Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Nutanix
  3. API Docs
  4. NetworkSecurityPolicyV2
Nutanix v0.7.4 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-nutanix

nutanix.NetworkSecurityPolicyV2

Explore with Pulumi AI

nutanix logo
Nutanix v0.7.4 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-nutanix

    Create a Network Security Policy

    Example

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nutanix.NetworkSecurityPolicyV2;
import com.pulumi.nutanix.NetworkSecurityPolicyV2Args;
import com.pulumi.nutanix.inputs.NetworkSecurityPolicyV2RuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new NetworkSecurityPolicyV2("example", NetworkSecurityPolicyV2Args.builder()
            .description("{{ desc }}")
            .isHitlogEnabled(true)
            .rules(NetworkSecurityPolicyV2RuleArgs.builder()
                .specs(NetworkSecurityPolicyV2RuleSpecArgs.builder()
                    .twoEnvIsolationRuleSpec(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                    .build())
                .type("TWO_ENV_ISOLATION")
                .build())
            .state("SAVE")
            .type("ISOLATION")
            .build());

    }
}

    resources:
  example:
    type: nutanix:NetworkSecurityPolicyV2
    properties:
      description: '{{ desc }}'
      isHitlogEnabled: true
      rules:
        - specs:
            - twoEnvIsolationRuleSpec:
                - firstIsolationGroup:
                    - '{{ uuids}}'
                  secondIsolationGroup:
                    - '{{ uuids }}'
          type: TWO_ENV_ISOLATION
      state: SAVE
      type: ISOLATION

    Create NetworkSecurityPolicyV2 Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new NetworkSecurityPolicyV2(name: string, args: NetworkSecurityPolicyV2Args, opts?: CustomResourceOptions);
    @overload
def NetworkSecurityPolicyV2(resource_name: str,
                            args: NetworkSecurityPolicyV2Args,
                            opts: Optional[ResourceOptions] = None)

@overload
def NetworkSecurityPolicyV2(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            type: Optional[str] = None,
                            description: Optional[str] = None,
                            is_hitlog_enabled: Optional[bool] = None,
                            is_ipv6_traffic_allowed: Optional[bool] = None,
                            name: Optional[str] = None,
                            rules: Optional[Sequence[NetworkSecurityPolicyV2RuleArgs]] = None,
                            scope: Optional[str] = None,
                            state: Optional[str] = None,
                            vpc_references: Optional[Sequence[str]] = None)
    func NewNetworkSecurityPolicyV2(ctx *Context, name string, args NetworkSecurityPolicyV2Args, opts ...ResourceOption) (*NetworkSecurityPolicyV2, error)
    public NetworkSecurityPolicyV2(string name, NetworkSecurityPolicyV2Args args, CustomResourceOptions? opts = null)
    public NetworkSecurityPolicyV2(String name, NetworkSecurityPolicyV2Args args)
public NetworkSecurityPolicyV2(String name, NetworkSecurityPolicyV2Args args, CustomResourceOptions options)

    type: nutanix:NetworkSecurityPolicyV2
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NetworkSecurityPolicyV2Args
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var networkSecurityPolicyV2Resource = new Nutanix.NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource", new()
{
    Type = "string",
    Description = "string",
    IsHitlogEnabled = false,
    IsIpv6TrafficAllowed = false,
    Name = "string",
    Rules = new[]
    {
        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleArgs
        {
            Specs = new[]
            {
                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecArgs
                {
                    ApplicationRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs
                        {
                            SecuredGroupCategoryReferences = new[]
                            {
                                "string",
                            },
                            NetworkFunctionChainReference = "string",
                            ServiceGroupReferences = new[]
                            {
                                "string",
                            },
                            DestSubnets = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs
                                {
                                    PrefixLength = "string",
                                    Value = "string",
                                },
                            },
                            IcmpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs
                                {
                                    Code = 0,
                                    IsAllAllowed = false,
                                    Type = 0,
                                },
                            },
                            IsAllProtocolAllowed = false,
                            DestAddressGroupReferences = new[]
                            {
                                "string",
                            },
                            DestAllowSpec = "string",
                            DestCategoryReferences = new[]
                            {
                                "string",
                            },
                            SrcAddressGroupReferences = new[]
                            {
                                "string",
                            },
                            SrcAllowSpec = "string",
                            SrcCategoryReferences = new[]
                            {
                                "string",
                            },
                            SrcSubnets = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs
                                {
                                    PrefixLength = "string",
                                    Value = "string",
                                },
                            },
                            TcpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs
                                {
                                    EndPort = 0,
                                    StartPort = 0,
                                },
                            },
                            UdpServices = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs
                                {
                                    EndPort = 0,
                                    StartPort = 0,
                                },
                            },
                        },
                    },
                    IntraEntityGroupRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs
                        {
                            SecuredGroupAction = "string",
                            SecuredGroupCategoryReferences = new[]
                            {
                                "string",
                            },
                        },
                    },
                    MultiEnvIsolationRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs
                        {
                            Specs = new[]
                            {
                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs
                                {
                                    AllToAllIsolationGroups = new[]
                                    {
                                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs
                                        {
                                            IsolationGroups = new[]
                                            {
                                                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs
                                                {
                                                    GroupCategoryReferences = new[]
                                                    {
                                                        "string",
                                                    },
                                                },
                                            },
                                        },
                                    },
                                },
                            },
                        },
                    },
                    TwoEnvIsolationRuleSpecs = new[]
                    {
                        new Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs
                        {
                            FirstIsolationGroups = new[]
                            {
                                "string",
                            },
                            SecondIsolationGroups = new[]
                            {
                                "string",
                            },
                        },
                    },
                },
            },
            Type = "string",
            Description = "string",
            ExtId = "string",
            Links = new[]
            {
                new Nutanix.Inputs.NetworkSecurityPolicyV2RuleLinkArgs
                {
                    Href = "string",
                    Rel = "string",
                },
            },
        },
    },
    Scope = "string",
    State = "string",
    VpcReferences = new[]
    {
        "string",
    },
});

    example, err := nutanix.NewNetworkSecurityPolicyV2(ctx, "networkSecurityPolicyV2Resource", &nutanix.NetworkSecurityPolicyV2Args{
	Type:                 pulumi.String("string"),
	Description:          pulumi.String("string"),
	IsHitlogEnabled:      pulumi.Bool(false),
	IsIpv6TrafficAllowed: pulumi.Bool(false),
	Name:                 pulumi.String("string"),
	Rules: nutanix.NetworkSecurityPolicyV2RuleArray{
		&nutanix.NetworkSecurityPolicyV2RuleArgs{
			Specs: nutanix.NetworkSecurityPolicyV2RuleSpecArray{
				&nutanix.NetworkSecurityPolicyV2RuleSpecArgs{
					ApplicationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs{
							SecuredGroupCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							NetworkFunctionChainReference: pulumi.String("string"),
							ServiceGroupReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							DestSubnets: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs{
									PrefixLength: pulumi.String("string"),
									Value:        pulumi.String("string"),
								},
							},
							IcmpServices: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs{
									Code:         pulumi.Int(0),
									IsAllAllowed: pulumi.Bool(false),
									Type:         pulumi.Int(0),
								},
							},
							IsAllProtocolAllowed: pulumi.Bool(false),
							DestAddressGroupReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							DestAllowSpec: pulumi.String("string"),
							DestCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SrcAddressGroupReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SrcAllowSpec: pulumi.String("string"),
							SrcCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
							SrcSubnets: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs{
									PrefixLength: pulumi.String("string"),
									Value:        pulumi.String("string"),
								},
							},
							TcpServices: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs{
									EndPort:   pulumi.Int(0),
									StartPort: pulumi.Int(0),
								},
							},
							UdpServices: nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs{
									EndPort:   pulumi.Int(0),
									StartPort: pulumi.Int(0),
								},
							},
						},
					},
					IntraEntityGroupRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs{
							SecuredGroupAction: pulumi.String("string"),
							SecuredGroupCategoryReferences: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
					MultiEnvIsolationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs{
							Specs: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArray{
								&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs{
									AllToAllIsolationGroups: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArray{
										&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs{
											IsolationGroups: nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArray{
												&nutanix.NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs{
													GroupCategoryReferences: pulumi.StringArray{
														pulumi.String("string"),
													},
												},
											},
										},
									},
								},
							},
						},
					},
					TwoEnvIsolationRuleSpecs: nutanix.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArray{
						&nutanix.NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs{
							FirstIsolationGroups: pulumi.StringArray{
								pulumi.String("string"),
							},
							SecondIsolationGroups: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
				},
			},
			Type:        pulumi.String("string"),
			Description: pulumi.String("string"),
			ExtId:       pulumi.String("string"),
			Links: nutanix.NetworkSecurityPolicyV2RuleLinkArray{
				&nutanix.NetworkSecurityPolicyV2RuleLinkArgs{
					Href: pulumi.String("string"),
					Rel:  pulumi.String("string"),
				},
			},
		},
	},
	Scope: pulumi.String("string"),
	State: pulumi.String("string"),
	VpcReferences: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var networkSecurityPolicyV2Resource = new NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource", NetworkSecurityPolicyV2Args.builder()
    .type("string")
    .description("string")
    .isHitlogEnabled(false)
    .isIpv6TrafficAllowed(false)
    .name("string")
    .rules(NetworkSecurityPolicyV2RuleArgs.builder()
        .specs(NetworkSecurityPolicyV2RuleSpecArgs.builder()
            .applicationRuleSpecs(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs.builder()
                .securedGroupCategoryReferences("string")
                .networkFunctionChainReference("string")
                .serviceGroupReferences("string")
                .destSubnets(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs.builder()
                    .prefixLength("string")
                    .value("string")
                    .build())
                .icmpServices(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs.builder()
                    .code(0)
                    .isAllAllowed(false)
                    .type(0)
                    .build())
                .isAllProtocolAllowed(false)
                .destAddressGroupReferences("string")
                .destAllowSpec("string")
                .destCategoryReferences("string")
                .srcAddressGroupReferences("string")
                .srcAllowSpec("string")
                .srcCategoryReferences("string")
                .srcSubnets(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs.builder()
                    .prefixLength("string")
                    .value("string")
                    .build())
                .tcpServices(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs.builder()
                    .endPort(0)
                    .startPort(0)
                    .build())
                .udpServices(NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs.builder()
                    .endPort(0)
                    .startPort(0)
                    .build())
                .build())
            .intraEntityGroupRuleSpecs(NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs.builder()
                .securedGroupAction("string")
                .securedGroupCategoryReferences("string")
                .build())
            .multiEnvIsolationRuleSpecs(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs.builder()
                .specs(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs.builder()
                    .allToAllIsolationGroups(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs.builder()
                        .isolationGroups(NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs.builder()
                            .groupCategoryReferences("string")
                            .build())
                        .build())
                    .build())
                .build())
            .twoEnvIsolationRuleSpecs(NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs.builder()
                .firstIsolationGroups("string")
                .secondIsolationGroups("string")
                .build())
            .build())
        .type("string")
        .description("string")
        .extId("string")
        .links(NetworkSecurityPolicyV2RuleLinkArgs.builder()
            .href("string")
            .rel("string")
            .build())
        .build())
    .scope("string")
    .state("string")
    .vpcReferences("string")
    .build());

    network_security_policy_v2_resource = nutanix.NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource",
    type="string",
    description="string",
    is_hitlog_enabled=False,
    is_ipv6_traffic_allowed=False,
    name="string",
    rules=[{
        "specs": [{
            "application_rule_specs": [{
                "secured_group_category_references": ["string"],
                "network_function_chain_reference": "string",
                "service_group_references": ["string"],
                "dest_subnets": [{
                    "prefix_length": "string",
                    "value": "string",
                }],
                "icmp_services": [{
                    "code": 0,
                    "is_all_allowed": False,
                    "type": 0,
                }],
                "is_all_protocol_allowed": False,
                "dest_address_group_references": ["string"],
                "dest_allow_spec": "string",
                "dest_category_references": ["string"],
                "src_address_group_references": ["string"],
                "src_allow_spec": "string",
                "src_category_references": ["string"],
                "src_subnets": [{
                    "prefix_length": "string",
                    "value": "string",
                }],
                "tcp_services": [{
                    "end_port": 0,
                    "start_port": 0,
                }],
                "udp_services": [{
                    "end_port": 0,
                    "start_port": 0,
                }],
            }],
            "intra_entity_group_rule_specs": [{
                "secured_group_action": "string",
                "secured_group_category_references": ["string"],
            }],
            "multi_env_isolation_rule_specs": [{
                "specs": [{
                    "all_to_all_isolation_groups": [{
                        "isolation_groups": [{
                            "group_category_references": ["string"],
                        }],
                    }],
                }],
            }],
            "two_env_isolation_rule_specs": [{
                "first_isolation_groups": ["string"],
                "second_isolation_groups": ["string"],
            }],
        }],
        "type": "string",
        "description": "string",
        "ext_id": "string",
        "links": [{
            "href": "string",
            "rel": "string",
        }],
    }],
    scope="string",
    state="string",
    vpc_references=["string"])

    const networkSecurityPolicyV2Resource = new nutanix.NetworkSecurityPolicyV2("networkSecurityPolicyV2Resource", {
    type: "string",
    description: "string",
    isHitlogEnabled: false,
    isIpv6TrafficAllowed: false,
    name: "string",
    rules: [{
        specs: [{
            applicationRuleSpecs: [{
                securedGroupCategoryReferences: ["string"],
                networkFunctionChainReference: "string",
                serviceGroupReferences: ["string"],
                destSubnets: [{
                    prefixLength: "string",
                    value: "string",
                }],
                icmpServices: [{
                    code: 0,
                    isAllAllowed: false,
                    type: 0,
                }],
                isAllProtocolAllowed: false,
                destAddressGroupReferences: ["string"],
                destAllowSpec: "string",
                destCategoryReferences: ["string"],
                srcAddressGroupReferences: ["string"],
                srcAllowSpec: "string",
                srcCategoryReferences: ["string"],
                srcSubnets: [{
                    prefixLength: "string",
                    value: "string",
                }],
                tcpServices: [{
                    endPort: 0,
                    startPort: 0,
                }],
                udpServices: [{
                    endPort: 0,
                    startPort: 0,
                }],
            }],
            intraEntityGroupRuleSpecs: [{
                securedGroupAction: "string",
                securedGroupCategoryReferences: ["string"],
            }],
            multiEnvIsolationRuleSpecs: [{
                specs: [{
                    allToAllIsolationGroups: [{
                        isolationGroups: [{
                            groupCategoryReferences: ["string"],
                        }],
                    }],
                }],
            }],
            twoEnvIsolationRuleSpecs: [{
                firstIsolationGroups: ["string"],
                secondIsolationGroups: ["string"],
            }],
        }],
        type: "string",
        description: "string",
        extId: "string",
        links: [{
            href: "string",
            rel: "string",
        }],
    }],
    scope: "string",
    state: "string",
    vpcReferences: ["string"],
});

    type: nutanix:NetworkSecurityPolicyV2
properties:
    description: string
    isHitlogEnabled: false
    isIpv6TrafficAllowed: false
    name: string
    rules:
        - description: string
          extId: string
          links:
            - href: string
              rel: string
          specs:
            - applicationRuleSpecs:
                - destAddressGroupReferences:
                    - string
                  destAllowSpec: string
                  destCategoryReferences:
                    - string
                  destSubnets:
                    - prefixLength: string
                      value: string
                  icmpServices:
                    - code: 0
                      isAllAllowed: false
                      type: 0
                  isAllProtocolAllowed: false
                  networkFunctionChainReference: string
                  securedGroupCategoryReferences:
                    - string
                  serviceGroupReferences:
                    - string
                  srcAddressGroupReferences:
                    - string
                  srcAllowSpec: string
                  srcCategoryReferences:
                    - string
                  srcSubnets:
                    - prefixLength: string
                      value: string
                  tcpServices:
                    - endPort: 0
                      startPort: 0
                  udpServices:
                    - endPort: 0
                      startPort: 0
              intraEntityGroupRuleSpecs:
                - securedGroupAction: string
                  securedGroupCategoryReferences:
                    - string
              multiEnvIsolationRuleSpecs:
                - specs:
                    - allToAllIsolationGroups:
                        - isolationGroups:
                            - groupCategoryReferences:
                                - string
              twoEnvIsolationRuleSpecs:
                - firstIsolationGroups:
                    - string
                  secondIsolationGroups:
                    - string
          type: string
    scope: string
    state: string
    type: string
    vpcReferences:
        - string

    NetworkSecurityPolicyV2 Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The NetworkSecurityPolicyV2 resource accepts the following input properties:

    Type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    Description string
    A user defined annotation for a policy.
    IsHitlogEnabled bool
    If Hitlog is enabled.
    IsIpv6TrafficAllowed bool
    If Ipv6 Traffic is allowed.
    Name string
    Name of the Flow Network Security Policy.
    Rules List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2Rule>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    Scope string
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    State string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    VpcReferences List<string>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    Type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    Description string
    A user defined annotation for a policy.
    IsHitlogEnabled bool
    If Hitlog is enabled.
    IsIpv6TrafficAllowed bool
    If Ipv6 Traffic is allowed.
    Name string
    Name of the Flow Network Security Policy.
    Rules []NetworkSecurityPolicyV2RuleArgs
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    Scope string
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    State string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    VpcReferences []string
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    type String
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    description String
    A user defined annotation for a policy.
    isHitlogEnabled Boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed Boolean
    If Ipv6 Traffic is allowed.
    name String
    Name of the Flow Network Security Policy.
    rules List<NetworkSecurityPolicyV2Rule>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope String
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    state String
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    vpcReferences List<String>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    description string
    A user defined annotation for a policy.
    isHitlogEnabled boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed boolean
    If Ipv6 Traffic is allowed.
    name string
    Name of the Flow Network Security Policy.
    rules NetworkSecurityPolicyV2Rule[]
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope string
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    state string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    vpcReferences string[]
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    type str
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    description str
    A user defined annotation for a policy.
    is_hitlog_enabled bool
    If Hitlog is enabled.
    is_ipv6_traffic_allowed bool
    If Ipv6 Traffic is allowed.
    name str
    Name of the Flow Network Security Policy.
    rules Sequence[NetworkSecurityPolicyV2RuleArgs]
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope str
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    state str
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    vpc_references Sequence[str]
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    type String
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    description String
    A user defined annotation for a policy.
    isHitlogEnabled Boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed Boolean
    If Ipv6 Traffic is allowed.
    name String
    Name of the Flow Network Security Policy.
    rules List<Property Map>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope String
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    state String
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    vpcReferences List<String>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the NetworkSecurityPolicyV2 resource produces the following output properties:

    CreatedBy string
    created by.
    CreationTime string
    creation time of NSP
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    Id string
    The provider-assigned unique ID for this managed resource.
    IsSystemDefined bool
    Is system defined NSP
    LastUpdateTime string
    last updated time
    Links List<PiersKarsenbarg.Nutanix.Outputs.NetworkSecurityPolicyV2Link>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    SecuredGroups List<string>
    Uuids of the secured groups in the NSP.
    TenantId string
    A globally unique identifier that represents the tenant that owns this entity
    CreatedBy string
    created by.
    CreationTime string
    creation time of NSP
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    Id string
    The provider-assigned unique ID for this managed resource.
    IsSystemDefined bool
    Is system defined NSP
    LastUpdateTime string
    last updated time
    Links []NetworkSecurityPolicyV2Link
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    SecuredGroups []string
    Uuids of the secured groups in the NSP.
    TenantId string
    A globally unique identifier that represents the tenant that owns this entity
    createdBy String
    created by.
    creationTime String
    creation time of NSP
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    id String
    The provider-assigned unique ID for this managed resource.
    isSystemDefined Boolean
    Is system defined NSP
    lastUpdateTime String
    last updated time
    links List<NetworkSecurityPolicyV2Link>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    securedGroups List<String>
    Uuids of the secured groups in the NSP.
    tenantId String
    A globally unique identifier that represents the tenant that owns this entity
    createdBy string
    created by.
    creationTime string
    creation time of NSP
    extId string
    A globally unique identifier of an instance that is suitable for external consumption.
    id string
    The provider-assigned unique ID for this managed resource.
    isSystemDefined boolean
    Is system defined NSP
    lastUpdateTime string
    last updated time
    links NetworkSecurityPolicyV2Link[]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    securedGroups string[]
    Uuids of the secured groups in the NSP.
    tenantId string
    A globally unique identifier that represents the tenant that owns this entity
    created_by str
    created by.
    creation_time str
    creation time of NSP
    ext_id str
    A globally unique identifier of an instance that is suitable for external consumption.
    id str
    The provider-assigned unique ID for this managed resource.
    is_system_defined bool
    Is system defined NSP
    last_update_time str
    last updated time
    links Sequence[NetworkSecurityPolicyV2Link]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    secured_groups Sequence[str]
    Uuids of the secured groups in the NSP.
    tenant_id str
    A globally unique identifier that represents the tenant that owns this entity
    createdBy String
    created by.
    creationTime String
    creation time of NSP
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    id String
    The provider-assigned unique ID for this managed resource.
    isSystemDefined Boolean
    Is system defined NSP
    lastUpdateTime String
    last updated time
    links List<Property Map>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    securedGroups List<String>
    Uuids of the secured groups in the NSP.
    tenantId String
    A globally unique identifier that represents the tenant that owns this entity

    Look up Existing NetworkSecurityPolicyV2 Resource

    Get an existing NetworkSecurityPolicyV2 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NetworkSecurityPolicyV2State, opts?: CustomResourceOptions): NetworkSecurityPolicyV2
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        created_by: Optional[str] = None,
        creation_time: Optional[str] = None,
        description: Optional[str] = None,
        ext_id: Optional[str] = None,
        is_hitlog_enabled: Optional[bool] = None,
        is_ipv6_traffic_allowed: Optional[bool] = None,
        is_system_defined: Optional[bool] = None,
        last_update_time: Optional[str] = None,
        links: Optional[Sequence[NetworkSecurityPolicyV2LinkArgs]] = None,
        name: Optional[str] = None,
        rules: Optional[Sequence[NetworkSecurityPolicyV2RuleArgs]] = None,
        scope: Optional[str] = None,
        secured_groups: Optional[Sequence[str]] = None,
        state: Optional[str] = None,
        tenant_id: Optional[str] = None,
        type: Optional[str] = None,
        vpc_references: Optional[Sequence[str]] = None) -> NetworkSecurityPolicyV2
    func GetNetworkSecurityPolicyV2(ctx *Context, name string, id IDInput, state *NetworkSecurityPolicyV2State, opts ...ResourceOption) (*NetworkSecurityPolicyV2, error)
    public static NetworkSecurityPolicyV2 Get(string name, Input<string> id, NetworkSecurityPolicyV2State? state, CustomResourceOptions? opts = null)
    public static NetworkSecurityPolicyV2 get(String name, Output<String> id, NetworkSecurityPolicyV2State state, CustomResourceOptions options)
    resources:  _:    type: nutanix:NetworkSecurityPolicyV2    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CreatedBy string
    created by.
    CreationTime string
    creation time of NSP
    Description string
    A user defined annotation for a policy.
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    IsHitlogEnabled bool
    If Hitlog is enabled.
    IsIpv6TrafficAllowed bool
    If Ipv6 Traffic is allowed.
    IsSystemDefined bool
    Is system defined NSP
    LastUpdateTime string
    last updated time
    Links List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2Link>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    Name string
    Name of the Flow Network Security Policy.
    Rules List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2Rule>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    Scope string
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    SecuredGroups List<string>
    Uuids of the secured groups in the NSP.
    State string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    TenantId string
    A globally unique identifier that represents the tenant that owns this entity
    Type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    VpcReferences List<string>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    CreatedBy string
    created by.
    CreationTime string
    creation time of NSP
    Description string
    A user defined annotation for a policy.
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    IsHitlogEnabled bool
    If Hitlog is enabled.
    IsIpv6TrafficAllowed bool
    If Ipv6 Traffic is allowed.
    IsSystemDefined bool
    Is system defined NSP
    LastUpdateTime string
    last updated time
    Links []NetworkSecurityPolicyV2LinkArgs
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    Name string
    Name of the Flow Network Security Policy.
    Rules []NetworkSecurityPolicyV2RuleArgs
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    Scope string
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    SecuredGroups []string
    Uuids of the secured groups in the NSP.
    State string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    TenantId string
    A globally unique identifier that represents the tenant that owns this entity
    Type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    VpcReferences []string
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    createdBy String
    created by.
    creationTime String
    creation time of NSP
    description String
    A user defined annotation for a policy.
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    isHitlogEnabled Boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed Boolean
    If Ipv6 Traffic is allowed.
    isSystemDefined Boolean
    Is system defined NSP
    lastUpdateTime String
    last updated time
    links List<NetworkSecurityPolicyV2Link>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    name String
    Name of the Flow Network Security Policy.
    rules List<NetworkSecurityPolicyV2Rule>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope String
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    securedGroups List<String>
    Uuids of the secured groups in the NSP.
    state String
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    tenantId String
    A globally unique identifier that represents the tenant that owns this entity
    type String
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    vpcReferences List<String>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    createdBy string
    created by.
    creationTime string
    creation time of NSP
    description string
    A user defined annotation for a policy.
    extId string
    A globally unique identifier of an instance that is suitable for external consumption.
    isHitlogEnabled boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed boolean
    If Ipv6 Traffic is allowed.
    isSystemDefined boolean
    Is system defined NSP
    lastUpdateTime string
    last updated time
    links NetworkSecurityPolicyV2Link[]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    name string
    Name of the Flow Network Security Policy.
    rules NetworkSecurityPolicyV2Rule[]
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope string
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    securedGroups string[]
    Uuids of the secured groups in the NSP.
    state string
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    tenantId string
    A globally unique identifier that represents the tenant that owns this entity
    type string
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    vpcReferences string[]
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    created_by str
    created by.
    creation_time str
    creation time of NSP
    description str
    A user defined annotation for a policy.
    ext_id str
    A globally unique identifier of an instance that is suitable for external consumption.
    is_hitlog_enabled bool
    If Hitlog is enabled.
    is_ipv6_traffic_allowed bool
    If Ipv6 Traffic is allowed.
    is_system_defined bool
    Is system defined NSP
    last_update_time str
    last updated time
    links Sequence[NetworkSecurityPolicyV2LinkArgs]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    name str
    Name of the Flow Network Security Policy.
    rules Sequence[NetworkSecurityPolicyV2RuleArgs]
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope str
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    secured_groups Sequence[str]
    Uuids of the secured groups in the NSP.
    state str
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    tenant_id str
    A globally unique identifier that represents the tenant that owns this entity
    type str
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    vpc_references Sequence[str]
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.
    createdBy String
    created by.
    creationTime String
    creation time of NSP
    description String
    A user defined annotation for a policy.
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    isHitlogEnabled Boolean
    If Hitlog is enabled.
    isIpv6TrafficAllowed Boolean
    If Ipv6 Traffic is allowed.
    isSystemDefined Boolean
    Is system defined NSP
    lastUpdateTime String
    last updated time
    links List<Property Map>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    name String
    Name of the Flow Network Security Policy.
    rules List<Property Map>
    A list of rules that form a policy. For isolation policies, use isolation rules; for application or quarantine policies, use application rules.
    scope String
    Defines the scope of the policy. Currently, only ALL_VLAN and VPC_LIST are supported. If scope is not provided, the default is set based on whether vpcReferences field is provided or not.
    securedGroups List<String>
    Uuids of the secured groups in the NSP.
    state String
    Whether the policy is applied or monitored; can be omitted or set null to save the policy without applying or monitoring it. Acceptable values are "SAVE", "MONITOR", "ENFORCE".
    tenantId String
    A globally unique identifier that represents the tenant that owns this entity
    type String
    Defines the type of rules that can be used in a policy. Acceptable values are "QUARANTINE", "ISOLATION", "APPLICATION".
    vpcReferences List<String>
    A list of external ids for VPCs, used only when the scope of policy is a list of VPCs.

    Supporting Types

    Href string
    Rel string
    Href string
    Rel string
    href String
    rel String
    href string
    rel string
    href str
    rel str
    href String
    rel String

    NetworkSecurityPolicyV2Rule, NetworkSecurityPolicyV2RuleArgs

    Specs List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpec>
    Spec for rules.
    Type string
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
    Description string
    A user defined annotation for a rule.
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    Links List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleLink>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    Specs []NetworkSecurityPolicyV2RuleSpec
    Spec for rules.
    Type string
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
    Description string
    A user defined annotation for a rule.
    ExtId string
    A globally unique identifier of an instance that is suitable for external consumption.
    Links []NetworkSecurityPolicyV2RuleLink
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    specs List<NetworkSecurityPolicyV2RuleSpec>
    Spec for rules.
    type String
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
    description String
    A user defined annotation for a rule.
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    links List<NetworkSecurityPolicyV2RuleLink>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    specs NetworkSecurityPolicyV2RuleSpec[]
    Spec for rules.
    type string
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
    description string
    A user defined annotation for a rule.
    extId string
    A globally unique identifier of an instance that is suitable for external consumption.
    links NetworkSecurityPolicyV2RuleLink[]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    specs Sequence[NetworkSecurityPolicyV2RuleSpec]
    Spec for rules.
    type str
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
    description str
    A user defined annotation for a rule.
    ext_id str
    A globally unique identifier of an instance that is suitable for external consumption.
    links Sequence[NetworkSecurityPolicyV2RuleLink]
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    specs List<Property Map>
    Spec for rules.
    type String
    The type for a rule—the value chosen here restricts which specification can be chosen. Acceptable values are "QUARANTINE", "TWO_ENV_ISOLATION", "APPLICATION", "INTRA_GROUP".
    description String
    A user defined annotation for a rule.
    extId String
    A globally unique identifier of an instance that is suitable for external consumption.
    links List<Property Map>
    A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
    Href string
    Rel string
    Href string
    Rel string
    href String
    rel String
    href string
    rel string
    href str
    rel str
    href String
    rel String

    NetworkSecurityPolicyV2RuleSpec, NetworkSecurityPolicyV2RuleSpecArgs

    applicationRuleSpecs List<Property Map>
    Application Rule Spec.
    intraEntityGroupRuleSpecs List<Property Map>
    Intra entity group Rule Spec
    multiEnvIsolationRuleSpecs List<Property Map>
    Multi Environment Isolation Rule Spec.
    twoEnvIsolationRuleSpecs List<Property Map>
    Two Environment Isolation Rule Spec.

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpec, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecArgs

    SecuredGroupCategoryReferences List<string>
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    DestAddressGroupReferences List<string>
    A list of address group references.
    DestAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    DestCategoryReferences List<string>
    List of categories that define a set of network endpoints as outbound.
    DestSubnets List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet>
    destination subnet value
    IcmpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService>
    icmp services
    IsAllProtocolAllowed bool
    Denotes if rule allows traffic for all protocol.
    NetworkFunctionChainReference string
    A reference to the network function chain in the rule.
    ServiceGroupReferences List<string>
    A list of service group references.
    SrcAddressGroupReferences List<string>
    A list of address group references.
    SrcAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    SrcCategoryReferences List<string>
    List of categories that define a set of network endpoints as inbound.
    SrcSubnets List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet>
    source subnet value
    TcpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService>
    tcp services
    UdpServices List<PiersKarsenbarg.Nutanix.Inputs.NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService>
    udp services
    SecuredGroupCategoryReferences []string
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    DestAddressGroupReferences []string
    A list of address group references.
    DestAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    DestCategoryReferences []string
    List of categories that define a set of network endpoints as outbound.
    DestSubnets []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet
    destination subnet value
    IcmpServices []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService
    icmp services
    IsAllProtocolAllowed bool
    Denotes if rule allows traffic for all protocol.
    NetworkFunctionChainReference string
    A reference to the network function chain in the rule.
    ServiceGroupReferences []string
    A list of service group references.
    SrcAddressGroupReferences []string
    A list of address group references.
    SrcAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    SrcCategoryReferences []string
    List of categories that define a set of network endpoints as inbound.
    SrcSubnets []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet
    source subnet value
    TcpServices []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService
    tcp services
    UdpServices []NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService
    udp services
    securedGroupCategoryReferences List<String>
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    destAddressGroupReferences List<String>
    A list of address group references.
    destAllowSpec String
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    destCategoryReferences List<String>
    List of categories that define a set of network endpoints as outbound.
    destSubnets List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet>
    destination subnet value
    icmpServices List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService>
    icmp services
    isAllProtocolAllowed Boolean
    Denotes if rule allows traffic for all protocol.
    networkFunctionChainReference String
    A reference to the network function chain in the rule.
    serviceGroupReferences List<String>
    A list of service group references.
    srcAddressGroupReferences List<String>
    A list of address group references.
    srcAllowSpec String
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    srcCategoryReferences List<String>
    List of categories that define a set of network endpoints as inbound.
    srcSubnets List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet>
    source subnet value
    tcpServices List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService>
    tcp services
    udpServices List<NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService>
    udp services
    securedGroupCategoryReferences string[]
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    destAddressGroupReferences string[]
    A list of address group references.
    destAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    destCategoryReferences string[]
    List of categories that define a set of network endpoints as outbound.
    destSubnets NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet[]
    destination subnet value
    icmpServices NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService[]
    icmp services
    isAllProtocolAllowed boolean
    Denotes if rule allows traffic for all protocol.
    networkFunctionChainReference string
    A reference to the network function chain in the rule.
    serviceGroupReferences string[]
    A list of service group references.
    srcAddressGroupReferences string[]
    A list of address group references.
    srcAllowSpec string
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    srcCategoryReferences string[]
    List of categories that define a set of network endpoints as inbound.
    srcSubnets NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet[]
    source subnet value
    tcpServices NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService[]
    tcp services
    udpServices NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService[]
    udp services
    secured_group_category_references Sequence[str]
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    dest_address_group_references Sequence[str]
    A list of address group references.
    dest_allow_spec str
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    dest_category_references Sequence[str]
    List of categories that define a set of network endpoints as outbound.
    dest_subnets Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet]
    destination subnet value
    icmp_services Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService]
    icmp services
    is_all_protocol_allowed bool
    Denotes if rule allows traffic for all protocol.
    network_function_chain_reference str
    A reference to the network function chain in the rule.
    service_group_references Sequence[str]
    A list of service group references.
    src_address_group_references Sequence[str]
    A list of address group references.
    src_allow_spec str
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    src_category_references Sequence[str]
    List of categories that define a set of network endpoints as inbound.
    src_subnets Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet]
    source subnet value
    tcp_services Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService]
    tcp services
    udp_services Sequence[NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService]
    udp services
    securedGroupCategoryReferences List<String>
    A set of network endpoints which is protected by a Network Security Policy and defined as a list of categories.
    destAddressGroupReferences List<String>
    A list of address group references.
    destAllowSpec String
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    destCategoryReferences List<String>
    List of categories that define a set of network endpoints as outbound.
    destSubnets List<Property Map>
    destination subnet value
    icmpServices List<Property Map>
    icmp services
    isAllProtocolAllowed Boolean
    Denotes if rule allows traffic for all protocol.
    networkFunctionChainReference String
    A reference to the network function chain in the rule.
    serviceGroupReferences List<String>
    A list of service group references.
    srcAddressGroupReferences List<String>
    A list of address group references.
    srcAllowSpec String
    A specification to how allow mode traffic should be applied, either ALL or NONE.
    srcCategoryReferences List<String>
    List of categories that define a set of network endpoints as inbound.
    srcSubnets List<Property Map>
    source subnet value
    tcpServices List<Property Map>
    tcp services
    udpServices List<Property Map>
    udp services

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnet, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecDestSubnetArgs

    PrefixLength string
    Value string
    PrefixLength string
    Value string
    prefixLength String
    value String
    prefixLength string
    value string
    prefixLength String
    value String

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpService, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecIcmpServiceArgs

    Code int
    Icmp service Code. Ignore this field if Code has to be ANY.
    IsAllAllowed bool
    Set this field to true if both Type and Code is ANY.
    Type int
    Icmp service Type. Ignore this field if Type has to be ANY.
    Code int
    Icmp service Code. Ignore this field if Code has to be ANY.
    IsAllAllowed bool
    Set this field to true if both Type and Code is ANY.
    Type int
    Icmp service Type. Ignore this field if Type has to be ANY.
    code Integer
    Icmp service Code. Ignore this field if Code has to be ANY.
    isAllAllowed Boolean
    Set this field to true if both Type and Code is ANY.
    type Integer
    Icmp service Type. Ignore this field if Type has to be ANY.
    code number
    Icmp service Code. Ignore this field if Code has to be ANY.
    isAllAllowed boolean
    Set this field to true if both Type and Code is ANY.
    type number
    Icmp service Type. Ignore this field if Type has to be ANY.
    code int
    Icmp service Code. Ignore this field if Code has to be ANY.
    is_all_allowed bool
    Set this field to true if both Type and Code is ANY.
    type int
    Icmp service Type. Ignore this field if Type has to be ANY.
    code Number
    Icmp service Code. Ignore this field if Code has to be ANY.
    isAllAllowed Boolean
    Set this field to true if both Type and Code is ANY.
    type Number
    Icmp service Type. Ignore this field if Type has to be ANY.

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnet, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecSrcSubnetArgs

    PrefixLength string
    Value string
    PrefixLength string
    Value string
    prefixLength String
    value String
    prefixLength string
    value string
    prefixLength String
    value String

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpService, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecTcpServiceArgs

    EndPort int
    end port
    StartPort int
    start port
    EndPort int
    end port
    StartPort int
    start port
    endPort Integer
    end port
    startPort Integer
    start port
    endPort number
    end port
    startPort number
    start port
    end_port int
    end port
    start_port int
    start port
    endPort Number
    end port
    startPort Number
    start port

    NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpService, NetworkSecurityPolicyV2RuleSpecApplicationRuleSpecUdpServiceArgs

    EndPort int
    end port
    StartPort int
    start port
    EndPort int
    end port
    StartPort int
    start port
    endPort Integer
    end port
    startPort Integer
    start port
    endPort number
    end port
    startPort number
    start port
    end_port int
    end port
    start_port int
    start port
    endPort Number
    end port
    startPort Number
    start port

    NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpec, NetworkSecurityPolicyV2RuleSpecIntraEntityGroupRuleSpecArgs

    SecuredGroupAction string
    List of secured group action.
    SecuredGroupCategoryReferences List<string>
    A specification to whether traffic between intra secured group entities should be allowed or denied.
    SecuredGroupAction string
    List of secured group action.
    SecuredGroupCategoryReferences []string
    A specification to whether traffic between intra secured group entities should be allowed or denied.
    securedGroupAction String
    List of secured group action.
    securedGroupCategoryReferences List<String>
    A specification to whether traffic between intra secured group entities should be allowed or denied.
    securedGroupAction string
    List of secured group action.
    securedGroupCategoryReferences string[]
    A specification to whether traffic between intra secured group entities should be allowed or denied.
    secured_group_action str
    List of secured group action.
    secured_group_category_references Sequence[str]
    A specification to whether traffic between intra secured group entities should be allowed or denied.
    securedGroupAction String
    List of secured group action.
    securedGroupCategoryReferences List<String>
    A specification to whether traffic between intra secured group entities should be allowed or denied.

    NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpec, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecArgs

    specs List<Property Map>
    Multi Environment Isolation Rule Spec.

    NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpec, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecArgs

    allToAllIsolationGroups List<Property Map>
    all to all isolation groups

    NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroup, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupArgs

    IsolationGroups []NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup
    Denotes the list of secured groups that will be used in All to All mutual isolation.
    isolationGroups List<NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup>
    Denotes the list of secured groups that will be used in All to All mutual isolation.
    isolationGroups NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup[]
    Denotes the list of secured groups that will be used in All to All mutual isolation.
    isolation_groups Sequence[NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup]
    Denotes the list of secured groups that will be used in All to All mutual isolation.
    isolationGroups List<Property Map>
    Denotes the list of secured groups that will be used in All to All mutual isolation.

    NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroup, NetworkSecurityPolicyV2RuleSpecMultiEnvIsolationRuleSpecSpecAllToAllIsolationGroupIsolationGroupArgs

    GroupCategoryReferences List<string>
    External identifiers of categories belonging to the isolation group.
    GroupCategoryReferences []string
    External identifiers of categories belonging to the isolation group.
    groupCategoryReferences List<String>
    External identifiers of categories belonging to the isolation group.
    groupCategoryReferences string[]
    External identifiers of categories belonging to the isolation group.
    group_category_references Sequence[str]
    External identifiers of categories belonging to the isolation group.
    groupCategoryReferences List<String>
    External identifiers of categories belonging to the isolation group.

    NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpec, NetworkSecurityPolicyV2RuleSpecTwoEnvIsolationRuleSpecArgs

    FirstIsolationGroups List<string>
    Denotes the first group of category uuids that will be used in an isolation policy.
    SecondIsolationGroups List<string>
    Denotes the second group of category uuids that will be used in an isolation policy.
    FirstIsolationGroups []string
    Denotes the first group of category uuids that will be used in an isolation policy.
    SecondIsolationGroups []string
    Denotes the second group of category uuids that will be used in an isolation policy.
    firstIsolationGroups List<String>
    Denotes the first group of category uuids that will be used in an isolation policy.
    secondIsolationGroups List<String>
    Denotes the second group of category uuids that will be used in an isolation policy.
    firstIsolationGroups string[]
    Denotes the first group of category uuids that will be used in an isolation policy.
    secondIsolationGroups string[]
    Denotes the second group of category uuids that will be used in an isolation policy.
    first_isolation_groups Sequence[str]
    Denotes the first group of category uuids that will be used in an isolation policy.
    second_isolation_groups Sequence[str]
    Denotes the second group of category uuids that will be used in an isolation policy.
    firstIsolationGroups List<String>
    Denotes the first group of category uuids that will be used in an isolation policy.
    secondIsolationGroups List<String>
    Denotes the second group of category uuids that will be used in an isolation policy.

    Package Details

    Repository
    nutanix pierskarsenbarg/pulumi-nutanix
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the nutanix Terraform Provider.
    nutanix logo
    Nutanix v0.7.4 published on Friday, Mar 21, 2025 by Piers Karsenbarg
    pierskarsenbarg/pulumi-nutanix