Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. cloudngfw
  5. LocalRule
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.cloudngfw.LocalRule

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

    LocalRulestack rule list Azure REST API version: 2023-09-01.

    Other available API versions: 2022-08-29, 2022-08-29-preview, 2023-09-01-preview, 2023-10-10-preview, 2024-01-19-preview, 2024-02-07-preview, 2025-02-06-preview.

    Example Usage

    LocalRules_CreateOrUpdate_MaximumSet_Gen

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var localRule = new AzureNative.Cloudngfw.LocalRule("localRule", new()
    {
        ActionType = AzureNative.Cloudngfw.ActionEnum.Allow,
        Applications = new[]
        {
            "app1",
        },
        AuditComment = "example comment",
        Category = new AzureNative.Cloudngfw.Inputs.CategoryArgs
        {
            Feeds = new[]
            {
                "feed",
            },
            UrlCustom = new[]
            {
                "https://microsoft.com",
            },
        },
        DecryptionRuleType = AzureNative.Cloudngfw.DecryptionRuleTypeEnum.SSLOutboundInspection,
        Description = "description of local rule",
        Destination = new AzureNative.Cloudngfw.Inputs.DestinationAddrArgs
        {
            Cidrs = new[]
            {
                "1.0.0.1/10",
            },
            Countries = new[]
            {
                "India",
            },
            Feeds = new[]
            {
                "feed",
            },
            FqdnLists = new[]
            {
                "FQDN1",
            },
            PrefixLists = new[]
            {
                "PL1",
            },
        },
        EnableLogging = AzureNative.Cloudngfw.StateEnum.DISABLED,
        InboundInspectionCertificate = "cert1",
        LocalRulestackName = "lrs1",
        NegateDestination = AzureNative.Cloudngfw.BooleanEnum.TRUE,
        NegateSource = AzureNative.Cloudngfw.BooleanEnum.TRUE,
        Priority = "1",
        Protocol = "HTTP",
        ProtocolPortList = new[]
        {
            "80",
        },
        ResourceGroupName = "firewall-rg",
        RuleName = "localRule1",
        RuleState = AzureNative.Cloudngfw.StateEnum.DISABLED,
        Source = new AzureNative.Cloudngfw.Inputs.SourceAddrArgs
        {
            Cidrs = new[]
            {
                "1.0.0.1/10",
            },
            Countries = new[]
            {
                "India",
            },
            Feeds = new[]
            {
                "feed",
            },
            PrefixLists = new[]
            {
                "PL1",
            },
        },
        Tags = new[]
        {
            new AzureNative.Cloudngfw.Inputs.TagInfoArgs
            {
                Key = "keyName",
                Value = "value",
            },
        },
    });

});

    package main

import (
	cloudngfw "github.com/pulumi/pulumi-azure-native-sdk/cloudngfw/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudngfw.NewLocalRule(ctx, "localRule", &cloudngfw.LocalRuleArgs{
			ActionType: pulumi.String(cloudngfw.ActionEnumAllow),
			Applications: pulumi.StringArray{
				pulumi.String("app1"),
			},
			AuditComment: pulumi.String("example comment"),
			Category: &cloudngfw.CategoryArgs{
				Feeds: pulumi.StringArray{
					pulumi.String("feed"),
				},
				UrlCustom: pulumi.StringArray{
					pulumi.String("https://microsoft.com"),
				},
			},
			DecryptionRuleType: pulumi.String(cloudngfw.DecryptionRuleTypeEnumSSLOutboundInspection),
			Description:        pulumi.String("description of local rule"),
			Destination: &cloudngfw.DestinationAddrArgs{
				Cidrs: pulumi.StringArray{
					pulumi.String("1.0.0.1/10"),
				},
				Countries: pulumi.StringArray{
					pulumi.String("India"),
				},
				Feeds: pulumi.StringArray{
					pulumi.String("feed"),
				},
				FqdnLists: pulumi.StringArray{
					pulumi.String("FQDN1"),
				},
				PrefixLists: pulumi.StringArray{
					pulumi.String("PL1"),
				},
			},
			EnableLogging:                pulumi.String(cloudngfw.StateEnumDISABLED),
			InboundInspectionCertificate: pulumi.String("cert1"),
			LocalRulestackName:           pulumi.String("lrs1"),
			NegateDestination:            pulumi.String(cloudngfw.BooleanEnumTRUE),
			NegateSource:                 pulumi.String(cloudngfw.BooleanEnumTRUE),
			Priority:                     pulumi.String("1"),
			Protocol:                     pulumi.String("HTTP"),
			ProtocolPortList: pulumi.StringArray{
				pulumi.String("80"),
			},
			ResourceGroupName: pulumi.String("firewall-rg"),
			RuleName:          pulumi.String("localRule1"),
			RuleState:         pulumi.String(cloudngfw.StateEnumDISABLED),
			Source: &cloudngfw.SourceAddrArgs{
				Cidrs: pulumi.StringArray{
					pulumi.String("1.0.0.1/10"),
				},
				Countries: pulumi.StringArray{
					pulumi.String("India"),
				},
				Feeds: pulumi.StringArray{
					pulumi.String("feed"),
				},
				PrefixLists: pulumi.StringArray{
					pulumi.String("PL1"),
				},
			},
			Tags: cloudngfw.TagInfoArray{
				&cloudngfw.TagInfoArgs{
					Key:   pulumi.String("keyName"),
					Value: pulumi.String("value"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cloudngfw.LocalRule;
import com.pulumi.azurenative.cloudngfw.LocalRuleArgs;
import com.pulumi.azurenative.cloudngfw.inputs.CategoryArgs;
import com.pulumi.azurenative.cloudngfw.inputs.DestinationAddrArgs;
import com.pulumi.azurenative.cloudngfw.inputs.SourceAddrArgs;
import com.pulumi.azurenative.cloudngfw.inputs.TagInfoArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var localRule = new LocalRule("localRule", LocalRuleArgs.builder()
            .actionType("Allow")
            .applications("app1")
            .auditComment("example comment")
            .category(CategoryArgs.builder()
                .feeds("feed")
                .urlCustom("https://microsoft.com")
                .build())
            .decryptionRuleType("SSLOutboundInspection")
            .description("description of local rule")
            .destination(DestinationAddrArgs.builder()
                .cidrs("1.0.0.1/10")
                .countries("India")
                .feeds("feed")
                .fqdnLists("FQDN1")
                .prefixLists("PL1")
                .build())
            .enableLogging("DISABLED")
            .inboundInspectionCertificate("cert1")
            .localRulestackName("lrs1")
            .negateDestination("TRUE")
            .negateSource("TRUE")
            .priority("1")
            .protocol("HTTP")
            .protocolPortList("80")
            .resourceGroupName("firewall-rg")
            .ruleName("localRule1")
            .ruleState("DISABLED")
            .source(SourceAddrArgs.builder()
                .cidrs("1.0.0.1/10")
                .countries("India")
                .feeds("feed")
                .prefixLists("PL1")
                .build())
            .tags(TagInfoArgs.builder()
                .key("keyName")
                .value("value")
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const localRule = new azure_native.cloudngfw.LocalRule("localRule", {
    actionType: azure_native.cloudngfw.ActionEnum.Allow,
    applications: ["app1"],
    auditComment: "example comment",
    category: {
        feeds: ["feed"],
        urlCustom: ["https://microsoft.com"],
    },
    decryptionRuleType: azure_native.cloudngfw.DecryptionRuleTypeEnum.SSLOutboundInspection,
    description: "description of local rule",
    destination: {
        cidrs: ["1.0.0.1/10"],
        countries: ["India"],
        feeds: ["feed"],
        fqdnLists: ["FQDN1"],
        prefixLists: ["PL1"],
    },
    enableLogging: azure_native.cloudngfw.StateEnum.DISABLED,
    inboundInspectionCertificate: "cert1",
    localRulestackName: "lrs1",
    negateDestination: azure_native.cloudngfw.BooleanEnum.TRUE,
    negateSource: azure_native.cloudngfw.BooleanEnum.TRUE,
    priority: "1",
    protocol: "HTTP",
    protocolPortList: ["80"],
    resourceGroupName: "firewall-rg",
    ruleName: "localRule1",
    ruleState: azure_native.cloudngfw.StateEnum.DISABLED,
    source: {
        cidrs: ["1.0.0.1/10"],
        countries: ["India"],
        feeds: ["feed"],
        prefixLists: ["PL1"],
    },
    tags: [{
        key: "keyName",
        value: "value",
    }],
});

    import pulumi
import pulumi_azure_native as azure_native

local_rule = azure_native.cloudngfw.LocalRule("localRule",
    action_type=azure_native.cloudngfw.ActionEnum.ALLOW,
    applications=["app1"],
    audit_comment="example comment",
    category={
        "feeds": ["feed"],
        "url_custom": ["https://microsoft.com"],
    },
    decryption_rule_type=azure_native.cloudngfw.DecryptionRuleTypeEnum.SSL_OUTBOUND_INSPECTION,
    description="description of local rule",
    destination={
        "cidrs": ["1.0.0.1/10"],
        "countries": ["India"],
        "feeds": ["feed"],
        "fqdn_lists": ["FQDN1"],
        "prefix_lists": ["PL1"],
    },
    enable_logging=azure_native.cloudngfw.StateEnum.DISABLED,
    inbound_inspection_certificate="cert1",
    local_rulestack_name="lrs1",
    negate_destination=azure_native.cloudngfw.BooleanEnum.TRUE,
    negate_source=azure_native.cloudngfw.BooleanEnum.TRUE,
    priority="1",
    protocol="HTTP",
    protocol_port_list=["80"],
    resource_group_name="firewall-rg",
    rule_name="localRule1",
    rule_state=azure_native.cloudngfw.StateEnum.DISABLED,
    source={
        "cidrs": ["1.0.0.1/10"],
        "countries": ["India"],
        "feeds": ["feed"],
        "prefix_lists": ["PL1"],
    },
    tags=[{
        "key": "keyName",
        "value": "value",
    }])

    resources:
  localRule:
    type: azure-native:cloudngfw:LocalRule
    properties:
      actionType: Allow
      applications:
        - app1
      auditComment: example comment
      category:
        feeds:
          - feed
        urlCustom:
          - https://microsoft.com
      decryptionRuleType: SSLOutboundInspection
      description: description of local rule
      destination:
        cidrs:
          - 1.0.0.1/10
        countries:
          - India
        feeds:
          - feed
        fqdnLists:
          - FQDN1
        prefixLists:
          - PL1
      enableLogging: DISABLED
      inboundInspectionCertificate: cert1
      localRulestackName: lrs1
      negateDestination: TRUE
      negateSource: TRUE
      priority: '1'
      protocol: HTTP
      protocolPortList:
        - '80'
      resourceGroupName: firewall-rg
      ruleName: localRule1
      ruleState: DISABLED
      source:
        cidrs:
          - 1.0.0.1/10
        countries:
          - India
        feeds:
          - feed
        prefixLists:
          - PL1
      tags:
        - key: keyName
          value: value

    LocalRules_CreateOrUpdate_MinimumSet_Gen

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var localRule = new AzureNative.Cloudngfw.LocalRule("localRule", new()
    {
        LocalRulestackName = "lrs1",
        Priority = "1",
        ResourceGroupName = "firewall-rg",
        RuleName = "localRule1",
    });

});

    package main

import (
	cloudngfw "github.com/pulumi/pulumi-azure-native-sdk/cloudngfw/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudngfw.NewLocalRule(ctx, "localRule", &cloudngfw.LocalRuleArgs{
			LocalRulestackName: pulumi.String("lrs1"),
			Priority:           pulumi.String("1"),
			ResourceGroupName:  pulumi.String("firewall-rg"),
			RuleName:           pulumi.String("localRule1"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cloudngfw.LocalRule;
import com.pulumi.azurenative.cloudngfw.LocalRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var localRule = new LocalRule("localRule", LocalRuleArgs.builder()
            .localRulestackName("lrs1")
            .priority("1")
            .resourceGroupName("firewall-rg")
            .ruleName("localRule1")
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const localRule = new azure_native.cloudngfw.LocalRule("localRule", {
    localRulestackName: "lrs1",
    priority: "1",
    resourceGroupName: "firewall-rg",
    ruleName: "localRule1",
});

    import pulumi
import pulumi_azure_native as azure_native

local_rule = azure_native.cloudngfw.LocalRule("localRule",
    local_rulestack_name="lrs1",
    priority="1",
    resource_group_name="firewall-rg",
    rule_name="localRule1")

    resources:
  localRule:
    type: azure-native:cloudngfw:LocalRule
    properties:
      localRulestackName: lrs1
      priority: '1'
      resourceGroupName: firewall-rg
      ruleName: localRule1

    Create LocalRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new LocalRule(name: string, args: LocalRuleArgs, opts?: CustomResourceOptions);
    @overload
def LocalRule(resource_name: str,
              args: LocalRuleArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def LocalRule(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              local_rulestack_name: Optional[str] = None,
              rule_name: Optional[str] = None,
              resource_group_name: Optional[str] = None,
              description: Optional[str] = None,
              priority: Optional[str] = None,
              action_type: Optional[Union[str, ActionEnum]] = None,
              destination: Optional[DestinationAddrArgs] = None,
              enable_logging: Optional[Union[str, StateEnum]] = None,
              inbound_inspection_certificate: Optional[str] = None,
              category: Optional[CategoryArgs] = None,
              negate_destination: Optional[Union[str, BooleanEnum]] = None,
              negate_source: Optional[Union[str, BooleanEnum]] = None,
              decryption_rule_type: Optional[Union[str, DecryptionRuleTypeEnum]] = None,
              protocol: Optional[str] = None,
              protocol_port_list: Optional[Sequence[str]] = None,
              audit_comment: Optional[str] = None,
              applications: Optional[Sequence[str]] = None,
              rule_state: Optional[Union[str, StateEnum]] = None,
              source: Optional[SourceAddrArgs] = None,
              tags: Optional[Sequence[TagInfoArgs]] = None)
    func NewLocalRule(ctx *Context, name string, args LocalRuleArgs, opts ...ResourceOption) (*LocalRule, error)
    public LocalRule(string name, LocalRuleArgs args, CustomResourceOptions? opts = null)
    public LocalRule(String name, LocalRuleArgs args)
public LocalRule(String name, LocalRuleArgs args, CustomResourceOptions options)

    type: azure-native:cloudngfw:LocalRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args LocalRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args LocalRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args LocalRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args LocalRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args LocalRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var localRuleResource = new AzureNative.Cloudngfw.LocalRule("localRuleResource", new()
{
    LocalRulestackName = "string",
    RuleName = "string",
    ResourceGroupName = "string",
    Description = "string",
    Priority = "string",
    ActionType = "string",
    Destination = new AzureNative.Cloudngfw.Inputs.DestinationAddrArgs
    {
        Cidrs = new[]
        {
            "string",
        },
        Countries = new[]
        {
            "string",
        },
        Feeds = new[]
        {
            "string",
        },
        FqdnLists = new[]
        {
            "string",
        },
        PrefixLists = new[]
        {
            "string",
        },
    },
    EnableLogging = "string",
    InboundInspectionCertificate = "string",
    Category = new AzureNative.Cloudngfw.Inputs.CategoryArgs
    {
        Feeds = new[]
        {
            "string",
        },
        UrlCustom = new[]
        {
            "string",
        },
    },
    NegateDestination = "string",
    NegateSource = "string",
    DecryptionRuleType = "string",
    Protocol = "string",
    ProtocolPortList = new[]
    {
        "string",
    },
    AuditComment = "string",
    Applications = new[]
    {
        "string",
    },
    RuleState = "string",
    Source = new AzureNative.Cloudngfw.Inputs.SourceAddrArgs
    {
        Cidrs = new[]
        {
            "string",
        },
        Countries = new[]
        {
            "string",
        },
        Feeds = new[]
        {
            "string",
        },
        PrefixLists = new[]
        {
            "string",
        },
    },
    Tags = new[]
    {
        new AzureNative.Cloudngfw.Inputs.TagInfoArgs
        {
            Key = "string",
            Value = "string",
        },
    },
});

    example, err := cloudngfw.NewLocalRule(ctx, "localRuleResource", &cloudngfw.LocalRuleArgs{
	LocalRulestackName: pulumi.String("string"),
	RuleName:           pulumi.String("string"),
	ResourceGroupName:  pulumi.String("string"),
	Description:        pulumi.String("string"),
	Priority:           pulumi.String("string"),
	ActionType:         pulumi.String("string"),
	Destination: &cloudngfw.DestinationAddrArgs{
		Cidrs: pulumi.StringArray{
			pulumi.String("string"),
		},
		Countries: pulumi.StringArray{
			pulumi.String("string"),
		},
		Feeds: pulumi.StringArray{
			pulumi.String("string"),
		},
		FqdnLists: pulumi.StringArray{
			pulumi.String("string"),
		},
		PrefixLists: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	EnableLogging:                pulumi.String("string"),
	InboundInspectionCertificate: pulumi.String("string"),
	Category: &cloudngfw.CategoryArgs{
		Feeds: pulumi.StringArray{
			pulumi.String("string"),
		},
		UrlCustom: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	NegateDestination:  pulumi.String("string"),
	NegateSource:       pulumi.String("string"),
	DecryptionRuleType: pulumi.String("string"),
	Protocol:           pulumi.String("string"),
	ProtocolPortList: pulumi.StringArray{
		pulumi.String("string"),
	},
	AuditComment: pulumi.String("string"),
	Applications: pulumi.StringArray{
		pulumi.String("string"),
	},
	RuleState: pulumi.String("string"),
	Source: &cloudngfw.SourceAddrArgs{
		Cidrs: pulumi.StringArray{
			pulumi.String("string"),
		},
		Countries: pulumi.StringArray{
			pulumi.String("string"),
		},
		Feeds: pulumi.StringArray{
			pulumi.String("string"),
		},
		PrefixLists: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	Tags: cloudngfw.TagInfoArray{
		&cloudngfw.TagInfoArgs{
			Key:   pulumi.String("string"),
			Value: pulumi.String("string"),
		},
	},
})

    var localRuleResource = new LocalRule("localRuleResource", LocalRuleArgs.builder()
    .localRulestackName("string")
    .ruleName("string")
    .resourceGroupName("string")
    .description("string")
    .priority("string")
    .actionType("string")
    .destination(DestinationAddrArgs.builder()
        .cidrs("string")
        .countries("string")
        .feeds("string")
        .fqdnLists("string")
        .prefixLists("string")
        .build())
    .enableLogging("string")
    .inboundInspectionCertificate("string")
    .category(CategoryArgs.builder()
        .feeds("string")
        .urlCustom("string")
        .build())
    .negateDestination("string")
    .negateSource("string")
    .decryptionRuleType("string")
    .protocol("string")
    .protocolPortList("string")
    .auditComment("string")
    .applications("string")
    .ruleState("string")
    .source(SourceAddrArgs.builder()
        .cidrs("string")
        .countries("string")
        .feeds("string")
        .prefixLists("string")
        .build())
    .tags(TagInfoArgs.builder()
        .key("string")
        .value("string")
        .build())
    .build());

    local_rule_resource = azure_native.cloudngfw.LocalRule("localRuleResource",
    local_rulestack_name="string",
    rule_name="string",
    resource_group_name="string",
    description="string",
    priority="string",
    action_type="string",
    destination={
        "cidrs": ["string"],
        "countries": ["string"],
        "feeds": ["string"],
        "fqdn_lists": ["string"],
        "prefix_lists": ["string"],
    },
    enable_logging="string",
    inbound_inspection_certificate="string",
    category={
        "feeds": ["string"],
        "url_custom": ["string"],
    },
    negate_destination="string",
    negate_source="string",
    decryption_rule_type="string",
    protocol="string",
    protocol_port_list=["string"],
    audit_comment="string",
    applications=["string"],
    rule_state="string",
    source={
        "cidrs": ["string"],
        "countries": ["string"],
        "feeds": ["string"],
        "prefix_lists": ["string"],
    },
    tags=[{
        "key": "string",
        "value": "string",
    }])

    const localRuleResource = new azure_native.cloudngfw.LocalRule("localRuleResource", {
    localRulestackName: "string",
    ruleName: "string",
    resourceGroupName: "string",
    description: "string",
    priority: "string",
    actionType: "string",
    destination: {
        cidrs: ["string"],
        countries: ["string"],
        feeds: ["string"],
        fqdnLists: ["string"],
        prefixLists: ["string"],
    },
    enableLogging: "string",
    inboundInspectionCertificate: "string",
    category: {
        feeds: ["string"],
        urlCustom: ["string"],
    },
    negateDestination: "string",
    negateSource: "string",
    decryptionRuleType: "string",
    protocol: "string",
    protocolPortList: ["string"],
    auditComment: "string",
    applications: ["string"],
    ruleState: "string",
    source: {
        cidrs: ["string"],
        countries: ["string"],
        feeds: ["string"],
        prefixLists: ["string"],
    },
    tags: [{
        key: "string",
        value: "string",
    }],
});

    type: azure-native:cloudngfw:LocalRule
properties:
    actionType: string
    applications:
        - string
    auditComment: string
    category:
        feeds:
            - string
        urlCustom:
            - string
    decryptionRuleType: string
    description: string
    destination:
        cidrs:
            - string
        countries:
            - string
        feeds:
            - string
        fqdnLists:
            - string
        prefixLists:
            - string
    enableLogging: string
    inboundInspectionCertificate: string
    localRulestackName: string
    negateDestination: string
    negateSource: string
    priority: string
    protocol: string
    protocolPortList:
        - string
    resourceGroupName: string
    ruleName: string
    ruleState: string
    source:
        cidrs:
            - string
        countries:
            - string
        feeds:
            - string
        prefixLists:
            - string
    tags:
        - key: string
          value: string

    LocalRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The LocalRule resource accepts the following input properties:

    LocalRulestackName string
    LocalRulestack resource name
    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    RuleName string
    rule name
    ActionType string | Pulumi.AzureNative.Cloudngfw.ActionEnum
    rule action
    Applications List<string>
    array of rule applications
    AuditComment string
    rule comment
    Category Pulumi.AzureNative.Cloudngfw.Inputs.Category
    rule category
    DecryptionRuleType string | Pulumi.AzureNative.Cloudngfw.DecryptionRuleTypeEnum
    enable or disable decryption
    Description string
    rule description
    Destination Pulumi.AzureNative.Cloudngfw.Inputs.DestinationAddr
    destination address
    EnableLogging string | Pulumi.AzureNative.Cloudngfw.StateEnum
    enable or disable logging
    InboundInspectionCertificate string
    inbound Inspection Certificate
    NegateDestination string | Pulumi.AzureNative.Cloudngfw.BooleanEnum
    cidr should not be 'any'
    NegateSource string | Pulumi.AzureNative.Cloudngfw.BooleanEnum
    cidr should not be 'any'
    Priority string
    Local Rule priority
    Protocol string
    any, application-default, TCP:number, UDP:number
    ProtocolPortList List<string>
    prot port list
    RuleState string | Pulumi.AzureNative.Cloudngfw.StateEnum
    state of this rule
    Source Pulumi.AzureNative.Cloudngfw.Inputs.SourceAddr
    source address
    Tags List<Pulumi.AzureNative.Cloudngfw.Inputs.TagInfo>
    tag for rule
    LocalRulestackName string
    LocalRulestack resource name
    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    RuleName string
    rule name
    ActionType string | ActionEnum
    rule action
    Applications []string
    array of rule applications
    AuditComment string
    rule comment
    Category CategoryArgs
    rule category
    DecryptionRuleType string | DecryptionRuleTypeEnum
    enable or disable decryption
    Description string
    rule description
    Destination DestinationAddrArgs
    destination address
    EnableLogging string | StateEnum
    enable or disable logging
    InboundInspectionCertificate string
    inbound Inspection Certificate
    NegateDestination string | BooleanEnum
    cidr should not be 'any'
    NegateSource string | BooleanEnum
    cidr should not be 'any'
    Priority string
    Local Rule priority
    Protocol string
    any, application-default, TCP:number, UDP:number
    ProtocolPortList []string
    prot port list
    RuleState string | StateEnum
    state of this rule
    Source SourceAddrArgs
    source address
    Tags []TagInfoArgs
    tag for rule
    localRulestackName String
    LocalRulestack resource name
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    ruleName String
    rule name
    actionType String | ActionEnum
    rule action
    applications List<String>
    array of rule applications
    auditComment String
    rule comment
    category Category
    rule category
    decryptionRuleType String | DecryptionRuleTypeEnum
    enable or disable decryption
    description String
    rule description
    destination DestinationAddr
    destination address
    enableLogging String | StateEnum
    enable or disable logging
    inboundInspectionCertificate String
    inbound Inspection Certificate
    negateDestination String | BooleanEnum
    cidr should not be 'any'
    negateSource String | BooleanEnum
    cidr should not be 'any'
    priority String
    Local Rule priority
    protocol String
    any, application-default, TCP:number, UDP:number
    protocolPortList List<String>
    prot port list
    ruleState String | StateEnum
    state of this rule
    source SourceAddr
    source address
    tags List<TagInfo>
    tag for rule
    localRulestackName string
    LocalRulestack resource name
    resourceGroupName string
    The name of the resource group. The name is case insensitive.
    ruleName string
    rule name
    actionType string | ActionEnum
    rule action
    applications string[]
    array of rule applications
    auditComment string
    rule comment
    category Category
    rule category
    decryptionRuleType string | DecryptionRuleTypeEnum
    enable or disable decryption
    description string
    rule description
    destination DestinationAddr
    destination address
    enableLogging string | StateEnum
    enable or disable logging
    inboundInspectionCertificate string
    inbound Inspection Certificate
    negateDestination string | BooleanEnum
    cidr should not be 'any'
    negateSource string | BooleanEnum
    cidr should not be 'any'
    priority string
    Local Rule priority
    protocol string
    any, application-default, TCP:number, UDP:number
    protocolPortList string[]
    prot port list
    ruleState string | StateEnum
    state of this rule
    source SourceAddr
    source address
    tags TagInfo[]
    tag for rule
    local_rulestack_name str
    LocalRulestack resource name
    resource_group_name str
    The name of the resource group. The name is case insensitive.
    rule_name str
    rule name
    action_type str | ActionEnum
    rule action
    applications Sequence[str]
    array of rule applications
    audit_comment str
    rule comment
    category CategoryArgs
    rule category
    decryption_rule_type str | DecryptionRuleTypeEnum
    enable or disable decryption
    description str
    rule description
    destination DestinationAddrArgs
    destination address
    enable_logging str | StateEnum
    enable or disable logging
    inbound_inspection_certificate str
    inbound Inspection Certificate
    negate_destination str | BooleanEnum
    cidr should not be 'any'
    negate_source str | BooleanEnum
    cidr should not be 'any'
    priority str
    Local Rule priority
    protocol str
    any, application-default, TCP:number, UDP:number
    protocol_port_list Sequence[str]
    prot port list
    rule_state str | StateEnum
    state of this rule
    source SourceAddrArgs
    source address
    tags Sequence[TagInfoArgs]
    tag for rule
    localRulestackName String
    LocalRulestack resource name
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    ruleName String
    rule name
    actionType String | "Allow" | "DenySilent" | "DenyResetServer" | "DenyResetBoth"
    rule action
    applications List<String>
    array of rule applications
    auditComment String
    rule comment
    category Property Map
    rule category
    decryptionRuleType String | "SSLOutboundInspection" | "SSLInboundInspection" | "None"
    enable or disable decryption
    description String
    rule description
    destination Property Map
    destination address
    enableLogging String | "DISABLED" | "ENABLED"
    enable or disable logging
    inboundInspectionCertificate String
    inbound Inspection Certificate
    negateDestination String | "TRUE" | "FALSE"
    cidr should not be 'any'
    negateSource String | "TRUE" | "FALSE"
    cidr should not be 'any'
    priority String
    Local Rule priority
    protocol String
    any, application-default, TCP:number, UDP:number
    protocolPortList List<String>
    prot port list
    ruleState String | "DISABLED" | "ENABLED"
    state of this rule
    source Property Map
    source address
    tags List<Property Map>
    tag for rule

    Outputs

    All input properties are implicitly available as output properties. Additionally, the LocalRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The name of the resource
    ProvisioningState string
    Provisioning state of the resource.
    SystemData Pulumi.AzureNative.Cloudngfw.Outputs.SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    Etag string
    etag info
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The name of the resource
    ProvisioningState string
    Provisioning state of the resource.
    SystemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    Etag string
    etag info
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The name of the resource
    provisioningState String
    Provisioning state of the resource.
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    etag String
    etag info
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The name of the resource
    provisioningState string
    Provisioning state of the resource.
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    etag string
    etag info
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    The name of the resource
    provisioning_state str
    Provisioning state of the resource.
    system_data SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type str
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    etag str
    etag info
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The name of the resource
    provisioningState String
    Provisioning state of the resource.
    systemData Property Map
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    etag String
    etag info

    Supporting Types

    ActionEnum, ActionEnumArgs

    Allow
    Allow
    DenySilent
    DenySilent
    DenyResetServer
    DenyResetServer
    DenyResetBoth
    DenyResetBoth
    ActionEnumAllow
    Allow
    ActionEnumDenySilent
    DenySilent
    ActionEnumDenyResetServer
    DenyResetServer
    ActionEnumDenyResetBoth
    DenyResetBoth
    Allow
    Allow
    DenySilent
    DenySilent
    DenyResetServer
    DenyResetServer
    DenyResetBoth
    DenyResetBoth
    Allow
    Allow
    DenySilent
    DenySilent
    DenyResetServer
    DenyResetServer
    DenyResetBoth
    DenyResetBoth
    ALLOW
    Allow
    DENY_SILENT
    DenySilent
    DENY_RESET_SERVER
    DenyResetServer
    DENY_RESET_BOTH
    DenyResetBoth
    "Allow"
    Allow
    "DenySilent"
    DenySilent
    "DenyResetServer"
    DenyResetServer
    "DenyResetBoth"
    DenyResetBoth

    BooleanEnum, BooleanEnumArgs

    TRUE
    TRUE
    FALSE
    FALSE
    BooleanEnumTRUE
    TRUE
    BooleanEnumFALSE
    FALSE
    TRUE
    TRUE
    FALSE
    FALSE
    TRUE
    TRUE
    FALSE
    FALSE
    TRUE
    TRUE
    FALSE
    FALSE
    "TRUE"
    TRUE
    "FALSE"
    FALSE

    Category, CategoryArgs

    Feeds List<string>
    feed list
    UrlCustom List<string>
    custom URL
    Feeds []string
    feed list
    UrlCustom []string
    custom URL
    feeds List<String>
    feed list
    urlCustom List<String>
    custom URL
    feeds string[]
    feed list
    urlCustom string[]
    custom URL
    feeds Sequence[str]
    feed list
    url_custom Sequence[str]
    custom URL
    feeds List<String>
    feed list
    urlCustom List<String>
    custom URL

    CategoryResponse, CategoryResponseArgs

    Feeds List<string>
    feed list
    UrlCustom List<string>
    custom URL
    Feeds []string
    feed list
    UrlCustom []string
    custom URL
    feeds List<String>
    feed list
    urlCustom List<String>
    custom URL
    feeds string[]
    feed list
    urlCustom string[]
    custom URL
    feeds Sequence[str]
    feed list
    url_custom Sequence[str]
    custom URL
    feeds List<String>
    feed list
    urlCustom List<String>
    custom URL

    DecryptionRuleTypeEnum, DecryptionRuleTypeEnumArgs

    SSLOutboundInspection
    SSLOutboundInspection
    SSLInboundInspection
    SSLInboundInspection
    None
    None
    DecryptionRuleTypeEnumSSLOutboundInspection
    SSLOutboundInspection
    DecryptionRuleTypeEnumSSLInboundInspection
    SSLInboundInspection
    DecryptionRuleTypeEnumNone
    None
    SSLOutboundInspection
    SSLOutboundInspection
    SSLInboundInspection
    SSLInboundInspection
    None
    None
    SSLOutboundInspection
    SSLOutboundInspection
    SSLInboundInspection
    SSLInboundInspection
    None
    None
    SSL_OUTBOUND_INSPECTION
    SSLOutboundInspection
    SSL_INBOUND_INSPECTION
    SSLInboundInspection
    NONE
    None
    "SSLOutboundInspection"
    SSLOutboundInspection
    "SSLInboundInspection"
    SSLInboundInspection
    "None"
    None

    DestinationAddr, DestinationAddrArgs

    Cidrs List<string>
    special value 'any'
    Countries List<string>
    list of countries
    Feeds List<string>
    list of feeds
    FqdnLists List<string>
    fqdn list
    PrefixLists List<string>
    prefix list
    Cidrs []string
    special value 'any'
    Countries []string
    list of countries
    Feeds []string
    list of feeds
    FqdnLists []string
    fqdn list
    PrefixLists []string
    prefix list
    cidrs List<String>
    special value 'any'
    countries List<String>
    list of countries
    feeds List<String>
    list of feeds
    fqdnLists List<String>
    fqdn list
    prefixLists List<String>
    prefix list
    cidrs string[]
    special value 'any'
    countries string[]
    list of countries
    feeds string[]
    list of feeds
    fqdnLists string[]
    fqdn list
    prefixLists string[]
    prefix list
    cidrs Sequence[str]
    special value 'any'
    countries Sequence[str]
    list of countries
    feeds Sequence[str]
    list of feeds
    fqdn_lists Sequence[str]
    fqdn list
    prefix_lists Sequence[str]
    prefix list
    cidrs List<String>
    special value 'any'
    countries List<String>
    list of countries
    feeds List<String>
    list of feeds
    fqdnLists List<String>
    fqdn list
    prefixLists List<String>
    prefix list

    DestinationAddrResponse, DestinationAddrResponseArgs

    Cidrs List<string>
    special value 'any'
    Countries List<string>
    list of countries
    Feeds List<string>
    list of feeds
    FqdnLists List<string>
    fqdn list
    PrefixLists List<string>
    prefix list
    Cidrs []string
    special value 'any'
    Countries []string
    list of countries
    Feeds []string
    list of feeds
    FqdnLists []string
    fqdn list
    PrefixLists []string
    prefix list
    cidrs List<String>
    special value 'any'
    countries List<String>
    list of countries
    feeds List<String>
    list of feeds
    fqdnLists List<String>
    fqdn list
    prefixLists List<String>
    prefix list
    cidrs string[]
    special value 'any'
    countries string[]
    list of countries
    feeds string[]
    list of feeds
    fqdnLists string[]
    fqdn list
    prefixLists string[]
    prefix list
    cidrs Sequence[str]
    special value 'any'
    countries Sequence[str]
    list of countries
    feeds Sequence[str]
    list of feeds
    fqdn_lists Sequence[str]
    fqdn list
    prefix_lists Sequence[str]
    prefix list
    cidrs List<String>
    special value 'any'
    countries List<String>
    list of countries
    feeds List<String>
    list of feeds
    fqdnLists List<String>
    fqdn list
    prefixLists List<String>
    prefix list

    SourceAddr, SourceAddrArgs

    Cidrs List<string>
    special value 'any'
    Countries List<string>
    list of countries
    Feeds List<string>
    list of feeds
    PrefixLists List<string>
    prefix list
    Cidrs []string
    special value 'any'
    Countries []string
    list of countries
    Feeds []string
    list of feeds
    PrefixLists []string
    prefix list
    cidrs List<String>
    special value 'any'
    countries List<String>
    list of countries
    feeds List<String>
    list of feeds
    prefixLists List<String>
    prefix list
    cidrs string[]
    special value 'any'
    countries string[]
    list of countries
    feeds string[]
    list of feeds
    prefixLists string[]
    prefix list
    cidrs Sequence[str]
    special value 'any'
    countries Sequence[str]
    list of countries
    feeds Sequence[str]
    list of feeds
    prefix_lists Sequence[str]
    prefix list
    cidrs List<String>
    special value 'any'
    countries List<String>
    list of countries
    feeds List<String>
    list of feeds
    prefixLists List<String>
    prefix list

    SourceAddrResponse, SourceAddrResponseArgs

    Cidrs List<string>
    special value 'any'
    Countries List<string>
    list of countries
    Feeds List<string>
    list of feeds
    PrefixLists List<string>
    prefix list
    Cidrs []string
    special value 'any'
    Countries []string
    list of countries
    Feeds []string
    list of feeds
    PrefixLists []string
    prefix list
    cidrs List<String>
    special value 'any'
    countries List<String>
    list of countries
    feeds List<String>
    list of feeds
    prefixLists List<String>
    prefix list
    cidrs string[]
    special value 'any'
    countries string[]
    list of countries
    feeds string[]
    list of feeds
    prefixLists string[]
    prefix list
    cidrs Sequence[str]
    special value 'any'
    countries Sequence[str]
    list of countries
    feeds Sequence[str]
    list of feeds
    prefix_lists Sequence[str]
    prefix list
    cidrs List<String>
    special value 'any'
    countries List<String>
    list of countries
    feeds List<String>
    list of feeds
    prefixLists List<String>
    prefix list

    StateEnum, StateEnumArgs

    DISABLED
    DISABLED
    ENABLED
    ENABLED
    StateEnumDISABLED
    DISABLED
    StateEnumENABLED
    ENABLED
    DISABLED
    DISABLED
    ENABLED
    ENABLED
    DISABLED
    DISABLED
    ENABLED
    ENABLED
    DISABLED
    DISABLED
    ENABLED
    ENABLED
    "DISABLED"
    DISABLED
    "ENABLED"
    ENABLED

    SystemDataResponse, SystemDataResponseArgs

    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    TagInfo, TagInfoArgs

    Key string
    tag name
    Value string
    tag value
    Key string
    tag name
    Value string
    tag value
    key String
    tag name
    value String
    tag value
    key string
    tag name
    value string
    tag value
    key str
    tag name
    value str
    tag value
    key String
    tag name
    value String
    tag value

    TagInfoResponse, TagInfoResponseArgs

    Key string
    tag name
    Value string
    tag value
    Key string
    tag name
    Value string
    tag value
    key String
    tag name
    value String
    tag value
    key string
    tag name
    value string
    tag value
    key str
    tag name
    value str
    tag value
    key String
    tag name
    value String
    tag value

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:cloudngfw:LocalRule aaaaaaaaa /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/PaloAltoNetworks.Cloudngfw/localRulestacks/{localRulestackName}/localRules/{priority}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
    Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
    pulumi/pulumi-azure-native