FirewallPolicyArgs

data class FirewallPolicyArgs(val autoLearnPrivateRangesEnabled: Output<Boolean>? = null, val basePolicyId: Output<String>? = null, val dns: Output<FirewallPolicyDnsArgs>? = null, val explicitProxy: Output<FirewallPolicyExplicitProxyArgs>? = null, val identity: Output<FirewallPolicyIdentityArgs>? = null, val insights: Output<FirewallPolicyInsightsArgs>? = null, val intrusionDetection: Output<FirewallPolicyIntrusionDetectionArgs>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val privateIpRanges: Output<List<String>>? = null, val resourceGroupName: Output<String>? = null, val sku: Output<String>? = null, val sqlRedirectAllowed: Output<Boolean>? = null, val tags: Output<Map<String, String>>? = null, val threatIntelligenceAllowlist: Output<FirewallPolicyThreatIntelligenceAllowlistArgs>? = null, val threatIntelligenceMode: Output<String>? = null, val tlsCertificate: Output<FirewallPolicyTlsCertificateArgs>? = null) : ConvertibleToJava<FirewallPolicyArgs>

Manages a Firewall Policy.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = new azure.core.ResourceGroup("example", {
name: "example-resources",
location: "West Europe",
});
const exampleFirewallPolicy = new azure.network.FirewallPolicy("example", {
name: "example-policy",
resourceGroupName: example.name,
location: example.location,
});
import pulumi
import pulumi_azure as azure
example = azure.core.ResourceGroup("example",
name="example-resources",
location="West Europe")
example_firewall_policy = azure.network.FirewallPolicy("example",
name="example-policy",
resource_group_name=example.name,
location=example.location)
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var example = new Azure.Core.ResourceGroup("example", new()
{
Name = "example-resources",
Location = "West Europe",
});
var exampleFirewallPolicy = new Azure.Network.FirewallPolicy("example", new()
{
Name = "example-policy",
ResourceGroupName = example.Name,
Location = example.Location,
});
});
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/network"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
Name: pulumi.String("example-resources"),
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
_, err = network.NewFirewallPolicy(ctx, "example", &network.FirewallPolicyArgs{
Name: pulumi.String("example-policy"),
ResourceGroupName: example.Name,
Location: example.Location,
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.FirewallPolicy;
import com.pulumi.azure.network.FirewallPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ResourceGroup("example", ResourceGroupArgs.builder()
.name("example-resources")
.location("West Europe")
.build());
var exampleFirewallPolicy = new FirewallPolicy("exampleFirewallPolicy", FirewallPolicyArgs.builder()
.name("example-policy")
.resourceGroupName(example.name())
.location(example.location())
.build());
}
}
resources:
example:
type: azure:core:ResourceGroup
properties:
name: example-resources
location: West Europe
exampleFirewallPolicy:
type: azure:network:FirewallPolicy
name: example
properties:
name: example-policy
resourceGroupName: ${example.name}
location: ${example.location}

API Providers

This resource uses the following Azure API Providers:

  • Microsoft.Network: 2024-05-01

Import

Firewall Policies can be imported using the resource id, e.g.

$ pulumi import azure:network/firewallPolicy:FirewallPolicy example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.Network/firewallPolicies/policy1

Constructors

Link copied to clipboard
constructor(autoLearnPrivateRangesEnabled: Output<Boolean>? = null, basePolicyId: Output<String>? = null, dns: Output<FirewallPolicyDnsArgs>? = null, explicitProxy: Output<FirewallPolicyExplicitProxyArgs>? = null, identity: Output<FirewallPolicyIdentityArgs>? = null, insights: Output<FirewallPolicyInsightsArgs>? = null, intrusionDetection: Output<FirewallPolicyIntrusionDetectionArgs>? = null, location: Output<String>? = null, name: Output<String>? = null, privateIpRanges: Output<List<String>>? = null, resourceGroupName: Output<String>? = null, sku: Output<String>? = null, sqlRedirectAllowed: Output<Boolean>? = null, tags: Output<Map<String, String>>? = null, threatIntelligenceAllowlist: Output<FirewallPolicyThreatIntelligenceAllowlistArgs>? = null, threatIntelligenceMode: Output<String>? = null, tlsCertificate: Output<FirewallPolicyTlsCertificateArgs>? = null)

Properties

Link copied to clipboard

Whether enable auto learn private ip range.

Link copied to clipboard
val basePolicyId: Output<String>? = null

The ID of the base Firewall Policy.

Link copied to clipboard
val dns: Output<FirewallPolicyDnsArgs>? = null

A dns block as defined below.

Link copied to clipboard

A explicit_proxy block as defined below.

Link copied to clipboard

An identity block as defined below.

Link copied to clipboard

An insights block as defined below.

Link copied to clipboard

A intrusion_detection block as defined below.

Link copied to clipboard
val location: Output<String>? = null

The Azure Region where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

Link copied to clipboard
val name: Output<String>? = null

The name which should be used for this Firewall Policy. Changing this forces a new Firewall Policy to be created.

Link copied to clipboard
val privateIpRanges: Output<List<String>>? = null

A list of private IP ranges to which traffic will not be SNAT.

Link copied to clipboard
val resourceGroupName: Output<String>? = null

The name of the Resource Group where the Firewall Policy should exist. Changing this forces a new Firewall Policy to be created.

Link copied to clipboard
val sku: Output<String>? = null

The SKU Tier of the Firewall Policy. Possible values are Standard, Premium and Basic. Defaults to Standard. Changing this forces a new Firewall Policy to be created.

Link copied to clipboard
val sqlRedirectAllowed: Output<Boolean>? = null

Whether SQL Redirect traffic filtering is allowed. Enabling this flag requires no rule using ports between 11000-11999.

Link copied to clipboard
val tags: Output<Map<String, String>>? = null

A mapping of tags which should be assigned to the Firewall Policy.

Link copied to clipboard

A threat_intelligence_allowlist block as defined below.

Link copied to clipboard
val threatIntelligenceMode: Output<String>? = null

The operation mode for Threat Intelligence. Possible values are Alert, Deny and Off. Defaults to Alert.

Link copied to clipboard

A tls_certificate block as defined below.

Functions

Link copied to clipboard
open override fun toJava(): FirewallPolicyArgs