Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Nutanix
  3. API Docs
  4. NetworkSecurityPolicyV2
Nutanix v0.7.4 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-nutanix

nutanix.NetworkSecurityPolicyV2

Explore with Pulumi AI

Nutanix v0.7.4 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-nutanix

Create a Network Security Policy

Example

Coming soon!

Coming soon!

Coming soon!

Coming soon!

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nutanix.NetworkSecurityPolicyV2;
import com.pulumi.nutanix.NetworkSecurityPolicyV2Args;
import com.pulumi.nutanix.inputs.NetworkSecurityPolicyV2RuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new NetworkSecurityPolicyV2("example", NetworkSecurityPolicyV2Args.builder()
            .description("{{ desc }}")
            .isHitlogEnabled(true)
            .rules(NetworkSecurityPolicyV2RuleArgs.builder()
                .specs(NetworkSecurityPolicyV2RuleSpecArgs.builder()
                    .twoEnvIsolationRuleSpec(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                    .build())
                .type("TWO_ENV_ISOLATION")
                .build())
            .state("SAVE")
            .type("ISOLATION")
            .build());

    }
}
Copy
resources:
  example:
    type: nutanix:NetworkSecurityPolicyV2
    properties:
      description: '{{ desc }}'
      isHitlogEnabled: true
      rules:
        - specs:
            - twoEnvIsolationRuleSpec:
                - firstIsolationGroup:
                    - '{{ uuids}}'
                  secondIsolationGroup:
                    - '{{ uuids }}'
          type: TWO_ENV_ISOLATION
      state: SAVE
      type: ISOLATION
Copy

Create NetworkSecurityPolicyV2 Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new NetworkSecurityPolicyV2(name: string, args: NetworkSecurityPolicyV2Args, opts?: CustomResourceOptions);
@overload
def NetworkSecurityPolicyV2(resource_name: str,
                            args: NetworkSecurityPolicyV2Args,
                            opts: Optional[ResourceOptions] = None)

@overload
def NetworkSecurityPolicyV2(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            type: Optional[str] = None,
                            description: Optional[str] = None,
                            is_hitlog_enabled: Optional[bool] = None,
                            is_ipv6_traffic_allowed: Optional[bool] = None,
                            name: Optional[str] = None,
                            rules: Optional[Sequence[NetworkSecurityPolicyV2RuleArgs]] = None,
                            scope: Optional[str] = None,
                            state: Optional[str] = None,
                            vpc_references: Optional[Sequence[str]] = None)
func NewNetworkSecurityPolicyV2(ctx *Context, name string, args NetworkSecurityPolicyV2Args, opts ...ResourceOption) (*NetworkSecurityPolicyV2, error)
public NetworkSecurityPolicyV2(string name, NetworkSecurityPolicyV2Args args, CustomResourceOptions? opts = null)
public NetworkSecurityPolicyV2(String name, NetworkSecurityPolicyV2Args args)
public NetworkSecurityPolicyV2(String name, NetworkSecurityPolicyV2Args args, CustomResourceOptions options)

type: nutanix:NetworkSecurityPolicyV2
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. NetworkSecurityPolicyV2Args
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. NetworkSecurityPolicyV2Args
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. NetworkSecurityPolicyV2Args
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. NetworkSecurityPolicyV2Args
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. NetworkSecurityPolicyV2Args
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var networkSecurityPolicyV2Resource = new Nutanix.NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource", new()
{
    Type = "string",
    Description = "string",
    IsHitlogEnabled = false,
    IsIpv6TrafficAllowed = false,
    Name = "string",
    Rules = new[]
    {
        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleArgs
        {
            Specs = new[]
            {
                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecArgs
                {
                    ApplicationRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs
                        {
                            SecuredGroupCategoryReferences = new[]
                            {
                                "string",
                            },
                            NetworkFunctionChainReference = "string",
                            ServiceGroupReferences = new[]
                            {
                                "string",
                            },
                            DestSubnets = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs
                                {
                                    PrefixLength = "string",
                                    Value = "string",
                                },
                            },
                            IcmpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs
                                {
                                    Code = 0,
                                    IsAllAllowed = false,
                                    Type = 0,
                                },
                            },
                            IsAllProtocolAllowed = false,
                            DestAddressGroupReferences = new[]
                            {
                                "string",
                            },
                            DestAllowSpec = "string",
                            DestCategoryReferences = new[]
                            {
                                "string",
                            },
                            SrcAddressGroupReferences = new[]
                            {
                                "string",
                            },
                            SrcAllowSpec = "string",
                            SrcCategoryReferences = new[]
                            {
                                "string",
                            },
                            SrcSubnets = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs
                                {
                                    PrefixLength = "string",
                                    Value = "string",
                                },
                            },
                            TcpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs
                                {
                                    EndPort = 0,
                                    StartPort = 0,
                                },
                            },
                            UdpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs
                                {
                                    EndPort = 0,
                                    StartPort = 0,
                                },
                            },
                        },
                    },
                    IntraEntityGroupRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs
                        {
                            SecuredGroupAction = "string",
                            SecuredGroupCategoryReferences = new[]
                            {
                                "string",
                            },
                        },
                    },
                    MultiEnvIsolationRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs
                        {
                            Specs = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs
                                {
                                    AllToAllIsolationGroups = new[]
                                    {
                                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs
                                        {
                                            IsolationGroups = new[]
                                            {
                                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs
                                                {
                                                    GroupCategoryReferences = new[]
                                                    {
                                                        "string",
                                                    },
                                                },
                                            },
                                        },
                                    },
                                },
                            },
                        },
                    },
                    TwoEnvIsolationRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs
                        {
                            FirstIsolationGroups = new[]
                            {
                                "string",
                            },
                            SecondIsolationGroups = new[]
                            {
                                "string",
                            },
                        },
                    },
                },
            },
            Type = "string",
            Description = "string",
            ExtId = "string",
            Links = new[]
            {
                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleLinkArgs
                {
                    Href = "string",
                    Rel = "string",
                },
            },
        },
    },
    Scope = "string",
    State = "string",
    VpcReferences = new[]
    {
        "string",
    },
});
Copy
example, err := nutanix.NewNetworkSecurityPolicyV2(ctx, "networkSecurityPolicyV2Resource", &nutanix.NetworkSecurityPolicyV2Args{
	Type:                 pulumi.String("string"),
	Description:          pulumi.String("string"),
	IsHitlogEnabled:      pulumi.Bool(false),
	IsIpv6TrafficAllowed: pulumi.Bool(false),
	Name:                 pulumi.String("string"),
	Rules: nutanix.NetworkSecurityPolicyV2RuleArray{
		&nutanix.NetworkSecurityPolicyV2RuleArgs{
			Specs: nutanix.NetworkSecurityPolicyV2RuleSpecArray{
				&nutanix.NetworkSecurityPolicyV2RuleSpecArgs{
					ApplicationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs{
							SecuredGroupCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							NetworkFunctionChainReference: pulumi.String("string"),
							ServiceGroupReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							DestSubnets: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs{
									PrefixLength: pulumi.String("string"),
									Value:        pulumi.String("string"),
								},
							},
							IcmpServices: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs{
									Code:         pulumi.Int(0),
									IsAllAllowed: pulumi.Bool(false),
									Type:         pulumi.Int(0),
								},
							},
							IsAllProtocolAllowed: pulumi.Bool(false),
							DestAddressGroupReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							DestAllowSpec: pulumi.String("string"),
							DestCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SrcAddressGroupReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SrcAllowSpec: pulumi.String("string"),
							SrcCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SrcSubnets: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs{
									PrefixLength: pulumi.String("string"),
									Value:        pulumi.String("string"),
								},
							},
							TcpServices: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs{
									EndPort:   pulumi.Int(0),
									StartPort: pulumi.Int(0),
								},
							},
							UdpServices: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs{
									EndPort:   pulumi.Int(0),
									StartPort: pulumi.Int(0),
								},
							},
						},
					},
					IntraEntityGroupRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs{
							SecuredGroupAction: pulumi.String("string"),
							SecuredGroupCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
					MultiEnvIsolationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs{
							Specs: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs{
									AllToAllIsolationGroups: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArray{
										&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs{
											IsolationGroups: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArray{
												&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs{
													GroupCategoryReferences: pulumi.StringArray{
														pulumi.String("string"),
													},
												},
											},
										},
									},
								},
							},
						},
					},
					TwoEnvIsolationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs{
							FirstIsolationGroups: pulumi.StringArray{
								pulumi.String("string"),
							},
							SecondIsolationGroups: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
				},
			},
			Type:        pulumi.String("string"),
			Description: pulumi.String("string"),
			ExtId:       pulumi.String("string"),
			Links: nutanix.NetworkSecurityPolicyV2RuleLinkArray{
				&nutanix.NetworkSecurityPolicyV2RuleLinkArgs{
					Href: pulumi.String("string"),
					Rel:  pulumi.String("string"),
				},
			},
		},
	},
	Scope: pulumi.String("string"),
	State: pulumi.String("string"),
	VpcReferences: pulumi.StringArray{
		pulumi.String("string"),
	},
})
Copy
var networkSecurityPolicyV2Resource = new NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource", NetworkSecurityPolicyV2Args.builder()
    .type("string")
    .description("string")
    .isHitlogEnabled(false)
    .isIpv6TrafficAllowed(false)
    .name("string")
    .rules(NetworkSecurityPolicyV2RuleArgs.builder()
        .specs(NetworkSecurityPolicyV2RuleSpecArgs.builder()
            .applicationRuleSpecs(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs.builder()
                .securedGroupCategoryReferences("string")
                .networkFunctionChainReference("string")
                .serviceGroupReferences("string")
                .destSubnets(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs.builder()
                    .prefixLength("string")
                    .value("string")
                    .build())
                .icmpServices(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs.builder()
                    .code(0)
                    .isAllAllowed(false)
                    .type(0)
                    .build())
                .isAllProtocolAllowed(false)
                .destAddressGroupReferences("string")
                .destAllowSpec("string")
                .destCategoryReferences("string")
                .srcAddressGroupReferences("string")
                .srcAllowSpec("string")
                .srcCategoryReferences("string")
                .srcSubnets(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs.builder()
                    .prefixLength("string")
                    .value("string")
                    .build())
                .tcpServices(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs.builder()
                    .endPort(0)
                    .startPort(0)
                    .build())
                .udpServices(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs.builder()
                    .endPort(0)
                    .startPort(0)
                    .build())
                .build())
            .intraEntityGroupRuleSpecs(NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs.builder()
                .securedGroupAction("string")
                .securedGroupCategoryReferences("string")
                .build())
            .multiEnvIsolationRuleSpecs(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs.builder()
                .specs(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs.builder()
                    .allToAllIsolationGroups(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs.builder()
                        .isolationGroups(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs.builder()
                            .groupCategoryReferences("string")
                            .build())
                        .build())
                    .build())
                .build())
            .twoEnvIsolationRuleSpecs(NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs.builder()
                .firstIsolationGroups("string")
                .secondIsolationGroups("string")
                .build())
            .build())
        .type("string")
        .description("string")
        .extId("string")
        .links(NetworkSecurityPolicyV2RuleLinkArgs.builder()
            .href("string")
            .rel("string")
            .build())
        .build())
    .scope("string")
    .state("string")
    .vpcReferences("string")
    .build());
Copy
network_security_policy_v2_resource = nutanix.NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource",
    type="string",
    description="string",
    is_hitlog_enabled=False,
    is_ipv6_traffic_allowed=False,
    name="string",
    rules=[{
        "specs": [{
            "application_rule_specs": [{
                "secured_group_category_references": ["string"],
                "network_function_chain_reference": "string",
                "service_group_references": ["string"],
                "dest_subnets": [{
                    "prefix_length": "string",
                    "value": "string",
                }],
                "icmp_services": [{
                    "code": 0,
                    "is_all_allowed": False,
                    "type": 0,
                }],
                "is_all_protocol_allowed": False,
                "dest_address_group_references": ["string"],
                "dest_allow_spec": "string",
                "dest_category_references": ["string"],
                "src_address_group_references": ["string"],
                "src_allow_spec": "string",
                "src_category_references": ["string"],
                "src_subnets": [{
                    "prefix_length": "string",
                    "value": "string",
                }],
                "tcp_services": [{
                    "end_port": 0,
                    "start_port": 0,
                }],
                "udp_services": [{
                    "end_port": 0,
                    "start_port": 0,
                }],
            }],
            "intra_entity_group_rule_specs": [{
                "secured_group_action": "string",
                "secured_group_category_references": ["string"],
            }],
            "multi_env_isolation_rule_specs": [{
                "specs": [{
                    "all_to_all_isolation_groups": [{
                        "isolation_groups": [{
                            "group_category_references": ["string"],
                        }],
                    }],
                }],
            }],
            "two_env_isolation_rule_specs": [{
                "first_isolation_groups": ["string"],
                "second_isolation_groups": ["string"],
            }],
        }],
        "type": "string",
        "description": "string",
        "ext_id": "string",
        "links": [{
            "href": "string",
            "rel": "string",
        }],
    }],
    scope="string",
    state="string",
    vpc_references=["string"])
Copy
const networkSecurityPolicyV2Resource = new nutanix.NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource", {
    type: "string",
    description: "string",
    isHitlogEnabled: false,
    isIpv6TrafficAllowed: false,
    name: "string",
    rules: [{
        specs: [{
            applicationRuleSpecs: [{
                securedGroupCategoryReferences: ["string"],
                networkFunctionChainReference: "string",
                serviceGroupReferences: ["string"],
                destSubnets: [{
                    prefixLength: "string",
                    value: "string",
                }],
                icmpServices: [{
                    code: 0,
                    isAllAllowed: false,
                    type: 0,
                }],
                isAllProtocolAllowed: false,
                destAddressGroupReferences: ["string"],
                destAllowSpec: "string",
                destCategoryReferences: ["string"],
                srcAddressGroupReferences: ["string"],
                srcAllowSpec: "string",
                srcCategoryReferences: ["string"],
                srcSubnets: [{
                    prefixLength: "string",
                    value: "string",
                }],
                tcpServices: [{
                    endPort: 0,
                    startPort: 0,
                }],
                udpServices: [{
                    endPort: 0,
                    startPort: 0,
                }],
            }],
            intraEntityGroupRuleSpecs: [{
                securedGroupAction: "string",
                securedGroupCategoryReferences: ["string"],
            }],
            multiEnvIsolationRuleSpecs: [{
                specs: [{
                    allToAllIsolationGroups: [{
                        isolationGroups: [{
                            groupCategoryReferences: ["string"],
                        }],
                    }],
                }],
            }],
            twoEnvIsolationRuleSpecs: [{
                firstIsolationGroups: ["string"],
                secondIsolationGroups: ["string"],
            }],
        }],
        type: "string",
        description: "string",
        extId: "string",
        links: [{
            href: "string",
            rel: "string",
        }],
    }],
    scope: "string",
    state: "string",
    vpcReferences: ["string"],
});
Copy
type: nutanix:NetworkSecurityPolicyV2
properties:
    description: string
    isHitlogEnabled: false
    isIpv6TrafficAllowed: false
    name: string
    rules:
        - description: string
          extId: string
          links:
            - href: string
              rel: string
          specs:
            - applicationRuleSpecs:
                - destAddressGroupReferences:
                    - string
                  destAllowSpec: string
                  destCategoryReferences:
                    - string
                  destSubnets:
                    - prefixLength: string
                      value: string
                  icmpServices:
                    - code: 0
                      isAllAllowed: false
                      type: 0
                  isAllProtocolAllowed: false
                  networkFunctionChainReference: string
                  securedGroupCategoryReferences:
                    - string
                  serviceGroupReferences:
                    - string
                  srcAddressGroupReferences:
                    - string
                  srcAllowSpec: string
                  srcCategoryReferences:
                    - string
                  srcSubnets:
                    - prefixLength: string
                      value: string
                  tcpServices:
                    - endPort: 0
                      startPort: 0
                  udpServices:
                    - endPort: 0
                      startPort: 0
              intraEntityGroupRuleSpecs:
                - securedGroupAction: string
                  securedGroupCategoryReferences:
                    - string
              multiEnvIsolationRuleSpecs:
                - specs:
                    - allToAllIsolationGroups:
                        - isolationGroups:
                            - groupCategoryReferences:
                                - string
              twoEnvIsolationRuleSpecs:
                - firstIsolationGroups:
                    - string
                  secondIsolationGroups:
                    - string
          type: string
    scope: string
    state: string
    type: string
    vpcReferences:
        - string
Copy

NetworkSecurityPolicyV2 Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The NetworkSecurityPolicyV2 resource accepts the following input properties:

Type This property is required. string
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
Description string
A user defined annotation for a policy.
IsHitlogEnabled bool
If Hitlog is enabled.
IsIpv6TrafficAllowed bool
If Ipv6 Traffic is allowed.
Name string
Name of the Flow Network Security Policy.
Rules List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2Rule>
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
Scope string
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
State string
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
VpcReferences List<string>
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
Type This property is required. string
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
Description string
A user defined annotation for a policy.
IsHitlogEnabled bool
If Hitlog is enabled.
IsIpv6TrafficAllowed bool
If Ipv6 Traffic is allowed.
Name string
Name of the Flow Network Security Policy.
Rules []NetworkSecurityPolicyV2RuleArgs
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
Scope string
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
State string
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
VpcReferences []string
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
type This property is required. String
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
description String
A user defined annotation for a policy.
isHitlogEnabled Boolean
If Hitlog is enabled.
isIpv6TrafficAllowed Boolean
If Ipv6 Traffic is allowed.
name String
Name of the Flow Network Security Policy.
rules List<NetworkSecurityPolicyV2Rule>
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
scope String
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
state String
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
vpcReferences List<String>
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
type This property is required. string
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
description string
A user defined annotation for a policy.
isHitlogEnabled boolean
If Hitlog is enabled.
isIpv6TrafficAllowed boolean
If Ipv6 Traffic is allowed.
name string
Name of the Flow Network Security Policy.
rules NetworkSecurityPolicyV2Rule[]
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
scope string
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
state string
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
vpcReferences string[]
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
type This property is required. str
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
description str
A user defined annotation for a policy.
is_hitlog_enabled bool
If Hitlog is enabled.
is_ipv6_traffic_allowed bool
If Ipv6 Traffic is allowed.
name str
Name of the Flow Network Security Policy.
rules Sequence[NetworkSecurityPolicyV2RuleArgs]
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
scope str
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
state str
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
vpc_references Sequence[str]
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
type This property is required. String
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
description String
A user defined annotation for a policy.
isHitlogEnabled Boolean
If Hitlog is enabled.
isIpv6TrafficAllowed Boolean
If Ipv6 Traffic is allowed.
name String
Name of the Flow Network Security Policy.
rules List<Property Map>
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
scope String
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
state String
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
vpcReferences List<String>
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.

Outputs

All input properties are implicitly available as output properties. Additionally, the NetworkSecurityPolicyV2 resource produces the following output properties:

CreatedBy string
created by.
CreationTime string
creation time of NSP
ExtId string
A globally unique identifier of an instance that is suitable for external consumption.
Id string
The provider-assigned unique ID for this managed resource.
IsSystemDefined bool
Is system defined NSP
LastUpdateTime string
last updated time
Links List<PiersKarsenbarg.Nutanix.Outputs.NetworkSecurityPolicyV2Link>
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
SecuredGroups List<string>
Uuids of the secured groups in the NSP.
TenantId string
A globally unique identifier that represents the tenant that owns this entity
CreatedBy string
created by.
CreationTime string
creation time of NSP
ExtId string
A globally unique identifier of an instance that is suitable for external consumption.
Id string
The provider-assigned unique ID for this managed resource.
IsSystemDefined bool
Is system defined NSP
LastUpdateTime string
last updated time
Links []NetworkSecurityPolicyV2Link
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
SecuredGroups []string
Uuids of the secured groups in the NSP.
TenantId string
A globally unique identifier that represents the tenant that owns this entity
createdBy String
created by.
creationTime String
creation time of NSP
extId String
A globally unique identifier of an instance that is suitable for external consumption.
id String
The provider-assigned unique ID for this managed resource.
isSystemDefined Boolean
Is system defined NSP
lastUpdateTime String
last updated time
links List<NetworkSecurityPolicyV2Link>
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
securedGroups List<String>
Uuids of the secured groups in the NSP.
tenantId String
A globally unique identifier that represents the tenant that owns this entity
createdBy string
created by.
creationTime string
creation time of NSP
extId string
A globally unique identifier of an instance that is suitable for external consumption.
id string
The provider-assigned unique ID for this managed resource.
isSystemDefined boolean
Is system defined NSP
lastUpdateTime string
last updated time
links NetworkSecurityPolicyV2Link[]
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
securedGroups string[]
Uuids of the secured groups in the NSP.
tenantId string
A globally unique identifier that represents the tenant that owns this entity
created_by str
created by.
creation_time str
creation time of NSP
ext_id str
A globally unique identifier of an instance that is suitable for external consumption.
id str
The provider-assigned unique ID for this managed resource.
is_system_defined bool
Is system defined NSP
last_update_time str
last updated time
links Sequence[NetworkSecurityPolicyV2Link]
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
secured_groups Sequence[str]
Uuids of the secured groups in the NSP.
tenant_id str
A globally unique identifier that represents the tenant that owns this entity
createdBy String
created by.
creationTime String
creation time of NSP
extId String
A globally unique identifier of an instance that is suitable for external consumption.
id String
The provider-assigned unique ID for this managed resource.
isSystemDefined Boolean
Is system defined NSP
lastUpdateTime String
last updated time
links List<Property Map>
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
securedGroups List<String>
Uuids of the secured groups in the NSP.
tenantId String
A globally unique identifier that represents the tenant that owns this entity

Look up Existing NetworkSecurityPolicyV2 Resource

Get an existing NetworkSecurityPolicyV2 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: NetworkSecurityPolicyV2State, opts?: CustomResourceOptions): NetworkSecurityPolicyV2
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        created_by: Optional[str] = None,
        creation_time: Optional[str] = None,
        description: Optional[str] = None,
        ext_id: Optional[str] = None,
        is_hitlog_enabled: Optional[bool] = None,
        is_ipv6_traffic_allowed: Optional[bool] = None,
        is_system_defined: Optional[bool] = None,
        last_update_time: Optional[str] = None,
        links: Optional[Sequence[NetworkSecurityPolicyV2LinkArgs]] = None,
        name: Optional[str] = None,
        rules: Optional[Sequence[NetworkSecurityPolicyV2RuleArgs]] = None,
        scope: Optional[str] = None,
        secured_groups: Optional[Sequence[str]] = None,
        state: Optional[str] = None,
        tenant_id: Optional[str] = None,
        type: Optional[str] = None,
        vpc_references: Optional[Sequence[str]] = None) -> NetworkSecurityPolicyV2
func GetNetworkSecurityPolicyV2(ctx *Context, name string, id IDInput, state *NetworkSecurityPolicyV2State, opts ...ResourceOption) (*NetworkSecurityPolicyV2, error)
public static NetworkSecurityPolicyV2 Get(string name, Input<string> id, NetworkSecurityPolicyV2State? state, CustomResourceOptions? opts = null)
public static NetworkSecurityPolicyV2 get(String name, Output<String> id, NetworkSecurityPolicyV2State state, CustomResourceOptions options)
resources:  _:    type: nutanix:NetworkSecurityPolicyV2    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
CreatedBy string
created by.
CreationTime string
creation time of NSP
Description string
A user defined annotation for a policy.
ExtId string
A globally unique identifier of an instance that is suitable for external consumption.
IsHitlogEnabled bool
If Hitlog is enabled.
IsIpv6TrafficAllowed bool
If Ipv6 Traffic is allowed.
IsSystemDefined bool
Is system defined NSP
LastUpdateTime string
last updated time
Links List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2Link>
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
Name string
Name of the Flow Network Security Policy.
Rules List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2Rule>
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
Scope string
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
SecuredGroups List<string>
Uuids of the secured groups in the NSP.
State string
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
TenantId string
A globally unique identifier that represents the tenant that owns this entity
Type string
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
VpcReferences List<string>
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
CreatedBy string
created by.
CreationTime string
creation time of NSP
Description string
A user defined annotation for a policy.
ExtId string
A globally unique identifier of an instance that is suitable for external consumption.
IsHitlogEnabled bool
If Hitlog is enabled.
IsIpv6TrafficAllowed bool
If Ipv6 Traffic is allowed.
IsSystemDefined bool
Is system defined NSP
LastUpdateTime string
last updated time
Links []NetworkSecurityPolicyV2LinkArgs
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
Name string
Name of the Flow Network Security Policy.
Rules []NetworkSecurityPolicyV2RuleArgs
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
Scope string
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
SecuredGroups []string
Uuids of the secured groups in the NSP.
State string
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
TenantId string
A globally unique identifier that represents the tenant that owns this entity
Type string
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
VpcReferences []string
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
createdBy String
created by.
creationTime String
creation time of NSP
description String
A user defined annotation for a policy.
extId String
A globally unique identifier of an instance that is suitable for external consumption.
isHitlogEnabled Boolean
If Hitlog is enabled.
isIpv6TrafficAllowed Boolean
If Ipv6 Traffic is allowed.
isSystemDefined Boolean
Is system defined NSP
lastUpdateTime String
last updated time
links List<NetworkSecurityPolicyV2Link>
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
name String
Name of the Flow Network Security Policy.
rules List<NetworkSecurityPolicyV2Rule>
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
scope String
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
securedGroups List<String>
Uuids of the secured groups in the NSP.
state String
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
tenantId String
A globally unique identifier that represents the tenant that owns this entity
type String
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
vpcReferences List<String>
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
createdBy string
created by.
creationTime string
creation time of NSP
description string
A user defined annotation for a policy.
extId string
A globally unique identifier of an instance that is suitable for external consumption.
isHitlogEnabled boolean
If Hitlog is enabled.
isIpv6TrafficAllowed boolean
If Ipv6 Traffic is allowed.
isSystemDefined boolean
Is system defined NSP
lastUpdateTime string
last updated time
links NetworkSecurityPolicyV2Link[]
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
name string
Name of the Flow Network Security Policy.
rules NetworkSecurityPolicyV2Rule[]
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
scope string
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
securedGroups string[]
Uuids of the secured groups in the NSP.
state string
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
tenantId string
A globally unique identifier that represents the tenant that owns this entity
type string
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
vpcReferences string[]
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
created_by str
created by.
creation_time str
creation time of NSP
description str
A user defined annotation for a policy.
ext_id str
A globally unique identifier of an instance that is suitable for external consumption.
is_hitlog_enabled bool
If Hitlog is enabled.
is_ipv6_traffic_allowed bool
If Ipv6 Traffic is allowed.
is_system_defined bool
Is system defined NSP
last_update_time str
last updated time
links Sequence[NetworkSecurityPolicyV2LinkArgs]
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
name str
Name of the Flow Network Security Policy.
rules Sequence[NetworkSecurityPolicyV2RuleArgs]
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
scope str
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
secured_groups Sequence[str]
Uuids of the secured groups in the NSP.
state str
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
tenant_id str
A globally unique identifier that represents the tenant that owns this entity
type str
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
vpc_references Sequence[str]
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
createdBy String
created by.
creationTime String
creation time of NSP
description String
A user defined annotation for a policy.
extId String
A globally unique identifier of an instance that is suitable for external consumption.
isHitlogEnabled Boolean
If Hitlog is enabled.
isIpv6TrafficAllowed Boolean
If Ipv6 Traffic is allowed.
isSystemDefined Boolean
Is system defined NSP
lastUpdateTime String
last updated time
links List<Property Map>
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
name String
Name of the Flow Network Security Policy.
rules List<Property Map>
A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
scope String
Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
securedGroups List<String>
Uuids of the secured groups in the NSP.
state String
Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
tenantId String
A globally unique identifier that represents the tenant that owns this entity
type String
Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
vpcReferences List<String>
A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.

Supporting Types

Href string
Rel string
Href string
Rel string
href String
rel String
href string
rel string
href str
rel str
href String
rel String

NetworkSecurityPolicyV2Rule
, NetworkSecurityPolicyV2RuleArgs

Specs This property is required. List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpec>
Spec for rules.
Type This property is required. string
The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
Description string
A user defined annotation for a rule.
ExtId string
A globally unique identifier of an instance that is suitable for external consumption.
Links List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleLink>
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
Specs This property is required. []NetworkSecurityPolicyV2RuleSpec
Spec for rules.
Type This property is required. string
The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
Description string
A user defined annotation for a rule.
ExtId string
A globally unique identifier of an instance that is suitable for external consumption.
Links []NetworkSecurityPolicyV2RuleLink
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
specs This property is required. List<NetworkSecurityPolicyV2RuleSpec>
Spec for rules.
type This property is required. String
The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
description String
A user defined annotation for a rule.
extId String
A globally unique identifier of an instance that is suitable for external consumption.
links List<NetworkSecurityPolicyV2RuleLink>
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
specs This property is required. NetworkSecurityPolicyV2RuleSpec[]
Spec for rules.
type This property is required. string
The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
description string
A user defined annotation for a rule.
extId string
A globally unique identifier of an instance that is suitable for external consumption.
links NetworkSecurityPolicyV2RuleLink[]
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
specs This property is required. Sequence[NetworkSecurityPolicyV2RuleSpec]
Spec for rules.
type This property is required. str
The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
description str
A user defined annotation for a rule.
ext_id str
A globally unique identifier of an instance that is suitable for external consumption.
links Sequence[NetworkSecurityPolicyV2RuleLink]
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
specs This property is required. List<Property Map>
Spec for rules.
type This property is required. String
The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
description String
A user defined annotation for a rule.
extId String
A globally unique identifier of an instance that is suitable for external consumption.
links List<Property Map>
A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
Href string
Rel string
Href string
Rel string
href String
rel String
href string
rel string
href str
rel str
href String
rel String

NetworkSecurityPolicyV2RuleSpec
, NetworkSecurityPolicyV2RuleSpecArgs

applicationRuleSpecs List<Property Map>
Application Rule Spec.
intraEntityGroupRuleSpecs List<Property Map>
Intra entity group Rule Spec
multiEnvIsolationRuleSpecs List<Property Map>
Multi Environment Isolation Rule Spec.
twoEnvIsolationRuleSpecs List<Property Map>
Two Environment Isolation Rule Spec.

NetworkSecurityPolicyV2RuleSpecApplicationRuleSpec
, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs

SecuredGroupCategoryReferences This property is required. List<string>
A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
DestAddressGroupReferences List<string>
A list of address group references.
DestAllowSpec string
A specification to how allow mode traffic should be applied, either ALL or NONE.
DestCategoryReferences List<string>
List of categories that define a set of network endpoints as outbound.
DestSubnets List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet>
destination subnet value
IcmpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService>
icmp services
IsAllProtocolAllowed bool
Denotes if rule allows traffic for all protocol.
NetworkFunctionChainReference string
A reference to the network function chain in the rule.
ServiceGroupReferences List<string>
A list of service group references.
SrcAddressGroupReferences List<string>
A list of address group references.
SrcAllowSpec string
A specification to how allow mode traffic should be applied, either ALL or NONE.
SrcCategoryReferences List<string>
List of categories that define a set of network endpoints as inbound.
SrcSubnets List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet>
source subnet value
TcpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService>
tcp services
UdpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService>
udp services
SecuredGroupCategoryReferences This property is required. []string
A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
DestAddressGroupReferences []string
A list of address group references.
DestAllowSpec string
A specification to how allow mode traffic should be applied, either ALL or NONE.
DestCategoryReferences []string
List of categories that define a set of network endpoints as outbound.
DestSubnets []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet
destination subnet value
IcmpServices []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService
icmp services
IsAllProtocolAllowed bool
Denotes if rule allows traffic for all protocol.
NetworkFunctionChainReference string
A reference to the network function chain in the rule.
ServiceGroupReferences []string
A list of service group references.
SrcAddressGroupReferences []string
A list of address group references.
SrcAllowSpec string
A specification to how allow mode traffic should be applied, either ALL or NONE.
SrcCategoryReferences []string
List of categories that define a set of network endpoints as inbound.
SrcSubnets []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet
source subnet value
TcpServices []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService
tcp services
UdpServices []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService
udp services
securedGroupCategoryReferences This property is required. List<String>
A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
destAddressGroupReferences List<String>
A list of address group references.
destAllowSpec String
A specification to how allow mode traffic should be applied, either ALL or NONE.
destCategoryReferences List<String>
List of categories that define a set of network endpoints as outbound.
destSubnets List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet>
destination subnet value
icmpServices List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService>
icmp services
isAllProtocolAllowed Boolean
Denotes if rule allows traffic for all protocol.
networkFunctionChainReference String
A reference to the network function chain in the rule.
serviceGroupReferences List<String>
A list of service group references.
srcAddressGroupReferences List<String>
A list of address group references.
srcAllowSpec String
A specification to how allow mode traffic should be applied, either ALL or NONE.
srcCategoryReferences List<String>
List of categories that define a set of network endpoints as inbound.
srcSubnets List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet>
source subnet value
tcpServices List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService>
tcp services
udpServices List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService>
udp services
securedGroupCategoryReferences This property is required. string[]
A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
destAddressGroupReferences string[]
A list of address group references.
destAllowSpec string
A specification to how allow mode traffic should be applied, either ALL or NONE.
destCategoryReferences string[]
List of categories that define a set of network endpoints as outbound.
destSubnets NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet[]
destination subnet value
icmpServices NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService[]
icmp services
isAllProtocolAllowed boolean
Denotes if rule allows traffic for all protocol.
networkFunctionChainReference string
A reference to the network function chain in the rule.
serviceGroupReferences string[]
A list of service group references.
srcAddressGroupReferences string[]
A list of address group references.
srcAllowSpec string
A specification to how allow mode traffic should be applied, either ALL or NONE.
srcCategoryReferences string[]
List of categories that define a set of network endpoints as inbound.
srcSubnets NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet[]
source subnet value
tcpServices NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService[]
tcp services
udpServices NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService[]
udp services
secured_group_category_references This property is required. Sequence[str]
A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
dest_address_group_references Sequence[str]
A list of address group references.
dest_allow_spec str
A specification to how allow mode traffic should be applied, either ALL or NONE.
dest_category_references Sequence[str]
List of categories that define a set of network endpoints as outbound.
dest_subnets Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet]
destination subnet value
icmp_services Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService]
icmp services
is_all_protocol_allowed bool
Denotes if rule allows traffic for all protocol.
network_function_chain_reference str
A reference to the network function chain in the rule.
service_group_references Sequence[str]
A list of service group references.
src_address_group_references Sequence[str]
A list of address group references.
src_allow_spec str
A specification to how allow mode traffic should be applied, either ALL or NONE.
src_category_references Sequence[str]
List of categories that define a set of network endpoints as inbound.
src_subnets Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet]
source subnet value
tcp_services Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService]
tcp services
udp_services Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService]
udp services
securedGroupCategoryReferences This property is required. List<String>
A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
destAddressGroupReferences List<String>
A list of address group references.
destAllowSpec String
A specification to how allow mode traffic should be applied, either ALL or NONE.
destCategoryReferences List<String>
List of categories that define a set of network endpoints as outbound.
destSubnets List<Property Map>
destination subnet value
icmpServices List<Property Map>
icmp services
isAllProtocolAllowed Boolean
Denotes if rule allows traffic for all protocol.
networkFunctionChainReference String
A reference to the network function chain in the rule.
serviceGroupReferences List<String>
A list of service group references.
srcAddressGroupReferences List<String>
A list of address group references.
srcAllowSpec String
A specification to how allow mode traffic should be applied, either ALL or NONE.
srcCategoryReferences List<String>
List of categories that define a set of network endpoints as inbound.
srcSubnets List<Property Map>
source subnet value
tcpServices List<Property Map>
tcp services
udpServices List<Property Map>
udp services

NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet
, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs

PrefixLength string
Value string
PrefixLength string
Value string
prefixLength String
value String
prefixLength string
value string
prefixLength String
value String

NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService
, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs

Code int
Icmp service Code. Ignore this field if Code has to be ANY.
IsAllAllowed bool
Set this field to true if both Type and Code is ANY.
Type int
Icmp service Type. Ignore this field if Type has to be ANY.
Code int
Icmp service Code. Ignore this field if Code has to be ANY.
IsAllAllowed bool
Set this field to true if both Type and Code is ANY.
Type int
Icmp service Type. Ignore this field if Type has to be ANY.
code Integer
Icmp service Code. Ignore this field if Code has to be ANY.
isAllAllowed Boolean
Set this field to true if both Type and Code is ANY.
type Integer
Icmp service Type. Ignore this field if Type has to be ANY.
code number
Icmp service Code. Ignore this field if Code has to be ANY.
isAllAllowed boolean
Set this field to true if both Type and Code is ANY.
type number
Icmp service Type. Ignore this field if Type has to be ANY.
code int
Icmp service Code. Ignore this field if Code has to be ANY.
is_all_allowed bool
Set this field to true if both Type and Code is ANY.
type int
Icmp service Type. Ignore this field if Type has to be ANY.
code Number
Icmp service Code. Ignore this field if Code has to be ANY.
isAllAllowed Boolean
Set this field to true if both Type and Code is ANY.
type Number
Icmp service Type. Ignore this field if Type has to be ANY.

NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet
, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs

PrefixLength string
Value string
PrefixLength string
Value string
prefixLength String
value String
prefixLength string
value string
prefixLength String
value String

NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService
, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs

EndPort This property is required. int
end port
StartPort This property is required. int
start port
EndPort This property is required. int
end port
StartPort This property is required. int
start port
endPort This property is required. Integer
end port
startPort This property is required. Integer
start port
endPort This property is required. number
end port
startPort This property is required. number
start port
end_port This property is required. int
end port
start_port This property is required. int
start port
endPort This property is required. Number
end port
startPort This property is required. Number
start port

NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService
, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs

EndPort This property is required. int
end port
StartPort This property is required. int
start port
EndPort This property is required. int
end port
StartPort This property is required. int
start port
endPort This property is required. Integer
end port
startPort This property is required. Integer
start port
endPort This property is required. number
end port
startPort This property is required. number
start port
end_port This property is required. int
end port
start_port This property is required. int
start port
endPort This property is required. Number
end port
startPort This property is required. Number
start port

NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpec
, NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs

SecuredGroupAction string
List of secured group action.
SecuredGroupCategoryReferences List<string>
A specification to whether traffic between intra secured group entities should be allowed or denied.
SecuredGroupAction string
List of secured group action.
SecuredGroupCategoryReferences []string
A specification to whether traffic between intra secured group entities should be allowed or denied.
securedGroupAction String
List of secured group action.
securedGroupCategoryReferences List<String>
A specification to whether traffic between intra secured group entities should be allowed or denied.
securedGroupAction string
List of secured group action.
securedGroupCategoryReferences string[]
A specification to whether traffic between intra secured group entities should be allowed or denied.
secured_group_action str
List of secured group action.
secured_group_category_references Sequence[str]
A specification to whether traffic between intra secured group entities should be allowed or denied.
securedGroupAction String
List of secured group action.
securedGroupCategoryReferences List<String>
A specification to whether traffic between intra secured group entities should be allowed or denied.

NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpec
, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs

Specs This property is required. []NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpec
Multi Environment Isolation Rule Spec.
specs This property is required. List<NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpec>
Multi Environment Isolation Rule Spec.
specs This property is required. NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpec[]
Multi Environment Isolation Rule Spec.
specs This property is required. Sequence[NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpec]
Multi Environment Isolation Rule Spec.
specs This property is required. List<Property Map>
Multi Environment Isolation Rule Spec.

NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpec
, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs

allToAllIsolationGroups List<Property Map>
all to all isolation groups

NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroup
, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs

IsolationGroups This property is required. List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup>
Denotes the list of secured groups that will be used in All to All mutual isolation.
IsolationGroups This property is required. []NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup
Denotes the list of secured groups that will be used in All to All mutual isolation.
isolationGroups This property is required. List<NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup>
Denotes the list of secured groups that will be used in All to All mutual isolation.
isolationGroups This property is required. NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup[]
Denotes the list of secured groups that will be used in All to All mutual isolation.
isolation_groups This property is required. Sequence[NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup]
Denotes the list of secured groups that will be used in All to All mutual isolation.
isolationGroups This property is required. List<Property Map>
Denotes the list of secured groups that will be used in All to All mutual isolation.

NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup
, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs

GroupCategoryReferences This property is required. List<string>
External identifiers of categories belonging to the isolation group.
GroupCategoryReferences This property is required. []string
External identifiers of categories belonging to the isolation group.
groupCategoryReferences This property is required. List<String>
External identifiers of categories belonging to the isolation group.
groupCategoryReferences This property is required. string[]
External identifiers of categories belonging to the isolation group.
group_category_references This property is required. Sequence[str]
External identifiers of categories belonging to the isolation group.
groupCategoryReferences This property is required. List<String>
External identifiers of categories belonging to the isolation group.

NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpec
, NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs

FirstIsolationGroups This property is required. List<string>
Denotes the first group of category uuids that will be used in an isolation policy.
SecondIsolationGroups This property is required. List<string>
Denotes the second group of category uuids that will be used in an isolation policy.
FirstIsolationGroups This property is required. []string
Denotes the first group of category uuids that will be used in an isolation policy.
SecondIsolationGroups This property is required. []string
Denotes the second group of category uuids that will be used in an isolation policy.
firstIsolationGroups This property is required. List<String>
Denotes the first group of category uuids that will be used in an isolation policy.
secondIsolationGroups This property is required. List<String>
Denotes the second group of category uuids that will be used in an isolation policy.
firstIsolationGroups This property is required. string[]
Denotes the first group of category uuids that will be used in an isolation policy.
secondIsolationGroups This property is required. string[]
Denotes the second group of category uuids that will be used in an isolation policy.
first_isolation_groups This property is required. Sequence[str]
Denotes the first group of category uuids that will be used in an isolation policy.
second_isolation_groups This property is required. Sequence[str]
Denotes the second group of category uuids that will be used in an isolation policy.
firstIsolationGroups This property is required. List<String>
Denotes the first group of category uuids that will be used in an isolation policy.
secondIsolationGroups This property is required. List<String>
Denotes the second group of category uuids that will be used in an isolation policy.

Package Details

Repository
nutanix pierskarsenbarg/pulumi-nutanix
License
Apache-2.0
Notes
This Pulumi package is based on the nutanix Terraform Provider.
Nutanix v0.7.4 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-nutanix