zpa.PolicyAccessInspectionRuleV2

import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const _this = zpa.getInspectionPredefinedControls({
    name: "Failed to parse request body",
    version: "OWASP_CRS/3.3.0",
});
const defaultPredefinedControls = zpa.getInspectionAllPredefinedControls({
    version: "OWASP_CRS/3.3.0",
    groupName: "preprocessors",
});
const thisInspectionProfile = new zpa.InspectionProfile("this", {
    predefinedControls: [{
        id: _this.then(_this => _this.id),
        action: "BLOCK",
    }],
    name: "Example",
    description: "Example",
    paranoiaLevel: "1",
});
// Retrieve Identity Provider ID
const thisGetIdPController = zpa.getIdPController({
    name: "Idp_Name",
});
// Retrieve SAML Attribute ID
const emailUserSso = zpa.getSAMLAttribute({
    name: "Email_Users",
    idpName: "Idp_Name",
});
// Retrieve SAML Attribute ID
const groupUser = zpa.getSAMLAttribute({
    name: "GroupName_Users",
    idpName: "Idp_Name",
});
// Retrieve SCIM Group ID
const a000 = zpa.getSCIMGroups({
    name: "A000",
    idpName: "Idp_Name",
});
// Retrieve SCIM Group ID
const b000 = zpa.getSCIMGroups({
    name: "B000",
    idpName: "Idp_Name",
});
// Create Policy Access Isolation Rule V2
const thisPolicyAccessInspectionRuleV2 = new zpa.PolicyAccessInspectionRuleV2("this", {
    name: "Example",
    description: "Example",
    action: "INSPECT",
    zpnInspectionProfileId: thisInspectionProfile.id,
    conditions: [
        {
            operator: "OR",
            operands: [{
                objectType: "CLIENT_TYPE",
                values: ["zpn_client_type_exporter"],
            }],
        },
        {
            operator: "OR",
            operands: [
                {
                    objectType: "SAML",
                    entryValues: [
                        {
                            rhs: "user1@acme.com",
                            lhs: emailUserSso.then(emailUserSso => emailUserSso.id),
                        },
                        {
                            rhs: "A000",
                            lhs: groupUser.then(groupUser => groupUser.id),
                        },
                    ],
                },
                {
                    objectType: "SCIM_GROUP",
                    entryValues: [
                        {
                            rhs: a000.then(a000 => a000.id),
                            lhs: thisGetIdPController.then(thisGetIdPController => thisGetIdPController.id),
                        },
                        {
                            rhs: b000.then(b000 => b000.id),
                            lhs: thisGetIdPController.then(thisGetIdPController => thisGetIdPController.id),
                        },
                    ],
                },
            ],
        },
    ],
});

import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

this = zpa.get_inspection_predefined_controls(name="Failed to parse request body",
    version="OWASP_CRS/3.3.0")
default_predefined_controls = zpa.get_inspection_all_predefined_controls(version="OWASP_CRS/3.3.0",
    group_name="preprocessors")
this_inspection_profile = zpa.InspectionProfile("this",
    predefined_controls=[{
        "id": this.id,
        "action": "BLOCK",
    }],
    name="Example",
    description="Example",
    paranoia_level="1")
# Retrieve Identity Provider ID
this_get_id_p_controller = zpa.get_id_p_controller(name="Idp_Name")
# Retrieve SAML Attribute ID
email_user_sso = zpa.get_saml_attribute(name="Email_Users",
    idp_name="Idp_Name")
# Retrieve SAML Attribute ID
group_user = zpa.get_saml_attribute(name="GroupName_Users",
    idp_name="Idp_Name")
# Retrieve SCIM Group ID
a000 = zpa.get_scim_groups(name="A000",
    idp_name="Idp_Name")
# Retrieve SCIM Group ID
b000 = zpa.get_scim_groups(name="B000",
    idp_name="Idp_Name")
# Create Policy Access Isolation Rule V2
this_policy_access_inspection_rule_v2 = zpa.PolicyAccessInspectionRuleV2("this",
    name="Example",
    description="Example",
    action="INSPECT",
    zpn_inspection_profile_id=this_inspection_profile.id,
    conditions=[
        {
            "operator": "OR",
            "operands": [{
                "object_type": "CLIENT_TYPE",
                "values": ["zpn_client_type_exporter"],
            }],
        },
        {
            "operator": "OR",
            "operands": [
                {
                    "object_type": "SAML",
                    "entry_values": [
                        {
                            "rhs": "user1@acme.com",
                            "lhs": email_user_sso.id,
                        },
                        {
                            "rhs": "A000",
                            "lhs": group_user.id,
                        },
                    ],
                },
                {
                    "object_type": "SCIM_GROUP",
                    "entry_values": [
                        {
                            "rhs": a000.id,
                            "lhs": this_get_id_p_controller.id,
                        },
                        {
                            "rhs": b000.id,
                            "lhs": this_get_id_p_controller.id,
                        },
                    ],
                },
            ],
        },
    ])

package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		this, err := zpa.GetInspectionPredefinedControls(ctx, &zpa.GetInspectionPredefinedControlsArgs{
			Name:    pulumi.StringRef("Failed to parse request body"),
			Version: pulumi.StringRef("OWASP_CRS/3.3.0"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = zpa.GetInspectionAllPredefinedControls(ctx, &zpa.GetInspectionAllPredefinedControlsArgs{
			Version:   pulumi.StringRef("OWASP_CRS/3.3.0"),
			GroupName: pulumi.StringRef("preprocessors"),
		}, nil)
		if err != nil {
			return err
		}
		thisInspectionProfile, err := zpa.NewInspectionProfile(ctx, "this", &zpa.InspectionProfileArgs{
			PredefinedControls: zpa.InspectionProfilePredefinedControlArray{
				&zpa.InspectionProfilePredefinedControlArgs{
					Id:     pulumi.String(this.Id),
					Action: pulumi.String("BLOCK"),
				},
			},
			Name:          pulumi.String("Example"),
			Description:   pulumi.String("Example"),
			ParanoiaLevel: pulumi.String("1"),
		})
		if err != nil {
			return err
		}
		// Retrieve Identity Provider ID
		thisGetIdPController, err := zpa.GetIdPController(ctx, &zpa.GetIdPControllerArgs{
			Name: pulumi.StringRef("Idp_Name"),
		}, nil)
		if err != nil {
			return err
		}
		// Retrieve SAML Attribute ID
		emailUserSso, err := zpa.GetSAMLAttribute(ctx, &zpa.GetSAMLAttributeArgs{
			Name:    pulumi.StringRef("Email_Users"),
			IdpName: pulumi.StringRef("Idp_Name"),
		}, nil)
		if err != nil {
			return err
		}
		// Retrieve SAML Attribute ID
		groupUser, err := zpa.GetSAMLAttribute(ctx, &zpa.GetSAMLAttributeArgs{
			Name:    pulumi.StringRef("GroupName_Users"),
			IdpName: pulumi.StringRef("Idp_Name"),
		}, nil)
		if err != nil {
			return err
		}
		// Retrieve SCIM Group ID
		a000, err := zpa.GetSCIMGroups(ctx, &zpa.GetSCIMGroupsArgs{
			Name:    pulumi.StringRef("A000"),
			IdpName: pulumi.StringRef("Idp_Name"),
		}, nil)
		if err != nil {
			return err
		}
		// Retrieve SCIM Group ID
		b000, err := zpa.GetSCIMGroups(ctx, &zpa.GetSCIMGroupsArgs{
			Name:    pulumi.StringRef("B000"),
			IdpName: pulumi.StringRef("Idp_Name"),
		}, nil)
		if err != nil {
			return err
		}
		// Create Policy Access Isolation Rule V2
		_, err = zpa.NewPolicyAccessInspectionRuleV2(ctx, "this", &zpa.PolicyAccessInspectionRuleV2Args{
			Name:                   pulumi.String("Example"),
			Description:            pulumi.String("Example"),
			Action:                 pulumi.String("INSPECT"),
			ZpnInspectionProfileId: thisInspectionProfile.ID(),
			Conditions: zpa.PolicyAccessInspectionRuleV2ConditionArray{
				&zpa.PolicyAccessInspectionRuleV2ConditionArgs{
					Operator: pulumi.String("OR"),
					Operands: zpa.PolicyAccessInspectionRuleV2ConditionOperandArray{
						&zpa.PolicyAccessInspectionRuleV2ConditionOperandArgs{
							ObjectType: pulumi.String("CLIENT_TYPE"),
							Values: pulumi.StringArray{
								pulumi.String("zpn_client_type_exporter"),
							},
						},
					},
				},
				&zpa.PolicyAccessInspectionRuleV2ConditionArgs{
					Operator: pulumi.String("OR"),
					Operands: zpa.PolicyAccessInspectionRuleV2ConditionOperandArray{
						&zpa.PolicyAccessInspectionRuleV2ConditionOperandArgs{
							ObjectType: pulumi.String("SAML"),
							EntryValues: zpa.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArray{
								&zpa.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs{
									Rhs: pulumi.String("user1@acme.com"),
									Lhs: pulumi.String(emailUserSso.Id),
								},
								&zpa.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs{
									Rhs: pulumi.String("A000"),
									Lhs: pulumi.String(groupUser.Id),
								},
							},
						},
						&zpa.PolicyAccessInspectionRuleV2ConditionOperandArgs{
							ObjectType: pulumi.String("SCIM_GROUP"),
							EntryValues: zpa.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArray{
								&zpa.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs{
									Rhs: pulumi.String(a000.Id),
									Lhs: pulumi.String(thisGetIdPController.Id),
								},
								&zpa.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs{
									Rhs: pulumi.String(b000.Id),
									Lhs: pulumi.String(thisGetIdPController.Id),
								},
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = Pulumi.Zpa;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var @this = Zpa.GetInspectionPredefinedControls.Invoke(new()
    {
        Name = "Failed to parse request body",
        Version = "OWASP_CRS/3.3.0",
    });

    var defaultPredefinedControls = Zpa.GetInspectionAllPredefinedControls.Invoke(new()
    {
        Version = "OWASP_CRS/3.3.0",
        GroupName = "preprocessors",
    });

    var thisInspectionProfile = new Zpa.InspectionProfile("this", new()
    {
        PredefinedControls = new[]
        {
            new Zpa.Inputs.InspectionProfilePredefinedControlArgs
            {
                Id = @this.Apply(@this => @this.Apply(getInspectionPredefinedControlsResult => getInspectionPredefinedControlsResult.Id)),
                Action = "BLOCK",
            },
        },
        Name = "Example",
        Description = "Example",
        ParanoiaLevel = "1",
    });

    // Retrieve Identity Provider ID
    var thisGetIdPController = Zpa.GetIdPController.Invoke(new()
    {
        Name = "Idp_Name",
    });

    // Retrieve SAML Attribute ID
    var emailUserSso = Zpa.GetSAMLAttribute.Invoke(new()
    {
        Name = "Email_Users",
        IdpName = "Idp_Name",
    });

    // Retrieve SAML Attribute ID
    var groupUser = Zpa.GetSAMLAttribute.Invoke(new()
    {
        Name = "GroupName_Users",
        IdpName = "Idp_Name",
    });

    // Retrieve SCIM Group ID
    var a000 = Zpa.GetSCIMGroups.Invoke(new()
    {
        Name = "A000",
        IdpName = "Idp_Name",
    });

    // Retrieve SCIM Group ID
    var b000 = Zpa.GetSCIMGroups.Invoke(new()
    {
        Name = "B000",
        IdpName = "Idp_Name",
    });

    // Create Policy Access Isolation Rule V2
    var thisPolicyAccessInspectionRuleV2 = new Zpa.PolicyAccessInspectionRuleV2("this", new()
    {
        Name = "Example",
        Description = "Example",
        Action = "INSPECT",
        ZpnInspectionProfileId = thisInspectionProfile.Id,
        Conditions = new[]
        {
            new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionArgs
            {
                Operator = "OR",
                Operands = new[]
                {
                    new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionOperandArgs
                    {
                        ObjectType = "CLIENT_TYPE",
                        Values = new[]
                        {
                            "zpn_client_type_exporter",
                        },
                    },
                },
            },
            new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionArgs
            {
                Operator = "OR",
                Operands = new[]
                {
                    new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionOperandArgs
                    {
                        ObjectType = "SAML",
                        EntryValues = new[]
                        {
                            new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs
                            {
                                Rhs = "user1@acme.com",
                                Lhs = emailUserSso.Apply(getSAMLAttributeResult => getSAMLAttributeResult.Id),
                            },
                            new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs
                            {
                                Rhs = "A000",
                                Lhs = groupUser.Apply(getSAMLAttributeResult => getSAMLAttributeResult.Id),
                            },
                        },
                    },
                    new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionOperandArgs
                    {
                        ObjectType = "SCIM_GROUP",
                        EntryValues = new[]
                        {
                            new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs
                            {
                                Rhs = a000.Apply(getSCIMGroupsResult => getSCIMGroupsResult.Id),
                                Lhs = thisGetIdPController.Apply(getIdPControllerResult => getIdPControllerResult.Id),
                            },
                            new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs
                            {
                                Rhs = b000.Apply(getSCIMGroupsResult => getSCIMGroupsResult.Id),
                                Lhs = thisGetIdPController.Apply(getIdPControllerResult => getIdPControllerResult.Id),
                            },
                        },
                    },
                },
            },
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetInspectionPredefinedControlsArgs;
import com.pulumi.zpa.inputs.GetInspectionAllPredefinedControlsArgs;
import com.pulumi.zpa.InspectionProfile;
import com.pulumi.zpa.InspectionProfileArgs;
import com.pulumi.zpa.inputs.InspectionProfilePredefinedControlArgs;
import com.pulumi.zpa.inputs.GetIdPControllerArgs;
import com.pulumi.zpa.inputs.GetSAMLAttributeArgs;
import com.pulumi.zpa.inputs.GetSCIMGroupsArgs;
import com.pulumi.zpa.PolicyAccessInspectionRuleV2;
import com.pulumi.zpa.PolicyAccessInspectionRuleV2Args;
import com.pulumi.zpa.inputs.PolicyAccessInspectionRuleV2ConditionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var this = ZpaFunctions.getInspectionPredefinedControls(GetInspectionPredefinedControlsArgs.builder()
            .name("Failed to parse request body")
            .version("OWASP_CRS/3.3.0")
            .build());

        final var defaultPredefinedControls = ZpaFunctions.getInspectionAllPredefinedControls(GetInspectionAllPredefinedControlsArgs.builder()
            .version("OWASP_CRS/3.3.0")
            .groupName("preprocessors")
            .build());

        var thisInspectionProfile = new InspectionProfile("thisInspectionProfile", InspectionProfileArgs.builder()
            .predefinedControls(InspectionProfilePredefinedControlArgs.builder()
                .id(this_.id())
                .action("BLOCK")
                .build())
            .name("Example")
            .description("Example")
            .paranoiaLevel("1")
            .build());

        // Retrieve Identity Provider ID
        final var thisGetIdPController = ZpaFunctions.getIdPController(GetIdPControllerArgs.builder()
            .name("Idp_Name")
            .build());

        // Retrieve SAML Attribute ID
        final var emailUserSso = ZpaFunctions.getSAMLAttribute(GetSAMLAttributeArgs.builder()
            .name("Email_Users")
            .idpName("Idp_Name")
            .build());

        // Retrieve SAML Attribute ID
        final var groupUser = ZpaFunctions.getSAMLAttribute(GetSAMLAttributeArgs.builder()
            .name("GroupName_Users")
            .idpName("Idp_Name")
            .build());

        // Retrieve SCIM Group ID
        final var a000 = ZpaFunctions.getSCIMGroups(GetSCIMGroupsArgs.builder()
            .name("A000")
            .idpName("Idp_Name")
            .build());

        // Retrieve SCIM Group ID
        final var b000 = ZpaFunctions.getSCIMGroups(GetSCIMGroupsArgs.builder()
            .name("B000")
            .idpName("Idp_Name")
            .build());

        // Create Policy Access Isolation Rule V2
        var thisPolicyAccessInspectionRuleV2 = new PolicyAccessInspectionRuleV2("thisPolicyAccessInspectionRuleV2", PolicyAccessInspectionRuleV2Args.builder()
            .name("Example")
            .description("Example")
            .action("INSPECT")
            .zpnInspectionProfileId(thisInspectionProfile.id())
            .conditions(            
                PolicyAccessInspectionRuleV2ConditionArgs.builder()
                    .operator("OR")
                    .operands(PolicyAccessInspectionRuleV2ConditionOperandArgs.builder()
                        .objectType("CLIENT_TYPE")
                        .values("zpn_client_type_exporter")
                        .build())
                    .build(),
                PolicyAccessInspectionRuleV2ConditionArgs.builder()
                    .operator("OR")
                    .operands(                    
                        PolicyAccessInspectionRuleV2ConditionOperandArgs.builder()
                            .objectType("SAML")
                            .entryValues(                            
                                PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs.builder()
                                    .rhs("user1@acme.com")
                                    .lhs(emailUserSso.id())
                                    .build(),
                                PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs.builder()
                                    .rhs("A000")
                                    .lhs(groupUser.id())
                                    .build())
                            .build(),
                        PolicyAccessInspectionRuleV2ConditionOperandArgs.builder()
                            .objectType("SCIM_GROUP")
                            .entryValues(                            
                                PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs.builder()
                                    .rhs(a000.id())
                                    .lhs(thisGetIdPController.id())
                                    .build(),
                                PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs.builder()
                                    .rhs(b000.id())
                                    .lhs(thisGetIdPController.id())
                                    .build())
                            .build())
                    .build())
            .build());

    }
}

resources:
  thisInspectionProfile:
    type: zpa:InspectionProfile
    name: this
    properties:
      predefinedControls:
        - id: ${this.id}
          action: BLOCK
      name: Example
      description: Example
      paranoiaLevel: '1'
  # Create Policy Access Isolation Rule V2
  thisPolicyAccessInspectionRuleV2:
    type: zpa:PolicyAccessInspectionRuleV2
    name: this
    properties:
      name: Example
      description: Example
      action: INSPECT
      zpnInspectionProfileId: ${thisInspectionProfile.id}
      conditions:
        - operator: OR
          operands:
            - objectType: CLIENT_TYPE
              values:
                - zpn_client_type_exporter
        - operator: OR
          operands:
            - objectType: SAML
              entryValues:
                - rhs: user1@acme.com
                  lhs: ${emailUserSso.id}
                - rhs: A000
                  lhs: ${groupUser.id}
            - objectType: SCIM_GROUP
              entryValues:
                - rhs: ${a000.id}
                  lhs: ${thisGetIdPController.id}
                - rhs: ${b000.id}
                  lhs: ${thisGetIdPController.id}
variables:
  this:
    fn::invoke:
      function: zpa:getInspectionPredefinedControls
      arguments:
        name: Failed to parse request body
        version: OWASP_CRS/3.3.0
  defaultPredefinedControls:
    fn::invoke:
      function: zpa:getInspectionAllPredefinedControls
      arguments:
        version: OWASP_CRS/3.3.0
        groupName: preprocessors
  # Retrieve Identity Provider ID
  thisGetIdPController:
    fn::invoke:
      function: zpa:getIdPController
      arguments:
        name: Idp_Name
  # Retrieve SAML Attribute ID
  emailUserSso:
    fn::invoke:
      function: zpa:getSAMLAttribute
      arguments:
        name: Email_Users
        idpName: Idp_Name
  # Retrieve SAML Attribute ID
  groupUser:
    fn::invoke:
      function: zpa:getSAMLAttribute
      arguments:
        name: GroupName_Users
        idpName: Idp_Name
  # Retrieve SCIM Group ID
  a000:
    fn::invoke:
      function: zpa:getSCIMGroups
      arguments:
        name: A000
        idpName: Idp_Name
  # Retrieve SCIM Group ID
  b000:
    fn::invoke:
      function: zpa:getSCIMGroups
      arguments:
        name: B000
        idpName: Idp_Name

var policyAccessInspectionRuleV2Resource = new Zpa.PolicyAccessInspectionRuleV2("policyAccessInspectionRuleV2Resource", new()
{
    Action = "string",
    Conditions = new[]
    {
        new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionArgs
        {
            Id = "string",
            Operands = new[]
            {
                new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionOperandArgs
                {
                    EntryValues = new[]
                    {
                        new Zpa.Inputs.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs
                        {
                            Lhs = "string",
                            Rhs = "string",
                        },
                    },
                    ObjectType = "string",
                    Values = new[]
                    {
                        "string",
                    },
                },
            },
            Operator = "string",
        },
    },
    Description = "string",
    MicrotenantId = "string",
    Name = "string",
    ZpnInspectionProfileId = "string",
});

example, err := zpa.NewPolicyAccessInspectionRuleV2(ctx, "policyAccessInspectionRuleV2Resource", &zpa.PolicyAccessInspectionRuleV2Args{
	Action: pulumi.String("string"),
	Conditions: zpa.PolicyAccessInspectionRuleV2ConditionArray{
		&zpa.PolicyAccessInspectionRuleV2ConditionArgs{
			Id: pulumi.String("string"),
			Operands: zpa.PolicyAccessInspectionRuleV2ConditionOperandArray{
				&zpa.PolicyAccessInspectionRuleV2ConditionOperandArgs{
					EntryValues: zpa.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArray{
						&zpa.PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs{
							Lhs: pulumi.String("string"),
							Rhs: pulumi.String("string"),
						},
					},
					ObjectType: pulumi.String("string"),
					Values: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Operator: pulumi.String("string"),
		},
	},
	Description:            pulumi.String("string"),
	MicrotenantId:          pulumi.String("string"),
	Name:                   pulumi.String("string"),
	ZpnInspectionProfileId: pulumi.String("string"),
})

var policyAccessInspectionRuleV2Resource = new PolicyAccessInspectionRuleV2("policyAccessInspectionRuleV2Resource", PolicyAccessInspectionRuleV2Args.builder()
    .action("string")
    .conditions(PolicyAccessInspectionRuleV2ConditionArgs.builder()
        .id("string")
        .operands(PolicyAccessInspectionRuleV2ConditionOperandArgs.builder()
            .entryValues(PolicyAccessInspectionRuleV2ConditionOperandEntryValueArgs.builder()
                .lhs("string")
                .rhs("string")
                .build())
            .objectType("string")
            .values("string")
            .build())
        .operator("string")
        .build())
    .description("string")
    .microtenantId("string")
    .name("string")
    .zpnInspectionProfileId("string")
    .build());

policy_access_inspection_rule_v2_resource = zpa.PolicyAccessInspectionRuleV2("policyAccessInspectionRuleV2Resource",
    action="string",
    conditions=[{
        "id": "string",
        "operands": [{
            "entry_values": [{
                "lhs": "string",
                "rhs": "string",
            }],
            "object_type": "string",
            "values": ["string"],
        }],
        "operator": "string",
    }],
    description="string",
    microtenant_id="string",
    name="string",
    zpn_inspection_profile_id="string")

const policyAccessInspectionRuleV2Resource = new zpa.PolicyAccessInspectionRuleV2("policyAccessInspectionRuleV2Resource", {
    action: "string",
    conditions: [{
        id: "string",
        operands: [{
            entryValues: [{
                lhs: "string",
                rhs: "string",
            }],
            objectType: "string",
            values: ["string"],
        }],
        operator: "string",
    }],
    description: "string",
    microtenantId: "string",
    name: "string",
    zpnInspectionProfileId: "string",
});

type: zpa:PolicyAccessInspectionRuleV2
properties:
    action: string
    conditions:
        - id: string
          operands:
            - entryValues:
                - lhs: string
                  rhs: string
              objectType: string
              values:
                - string
          operator: string
    description: string
    microtenantId: string
    name: string
    zpnInspectionProfileId: string