azure-native.network.FirewallPolicyRuleCollectionGroup
Explore with Pulumi AI
Rule Collection Group resource. Azure REST API version: 2023-02-01. Prior API version in Azure Native 1.x: 2020-11-01.
Other available API versions: 2023-04-01, 2023-05-01, 2023-06-01, 2023-09-01, 2023-11-01, 2024-01-01, 2024-03-01.
Example Usage
Create FirewallPolicyNatRuleCollectionGroup
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
{
FirewallPolicyName = "firewallPolicy",
Priority = 100,
ResourceGroupName = "rg1",
RuleCollectionGroupName = "ruleCollectionGroup1",
RuleCollections = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyNatRuleCollectionArgs
{
Action = new AzureNative.Network.Inputs.FirewallPolicyNatRuleCollectionActionArgs
{
Type = AzureNative.Network.FirewallPolicyNatRuleCollectionActionType.DNAT,
},
Name = "Example-Nat-Rule-Collection",
Priority = 100,
RuleCollectionType = "FirewallPolicyNatRuleCollection",
Rules = new[]
{
new AzureNative.Network.Inputs.NatRuleArgs
{
DestinationAddresses = new[]
{
"152.23.32.23",
},
DestinationPorts = new[]
{
"8080",
},
IpProtocols = new[]
{
AzureNative.Network.FirewallPolicyRuleNetworkProtocol.TCP,
AzureNative.Network.FirewallPolicyRuleNetworkProtocol.UDP,
},
Name = "nat-rule1",
RuleType = "NatRule",
SourceAddresses = new[]
{
"2.2.2.2",
},
SourceIpGroups = new() { },
TranslatedFqdn = "internalhttp.server.net",
TranslatedPort = "8080",
},
},
},
},
});
});
package main
import (
network "github.com/pulumi/pulumi-azure-native-sdk/network/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyName: pulumi.String("firewallPolicy"),
Priority: pulumi.Int(100),
ResourceGroupName: pulumi.String("rg1"),
RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
RuleCollections: pulumi.Array{
network.FirewallPolicyNatRuleCollection{
Action: network.FirewallPolicyNatRuleCollectionAction{
Type: network.FirewallPolicyNatRuleCollectionActionTypeDNAT,
},
Name: "Example-Nat-Rule-Collection",
Priority: 100,
RuleCollectionType: "FirewallPolicyNatRuleCollection",
Rules: []interface{}{
network.NatRuleType{
DestinationAddresses: []string{
"152.23.32.23",
},
DestinationPorts: []string{
"8080",
},
IpProtocols: []network.FirewallPolicyRuleNetworkProtocol{
network.FirewallPolicyRuleNetworkProtocolTCP,
network.FirewallPolicyRuleNetworkProtocolUDP,
},
Name: "nat-rule1",
RuleType: "NatRule",
SourceAddresses: []string{
"2.2.2.2",
},
SourceIpGroups: []interface{}{},
TranslatedFqdn: "internalhttp.server.net",
TranslatedPort: "8080",
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyName("firewallPolicy")
.priority(100)
.resourceGroupName("rg1")
.ruleCollectionGroupName("ruleCollectionGroup1")
.ruleCollections(FirewallPolicyNatRuleCollectionArgs.builder()
.action(FirewallPolicyNatRuleCollectionActionArgs.builder()
.type("DNAT")
.build())
.name("Example-Nat-Rule-Collection")
.priority(100)
.ruleCollectionType("FirewallPolicyNatRuleCollection")
.rules(NatRuleArgs.builder()
.destinationAddresses("152.23.32.23")
.destinationPorts("8080")
.ipProtocols(
"TCP",
"UDP")
.name("nat-rule1")
.ruleType("NatRule")
.sourceAddresses("2.2.2.2")
.sourceIpGroups()
.translatedFqdn("internalhttp.server.net")
.translatedPort("8080")
.build())
.build())
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
firewall_policy_name="firewallPolicy",
priority=100,
resource_group_name="rg1",
rule_collection_group_name="ruleCollectionGroup1",
rule_collections=[{
"action": {
"type": azure_native.network.FirewallPolicyNatRuleCollectionActionType.DNAT,
},
"name": "Example-Nat-Rule-Collection",
"priority": 100,
"rule_collection_type": "FirewallPolicyNatRuleCollection",
"rules": [{
"destination_addresses": ["152.23.32.23"],
"destination_ports": ["8080"],
"ip_protocols": [
azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP,
azure_native.network.FirewallPolicyRuleNetworkProtocol.UDP,
],
"name": "nat-rule1",
"rule_type": "NatRule",
"source_addresses": ["2.2.2.2"],
"source_ip_groups": [],
"translated_fqdn": "internalhttp.server.net",
"translated_port": "8080",
}],
}])
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
firewallPolicyName: "firewallPolicy",
priority: 100,
resourceGroupName: "rg1",
ruleCollectionGroupName: "ruleCollectionGroup1",
ruleCollections: [{
action: {
type: azure_native.network.FirewallPolicyNatRuleCollectionActionType.DNAT,
},
name: "Example-Nat-Rule-Collection",
priority: 100,
ruleCollectionType: "FirewallPolicyNatRuleCollection",
rules: [{
destinationAddresses: ["152.23.32.23"],
destinationPorts: ["8080"],
ipProtocols: [
azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP,
azure_native.network.FirewallPolicyRuleNetworkProtocol.UDP,
],
name: "nat-rule1",
ruleType: "NatRule",
sourceAddresses: ["2.2.2.2"],
sourceIpGroups: [],
translatedFqdn: "internalhttp.server.net",
translatedPort: "8080",
}],
}],
});
resources:
firewallPolicyRuleCollectionGroup:
type: azure-native:network:FirewallPolicyRuleCollectionGroup
properties:
firewallPolicyName: firewallPolicy
priority: 100
resourceGroupName: rg1
ruleCollectionGroupName: ruleCollectionGroup1
ruleCollections:
- action:
type: DNAT
name: Example-Nat-Rule-Collection
priority: 100
ruleCollectionType: FirewallPolicyNatRuleCollection
rules:
- destinationAddresses:
- 152.23.32.23
destinationPorts:
- '8080'
ipProtocols:
- TCP
- UDP
name: nat-rule1
ruleType: NatRule
sourceAddresses:
- 2.2.2.2
sourceIpGroups: []
translatedFqdn: internalhttp.server.net
translatedPort: '8080'
Create FirewallPolicyRuleCollectionGroup
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
{
FirewallPolicyName = "firewallPolicy",
Priority = 100,
ResourceGroupName = "rg1",
RuleCollectionGroupName = "ruleCollectionGroup1",
RuleCollections = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
{
Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
{
Type = AzureNative.Network.FirewallPolicyFilterRuleCollectionActionType.Deny,
},
Name = "Example-Filter-Rule-Collection",
Priority = 100,
RuleCollectionType = "FirewallPolicyFilterRuleCollection",
Rules = new[]
{
new AzureNative.Network.Inputs.NetworkRuleArgs
{
DestinationAddresses = new[]
{
"*",
},
DestinationPorts = new[]
{
"*",
},
IpProtocols = new[]
{
AzureNative.Network.FirewallPolicyRuleNetworkProtocol.TCP,
},
Name = "network-rule1",
RuleType = "NetworkRule",
SourceAddresses = new[]
{
"10.1.25.0/24",
},
},
},
},
},
});
});
package main
import (
network "github.com/pulumi/pulumi-azure-native-sdk/network/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyName: pulumi.String("firewallPolicy"),
Priority: pulumi.Int(100),
ResourceGroupName: pulumi.String("rg1"),
RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
RuleCollections: pulumi.Array{
network.FirewallPolicyFilterRuleCollection{
Action: network.FirewallPolicyFilterRuleCollectionAction{
Type: network.FirewallPolicyFilterRuleCollectionActionTypeDeny,
},
Name: "Example-Filter-Rule-Collection",
Priority: 100,
RuleCollectionType: "FirewallPolicyFilterRuleCollection",
Rules: []interface{}{
network.NetworkRule{
DestinationAddresses: []string{
"*",
},
DestinationPorts: []string{
"*",
},
IpProtocols: []network.FirewallPolicyRuleNetworkProtocol{
network.FirewallPolicyRuleNetworkProtocolTCP,
},
Name: "network-rule1",
RuleType: "NetworkRule",
SourceAddresses: []string{
"10.1.25.0/24",
},
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyName("firewallPolicy")
.priority(100)
.resourceGroupName("rg1")
.ruleCollectionGroupName("ruleCollectionGroup1")
.ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
.action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
.type("Deny")
.build())
.name("Example-Filter-Rule-Collection")
.priority(100)
.ruleCollectionType("FirewallPolicyFilterRuleCollection")
.rules(NetworkRuleArgs.builder()
.destinationAddresses("*")
.destinationPorts("*")
.ipProtocols("TCP")
.name("network-rule1")
.ruleType("NetworkRule")
.sourceAddresses("10.1.25.0/24")
.build())
.build())
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
firewall_policy_name="firewallPolicy",
priority=100,
resource_group_name="rg1",
rule_collection_group_name="ruleCollectionGroup1",
rule_collections=[{
"action": {
"type": azure_native.network.FirewallPolicyFilterRuleCollectionActionType.DENY,
},
"name": "Example-Filter-Rule-Collection",
"priority": 100,
"rule_collection_type": "FirewallPolicyFilterRuleCollection",
"rules": [{
"destination_addresses": ["*"],
"destination_ports": ["*"],
"ip_protocols": [azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP],
"name": "network-rule1",
"rule_type": "NetworkRule",
"source_addresses": ["10.1.25.0/24"],
}],
}])
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
firewallPolicyName: "firewallPolicy",
priority: 100,
resourceGroupName: "rg1",
ruleCollectionGroupName: "ruleCollectionGroup1",
ruleCollections: [{
action: {
type: azure_native.network.FirewallPolicyFilterRuleCollectionActionType.Deny,
},
name: "Example-Filter-Rule-Collection",
priority: 100,
ruleCollectionType: "FirewallPolicyFilterRuleCollection",
rules: [{
destinationAddresses: ["*"],
destinationPorts: ["*"],
ipProtocols: [azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP],
name: "network-rule1",
ruleType: "NetworkRule",
sourceAddresses: ["10.1.25.0/24"],
}],
}],
});
resources:
firewallPolicyRuleCollectionGroup:
type: azure-native:network:FirewallPolicyRuleCollectionGroup
properties:
firewallPolicyName: firewallPolicy
priority: 100
resourceGroupName: rg1
ruleCollectionGroupName: ruleCollectionGroup1
ruleCollections:
- action:
type: Deny
name: Example-Filter-Rule-Collection
priority: 100
ruleCollectionType: FirewallPolicyFilterRuleCollection
rules:
- destinationAddresses:
- '*'
destinationPorts:
- '*'
ipProtocols:
- TCP
name: network-rule1
ruleType: NetworkRule
sourceAddresses:
- 10.1.25.0/24
Create FirewallPolicyRuleCollectionGroup With IpGroups
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
{
FirewallPolicyName = "firewallPolicy",
Priority = 110,
ResourceGroupName = "rg1",
RuleCollectionGroupName = "ruleCollectionGroup1",
RuleCollections = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
{
Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
{
Type = AzureNative.Network.FirewallPolicyFilterRuleCollectionActionType.Deny,
},
Name = "Example-Filter-Rule-Collection",
RuleCollectionType = "FirewallPolicyFilterRuleCollection",
Rules = new[]
{
new AzureNative.Network.Inputs.NetworkRuleArgs
{
DestinationIpGroups = new[]
{
"/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2",
},
DestinationPorts = new[]
{
"*",
},
IpProtocols = new[]
{
AzureNative.Network.FirewallPolicyRuleNetworkProtocol.TCP,
},
Name = "network-1",
RuleType = "NetworkRule",
SourceIpGroups = new[]
{
"/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1",
},
},
},
},
},
});
});
package main
import (
network "github.com/pulumi/pulumi-azure-native-sdk/network/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyName: pulumi.String("firewallPolicy"),
Priority: pulumi.Int(110),
ResourceGroupName: pulumi.String("rg1"),
RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
RuleCollections: pulumi.Array{
network.FirewallPolicyFilterRuleCollection{
Action: network.FirewallPolicyFilterRuleCollectionAction{
Type: network.FirewallPolicyFilterRuleCollectionActionTypeDeny,
},
Name: "Example-Filter-Rule-Collection",
RuleCollectionType: "FirewallPolicyFilterRuleCollection",
Rules: []interface{}{
network.NetworkRule{
DestinationIpGroups: []string{
"/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2",
},
DestinationPorts: []string{
"*",
},
IpProtocols: []network.FirewallPolicyRuleNetworkProtocol{
network.FirewallPolicyRuleNetworkProtocolTCP,
},
Name: "network-1",
RuleType: "NetworkRule",
SourceIpGroups: []string{
"/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1",
},
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyName("firewallPolicy")
.priority(110)
.resourceGroupName("rg1")
.ruleCollectionGroupName("ruleCollectionGroup1")
.ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
.action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
.type("Deny")
.build())
.name("Example-Filter-Rule-Collection")
.ruleCollectionType("FirewallPolicyFilterRuleCollection")
.rules(NetworkRuleArgs.builder()
.destinationIpGroups("/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2")
.destinationPorts("*")
.ipProtocols("TCP")
.name("network-1")
.ruleType("NetworkRule")
.sourceIpGroups("/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1")
.build())
.build())
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
firewall_policy_name="firewallPolicy",
priority=110,
resource_group_name="rg1",
rule_collection_group_name="ruleCollectionGroup1",
rule_collections=[{
"action": {
"type": azure_native.network.FirewallPolicyFilterRuleCollectionActionType.DENY,
},
"name": "Example-Filter-Rule-Collection",
"rule_collection_type": "FirewallPolicyFilterRuleCollection",
"rules": [{
"destination_ip_groups": ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2"],
"destination_ports": ["*"],
"ip_protocols": [azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP],
"name": "network-1",
"rule_type": "NetworkRule",
"source_ip_groups": ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1"],
}],
}])
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
firewallPolicyName: "firewallPolicy",
priority: 110,
resourceGroupName: "rg1",
ruleCollectionGroupName: "ruleCollectionGroup1",
ruleCollections: [{
action: {
type: azure_native.network.FirewallPolicyFilterRuleCollectionActionType.Deny,
},
name: "Example-Filter-Rule-Collection",
ruleCollectionType: "FirewallPolicyFilterRuleCollection",
rules: [{
destinationIpGroups: ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2"],
destinationPorts: ["*"],
ipProtocols: [azure_native.network.FirewallPolicyRuleNetworkProtocol.TCP],
name: "network-1",
ruleType: "NetworkRule",
sourceIpGroups: ["/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1"],
}],
}],
});
resources:
firewallPolicyRuleCollectionGroup:
type: azure-native:network:FirewallPolicyRuleCollectionGroup
properties:
firewallPolicyName: firewallPolicy
priority: 110
resourceGroupName: rg1
ruleCollectionGroupName: ruleCollectionGroup1
ruleCollections:
- action:
type: Deny
name: Example-Filter-Rule-Collection
ruleCollectionType: FirewallPolicyFilterRuleCollection
rules:
- destinationIpGroups:
- /subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups2
destinationPorts:
- '*'
ipProtocols:
- TCP
name: network-1
ruleType: NetworkRule
sourceIpGroups:
- /subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1
Create FirewallPolicyRuleCollectionGroup With Web Categories
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
{
FirewallPolicyName = "firewallPolicy",
Priority = 110,
ResourceGroupName = "rg1",
RuleCollectionGroupName = "ruleCollectionGroup1",
RuleCollections = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
{
Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
{
Type = AzureNative.Network.FirewallPolicyFilterRuleCollectionActionType.Deny,
},
Name = "Example-Filter-Rule-Collection",
RuleCollectionType = "FirewallPolicyFilterRuleCollection",
Rules = new[]
{
new AzureNative.Network.Inputs.ApplicationRuleArgs
{
Description = "Deny inbound rule",
Name = "rule1",
Protocols = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyRuleApplicationProtocolArgs
{
Port = 443,
ProtocolType = AzureNative.Network.FirewallPolicyRuleApplicationProtocolType.Https,
},
},
RuleType = "ApplicationRule",
SourceAddresses = new[]
{
"216.58.216.164",
"10.0.0.0/24",
},
WebCategories = new[]
{
"Hacking",
},
},
},
},
},
});
});
package main
import (
network "github.com/pulumi/pulumi-azure-native-sdk/network/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyName: pulumi.String("firewallPolicy"),
Priority: pulumi.Int(110),
ResourceGroupName: pulumi.String("rg1"),
RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
RuleCollections: pulumi.Array{
network.FirewallPolicyFilterRuleCollection{
Action: network.FirewallPolicyFilterRuleCollectionAction{
Type: network.FirewallPolicyFilterRuleCollectionActionTypeDeny,
},
Name: "Example-Filter-Rule-Collection",
RuleCollectionType: "FirewallPolicyFilterRuleCollection",
Rules: []interface{}{
network.ApplicationRule{
Description: "Deny inbound rule",
Name: "rule1",
Protocols: []network.FirewallPolicyRuleApplicationProtocol{
{
Port: 443,
ProtocolType: network.FirewallPolicyRuleApplicationProtocolTypeHttps,
},
},
RuleType: "ApplicationRule",
SourceAddresses: []string{
"216.58.216.164",
"10.0.0.0/24",
},
WebCategories: []string{
"Hacking",
},
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyName("firewallPolicy")
.priority(110)
.resourceGroupName("rg1")
.ruleCollectionGroupName("ruleCollectionGroup1")
.ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
.action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
.type("Deny")
.build())
.name("Example-Filter-Rule-Collection")
.ruleCollectionType("FirewallPolicyFilterRuleCollection")
.rules(ApplicationRuleArgs.builder()
.description("Deny inbound rule")
.name("rule1")
.protocols(FirewallPolicyRuleApplicationProtocolArgs.builder()
.port(443)
.protocolType("Https")
.build())
.ruleType("ApplicationRule")
.sourceAddresses(
"216.58.216.164",
"10.0.0.0/24")
.webCategories("Hacking")
.build())
.build())
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
firewall_policy_name="firewallPolicy",
priority=110,
resource_group_name="rg1",
rule_collection_group_name="ruleCollectionGroup1",
rule_collections=[{
"action": {
"type": azure_native.network.FirewallPolicyFilterRuleCollectionActionType.DENY,
},
"name": "Example-Filter-Rule-Collection",
"rule_collection_type": "FirewallPolicyFilterRuleCollection",
"rules": [{
"description": "Deny inbound rule",
"name": "rule1",
"protocols": [{
"port": 443,
"protocol_type": azure_native.network.FirewallPolicyRuleApplicationProtocolType.HTTPS,
}],
"rule_type": "ApplicationRule",
"source_addresses": [
"216.58.216.164",
"10.0.0.0/24",
],
"web_categories": ["Hacking"],
}],
}])
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
firewallPolicyName: "firewallPolicy",
priority: 110,
resourceGroupName: "rg1",
ruleCollectionGroupName: "ruleCollectionGroup1",
ruleCollections: [{
action: {
type: azure_native.network.FirewallPolicyFilterRuleCollectionActionType.Deny,
},
name: "Example-Filter-Rule-Collection",
ruleCollectionType: "FirewallPolicyFilterRuleCollection",
rules: [{
description: "Deny inbound rule",
name: "rule1",
protocols: [{
port: 443,
protocolType: azure_native.network.FirewallPolicyRuleApplicationProtocolType.Https,
}],
ruleType: "ApplicationRule",
sourceAddresses: [
"216.58.216.164",
"10.0.0.0/24",
],
webCategories: ["Hacking"],
}],
}],
});
resources:
firewallPolicyRuleCollectionGroup:
type: azure-native:network:FirewallPolicyRuleCollectionGroup
properties:
firewallPolicyName: firewallPolicy
priority: 110
resourceGroupName: rg1
ruleCollectionGroupName: ruleCollectionGroup1
ruleCollections:
- action:
type: Deny
name: Example-Filter-Rule-Collection
ruleCollectionType: FirewallPolicyFilterRuleCollection
rules:
- description: Deny inbound rule
name: rule1
protocols:
- port: 443
protocolType: Https
ruleType: ApplicationRule
sourceAddresses:
- 216.58.216.164
- 10.0.0.0/24
webCategories:
- Hacking
Create FirewallPolicyRuleCollectionGroup With http header to insert
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var firewallPolicyRuleCollectionGroup = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", new()
{
FirewallPolicyName = "firewallPolicy",
Priority = 110,
ResourceGroupName = "rg1",
RuleCollectionGroupName = "ruleCollectionGroup1",
RuleCollections = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
{
Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
{
Type = AzureNative.Network.FirewallPolicyFilterRuleCollectionActionType.Allow,
},
Name = "Example-Filter-Rule-Collection",
RuleCollectionType = "FirewallPolicyFilterRuleCollection",
Rules = new[]
{
new AzureNative.Network.Inputs.ApplicationRuleArgs
{
Description = "Insert HTTP header rule",
FqdnTags = new[]
{
"WindowsVirtualDesktop",
},
HttpHeadersToInsert = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyHttpHeaderToInsertArgs
{
HeaderName = "Restrict-Access-To-Tenants",
HeaderValue = "contoso.com,fabrikam.onmicrosoft.com",
},
},
Name = "rule1",
Protocols = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyRuleApplicationProtocolArgs
{
Port = 80,
ProtocolType = AzureNative.Network.FirewallPolicyRuleApplicationProtocolType.Http,
},
},
RuleType = "ApplicationRule",
SourceAddresses = new[]
{
"216.58.216.164",
"10.0.0.0/24",
},
},
},
},
},
});
});
package main
import (
network "github.com/pulumi/pulumi-azure-native-sdk/network/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroup", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyName: pulumi.String("firewallPolicy"),
Priority: pulumi.Int(110),
ResourceGroupName: pulumi.String("rg1"),
RuleCollectionGroupName: pulumi.String("ruleCollectionGroup1"),
RuleCollections: pulumi.Array{
network.FirewallPolicyFilterRuleCollection{
Action: network.FirewallPolicyFilterRuleCollectionAction{
Type: network.FirewallPolicyFilterRuleCollectionActionTypeAllow,
},
Name: "Example-Filter-Rule-Collection",
RuleCollectionType: "FirewallPolicyFilterRuleCollection",
Rules: []interface{}{
network.ApplicationRule{
Description: "Insert HTTP header rule",
FqdnTags: []string{
"WindowsVirtualDesktop",
},
HttpHeadersToInsert: []network.FirewallPolicyHttpHeaderToInsert{
{
HeaderName: "Restrict-Access-To-Tenants",
HeaderValue: "contoso.com,fabrikam.onmicrosoft.com",
},
},
Name: "rule1",
Protocols: []network.FirewallPolicyRuleApplicationProtocol{
{
Port: 80,
ProtocolType: network.FirewallPolicyRuleApplicationProtocolTypeHttp,
},
},
RuleType: "ApplicationRule",
SourceAddresses: []string{
"216.58.216.164",
"10.0.0.0/24",
},
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroup;
import com.pulumi.azurenative.network.FirewallPolicyRuleCollectionGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var firewallPolicyRuleCollectionGroup = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyName("firewallPolicy")
.priority(110)
.resourceGroupName("rg1")
.ruleCollectionGroupName("ruleCollectionGroup1")
.ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
.action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
.type("Allow")
.build())
.name("Example-Filter-Rule-Collection")
.ruleCollectionType("FirewallPolicyFilterRuleCollection")
.rules(ApplicationRuleArgs.builder()
.description("Insert HTTP header rule")
.fqdnTags("WindowsVirtualDesktop")
.httpHeadersToInsert(FirewallPolicyHttpHeaderToInsertArgs.builder()
.headerName("Restrict-Access-To-Tenants")
.headerValue("contoso.com,fabrikam.onmicrosoft.com")
.build())
.name("rule1")
.protocols(FirewallPolicyRuleApplicationProtocolArgs.builder()
.port(80)
.protocolType("Http")
.build())
.ruleType("ApplicationRule")
.sourceAddresses(
"216.58.216.164",
"10.0.0.0/24")
.build())
.build())
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
firewall_policy_rule_collection_group = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup",
firewall_policy_name="firewallPolicy",
priority=110,
resource_group_name="rg1",
rule_collection_group_name="ruleCollectionGroup1",
rule_collections=[{
"action": {
"type": azure_native.network.FirewallPolicyFilterRuleCollectionActionType.ALLOW,
},
"name": "Example-Filter-Rule-Collection",
"rule_collection_type": "FirewallPolicyFilterRuleCollection",
"rules": [{
"description": "Insert HTTP header rule",
"fqdn_tags": ["WindowsVirtualDesktop"],
"http_headers_to_insert": [{
"header_name": "Restrict-Access-To-Tenants",
"header_value": "contoso.com,fabrikam.onmicrosoft.com",
}],
"name": "rule1",
"protocols": [{
"port": 80,
"protocol_type": azure_native.network.FirewallPolicyRuleApplicationProtocolType.HTTP,
}],
"rule_type": "ApplicationRule",
"source_addresses": [
"216.58.216.164",
"10.0.0.0/24",
],
}],
}])
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const firewallPolicyRuleCollectionGroup = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroup", {
firewallPolicyName: "firewallPolicy",
priority: 110,
resourceGroupName: "rg1",
ruleCollectionGroupName: "ruleCollectionGroup1",
ruleCollections: [{
action: {
type: azure_native.network.FirewallPolicyFilterRuleCollectionActionType.Allow,
},
name: "Example-Filter-Rule-Collection",
ruleCollectionType: "FirewallPolicyFilterRuleCollection",
rules: [{
description: "Insert HTTP header rule",
fqdnTags: ["WindowsVirtualDesktop"],
httpHeadersToInsert: [{
headerName: "Restrict-Access-To-Tenants",
headerValue: "contoso.com,fabrikam.onmicrosoft.com",
}],
name: "rule1",
protocols: [{
port: 80,
protocolType: azure_native.network.FirewallPolicyRuleApplicationProtocolType.Http,
}],
ruleType: "ApplicationRule",
sourceAddresses: [
"216.58.216.164",
"10.0.0.0/24",
],
}],
}],
});
resources:
firewallPolicyRuleCollectionGroup:
type: azure-native:network:FirewallPolicyRuleCollectionGroup
properties:
firewallPolicyName: firewallPolicy
priority: 110
resourceGroupName: rg1
ruleCollectionGroupName: ruleCollectionGroup1
ruleCollections:
- action:
type: Allow
name: Example-Filter-Rule-Collection
ruleCollectionType: FirewallPolicyFilterRuleCollection
rules:
- description: Insert HTTP header rule
fqdnTags:
- WindowsVirtualDesktop
httpHeadersToInsert:
- headerName: Restrict-Access-To-Tenants
headerValue: contoso.com,fabrikam.onmicrosoft.com
name: rule1
protocols:
- port: 80
protocolType: Http
ruleType: ApplicationRule
sourceAddresses:
- 216.58.216.164
- 10.0.0.0/24
Create FirewallPolicyRuleCollectionGroup Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new FirewallPolicyRuleCollectionGroup(name: string, args: FirewallPolicyRuleCollectionGroupArgs, opts?: CustomResourceOptions);
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
args: FirewallPolicyRuleCollectionGroupArgs,
opts: Optional[ResourceOptions] = None)
@overload
def FirewallPolicyRuleCollectionGroup(resource_name: str,
opts: Optional[ResourceOptions] = None,
firewall_policy_name: Optional[str] = None,
resource_group_name: Optional[str] = None,
id: Optional[str] = None,
name: Optional[str] = None,
priority: Optional[int] = None,
rule_collection_group_name: Optional[str] = None,
rule_collections: Optional[Sequence[Union[FirewallPolicyFilterRuleCollectionArgs, FirewallPolicyNatRuleCollectionArgs]]] = None)
func NewFirewallPolicyRuleCollectionGroup(ctx *Context, name string, args FirewallPolicyRuleCollectionGroupArgs, opts ...ResourceOption) (*FirewallPolicyRuleCollectionGroup, error)
public FirewallPolicyRuleCollectionGroup(string name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions? opts = null)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args)
public FirewallPolicyRuleCollectionGroup(String name, FirewallPolicyRuleCollectionGroupArgs args, CustomResourceOptions options)
type: azure-native:network:FirewallPolicyRuleCollectionGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FirewallPolicyRuleCollectionGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var firewallPolicyRuleCollectionGroupResource = new AzureNative.Network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", new()
{
FirewallPolicyName = "string",
ResourceGroupName = "string",
Id = "string",
Name = "string",
Priority = 0,
RuleCollectionGroupName = "string",
RuleCollections = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionArgs
{
RuleCollectionType = "FirewallPolicyFilterRuleCollection",
Action = new AzureNative.Network.Inputs.FirewallPolicyFilterRuleCollectionActionArgs
{
Type = "string",
},
Name = "string",
Priority = 0,
Rules = new[]
{
new AzureNative.Network.Inputs.ApplicationRuleArgs
{
RuleType = "ApplicationRule",
HttpHeadersToInsert = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyHttpHeaderToInsertArgs
{
HeaderName = "string",
HeaderValue = "string",
},
},
FqdnTags = new[]
{
"string",
},
Description = "string",
Name = "string",
Protocols = new[]
{
new AzureNative.Network.Inputs.FirewallPolicyRuleApplicationProtocolArgs
{
Port = 0,
ProtocolType = "string",
},
},
DestinationAddresses = new[]
{
"string",
},
SourceAddresses = new[]
{
"string",
},
SourceIpGroups = new[]
{
"string",
},
TargetFqdns = new[]
{
"string",
},
TargetUrls = new[]
{
"string",
},
TerminateTLS = false,
WebCategories = new[]
{
"string",
},
},
},
},
},
});
example, err := network.NewFirewallPolicyRuleCollectionGroup(ctx, "firewallPolicyRuleCollectionGroupResource", &network.FirewallPolicyRuleCollectionGroupArgs{
FirewallPolicyName: pulumi.String("string"),
ResourceGroupName: pulumi.String("string"),
Id: pulumi.String("string"),
Name: pulumi.String("string"),
Priority: pulumi.Int(0),
RuleCollectionGroupName: pulumi.String("string"),
RuleCollections: pulumi.Array{
network.FirewallPolicyFilterRuleCollection{
RuleCollectionType: "FirewallPolicyFilterRuleCollection",
Action: network.FirewallPolicyFilterRuleCollectionAction{
Type: "string",
},
Name: "string",
Priority: 0,
Rules: []interface{}{
network.ApplicationRule{
RuleType: "ApplicationRule",
HttpHeadersToInsert: []network.FirewallPolicyHttpHeaderToInsert{
{
HeaderName: "string",
HeaderValue: "string",
},
},
FqdnTags: []string{
"string",
},
Description: "string",
Name: "string",
Protocols: []network.FirewallPolicyRuleApplicationProtocol{
{
Port: 0,
ProtocolType: "string",
},
},
DestinationAddresses: []string{
"string",
},
SourceAddresses: []string{
"string",
},
SourceIpGroups: []string{
"string",
},
TargetFqdns: []string{
"string",
},
TargetUrls: []string{
"string",
},
TerminateTLS: false,
WebCategories: []string{
"string",
},
},
},
},
},
})
var firewallPolicyRuleCollectionGroupResource = new FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", FirewallPolicyRuleCollectionGroupArgs.builder()
.firewallPolicyName("string")
.resourceGroupName("string")
.id("string")
.name("string")
.priority(0)
.ruleCollectionGroupName("string")
.ruleCollections(FirewallPolicyFilterRuleCollectionArgs.builder()
.ruleCollectionType("FirewallPolicyFilterRuleCollection")
.action(FirewallPolicyFilterRuleCollectionActionArgs.builder()
.type("string")
.build())
.name("string")
.priority(0)
.rules(ApplicationRuleArgs.builder()
.ruleType("ApplicationRule")
.httpHeadersToInsert(FirewallPolicyHttpHeaderToInsertArgs.builder()
.headerName("string")
.headerValue("string")
.build())
.fqdnTags("string")
.description("string")
.name("string")
.protocols(FirewallPolicyRuleApplicationProtocolArgs.builder()
.port(0)
.protocolType("string")
.build())
.destinationAddresses("string")
.sourceAddresses("string")
.sourceIpGroups("string")
.targetFqdns("string")
.targetUrls("string")
.terminateTLS(false)
.webCategories("string")
.build())
.build())
.build());
firewall_policy_rule_collection_group_resource = azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource",
firewall_policy_name="string",
resource_group_name="string",
id="string",
name="string",
priority=0,
rule_collection_group_name="string",
rule_collections=[{
"ruleCollectionType": "FirewallPolicyFilterRuleCollection",
"action": {
"type": "string",
},
"name": "string",
"priority": 0,
"rules": [{
"ruleType": "ApplicationRule",
"httpHeadersToInsert": [{
"headerName": "string",
"headerValue": "string",
}],
"fqdnTags": ["string"],
"description": "string",
"name": "string",
"protocols": [{
"port": 0,
"protocolType": "string",
}],
"destinationAddresses": ["string"],
"sourceAddresses": ["string"],
"sourceIpGroups": ["string"],
"targetFqdns": ["string"],
"targetUrls": ["string"],
"terminateTLS": False,
"webCategories": ["string"],
}],
}])
const firewallPolicyRuleCollectionGroupResource = new azure_native.network.FirewallPolicyRuleCollectionGroup("firewallPolicyRuleCollectionGroupResource", {
firewallPolicyName: "string",
resourceGroupName: "string",
id: "string",
name: "string",
priority: 0,
ruleCollectionGroupName: "string",
ruleCollections: [{
ruleCollectionType: "FirewallPolicyFilterRuleCollection",
action: {
type: "string",
},
name: "string",
priority: 0,
rules: [{
ruleType: "ApplicationRule",
httpHeadersToInsert: [{
headerName: "string",
headerValue: "string",
}],
fqdnTags: ["string"],
description: "string",
name: "string",
protocols: [{
port: 0,
protocolType: "string",
}],
destinationAddresses: ["string"],
sourceAddresses: ["string"],
sourceIpGroups: ["string"],
targetFqdns: ["string"],
targetUrls: ["string"],
terminateTLS: false,
webCategories: ["string"],
}],
}],
});
type: azure-native:network:FirewallPolicyRuleCollectionGroup
properties:
firewallPolicyName: string
id: string
name: string
priority: 0
resourceGroupName: string
ruleCollectionGroupName: string
ruleCollections:
- action:
type: string
name: string
priority: 0
ruleCollectionType: FirewallPolicyFilterRuleCollection
rules:
- description: string
destinationAddresses:
- string
fqdnTags:
- string
httpHeadersToInsert:
- headerName: string
headerValue: string
name: string
protocols:
- port: 0
protocolType: string
ruleType: ApplicationRule
sourceAddresses:
- string
sourceIpGroups:
- string
targetFqdns:
- string
targetUrls:
- string
terminateTLS: false
webCategories:
- string
FirewallPolicyRuleCollectionGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The FirewallPolicyRuleCollectionGroup resource accepts the following input properties:
- Firewall
Policy stringName - The name of the Firewall Policy.
- Resource
Group stringName - The name of the resource group.
- Id string
- Resource ID.
- Name string
- The name of the resource that is unique within a resource group. This name can be used to access the resource.
- Priority int
- Priority of the Firewall Policy Rule Collection Group resource.
- Rule
Collection stringGroup Name - The name of the FirewallPolicyRuleCollectionGroup.
- Rule
Collections List<Union<Pulumi.Azure Native. Network. Inputs. Firewall Policy Filter Rule Collection, Pulumi. Azure Native. Network. Inputs. Firewall Policy Nat Rule Collection Args>> - Group of Firewall Policy rule collections.
- Firewall
Policy stringName - The name of the Firewall Policy.
- Resource
Group stringName - The name of the resource group.
- Id string
- Resource ID.
- Name string
- The name of the resource that is unique within a resource group. This name can be used to access the resource.
- Priority int
- Priority of the Firewall Policy Rule Collection Group resource.
- Rule
Collection stringGroup Name - The name of the FirewallPolicyRuleCollectionGroup.
- Rule
Collections []interface{} - Group of Firewall Policy rule collections.
- firewall
Policy StringName - The name of the Firewall Policy.
- resource
Group StringName - The name of the resource group.
- id String
- Resource ID.
- name String
- The name of the resource that is unique within a resource group. This name can be used to access the resource.
- priority Integer
- Priority of the Firewall Policy Rule Collection Group resource.
- rule
Collection StringGroup Name - The name of the FirewallPolicyRuleCollectionGroup.
- rule
Collections List<Either<FirewallPolicy Filter Rule Collection,Firewall Policy Nat Rule Collection Args>> - Group of Firewall Policy rule collections.
- firewall
Policy stringName - The name of the Firewall Policy.
- resource
Group stringName - The name of the resource group.
- id string
- Resource ID.
- name string
- The name of the resource that is unique within a resource group. This name can be used to access the resource.
- priority number
- Priority of the Firewall Policy Rule Collection Group resource.
- rule
Collection stringGroup Name - The name of the FirewallPolicyRuleCollectionGroup.
- rule
Collections (FirewallPolicy Filter Rule Collection | Firewall Policy Nat Rule Collection Args)[] - Group of Firewall Policy rule collections.
- firewall_
policy_ strname - The name of the Firewall Policy.
- resource_
group_ strname - The name of the resource group.
- id str
- Resource ID.
- name str
- The name of the resource that is unique within a resource group. This name can be used to access the resource.
- priority int
- Priority of the Firewall Policy Rule Collection Group resource.
- rule_
collection_ strgroup_ name - The name of the FirewallPolicyRuleCollectionGroup.
- rule_
collections Sequence[Union[FirewallPolicy Filter Rule Collection Args, Firewall Policy Nat Rule Collection Args]] - Group of Firewall Policy rule collections.
- firewall
Policy StringName - The name of the Firewall Policy.
- resource
Group StringName - The name of the resource group.
- id String
- Resource ID.
- name String
- The name of the resource that is unique within a resource group. This name can be used to access the resource.
- priority Number
- Priority of the Firewall Policy Rule Collection Group resource.
- rule
Collection StringGroup Name - The name of the FirewallPolicyRuleCollectionGroup.
- rule
Collections List<Property Map | Property Map> - Group of Firewall Policy rule collections.
Outputs
All input properties are implicitly available as output properties. Additionally, the FirewallPolicyRuleCollectionGroup resource produces the following output properties:
- Etag string
- A unique read-only string that changes whenever the resource is updated.
- Id string
- The provider-assigned unique ID for this managed resource.
- Provisioning
State string - The provisioning state of the firewall policy rule collection group resource.
- Type string
- Rule Group type.
- Etag string
- A unique read-only string that changes whenever the resource is updated.
- Id string
- The provider-assigned unique ID for this managed resource.
- Provisioning
State string - The provisioning state of the firewall policy rule collection group resource.
- Type string
- Rule Group type.
- etag String
- A unique read-only string that changes whenever the resource is updated.
- id String
- The provider-assigned unique ID for this managed resource.
- provisioning
State String - The provisioning state of the firewall policy rule collection group resource.
- type String
- Rule Group type.
- etag string
- A unique read-only string that changes whenever the resource is updated.
- id string
- The provider-assigned unique ID for this managed resource.
- provisioning
State string - The provisioning state of the firewall policy rule collection group resource.
- type string
- Rule Group type.
- etag str
- A unique read-only string that changes whenever the resource is updated.
- id str
- The provider-assigned unique ID for this managed resource.
- provisioning_
state str - The provisioning state of the firewall policy rule collection group resource.
- type str
- Rule Group type.
- etag String
- A unique read-only string that changes whenever the resource is updated.
- id String
- The provider-assigned unique ID for this managed resource.
- provisioning
State String - The provisioning state of the firewall policy rule collection group resource.
- type String
- Rule Group type.
Supporting Types
ApplicationRule, ApplicationRuleArgs
- Description string
- Description of the rule.
- Destination
Addresses List<string> - List of destination IP addresses or Service Tags.
- List<string>
- List of FQDN Tags for this rule.
- Http
Headers List<Pulumi.To Insert Azure Native. Network. Inputs. Firewall Policy Http Header To Insert> - List of HTTP/S headers to insert.
- Name string
- Name of the rule.
- Protocols
List<Pulumi.
Azure Native. Network. Inputs. Firewall Policy Rule Application Protocol> - Array of Application Protocols.
- Source
Addresses List<string> - List of source IP addresses for this rule.
- Source
Ip List<string>Groups - List of source IpGroups for this rule.
- Target
Fqdns List<string> - List of FQDNs for this rule.
- Target
Urls List<string> - List of Urls for this rule condition.
- Terminate
TLS bool - Terminate TLS connections for this rule.
- Web
Categories List<string> - List of destination azure web categories.
- Description string
- Description of the rule.
- Destination
Addresses []string - List of destination IP addresses or Service Tags.
- []string
- List of FQDN Tags for this rule.
- Http
Headers []FirewallTo Insert Policy Http Header To Insert - List of HTTP/S headers to insert.
- Name string
- Name of the rule.
- Protocols
[]Firewall
Policy Rule Application Protocol - Array of Application Protocols.
- Source
Addresses []string - List of source IP addresses for this rule.
- Source
Ip []stringGroups - List of source IpGroups for this rule.
- Target
Fqdns []string - List of FQDNs for this rule.
- Target
Urls []string - List of Urls for this rule condition.
- Terminate
TLS bool - Terminate TLS connections for this rule.
- Web
Categories []string - List of destination azure web categories.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- List<String>
- List of FQDN Tags for this rule.
- http
Headers List<FirewallTo Insert Policy Http Header To Insert> - List of HTTP/S headers to insert.
- name String
- Name of the rule.
- protocols
List<Firewall
Policy Rule Application Protocol> - Array of Application Protocols.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- target
Fqdns List<String> - List of FQDNs for this rule.
- target
Urls List<String> - List of Urls for this rule condition.
- terminate
TLS Boolean - Terminate TLS connections for this rule.
- web
Categories List<String> - List of destination azure web categories.
- description string
- Description of the rule.
- destination
Addresses string[] - List of destination IP addresses or Service Tags.
- string[]
- List of FQDN Tags for this rule.
- http
Headers FirewallTo Insert Policy Http Header To Insert[] - List of HTTP/S headers to insert.
- name string
- Name of the rule.
- protocols
Firewall
Policy Rule Application Protocol[] - Array of Application Protocols.
- source
Addresses string[] - List of source IP addresses for this rule.
- source
Ip string[]Groups - List of source IpGroups for this rule.
- target
Fqdns string[] - List of FQDNs for this rule.
- target
Urls string[] - List of Urls for this rule condition.
- terminate
TLS boolean - Terminate TLS connections for this rule.
- web
Categories string[] - List of destination azure web categories.
- description str
- Description of the rule.
- destination_
addresses Sequence[str] - List of destination IP addresses or Service Tags.
- Sequence[str]
- List of FQDN Tags for this rule.
- http_
headers_ Sequence[Firewallto_ insert Policy Http Header To Insert] - List of HTTP/S headers to insert.
- name str
- Name of the rule.
- protocols
Sequence[Firewall
Policy Rule Application Protocol] - Array of Application Protocols.
- source_
addresses Sequence[str] - List of source IP addresses for this rule.
- source_
ip_ Sequence[str]groups - List of source IpGroups for this rule.
- target_
fqdns Sequence[str] - List of FQDNs for this rule.
- target_
urls Sequence[str] - List of Urls for this rule condition.
- terminate_
tls bool - Terminate TLS connections for this rule.
- web_
categories Sequence[str] - List of destination azure web categories.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- List<String>
- List of FQDN Tags for this rule.
- http
Headers List<Property Map>To Insert - List of HTTP/S headers to insert.
- name String
- Name of the rule.
- protocols List<Property Map>
- Array of Application Protocols.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- target
Fqdns List<String> - List of FQDNs for this rule.
- target
Urls List<String> - List of Urls for this rule condition.
- terminate
TLS Boolean - Terminate TLS connections for this rule.
- web
Categories List<String> - List of destination azure web categories.
ApplicationRuleResponse, ApplicationRuleResponseArgs
- Description string
- Description of the rule.
- Destination
Addresses List<string> - List of destination IP addresses or Service Tags.
- List<string>
- List of FQDN Tags for this rule.
- Http
Headers List<Pulumi.To Insert Azure Native. Network. Inputs. Firewall Policy Http Header To Insert Response> - List of HTTP/S headers to insert.
- Name string
- Name of the rule.
- Protocols
List<Pulumi.
Azure Native. Network. Inputs. Firewall Policy Rule Application Protocol Response> - Array of Application Protocols.
- Source
Addresses List<string> - List of source IP addresses for this rule.
- Source
Ip List<string>Groups - List of source IpGroups for this rule.
- Target
Fqdns List<string> - List of FQDNs for this rule.
- Target
Urls List<string> - List of Urls for this rule condition.
- Terminate
TLS bool - Terminate TLS connections for this rule.
- Web
Categories List<string> - List of destination azure web categories.
- Description string
- Description of the rule.
- Destination
Addresses []string - List of destination IP addresses or Service Tags.
- []string
- List of FQDN Tags for this rule.
- Http
Headers []FirewallTo Insert Policy Http Header To Insert Response - List of HTTP/S headers to insert.
- Name string
- Name of the rule.
- Protocols
[]Firewall
Policy Rule Application Protocol Response - Array of Application Protocols.
- Source
Addresses []string - List of source IP addresses for this rule.
- Source
Ip []stringGroups - List of source IpGroups for this rule.
- Target
Fqdns []string - List of FQDNs for this rule.
- Target
Urls []string - List of Urls for this rule condition.
- Terminate
TLS bool - Terminate TLS connections for this rule.
- Web
Categories []string - List of destination azure web categories.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- List<String>
- List of FQDN Tags for this rule.
- http
Headers List<FirewallTo Insert Policy Http Header To Insert Response> - List of HTTP/S headers to insert.
- name String
- Name of the rule.
- protocols
List<Firewall
Policy Rule Application Protocol Response> - Array of Application Protocols.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- target
Fqdns List<String> - List of FQDNs for this rule.
- target
Urls List<String> - List of Urls for this rule condition.
- terminate
TLS Boolean - Terminate TLS connections for this rule.
- web
Categories List<String> - List of destination azure web categories.
- description string
- Description of the rule.
- destination
Addresses string[] - List of destination IP addresses or Service Tags.
- string[]
- List of FQDN Tags for this rule.
- http
Headers FirewallTo Insert Policy Http Header To Insert Response[] - List of HTTP/S headers to insert.
- name string
- Name of the rule.
- protocols
Firewall
Policy Rule Application Protocol Response[] - Array of Application Protocols.
- source
Addresses string[] - List of source IP addresses for this rule.
- source
Ip string[]Groups - List of source IpGroups for this rule.
- target
Fqdns string[] - List of FQDNs for this rule.
- target
Urls string[] - List of Urls for this rule condition.
- terminate
TLS boolean - Terminate TLS connections for this rule.
- web
Categories string[] - List of destination azure web categories.
- description str
- Description of the rule.
- destination_
addresses Sequence[str] - List of destination IP addresses or Service Tags.
- Sequence[str]
- List of FQDN Tags for this rule.
- http_
headers_ Sequence[Firewallto_ insert Policy Http Header To Insert Response] - List of HTTP/S headers to insert.
- name str
- Name of the rule.
- protocols
Sequence[Firewall
Policy Rule Application Protocol Response] - Array of Application Protocols.
- source_
addresses Sequence[str] - List of source IP addresses for this rule.
- source_
ip_ Sequence[str]groups - List of source IpGroups for this rule.
- target_
fqdns Sequence[str] - List of FQDNs for this rule.
- target_
urls Sequence[str] - List of Urls for this rule condition.
- terminate_
tls bool - Terminate TLS connections for this rule.
- web_
categories Sequence[str] - List of destination azure web categories.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- List<String>
- List of FQDN Tags for this rule.
- http
Headers List<Property Map>To Insert - List of HTTP/S headers to insert.
- name String
- Name of the rule.
- protocols List<Property Map>
- Array of Application Protocols.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- target
Fqdns List<String> - List of FQDNs for this rule.
- target
Urls List<String> - List of Urls for this rule condition.
- terminate
TLS Boolean - Terminate TLS connections for this rule.
- web
Categories List<String> - List of destination azure web categories.
FirewallPolicyFilterRuleCollection, FirewallPolicyFilterRuleCollectionArgs
- Action
Pulumi.
Azure Native. Network. Inputs. Firewall Policy Filter Rule Collection Action - The action type of a Filter rule collection.
- Name string
- The name of the rule collection.
- Priority int
- Priority of the Firewall Policy Rule Collection resource.
- Rules List<object>
- List of rules included in a rule collection.
- Action
Firewall
Policy Filter Rule Collection Action - The action type of a Filter rule collection.
- Name string
- The name of the rule collection.
- Priority int
- Priority of the Firewall Policy Rule Collection resource.
- Rules []interface{}
- List of rules included in a rule collection.
- action
Firewall
Policy Filter Rule Collection Action - The action type of a Filter rule collection.
- name String
- The name of the rule collection.
- priority Integer
- Priority of the Firewall Policy Rule Collection resource.
- rules List<Object>
- List of rules included in a rule collection.
- action
Firewall
Policy Filter Rule Collection Action - The action type of a Filter rule collection.
- name string
- The name of the rule collection.
- priority number
- Priority of the Firewall Policy Rule Collection resource.
- rules
(Application
Rule | Nat Rule | Network Rule)[] - List of rules included in a rule collection.
- action
Firewall
Policy Filter Rule Collection Action - The action type of a Filter rule collection.
- name str
- The name of the rule collection.
- priority int
- Priority of the Firewall Policy Rule Collection resource.
- rules
Sequence[Union[Application
Rule, Nat Rule, Network Rule]] - List of rules included in a rule collection.
- action Property Map
- The action type of a Filter rule collection.
- name String
- The name of the rule collection.
- priority Number
- Priority of the Firewall Policy Rule Collection resource.
- rules List<Property Map | Property Map | Property Map>
- List of rules included in a rule collection.
FirewallPolicyFilterRuleCollectionAction, FirewallPolicyFilterRuleCollectionActionArgs
- Type
string | Pulumi.
Azure Native. Network. Firewall Policy Filter Rule Collection Action Type - The type of action.
- Type
string | Firewall
Policy Filter Rule Collection Action Type - The type of action.
- type
String | Firewall
Policy Filter Rule Collection Action Type - The type of action.
- type
string | Firewall
Policy Filter Rule Collection Action Type - The type of action.
- type
str | Firewall
Policy Filter Rule Collection Action Type - The type of action.
- type String | "Allow" | "Deny"
- The type of action.
FirewallPolicyFilterRuleCollectionActionResponse, FirewallPolicyFilterRuleCollectionActionResponseArgs
- Type string
- The type of action.
- Type string
- The type of action.
- type String
- The type of action.
- type string
- The type of action.
- type str
- The type of action.
- type String
- The type of action.
FirewallPolicyFilterRuleCollectionActionType, FirewallPolicyFilterRuleCollectionActionTypeArgs
- Allow
- Allow
- Deny
- Deny
- Firewall
Policy Filter Rule Collection Action Type Allow - Allow
- Firewall
Policy Filter Rule Collection Action Type Deny - Deny
- Allow
- Allow
- Deny
- Deny
- Allow
- Allow
- Deny
- Deny
- ALLOW
- Allow
- DENY
- Deny
- "Allow"
- Allow
- "Deny"
- Deny
FirewallPolicyFilterRuleCollectionResponse, FirewallPolicyFilterRuleCollectionResponseArgs
- Action
Pulumi.
Azure Native. Network. Inputs. Firewall Policy Filter Rule Collection Action Response - The action type of a Filter rule collection.
- Name string
- The name of the rule collection.
- Priority int
- Priority of the Firewall Policy Rule Collection resource.
- Rules List<object>
- List of rules included in a rule collection.
- Action
Firewall
Policy Filter Rule Collection Action Response - The action type of a Filter rule collection.
- Name string
- The name of the rule collection.
- Priority int
- Priority of the Firewall Policy Rule Collection resource.
- Rules []interface{}
- List of rules included in a rule collection.
- action
Firewall
Policy Filter Rule Collection Action Response - The action type of a Filter rule collection.
- name String
- The name of the rule collection.
- priority Integer
- Priority of the Firewall Policy Rule Collection resource.
- rules List<Object>
- List of rules included in a rule collection.
- action
Firewall
Policy Filter Rule Collection Action Response - The action type of a Filter rule collection.
- name string
- The name of the rule collection.
- priority number
- Priority of the Firewall Policy Rule Collection resource.
- rules
(Application
Rule Response | Nat Rule Response | Network Rule Response)[] - List of rules included in a rule collection.
- action
Firewall
Policy Filter Rule Collection Action Response - The action type of a Filter rule collection.
- name str
- The name of the rule collection.
- priority int
- Priority of the Firewall Policy Rule Collection resource.
- rules
Sequence[Union[Application
Rule Response, Nat Rule Response, Network Rule Response]] - List of rules included in a rule collection.
- action Property Map
- The action type of a Filter rule collection.
- name String
- The name of the rule collection.
- priority Number
- Priority of the Firewall Policy Rule Collection resource.
- rules List<Property Map | Property Map | Property Map>
- List of rules included in a rule collection.
FirewallPolicyHttpHeaderToInsert, FirewallPolicyHttpHeaderToInsertArgs
- Header
Name string - Contains the name of the header
- Header
Value string - Contains the value of the header
- Header
Name string - Contains the name of the header
- Header
Value string - Contains the value of the header
- header
Name String - Contains the name of the header
- header
Value String - Contains the value of the header
- header
Name string - Contains the name of the header
- header
Value string - Contains the value of the header
- header_
name str - Contains the name of the header
- header_
value str - Contains the value of the header
- header
Name String - Contains the name of the header
- header
Value String - Contains the value of the header
FirewallPolicyHttpHeaderToInsertResponse, FirewallPolicyHttpHeaderToInsertResponseArgs
- Header
Name string - Contains the name of the header
- Header
Value string - Contains the value of the header
- Header
Name string - Contains the name of the header
- Header
Value string - Contains the value of the header
- header
Name String - Contains the name of the header
- header
Value String - Contains the value of the header
- header
Name string - Contains the name of the header
- header
Value string - Contains the value of the header
- header_
name str - Contains the name of the header
- header_
value str - Contains the value of the header
- header
Name String - Contains the name of the header
- header
Value String - Contains the value of the header
FirewallPolicyNatRuleCollection, FirewallPolicyNatRuleCollectionArgs
- Action
Pulumi.
Azure Native. Network. Inputs. Firewall Policy Nat Rule Collection Action - The action type of a Nat rule collection.
- Name string
- The name of the rule collection.
- Priority int
- Priority of the Firewall Policy Rule Collection resource.
- Rules List<object>
- List of rules included in a rule collection.
- Action
Firewall
Policy Nat Rule Collection Action - The action type of a Nat rule collection.
- Name string
- The name of the rule collection.
- Priority int
- Priority of the Firewall Policy Rule Collection resource.
- Rules []interface{}
- List of rules included in a rule collection.
- action
Firewall
Policy Nat Rule Collection Action - The action type of a Nat rule collection.
- name String
- The name of the rule collection.
- priority Integer
- Priority of the Firewall Policy Rule Collection resource.
- rules List<Object>
- List of rules included in a rule collection.
- action
Firewall
Policy Nat Rule Collection Action - The action type of a Nat rule collection.
- name string
- The name of the rule collection.
- priority number
- Priority of the Firewall Policy Rule Collection resource.
- rules
(Application
Rule | Nat Rule | Network Rule)[] - List of rules included in a rule collection.
- action
Firewall
Policy Nat Rule Collection Action - The action type of a Nat rule collection.
- name str
- The name of the rule collection.
- priority int
- Priority of the Firewall Policy Rule Collection resource.
- rules
Sequence[Union[Application
Rule, Nat Rule, Network Rule]] - List of rules included in a rule collection.
- action Property Map
- The action type of a Nat rule collection.
- name String
- The name of the rule collection.
- priority Number
- Priority of the Firewall Policy Rule Collection resource.
- rules List<Property Map | Property Map | Property Map>
- List of rules included in a rule collection.
FirewallPolicyNatRuleCollectionAction, FirewallPolicyNatRuleCollectionActionArgs
- Type
string | Pulumi.
Azure Native. Network. Firewall Policy Nat Rule Collection Action Type - The type of action.
- Type
string | Firewall
Policy Nat Rule Collection Action Type - The type of action.
- type
String | Firewall
Policy Nat Rule Collection Action Type - The type of action.
- type
string | Firewall
Policy Nat Rule Collection Action Type - The type of action.
- type
str | Firewall
Policy Nat Rule Collection Action Type - The type of action.
FirewallPolicyNatRuleCollectionActionResponse, FirewallPolicyNatRuleCollectionActionResponseArgs
- Type string
- The type of action.
- Type string
- The type of action.
- type String
- The type of action.
- type string
- The type of action.
- type str
- The type of action.
- type String
- The type of action.
FirewallPolicyNatRuleCollectionActionType, FirewallPolicyNatRuleCollectionActionTypeArgs
- DNAT
- DNAT
- Firewall
Policy Nat Rule Collection Action Type DNAT - DNAT
- DNAT
- DNAT
- DNAT
- DNAT
- DNAT
- DNAT
- "DNAT"
- DNAT
FirewallPolicyNatRuleCollectionResponse, FirewallPolicyNatRuleCollectionResponseArgs
- Action
Pulumi.
Azure Native. Network. Inputs. Firewall Policy Nat Rule Collection Action Response - The action type of a Nat rule collection.
- Name string
- The name of the rule collection.
- Priority int
- Priority of the Firewall Policy Rule Collection resource.
- Rules List<object>
- List of rules included in a rule collection.
- Action
Firewall
Policy Nat Rule Collection Action Response - The action type of a Nat rule collection.
- Name string
- The name of the rule collection.
- Priority int
- Priority of the Firewall Policy Rule Collection resource.
- Rules []interface{}
- List of rules included in a rule collection.
- action
Firewall
Policy Nat Rule Collection Action Response - The action type of a Nat rule collection.
- name String
- The name of the rule collection.
- priority Integer
- Priority of the Firewall Policy Rule Collection resource.
- rules List<Object>
- List of rules included in a rule collection.
- action
Firewall
Policy Nat Rule Collection Action Response - The action type of a Nat rule collection.
- name string
- The name of the rule collection.
- priority number
- Priority of the Firewall Policy Rule Collection resource.
- rules
(Application
Rule Response | Nat Rule Response | Network Rule Response)[] - List of rules included in a rule collection.
- action
Firewall
Policy Nat Rule Collection Action Response - The action type of a Nat rule collection.
- name str
- The name of the rule collection.
- priority int
- Priority of the Firewall Policy Rule Collection resource.
- rules
Sequence[Union[Application
Rule Response, Nat Rule Response, Network Rule Response]] - List of rules included in a rule collection.
- action Property Map
- The action type of a Nat rule collection.
- name String
- The name of the rule collection.
- priority Number
- Priority of the Firewall Policy Rule Collection resource.
- rules List<Property Map | Property Map | Property Map>
- List of rules included in a rule collection.
FirewallPolicyRuleApplicationProtocol, FirewallPolicyRuleApplicationProtocolArgs
- Port int
- Port number for the protocol, cannot be greater than 64000.
- Protocol
Type string | Pulumi.Azure Native. Network. Firewall Policy Rule Application Protocol Type - Protocol type.
- Port int
- Port number for the protocol, cannot be greater than 64000.
- Protocol
Type string | FirewallPolicy Rule Application Protocol Type - Protocol type.
- port Integer
- Port number for the protocol, cannot be greater than 64000.
- protocol
Type String | FirewallPolicy Rule Application Protocol Type - Protocol type.
- port number
- Port number for the protocol, cannot be greater than 64000.
- protocol
Type string | FirewallPolicy Rule Application Protocol Type - Protocol type.
- port int
- Port number for the protocol, cannot be greater than 64000.
- protocol_
type str | FirewallPolicy Rule Application Protocol Type - Protocol type.
- port Number
- Port number for the protocol, cannot be greater than 64000.
- protocol
Type String | "Http" | "Https" - Protocol type.
FirewallPolicyRuleApplicationProtocolResponse, FirewallPolicyRuleApplicationProtocolResponseArgs
- Port int
- Port number for the protocol, cannot be greater than 64000.
- Protocol
Type string - Protocol type.
- Port int
- Port number for the protocol, cannot be greater than 64000.
- Protocol
Type string - Protocol type.
- port Integer
- Port number for the protocol, cannot be greater than 64000.
- protocol
Type String - Protocol type.
- port number
- Port number for the protocol, cannot be greater than 64000.
- protocol
Type string - Protocol type.
- port int
- Port number for the protocol, cannot be greater than 64000.
- protocol_
type str - Protocol type.
- port Number
- Port number for the protocol, cannot be greater than 64000.
- protocol
Type String - Protocol type.
FirewallPolicyRuleApplicationProtocolType, FirewallPolicyRuleApplicationProtocolTypeArgs
- Http
- Http
- Https
- Https
- Firewall
Policy Rule Application Protocol Type Http - Http
- Firewall
Policy Rule Application Protocol Type Https - Https
- Http
- Http
- Https
- Https
- Http
- Http
- Https
- Https
- HTTP
- Http
- HTTPS
- Https
- "Http"
- Http
- "Https"
- Https
FirewallPolicyRuleNetworkProtocol, FirewallPolicyRuleNetworkProtocolArgs
- TCP
- TCP
- UDP
- UDP
- Any
- Any
- ICMP
- ICMP
- Firewall
Policy Rule Network Protocol TCP - TCP
- Firewall
Policy Rule Network Protocol UDP - UDP
- Firewall
Policy Rule Network Protocol Any - Any
- Firewall
Policy Rule Network Protocol ICMP - ICMP
- TCP
- TCP
- UDP
- UDP
- Any
- Any
- ICMP
- ICMP
- TCP
- TCP
- UDP
- UDP
- Any
- Any
- ICMP
- ICMP
- TCP
- TCP
- UDP
- UDP
- ANY
- Any
- ICMP
- ICMP
- "TCP"
- TCP
- "UDP"
- UDP
- "Any"
- Any
- "ICMP"
- ICMP
NatRule, NatRuleArgs
- Description string
- Description of the rule.
- Destination
Addresses List<string> - List of destination IP addresses or Service Tags.
- Destination
Ports List<string> - List of destination ports.
- Ip
Protocols List<Union<string, Pulumi.Azure Native. Network. Firewall Policy Rule Network Protocol>> - Array of FirewallPolicyRuleNetworkProtocols.
- Name string
- Name of the rule.
- Source
Addresses List<string> - List of source IP addresses for this rule.
- Source
Ip List<string>Groups - List of source IpGroups for this rule.
- Translated
Address string - The translated address for this NAT rule.
- Translated
Fqdn string - The translated FQDN for this NAT rule.
- Translated
Port string - The translated port for this NAT rule.
- Description string
- Description of the rule.
- Destination
Addresses []string - List of destination IP addresses or Service Tags.
- Destination
Ports []string - List of destination ports.
- Ip
Protocols []string - Array of FirewallPolicyRuleNetworkProtocols.
- Name string
- Name of the rule.
- Source
Addresses []string - List of source IP addresses for this rule.
- Source
Ip []stringGroups - List of source IpGroups for this rule.
- Translated
Address string - The translated address for this NAT rule.
- Translated
Fqdn string - The translated FQDN for this NAT rule.
- Translated
Port string - The translated port for this NAT rule.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- destination
Ports List<String> - List of destination ports.
- ip
Protocols List<Either<String,FirewallPolicy Rule Network Protocol>> - Array of FirewallPolicyRuleNetworkProtocols.
- name String
- Name of the rule.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- translated
Address String - The translated address for this NAT rule.
- translated
Fqdn String - The translated FQDN for this NAT rule.
- translated
Port String - The translated port for this NAT rule.
- description string
- Description of the rule.
- destination
Addresses string[] - List of destination IP addresses or Service Tags.
- destination
Ports string[] - List of destination ports.
- ip
Protocols (string | FirewallPolicy Rule Network Protocol)[] - Array of FirewallPolicyRuleNetworkProtocols.
- name string
- Name of the rule.
- source
Addresses string[] - List of source IP addresses for this rule.
- source
Ip string[]Groups - List of source IpGroups for this rule.
- translated
Address string - The translated address for this NAT rule.
- translated
Fqdn string - The translated FQDN for this NAT rule.
- translated
Port string - The translated port for this NAT rule.
- description str
- Description of the rule.
- destination_
addresses Sequence[str] - List of destination IP addresses or Service Tags.
- destination_
ports Sequence[str] - List of destination ports.
- ip_
protocols Sequence[Union[str, FirewallPolicy Rule Network Protocol]] - Array of FirewallPolicyRuleNetworkProtocols.
- name str
- Name of the rule.
- source_
addresses Sequence[str] - List of source IP addresses for this rule.
- source_
ip_ Sequence[str]groups - List of source IpGroups for this rule.
- translated_
address str - The translated address for this NAT rule.
- translated_
fqdn str - The translated FQDN for this NAT rule.
- translated_
port str - The translated port for this NAT rule.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- destination
Ports List<String> - List of destination ports.
- ip
Protocols List<String | "TCP" | "UDP" | "Any" | "ICMP"> - Array of FirewallPolicyRuleNetworkProtocols.
- name String
- Name of the rule.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- translated
Address String - The translated address for this NAT rule.
- translated
Fqdn String - The translated FQDN for this NAT rule.
- translated
Port String - The translated port for this NAT rule.
NatRuleResponse, NatRuleResponseArgs
- Description string
- Description of the rule.
- Destination
Addresses List<string> - List of destination IP addresses or Service Tags.
- Destination
Ports List<string> - List of destination ports.
- Ip
Protocols List<string> - Array of FirewallPolicyRuleNetworkProtocols.
- Name string
- Name of the rule.
- Source
Addresses List<string> - List of source IP addresses for this rule.
- Source
Ip List<string>Groups - List of source IpGroups for this rule.
- Translated
Address string - The translated address for this NAT rule.
- Translated
Fqdn string - The translated FQDN for this NAT rule.
- Translated
Port string - The translated port for this NAT rule.
- Description string
- Description of the rule.
- Destination
Addresses []string - List of destination IP addresses or Service Tags.
- Destination
Ports []string - List of destination ports.
- Ip
Protocols []string - Array of FirewallPolicyRuleNetworkProtocols.
- Name string
- Name of the rule.
- Source
Addresses []string - List of source IP addresses for this rule.
- Source
Ip []stringGroups - List of source IpGroups for this rule.
- Translated
Address string - The translated address for this NAT rule.
- Translated
Fqdn string - The translated FQDN for this NAT rule.
- Translated
Port string - The translated port for this NAT rule.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- destination
Ports List<String> - List of destination ports.
- ip
Protocols List<String> - Array of FirewallPolicyRuleNetworkProtocols.
- name String
- Name of the rule.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- translated
Address String - The translated address for this NAT rule.
- translated
Fqdn String - The translated FQDN for this NAT rule.
- translated
Port String - The translated port for this NAT rule.
- description string
- Description of the rule.
- destination
Addresses string[] - List of destination IP addresses or Service Tags.
- destination
Ports string[] - List of destination ports.
- ip
Protocols string[] - Array of FirewallPolicyRuleNetworkProtocols.
- name string
- Name of the rule.
- source
Addresses string[] - List of source IP addresses for this rule.
- source
Ip string[]Groups - List of source IpGroups for this rule.
- translated
Address string - The translated address for this NAT rule.
- translated
Fqdn string - The translated FQDN for this NAT rule.
- translated
Port string - The translated port for this NAT rule.
- description str
- Description of the rule.
- destination_
addresses Sequence[str] - List of destination IP addresses or Service Tags.
- destination_
ports Sequence[str] - List of destination ports.
- ip_
protocols Sequence[str] - Array of FirewallPolicyRuleNetworkProtocols.
- name str
- Name of the rule.
- source_
addresses Sequence[str] - List of source IP addresses for this rule.
- source_
ip_ Sequence[str]groups - List of source IpGroups for this rule.
- translated_
address str - The translated address for this NAT rule.
- translated_
fqdn str - The translated FQDN for this NAT rule.
- translated_
port str - The translated port for this NAT rule.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- destination
Ports List<String> - List of destination ports.
- ip
Protocols List<String> - Array of FirewallPolicyRuleNetworkProtocols.
- name String
- Name of the rule.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- translated
Address String - The translated address for this NAT rule.
- translated
Fqdn String - The translated FQDN for this NAT rule.
- translated
Port String - The translated port for this NAT rule.
NetworkRule, NetworkRuleArgs
- Description string
- Description of the rule.
- Destination
Addresses List<string> - List of destination IP addresses or Service Tags.
- Destination
Fqdns List<string> - List of destination FQDNs.
- Destination
Ip List<string>Groups - List of destination IpGroups for this rule.
- Destination
Ports List<string> - List of destination ports.
- Ip
Protocols List<Union<string, Pulumi.Azure Native. Network. Firewall Policy Rule Network Protocol>> - Array of FirewallPolicyRuleNetworkProtocols.
- Name string
- Name of the rule.
- Source
Addresses List<string> - List of source IP addresses for this rule.
- Source
Ip List<string>Groups - List of source IpGroups for this rule.
- Description string
- Description of the rule.
- Destination
Addresses []string - List of destination IP addresses or Service Tags.
- Destination
Fqdns []string - List of destination FQDNs.
- Destination
Ip []stringGroups - List of destination IpGroups for this rule.
- Destination
Ports []string - List of destination ports.
- Ip
Protocols []string - Array of FirewallPolicyRuleNetworkProtocols.
- Name string
- Name of the rule.
- Source
Addresses []string - List of source IP addresses for this rule.
- Source
Ip []stringGroups - List of source IpGroups for this rule.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- destination
Fqdns List<String> - List of destination FQDNs.
- destination
Ip List<String>Groups - List of destination IpGroups for this rule.
- destination
Ports List<String> - List of destination ports.
- ip
Protocols List<Either<String,FirewallPolicy Rule Network Protocol>> - Array of FirewallPolicyRuleNetworkProtocols.
- name String
- Name of the rule.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- description string
- Description of the rule.
- destination
Addresses string[] - List of destination IP addresses or Service Tags.
- destination
Fqdns string[] - List of destination FQDNs.
- destination
Ip string[]Groups - List of destination IpGroups for this rule.
- destination
Ports string[] - List of destination ports.
- ip
Protocols (string | FirewallPolicy Rule Network Protocol)[] - Array of FirewallPolicyRuleNetworkProtocols.
- name string
- Name of the rule.
- source
Addresses string[] - List of source IP addresses for this rule.
- source
Ip string[]Groups - List of source IpGroups for this rule.
- description str
- Description of the rule.
- destination_
addresses Sequence[str] - List of destination IP addresses or Service Tags.
- destination_
fqdns Sequence[str] - List of destination FQDNs.
- destination_
ip_ Sequence[str]groups - List of destination IpGroups for this rule.
- destination_
ports Sequence[str] - List of destination ports.
- ip_
protocols Sequence[Union[str, FirewallPolicy Rule Network Protocol]] - Array of FirewallPolicyRuleNetworkProtocols.
- name str
- Name of the rule.
- source_
addresses Sequence[str] - List of source IP addresses for this rule.
- source_
ip_ Sequence[str]groups - List of source IpGroups for this rule.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- destination
Fqdns List<String> - List of destination FQDNs.
- destination
Ip List<String>Groups - List of destination IpGroups for this rule.
- destination
Ports List<String> - List of destination ports.
- ip
Protocols List<String | "TCP" | "UDP" | "Any" | "ICMP"> - Array of FirewallPolicyRuleNetworkProtocols.
- name String
- Name of the rule.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
NetworkRuleResponse, NetworkRuleResponseArgs
- Description string
- Description of the rule.
- Destination
Addresses List<string> - List of destination IP addresses or Service Tags.
- Destination
Fqdns List<string> - List of destination FQDNs.
- Destination
Ip List<string>Groups - List of destination IpGroups for this rule.
- Destination
Ports List<string> - List of destination ports.
- Ip
Protocols List<string> - Array of FirewallPolicyRuleNetworkProtocols.
- Name string
- Name of the rule.
- Source
Addresses List<string> - List of source IP addresses for this rule.
- Source
Ip List<string>Groups - List of source IpGroups for this rule.
- Description string
- Description of the rule.
- Destination
Addresses []string - List of destination IP addresses or Service Tags.
- Destination
Fqdns []string - List of destination FQDNs.
- Destination
Ip []stringGroups - List of destination IpGroups for this rule.
- Destination
Ports []string - List of destination ports.
- Ip
Protocols []string - Array of FirewallPolicyRuleNetworkProtocols.
- Name string
- Name of the rule.
- Source
Addresses []string - List of source IP addresses for this rule.
- Source
Ip []stringGroups - List of source IpGroups for this rule.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- destination
Fqdns List<String> - List of destination FQDNs.
- destination
Ip List<String>Groups - List of destination IpGroups for this rule.
- destination
Ports List<String> - List of destination ports.
- ip
Protocols List<String> - Array of FirewallPolicyRuleNetworkProtocols.
- name String
- Name of the rule.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
- description string
- Description of the rule.
- destination
Addresses string[] - List of destination IP addresses or Service Tags.
- destination
Fqdns string[] - List of destination FQDNs.
- destination
Ip string[]Groups - List of destination IpGroups for this rule.
- destination
Ports string[] - List of destination ports.
- ip
Protocols string[] - Array of FirewallPolicyRuleNetworkProtocols.
- name string
- Name of the rule.
- source
Addresses string[] - List of source IP addresses for this rule.
- source
Ip string[]Groups - List of source IpGroups for this rule.
- description str
- Description of the rule.
- destination_
addresses Sequence[str] - List of destination IP addresses or Service Tags.
- destination_
fqdns Sequence[str] - List of destination FQDNs.
- destination_
ip_ Sequence[str]groups - List of destination IpGroups for this rule.
- destination_
ports Sequence[str] - List of destination ports.
- ip_
protocols Sequence[str] - Array of FirewallPolicyRuleNetworkProtocols.
- name str
- Name of the rule.
- source_
addresses Sequence[str] - List of source IP addresses for this rule.
- source_
ip_ Sequence[str]groups - List of source IpGroups for this rule.
- description String
- Description of the rule.
- destination
Addresses List<String> - List of destination IP addresses or Service Tags.
- destination
Fqdns List<String> - List of destination FQDNs.
- destination
Ip List<String>Groups - List of destination IpGroups for this rule.
- destination
Ports List<String> - List of destination ports.
- ip
Protocols List<String> - Array of FirewallPolicyRuleNetworkProtocols.
- name String
- Name of the rule.
- source
Addresses List<String> - List of source IP addresses for this rule.
- source
Ip List<String>Groups - List of source IpGroups for this rule.
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:network:FirewallPolicyRuleCollectionGroup ruleCollectionGroup1 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/firewallPolicies/{firewallPolicyName}/ruleCollectionGroups/{ruleCollectionGroupName}
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Native pulumi/pulumi-azure-native
- License
- Apache-2.0