulumi.zpa.inputs.CloudBrowserIsolationExternalProfileUserExperienceForwardToZiaArgs;
import com.pulumi.zpa.inputs.CloudBrowserIsolationExternalProfileSecurityControlsArgs;
import com.pulumi.zpa.inputs.CloudBrowserIsolationExternalProfileSecurityControlsDeepLinkArgs;
import com.pulumi.zpa.inputs.CloudBrowserIsolationExternalProfileSecurityControlsWatermarkArgs;
import com.pulumi.zpa.inputs.CloudBrowserIsolationExternalProfileDebugModeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var thisCloudBrowserIsolationBanner = ZpaFunctions.getCloudBrowserIsolationBanner(GetCloudBrowserIsolationBannerArgs.builder()
            .name("Default")
            .build());

        final var singapore = ZpaFunctions.getCloudBrowserIsolationRegion(GetCloudBrowserIsolationRegionArgs.builder()
            .name("Singapore")
            .build());

        final var frankfurt = ZpaFunctions.getCloudBrowserIsolationRegion(GetCloudBrowserIsolationRegionArgs.builder()
            .name("Frankfurt")
            .build());

        final var thisCloudBrowserIsolationCertificate = ZpaFunctions.getCloudBrowserIsolationCertificate(GetCloudBrowserIsolationCertificateArgs.builder()
            .name("Zscaler Root Certificate")
            .build());

        var thisCloudBrowserIsolationExternalProfile = new CloudBrowserIsolationExternalProfile("thisCloudBrowserIsolationExternalProfile", CloudBrowserIsolationExternalProfileArgs.builder()
            .description("CBI_Profile_Example")
            .bannerId(thisCloudBrowserIsolationBanner.id())
            .regionIds(singapore.id())
            .certificateIds(thisCloudBrowserIsolationCertificate.id())
            .userExperience(CloudBrowserIsolationExternalProfileUserExperienceArgs.builder()
                .forwardToZia(CloudBrowserIsolationExternalProfileUserExperienceForwardToZiaArgs.builder()
                    .enabled(true)
                    .organizationId("***********")
                    .cloudName("<cloud_name>")
                    .pacFileUrl("https://pac.<cloud_name>/<cloud_name>/proxy.pac")
                    .build())
                .browserInBrowser(true)
                .persistIsolationBar(true)
                .translate(true)
                .sessionPersistence(true)
                .build())
            .securityControls(CloudBrowserIsolationExternalProfileSecurityControlsArgs.builder()
                .copyPaste("all")
                .uploadDownload("upstream")
                .documentViewer(true)
                .localRender(true)
                .allowPrinting(true)
                .restrictKeystrokes(true)
                .flattenedPdf(true)
                .deepLink(CloudBrowserIsolationExternalProfileSecurityControlsDeepLinkArgs.builder()
                    .enabled(true)
                    .applications(                    
                        "test1",
                        "test")
                    .build())
                .watermark(CloudBrowserIsolationExternalProfileSecurityControlsWatermarkArgs.builder()
                    .enabled(true)
                    .showUserId(true)
                    .showTimestamp(true)
                    .showMessage(true)
                    .message("Zscaler CBI")
                    .build())
                .build())
            .debugMode(CloudBrowserIsolationExternalProfileDebugModeArgs.builder()
                .allowed(true)
                .filePassword("***********")
                .build())
            .build());

    }
}

    resources:
  thisCloudBrowserIsolationExternalProfile:
    type: zpa:CloudBrowserIsolationExternalProfile
    properties:
      description: CBI_Profile_Example
      bannerId: ${thisCloudBrowserIsolationBanner.id}
      regionIds:
        - ${singapore.id}
      certificateIds:
        - ${thisCloudBrowserIsolationCertificate.id}
      userExperience:
        forwardToZia:
          enabled: true
          organizationId: '***********'
          cloudName: <cloud_name>
          pacFileUrl: https://pac.<cloud_name>/<cloud_name>/proxy.pac
        browserInBrowser: true
        persistIsolationBar: true
        translate: true
        sessionPersistence: true
      securityControls:
        copyPaste: all
        uploadDownload: upstream
        documentViewer: true
        localRender: true
        allowPrinting: true
        restrictKeystrokes: true
        flattenedPdf: true
        deepLink:
          enabled: true
          applications:
            - test1
            - test
        watermark:
          enabled: true
          showUserId: true
          showTimestamp: true
          showMessage: true
          message: Zscaler CBI
      debugMode:
        allowed: true
        filePassword: '***********'
variables:
  thisCloudBrowserIsolationBanner:
    fn::invoke:
      function: zpa:getCloudBrowserIsolationBanner
      arguments:
        name: Default
  singapore:
    fn::invoke:
      function: zpa:getCloudBrowserIsolationRegion
      arguments:
        name: Singapore
  frankfurt:
    fn::invoke:
      function: zpa:getCloudBrowserIsolationRegion
      arguments:
        name: Frankfurt
  thisCloudBrowserIsolationCertificate:
    fn::invoke:
      function: zpa:getCloudBrowserIsolationCertificate
      arguments:
        name: Zscaler Root Certificate

    Create CloudBrowserIsolationExternalProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CloudBrowserIsolationExternalProfile(name: string, args: CloudBrowserIsolationExternalProfileArgs, opts?: CustomResourceOptions);
    @overload
def CloudBrowserIsolationExternalProfile(resource_name: str,
                                         args: CloudBrowserIsolationExternalProfileArgs,
                                         opts: Optional[ResourceOptions] = None)

@overload
def CloudBrowserIsolationExternalProfile(resource_name: str,
                                         opts: Optional[ResourceOptions] = None,
                                         banner_id: Optional[str] = None,
                                         certificate_ids: Optional[Sequence[str]] = None,
                                         debug_mode: Optional[CloudBrowserIsolationExternalProfileDebugModeArgs] = None,
                                         description: Optional[str] = None,
                                         name: Optional[str] = None,
                                         region_ids: Optional[Sequence[str]] = None,
                                         security_controls: Optional[CloudBrowserIsolationExternalProfileSecurityControlsArgs] = None,
                                         user_experience: Optional[CloudBrowserIsolationExternalProfileUserExperienceArgs] = None)
    func NewCloudBrowserIsolationExternalProfile(ctx *Context, name string, args CloudBrowserIsolationExternalProfileArgs, opts ...ResourceOption) (*CloudBrowserIsolationExternalProfile, error)
    public CloudBrowserIsolationExternalProfile(string name, CloudBrowserIsolationExternalProfileArgs args, CustomResourceOptions? opts = null)
    public CloudBrowserIsolationExternalProfile(String name, CloudBrowserIsolationExternalProfileArgs args)
public CloudBrowserIsolationExternalProfile(String name, CloudBrowserIsolationExternalProfileArgs args, CustomResourceOptions options)

    type: zpa:CloudBrowserIsolationExternalProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args CloudBrowserIsolationExternalProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CloudBrowserIsolationExternalProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CloudBrowserIsolationExternalProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CloudBrowserIsolationExternalProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CloudBrowserIsolationExternalProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var cloudBrowserIsolationExternalProfileResource = new Zpa.CloudBrowserIsolationExternalProfile("cloudBrowserIsolationExternalProfileResource", new()
{
    BannerId = "string",
    CertificateIds = new[]
    {
        "string",
    },
    DebugMode = new Zpa.Inputs.CloudBrowserIsolationExternalProfileDebugModeArgs
    {
        Allowed = false,
        FilePassword = "string",
    },
    Description = "string",
    Name = "string",
    RegionIds = new[]
    {
        "string",
    },
    SecurityControls = new Zpa.Inputs.CloudBrowserIsolationExternalProfileSecurityControlsArgs
    {
        AllowPrinting = false,
        CopyPaste = "string",
        DeepLink = new Zpa.Inputs.CloudBrowserIsolationExternalProfileSecurityControlsDeepLinkArgs
        {
            Applications = new[]
            {
                "string",
            },
            Enabled = false,
        },
        DocumentViewer = false,
        FlattenedPdf = false,
        LocalRender = false,
        RestrictKeystrokes = false,
        UploadDownload = "string",
        Watermark = new Zpa.Inputs.CloudBrowserIsolationExternalProfileSecurityControlsWatermarkArgs
        {
            Enabled = false,
            Message = "string",
            ShowMessage = false,
            ShowTimestamp = false,
            ShowUserId = false,
        },
    },
    UserExperience = new Zpa.Inputs.CloudBrowserIsolationExternalProfileUserExperienceArgs
    {
        BrowserInBrowser = false,
        ForwardToZia = new Zpa.Inputs.CloudBrowserIsolationExternalProfileUserExperienceForwardToZiaArgs
        {
            CloudName = "string",
            Enabled = false,
            OrganizationId = "string",
            PacFileUrl = "string",
        },
        PersistIsolationBar = false,
        SessionPersistence = false,
        Translate = false,
        Zgpu = false,
    },
});

    example, err := zpa.NewCloudBrowserIsolationExternalProfile(ctx, "cloudBrowserIsolationExternalProfileResource", &zpa.CloudBrowserIsolationExternalProfileArgs{
	BannerId: pulumi.String("string"),
	CertificateIds: pulumi.StringArray{
		pulumi.String("string"),
	},
	DebugMode: &zpa.CloudBrowserIsolationExternalProfileDebugModeArgs{
		Allowed:      pulumi.Bool(false),
		FilePassword: pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	Name:        pulumi.String("string"),
	RegionIds: pulumi.StringArray{
		pulumi.String("string"),
	},
	SecurityControls: &zpa.CloudBrowserIsolationExternalProfileSecurityControlsArgs{
		AllowPrinting: pulumi.Bool(false),
		CopyPaste:     pulumi.String("string"),
		DeepLink: &zpa.CloudBrowserIsolationExternalProfileSecurityControlsDeepLinkArgs{
			Applications: pulumi.StringArray{
				pulumi.String("string"),
			},
			Enabled: pulumi.Bool(false),
		},
		DocumentViewer:     pulumi.Bool(false),
		FlattenedPdf:       pulumi.Bool(false),
		LocalRender:        pulumi.Bool(false),
		RestrictKeystrokes: pulumi.Bool(false),
		UploadDownload:     pulumi.String("string"),
		Watermark: &zpa.CloudBrowserIsolationExternalProfileSecurityControlsWatermarkArgs{
			Enabled:       pulumi.Bool(false),
			Message:       pulumi.String("string"),
			ShowMessage:   pulumi.Bool(false),
			ShowTimestamp: pulumi.Bool(false),
			ShowUserId:    pulumi.Bool(false),
		},
	},
	UserExperience: &zpa.CloudBrowserIsolationExternalProfileUserExperienceArgs{
		BrowserInBrowser: pulumi.Bool(false),
		ForwardToZia: &zpa.CloudBrowserIsolationExternalProfileUserExperienceForwardToZiaArgs{
			CloudName:      pulumi.String("string"),
			Enabled:        pulumi.Bool(false),
			OrganizationId: pulumi.String("string"),
			PacFileUrl:     pulumi.String("string"),
		},
		PersistIsolationBar: pulumi.Bool(false),
		SessionPersistence:  pulumi.Bool(false),
		Translate:           pulumi.Bool(false),
		Zgpu:                pulumi.Bool(false),
	},
})

    var cloudBrowserIsolationExternalProfileResource = new CloudBrowserIsolationExternalProfile("cloudBrowserIsolationExternalProfileResource", CloudBrowserIsolationExternalProfileArgs.builder()
    .bannerId("string")
    .certificateIds("string")
    .debugMode(CloudBrowserIsolationExternalProfileDebugModeArgs.builder()
        .allowed(false)
        .filePassword("string")
        .build())
    .description("string")
    .name("string")
    .regionIds("string")
    .securityControls(CloudBrowserIsolationExternalProfileSecurityControlsArgs.builder()
        .allowPrinting(false)
        .copyPaste("string")
        .deepLink(CloudBrowserIsolationExternalProfileSecurityControlsDeepLinkArgs.builder()
            .applications("string")
            .enabled(false)
            .build())
        .documentViewer(false)
        .flattenedPdf(false)
        .localRender(false)
        .restrictKeystrokes(false)
        .uploadDownload("string")
        .watermark(CloudBrowserIsolationExternalProfileSecurityControlsWatermarkArgs.builder()
            .enabled(false)
            .message("string")
            .showMessage(false)
            .showTimestamp(false)
            .showUserId(false)
            .build())
        .build())
    .userExperience(CloudBrowserIsolationExternalProfileUserExperienceArgs.builder()
        .browserInBrowser(false)
        .forwardToZia(CloudBrowserIsolationExternalProfileUserExperienceForwardToZiaArgs.builder()
            .cloudName("string")
            .enabled(false)
            .organizationId("string")
            .pacFileUrl("string")
            .build())
        .persistIsolationBar(false)
        .sessionPersistence(false)
        .translate(false)
        .zgpu(false)
        .build())
    .build());

    cloud_browser_isolation_external_profile_resource = zpa.CloudBrowserIsolationExternalProfile("cloudBrowserIsolationExternalProfileResource",
    banner_id="string",
    certificate_ids=["string"],
    debug_mode={
        "allowed": False,
        "file_password": "string",
    },
    description="string",
    name="string",
    region_ids=["string"],
    security_controls={
        "allow_printing": False,
        "copy_paste": "string",
        "deep_link": {
            "applications": ["string"],
            "enabled": False,
        },
        "document_viewer": False,
        "flattened_pdf": False,
        "local_render": False,
        "restrict_keystrokes": False,
        "upload_download": "string",
        "watermark": {
            "enabled": False,
            "message": "string",
            "show_message": False,
            "show_timestamp": False,
            "show_user_id": False,
        },
    },
    user_experience={
        "browser_in_browser": False,
        "forward_to_zia": {
            "cloud_name": "string",
            "enabled": False,
            "organization_id": "string",
            "pac_file_url": "string",
        },
        "persist_isolation_bar": False,
        "session_persistence": False,
        "translate": False,
        "zgpu": False,
    })

    const cloudBrowserIsolationExternalProfileResource = new zpa.CloudBrowserIsolationExternalProfile("cloudBrowserIsolationExternalProfileResource", {
    bannerId: "string",
    certificateIds: ["string"],
    debugMode: {
        allowed: false,
        filePassword: "string",
    },
    description: "string",
    name: "string",
    regionIds: ["string"],
    securityControls: {
        allowPrinting: false,
        copyPaste: "string",
        deepLink: {
            applications: ["string"],
            enabled: false,
        },
        documentViewer: false,
        flattenedPdf: false,
        localRender: false,
        restrictKeystrokes: false,
        uploadDownload: "string",
        watermark: {
            enabled: false,
            message: "string",
            showMessage: false,
            showTimestamp: false,
            showUserId: false,
        },
    },
    userExperience: {
        browserInBrowser: false,
        forwardToZia: {
            cloudName: "string",
            enabled: false,
            organizationId: "string",
            pacFileUrl: "string",
        },
        persistIsolationBar: false,
        sessionPersistence: false,
        translate: false,
        zgpu: false,
    },
});

    type: zpa:CloudBrowserIsolationExternalProfile
properties:
    bannerId: string
    certificateIds:
        - string
    debugMode:
        allowed: false
        filePassword: string
    description: string
    name: string
    regionIds:
        - string
    securityControls:
        allowPrinting: false
        copyPaste: string
        deepLink:
            applications:
                - string
            enabled: false
        documentViewer: false
        flattenedPdf: false
        localRender: false
        restrictKeystrokes: false
        uploadDownload: string
        watermark:
            enabled: false
            message: string
            showMessage: false
            showTimestamp: false
            showUserId: false
    userExperience:
        browserInBrowser: false
        forwardToZia:
            cloudName: string
            enabled: false
            organizationId: string
            pacFileUrl: string
        persistIsolationBar: false
        sessionPersistence: false
        translate: false
        zgpu: false

    CloudBrowserIsolationExternalProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CloudBrowserIsolationExternalProfile resource accepts the following input properties:

    bannerId String
    certificateIds List<String>
    This field defines the list of certificate IDs.
    debugMode Property Map
    description String
    name String
    regionIds List<String>
    This field defines the list of region IDs.
    securityControls Property Map
    userExperience Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CloudBrowserIsolationExternalProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing CloudBrowserIsolationExternalProfile Resource

    Get an existing CloudBrowserIsolationExternalProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CloudBrowserIsolationExternalProfileState, opts?: CustomResourceOptions): CloudBrowserIsolationExternalProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        banner_id: Optional[str] = None,
        certificate_ids: Optional[Sequence[str]] = None,
        debug_mode: Optional[CloudBrowserIsolationExternalProfileDebugModeArgs] = None,
        description: Optional[str] = None,
        name: Optional[str] = None,
        region_ids: Optional[Sequence[str]] = None,
        security_controls: Optional[CloudBrowserIsolationExternalProfileSecurityControlsArgs] = None,
        user_experience: Optional[CloudBrowserIsolationExternalProfileUserExperienceArgs] = None) -> CloudBrowserIsolationExternalProfile
    func GetCloudBrowserIsolationExternalProfile(ctx *Context, name string, id IDInput, state *CloudBrowserIsolationExternalProfileState, opts ...ResourceOption) (*CloudBrowserIsolationExternalProfile, error)
    public static CloudBrowserIsolationExternalProfile Get(string name, Input<string> id, CloudBrowserIsolationExternalProfileState? state, CustomResourceOptions? opts = null)
    public static CloudBrowserIsolationExternalProfile get(String name, Output<String> id, CloudBrowserIsolationExternalProfileState state, CustomResourceOptions options)
    resources:  _:    type: zpa:CloudBrowserIsolationExternalProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    bannerId String
    certificateIds List<String>
    This field defines the list of certificate IDs.
    debugMode Property Map
    description String
    name String
    regionIds List<String>
    This field defines the list of region IDs.
    securityControls Property Map
    userExperience Property Map

    Supporting Types

    CloudBrowserIsolationExternalProfileDebugMode, CloudBrowserIsolationExternalProfileDebugModeArgs

    allowed Boolean
    filePassword String
    allowed boolean
    filePassword string
    allowed Boolean
    filePassword String

    CloudBrowserIsolationExternalProfileSecurityControls, CloudBrowserIsolationExternalProfileSecurityControlsArgs

    Applications List<string>
    Enabled bool
    Applications []string
    Enabled bool
    applications List<String>
    enabled Boolean
    applications string[]
    enabled boolean
    applications Sequence[str]
    enabled bool
    applications List<String>
    enabled Boolean

    CloudBrowserIsolationExternalProfileSecurityControlsWatermark, CloudBrowserIsolationExternalProfileSecurityControlsWatermarkArgs

    enabled Boolean
    message String
    showMessage Boolean
    showTimestamp Boolean
    showUserId Boolean
    enabled boolean
    message string
    showMessage boolean
    showTimestamp boolean
    showUserId boolean
    enabled Boolean
    message String
    showMessage Boolean
    showTimestamp Boolean
    showUserId Boolean

    CloudBrowserIsolationExternalProfileUserExperience, CloudBrowserIsolationExternalProfileUserExperienceArgs

    CloudBrowserIsolationExternalProfileUserExperienceForwardToZia, CloudBrowserIsolationExternalProfileUserExperienceForwardToZiaArgs

    cloudName String
    enabled Boolean
    organizationId String
    pacFileUrl String
    cloudName string
    enabled boolean
    organizationId string
    pacFileUrl string
    cloudName String
    enabled Boolean
    organizationId String
    pacFileUrl String

    Package Details

    Repository
    zpa zscaler/pulumi-zpa
    License
    MIT
    Notes
    This Pulumi package is based on the zpa Terraform Provider.
    zpa logo
    Zscaler Private Access v1.0.2 published on Friday, Jun 20, 2025 by Zscaler
    zscaler/pulumi-zpa
      Meet Neo: Your AI Platform Teammate