pulumi-azure-kotlin/com.pulumi.azure.storage.kotlin/AccountNetworkRulesArgs

AccountNetworkRulesArgs

data class AccountNetworkRulesArgs(val bypasses: Output<List<String>>? = null, val defaultAction: Output<String>? = null, val ipRules: Output<List<String>>? = null, val privateLinkAccessRules: Output<List<AccountNetworkRulesPrivateLinkAccessRuleArgs>>? = null, val storageAccountId: Output<String>? = null, val virtualNetworkSubnetIds: Output<List<String>>? = null) : ConvertibleToJava<AccountNetworkRulesArgs>

Manages network rules inside of a Azure Storage Account.

NOTE: Network Rules can be defined either directly on the azure.storage.Account resource, or using the azure.storage.AccountNetworkRules resource - but the two cannot be used together. Spurious changes will occur if both are used against the same Storage Account. NOTE: Only one azure.storage.AccountNetworkRules can be tied to an azure.storage.Account. Spurious changes will occur if more than azure.storage.AccountNetworkRules is tied to the same azure.storage.Account. NOTE: Deleting this resource updates the storage account back to the default values it had when the storage account was created.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.VirtualNetwork;
import com.pulumi.azure.network.VirtualNetworkArgs;
import com.pulumi.azure.network.Subnet;
import com.pulumi.azure.network.SubnetArgs;
import com.pulumi.azure.storage.Account;
import com.pulumi.azure.storage.AccountArgs;
import com.pulumi.azure.storage.AccountNetworkRules;
import com.pulumi.azure.storage.AccountNetworkRulesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()
            .location("West Europe")
            .build());
        var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()
            .addressSpaces("10.0.0.0/16")
            .location(exampleResourceGroup.location())
            .resourceGroupName(exampleResourceGroup.name())
            .build());
        var exampleSubnet = new Subnet("exampleSubnet", SubnetArgs.builder()
            .resourceGroupName(exampleResourceGroup.name())
            .virtualNetworkName(exampleVirtualNetwork.name())
            .addressPrefixes("10.0.2.0/24")
            .serviceEndpoints("Microsoft.Storage")
            .build());
        var exampleAccount = new Account("exampleAccount", AccountArgs.builder()
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .accountTier("Standard")
            .accountReplicationType("GRS")
            .tags(Map.of("environment", "staging"))
            .build());
        var exampleAccountNetworkRules = new AccountNetworkRules("exampleAccountNetworkRules", AccountNetworkRulesArgs.builder()
            .storageAccountId(exampleAccount.id())
            .defaultAction("Allow")
            .ipRules("127.0.0.1")
            .virtualNetworkSubnetIds(exampleSubnet.id())
            .bypasses("Metrics")
            .build());
    }
}
Content copied to clipboard

Import

Storage Account Network Rules can be imported using the resource id, e.g.

$ pulumi import azure:storage/accountNetworkRules:AccountNetworkRules storageAcc1 /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Storage/storageAccounts/myaccount
Content copied to clipboard

Constructors

Link copied to clipboard
fun AccountNetworkRulesArgs(bypasses: Output<List<String>>? = null, defaultAction: Output<String>? = null, ipRules: Output<List<String>>? = null, privateLinkAccessRules: Output<List<AccountNetworkRulesPrivateLinkAccessRuleArgs>>? = null, storageAccountId: Output<String>? = null, virtualNetworkSubnetIds: Output<List<String>>? = null)

Functions

Link copied to clipboard
open override fun toJava(): AccountNetworkRulesArgs

Properties

Link copied to clipboard
val bypasses: Output<List<String>>? = null

Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Valid options are any combination of Logging, Metrics, AzureServices, or None.

Link copied to clipboard
val defaultAction: Output<String>? = null

Specifies the default action of allow or deny when no other rules match. Valid options are Deny or Allow.

Link copied to clipboard
val ipRules: Output<List<String>>? = null

List of public IP or IP ranges in CIDR Format. Only IPv4 addresses are allowed. Private IP address ranges (as defined in RFC 1918) are not allowed.

Link copied to clipboard
val privateLinkAccessRules: Output<List<AccountNetworkRulesPrivateLinkAccessRuleArgs>>? = null

One or More private_link_access block as defined below.

Link copied to clipboard
val storageAccountId: Output<String>? = null

Specifies the ID of the storage account. Changing this forces a new resource to be created.

Link copied to clipboard
val virtualNetworkSubnetIds: Output<List<String>>? = null

A list of virtual network subnet ids to secure the storage account.