pulumi-azure-kotlin/com.pulumi.azure.network.kotlin/FirewallApplicationRuleCollection

FirewallApplicationRuleCollection

class FirewallApplicationRuleCollection : KotlinCustomResource

Manages an Application Rule Collection within an Azure Firewall.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = new azure.core.ResourceGroup("example", {
    name: "example-resources",
    location: "West Europe",
});
const exampleVirtualNetwork = new azure.network.VirtualNetwork("example", {
    name: "testvnet",
    addressSpaces: ["10.0.0.0/16"],
    location: example.location,
    resourceGroupName: example.name,
});
const exampleSubnet = new azure.network.Subnet("example", {
    name: "AzureFirewallSubnet",
    resourceGroupName: example.name,
    virtualNetworkName: exampleVirtualNetwork.name,
    addressPrefixes: ["10.0.1.0/24"],
});
const examplePublicIp = new azure.network.PublicIp("example", {
    name: "testpip",
    location: example.location,
    resourceGroupName: example.name,
    allocationMethod: "Static",
    sku: "Standard",
});
const exampleFirewall = new azure.network.Firewall("example", {
    name: "testfirewall",
    location: example.location,
    resourceGroupName: example.name,
    skuName: "AZFW_VNet",
    skuTier: "Standard",
    ipConfigurations: [{
        name: "configuration",
        subnetId: exampleSubnet.id,
        publicIpAddressId: examplePublicIp.id,
    }],
});
const exampleFirewallApplicationRuleCollection = new azure.network.FirewallApplicationRuleCollection("example", {
    name: "testcollection",
    azureFirewallName: exampleFirewall.name,
    resourceGroupName: example.name,
    priority: 100,
    action: "Allow",
    rules: [{
        name: "testrule",
        sourceAddresses: ["10.0.0.0/16"],
        targetFqdns: ["*.google.com"],
        protocols: [{
            port: 443,
            type: "Https",
        }],
    }],
});
Content copied to clipboard
import pulumi
import pulumi_azure as azure
example = azure.core.ResourceGroup("example",
    name="example-resources",
    location="West Europe")
example_virtual_network = azure.network.VirtualNetwork("example",
    name="testvnet",
    address_spaces=["10.0.0.0/16"],
    location=example.location,
    resource_group_name=example.name)
example_subnet = azure.network.Subnet("example",
    name="AzureFirewallSubnet",
    resource_group_name=example.name,
    virtual_network_name=example_virtual_network.name,
    address_prefixes=["10.0.1.0/24"])
example_public_ip = azure.network.PublicIp("example",
    name="testpip",
    location=example.location,
    resource_group_name=example.name,
    allocation_method="Static",
    sku="Standard")
example_firewall = azure.network.Firewall("example",
    name="testfirewall",
    location=example.location,
    resource_group_name=example.name,
    sku_name="AZFW_VNet",
    sku_tier="Standard",
    ip_configurations=[{
        "name": "configuration",
        "subnet_id": example_subnet.id,
        "public_ip_address_id": example_public_ip.id,
    }])
example_firewall_application_rule_collection = azure.network.FirewallApplicationRuleCollection("example",
    name="testcollection",
    azure_firewall_name=example_firewall.name,
    resource_group_name=example.name,
    priority=100,
    action="Allow",
    rules=[{
        "name": "testrule",
        "source_addresses": ["10.0.0.0/16"],
        "target_fqdns": ["*.google.com"],
        "protocols": [{
            "port": 443,
            "type": "Https",
        }],
    }])
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resources",
        Location = "West Europe",
    });
    var exampleVirtualNetwork = new Azure.Network.VirtualNetwork("example", new()
    {
        Name = "testvnet",
        AddressSpaces = new[]
        {
            "10.0.0.0/16",
        },
        Location = example.Location,
        ResourceGroupName = example.Name,
    });
    var exampleSubnet = new Azure.Network.Subnet("example", new()
    {
        Name = "AzureFirewallSubnet",
        ResourceGroupName = example.Name,
        VirtualNetworkName = exampleVirtualNetwork.Name,
        AddressPrefixes = new[]
        {
            "10.0.1.0/24",
        },
    });
    var examplePublicIp = new Azure.Network.PublicIp("example", new()
    {
        Name = "testpip",
        Location = example.Location,
        ResourceGroupName = example.Name,
        AllocationMethod = "Static",
        Sku = "Standard",
    });
    var exampleFirewall = new Azure.Network.Firewall("example", new()
    {
        Name = "testfirewall",
        Location = example.Location,
        ResourceGroupName = example.Name,
        SkuName = "AZFW_VNet",
        SkuTier = "Standard",
        IpConfigurations = new[]
        {
            new Azure.Network.Inputs.FirewallIpConfigurationArgs
            {
                Name = "configuration",
                SubnetId = exampleSubnet.Id,
                PublicIpAddressId = examplePublicIp.Id,
            },
        },
    });
    var exampleFirewallApplicationRuleCollection = new Azure.Network.FirewallApplicationRuleCollection("example", new()
    {
        Name = "testcollection",
        AzureFirewallName = exampleFirewall.Name,
        ResourceGroupName = example.Name,
        Priority = 100,
        Action = "Allow",
        Rules = new[]
        {
            new Azure.Network.Inputs.FirewallApplicationRuleCollectionRuleArgs
            {
                Name = "testrule",
                SourceAddresses = new[]
                {
                    "10.0.0.0/16",
                },
                TargetFqdns = new[]
                {
                    "*.google.com",
                },
                Protocols = new[]
                {
                    new Azure.Network.Inputs.FirewallApplicationRuleCollectionRuleProtocolArgs
                    {
                        Port = 443,
                        Type = "Https",
                    },
                },
            },
        },
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/network"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleVirtualNetwork, err := network.NewVirtualNetwork(ctx, "example", &network.VirtualNetworkArgs{
			Name: pulumi.String("testvnet"),
			AddressSpaces: pulumi.StringArray{
				pulumi.String("10.0.0.0/16"),
			},
			Location:          example.Location,
			ResourceGroupName: example.Name,
		})
		if err != nil {
			return err
		}
		exampleSubnet, err := network.NewSubnet(ctx, "example", &network.SubnetArgs{
			Name:               pulumi.String("AzureFirewallSubnet"),
			ResourceGroupName:  example.Name,
			VirtualNetworkName: exampleVirtualNetwork.Name,
			AddressPrefixes: pulumi.StringArray{
				pulumi.String("10.0.1.0/24"),
			},
		})
		if err != nil {
			return err
		}
		examplePublicIp, err := network.NewPublicIp(ctx, "example", &network.PublicIpArgs{
			Name:              pulumi.String("testpip"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			AllocationMethod:  pulumi.String("Static"),
			Sku:               pulumi.String("Standard"),
		})
		if err != nil {
			return err
		}
		exampleFirewall, err := network.NewFirewall(ctx, "example", &network.FirewallArgs{
			Name:              pulumi.String("testfirewall"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			SkuName:           pulumi.String("AZFW_VNet"),
			SkuTier:           pulumi.String("Standard"),
			IpConfigurations: network.FirewallIpConfigurationArray{
				&network.FirewallIpConfigurationArgs{
					Name:              pulumi.String("configuration"),
					SubnetId:          exampleSubnet.ID(),
					PublicIpAddressId: examplePublicIp.ID(),
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = network.NewFirewallApplicationRuleCollection(ctx, "example", &network.FirewallApplicationRuleCollectionArgs{
			Name:              pulumi.String("testcollection"),
			AzureFirewallName: exampleFirewall.Name,
			ResourceGroupName: example.Name,
			Priority:          pulumi.Int(100),
			Action:            pulumi.String("Allow"),
			Rules: network.FirewallApplicationRuleCollectionRuleArray{
				&network.FirewallApplicationRuleCollectionRuleArgs{
					Name: pulumi.String("testrule"),
					SourceAddresses: pulumi.StringArray{
						pulumi.String("10.0.0.0/16"),
					},
					TargetFqdns: pulumi.StringArray{
						pulumi.String("*.google.com"),
					},
					Protocols: network.FirewallApplicationRuleCollectionRuleProtocolArray{
						&network.FirewallApplicationRuleCollectionRuleProtocolArgs{
							Port: pulumi.Int(443),
							Type: pulumi.String("Https"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.VirtualNetwork;
import com.pulumi.azure.network.VirtualNetworkArgs;
import com.pulumi.azure.network.Subnet;
import com.pulumi.azure.network.SubnetArgs;
import com.pulumi.azure.network.PublicIp;
import com.pulumi.azure.network.PublicIpArgs;
import com.pulumi.azure.network.Firewall;
import com.pulumi.azure.network.FirewallArgs;
import com.pulumi.azure.network.inputs.FirewallIpConfigurationArgs;
import com.pulumi.azure.network.FirewallApplicationRuleCollection;
import com.pulumi.azure.network.FirewallApplicationRuleCollectionArgs;
import com.pulumi.azure.network.inputs.FirewallApplicationRuleCollectionRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new ResourceGroup("example", ResourceGroupArgs.builder()
            .name("example-resources")
            .location("West Europe")
            .build());
        var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()
            .name("testvnet")
            .addressSpaces("10.0.0.0/16")
            .location(example.location())
            .resourceGroupName(example.name())
            .build());
        var exampleSubnet = new Subnet("exampleSubnet", SubnetArgs.builder()
            .name("AzureFirewallSubnet")
            .resourceGroupName(example.name())
            .virtualNetworkName(exampleVirtualNetwork.name())
            .addressPrefixes("10.0.1.0/24")
            .build());
        var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()
            .name("testpip")
            .location(example.location())
            .resourceGroupName(example.name())
            .allocationMethod("Static")
            .sku("Standard")
            .build());
        var exampleFirewall = new Firewall("exampleFirewall", FirewallArgs.builder()
            .name("testfirewall")
            .location(example.location())
            .resourceGroupName(example.name())
            .skuName("AZFW_VNet")
            .skuTier("Standard")
            .ipConfigurations(FirewallIpConfigurationArgs.builder()
                .name("configuration")
                .subnetId(exampleSubnet.id())
                .publicIpAddressId(examplePublicIp.id())
                .build())
            .build());
        var exampleFirewallApplicationRuleCollection = new FirewallApplicationRuleCollection("exampleFirewallApplicationRuleCollection", FirewallApplicationRuleCollectionArgs.builder()
            .name("testcollection")
            .azureFirewallName(exampleFirewall.name())
            .resourceGroupName(example.name())
            .priority(100)
            .action("Allow")
            .rules(FirewallApplicationRuleCollectionRuleArgs.builder()
                .name("testrule")
                .sourceAddresses("10.0.0.0/16")
                .targetFqdns("*.google.com")
                .protocols(FirewallApplicationRuleCollectionRuleProtocolArgs.builder()
                    .port(443)
                    .type("Https")
                    .build())
                .build())
            .build());
    }
}
Content copied to clipboard
resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example-resources
      location: West Europe
  exampleVirtualNetwork:
    type: azure:network:VirtualNetwork
    name: example
    properties:
      name: testvnet
      addressSpaces:
        - 10.0.0.0/16
      location: ${example.location}
      resourceGroupName: ${example.name}
  exampleSubnet:
    type: azure:network:Subnet
    name: example
    properties:
      name: AzureFirewallSubnet
      resourceGroupName: ${example.name}
      virtualNetworkName: ${exampleVirtualNetwork.name}
      addressPrefixes:
        - 10.0.1.0/24
  examplePublicIp:
    type: azure:network:PublicIp
    name: example
    properties:
      name: testpip
      location: ${example.location}
      resourceGroupName: ${example.name}
      allocationMethod: Static
      sku: Standard
  exampleFirewall:
    type: azure:network:Firewall
    name: example
    properties:
      name: testfirewall
      location: ${example.location}
      resourceGroupName: ${example.name}
      skuName: AZFW_VNet
      skuTier: Standard
      ipConfigurations:
        - name: configuration
          subnetId: ${exampleSubnet.id}
          publicIpAddressId: ${examplePublicIp.id}
  exampleFirewallApplicationRuleCollection:
    type: azure:network:FirewallApplicationRuleCollection
    name: example
    properties:
      name: testcollection
      azureFirewallName: ${exampleFirewall.name}
      resourceGroupName: ${example.name}
      priority: 100
      action: Allow
      rules:
        - name: testrule
          sourceAddresses:
            - 10.0.0.0/16
          targetFqdns:
            - '*.google.com'
          protocols:
            - port: '443'
              type: Https
Content copied to clipboard

API Providers

This resource uses the following Azure API Providers:

  • Microsoft.Network: 2024-05-01

Import

Firewall Application Rule Collections can be imported using the resource id, e.g.

$ pulumi import azure:network/firewallApplicationRuleCollection:FirewallApplicationRuleCollection example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.Network/azureFirewalls/myfirewall/applicationRuleCollections/mycollection
Content copied to clipboard

Properties

Link copied to clipboard
val action: Output<String>

Specifies the action the rule will apply to matching traffic. Possible values are Allow and Deny.

Link copied to clipboard
val azureFirewallName: Output<String>

Specifies the name of the Firewall in which the Application Rule Collection should be created. Changing this forces a new resource to be created.

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val name: Output<String>

Specifies the name of the Application Rule Collection which must be unique within the Firewall. Changing this forces a new resource to be created.

Link copied to clipboard
val priority: Output<Int>

Specifies the priority of the rule collection. Possible values are between 100 - 65000.

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val resourceGroupName: Output<String>

Specifies the name of the Resource Group in which the Firewall exists. Changing this forces a new resource to be created.

Link copied to clipboard
val rules: Output<List<FirewallApplicationRuleCollectionRule>>

One or more rule blocks as defined below.

Link copied to clipboard
val urn: Output<String>