Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Nutanix
  3. API Docs
  4. NetworkSecurityRule
Nutanix v0.7.4 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-nutanix

nutanix.NetworkSecurityRule

Explore with Pulumi AI

Nutanix v0.7.4 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-nutanix

Provides a Nutanix network security rule resource to Create a network security rule.

NOTE: The use of network_security_rule is only applicable in AHV clusters and requires Microsegmentation to be enabled. This feature is a function of the Flow product and requires a Flow license. For more information on Flow and Microsegmentation please visit https://www.nutanix.com/products/flow

Example Usage

Isolation Rule Example

import * as pulumi from "@pulumi/pulumi";
import * as nutanix from "@pierskarsenbarg/nutanix";

const isolation = new nutanix.NetworkSecurityRule("isolation", {
    description: "Isolation Rule Example",
    isolationRuleAction: "APPLY",
    isolationRuleFirstEntityFilterKindLists: ["vm"],
    isolationRuleFirstEntityFilterParams: [{
        name: "Environment",
        values: ["Dev"],
    }],
    isolationRuleFirstEntityFilterType: "CATEGORIES_MATCH_ALL",
    isolationRuleSecondEntityFilterKindLists: ["vm"],
    isolationRuleSecondEntityFilterParams: [{
        name: "Environment",
        values: ["Production"],
    }],
    isolationRuleSecondEntityFilterType: "CATEGORIES_MATCH_ALL",
});
Copy
import pulumi
import pulumi_nutanix as nutanix

isolation = nutanix.NetworkSecurityRule("isolation",
    description="Isolation Rule Example",
    isolation_rule_action="APPLY",
    isolation_rule_first_entity_filter_kind_lists=["vm"],
    isolation_rule_first_entity_filter_params=[{
        "name": "Environment",
        "values": ["Dev"],
    }],
    isolation_rule_first_entity_filter_type="CATEGORIES_MATCH_ALL",
    isolation_rule_second_entity_filter_kind_lists=["vm"],
    isolation_rule_second_entity_filter_params=[{
        "name": "Environment",
        "values": ["Production"],
    }],
    isolation_rule_second_entity_filter_type="CATEGORIES_MATCH_ALL")
Copy
package main

import (
	"github.com/pierskarsenbarg/pulumi-nutanix/sdk/go/nutanix"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := nutanix.NewNetworkSecurityRule(ctx, "isolation", &nutanix.NetworkSecurityRuleArgs{
			Description:         pulumi.String("Isolation Rule Example"),
			IsolationRuleAction: pulumi.String("APPLY"),
			IsolationRuleFirstEntityFilterKindLists: pulumi.StringArray{
				pulumi.String("vm"),
			},
			IsolationRuleFirstEntityFilterParams: nutanix.NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArray{
				&nutanix.NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs{
					Name: pulumi.String("Environment"),
					Values: pulumi.StringArray{
						pulumi.String("Dev"),
					},
				},
			},
			IsolationRuleFirstEntityFilterType: pulumi.String("CATEGORIES_MATCH_ALL"),
			IsolationRuleSecondEntityFilterKindLists: pulumi.StringArray{
				pulumi.String("vm"),
			},
			IsolationRuleSecondEntityFilterParams: nutanix.NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArray{
				&nutanix.NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs{
					Name: pulumi.String("Environment"),
					Values: pulumi.StringArray{
						pulumi.String("Production"),
					},
				},
			},
			IsolationRuleSecondEntityFilterType: pulumi.String("CATEGORIES_MATCH_ALL"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Nutanix = PiersKarsenbarg.Nutanix;

return await Deployment.RunAsync(() => 
{
    var isolation = new Nutanix.NetworkSecurityRule("isolation", new()
    {
        Description = "Isolation Rule Example",
        IsolationRuleAction = "APPLY",
        IsolationRuleFirstEntityFilterKindLists = new[]
        {
            "vm",
        },
        IsolationRuleFirstEntityFilterParams = new[]
        {
            new Nutanix.Inputs.NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs
            {
                Name = "Environment",
                Values = new[]
                {
                    "Dev",
                },
            },
        },
        IsolationRuleFirstEntityFilterType = "CATEGORIES_MATCH_ALL",
        IsolationRuleSecondEntityFilterKindLists = new[]
        {
            "vm",
        },
        IsolationRuleSecondEntityFilterParams = new[]
        {
            new Nutanix.Inputs.NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs
            {
                Name = "Environment",
                Values = new[]
                {
                    "Production",
                },
            },
        },
        IsolationRuleSecondEntityFilterType = "CATEGORIES_MATCH_ALL",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nutanix.NetworkSecurityRule;
import com.pulumi.nutanix.NetworkSecurityRuleArgs;
import com.pulumi.nutanix.inputs.NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs;
import com.pulumi.nutanix.inputs.NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var isolation = new NetworkSecurityRule("isolation", NetworkSecurityRuleArgs.builder()
            .description("Isolation Rule Example")
            .isolationRuleAction("APPLY")
            .isolationRuleFirstEntityFilterKindLists("vm")
            .isolationRuleFirstEntityFilterParams(NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs.builder()
                .name("Environment")
                .values("Dev")
                .build())
            .isolationRuleFirstEntityFilterType("CATEGORIES_MATCH_ALL")
            .isolationRuleSecondEntityFilterKindLists("vm")
            .isolationRuleSecondEntityFilterParams(NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs.builder()
                .name("Environment")
                .values("Production")
                .build())
            .isolationRuleSecondEntityFilterType("CATEGORIES_MATCH_ALL")
            .build());

    }
}
Copy
resources:
  isolation:
    type: nutanix:NetworkSecurityRule
    properties:
      description: Isolation Rule Example
      isolationRuleAction: APPLY
      isolationRuleFirstEntityFilterKindLists:
        - vm
      isolationRuleFirstEntityFilterParams:
        - name: Environment
          values:
            - Dev
      isolationRuleFirstEntityFilterType: CATEGORIES_MATCH_ALL
      isolationRuleSecondEntityFilterKindLists:
        - vm
      isolationRuleSecondEntityFilterParams:
        - name: Environment
          values:
            - Production
      isolationRuleSecondEntityFilterType: CATEGORIES_MATCH_ALL
Copy

Usage with service and address groups

import * as pulumi from "@pulumi/pulumi";
import * as nutanix from "@pierskarsenbarg/nutanix";

const service1 = new nutanix.ServiceGroup("service1", {
    description: "test",
    serviceLists: [{
        protocol: "TCP",
        tcpPortRangeLists: [
            {
                startPort: 22,
                endPort: 22,
            },
            {
                startPort: 2222,
                endPort: 2222,
            },
        ],
    }],
});
const address1 = new nutanix.AddressGroup("address1", {
    description: "test",
    ipAddressBlockLists: [{
        ip: "10.0.0.0",
        prefixLength: 24,
    }],
});
const ad_group_user_1 = new nutanix.CategoryValue("ad-group-user-1", {
    description: "group user category value",
    value: "AD",
});
const vDI = new nutanix.NetworkSecurityRule("vDI", {
    adRuleAction: "APPLY",
    description: "test",
    adRuleInboundAllowLists: [{
        ipSubnet: "10.0.0.0",
        ipSubnetPrefixLength: "8",
        peerSpecificationType: "IP_SUBNET",
        protocol: "ALL",
    }],
    adRuleTargetGroupDefaultInternalPolicy: "DENY_ALL",
    adRuleTargetGroupFilterKindLists: ["vm"],
    adRuleTargetGroupFilterParams: [{
        name: "AD",
        values: ["AD"],
    }],
    adRuleTargetGroupFilterType: "CATEGORIES_MATCH_ALL",
    adRuleTargetGroupPeerSpecificationType: "FILTER",
    adRuleOutboundAllowLists: [{
        peerSpecificationType: "ALL",
        serviceGroupLists: [{
            kind: "service_group",
            uuid: service1.id,
        }],
        addressGroupInclusionLists: [{
            kind: "address_group",
            uuid: address1.id,
        }],
    }],
}, {
    dependsOn: [ad_group_user_1],
});
Copy
import pulumi
import pulumi_nutanix as nutanix

service1 = nutanix.ServiceGroup("service1",
    description="test",
    service_lists=[{
        "protocol": "TCP",
        "tcp_port_range_lists": [
            {
                "start_port": 22,
                "end_port": 22,
            },
            {
                "start_port": 2222,
                "end_port": 2222,
            },
        ],
    }])
address1 = nutanix.AddressGroup("address1",
    description="test",
    ip_address_block_lists=[{
        "ip": "10.0.0.0",
        "prefix_length": 24,
    }])
ad_group_user_1 = nutanix.CategoryValue("ad-group-user-1",
    description="group user category value",
    value="AD")
v_di = nutanix.NetworkSecurityRule("vDI",
    ad_rule_action="APPLY",
    description="test",
    ad_rule_inbound_allow_lists=[{
        "ip_subnet": "10.0.0.0",
        "ip_subnet_prefix_length": "8",
        "peer_specification_type": "IP_SUBNET",
        "protocol": "ALL",
    }],
    ad_rule_target_group_default_internal_policy="DENY_ALL",
    ad_rule_target_group_filter_kind_lists=["vm"],
    ad_rule_target_group_filter_params=[{
        "name": "AD",
        "values": ["AD"],
    }],
    ad_rule_target_group_filter_type="CATEGORIES_MATCH_ALL",
    ad_rule_target_group_peer_specification_type="FILTER",
    ad_rule_outbound_allow_lists=[{
        "peer_specification_type": "ALL",
        "service_group_lists": [{
            "kind": "service_group",
            "uuid": service1.id,
        }],
        "address_group_inclusion_lists": [{
            "kind": "address_group",
            "uuid": address1.id,
        }],
    }],
    opts = pulumi.ResourceOptions(depends_on=[ad_group_user_1]))
Copy
package main

import (
	"github.com/pierskarsenbarg/pulumi-nutanix/sdk/go/nutanix"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		service1, err := nutanix.NewServiceGroup(ctx, "service1", &nutanix.ServiceGroupArgs{
			Description: pulumi.String("test"),
			ServiceLists: nutanix.ServiceGroupServiceListArray{
				&nutanix.ServiceGroupServiceListArgs{
					Protocol: pulumi.String("TCP"),
					TcpPortRangeLists: nutanix.ServiceGroupServiceListTcpPortRangeListArray{
						&nutanix.ServiceGroupServiceListTcpPortRangeListArgs{
							StartPort: pulumi.Int(22),
							EndPort:   pulumi.Int(22),
						},
						&nutanix.ServiceGroupServiceListTcpPortRangeListArgs{
							StartPort: pulumi.Int(2222),
							EndPort:   pulumi.Int(2222),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		address1, err := nutanix.NewAddressGroup(ctx, "address1", &nutanix.AddressGroupArgs{
			Description: pulumi.String("test"),
			IpAddressBlockLists: nutanix.AddressGroupIpAddressBlockListArray{
				&nutanix.AddressGroupIpAddressBlockListArgs{
					Ip:           pulumi.String("10.0.0.0"),
					PrefixLength: pulumi.Int(24),
				},
			},
		})
		if err != nil {
			return err
		}
		ad_group_user_1, err := nutanix.NewCategoryValue(ctx, "ad-group-user-1", &nutanix.CategoryValueArgs{
			Description: pulumi.String("group user category value"),
			Value:       pulumi.String("AD"),
		})
		if err != nil {
			return err
		}
		_, err = nutanix.NewNetworkSecurityRule(ctx, "vDI", &nutanix.NetworkSecurityRuleArgs{
			AdRuleAction: pulumi.String("APPLY"),
			Description:  pulumi.String("test"),
			AdRuleInboundAllowLists: nutanix.NetworkSecurityRuleAdRuleInboundAllowListArray{
				&nutanix.NetworkSecurityRuleAdRuleInboundAllowListArgs{
					IpSubnet:              pulumi.String("10.0.0.0"),
					IpSubnetPrefixLength:  pulumi.String("8"),
					PeerSpecificationType: pulumi.String("IP_SUBNET"),
					Protocol:              pulumi.String("ALL"),
				},
			},
			AdRuleTargetGroupDefaultInternalPolicy: pulumi.String("DENY_ALL"),
			AdRuleTargetGroupFilterKindLists: pulumi.StringArray{
				pulumi.String("vm"),
			},
			AdRuleTargetGroupFilterParams: nutanix.NetworkSecurityRuleAdRuleTargetGroupFilterParamArray{
				&nutanix.NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs{
					Name: pulumi.String("AD"),
					Values: pulumi.StringArray{
						pulumi.String("AD"),
					},
				},
			},
			AdRuleTargetGroupFilterType:            pulumi.String("CATEGORIES_MATCH_ALL"),
			AdRuleTargetGroupPeerSpecificationType: pulumi.String("FILTER"),
			AdRuleOutboundAllowLists: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListArray{
				&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListArgs{
					PeerSpecificationType: pulumi.String("ALL"),
					ServiceGroupLists: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupListArray{
						&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupListArgs{
							Kind: pulumi.String("service_group"),
							Uuid: service1.ID(),
						},
					},
					AddressGroupInclusionLists: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionListArray{
						&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionListArgs{
							Kind: pulumi.String("address_group"),
							Uuid: address1.ID(),
						},
					},
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			ad_group_user_1,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Nutanix = PiersKarsenbarg.Nutanix;

return await Deployment.RunAsync(() => 
{
    var service1 = new Nutanix.ServiceGroup("service1", new()
    {
        Description = "test",
        ServiceLists = new[]
        {
            new Nutanix.Inputs.ServiceGroupServiceListArgs
            {
                Protocol = "TCP",
                TcpPortRangeLists = new[]
                {
                    new Nutanix.Inputs.ServiceGroupServiceListTcpPortRangeListArgs
                    {
                        StartPort = 22,
                        EndPort = 22,
                    },
                    new Nutanix.Inputs.ServiceGroupServiceListTcpPortRangeListArgs
                    {
                        StartPort = 2222,
                        EndPort = 2222,
                    },
                },
            },
        },
    });

    var address1 = new Nutanix.AddressGroup("address1", new()
    {
        Description = "test",
        IpAddressBlockLists = new[]
        {
            new Nutanix.Inputs.AddressGroupIpAddressBlockListArgs
            {
                Ip = "10.0.0.0",
                PrefixLength = 24,
            },
        },
    });

    var ad_group_user_1 = new Nutanix.CategoryValue("ad-group-user-1", new()
    {
        Description = "group user category value",
        Value = "AD",
    });

    var vDI = new Nutanix.NetworkSecurityRule("vDI", new()
    {
        AdRuleAction = "APPLY",
        Description = "test",
        AdRuleInboundAllowLists = new[]
        {
            new Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListArgs
            {
                IpSubnet = "10.0.0.0",
                IpSubnetPrefixLength = "8",
                PeerSpecificationType = "IP_SUBNET",
                Protocol = "ALL",
            },
        },
        AdRuleTargetGroupDefaultInternalPolicy = "DENY_ALL",
        AdRuleTargetGroupFilterKindLists = new[]
        {
            "vm",
        },
        AdRuleTargetGroupFilterParams = new[]
        {
            new Nutanix.Inputs.NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs
            {
                Name = "AD",
                Values = new[]
                {
                    "AD",
                },
            },
        },
        AdRuleTargetGroupFilterType = "CATEGORIES_MATCH_ALL",
        AdRuleTargetGroupPeerSpecificationType = "FILTER",
        AdRuleOutboundAllowLists = new[]
        {
            new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListArgs
            {
                PeerSpecificationType = "ALL",
                ServiceGroupLists = new[]
                {
                    new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupListArgs
                    {
                        Kind = "service_group",
                        Uuid = service1.Id,
                    },
                },
                AddressGroupInclusionLists = new[]
                {
                    new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionListArgs
                    {
                        Kind = "address_group",
                        Uuid = address1.Id,
                    },
                },
            },
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            ad_group_user_1,
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nutanix.ServiceGroup;
import com.pulumi.nutanix.ServiceGroupArgs;
import com.pulumi.nutanix.inputs.ServiceGroupServiceListArgs;
import com.pulumi.nutanix.AddressGroup;
import com.pulumi.nutanix.AddressGroupArgs;
import com.pulumi.nutanix.inputs.AddressGroupIpAddressBlockListArgs;
import com.pulumi.nutanix.CategoryValue;
import com.pulumi.nutanix.CategoryValueArgs;
import com.pulumi.nutanix.NetworkSecurityRule;
import com.pulumi.nutanix.NetworkSecurityRuleArgs;
import com.pulumi.nutanix.inputs.NetworkSecurityRuleAdRuleInboundAllowListArgs;
import com.pulumi.nutanix.inputs.NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs;
import com.pulumi.nutanix.inputs.NetworkSecurityRuleAdRuleOutboundAllowListArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var service1 = new ServiceGroup("service1", ServiceGroupArgs.builder()
            .description("test")
            .serviceLists(ServiceGroupServiceListArgs.builder()
                .protocol("TCP")
                .tcpPortRangeLists(                
                    ServiceGroupServiceListTcpPortRangeListArgs.builder()
                        .startPort(22)
                        .endPort(22)
                        .build(),
                    ServiceGroupServiceListTcpPortRangeListArgs.builder()
                        .startPort(2222)
                        .endPort(2222)
                        .build())
                .build())
            .build());

        var address1 = new AddressGroup("address1", AddressGroupArgs.builder()
            .description("test")
            .ipAddressBlockLists(AddressGroupIpAddressBlockListArgs.builder()
                .ip("10.0.0.0")
                .prefixLength(24)
                .build())
            .build());

        var ad_group_user_1 = new CategoryValue("ad-group-user-1", CategoryValueArgs.builder()
            .description("group user category value")
            .value("AD")
            .build());

        var vDI = new NetworkSecurityRule("vDI", NetworkSecurityRuleArgs.builder()
            .adRuleAction("APPLY")
            .description("test")
            .adRuleInboundAllowLists(NetworkSecurityRuleAdRuleInboundAllowListArgs.builder()
                .ipSubnet("10.0.0.0")
                .ipSubnetPrefixLength("8")
                .peerSpecificationType("IP_SUBNET")
                .protocol("ALL")
                .build())
            .adRuleTargetGroupDefaultInternalPolicy("DENY_ALL")
            .adRuleTargetGroupFilterKindLists("vm")
            .adRuleTargetGroupFilterParams(NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs.builder()
                .name("AD")
                .values("AD")
                .build())
            .adRuleTargetGroupFilterType("CATEGORIES_MATCH_ALL")
            .adRuleTargetGroupPeerSpecificationType("FILTER")
            .adRuleOutboundAllowLists(NetworkSecurityRuleAdRuleOutboundAllowListArgs.builder()
                .peerSpecificationType("ALL")
                .serviceGroupLists(NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupListArgs.builder()
                    .kind("service_group")
                    .uuid(service1.id())
                    .build())
                .addressGroupInclusionLists(NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionListArgs.builder()
                    .kind("address_group")
                    .uuid(address1.id())
                    .build())
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(ad_group_user_1)
                .build());

    }
}
Copy
resources:
  service1:
    type: nutanix:ServiceGroup
    properties:
      description: test
      serviceLists:
        - protocol: TCP
          tcpPortRangeLists:
            - startPort: 22
              endPort: 22
            - startPort: 2222
              endPort: 2222
  address1:
    type: nutanix:AddressGroup
    properties:
      description: test
      ipAddressBlockLists:
        - ip: 10.0.0.0
          prefixLength: 24
  ad-group-user-1:
    type: nutanix:CategoryValue
    properties:
      description: group user category value
      value: AD
  vDI:
    type: nutanix:NetworkSecurityRule
    properties:
      adRuleAction: APPLY
      description: test
      #   app_rule_action = "APPLY"
      adRuleInboundAllowLists:
        - ipSubnet: 10.0.0.0
          ipSubnetPrefixLength: '8'
          peerSpecificationType: IP_SUBNET
          protocol: ALL
      adRuleTargetGroupDefaultInternalPolicy: DENY_ALL
      adRuleTargetGroupFilterKindLists:
        - vm
      adRuleTargetGroupFilterParams:
        - name: AD
          values:
            - AD
      adRuleTargetGroupFilterType: CATEGORIES_MATCH_ALL
      adRuleTargetGroupPeerSpecificationType: FILTER
      adRuleOutboundAllowLists:
        - peerSpecificationType: ALL
          serviceGroupLists:
            - kind: service_group
              uuid: ${service1.id}
          addressGroupInclusionLists:
            - kind: address_group
              uuid: ${address1.id}
    options:
      dependsOn:
        - ${["ad-group-user-1"]}
Copy

Create NetworkSecurityRule Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new NetworkSecurityRule(name: string, args?: NetworkSecurityRuleArgs, opts?: CustomResourceOptions);
@overload
def NetworkSecurityRule(resource_name: str,
                        args: Optional[NetworkSecurityRuleArgs] = None,
                        opts: Optional[ResourceOptions] = None)

@overload
def NetworkSecurityRule(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        ad_rule_action: Optional[str] = None,
                        ad_rule_inbound_allow_lists: Optional[Sequence[NetworkSecurityRuleAdRuleInboundAllowListArgs]] = None,
                        ad_rule_outbound_allow_lists: Optional[Sequence[NetworkSecurityRuleAdRuleOutboundAllowListArgs]] = None,
                        ad_rule_target_group_default_internal_policy: Optional[str] = None,
                        ad_rule_target_group_filter_kind_lists: Optional[Sequence[str]] = None,
                        ad_rule_target_group_filter_params: Optional[Sequence[NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs]] = None,
                        ad_rule_target_group_filter_type: Optional[str] = None,
                        ad_rule_target_group_peer_specification_type: Optional[str] = None,
                        allow_ipv6_traffic: Optional[bool] = None,
                        app_rule_action: Optional[str] = None,
                        app_rule_inbound_allow_lists: Optional[Sequence[NetworkSecurityRuleAppRuleInboundAllowListArgs]] = None,
                        app_rule_outbound_allow_lists: Optional[Sequence[NetworkSecurityRuleAppRuleOutboundAllowListArgs]] = None,
                        app_rule_target_group_default_internal_policy: Optional[str] = None,
                        app_rule_target_group_filter_kind_lists: Optional[Sequence[str]] = None,
                        app_rule_target_group_filter_params: Optional[Sequence[NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs]] = None,
                        app_rule_target_group_filter_type: Optional[str] = None,
                        app_rule_target_group_peer_specification_type: Optional[str] = None,
                        categories: Optional[Sequence[NetworkSecurityRuleCategoryArgs]] = None,
                        description: Optional[str] = None,
                        is_policy_hitlog_enabled: Optional[bool] = None,
                        isolation_rule_action: Optional[str] = None,
                        isolation_rule_first_entity_filter_kind_lists: Optional[Sequence[str]] = None,
                        isolation_rule_first_entity_filter_params: Optional[Sequence[NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs]] = None,
                        isolation_rule_first_entity_filter_type: Optional[str] = None,
                        isolation_rule_second_entity_filter_kind_lists: Optional[Sequence[str]] = None,
                        isolation_rule_second_entity_filter_params: Optional[Sequence[NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs]] = None,
                        isolation_rule_second_entity_filter_type: Optional[str] = None,
                        name: Optional[str] = None,
                        owner_reference: Optional[Mapping[str, str]] = None,
                        project_reference: Optional[Mapping[str, str]] = None)
func NewNetworkSecurityRule(ctx *Context, name string, args *NetworkSecurityRuleArgs, opts ...ResourceOption) (*NetworkSecurityRule, error)
public NetworkSecurityRule(string name, NetworkSecurityRuleArgs? args = null, CustomResourceOptions? opts = null)
public NetworkSecurityRule(String name, NetworkSecurityRuleArgs args)
public NetworkSecurityRule(String name, NetworkSecurityRuleArgs args, CustomResourceOptions options)

type: nutanix:NetworkSecurityRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args NetworkSecurityRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args NetworkSecurityRuleArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args NetworkSecurityRuleArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args NetworkSecurityRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. NetworkSecurityRuleArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var networkSecurityRuleResource = new Nutanix.NetworkSecurityRule("networkSecurityRuleResource", new()
{
    AdRuleAction = "string",
    AdRuleInboundAllowLists = new[]
    {
        new Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListArgs
        {
            AddressGroupInclusionLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListAddressGroupInclusionListArgs
                {
                    Kind = "string",
                    Name = "string",
                    Uuid = "string",
                },
            },
            ExpirationTime = "string",
            FilterKindLists = new[]
            {
                "string",
            },
            FilterParams = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListFilterParamArgs
                {
                    Name = "string",
                    Values = new[]
                    {
                        "string",
                    },
                },
            },
            FilterType = "string",
            IcmpTypeCodeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListIcmpTypeCodeListArgs
                {
                    Code = "string",
                    Type = "string",
                },
            },
            IpSubnet = "string",
            IpSubnetPrefixLength = "string",
            NetworkFunctionChainReference = 
            {
                { "string", "string" },
            },
            PeerSpecificationType = "string",
            Protocol = "string",
            ServiceGroupLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListServiceGroupListArgs
                {
                    Kind = "string",
                    Name = "string",
                    Uuid = "string",
                },
            },
            TcpPortRangeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListTcpPortRangeListArgs
                {
                    EndPort = 0,
                    StartPort = 0,
                },
            },
            UdpPortRangeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListUdpPortRangeListArgs
                {
                    EndPort = 0,
                    StartPort = 0,
                },
            },
        },
    },
    AdRuleOutboundAllowLists = new[]
    {
        new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListArgs
        {
            AddressGroupInclusionLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionListArgs
                {
                    Kind = "string",
                    Name = "string",
                    Uuid = "string",
                },
            },
            ExpirationTime = "string",
            FilterKindLists = new[]
            {
                "string",
            },
            FilterParams = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListFilterParamArgs
                {
                    Name = "string",
                    Values = new[]
                    {
                        "string",
                    },
                },
            },
            FilterType = "string",
            IcmpTypeCodeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListIcmpTypeCodeListArgs
                {
                    Code = "string",
                    Type = "string",
                },
            },
            IpSubnet = "string",
            IpSubnetPrefixLength = "string",
            NetworkFunctionChainReference = 
            {
                { "string", "string" },
            },
            PeerSpecificationType = "string",
            Protocol = "string",
            ServiceGroupLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupListArgs
                {
                    Kind = "string",
                    Name = "string",
                    Uuid = "string",
                },
            },
            TcpPortRangeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListTcpPortRangeListArgs
                {
                    EndPort = 0,
                    StartPort = 0,
                },
            },
            UdpPortRangeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListUdpPortRangeListArgs
                {
                    EndPort = 0,
                    StartPort = 0,
                },
            },
        },
    },
    AdRuleTargetGroupDefaultInternalPolicy = "string",
    AdRuleTargetGroupFilterKindLists = new[]
    {
        "string",
    },
    AdRuleTargetGroupFilterParams = new[]
    {
        new Nutanix.Inputs.NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs
        {
            Name = "string",
            Values = new[]
            {
                "string",
            },
        },
    },
    AdRuleTargetGroupFilterType = "string",
    AdRuleTargetGroupPeerSpecificationType = "string",
    AllowIpv6Traffic = false,
    AppRuleAction = "string",
    AppRuleInboundAllowLists = new[]
    {
        new Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListArgs
        {
            AddressGroupInclusionLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListAddressGroupInclusionListArgs
                {
                    Kind = "string",
                    Name = "string",
                    Uuid = "string",
                },
            },
            ExpirationTime = "string",
            FilterKindLists = new[]
            {
                "string",
            },
            FilterParams = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListFilterParamArgs
                {
                    Name = "string",
                    Values = new[]
                    {
                        "string",
                    },
                },
            },
            FilterType = "string",
            IcmpTypeCodeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListIcmpTypeCodeListArgs
                {
                    Code = "string",
                    Type = "string",
                },
            },
            IpSubnet = "string",
            IpSubnetPrefixLength = "string",
            NetworkFunctionChainReference = 
            {
                { "string", "string" },
            },
            PeerSpecificationType = "string",
            Protocol = "string",
            ServiceGroupLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListServiceGroupListArgs
                {
                    Kind = "string",
                    Name = "string",
                    Uuid = "string",
                },
            },
            TcpPortRangeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListTcpPortRangeListArgs
                {
                    EndPort = 0,
                    StartPort = 0,
                },
            },
            UdpPortRangeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListUdpPortRangeListArgs
                {
                    EndPort = 0,
                    StartPort = 0,
                },
            },
        },
    },
    AppRuleOutboundAllowLists = new[]
    {
        new Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListArgs
        {
            AddressGroupInclusionLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListAddressGroupInclusionListArgs
                {
                    Kind = "string",
                    Name = "string",
                    Uuid = "string",
                },
            },
            ExpirationTime = "string",
            FilterKindLists = new[]
            {
                "string",
            },
            FilterParams = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListFilterParamArgs
                {
                    Name = "string",
                    Values = new[]
                    {
                        "string",
                    },
                },
            },
            FilterType = "string",
            IcmpTypeCodeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListIcmpTypeCodeListArgs
                {
                    Code = "string",
                    Type = "string",
                },
            },
            IpSubnet = "string",
            IpSubnetPrefixLength = "string",
            NetworkFunctionChainReference = 
            {
                { "string", "string" },
            },
            PeerSpecificationType = "string",
            Protocol = "string",
            ServiceGroupLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListServiceGroupListArgs
                {
                    Kind = "string",
                    Name = "string",
                    Uuid = "string",
                },
            },
            TcpPortRangeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListTcpPortRangeListArgs
                {
                    EndPort = 0,
                    StartPort = 0,
                },
            },
            UdpPortRangeLists = new[]
            {
                new Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListUdpPortRangeListArgs
                {
                    EndPort = 0,
                    StartPort = 0,
                },
            },
        },
    },
    AppRuleTargetGroupDefaultInternalPolicy = "string",
    AppRuleTargetGroupFilterKindLists = new[]
    {
        "string",
    },
    AppRuleTargetGroupFilterParams = new[]
    {
        new Nutanix.Inputs.NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs
        {
            Name = "string",
            Values = new[]
            {
                "string",
            },
        },
    },
    AppRuleTargetGroupFilterType = "string",
    AppRuleTargetGroupPeerSpecificationType = "string",
    Categories = new[]
    {
        new Nutanix.Inputs.NetworkSecurityRuleCategoryArgs
        {
            Name = "string",
            Value = "string",
        },
    },
    Description = "string",
    IsPolicyHitlogEnabled = false,
    IsolationRuleAction = "string",
    IsolationRuleFirstEntityFilterKindLists = new[]
    {
        "string",
    },
    IsolationRuleFirstEntityFilterParams = new[]
    {
        new Nutanix.Inputs.NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs
        {
            Name = "string",
            Values = new[]
            {
                "string",
            },
        },
    },
    IsolationRuleFirstEntityFilterType = "string",
    IsolationRuleSecondEntityFilterKindLists = new[]
    {
        "string",
    },
    IsolationRuleSecondEntityFilterParams = new[]
    {
        new Nutanix.Inputs.NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs
        {
            Name = "string",
            Values = new[]
            {
                "string",
            },
        },
    },
    IsolationRuleSecondEntityFilterType = "string",
    Name = "string",
    OwnerReference = 
    {
        { "string", "string" },
    },
    ProjectReference = 
    {
        { "string", "string" },
    },
});
Copy
example, err := nutanix.NewNetworkSecurityRule(ctx, "networkSecurityRuleResource", &nutanix.NetworkSecurityRuleArgs{
	AdRuleAction: pulumi.String("string"),
	AdRuleInboundAllowLists: nutanix.NetworkSecurityRuleAdRuleInboundAllowListArray{
		&nutanix.NetworkSecurityRuleAdRuleInboundAllowListArgs{
			AddressGroupInclusionLists: nutanix.NetworkSecurityRuleAdRuleInboundAllowListAddressGroupInclusionListArray{
				&nutanix.NetworkSecurityRuleAdRuleInboundAllowListAddressGroupInclusionListArgs{
					Kind: pulumi.String("string"),
					Name: pulumi.String("string"),
					Uuid: pulumi.String("string"),
				},
			},
			ExpirationTime: pulumi.String("string"),
			FilterKindLists: pulumi.StringArray{
				pulumi.String("string"),
			},
			FilterParams: nutanix.NetworkSecurityRuleAdRuleInboundAllowListFilterParamArray{
				&nutanix.NetworkSecurityRuleAdRuleInboundAllowListFilterParamArgs{
					Name: pulumi.String("string"),
					Values: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			FilterType: pulumi.String("string"),
			IcmpTypeCodeLists: nutanix.NetworkSecurityRuleAdRuleInboundAllowListIcmpTypeCodeListArray{
				&nutanix.NetworkSecurityRuleAdRuleInboundAllowListIcmpTypeCodeListArgs{
					Code: pulumi.String("string"),
					Type: pulumi.String("string"),
				},
			},
			IpSubnet:             pulumi.String("string"),
			IpSubnetPrefixLength: pulumi.String("string"),
			NetworkFunctionChainReference: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
			PeerSpecificationType: pulumi.String("string"),
			Protocol:              pulumi.String("string"),
			ServiceGroupLists: nutanix.NetworkSecurityRuleAdRuleInboundAllowListServiceGroupListArray{
				&nutanix.NetworkSecurityRuleAdRuleInboundAllowListServiceGroupListArgs{
					Kind: pulumi.String("string"),
					Name: pulumi.String("string"),
					Uuid: pulumi.String("string"),
				},
			},
			TcpPortRangeLists: nutanix.NetworkSecurityRuleAdRuleInboundAllowListTcpPortRangeListArray{
				&nutanix.NetworkSecurityRuleAdRuleInboundAllowListTcpPortRangeListArgs{
					EndPort:   pulumi.Int(0),
					StartPort: pulumi.Int(0),
				},
			},
			UdpPortRangeLists: nutanix.NetworkSecurityRuleAdRuleInboundAllowListUdpPortRangeListArray{
				&nutanix.NetworkSecurityRuleAdRuleInboundAllowListUdpPortRangeListArgs{
					EndPort:   pulumi.Int(0),
					StartPort: pulumi.Int(0),
				},
			},
		},
	},
	AdRuleOutboundAllowLists: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListArray{
		&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListArgs{
			AddressGroupInclusionLists: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionListArray{
				&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionListArgs{
					Kind: pulumi.String("string"),
					Name: pulumi.String("string"),
					Uuid: pulumi.String("string"),
				},
			},
			ExpirationTime: pulumi.String("string"),
			FilterKindLists: pulumi.StringArray{
				pulumi.String("string"),
			},
			FilterParams: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListFilterParamArray{
				&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListFilterParamArgs{
					Name: pulumi.String("string"),
					Values: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			FilterType: pulumi.String("string"),
			IcmpTypeCodeLists: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListIcmpTypeCodeListArray{
				&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListIcmpTypeCodeListArgs{
					Code: pulumi.String("string"),
					Type: pulumi.String("string"),
				},
			},
			IpSubnet:             pulumi.String("string"),
			IpSubnetPrefixLength: pulumi.String("string"),
			NetworkFunctionChainReference: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
			PeerSpecificationType: pulumi.String("string"),
			Protocol:              pulumi.String("string"),
			ServiceGroupLists: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupListArray{
				&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupListArgs{
					Kind: pulumi.String("string"),
					Name: pulumi.String("string"),
					Uuid: pulumi.String("string"),
				},
			},
			TcpPortRangeLists: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListTcpPortRangeListArray{
				&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListTcpPortRangeListArgs{
					EndPort:   pulumi.Int(0),
					StartPort: pulumi.Int(0),
				},
			},
			UdpPortRangeLists: nutanix.NetworkSecurityRuleAdRuleOutboundAllowListUdpPortRangeListArray{
				&nutanix.NetworkSecurityRuleAdRuleOutboundAllowListUdpPortRangeListArgs{
					EndPort:   pulumi.Int(0),
					StartPort: pulumi.Int(0),
				},
			},
		},
	},
	AdRuleTargetGroupDefaultInternalPolicy: pulumi.String("string"),
	AdRuleTargetGroupFilterKindLists: pulumi.StringArray{
		pulumi.String("string"),
	},
	AdRuleTargetGroupFilterParams: nutanix.NetworkSecurityRuleAdRuleTargetGroupFilterParamArray{
		&nutanix.NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs{
			Name: pulumi.String("string"),
			Values: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	AdRuleTargetGroupFilterType:            pulumi.String("string"),
	AdRuleTargetGroupPeerSpecificationType: pulumi.String("string"),
	AllowIpv6Traffic:                       pulumi.Bool(false),
	AppRuleAction:                          pulumi.String("string"),
	AppRuleInboundAllowLists: nutanix.NetworkSecurityRuleAppRuleInboundAllowListArray{
		&nutanix.NetworkSecurityRuleAppRuleInboundAllowListArgs{
			AddressGroupInclusionLists: nutanix.NetworkSecurityRuleAppRuleInboundAllowListAddressGroupInclusionListArray{
				&nutanix.NetworkSecurityRuleAppRuleInboundAllowListAddressGroupInclusionListArgs{
					Kind: pulumi.String("string"),
					Name: pulumi.String("string"),
					Uuid: pulumi.String("string"),
				},
			},
			ExpirationTime: pulumi.String("string"),
			FilterKindLists: pulumi.StringArray{
				pulumi.String("string"),
			},
			FilterParams: nutanix.NetworkSecurityRuleAppRuleInboundAllowListFilterParamArray{
				&nutanix.NetworkSecurityRuleAppRuleInboundAllowListFilterParamArgs{
					Name: pulumi.String("string"),
					Values: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			FilterType: pulumi.String("string"),
			IcmpTypeCodeLists: nutanix.NetworkSecurityRuleAppRuleInboundAllowListIcmpTypeCodeListArray{
				&nutanix.NetworkSecurityRuleAppRuleInboundAllowListIcmpTypeCodeListArgs{
					Code: pulumi.String("string"),
					Type: pulumi.String("string"),
				},
			},
			IpSubnet:             pulumi.String("string"),
			IpSubnetPrefixLength: pulumi.String("string"),
			NetworkFunctionChainReference: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
			PeerSpecificationType: pulumi.String("string"),
			Protocol:              pulumi.String("string"),
			ServiceGroupLists: nutanix.NetworkSecurityRuleAppRuleInboundAllowListServiceGroupListArray{
				&nutanix.NetworkSecurityRuleAppRuleInboundAllowListServiceGroupListArgs{
					Kind: pulumi.String("string"),
					Name: pulumi.String("string"),
					Uuid: pulumi.String("string"),
				},
			},
			TcpPortRangeLists: nutanix.NetworkSecurityRuleAppRuleInboundAllowListTcpPortRangeListArray{
				&nutanix.NetworkSecurityRuleAppRuleInboundAllowListTcpPortRangeListArgs{
					EndPort:   pulumi.Int(0),
					StartPort: pulumi.Int(0),
				},
			},
			UdpPortRangeLists: nutanix.NetworkSecurityRuleAppRuleInboundAllowListUdpPortRangeListArray{
				&nutanix.NetworkSecurityRuleAppRuleInboundAllowListUdpPortRangeListArgs{
					EndPort:   pulumi.Int(0),
					StartPort: pulumi.Int(0),
				},
			},
		},
	},
	AppRuleOutboundAllowLists: nutanix.NetworkSecurityRuleAppRuleOutboundAllowListArray{
		&nutanix.NetworkSecurityRuleAppRuleOutboundAllowListArgs{
			AddressGroupInclusionLists: nutanix.NetworkSecurityRuleAppRuleOutboundAllowListAddressGroupInclusionListArray{
				&nutanix.NetworkSecurityRuleAppRuleOutboundAllowListAddressGroupInclusionListArgs{
					Kind: pulumi.String("string"),
					Name: pulumi.String("string"),
					Uuid: pulumi.String("string"),
				},
			},
			ExpirationTime: pulumi.String("string"),
			FilterKindLists: pulumi.StringArray{
				pulumi.String("string"),
			},
			FilterParams: nutanix.NetworkSecurityRuleAppRuleOutboundAllowListFilterParamArray{
				&nutanix.NetworkSecurityRuleAppRuleOutboundAllowListFilterParamArgs{
					Name: pulumi.String("string"),
					Values: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			FilterType: pulumi.String("string"),
			IcmpTypeCodeLists: nutanix.NetworkSecurityRuleAppRuleOutboundAllowListIcmpTypeCodeListArray{
				&nutanix.NetworkSecurityRuleAppRuleOutboundAllowListIcmpTypeCodeListArgs{
					Code: pulumi.String("string"),
					Type: pulumi.String("string"),
				},
			},
			IpSubnet:             pulumi.String("string"),
			IpSubnetPrefixLength: pulumi.String("string"),
			NetworkFunctionChainReference: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
			PeerSpecificationType: pulumi.String("string"),
			Protocol:              pulumi.String("string"),
			ServiceGroupLists: nutanix.NetworkSecurityRuleAppRuleOutboundAllowListServiceGroupListArray{
				&nutanix.NetworkSecurityRuleAppRuleOutboundAllowListServiceGroupListArgs{
					Kind: pulumi.String("string"),
					Name: pulumi.String("string"),
					Uuid: pulumi.String("string"),
				},
			},
			TcpPortRangeLists: nutanix.NetworkSecurityRuleAppRuleOutboundAllowListTcpPortRangeListArray{
				&nutanix.NetworkSecurityRuleAppRuleOutboundAllowListTcpPortRangeListArgs{
					EndPort:   pulumi.Int(0),
					StartPort: pulumi.Int(0),
				},
			},
			UdpPortRangeLists: nutanix.NetworkSecurityRuleAppRuleOutboundAllowListUdpPortRangeListArray{
				&nutanix.NetworkSecurityRuleAppRuleOutboundAllowListUdpPortRangeListArgs{
					EndPort:   pulumi.Int(0),
					StartPort: pulumi.Int(0),
				},
			},
		},
	},
	AppRuleTargetGroupDefaultInternalPolicy: pulumi.String("string"),
	AppRuleTargetGroupFilterKindLists: pulumi.StringArray{
		pulumi.String("string"),
	},
	AppRuleTargetGroupFilterParams: nutanix.NetworkSecurityRuleAppRuleTargetGroupFilterParamArray{
		&nutanix.NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs{
			Name: pulumi.String("string"),
			Values: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	AppRuleTargetGroupFilterType:            pulumi.String("string"),
	AppRuleTargetGroupPeerSpecificationType: pulumi.String("string"),
	Categories: nutanix.NetworkSecurityRuleCategoryArray{
		&nutanix.NetworkSecurityRuleCategoryArgs{
			Name:  pulumi.String("string"),
			Value: pulumi.String("string"),
		},
	},
	Description:           pulumi.String("string"),
	IsPolicyHitlogEnabled: pulumi.Bool(false),
	IsolationRuleAction:   pulumi.String("string"),
	IsolationRuleFirstEntityFilterKindLists: pulumi.StringArray{
		pulumi.String("string"),
	},
	IsolationRuleFirstEntityFilterParams: nutanix.NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArray{
		&nutanix.NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs{
			Name: pulumi.String("string"),
			Values: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	IsolationRuleFirstEntityFilterType: pulumi.String("string"),
	IsolationRuleSecondEntityFilterKindLists: pulumi.StringArray{
		pulumi.String("string"),
	},
	IsolationRuleSecondEntityFilterParams: nutanix.NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArray{
		&nutanix.NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs{
			Name: pulumi.String("string"),
			Values: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	IsolationRuleSecondEntityFilterType: pulumi.String("string"),
	Name:                                pulumi.String("string"),
	OwnerReference: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	ProjectReference: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})
Copy
var networkSecurityRuleResource = new NetworkSecurityRule("networkSecurityRuleResource", NetworkSecurityRuleArgs.builder()
    .adRuleAction("string")
    .adRuleInboundAllowLists(NetworkSecurityRuleAdRuleInboundAllowListArgs.builder()
        .addressGroupInclusionLists(NetworkSecurityRuleAdRuleInboundAllowListAddressGroupInclusionListArgs.builder()
            .kind("string")
            .name("string")
            .uuid("string")
            .build())
        .expirationTime("string")
        .filterKindLists("string")
        .filterParams(NetworkSecurityRuleAdRuleInboundAllowListFilterParamArgs.builder()
            .name("string")
            .values("string")
            .build())
        .filterType("string")
        .icmpTypeCodeLists(NetworkSecurityRuleAdRuleInboundAllowListIcmpTypeCodeListArgs.builder()
            .code("string")
            .type("string")
            .build())
        .ipSubnet("string")
        .ipSubnetPrefixLength("string")
        .networkFunctionChainReference(Map.of("string", "string"))
        .peerSpecificationType("string")
        .protocol("string")
        .serviceGroupLists(NetworkSecurityRuleAdRuleInboundAllowListServiceGroupListArgs.builder()
            .kind("string")
            .name("string")
            .uuid("string")
            .build())
        .tcpPortRangeLists(NetworkSecurityRuleAdRuleInboundAllowListTcpPortRangeListArgs.builder()
            .endPort(0)
            .startPort(0)
            .build())
        .udpPortRangeLists(NetworkSecurityRuleAdRuleInboundAllowListUdpPortRangeListArgs.builder()
            .endPort(0)
            .startPort(0)
            .build())
        .build())
    .adRuleOutboundAllowLists(NetworkSecurityRuleAdRuleOutboundAllowListArgs.builder()
        .addressGroupInclusionLists(NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionListArgs.builder()
            .kind("string")
            .name("string")
            .uuid("string")
            .build())
        .expirationTime("string")
        .filterKindLists("string")
        .filterParams(NetworkSecurityRuleAdRuleOutboundAllowListFilterParamArgs.builder()
            .name("string")
            .values("string")
            .build())
        .filterType("string")
        .icmpTypeCodeLists(NetworkSecurityRuleAdRuleOutboundAllowListIcmpTypeCodeListArgs.builder()
            .code("string")
            .type("string")
            .build())
        .ipSubnet("string")
        .ipSubnetPrefixLength("string")
        .networkFunctionChainReference(Map.of("string", "string"))
        .peerSpecificationType("string")
        .protocol("string")
        .serviceGroupLists(NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupListArgs.builder()
            .kind("string")
            .name("string")
            .uuid("string")
            .build())
        .tcpPortRangeLists(NetworkSecurityRuleAdRuleOutboundAllowListTcpPortRangeListArgs.builder()
            .endPort(0)
            .startPort(0)
            .build())
        .udpPortRangeLists(NetworkSecurityRuleAdRuleOutboundAllowListUdpPortRangeListArgs.builder()
            .endPort(0)
            .startPort(0)
            .build())
        .build())
    .adRuleTargetGroupDefaultInternalPolicy("string")
    .adRuleTargetGroupFilterKindLists("string")
    .adRuleTargetGroupFilterParams(NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs.builder()
        .name("string")
        .values("string")
        .build())
    .adRuleTargetGroupFilterType("string")
    .adRuleTargetGroupPeerSpecificationType("string")
    .allowIpv6Traffic(false)
    .appRuleAction("string")
    .appRuleInboundAllowLists(NetworkSecurityRuleAppRuleInboundAllowListArgs.builder()
        .addressGroupInclusionLists(NetworkSecurityRuleAppRuleInboundAllowListAddressGroupInclusionListArgs.builder()
            .kind("string")
            .name("string")
            .uuid("string")
            .build())
        .expirationTime("string")
        .filterKindLists("string")
        .filterParams(NetworkSecurityRuleAppRuleInboundAllowListFilterParamArgs.builder()
            .name("string")
            .values("string")
            .build())
        .filterType("string")
        .icmpTypeCodeLists(NetworkSecurityRuleAppRuleInboundAllowListIcmpTypeCodeListArgs.builder()
            .code("string")
            .type("string")
            .build())
        .ipSubnet("string")
        .ipSubnetPrefixLength("string")
        .networkFunctionChainReference(Map.of("string", "string"))
        .peerSpecificationType("string")
        .protocol("string")
        .serviceGroupLists(NetworkSecurityRuleAppRuleInboundAllowListServiceGroupListArgs.builder()
            .kind("string")
            .name("string")
            .uuid("string")
            .build())
        .tcpPortRangeLists(NetworkSecurityRuleAppRuleInboundAllowListTcpPortRangeListArgs.builder()
            .endPort(0)
            .startPort(0)
            .build())
        .udpPortRangeLists(NetworkSecurityRuleAppRuleInboundAllowListUdpPortRangeListArgs.builder()
            .endPort(0)
            .startPort(0)
            .build())
        .build())
    .appRuleOutboundAllowLists(NetworkSecurityRuleAppRuleOutboundAllowListArgs.builder()
        .addressGroupInclusionLists(NetworkSecurityRuleAppRuleOutboundAllowListAddressGroupInclusionListArgs.builder()
            .kind("string")
            .name("string")
            .uuid("string")
            .build())
        .expirationTime("string")
        .filterKindLists("string")
        .filterParams(NetworkSecurityRuleAppRuleOutboundAllowListFilterParamArgs.builder()
            .name("string")
            .values("string")
            .build())
        .filterType("string")
        .icmpTypeCodeLists(NetworkSecurityRuleAppRuleOutboundAllowListIcmpTypeCodeListArgs.builder()
            .code("string")
            .type("string")
            .build())
        .ipSubnet("string")
        .ipSubnetPrefixLength("string")
        .networkFunctionChainReference(Map.of("string", "string"))
        .peerSpecificationType("string")
        .protocol("string")
        .serviceGroupLists(NetworkSecurityRuleAppRuleOutboundAllowListServiceGroupListArgs.builder()
            .kind("string")
            .name("string")
            .uuid("string")
            .build())
        .tcpPortRangeLists(NetworkSecurityRuleAppRuleOutboundAllowListTcpPortRangeListArgs.builder()
            .endPort(0)
            .startPort(0)
            .build())
        .udpPortRangeLists(NetworkSecurityRuleAppRuleOutboundAllowListUdpPortRangeListArgs.builder()
            .endPort(0)
            .startPort(0)
            .build())
        .build())
    .appRuleTargetGroupDefaultInternalPolicy("string")
    .appRuleTargetGroupFilterKindLists("string")
    .appRuleTargetGroupFilterParams(NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs.builder()
        .name("string")
        .values("string")
        .build())
    .appRuleTargetGroupFilterType("string")
    .appRuleTargetGroupPeerSpecificationType("string")
    .categories(NetworkSecurityRuleCategoryArgs.builder()
        .name("string")
        .value("string")
        .build())
    .description("string")
    .isPolicyHitlogEnabled(false)
    .isolationRuleAction("string")
    .isolationRuleFirstEntityFilterKindLists("string")
    .isolationRuleFirstEntityFilterParams(NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs.builder()
        .name("string")
        .values("string")
        .build())
    .isolationRuleFirstEntityFilterType("string")
    .isolationRuleSecondEntityFilterKindLists("string")
    .isolationRuleSecondEntityFilterParams(NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs.builder()
        .name("string")
        .values("string")
        .build())
    .isolationRuleSecondEntityFilterType("string")
    .name("string")
    .ownerReference(Map.of("string", "string"))
    .projectReference(Map.of("string", "string"))
    .build());
Copy
network_security_rule_resource = nutanix.NetworkSecurityRule("networkSecurityRuleResource",
    ad_rule_action="string",
    ad_rule_inbound_allow_lists=[{
        "address_group_inclusion_lists": [{
            "kind": "string",
            "name": "string",
            "uuid": "string",
        }],
        "expiration_time": "string",
        "filter_kind_lists": ["string"],
        "filter_params": [{
            "name": "string",
            "values": ["string"],
        }],
        "filter_type": "string",
        "icmp_type_code_lists": [{
            "code": "string",
            "type": "string",
        }],
        "ip_subnet": "string",
        "ip_subnet_prefix_length": "string",
        "network_function_chain_reference": {
            "string": "string",
        },
        "peer_specification_type": "string",
        "protocol": "string",
        "service_group_lists": [{
            "kind": "string",
            "name": "string",
            "uuid": "string",
        }],
        "tcp_port_range_lists": [{
            "end_port": 0,
            "start_port": 0,
        }],
        "udp_port_range_lists": [{
            "end_port": 0,
            "start_port": 0,
        }],
    }],
    ad_rule_outbound_allow_lists=[{
        "address_group_inclusion_lists": [{
            "kind": "string",
            "name": "string",
            "uuid": "string",
        }],
        "expiration_time": "string",
        "filter_kind_lists": ["string"],
        "filter_params": [{
            "name": "string",
            "values": ["string"],
        }],
        "filter_type": "string",
        "icmp_type_code_lists": [{
            "code": "string",
            "type": "string",
        }],
        "ip_subnet": "string",
        "ip_subnet_prefix_length": "string",
        "network_function_chain_reference": {
            "string": "string",
        },
        "peer_specification_type": "string",
        "protocol": "string",
        "service_group_lists": [{
            "kind": "string",
            "name": "string",
            "uuid": "string",
        }],
        "tcp_port_range_lists": [{
            "end_port": 0,
            "start_port": 0,
        }],
        "udp_port_range_lists": [{
            "end_port": 0,
            "start_port": 0,
        }],
    }],
    ad_rule_target_group_default_internal_policy="string",
    ad_rule_target_group_filter_kind_lists=["string"],
    ad_rule_target_group_filter_params=[{
        "name": "string",
        "values": ["string"],
    }],
    ad_rule_target_group_filter_type="string",
    ad_rule_target_group_peer_specification_type="string",
    allow_ipv6_traffic=False,
    app_rule_action="string",
    app_rule_inbound_allow_lists=[{
        "address_group_inclusion_lists": [{
            "kind": "string",
            "name": "string",
            "uuid": "string",
        }],
        "expiration_time": "string",
        "filter_kind_lists": ["string"],
        "filter_params": [{
            "name": "string",
            "values": ["string"],
        }],
        "filter_type": "string",
        "icmp_type_code_lists": [{
            "code": "string",
            "type": "string",
        }],
        "ip_subnet": "string",
        "ip_subnet_prefix_length": "string",
        "network_function_chain_reference": {
            "string": "string",
        },
        "peer_specification_type": "string",
        "protocol": "string",
        "service_group_lists": [{
            "kind": "string",
            "name": "string",
            "uuid": "string",
        }],
        "tcp_port_range_lists": [{
            "end_port": 0,
            "start_port": 0,
        }],
        "udp_port_range_lists": [{
            "end_port": 0,
            "start_port": 0,
        }],
    }],
    app_rule_outbound_allow_lists=[{
        "address_group_inclusion_lists": [{
            "kind": "string",
            "name": "string",
            "uuid": "string",
        }],
        "expiration_time": "string",
        "filter_kind_lists": ["string"],
        "filter_params": [{
            "name": "string",
            "values": ["string"],
        }],
        "filter_type": "string",
        "icmp_type_code_lists": [{
            "code": "string",
            "type": "string",
        }],
        "ip_subnet": "string",
        "ip_subnet_prefix_length": "string",
        "network_function_chain_reference": {
            "string": "string",
        },
        "peer_specification_type": "string",
        "protocol": "string",
        "service_group_lists": [{
            "kind": "string",
            "name": "string",
            "uuid": "string",
        }],
        "tcp_port_range_lists": [{
            "end_port": 0,
            "start_port": 0,
        }],
        "udp_port_range_lists": [{
            "end_port": 0,
            "start_port": 0,
        }],
    }],
    app_rule_target_group_default_internal_policy="string",
    app_rule_target_group_filter_kind_lists=["string"],
    app_rule_target_group_filter_params=[{
        "name": "string",
        "values": ["string"],
    }],
    app_rule_target_group_filter_type="string",
    app_rule_target_group_peer_specification_type="string",
    categories=[{
        "name": "string",
        "value": "string",
    }],
    description="string",
    is_policy_hitlog_enabled=False,
    isolation_rule_action="string",
    isolation_rule_first_entity_filter_kind_lists=["string"],
    isolation_rule_first_entity_filter_params=[{
        "name": "string",
        "values": ["string"],
    }],
    isolation_rule_first_entity_filter_type="string",
    isolation_rule_second_entity_filter_kind_lists=["string"],
    isolation_rule_second_entity_filter_params=[{
        "name": "string",
        "values": ["string"],
    }],
    isolation_rule_second_entity_filter_type="string",
    name="string",
    owner_reference={
        "string": "string",
    },
    project_reference={
        "string": "string",
    })
Copy
const networkSecurityRuleResource = new nutanix.NetworkSecurityRule("networkSecurityRuleResource", {
    adRuleAction: "string",
    adRuleInboundAllowLists: [{
        addressGroupInclusionLists: [{
            kind: "string",
            name: "string",
            uuid: "string",
        }],
        expirationTime: "string",
        filterKindLists: ["string"],
        filterParams: [{
            name: "string",
            values: ["string"],
        }],
        filterType: "string",
        icmpTypeCodeLists: [{
            code: "string",
            type: "string",
        }],
        ipSubnet: "string",
        ipSubnetPrefixLength: "string",
        networkFunctionChainReference: {
            string: "string",
        },
        peerSpecificationType: "string",
        protocol: "string",
        serviceGroupLists: [{
            kind: "string",
            name: "string",
            uuid: "string",
        }],
        tcpPortRangeLists: [{
            endPort: 0,
            startPort: 0,
        }],
        udpPortRangeLists: [{
            endPort: 0,
            startPort: 0,
        }],
    }],
    adRuleOutboundAllowLists: [{
        addressGroupInclusionLists: [{
            kind: "string",
            name: "string",
            uuid: "string",
        }],
        expirationTime: "string",
        filterKindLists: ["string"],
        filterParams: [{
            name: "string",
            values: ["string"],
        }],
        filterType: "string",
        icmpTypeCodeLists: [{
            code: "string",
            type: "string",
        }],
        ipSubnet: "string",
        ipSubnetPrefixLength: "string",
        networkFunctionChainReference: {
            string: "string",
        },
        peerSpecificationType: "string",
        protocol: "string",
        serviceGroupLists: [{
            kind: "string",
            name: "string",
            uuid: "string",
        }],
        tcpPortRangeLists: [{
            endPort: 0,
            startPort: 0,
        }],
        udpPortRangeLists: [{
            endPort: 0,
            startPort: 0,
        }],
    }],
    adRuleTargetGroupDefaultInternalPolicy: "string",
    adRuleTargetGroupFilterKindLists: ["string"],
    adRuleTargetGroupFilterParams: [{
        name: "string",
        values: ["string"],
    }],
    adRuleTargetGroupFilterType: "string",
    adRuleTargetGroupPeerSpecificationType: "string",
    allowIpv6Traffic: false,
    appRuleAction: "string",
    appRuleInboundAllowLists: [{
        addressGroupInclusionLists: [{
            kind: "string",
            name: "string",
            uuid: "string",
        }],
        expirationTime: "string",
        filterKindLists: ["string"],
        filterParams: [{
            name: "string",
            values: ["string"],
        }],
        filterType: "string",
        icmpTypeCodeLists: [{
            code: "string",
            type: "string",
        }],
        ipSubnet: "string",
        ipSubnetPrefixLength: "string",
        networkFunctionChainReference: {
            string: "string",
        },
        peerSpecificationType: "string",
        protocol: "string",
        serviceGroupLists: [{
            kind: "string",
            name: "string",
            uuid: "string",
        }],
        tcpPortRangeLists: [{
            endPort: 0,
            startPort: 0,
        }],
        udpPortRangeLists: [{
            endPort: 0,
            startPort: 0,
        }],
    }],
    appRuleOutboundAllowLists: [{
        addressGroupInclusionLists: [{
            kind: "string",
            name: "string",
            uuid: "string",
        }],
        expirationTime: "string",
        filterKindLists: ["string"],
        filterParams: [{
            name: "string",
            values: ["string"],
        }],
        filterType: "string",
        icmpTypeCodeLists: [{
            code: "string",
            type: "string",
        }],
        ipSubnet: "string",
        ipSubnetPrefixLength: "string",
        networkFunctionChainReference: {
            string: "string",
        },
        peerSpecificationType: "string",
        protocol: "string",
        serviceGroupLists: [{
            kind: "string",
            name: "string",
            uuid: "string",
        }],
        tcpPortRangeLists: [{
            endPort: 0,
            startPort: 0,
        }],
        udpPortRangeLists: [{
            endPort: 0,
            startPort: 0,
        }],
    }],
    appRuleTargetGroupDefaultInternalPolicy: "string",
    appRuleTargetGroupFilterKindLists: ["string"],
    appRuleTargetGroupFilterParams: [{
        name: "string",
        values: ["string"],
    }],
    appRuleTargetGroupFilterType: "string",
    appRuleTargetGroupPeerSpecificationType: "string",
    categories: [{
        name: "string",
        value: "string",
    }],
    description: "string",
    isPolicyHitlogEnabled: false,
    isolationRuleAction: "string",
    isolationRuleFirstEntityFilterKindLists: ["string"],
    isolationRuleFirstEntityFilterParams: [{
        name: "string",
        values: ["string"],
    }],
    isolationRuleFirstEntityFilterType: "string",
    isolationRuleSecondEntityFilterKindLists: ["string"],
    isolationRuleSecondEntityFilterParams: [{
        name: "string",
        values: ["string"],
    }],
    isolationRuleSecondEntityFilterType: "string",
    name: "string",
    ownerReference: {
        string: "string",
    },
    projectReference: {
        string: "string",
    },
});
Copy
type: nutanix:NetworkSecurityRule
properties:
    adRuleAction: string
    adRuleInboundAllowLists:
        - addressGroupInclusionLists:
            - kind: string
              name: string
              uuid: string
          expirationTime: string
          filterKindLists:
            - string
          filterParams:
            - name: string
              values:
                - string
          filterType: string
          icmpTypeCodeLists:
            - code: string
              type: string
          ipSubnet: string
          ipSubnetPrefixLength: string
          networkFunctionChainReference:
            string: string
          peerSpecificationType: string
          protocol: string
          serviceGroupLists:
            - kind: string
              name: string
              uuid: string
          tcpPortRangeLists:
            - endPort: 0
              startPort: 0
          udpPortRangeLists:
            - endPort: 0
              startPort: 0
    adRuleOutboundAllowLists:
        - addressGroupInclusionLists:
            - kind: string
              name: string
              uuid: string
          expirationTime: string
          filterKindLists:
            - string
          filterParams:
            - name: string
              values:
                - string
          filterType: string
          icmpTypeCodeLists:
            - code: string
              type: string
          ipSubnet: string
          ipSubnetPrefixLength: string
          networkFunctionChainReference:
            string: string
          peerSpecificationType: string
          protocol: string
          serviceGroupLists:
            - kind: string
              name: string
              uuid: string
          tcpPortRangeLists:
            - endPort: 0
              startPort: 0
          udpPortRangeLists:
            - endPort: 0
              startPort: 0
    adRuleTargetGroupDefaultInternalPolicy: string
    adRuleTargetGroupFilterKindLists:
        - string
    adRuleTargetGroupFilterParams:
        - name: string
          values:
            - string
    adRuleTargetGroupFilterType: string
    adRuleTargetGroupPeerSpecificationType: string
    allowIpv6Traffic: false
    appRuleAction: string
    appRuleInboundAllowLists:
        - addressGroupInclusionLists:
            - kind: string
              name: string
              uuid: string
          expirationTime: string
          filterKindLists:
            - string
          filterParams:
            - name: string
              values:
                - string
          filterType: string
          icmpTypeCodeLists:
            - code: string
              type: string
          ipSubnet: string
          ipSubnetPrefixLength: string
          networkFunctionChainReference:
            string: string
          peerSpecificationType: string
          protocol: string
          serviceGroupLists:
            - kind: string
              name: string
              uuid: string
          tcpPortRangeLists:
            - endPort: 0
              startPort: 0
          udpPortRangeLists:
            - endPort: 0
              startPort: 0
    appRuleOutboundAllowLists:
        - addressGroupInclusionLists:
            - kind: string
              name: string
              uuid: string
          expirationTime: string
          filterKindLists:
            - string
          filterParams:
            - name: string
              values:
                - string
          filterType: string
          icmpTypeCodeLists:
            - code: string
              type: string
          ipSubnet: string
          ipSubnetPrefixLength: string
          networkFunctionChainReference:
            string: string
          peerSpecificationType: string
          protocol: string
          serviceGroupLists:
            - kind: string
              name: string
              uuid: string
          tcpPortRangeLists:
            - endPort: 0
              startPort: 0
          udpPortRangeLists:
            - endPort: 0
              startPort: 0
    appRuleTargetGroupDefaultInternalPolicy: string
    appRuleTargetGroupFilterKindLists:
        - string
    appRuleTargetGroupFilterParams:
        - name: string
          values:
            - string
    appRuleTargetGroupFilterType: string
    appRuleTargetGroupPeerSpecificationType: string
    categories:
        - name: string
          value: string
    description: string
    isPolicyHitlogEnabled: false
    isolationRuleAction: string
    isolationRuleFirstEntityFilterKindLists:
        - string
    isolationRuleFirstEntityFilterParams:
        - name: string
          values:
            - string
    isolationRuleFirstEntityFilterType: string
    isolationRuleSecondEntityFilterKindLists:
        - string
    isolationRuleSecondEntityFilterParams:
        - name: string
          values:
            - string
    isolationRuleSecondEntityFilterType: string
    name: string
    ownerReference:
        string: string
    projectReference:
        string: string
Copy

NetworkSecurityRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The NetworkSecurityRule resource accepts the following input properties:

AdRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
AdRuleInboundAllowLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowList>
  • (Optional) The set of categories that matching VMs need to have.
AdRuleOutboundAllowLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowList>
  • (Optional)
AdRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
AdRuleTargetGroupFilterKindLists List<string>
  • (Optional) - List of kinds associated with this filter.
AdRuleTargetGroupFilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleTargetGroupFilterParam>
  • (Optional) - A list of category key and list of values.
AdRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
AdRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
AllowIpv6Traffic bool
AppRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
AppRuleInboundAllowLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowList>
  • (Optional) The set of categories that matching VMs need to have.
AppRuleOutboundAllowLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowList>
  • (Optional)
AppRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
AppRuleTargetGroupFilterKindLists List<string>
  • (Optional) - List of kinds associated with this filter.
AppRuleTargetGroupFilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleTargetGroupFilterParam>
  • (Optional) - A list of category key and list of values.
AppRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
AppRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
Categories List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleCategory>
  • (Optional) Categories for the network_security_rule.
Description string
  • (Optional) A description for network_security_rule.
IsPolicyHitlogEnabled bool
IsolationRuleAction string
  • (Optional) - These rules are used for environmental isolation.
IsolationRuleFirstEntityFilterKindLists List<string>
  • (Optional) - List of kinds associated with this filter.
IsolationRuleFirstEntityFilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleIsolationRuleFirstEntityFilterParam>
  • (Optional) - A list of category key and list of values.
IsolationRuleFirstEntityFilterType string
  • (Optional) - The type of the filter being used.
IsolationRuleSecondEntityFilterKindLists List<string>
  • (Optional) - List of kinds associated with this filter.
IsolationRuleSecondEntityFilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleIsolationRuleSecondEntityFilterParam>
  • (Optional) - A list of category key and list of values.
IsolationRuleSecondEntityFilterType string
  • (Optional) - The type of the filter being used.
Name string
  • (Required) The name for the network_security_rule.
OwnerReference Dictionary<string, string>
  • (Optional) The reference to a user.
ProjectReference Dictionary<string, string>
  • (Optional) The reference to a project.
AdRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
AdRuleInboundAllowLists []NetworkSecurityRuleAdRuleInboundAllowListArgs
  • (Optional) The set of categories that matching VMs need to have.
AdRuleOutboundAllowLists []NetworkSecurityRuleAdRuleOutboundAllowListArgs
  • (Optional)
AdRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
AdRuleTargetGroupFilterKindLists []string
  • (Optional) - List of kinds associated with this filter.
AdRuleTargetGroupFilterParams []NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs
  • (Optional) - A list of category key and list of values.
AdRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
AdRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
AllowIpv6Traffic bool
AppRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
AppRuleInboundAllowLists []NetworkSecurityRuleAppRuleInboundAllowListArgs
  • (Optional) The set of categories that matching VMs need to have.
AppRuleOutboundAllowLists []NetworkSecurityRuleAppRuleOutboundAllowListArgs
  • (Optional)
AppRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
AppRuleTargetGroupFilterKindLists []string
  • (Optional) - List of kinds associated with this filter.
AppRuleTargetGroupFilterParams []NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs
  • (Optional) - A list of category key and list of values.
AppRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
AppRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
Categories []NetworkSecurityRuleCategoryArgs
  • (Optional) Categories for the network_security_rule.
Description string
  • (Optional) A description for network_security_rule.
IsPolicyHitlogEnabled bool
IsolationRuleAction string
  • (Optional) - These rules are used for environmental isolation.
IsolationRuleFirstEntityFilterKindLists []string
  • (Optional) - List of kinds associated with this filter.
IsolationRuleFirstEntityFilterParams []NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs
  • (Optional) - A list of category key and list of values.
IsolationRuleFirstEntityFilterType string
  • (Optional) - The type of the filter being used.
IsolationRuleSecondEntityFilterKindLists []string
  • (Optional) - List of kinds associated with this filter.
IsolationRuleSecondEntityFilterParams []NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs
  • (Optional) - A list of category key and list of values.
IsolationRuleSecondEntityFilterType string
  • (Optional) - The type of the filter being used.
Name string
  • (Required) The name for the network_security_rule.
OwnerReference map[string]string
  • (Optional) The reference to a user.
ProjectReference map[string]string
  • (Optional) The reference to a project.
adRuleAction String
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
adRuleInboundAllowLists List<NetworkSecurityRuleAdRuleInboundAllowList>
  • (Optional) The set of categories that matching VMs need to have.
adRuleOutboundAllowLists List<NetworkSecurityRuleAdRuleOutboundAllowList>
  • (Optional)
adRuleTargetGroupDefaultInternalPolicy String
  • (Optional) - Default policy for communication within target group.
adRuleTargetGroupFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
adRuleTargetGroupFilterParams List<NetworkSecurityRuleAdRuleTargetGroupFilterParam>
  • (Optional) - A list of category key and list of values.
adRuleTargetGroupFilterType String
  • (Optional) - The type of the filter being used.
adRuleTargetGroupPeerSpecificationType String
  • (Optional) - Way to identify the object for which rule is applied.
allowIpv6Traffic Boolean
appRuleAction String
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
appRuleInboundAllowLists List<NetworkSecurityRuleAppRuleInboundAllowList>
  • (Optional) The set of categories that matching VMs need to have.
appRuleOutboundAllowLists List<NetworkSecurityRuleAppRuleOutboundAllowList>
  • (Optional)
appRuleTargetGroupDefaultInternalPolicy String
  • (Optional) - Default policy for communication within target group.
appRuleTargetGroupFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
appRuleTargetGroupFilterParams List<NetworkSecurityRuleAppRuleTargetGroupFilterParam>
  • (Optional) - A list of category key and list of values.
appRuleTargetGroupFilterType String
  • (Optional) - The type of the filter being used.
appRuleTargetGroupPeerSpecificationType String
  • (Optional) - Way to identify the object for which rule is applied.
categories List<NetworkSecurityRuleCategory>
  • (Optional) Categories for the network_security_rule.
description String
  • (Optional) A description for network_security_rule.
isPolicyHitlogEnabled Boolean
isolationRuleAction String
  • (Optional) - These rules are used for environmental isolation.
isolationRuleFirstEntityFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
isolationRuleFirstEntityFilterParams List<NetworkSecurityRuleIsolationRuleFirstEntityFilterParam>
  • (Optional) - A list of category key and list of values.
isolationRuleFirstEntityFilterType String
  • (Optional) - The type of the filter being used.
isolationRuleSecondEntityFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
isolationRuleSecondEntityFilterParams List<NetworkSecurityRuleIsolationRuleSecondEntityFilterParam>
  • (Optional) - A list of category key and list of values.
isolationRuleSecondEntityFilterType String
  • (Optional) - The type of the filter being used.
name String
  • (Required) The name for the network_security_rule.
ownerReference Map<String,String>
  • (Optional) The reference to a user.
projectReference Map<String,String>
  • (Optional) The reference to a project.
adRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
adRuleInboundAllowLists NetworkSecurityRuleAdRuleInboundAllowList[]
  • (Optional) The set of categories that matching VMs need to have.
adRuleOutboundAllowLists NetworkSecurityRuleAdRuleOutboundAllowList[]
  • (Optional)
adRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
adRuleTargetGroupFilterKindLists string[]
  • (Optional) - List of kinds associated with this filter.
adRuleTargetGroupFilterParams NetworkSecurityRuleAdRuleTargetGroupFilterParam[]
  • (Optional) - A list of category key and list of values.
adRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
adRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
allowIpv6Traffic boolean
appRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
appRuleInboundAllowLists NetworkSecurityRuleAppRuleInboundAllowList[]
  • (Optional) The set of categories that matching VMs need to have.
appRuleOutboundAllowLists NetworkSecurityRuleAppRuleOutboundAllowList[]
  • (Optional)
appRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
appRuleTargetGroupFilterKindLists string[]
  • (Optional) - List of kinds associated with this filter.
appRuleTargetGroupFilterParams NetworkSecurityRuleAppRuleTargetGroupFilterParam[]
  • (Optional) - A list of category key and list of values.
appRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
appRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
categories NetworkSecurityRuleCategory[]
  • (Optional) Categories for the network_security_rule.
description string
  • (Optional) A description for network_security_rule.
isPolicyHitlogEnabled boolean
isolationRuleAction string
  • (Optional) - These rules are used for environmental isolation.
isolationRuleFirstEntityFilterKindLists string[]
  • (Optional) - List of kinds associated with this filter.
isolationRuleFirstEntityFilterParams NetworkSecurityRuleIsolationRuleFirstEntityFilterParam[]
  • (Optional) - A list of category key and list of values.
isolationRuleFirstEntityFilterType string
  • (Optional) - The type of the filter being used.
isolationRuleSecondEntityFilterKindLists string[]
  • (Optional) - List of kinds associated with this filter.
isolationRuleSecondEntityFilterParams NetworkSecurityRuleIsolationRuleSecondEntityFilterParam[]
  • (Optional) - A list of category key and list of values.
isolationRuleSecondEntityFilterType string
  • (Optional) - The type of the filter being used.
name string
  • (Required) The name for the network_security_rule.
ownerReference {[key: string]: string}
  • (Optional) The reference to a user.
projectReference {[key: string]: string}
  • (Optional) The reference to a project.
ad_rule_action str
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
ad_rule_inbound_allow_lists Sequence[NetworkSecurityRuleAdRuleInboundAllowListArgs]
  • (Optional) The set of categories that matching VMs need to have.
ad_rule_outbound_allow_lists Sequence[NetworkSecurityRuleAdRuleOutboundAllowListArgs]
  • (Optional)
ad_rule_target_group_default_internal_policy str
  • (Optional) - Default policy for communication within target group.
ad_rule_target_group_filter_kind_lists Sequence[str]
  • (Optional) - List of kinds associated with this filter.
ad_rule_target_group_filter_params Sequence[NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs]
  • (Optional) - A list of category key and list of values.
ad_rule_target_group_filter_type str
  • (Optional) - The type of the filter being used.
ad_rule_target_group_peer_specification_type str
  • (Optional) - Way to identify the object for which rule is applied.
allow_ipv6_traffic bool
app_rule_action str
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
app_rule_inbound_allow_lists Sequence[NetworkSecurityRuleAppRuleInboundAllowListArgs]
  • (Optional) The set of categories that matching VMs need to have.
app_rule_outbound_allow_lists Sequence[NetworkSecurityRuleAppRuleOutboundAllowListArgs]
  • (Optional)
app_rule_target_group_default_internal_policy str
  • (Optional) - Default policy for communication within target group.
app_rule_target_group_filter_kind_lists Sequence[str]
  • (Optional) - List of kinds associated with this filter.
app_rule_target_group_filter_params Sequence[NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs]
  • (Optional) - A list of category key and list of values.
app_rule_target_group_filter_type str
  • (Optional) - The type of the filter being used.
app_rule_target_group_peer_specification_type str
  • (Optional) - Way to identify the object for which rule is applied.
categories Sequence[NetworkSecurityRuleCategoryArgs]
  • (Optional) Categories for the network_security_rule.
description str
  • (Optional) A description for network_security_rule.
is_policy_hitlog_enabled bool
isolation_rule_action str
  • (Optional) - These rules are used for environmental isolation.
isolation_rule_first_entity_filter_kind_lists Sequence[str]
  • (Optional) - List of kinds associated with this filter.
isolation_rule_first_entity_filter_params Sequence[NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs]
  • (Optional) - A list of category key and list of values.
isolation_rule_first_entity_filter_type str
  • (Optional) - The type of the filter being used.
isolation_rule_second_entity_filter_kind_lists Sequence[str]
  • (Optional) - List of kinds associated with this filter.
isolation_rule_second_entity_filter_params Sequence[NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs]
  • (Optional) - A list of category key and list of values.
isolation_rule_second_entity_filter_type str
  • (Optional) - The type of the filter being used.
name str
  • (Required) The name for the network_security_rule.
owner_reference Mapping[str, str]
  • (Optional) The reference to a user.
project_reference Mapping[str, str]
  • (Optional) The reference to a project.
adRuleAction String
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
adRuleInboundAllowLists List<Property Map>
  • (Optional) The set of categories that matching VMs need to have.
adRuleOutboundAllowLists List<Property Map>
  • (Optional)
adRuleTargetGroupDefaultInternalPolicy String
  • (Optional) - Default policy for communication within target group.
adRuleTargetGroupFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
adRuleTargetGroupFilterParams List<Property Map>
  • (Optional) - A list of category key and list of values.
adRuleTargetGroupFilterType String
  • (Optional) - The type of the filter being used.
adRuleTargetGroupPeerSpecificationType String
  • (Optional) - Way to identify the object for which rule is applied.
allowIpv6Traffic Boolean
appRuleAction String
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
appRuleInboundAllowLists List<Property Map>
  • (Optional) The set of categories that matching VMs need to have.
appRuleOutboundAllowLists List<Property Map>
  • (Optional)
appRuleTargetGroupDefaultInternalPolicy String
  • (Optional) - Default policy for communication within target group.
appRuleTargetGroupFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
appRuleTargetGroupFilterParams List<Property Map>
  • (Optional) - A list of category key and list of values.
appRuleTargetGroupFilterType String
  • (Optional) - The type of the filter being used.
appRuleTargetGroupPeerSpecificationType String
  • (Optional) - Way to identify the object for which rule is applied.
categories List<Property Map>
  • (Optional) Categories for the network_security_rule.
description String
  • (Optional) A description for network_security_rule.
isPolicyHitlogEnabled Boolean
isolationRuleAction String
  • (Optional) - These rules are used for environmental isolation.
isolationRuleFirstEntityFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
isolationRuleFirstEntityFilterParams List<Property Map>
  • (Optional) - A list of category key and list of values.
isolationRuleFirstEntityFilterType String
  • (Optional) - The type of the filter being used.
isolationRuleSecondEntityFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
isolationRuleSecondEntityFilterParams List<Property Map>
  • (Optional) - A list of category key and list of values.
isolationRuleSecondEntityFilterType String
  • (Optional) - The type of the filter being used.
name String
  • (Required) The name for the network_security_rule.
ownerReference Map<String>
  • (Optional) The reference to a user.
projectReference Map<String>
  • (Optional) The reference to a project.

Outputs

All input properties are implicitly available as output properties. Additionally, the NetworkSecurityRule resource produces the following output properties:

ApiVersion string
The version of the API.
Id string
The provider-assigned unique ID for this managed resource.
Metadata Dictionary<string, string>
  • The network_security_rule kind metadata.
ApiVersion string
The version of the API.
Id string
The provider-assigned unique ID for this managed resource.
Metadata map[string]string
  • The network_security_rule kind metadata.
apiVersion String
The version of the API.
id String
The provider-assigned unique ID for this managed resource.
metadata Map<String,String>
  • The network_security_rule kind metadata.
apiVersion string
The version of the API.
id string
The provider-assigned unique ID for this managed resource.
metadata {[key: string]: string}
  • The network_security_rule kind metadata.
api_version str
The version of the API.
id str
The provider-assigned unique ID for this managed resource.
metadata Mapping[str, str]
  • The network_security_rule kind metadata.
apiVersion String
The version of the API.
id String
The provider-assigned unique ID for this managed resource.
metadata Map<String>
  • The network_security_rule kind metadata.

Look up Existing NetworkSecurityRule Resource

Get an existing NetworkSecurityRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: NetworkSecurityRuleState, opts?: CustomResourceOptions): NetworkSecurityRule
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        ad_rule_action: Optional[str] = None,
        ad_rule_inbound_allow_lists: Optional[Sequence[NetworkSecurityRuleAdRuleInboundAllowListArgs]] = None,
        ad_rule_outbound_allow_lists: Optional[Sequence[NetworkSecurityRuleAdRuleOutboundAllowListArgs]] = None,
        ad_rule_target_group_default_internal_policy: Optional[str] = None,
        ad_rule_target_group_filter_kind_lists: Optional[Sequence[str]] = None,
        ad_rule_target_group_filter_params: Optional[Sequence[NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs]] = None,
        ad_rule_target_group_filter_type: Optional[str] = None,
        ad_rule_target_group_peer_specification_type: Optional[str] = None,
        allow_ipv6_traffic: Optional[bool] = None,
        api_version: Optional[str] = None,
        app_rule_action: Optional[str] = None,
        app_rule_inbound_allow_lists: Optional[Sequence[NetworkSecurityRuleAppRuleInboundAllowListArgs]] = None,
        app_rule_outbound_allow_lists: Optional[Sequence[NetworkSecurityRuleAppRuleOutboundAllowListArgs]] = None,
        app_rule_target_group_default_internal_policy: Optional[str] = None,
        app_rule_target_group_filter_kind_lists: Optional[Sequence[str]] = None,
        app_rule_target_group_filter_params: Optional[Sequence[NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs]] = None,
        app_rule_target_group_filter_type: Optional[str] = None,
        app_rule_target_group_peer_specification_type: Optional[str] = None,
        categories: Optional[Sequence[NetworkSecurityRuleCategoryArgs]] = None,
        description: Optional[str] = None,
        is_policy_hitlog_enabled: Optional[bool] = None,
        isolation_rule_action: Optional[str] = None,
        isolation_rule_first_entity_filter_kind_lists: Optional[Sequence[str]] = None,
        isolation_rule_first_entity_filter_params: Optional[Sequence[NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs]] = None,
        isolation_rule_first_entity_filter_type: Optional[str] = None,
        isolation_rule_second_entity_filter_kind_lists: Optional[Sequence[str]] = None,
        isolation_rule_second_entity_filter_params: Optional[Sequence[NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs]] = None,
        isolation_rule_second_entity_filter_type: Optional[str] = None,
        metadata: Optional[Mapping[str, str]] = None,
        name: Optional[str] = None,
        owner_reference: Optional[Mapping[str, str]] = None,
        project_reference: Optional[Mapping[str, str]] = None) -> NetworkSecurityRule
func GetNetworkSecurityRule(ctx *Context, name string, id IDInput, state *NetworkSecurityRuleState, opts ...ResourceOption) (*NetworkSecurityRule, error)
public static NetworkSecurityRule Get(string name, Input<string> id, NetworkSecurityRuleState? state, CustomResourceOptions? opts = null)
public static NetworkSecurityRule get(String name, Output<String> id, NetworkSecurityRuleState state, CustomResourceOptions options)
resources:  _:    type: nutanix:NetworkSecurityRule    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AdRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
AdRuleInboundAllowLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowList>
  • (Optional) The set of categories that matching VMs need to have.
AdRuleOutboundAllowLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowList>
  • (Optional)
AdRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
AdRuleTargetGroupFilterKindLists List<string>
  • (Optional) - List of kinds associated with this filter.
AdRuleTargetGroupFilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleTargetGroupFilterParam>
  • (Optional) - A list of category key and list of values.
AdRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
AdRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
AllowIpv6Traffic bool
ApiVersion string
The version of the API.
AppRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
AppRuleInboundAllowLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowList>
  • (Optional) The set of categories that matching VMs need to have.
AppRuleOutboundAllowLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowList>
  • (Optional)
AppRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
AppRuleTargetGroupFilterKindLists List<string>
  • (Optional) - List of kinds associated with this filter.
AppRuleTargetGroupFilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleTargetGroupFilterParam>
  • (Optional) - A list of category key and list of values.
AppRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
AppRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
Categories List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleCategory>
  • (Optional) Categories for the network_security_rule.
Description string
  • (Optional) A description for network_security_rule.
IsPolicyHitlogEnabled bool
IsolationRuleAction string
  • (Optional) - These rules are used for environmental isolation.
IsolationRuleFirstEntityFilterKindLists List<string>
  • (Optional) - List of kinds associated with this filter.
IsolationRuleFirstEntityFilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleIsolationRuleFirstEntityFilterParam>
  • (Optional) - A list of category key and list of values.
IsolationRuleFirstEntityFilterType string
  • (Optional) - The type of the filter being used.
IsolationRuleSecondEntityFilterKindLists List<string>
  • (Optional) - List of kinds associated with this filter.
IsolationRuleSecondEntityFilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleIsolationRuleSecondEntityFilterParam>
  • (Optional) - A list of category key and list of values.
IsolationRuleSecondEntityFilterType string
  • (Optional) - The type of the filter being used.
Metadata Dictionary<string, string>
  • The network_security_rule kind metadata.
Name string
  • (Required) The name for the network_security_rule.
OwnerReference Dictionary<string, string>
  • (Optional) The reference to a user.
ProjectReference Dictionary<string, string>
  • (Optional) The reference to a project.
AdRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
AdRuleInboundAllowLists []NetworkSecurityRuleAdRuleInboundAllowListArgs
  • (Optional) The set of categories that matching VMs need to have.
AdRuleOutboundAllowLists []NetworkSecurityRuleAdRuleOutboundAllowListArgs
  • (Optional)
AdRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
AdRuleTargetGroupFilterKindLists []string
  • (Optional) - List of kinds associated with this filter.
AdRuleTargetGroupFilterParams []NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs
  • (Optional) - A list of category key and list of values.
AdRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
AdRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
AllowIpv6Traffic bool
ApiVersion string
The version of the API.
AppRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
AppRuleInboundAllowLists []NetworkSecurityRuleAppRuleInboundAllowListArgs
  • (Optional) The set of categories that matching VMs need to have.
AppRuleOutboundAllowLists []NetworkSecurityRuleAppRuleOutboundAllowListArgs
  • (Optional)
AppRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
AppRuleTargetGroupFilterKindLists []string
  • (Optional) - List of kinds associated with this filter.
AppRuleTargetGroupFilterParams []NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs
  • (Optional) - A list of category key and list of values.
AppRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
AppRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
Categories []NetworkSecurityRuleCategoryArgs
  • (Optional) Categories for the network_security_rule.
Description string
  • (Optional) A description for network_security_rule.
IsPolicyHitlogEnabled bool
IsolationRuleAction string
  • (Optional) - These rules are used for environmental isolation.
IsolationRuleFirstEntityFilterKindLists []string
  • (Optional) - List of kinds associated with this filter.
IsolationRuleFirstEntityFilterParams []NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs
  • (Optional) - A list of category key and list of values.
IsolationRuleFirstEntityFilterType string
  • (Optional) - The type of the filter being used.
IsolationRuleSecondEntityFilterKindLists []string
  • (Optional) - List of kinds associated with this filter.
IsolationRuleSecondEntityFilterParams []NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs
  • (Optional) - A list of category key and list of values.
IsolationRuleSecondEntityFilterType string
  • (Optional) - The type of the filter being used.
Metadata map[string]string
  • The network_security_rule kind metadata.
Name string
  • (Required) The name for the network_security_rule.
OwnerReference map[string]string
  • (Optional) The reference to a user.
ProjectReference map[string]string
  • (Optional) The reference to a project.
adRuleAction String
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
adRuleInboundAllowLists List<NetworkSecurityRuleAdRuleInboundAllowList>
  • (Optional) The set of categories that matching VMs need to have.
adRuleOutboundAllowLists List<NetworkSecurityRuleAdRuleOutboundAllowList>
  • (Optional)
adRuleTargetGroupDefaultInternalPolicy String
  • (Optional) - Default policy for communication within target group.
adRuleTargetGroupFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
adRuleTargetGroupFilterParams List<NetworkSecurityRuleAdRuleTargetGroupFilterParam>
  • (Optional) - A list of category key and list of values.
adRuleTargetGroupFilterType String
  • (Optional) - The type of the filter being used.
adRuleTargetGroupPeerSpecificationType String
  • (Optional) - Way to identify the object for which rule is applied.
allowIpv6Traffic Boolean
apiVersion String
The version of the API.
appRuleAction String
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
appRuleInboundAllowLists List<NetworkSecurityRuleAppRuleInboundAllowList>
  • (Optional) The set of categories that matching VMs need to have.
appRuleOutboundAllowLists List<NetworkSecurityRuleAppRuleOutboundAllowList>
  • (Optional)
appRuleTargetGroupDefaultInternalPolicy String
  • (Optional) - Default policy for communication within target group.
appRuleTargetGroupFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
appRuleTargetGroupFilterParams List<NetworkSecurityRuleAppRuleTargetGroupFilterParam>
  • (Optional) - A list of category key and list of values.
appRuleTargetGroupFilterType String
  • (Optional) - The type of the filter being used.
appRuleTargetGroupPeerSpecificationType String
  • (Optional) - Way to identify the object for which rule is applied.
categories List<NetworkSecurityRuleCategory>
  • (Optional) Categories for the network_security_rule.
description String
  • (Optional) A description for network_security_rule.
isPolicyHitlogEnabled Boolean
isolationRuleAction String
  • (Optional) - These rules are used for environmental isolation.
isolationRuleFirstEntityFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
isolationRuleFirstEntityFilterParams List<NetworkSecurityRuleIsolationRuleFirstEntityFilterParam>
  • (Optional) - A list of category key and list of values.
isolationRuleFirstEntityFilterType String
  • (Optional) - The type of the filter being used.
isolationRuleSecondEntityFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
isolationRuleSecondEntityFilterParams List<NetworkSecurityRuleIsolationRuleSecondEntityFilterParam>
  • (Optional) - A list of category key and list of values.
isolationRuleSecondEntityFilterType String
  • (Optional) - The type of the filter being used.
metadata Map<String,String>
  • The network_security_rule kind metadata.
name String
  • (Required) The name for the network_security_rule.
ownerReference Map<String,String>
  • (Optional) The reference to a user.
projectReference Map<String,String>
  • (Optional) The reference to a project.
adRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
adRuleInboundAllowLists NetworkSecurityRuleAdRuleInboundAllowList[]
  • (Optional) The set of categories that matching VMs need to have.
adRuleOutboundAllowLists NetworkSecurityRuleAdRuleOutboundAllowList[]
  • (Optional)
adRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
adRuleTargetGroupFilterKindLists string[]
  • (Optional) - List of kinds associated with this filter.
adRuleTargetGroupFilterParams NetworkSecurityRuleAdRuleTargetGroupFilterParam[]
  • (Optional) - A list of category key and list of values.
adRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
adRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
allowIpv6Traffic boolean
apiVersion string
The version of the API.
appRuleAction string
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
appRuleInboundAllowLists NetworkSecurityRuleAppRuleInboundAllowList[]
  • (Optional) The set of categories that matching VMs need to have.
appRuleOutboundAllowLists NetworkSecurityRuleAppRuleOutboundAllowList[]
  • (Optional)
appRuleTargetGroupDefaultInternalPolicy string
  • (Optional) - Default policy for communication within target group.
appRuleTargetGroupFilterKindLists string[]
  • (Optional) - List of kinds associated with this filter.
appRuleTargetGroupFilterParams NetworkSecurityRuleAppRuleTargetGroupFilterParam[]
  • (Optional) - A list of category key and list of values.
appRuleTargetGroupFilterType string
  • (Optional) - The type of the filter being used.
appRuleTargetGroupPeerSpecificationType string
  • (Optional) - Way to identify the object for which rule is applied.
categories NetworkSecurityRuleCategory[]
  • (Optional) Categories for the network_security_rule.
description string
  • (Optional) A description for network_security_rule.
isPolicyHitlogEnabled boolean
isolationRuleAction string
  • (Optional) - These rules are used for environmental isolation.
isolationRuleFirstEntityFilterKindLists string[]
  • (Optional) - List of kinds associated with this filter.
isolationRuleFirstEntityFilterParams NetworkSecurityRuleIsolationRuleFirstEntityFilterParam[]
  • (Optional) - A list of category key and list of values.
isolationRuleFirstEntityFilterType string
  • (Optional) - The type of the filter being used.
isolationRuleSecondEntityFilterKindLists string[]
  • (Optional) - List of kinds associated with this filter.
isolationRuleSecondEntityFilterParams NetworkSecurityRuleIsolationRuleSecondEntityFilterParam[]
  • (Optional) - A list of category key and list of values.
isolationRuleSecondEntityFilterType string
  • (Optional) - The type of the filter being used.
metadata {[key: string]: string}
  • The network_security_rule kind metadata.
name string
  • (Required) The name for the network_security_rule.
ownerReference {[key: string]: string}
  • (Optional) The reference to a user.
projectReference {[key: string]: string}
  • (Optional) The reference to a project.
ad_rule_action str
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
ad_rule_inbound_allow_lists Sequence[NetworkSecurityRuleAdRuleInboundAllowListArgs]
  • (Optional) The set of categories that matching VMs need to have.
ad_rule_outbound_allow_lists Sequence[NetworkSecurityRuleAdRuleOutboundAllowListArgs]
  • (Optional)
ad_rule_target_group_default_internal_policy str
  • (Optional) - Default policy for communication within target group.
ad_rule_target_group_filter_kind_lists Sequence[str]
  • (Optional) - List of kinds associated with this filter.
ad_rule_target_group_filter_params Sequence[NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs]
  • (Optional) - A list of category key and list of values.
ad_rule_target_group_filter_type str
  • (Optional) - The type of the filter being used.
ad_rule_target_group_peer_specification_type str
  • (Optional) - Way to identify the object for which rule is applied.
allow_ipv6_traffic bool
api_version str
The version of the API.
app_rule_action str
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
app_rule_inbound_allow_lists Sequence[NetworkSecurityRuleAppRuleInboundAllowListArgs]
  • (Optional) The set of categories that matching VMs need to have.
app_rule_outbound_allow_lists Sequence[NetworkSecurityRuleAppRuleOutboundAllowListArgs]
  • (Optional)
app_rule_target_group_default_internal_policy str
  • (Optional) - Default policy for communication within target group.
app_rule_target_group_filter_kind_lists Sequence[str]
  • (Optional) - List of kinds associated with this filter.
app_rule_target_group_filter_params Sequence[NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs]
  • (Optional) - A list of category key and list of values.
app_rule_target_group_filter_type str
  • (Optional) - The type of the filter being used.
app_rule_target_group_peer_specification_type str
  • (Optional) - Way to identify the object for which rule is applied.
categories Sequence[NetworkSecurityRuleCategoryArgs]
  • (Optional) Categories for the network_security_rule.
description str
  • (Optional) A description for network_security_rule.
is_policy_hitlog_enabled bool
isolation_rule_action str
  • (Optional) - These rules are used for environmental isolation.
isolation_rule_first_entity_filter_kind_lists Sequence[str]
  • (Optional) - List of kinds associated with this filter.
isolation_rule_first_entity_filter_params Sequence[NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs]
  • (Optional) - A list of category key and list of values.
isolation_rule_first_entity_filter_type str
  • (Optional) - The type of the filter being used.
isolation_rule_second_entity_filter_kind_lists Sequence[str]
  • (Optional) - List of kinds associated with this filter.
isolation_rule_second_entity_filter_params Sequence[NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs]
  • (Optional) - A list of category key and list of values.
isolation_rule_second_entity_filter_type str
  • (Optional) - The type of the filter being used.
metadata Mapping[str, str]
  • The network_security_rule kind metadata.
name str
  • (Required) The name for the network_security_rule.
owner_reference Mapping[str, str]
  • (Optional) The reference to a user.
project_reference Mapping[str, str]
  • (Optional) The reference to a project.
adRuleAction String
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
adRuleInboundAllowLists List<Property Map>
  • (Optional) The set of categories that matching VMs need to have.
adRuleOutboundAllowLists List<Property Map>
  • (Optional)
adRuleTargetGroupDefaultInternalPolicy String
  • (Optional) - Default policy for communication within target group.
adRuleTargetGroupFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
adRuleTargetGroupFilterParams List<Property Map>
  • (Optional) - A list of category key and list of values.
adRuleTargetGroupFilterType String
  • (Optional) - The type of the filter being used.
adRuleTargetGroupPeerSpecificationType String
  • (Optional) - Way to identify the object for which rule is applied.
allowIpv6Traffic Boolean
apiVersion String
The version of the API.
appRuleAction String
  • (Optional) - These rules govern what flows are allowed. Target group is a required attribute. Empty inbound_allow_list will not anything into target group. Empty outbound_allow_list will allow everything from target group.
appRuleInboundAllowLists List<Property Map>
  • (Optional) The set of categories that matching VMs need to have.
appRuleOutboundAllowLists List<Property Map>
  • (Optional)
appRuleTargetGroupDefaultInternalPolicy String
  • (Optional) - Default policy for communication within target group.
appRuleTargetGroupFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
appRuleTargetGroupFilterParams List<Property Map>
  • (Optional) - A list of category key and list of values.
appRuleTargetGroupFilterType String
  • (Optional) - The type of the filter being used.
appRuleTargetGroupPeerSpecificationType String
  • (Optional) - Way to identify the object for which rule is applied.
categories List<Property Map>
  • (Optional) Categories for the network_security_rule.
description String
  • (Optional) A description for network_security_rule.
isPolicyHitlogEnabled Boolean
isolationRuleAction String
  • (Optional) - These rules are used for environmental isolation.
isolationRuleFirstEntityFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
isolationRuleFirstEntityFilterParams List<Property Map>
  • (Optional) - A list of category key and list of values.
isolationRuleFirstEntityFilterType String
  • (Optional) - The type of the filter being used.
isolationRuleSecondEntityFilterKindLists List<String>
  • (Optional) - List of kinds associated with this filter.
isolationRuleSecondEntityFilterParams List<Property Map>
  • (Optional) - A list of category key and list of values.
isolationRuleSecondEntityFilterType String
  • (Optional) - The type of the filter being used.
metadata Map<String>
  • The network_security_rule kind metadata.
name String
  • (Required) The name for the network_security_rule.
ownerReference Map<String>
  • (Optional) The reference to a user.
projectReference Map<String>
  • (Optional) The reference to a project.

Supporting Types

NetworkSecurityRuleAdRuleInboundAllowList
, NetworkSecurityRuleAdRuleInboundAllowListArgs

AddressGroupInclusionLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListAddressGroupInclusionList>
ExpirationTime string
FilterKindLists List<string>
FilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListFilterParam>
FilterType string
IcmpTypeCodeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListIcmpTypeCodeList>
IpSubnet string
IpSubnetPrefixLength string
NetworkFunctionChainReference Dictionary<string, string>
PeerSpecificationType string
Protocol string
ServiceGroupLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListServiceGroupList>
TcpPortRangeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListTcpPortRangeList>
UdpPortRangeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleInboundAllowListUdpPortRangeList>

NetworkSecurityRuleAdRuleInboundAllowListAddressGroupInclusionList
, NetworkSecurityRuleAdRuleInboundAllowListAddressGroupInclusionListArgs

Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).
kind string
  • The kind name (Default value: project)(Required).
name string
  • (Required) The name for the network_security_rule.
uuid string
  • the UUID(Required).
kind str
  • The kind name (Default value: project)(Required).
name str
  • (Required) The name for the network_security_rule.
uuid str
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).

NetworkSecurityRuleAdRuleInboundAllowListFilterParam
, NetworkSecurityRuleAdRuleInboundAllowListFilterParamArgs

Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. List<string>
Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. []string
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>
name This property is required. string
  • (Required) The name for the network_security_rule.
values This property is required. string[]
name This property is required. str
  • (Required) The name for the network_security_rule.
values This property is required. Sequence[str]
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>

NetworkSecurityRuleAdRuleInboundAllowListIcmpTypeCodeList
, NetworkSecurityRuleAdRuleInboundAllowListIcmpTypeCodeListArgs

Code string
Type string
Code string
Type string
code String
type String
code string
type string
code str
type str
code String
type String

NetworkSecurityRuleAdRuleInboundAllowListServiceGroupList
, NetworkSecurityRuleAdRuleInboundAllowListServiceGroupListArgs

Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).
kind string
  • The kind name (Default value: project)(Required).
name string
  • (Required) The name for the network_security_rule.
uuid string
  • the UUID(Required).
kind str
  • The kind name (Default value: project)(Required).
name str
  • (Required) The name for the network_security_rule.
uuid str
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).

NetworkSecurityRuleAdRuleInboundAllowListTcpPortRangeList
, NetworkSecurityRuleAdRuleInboundAllowListTcpPortRangeListArgs

endPort Integer
startPort Integer
endPort number
startPort number
endPort Number
startPort Number

NetworkSecurityRuleAdRuleInboundAllowListUdpPortRangeList
, NetworkSecurityRuleAdRuleInboundAllowListUdpPortRangeListArgs

endPort Integer
startPort Integer
endPort number
startPort number
endPort Number
startPort Number

NetworkSecurityRuleAdRuleOutboundAllowList
, NetworkSecurityRuleAdRuleOutboundAllowListArgs

AddressGroupInclusionLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionList>
ExpirationTime string
FilterKindLists List<string>
FilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListFilterParam>
FilterType string
IcmpTypeCodeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListIcmpTypeCodeList>
IpSubnet string
IpSubnetPrefixLength string
NetworkFunctionChainReference Dictionary<string, string>
PeerSpecificationType string
Protocol string
ServiceGroupLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupList>
TcpPortRangeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListTcpPortRangeList>
UdpPortRangeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAdRuleOutboundAllowListUdpPortRangeList>

NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionList
, NetworkSecurityRuleAdRuleOutboundAllowListAddressGroupInclusionListArgs

Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).
kind string
  • The kind name (Default value: project)(Required).
name string
  • (Required) The name for the network_security_rule.
uuid string
  • the UUID(Required).
kind str
  • The kind name (Default value: project)(Required).
name str
  • (Required) The name for the network_security_rule.
uuid str
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).

NetworkSecurityRuleAdRuleOutboundAllowListFilterParam
, NetworkSecurityRuleAdRuleOutboundAllowListFilterParamArgs

Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. List<string>
Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. []string
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>
name This property is required. string
  • (Required) The name for the network_security_rule.
values This property is required. string[]
name This property is required. str
  • (Required) The name for the network_security_rule.
values This property is required. Sequence[str]
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>

NetworkSecurityRuleAdRuleOutboundAllowListIcmpTypeCodeList
, NetworkSecurityRuleAdRuleOutboundAllowListIcmpTypeCodeListArgs

Code string
Type string
Code string
Type string
code String
type String
code string
type string
code str
type str
code String
type String

NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupList
, NetworkSecurityRuleAdRuleOutboundAllowListServiceGroupListArgs

Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).
kind string
  • The kind name (Default value: project)(Required).
name string
  • (Required) The name for the network_security_rule.
uuid string
  • the UUID(Required).
kind str
  • The kind name (Default value: project)(Required).
name str
  • (Required) The name for the network_security_rule.
uuid str
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).

NetworkSecurityRuleAdRuleOutboundAllowListTcpPortRangeList
, NetworkSecurityRuleAdRuleOutboundAllowListTcpPortRangeListArgs

endPort Integer
startPort Integer
endPort number
startPort number
endPort Number
startPort Number

NetworkSecurityRuleAdRuleOutboundAllowListUdpPortRangeList
, NetworkSecurityRuleAdRuleOutboundAllowListUdpPortRangeListArgs

endPort Integer
startPort Integer
endPort number
startPort number
endPort Number
startPort Number

NetworkSecurityRuleAdRuleTargetGroupFilterParam
, NetworkSecurityRuleAdRuleTargetGroupFilterParamArgs

Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. List<string>
Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. []string
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>
name This property is required. string
  • (Required) The name for the network_security_rule.
values This property is required. string[]
name This property is required. str
  • (Required) The name for the network_security_rule.
values This property is required. Sequence[str]
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>

NetworkSecurityRuleAppRuleInboundAllowList
, NetworkSecurityRuleAppRuleInboundAllowListArgs

AddressGroupInclusionLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListAddressGroupInclusionList>
ExpirationTime string
FilterKindLists List<string>
FilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListFilterParam>
FilterType string
IcmpTypeCodeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListIcmpTypeCodeList>
IpSubnet string
IpSubnetPrefixLength string
NetworkFunctionChainReference Dictionary<string, string>
PeerSpecificationType string
Protocol string
ServiceGroupLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListServiceGroupList>
TcpPortRangeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListTcpPortRangeList>
UdpPortRangeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleInboundAllowListUdpPortRangeList>

NetworkSecurityRuleAppRuleInboundAllowListAddressGroupInclusionList
, NetworkSecurityRuleAppRuleInboundAllowListAddressGroupInclusionListArgs

Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).
kind string
  • The kind name (Default value: project)(Required).
name string
  • (Required) The name for the network_security_rule.
uuid string
  • the UUID(Required).
kind str
  • The kind name (Default value: project)(Required).
name str
  • (Required) The name for the network_security_rule.
uuid str
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).

NetworkSecurityRuleAppRuleInboundAllowListFilterParam
, NetworkSecurityRuleAppRuleInboundAllowListFilterParamArgs

Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. List<string>
Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. []string
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>
name This property is required. string
  • (Required) The name for the network_security_rule.
values This property is required. string[]
name This property is required. str
  • (Required) The name for the network_security_rule.
values This property is required. Sequence[str]
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>

NetworkSecurityRuleAppRuleInboundAllowListIcmpTypeCodeList
, NetworkSecurityRuleAppRuleInboundAllowListIcmpTypeCodeListArgs

Code string
Type string
Code string
Type string
code String
type String
code string
type string
code str
type str
code String
type String

NetworkSecurityRuleAppRuleInboundAllowListServiceGroupList
, NetworkSecurityRuleAppRuleInboundAllowListServiceGroupListArgs

Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).
kind string
  • The kind name (Default value: project)(Required).
name string
  • (Required) The name for the network_security_rule.
uuid string
  • the UUID(Required).
kind str
  • The kind name (Default value: project)(Required).
name str
  • (Required) The name for the network_security_rule.
uuid str
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).

NetworkSecurityRuleAppRuleInboundAllowListTcpPortRangeList
, NetworkSecurityRuleAppRuleInboundAllowListTcpPortRangeListArgs

endPort Integer
startPort Integer
endPort number
startPort number
endPort Number
startPort Number

NetworkSecurityRuleAppRuleInboundAllowListUdpPortRangeList
, NetworkSecurityRuleAppRuleInboundAllowListUdpPortRangeListArgs

endPort Integer
startPort Integer
endPort number
startPort number
endPort Number
startPort Number

NetworkSecurityRuleAppRuleOutboundAllowList
, NetworkSecurityRuleAppRuleOutboundAllowListArgs

AddressGroupInclusionLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListAddressGroupInclusionList>
ExpirationTime string
FilterKindLists List<string>
FilterParams List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListFilterParam>
FilterType string
IcmpTypeCodeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListIcmpTypeCodeList>
IpSubnet string
IpSubnetPrefixLength string
NetworkFunctionChainReference Dictionary<string, string>
PeerSpecificationType string
Protocol string
ServiceGroupLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListServiceGroupList>
TcpPortRangeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListTcpPortRangeList>
UdpPortRangeLists List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityRuleAppRuleOutboundAllowListUdpPortRangeList>

NetworkSecurityRuleAppRuleOutboundAllowListAddressGroupInclusionList
, NetworkSecurityRuleAppRuleOutboundAllowListAddressGroupInclusionListArgs

Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).
kind string
  • The kind name (Default value: project)(Required).
name string
  • (Required) The name for the network_security_rule.
uuid string
  • the UUID(Required).
kind str
  • The kind name (Default value: project)(Required).
name str
  • (Required) The name for the network_security_rule.
uuid str
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).

NetworkSecurityRuleAppRuleOutboundAllowListFilterParam
, NetworkSecurityRuleAppRuleOutboundAllowListFilterParamArgs

Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. List<string>
Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. []string
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>
name This property is required. string
  • (Required) The name for the network_security_rule.
values This property is required. string[]
name This property is required. str
  • (Required) The name for the network_security_rule.
values This property is required. Sequence[str]
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>

NetworkSecurityRuleAppRuleOutboundAllowListIcmpTypeCodeList
, NetworkSecurityRuleAppRuleOutboundAllowListIcmpTypeCodeListArgs

Code string
Type string
Code string
Type string
code String
type String
code string
type string
code str
type str
code String
type String

NetworkSecurityRuleAppRuleOutboundAllowListServiceGroupList
, NetworkSecurityRuleAppRuleOutboundAllowListServiceGroupListArgs

Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
Kind string
  • The kind name (Default value: project)(Required).
Name string
  • (Required) The name for the network_security_rule.
Uuid string
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).
kind string
  • The kind name (Default value: project)(Required).
name string
  • (Required) The name for the network_security_rule.
uuid string
  • the UUID(Required).
kind str
  • The kind name (Default value: project)(Required).
name str
  • (Required) The name for the network_security_rule.
uuid str
  • the UUID(Required).
kind String
  • The kind name (Default value: project)(Required).
name String
  • (Required) The name for the network_security_rule.
uuid String
  • the UUID(Required).

NetworkSecurityRuleAppRuleOutboundAllowListTcpPortRangeList
, NetworkSecurityRuleAppRuleOutboundAllowListTcpPortRangeListArgs

endPort Integer
startPort Integer
endPort number
startPort number
endPort Number
startPort Number

NetworkSecurityRuleAppRuleOutboundAllowListUdpPortRangeList
, NetworkSecurityRuleAppRuleOutboundAllowListUdpPortRangeListArgs

endPort Integer
startPort Integer
endPort number
startPort number
endPort Number
startPort Number

NetworkSecurityRuleAppRuleTargetGroupFilterParam
, NetworkSecurityRuleAppRuleTargetGroupFilterParamArgs

Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. List<string>
Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. []string
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>
name This property is required. string
  • (Required) The name for the network_security_rule.
values This property is required. string[]
name This property is required. str
  • (Required) The name for the network_security_rule.
values This property is required. Sequence[str]
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>

NetworkSecurityRuleCategory
, NetworkSecurityRuleCategoryArgs

Name string
  • (Required) The name for the network_security_rule.
Value string
Name string
  • (Required) The name for the network_security_rule.
Value string
name String
  • (Required) The name for the network_security_rule.
value String
name string
  • (Required) The name for the network_security_rule.
value string
name str
  • (Required) The name for the network_security_rule.
value str
name String
  • (Required) The name for the network_security_rule.
value String

NetworkSecurityRuleIsolationRuleFirstEntityFilterParam
, NetworkSecurityRuleIsolationRuleFirstEntityFilterParamArgs

Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. List<string>
Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. []string
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>
name This property is required. string
  • (Required) The name for the network_security_rule.
values This property is required. string[]
name This property is required. str
  • (Required) The name for the network_security_rule.
values This property is required. Sequence[str]
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>

NetworkSecurityRuleIsolationRuleSecondEntityFilterParam
, NetworkSecurityRuleIsolationRuleSecondEntityFilterParamArgs

Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. List<string>
Name This property is required. string
  • (Required) The name for the network_security_rule.
Values This property is required. []string
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>
name This property is required. string
  • (Required) The name for the network_security_rule.
values This property is required. string[]
name This property is required. str
  • (Required) The name for the network_security_rule.
values This property is required. Sequence[str]
name This property is required. String
  • (Required) The name for the network_security_rule.
values This property is required. List<String>

Package Details

Repository
nutanix pierskarsenbarg/pulumi-nutanix
License
Apache-2.0
Notes
This Pulumi package is based on the nutanix Terraform Provider.
Nutanix v0.7.4 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-nutanix