zpa.PolicyAccessInspectionRule

Zscaler Private Access v1.0.3, Jan 21 26

Zscaler Private Access v1.0.3 published on Wednesday, Jan 21, 2026 by Zscaler

Schema (JSON)

zscaler/pulumi-zpa

Zscaler Private Access v1.0.3 published on Wednesday, Jan 21, 2026 by Zscaler

Schema (JSON)

zscaler/pulumi-zpa

⚠️ WARNING:: The attribute <span pulumi-lang-nodejs="ruleOrder" pulumi-lang-dotnet="RuleOrder" pulumi-lang-go="ruleOrder" pulumi-lang-python="rule_order" pulumi-lang-yaml="ruleOrder" pulumi-lang-java="ruleOrder">rule_order</span> is now deprecated in favor of the new resource <span pulumi-lang-nodejs="zpa.PolicyAccessReorderRule" pulumi-lang-dotnet="zpa.PolicyAccessReorderRule" pulumi-lang-go="PolicyAccessReorderRule" pulumi-lang-python="PolicyAccessReorderRule" pulumi-lang-yaml="zpa.PolicyAccessReorderRule" pulumi-lang-java="zpa.PolicyAccessReorderRule">zpa.PolicyAccessReorderRule</span> policy_access_rule_reorder

Example Usage

1

import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

//Create Inspection Access Rule
const _this = new zpa.PolicyAccessInspectionRule("this", {
    name: "Example",
    description: "Example",
    action: "INSPECT",
    operator: "AND",
    policySetId: inspectionPolicy.id,
    zpnInspectionProfileId: thisZpaInspectionProfile.id,
    conditions: [{
        operator: "OR",
        operands: [{
            objectType: "APP",
            lhs: "id",
            rhs: thisZpaApplicationSegmentInspection.id,
        }],
    }],
});

import pulumi
import zscaler_pulumi_zpa as zpa

#Create Inspection Access Rule
this = zpa.PolicyAccessInspectionRule("this",
    name="Example",
    description="Example",
    action="INSPECT",
    operator="AND",
    policy_set_id=inspection_policy["id"],
    zpn_inspection_profile_id=this_zpa_inspection_profile["id"],
    conditions=[{
        "operator": "OR",
        "operands": [{
            "object_type": "APP",
            "lhs": "id",
            "rhs": this_zpa_application_segment_inspection["id"],
        }],
    }])

package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Create Inspection Access Rule
		_, err := zpa.NewPolicyAccessInspectionRule(ctx, "this", &zpa.PolicyAccessInspectionRuleArgs{
			Name:                   pulumi.String("Example"),
			Description:            pulumi.String("Example"),
			Action:                 pulumi.String("INSPECT"),
			Operator:               pulumi.String("AND"),
			PolicySetId:            pulumi.Any(inspectionPolicy.Id),
			ZpnInspectionProfileId: pulumi.Any(thisZpaInspectionProfile.Id),
			Conditions: zpa.PolicyAccessInspectionRuleConditionArray{
				&zpa.PolicyAccessInspectionRuleConditionArgs{
					Operator: pulumi.String("OR"),
					Operands: zpa.PolicyAccessInspectionRuleConditionOperandArray{
						&zpa.PolicyAccessInspectionRuleConditionOperandArgs{
							ObjectType: pulumi.String("APP"),
							Lhs:        pulumi.String("id"),
							Rhs:        pulumi.Any(thisZpaApplicationSegmentInspection.Id),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    //Create Inspection Access Rule
    var @this = new Zpa.PolicyAccessInspectionRule("this", new()
    {
        Name = "Example",
        Description = "Example",
        Action = "INSPECT",
        Operator = "AND",
        PolicySetId = inspectionPolicy.Id,
        ZpnInspectionProfileId = thisZpaInspectionProfile.Id,
        Conditions = new[]
        {
            new Zpa.Inputs.PolicyAccessInspectionRuleConditionArgs
            {
                Operator = "OR",
                Operands = new[]
                {
                    new Zpa.Inputs.PolicyAccessInspectionRuleConditionOperandArgs
                    {
                        ObjectType = "APP",
                        Lhs = "id",
                        Rhs = thisZpaApplicationSegmentInspection.Id,
                    },
                },
            },
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.PolicyAccessInspectionRule;
import com.pulumi.zpa.PolicyAccessInspectionRuleArgs;
import com.pulumi.zpa.inputs.PolicyAccessInspectionRuleConditionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        //Create Inspection Access Rule
        var this_ = new PolicyAccessInspectionRule("this", PolicyAccessInspectionRuleArgs.builder()
            .name("Example")
            .description("Example")
            .action("INSPECT")
            .operator("AND")
            .policySetId(inspectionPolicy.id())
            .zpnInspectionProfileId(thisZpaInspectionProfile.id())
            .conditions(PolicyAccessInspectionRuleConditionArgs.builder()
                .operator("OR")
                .operands(PolicyAccessInspectionRuleConditionOperandArgs.builder()
                    .objectType("APP")
                    .lhs("id")
                    .rhs(thisZpaApplicationSegmentInspection.id())
                    .build())
                .build())
            .build());

    }
}

resources:
  #Create Inspection Access Rule
  this:
    type: zpa:PolicyAccessInspectionRule
    properties:
      name: Example
      description: Example
      action: INSPECT
      operator: AND
      policySetId: ${inspectionPolicy.id}
      zpnInspectionProfileId: ${thisZpaInspectionProfile.id}
      conditions:
        - operator: OR
          operands:
            - objectType: APP
              lhs: id
              rhs: ${thisZpaApplicationSegmentInspection.id}

2

import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

// Retrieve Inspection policy type
const inspectionPolicy = zpa.getPolicyType({
    policyType: "INSPECTION_POLICY",
});
//Create Inspection Access Rule
const _this = new zpa.PolicyAccessInspectionRule("this", {
    name: "Example",
    description: "Example",
    action: "BYPASS_INSPECT",
    ruleOrder: 1,
    operator: "AND",
    policySetId: inspectionPolicy.then(inspectionPolicy => inspectionPolicy.id),
    conditions: [{
        operator: "OR",
        operands: [{
            objectType: "APP",
            lhs: "id",
            rhs: thisZpaApplicationSegmentInspection.id,
        }],
    }],
});

import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

# Retrieve Inspection policy type
inspection_policy = zpa.get_policy_type(policy_type="INSPECTION_POLICY")
#Create Inspection Access Rule
this = zpa.PolicyAccessInspectionRule("this",
    name="Example",
    description="Example",
    action="BYPASS_INSPECT",
    rule_order=1,
    operator="AND",
    policy_set_id=inspection_policy.id,
    conditions=[{
        "operator": "OR",
        "operands": [{
            "object_type": "APP",
            "lhs": "id",
            "rhs": this_zpa_application_segment_inspection["id"],
        }],
    }])

package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Retrieve Inspection policy type
		inspectionPolicy, err := zpa.GetPolicyType(ctx, &zpa.GetPolicyTypeArgs{
			PolicyType: pulumi.StringRef("INSPECTION_POLICY"),
		}, nil)
		if err != nil {
			return err
		}
		// Create Inspection Access Rule
		_, err = zpa.NewPolicyAccessInspectionRule(ctx, "this", &zpa.PolicyAccessInspectionRuleArgs{
			Name:        pulumi.String("Example"),
			Description: pulumi.String("Example"),
			Action:      pulumi.String("BYPASS_INSPECT"),
			RuleOrder:   1,
			Operator:    pulumi.String("AND"),
			PolicySetId: pulumi.String(inspectionPolicy.Id),
			Conditions: zpa.PolicyAccessInspectionRuleConditionArray{
				&zpa.PolicyAccessInspectionRuleConditionArgs{
					Operator: pulumi.String("OR"),
					Operands: zpa.PolicyAccessInspectionRuleConditionOperandArray{
						&zpa.PolicyAccessInspectionRuleConditionOperandArgs{
							ObjectType: pulumi.String("APP"),
							Lhs:        pulumi.String("id"),
							Rhs:        pulumi.Any(thisZpaApplicationSegmentInspection.Id),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = Pulumi.Zpa;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    // Retrieve Inspection policy type
    var inspectionPolicy = Zpa.GetPolicyType.Invoke(new()
    {
        PolicyType = "INSPECTION_POLICY",
    });

    //Create Inspection Access Rule
    var @this = new Zpa.PolicyAccessInspectionRule("this", new()
    {
        Name = "Example",
        Description = "Example",
        Action = "BYPASS_INSPECT",
        RuleOrder = 1,
        Operator = "AND",
        PolicySetId = inspectionPolicy.Apply(getPolicyTypeResult => getPolicyTypeResult.Id),
        Conditions = new[]
        {
            new Zpa.Inputs.PolicyAccessInspectionRuleConditionArgs
            {
                Operator = "OR",
                Operands = new[]
                {
                    new Zpa.Inputs.PolicyAccessInspectionRuleConditionOperandArgs
                    {
                        ObjectType = "APP",
                        Lhs = "id",
                        Rhs = thisZpaApplicationSegmentInspection.Id,
                    },
                },
            },
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetPolicyTypeArgs;
import com.pulumi.zpa.PolicyAccessInspectionRule;
import com.pulumi.zpa.PolicyAccessInspectionRuleArgs;
import com.pulumi.zpa.inputs.PolicyAccessInspectionRuleConditionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Retrieve Inspection policy type
        final var inspectionPolicy = ZpaFunctions.getPolicyType(GetPolicyTypeArgs.builder()
            .policyType("INSPECTION_POLICY")
            .build());

        //Create Inspection Access Rule
        var this_ = new PolicyAccessInspectionRule("this", PolicyAccessInspectionRuleArgs.builder()
            .name("Example")
            .description("Example")
            .action("BYPASS_INSPECT")
            .ruleOrder(1)
            .operator("AND")
            .policySetId(inspectionPolicy.id())
            .conditions(PolicyAccessInspectionRuleConditionArgs.builder()
                .operator("OR")
                .operands(PolicyAccessInspectionRuleConditionOperandArgs.builder()
                    .objectType("APP")
                    .lhs("id")
                    .rhs(thisZpaApplicationSegmentInspection.id())
                    .build())
                .build())
            .build());

    }
}

resources:
  #Create Inspection Access Rule
  this:
    type: zpa:PolicyAccessInspectionRule
    properties:
      name: Example
      description: Example
      action: BYPASS_INSPECT
      ruleOrder: 1
      operator: AND
      policySetId: ${inspectionPolicy.id}
      conditions:
        - operator: OR
          operands:
            - objectType: APP
              lhs: id
              rhs: ${thisZpaApplicationSegmentInspection.id}
variables:
  # Retrieve Inspection policy type
  inspectionPolicy:
    fn::invoke:
      function: zpa:getPolicyType
      arguments:
        policyType: INSPECTION_POLICY

LHS and RHS Values

Object Type	LHS	RHS
APP	`"id"`	`<span pulumi-lang-nodejs="`applicationSegmentId`" pulumi-lang-dotnet="`ApplicationSegmentId`" pulumi-lang-go="`applicationSegmentId`" pulumi-lang-python="`application_segment_id`" pulumi-lang-yaml="`applicationSegmentId`" pulumi-lang-java="`applicationSegmentId`">`application_segment_id`</span>`
APP_GROUP	`"id"`	`<span pulumi-lang-nodejs="`segmentGroupId`" pulumi-lang-dotnet="`SegmentGroupId`" pulumi-lang-go="`segmentGroupId`" pulumi-lang-python="`segment_group_id`" pulumi-lang-yaml="`segmentGroupId`" pulumi-lang-java="`segmentGroupId`">`segment_group_id`</span>`
CLIENT_TYPE	`"id"`	`<span pulumi-lang-nodejs="`zpnClientTypeZappl`" pulumi-lang-dotnet="`ZpnClientTypeZappl`" pulumi-lang-go="`zpnClientTypeZappl`" pulumi-lang-python="`zpn_client_type_zappl`" pulumi-lang-yaml="`zpnClientTypeZappl`" pulumi-lang-java="`zpnClientTypeZappl`">`zpn_client_type_zappl`</span>`, `<span pulumi-lang-nodejs="`zpnClientTypeExporter`" pulumi-lang-dotnet="`ZpnClientTypeExporter`" pulumi-lang-go="`zpnClientTypeExporter`" pulumi-lang-python="`zpn_client_type_exporter`" pulumi-lang-yaml="`zpnClientTypeExporter`" pulumi-lang-java="`zpnClientTypeExporter`">`zpn_client_type_exporter`</span>`, `<span pulumi-lang-nodejs="`zpnClientTypeBrowserIsolation`" pulumi-lang-dotnet="`ZpnClientTypeBrowserIsolation`" pulumi-lang-go="`zpnClientTypeBrowserIsolation`" pulumi-lang-python="`zpn_client_type_browser_isolation`" pulumi-lang-yaml="`zpnClientTypeBrowserIsolation`" pulumi-lang-java="`zpnClientTypeBrowserIsolation`">`zpn_client_type_browser_isolation`</span>`, `<span pulumi-lang-nodejs="`zpnClientTypeIpAnchoring`" pulumi-lang-dotnet="`ZpnClientTypeIpAnchoring`" pulumi-lang-go="`zpnClientTypeIpAnchoring`" pulumi-lang-python="`zpn_client_type_ip_anchoring`" pulumi-lang-yaml="`zpnClientTypeIpAnchoring`" pulumi-lang-java="`zpnClientTypeIpAnchoring`">`zpn_client_type_ip_anchoring`</span>`, `<span pulumi-lang-nodejs="`zpnClientTypeEdgeConnector`" pulumi-lang-dotnet="`ZpnClientTypeEdgeConnector`" pulumi-lang-go="`zpnClientTypeEdgeConnector`" pulumi-lang-python="`zpn_client_type_edge_connector`" pulumi-lang-yaml="`zpnClientTypeEdgeConnector`" pulumi-lang-java="`zpnClientTypeEdgeConnector`">`zpn_client_type_edge_connector`</span>`, `<span pulumi-lang-nodejs="`zpnClientTypeBranchConnector`" pulumi-lang-dotnet="`ZpnClientTypeBranchConnector`" pulumi-lang-go="`zpnClientTypeBranchConnector`" pulumi-lang-python="`zpn_client_type_branch_connector`" pulumi-lang-yaml="`zpnClientTypeBranchConnector`" pulumi-lang-java="`zpnClientTypeBranchConnector`">`zpn_client_type_branch_connector`</span>`, `<span pulumi-lang-nodejs="`zpnClientTypeZappPartner`" pulumi-lang-dotnet="`ZpnClientTypeZappPartner`" pulumi-lang-go="`zpnClientTypeZappPartner`" pulumi-lang-python="`zpn_client_type_zapp_partner`" pulumi-lang-yaml="`zpnClientTypeZappPartner`" pulumi-lang-java="`zpnClientTypeZappPartner`">`zpn_client_type_zapp_partner`</span>`, `<span pulumi-lang-nodejs="`zpnClientTypeZapp`" pulumi-lang-dotnet="`ZpnClientTypeZapp`" pulumi-lang-go="`zpnClientTypeZapp`" pulumi-lang-python="`zpn_client_type_zapp`" pulumi-lang-yaml="`zpnClientTypeZapp`" pulumi-lang-java="`zpnClientTypeZapp`">`zpn_client_type_zapp`</span>`
EDGE_CONNECTOR_GROUP	`"id"`	`<span pulumi-lang-nodejs="`edgeConnectorId`" pulumi-lang-dotnet="`EdgeConnectorId`" pulumi-lang-go="`edgeConnectorId`" pulumi-lang-python="`edge_connector_id`" pulumi-lang-yaml="`edgeConnectorId`" pulumi-lang-java="`edgeConnectorId`">`edge_connector_id`</span>`
IDP	`"id"`	`<span pulumi-lang-nodejs="`identityProviderId`" pulumi-lang-dotnet="`IdentityProviderId`" pulumi-lang-go="`identityProviderId`" pulumi-lang-python="`identity_provider_id`" pulumi-lang-yaml="`identityProviderId`" pulumi-lang-java="`identityProviderId`">`identity_provider_id`</span>`
SAML	`<span pulumi-lang-nodejs="`samlAttributeId`" pulumi-lang-dotnet="`SamlAttributeId`" pulumi-lang-go="`samlAttributeId`" pulumi-lang-python="`saml_attribute_id`" pulumi-lang-yaml="`samlAttributeId`" pulumi-lang-java="`samlAttributeId`">`saml_attribute_id`</span>`	`<span pulumi-lang-nodejs="`attributeValueToMatch`" pulumi-lang-dotnet="`AttributeValueToMatch`" pulumi-lang-go="`attributeValueToMatch`" pulumi-lang-python="`attribute_value_to_match`" pulumi-lang-yaml="`attributeValueToMatch`" pulumi-lang-java="`attributeValueToMatch`">`attribute_value_to_match`</span>`
SCIM	`<span pulumi-lang-nodejs="`scimAttributeId`" pulumi-lang-dotnet="`ScimAttributeId`" pulumi-lang-go="`scimAttributeId`" pulumi-lang-python="`scim_attribute_id`" pulumi-lang-yaml="`scimAttributeId`" pulumi-lang-java="`scimAttributeId`">`scim_attribute_id`</span>`	`<span pulumi-lang-nodejs="`attributeValueToMatch`" pulumi-lang-dotnet="`AttributeValueToMatch`" pulumi-lang-go="`attributeValueToMatch`" pulumi-lang-python="`attribute_value_to_match`" pulumi-lang-yaml="`attributeValueToMatch`" pulumi-lang-java="`attributeValueToMatch`">`attribute_value_to_match`</span>`
SCIM_GROUP	`<span pulumi-lang-nodejs="`scimGroupAttributeId`" pulumi-lang-dotnet="`ScimGroupAttributeId`" pulumi-lang-go="`scimGroupAttributeId`" pulumi-lang-python="`scim_group_attribute_id`" pulumi-lang-yaml="`scimGroupAttributeId`" pulumi-lang-java="`scimGroupAttributeId`">`scim_group_attribute_id`</span>`	`<span pulumi-lang-nodejs="`attributeValueToMatch`" pulumi-lang-dotnet="`AttributeValueToMatch`" pulumi-lang-go="`attributeValueToMatch`" pulumi-lang-python="`attribute_value_to_match`" pulumi-lang-yaml="`attributeValueToMatch`" pulumi-lang-java="`attributeValueToMatch`">`attribute_value_to_match`</span>`
PLATFORM	`<span pulumi-lang-nodejs="`mac`" pulumi-lang-dotnet="`Mac`" pulumi-lang-go="`mac`" pulumi-lang-python="`mac`" pulumi-lang-yaml="`mac`" pulumi-lang-java="`mac`">`mac`</span>`, `<span pulumi-lang-nodejs="`ios`" pulumi-lang-dotnet="`Ios`" pulumi-lang-go="`ios`" pulumi-lang-python="`ios`" pulumi-lang-yaml="`ios`" pulumi-lang-java="`ios`">`ios`</span>`, `<span pulumi-lang-nodejs="`windows`" pulumi-lang-dotnet="`Windows`" pulumi-lang-go="`windows`" pulumi-lang-python="`windows`" pulumi-lang-yaml="`windows`" pulumi-lang-java="`windows`">`windows`</span>`, `<span pulumi-lang-nodejs="`android`" pulumi-lang-dotnet="`Android`" pulumi-lang-go="`android`" pulumi-lang-python="`android`" pulumi-lang-yaml="`android`" pulumi-lang-java="`android`">`android`</span>`, `<span pulumi-lang-nodejs="`linux`" pulumi-lang-dotnet="`Linux`" pulumi-lang-go="`linux`" pulumi-lang-python="`linux`" pulumi-lang-yaml="`linux`" pulumi-lang-java="`linux`">`linux`</span>`	`"true"` / `"false"`
MACHINE_GRP	`"id"`	`<span pulumi-lang-nodejs="`machineGroupId`" pulumi-lang-dotnet="`MachineGroupId`" pulumi-lang-go="`machineGroupId`" pulumi-lang-python="`machine_group_id`" pulumi-lang-yaml="`machineGroupId`" pulumi-lang-java="`machineGroupId`">`machine_group_id`</span>`
POSTURE	`<span pulumi-lang-nodejs="`postureUdid`" pulumi-lang-dotnet="`PostureUdid`" pulumi-lang-go="`postureUdid`" pulumi-lang-python="`posture_udid`" pulumi-lang-yaml="`postureUdid`" pulumi-lang-java="`postureUdid`">`posture_udid`</span>`	`"true"` / `"false"`
TRUSTED_NETWORK	`<span pulumi-lang-nodejs="`networkId`" pulumi-lang-dotnet="`NetworkId`" pulumi-lang-go="`networkId`" pulumi-lang-python="`network_id`" pulumi-lang-yaml="`networkId`" pulumi-lang-java="`networkId`">`network_id`</span>`	`"true"`

Create PolicyAccessInspectionRule Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PolicyAccessInspectionRule(name: string, args?: PolicyAccessInspectionRuleArgs, opts?: CustomResourceOptions);

@overload
def PolicyAccessInspectionRule(resource_name: str,
                               args: Optional[PolicyAccessInspectionRuleArgs] = None,
                               opts: Optional[ResourceOptions] = None)

@overload
def PolicyAccessInspectionRule(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               action: Optional[str] = None,
                               conditions: Optional[Sequence[PolicyAccessInspectionRuleConditionArgs]] = None,
                               description: Optional[str] = None,
                               microtenant_id: Optional[str] = None,
                               name: Optional[str] = None,
                               operator: Optional[str] = None,
                               policy_set_id: Optional[str] = None,
                               zpn_inspection_profile_id: Optional[str] = None)

func NewPolicyAccessInspectionRule(ctx *Context, name string, args *PolicyAccessInspectionRuleArgs, opts ...ResourceOption) (*PolicyAccessInspectionRule, error)

public PolicyAccessInspectionRule(string name, PolicyAccessInspectionRuleArgs? args = null, CustomResourceOptions? opts = null)

public PolicyAccessInspectionRule(String name, PolicyAccessInspectionRuleArgs args)
public PolicyAccessInspectionRule(String name, PolicyAccessInspectionRuleArgs args, CustomResourceOptions options)

type: zpa:PolicyAccessInspectionRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args PolicyAccessInspectionRuleArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args PolicyAccessInspectionRuleArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args PolicyAccessInspectionRuleArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args PolicyAccessInspectionRuleArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args PolicyAccessInspectionRuleArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var policyAccessInspectionRuleResource = new Zpa.PolicyAccessInspectionRule("policyAccessInspectionRuleResource", new()
{
    Action = "string",
    Conditions = new[]
    {
        new Zpa.Inputs.PolicyAccessInspectionRuleConditionArgs
        {
            Operator = "string",
            Id = "string",
            MicrotenantId = "string",
            Operands = new[]
            {
                new Zpa.Inputs.PolicyAccessInspectionRuleConditionOperandArgs
                {
                    Lhs = "string",
                    ObjectType = "string",
                    Id = "string",
                    IdpId = "string",
                    MicrotenantId = "string",
                    Name = "string",
                    Rhs = "string",
                    RhsLists = new[]
                    {
                        "string",
                    },
                },
            },
        },
    },
    Description = "string",
    MicrotenantId = "string",
    Name = "string",
    Operator = "string",
    PolicySetId = "string",
    ZpnInspectionProfileId = "string",
});

example, err := zpa.NewPolicyAccessInspectionRule(ctx, "policyAccessInspectionRuleResource", &zpa.PolicyAccessInspectionRuleArgs{
	Action: pulumi.String("string"),
	Conditions: zpa.PolicyAccessInspectionRuleConditionArray{
		&zpa.PolicyAccessInspectionRuleConditionArgs{
			Operator:      pulumi.String("string"),
			Id:            pulumi.String("string"),
			MicrotenantId: pulumi.String("string"),
			Operands: zpa.PolicyAccessInspectionRuleConditionOperandArray{
				&zpa.PolicyAccessInspectionRuleConditionOperandArgs{
					Lhs:           pulumi.String("string"),
					ObjectType:    pulumi.String("string"),
					Id:            pulumi.String("string"),
					IdpId:         pulumi.String("string"),
					MicrotenantId: pulumi.String("string"),
					Name:          pulumi.String("string"),
					Rhs:           pulumi.String("string"),
					RhsLists: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
		},
	},
	Description:            pulumi.String("string"),
	MicrotenantId:          pulumi.String("string"),
	Name:                   pulumi.String("string"),
	Operator:               pulumi.String("string"),
	PolicySetId:            pulumi.String("string"),
	ZpnInspectionProfileId: pulumi.String("string"),
})

var policyAccessInspectionRuleResource = new PolicyAccessInspectionRule("policyAccessInspectionRuleResource", PolicyAccessInspectionRuleArgs.builder()
    .action("string")
    .conditions(PolicyAccessInspectionRuleConditionArgs.builder()
        .operator("string")
        .id("string")
        .microtenantId("string")
        .operands(PolicyAccessInspectionRuleConditionOperandArgs.builder()
            .lhs("string")
            .objectType("string")
            .id("string")
            .idpId("string")
            .microtenantId("string")
            .name("string")
            .rhs("string")
            .rhsLists("string")
            .build())
        .build())
    .description("string")
    .microtenantId("string")
    .name("string")
    .operator("string")
    .policySetId("string")
    .zpnInspectionProfileId("string")
    .build());

policy_access_inspection_rule_resource = zpa.PolicyAccessInspectionRule("policyAccessInspectionRuleResource",
    action="string",
    conditions=[{
        "operator": "string",
        "id": "string",
        "microtenant_id": "string",
        "operands": [{
            "lhs": "string",
            "object_type": "string",
            "id": "string",
            "idp_id": "string",
            "microtenant_id": "string",
            "name": "string",
            "rhs": "string",
            "rhs_lists": ["string"],
        }],
    }],
    description="string",
    microtenant_id="string",
    name="string",
    operator="string",
    policy_set_id="string",
    zpn_inspection_profile_id="string")

const policyAccessInspectionRuleResource = new zpa.PolicyAccessInspectionRule("policyAccessInspectionRuleResource", {
    action: "string",
    conditions: [{
        operator: "string",
        id: "string",
        microtenantId: "string",
        operands: [{
            lhs: "string",
            objectType: "string",
            id: "string",
            idpId: "string",
            microtenantId: "string",
            name: "string",
            rhs: "string",
            rhsLists: ["string"],
        }],
    }],
    description: "string",
    microtenantId: "string",
    name: "string",
    operator: "string",
    policySetId: "string",
    zpnInspectionProfileId: "string",
});

type: zpa:PolicyAccessInspectionRule
properties:
    action: string
    conditions:
        - id: string
          microtenantId: string
          operands:
            - id: string
              idpId: string
              lhs: string
              microtenantId: string
              name: string
              objectType: string
              rhs: string
              rhsLists:
                - string
          operator: string
    description: string
    microtenantId: string
    name: string
    operator: string
    policySetId: string
    zpnInspectionProfileId: string

PolicyAccessInspectionRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PolicyAccessInspectionRule resource accepts the following input properties:

Action string: This is for providing the rule action.
Conditions List<zscaler.PulumiPackage.Zpa.Inputs.PolicyAccessInspectionRuleCondition>: This is for proviidng the set of conditions for the policy.
Description string: This is the description of the access policy.
MicrotenantId string
Name string: This is the name of the policy.
Operator string
PolicySetId string
ZpnInspectionProfileId string

Action string: This is for providing the rule action.
Conditions []PolicyAccessInspectionRuleConditionArgs: This is for proviidng the set of conditions for the policy.
Description string: This is the description of the access policy.
MicrotenantId string
Name string: This is the name of the policy.
Operator string
PolicySetId string
ZpnInspectionProfileId string

action String: This is for providing the rule action.
conditions List<PolicyAccessInspectionRuleCondition>: This is for proviidng the set of conditions for the policy.
description String: This is the description of the access policy.
microtenantId String
name String: This is the name of the policy.
operator String
policySetId String
zpnInspectionProfileId String

action string: This is for providing the rule action.
conditions PolicyAccessInspectionRuleCondition[]: This is for proviidng the set of conditions for the policy.
description string: This is the description of the access policy.
microtenantId string
name string: This is the name of the policy.
operator string
policySetId string
zpnInspectionProfileId string

action str: This is for providing the rule action.
conditions Sequence[PolicyAccessInspectionRuleConditionArgs]: This is for proviidng the set of conditions for the policy.
description str: This is the description of the access policy.
microtenant_id str
name str: This is the name of the policy.
operator str
policy_set_id str
zpn_inspection_profile_id str

action String: This is for providing the rule action.
conditions List<Property Map>: This is for proviidng the set of conditions for the policy.
description String: This is the description of the access policy.
microtenantId String
name String: This is the name of the policy.
operator String
policySetId String
zpnInspectionProfileId String

Outputs

All input properties are implicitly available as output properties. Additionally, the PolicyAccessInspectionRule resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing PolicyAccessInspectionRule Resource

Get an existing PolicyAccessInspectionRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PolicyAccessInspectionRuleState, opts?: CustomResourceOptions): PolicyAccessInspectionRule

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        conditions: Optional[Sequence[PolicyAccessInspectionRuleConditionArgs]] = None,
        description: Optional[str] = None,
        microtenant_id: Optional[str] = None,
        name: Optional[str] = None,
        operator: Optional[str] = None,
        policy_set_id: Optional[str] = None,
        zpn_inspection_profile_id: Optional[str] = None) -> PolicyAccessInspectionRule

func GetPolicyAccessInspectionRule(ctx *Context, name string, id IDInput, state *PolicyAccessInspectionRuleState, opts ...ResourceOption) (*PolicyAccessInspectionRule, error)

public static PolicyAccessInspectionRule Get(string name, Input<string> id, PolicyAccessInspectionRuleState? state, CustomResourceOptions? opts = null)

public static PolicyAccessInspectionRule get(String name, Output<String> id, PolicyAccessInspectionRuleState state, CustomResourceOptions options)

resources:  _:    type: zpa:PolicyAccessInspectionRule    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Action string: This is for providing the rule action.
Conditions List<zscaler.PulumiPackage.Zpa.Inputs.PolicyAccessInspectionRuleCondition>: This is for proviidng the set of conditions for the policy.
Description string: This is the description of the access policy.
MicrotenantId string
Name string: This is the name of the policy.
Operator string
PolicySetId string
ZpnInspectionProfileId string

Action string: This is for providing the rule action.
Conditions []PolicyAccessInspectionRuleConditionArgs: This is for proviidng the set of conditions for the policy.
Description string: This is the description of the access policy.
MicrotenantId string
Name string: This is the name of the policy.
Operator string
PolicySetId string
ZpnInspectionProfileId string

action String: This is for providing the rule action.
conditions List<PolicyAccessInspectionRuleCondition>: This is for proviidng the set of conditions for the policy.
description String: This is the description of the access policy.
microtenantId String
name String: This is the name of the policy.
operator String
policySetId String
zpnInspectionProfileId String

action string: This is for providing the rule action.
conditions PolicyAccessInspectionRuleCondition[]: This is for proviidng the set of conditions for the policy.
description string: This is the description of the access policy.
microtenantId string
name string: This is the name of the policy.
operator string
policySetId string
zpnInspectionProfileId string

action str: This is for providing the rule action.
conditions Sequence[PolicyAccessInspectionRuleConditionArgs]: This is for proviidng the set of conditions for the policy.
description str: This is the description of the access policy.
microtenant_id str
name str: This is the name of the policy.
operator str
policy_set_id str
zpn_inspection_profile_id str

action String: This is for providing the rule action.
conditions List<Property Map>: This is for proviidng the set of conditions for the policy.
description String: This is the description of the access policy.
microtenantId String
name String: This is the name of the policy.
operator String
policySetId String
zpnInspectionProfileId String

Supporting Types

PolicyAccessInspectionRuleCondition, PolicyAccessInspectionRuleConditionArgs

Operator string
Id string
MicrotenantId string
Operands List<zscaler.PulumiPackage.Zpa.Inputs.PolicyAccessInspectionRuleConditionOperand>: This signifies the various policy criteria.

Operator string
Id string
MicrotenantId string
Operands []PolicyAccessInspectionRuleConditionOperand: This signifies the various policy criteria.

operator String
id String
microtenantId String
operands List<PolicyAccessInspectionRuleConditionOperand>: This signifies the various policy criteria.

operator string
id string
microtenantId string
operands PolicyAccessInspectionRuleConditionOperand[]: This signifies the various policy criteria.

operator str
id str
microtenant_id str
operands Sequence[PolicyAccessInspectionRuleConditionOperand]: This signifies the various policy criteria.

operator String
id String
microtenantId String
operands List<Property Map>: This signifies the various policy criteria.

PolicyAccessInspectionRuleConditionOperand, PolicyAccessInspectionRuleConditionOperandArgs

Lhs string: This signifies the key for the object type. String ID example: id
ObjectType string: This is for specifying the policy critiera.
Id string
IdpId string
MicrotenantId string: This denotes the value for the given object type. Its value depends upon the key.
Name string
Rhs string: This denotes the value for the given object type. Its value depends upon the key.
RhsLists List<string>: This denotes a list of values for the given object type. The value depend upon the key. If rhs is defined this list will be ignored

Lhs string: This signifies the key for the object type. String ID example: id
ObjectType string: This is for specifying the policy critiera.
Id string
IdpId string
MicrotenantId string: This denotes the value for the given object type. Its value depends upon the key.
Name string
Rhs string: This denotes the value for the given object type. Its value depends upon the key.
RhsLists []string: This denotes a list of values for the given object type. The value depend upon the key. If rhs is defined this list will be ignored

lhs String: This signifies the key for the object type. String ID example: id
objectType String: This is for specifying the policy critiera.
id String
idpId String
microtenantId String: This denotes the value for the given object type. Its value depends upon the key.
name String
rhs String: This denotes the value for the given object type. Its value depends upon the key.
rhsLists List<String>: This denotes a list of values for the given object type. The value depend upon the key. If rhs is defined this list will be ignored

lhs string: This signifies the key for the object type. String ID example: id
objectType string: This is for specifying the policy critiera.
id string
idpId string
microtenantId string: This denotes the value for the given object type. Its value depends upon the key.
name string
rhs string: This denotes the value for the given object type. Its value depends upon the key.
rhsLists string[]: This denotes a list of values for the given object type. The value depend upon the key. If rhs is defined this list will be ignored

lhs str: This signifies the key for the object type. String ID example: id
object_type str: This is for specifying the policy critiera.
id str
idp_id str
microtenant_id str: This denotes the value for the given object type. Its value depends upon the key.
name str
rhs str: This denotes the value for the given object type. Its value depends upon the key.
rhs_lists Sequence[str]: This denotes a list of values for the given object type. The value depend upon the key. If rhs is defined this list will be ignored

lhs String: This signifies the key for the object type. String ID example: id
objectType String: This is for specifying the policy critiera.
id String
idpId String
microtenantId String: This denotes the value for the given object type. Its value depends upon the key.
name String
rhs String: This denotes the value for the given object type. Its value depends upon the key.
rhsLists List<String>: This denotes a list of values for the given object type. The value depend upon the key. If rhs is defined this list will be ignored

Import

Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZPA configurations into Terraform-compliant HashiCorp Configuration Language.

Visit

Policy Access Inspection Rule can be imported by using <POLICY INSPECTION RULE ID> as the import ID.

For example:

$ pulumi import zpa:index/policyAccessInspectionRule:PolicyAccessInspectionRule example <policy_inspection_rule_id>

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: zpa zscaler/pulumi-zpa
License: MIT
Notes: This Pulumi package is based on the zpa Terraform Provider.

Zscaler Private Access v1.0.3 published on Wednesday, Jan 21, 2026 by Zscaler

Schema (JSON)

zscaler/pulumi-zpa

zpa.PolicyAccessInspectionRule

On this page

On this page

Example Usage

1

2

LHS and RHS Values

Create PolicyAccessInspectionRule Resource

Constructor syntax

Parameters

Constructor example

PolicyAccessInspectionRule Resource Properties

Inputs

Outputs

Look up Existing PolicyAccessInspectionRule Resource

Supporting Types

PolicyAccessInspectionRuleCondition, PolicyAccessInspectionRuleConditionArgs

PolicyAccessInspectionRuleConditionOperand, PolicyAccessInspectionRuleConditionOperandArgs

Import

Package Details

On this page

On this page