1. Packages
  2. Packages
  3. Databricks Provider
  4. API Docs
  5. AccountNetworkPolicy
Viewing docs for Databricks v1.91.1
published on Friday, May 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

databricks.AccountNetworkPolicy

databricks logo
Viewing docs for Databricks v1.91.1
published on Friday, May 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

    GA

    Network policies control which network destinations can be accessed from the Databricks environment.

    Each Databricks account includes a default policy named default-policy. This policy is:

    • Associated with any workspace lacking an explicit network policy assignment
    • Automatically associated with each newly created workspace
    • Reserved and cannot be deleted, but can be updated to customize the default network access rules for your account

    The default-policy provides a baseline security configuration that ensures all workspaces have network access controls in place.

    Note This resource can only be used with an account-level provider!

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const exampleNetworkPolicy = new databricks.AccountNetworkPolicy("example_network_policy", {
    networkPolicyId: "example-network-policy",
    egress: {
        networkAccess: {
            restrictionMode: "RESTRICTED_ACCESS",
            allowedInternetDestinations: [{
                destination: "example.com",
                internetDestinationType: "DNS_NAME",
            }],
            allowedStorageDestinations: [{
                bucketName: "example-aws-cloud-storage",
                region: "us-west-1",
                storageDestinationType: "AWS_S3",
            }],
            policyEnforcement: {
                enforcementMode: "ENFORCED",
            },
        },
    },
});

    import pulumi
import pulumi_databricks as databricks

example_network_policy = databricks.AccountNetworkPolicy("example_network_policy",
    network_policy_id="example-network-policy",
    egress={
        "network_access": {
            "restriction_mode": "RESTRICTED_ACCESS",
            "allowed_internet_destinations": [{
                "destination": "example.com",
                "internet_destination_type": "DNS_NAME",
            }],
            "allowed_storage_destinations": [{
                "bucket_name": "example-aws-cloud-storage",
                "region": "us-west-1",
                "storage_destination_type": "AWS_S3",
            }],
            "policy_enforcement": {
                "enforcement_mode": "ENFORCED",
            },
        },
    })

    package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := databricks.NewAccountNetworkPolicy(ctx, "example_network_policy", &databricks.AccountNetworkPolicyArgs{
			NetworkPolicyId: pulumi.String("example-network-policy"),
			Egress: &databricks.AccountNetworkPolicyEgressArgs{
				NetworkAccess: &databricks.AccountNetworkPolicyEgressNetworkAccessArgs{
					RestrictionMode: pulumi.String("RESTRICTED_ACCESS"),
					AllowedInternetDestinations: databricks.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArray{
						&databricks.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs{
							Destination:             pulumi.String("example.com"),
							InternetDestinationType: pulumi.String("DNS_NAME"),
						},
					},
					AllowedStorageDestinations: databricks.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArray{
						&databricks.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs{
							BucketName:             pulumi.String("example-aws-cloud-storage"),
							Region:                 pulumi.String("us-west-1"),
							StorageDestinationType: pulumi.String("AWS_S3"),
						},
					},
					PolicyEnforcement: &databricks.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs{
						EnforcementMode: pulumi.String("ENFORCED"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var exampleNetworkPolicy = new Databricks.Index.AccountNetworkPolicy("example_network_policy", new()
    {
        NetworkPolicyId = "example-network-policy",
        Egress = new Databricks.Inputs.AccountNetworkPolicyEgressArgs
        {
            NetworkAccess = new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessArgs
            {
                RestrictionMode = "RESTRICTED_ACCESS",
                AllowedInternetDestinations = new[]
                {
                    new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs
                    {
                        Destination = "example.com",
                        InternetDestinationType = "DNS_NAME",
                    },
                },
                AllowedStorageDestinations = new[]
                {
                    new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs
                    {
                        BucketName = "example-aws-cloud-storage",
                        Region = "us-west-1",
                        StorageDestinationType = "AWS_S3",
                    },
                },
                PolicyEnforcement = new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs
                {
                    EnforcementMode = "ENFORCED",
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.AccountNetworkPolicy;
import com.pulumi.databricks.AccountNetworkPolicyArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyEgressArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyEgressNetworkAccessArgs;
import com.pulumi.databricks.inputs.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleNetworkPolicy = new AccountNetworkPolicy("exampleNetworkPolicy", AccountNetworkPolicyArgs.builder()
            .networkPolicyId("example-network-policy")
            .egress(AccountNetworkPolicyEgressArgs.builder()
                .networkAccess(AccountNetworkPolicyEgressNetworkAccessArgs.builder()
                    .restrictionMode("RESTRICTED_ACCESS")
                    .allowedInternetDestinations(AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs.builder()
                        .destination("example.com")
                        .internetDestinationType("DNS_NAME")
                        .build())
                    .allowedStorageDestinations(AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs.builder()
                        .bucketName("example-aws-cloud-storage")
                        .region("us-west-1")
                        .storageDestinationType("AWS_S3")
                        .build())
                    .policyEnforcement(AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs.builder()
                        .enforcementMode("ENFORCED")
                        .build())
                    .build())
                .build())
            .build());

    }
}

    resources:
  exampleNetworkPolicy:
    type: databricks:AccountNetworkPolicy
    name: example_network_policy
    properties:
      networkPolicyId: example-network-policy
      egress:
        networkAccess:
          restrictionMode: RESTRICTED_ACCESS
          allowedInternetDestinations:
            - destination: example.com
              internetDestinationType: DNS_NAME
          allowedStorageDestinations:
            - bucketName: example-aws-cloud-storage
              region: us-west-1
              storageDestinationType: AWS_S3
          policyEnforcement:
            enforcementMode: ENFORCED

    Create AccountNetworkPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AccountNetworkPolicy(name: string, args?: AccountNetworkPolicyArgs, opts?: CustomResourceOptions);
    @overload
def AccountNetworkPolicy(resource_name: str,
                         args: Optional[AccountNetworkPolicyArgs] = None,
                         opts: Optional[ResourceOptions] = None)

@overload
def AccountNetworkPolicy(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         account_id: Optional[str] = None,
                         egress: Optional[AccountNetworkPolicyEgressArgs] = None,
                         ingress: Optional[AccountNetworkPolicyIngressArgs] = None,
                         ingress_dry_run: Optional[AccountNetworkPolicyIngressDryRunArgs] = None,
                         network_policy_id: Optional[str] = None)
    func NewAccountNetworkPolicy(ctx *Context, name string, args *AccountNetworkPolicyArgs, opts ...ResourceOption) (*AccountNetworkPolicy, error)
    public AccountNetworkPolicy(string name, AccountNetworkPolicyArgs? args = null, CustomResourceOptions? opts = null)
    public AccountNetworkPolicy(String name, AccountNetworkPolicyArgs args)
public AccountNetworkPolicy(String name, AccountNetworkPolicyArgs args, CustomResourceOptions options)

    type: databricks:AccountNetworkPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AccountNetworkPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var accountNetworkPolicyResource = new Databricks.AccountNetworkPolicy("accountNetworkPolicyResource", new()
{
    AccountId = "string",
    Egress = new Databricks.Inputs.AccountNetworkPolicyEgressArgs
    {
        NetworkAccess = new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessArgs
        {
            RestrictionMode = "string",
            AllowedInternetDestinations = new[]
            {
                new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs
                {
                    Destination = "string",
                    InternetDestinationType = "string",
                },
            },
            AllowedStorageDestinations = new[]
            {
                new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs
                {
                    AzureStorageAccount = "string",
                    AzureStorageService = "string",
                    BucketName = "string",
                    Region = "string",
                    StorageDestinationType = "string",
                },
            },
            PolicyEnforcement = new Databricks.Inputs.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs
            {
                DryRunModeProductFilters = new[]
                {
                    "string",
                },
                EnforcementMode = "string",
            },
        },
    },
    Ingress = new Databricks.Inputs.AccountNetworkPolicyIngressArgs
    {
        PublicAccess = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessArgs
        {
            RestrictionMode = "string",
            AllowRules = new[]
            {
                new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessAllowRuleArgs
                {
                    Authentication = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationArgs
                    {
                        Identities = new[]
                        {
                            new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentityArgs
                            {
                                PrincipalId = "string",
                                PrincipalType = "string",
                            },
                        },
                        IdentityType = "string",
                    },
                    Destination = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationArgs
                    {
                        AllDestinations = false,
                        WorkspaceApi = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApiArgs
                        {
                            Scopes = new[]
                            {
                                "string",
                            },
                        },
                        WorkspaceUi = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUiArgs
                        {
                            AllDestinations = false,
                        },
                    },
                    Label = "string",
                    Origin = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessAllowRuleOriginArgs
                    {
                        AllIpRanges = false,
                        ExcludedIpRanges = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRangesArgs
                        {
                            IpRanges = new[]
                            {
                                "string",
                            },
                        },
                        IncludedIpRanges = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRangesArgs
                        {
                            IpRanges = new[]
                            {
                                "string",
                            },
                        },
                    },
                },
            },
            DenyRules = new[]
            {
                new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessDenyRuleArgs
                {
                    Authentication = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationArgs
                    {
                        Identities = new[]
                        {
                            new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentityArgs
                            {
                                PrincipalId = "string",
                                PrincipalType = "string",
                            },
                        },
                        IdentityType = "string",
                    },
                    Destination = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationArgs
                    {
                        AllDestinations = false,
                        WorkspaceApi = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApiArgs
                        {
                            Scopes = new[]
                            {
                                "string",
                            },
                        },
                        WorkspaceUi = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUiArgs
                        {
                            AllDestinations = false,
                        },
                    },
                    Label = "string",
                    Origin = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessDenyRuleOriginArgs
                    {
                        AllIpRanges = false,
                        ExcludedIpRanges = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRangesArgs
                        {
                            IpRanges = new[]
                            {
                                "string",
                            },
                        },
                        IncludedIpRanges = new Databricks.Inputs.AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRangesArgs
                        {
                            IpRanges = new[]
                            {
                                "string",
                            },
                        },
                    },
                },
            },
        },
    },
    IngressDryRun = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunArgs
    {
        PublicAccess = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessArgs
        {
            RestrictionMode = "string",
            AllowRules = new[]
            {
                new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleArgs
                {
                    Authentication = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationArgs
                    {
                        Identities = new[]
                        {
                            new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentityArgs
                            {
                                PrincipalId = "string",
                                PrincipalType = "string",
                            },
                        },
                        IdentityType = "string",
                    },
                    Destination = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationArgs
                    {
                        AllDestinations = false,
                        WorkspaceApi = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApiArgs
                        {
                            Scopes = new[]
                            {
                                "string",
                            },
                        },
                        WorkspaceUi = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUiArgs
                        {
                            AllDestinations = false,
                        },
                    },
                    Label = "string",
                    Origin = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginArgs
                    {
                        AllIpRanges = false,
                        ExcludedIpRanges = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRangesArgs
                        {
                            IpRanges = new[]
                            {
                                "string",
                            },
                        },
                        IncludedIpRanges = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRangesArgs
                        {
                            IpRanges = new[]
                            {
                                "string",
                            },
                        },
                    },
                },
            },
            DenyRules = new[]
            {
                new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleArgs
                {
                    Authentication = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationArgs
                    {
                        Identities = new[]
                        {
                            new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentityArgs
                            {
                                PrincipalId = "string",
                                PrincipalType = "string",
                            },
                        },
                        IdentityType = "string",
                    },
                    Destination = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationArgs
                    {
                        AllDestinations = false,
                        WorkspaceApi = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApiArgs
                        {
                            Scopes = new[]
                            {
                                "string",
                            },
                        },
                        WorkspaceUi = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUiArgs
                        {
                            AllDestinations = false,
                        },
                    },
                    Label = "string",
                    Origin = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginArgs
                    {
                        AllIpRanges = false,
                        ExcludedIpRanges = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRangesArgs
                        {
                            IpRanges = new[]
                            {
                                "string",
                            },
                        },
                        IncludedIpRanges = new Databricks.Inputs.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRangesArgs
                        {
                            IpRanges = new[]
                            {
                                "string",
                            },
                        },
                    },
                },
            },
        },
    },
    NetworkPolicyId = "string",
});

    example, err := databricks.NewAccountNetworkPolicy(ctx, "accountNetworkPolicyResource", &databricks.AccountNetworkPolicyArgs{
	AccountId: pulumi.String("string"),
	Egress: &databricks.AccountNetworkPolicyEgressArgs{
		NetworkAccess: &databricks.AccountNetworkPolicyEgressNetworkAccessArgs{
			RestrictionMode: pulumi.String("string"),
			AllowedInternetDestinations: databricks.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArray{
				&databricks.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs{
					Destination:             pulumi.String("string"),
					InternetDestinationType: pulumi.String("string"),
				},
			},
			AllowedStorageDestinations: databricks.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArray{
				&databricks.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs{
					AzureStorageAccount:    pulumi.String("string"),
					AzureStorageService:    pulumi.String("string"),
					BucketName:             pulumi.String("string"),
					Region:                 pulumi.String("string"),
					StorageDestinationType: pulumi.String("string"),
				},
			},
			PolicyEnforcement: &databricks.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs{
				DryRunModeProductFilters: pulumi.StringArray{
					pulumi.String("string"),
				},
				EnforcementMode: pulumi.String("string"),
			},
		},
	},
	Ingress: &databricks.AccountNetworkPolicyIngressArgs{
		PublicAccess: &databricks.AccountNetworkPolicyIngressPublicAccessArgs{
			RestrictionMode: pulumi.String("string"),
			AllowRules: databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleArray{
				&databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleArgs{
					Authentication: &databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationArgs{
						Identities: databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentityArray{
							&databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentityArgs{
								PrincipalId:   pulumi.String("string"),
								PrincipalType: pulumi.String("string"),
							},
						},
						IdentityType: pulumi.String("string"),
					},
					Destination: &databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationArgs{
						AllDestinations: pulumi.Bool(false),
						WorkspaceApi: &databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApiArgs{
							Scopes: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
						WorkspaceUi: &databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUiArgs{
							AllDestinations: pulumi.Bool(false),
						},
					},
					Label: pulumi.String("string"),
					Origin: &databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleOriginArgs{
						AllIpRanges: pulumi.Bool(false),
						ExcludedIpRanges: &databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRangesArgs{
							IpRanges: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
						IncludedIpRanges: &databricks.AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRangesArgs{
							IpRanges: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
				},
			},
			DenyRules: databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleArray{
				&databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleArgs{
					Authentication: &databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationArgs{
						Identities: databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentityArray{
							&databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentityArgs{
								PrincipalId:   pulumi.String("string"),
								PrincipalType: pulumi.String("string"),
							},
						},
						IdentityType: pulumi.String("string"),
					},
					Destination: &databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationArgs{
						AllDestinations: pulumi.Bool(false),
						WorkspaceApi: &databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApiArgs{
							Scopes: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
						WorkspaceUi: &databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUiArgs{
							AllDestinations: pulumi.Bool(false),
						},
					},
					Label: pulumi.String("string"),
					Origin: &databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleOriginArgs{
						AllIpRanges: pulumi.Bool(false),
						ExcludedIpRanges: &databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRangesArgs{
							IpRanges: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
						IncludedIpRanges: &databricks.AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRangesArgs{
							IpRanges: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
				},
			},
		},
	},
	IngressDryRun: &databricks.AccountNetworkPolicyIngressDryRunArgs{
		PublicAccess: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessArgs{
			RestrictionMode: pulumi.String("string"),
			AllowRules: databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleArray{
				&databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleArgs{
					Authentication: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationArgs{
						Identities: databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentityArray{
							&databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentityArgs{
								PrincipalId:   pulumi.String("string"),
								PrincipalType: pulumi.String("string"),
							},
						},
						IdentityType: pulumi.String("string"),
					},
					Destination: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationArgs{
						AllDestinations: pulumi.Bool(false),
						WorkspaceApi: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApiArgs{
							Scopes: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
						WorkspaceUi: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUiArgs{
							AllDestinations: pulumi.Bool(false),
						},
					},
					Label: pulumi.String("string"),
					Origin: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginArgs{
						AllIpRanges: pulumi.Bool(false),
						ExcludedIpRanges: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRangesArgs{
							IpRanges: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
						IncludedIpRanges: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRangesArgs{
							IpRanges: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
				},
			},
			DenyRules: databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleArray{
				&databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleArgs{
					Authentication: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationArgs{
						Identities: databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentityArray{
							&databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentityArgs{
								PrincipalId:   pulumi.String("string"),
								PrincipalType: pulumi.String("string"),
							},
						},
						IdentityType: pulumi.String("string"),
					},
					Destination: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationArgs{
						AllDestinations: pulumi.Bool(false),
						WorkspaceApi: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApiArgs{
							Scopes: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
						WorkspaceUi: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUiArgs{
							AllDestinations: pulumi.Bool(false),
						},
					},
					Label: pulumi.String("string"),
					Origin: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginArgs{
						AllIpRanges: pulumi.Bool(false),
						ExcludedIpRanges: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRangesArgs{
							IpRanges: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
						IncludedIpRanges: &databricks.AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRangesArgs{
							IpRanges: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
				},
			},
		},
	},
	NetworkPolicyId: pulumi.String("string"),
})

    var accountNetworkPolicyResource = new AccountNetworkPolicy("accountNetworkPolicyResource", AccountNetworkPolicyArgs.builder()
    .accountId("string")
    .egress(AccountNetworkPolicyEgressArgs.builder()
        .networkAccess(AccountNetworkPolicyEgressNetworkAccessArgs.builder()
            .restrictionMode("string")
            .allowedInternetDestinations(AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs.builder()
                .destination("string")
                .internetDestinationType("string")
                .build())
            .allowedStorageDestinations(AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs.builder()
                .azureStorageAccount("string")
                .azureStorageService("string")
                .bucketName("string")
                .region("string")
                .storageDestinationType("string")
                .build())
            .policyEnforcement(AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs.builder()
                .dryRunModeProductFilters("string")
                .enforcementMode("string")
                .build())
            .build())
        .build())
    .ingress(AccountNetworkPolicyIngressArgs.builder()
        .publicAccess(AccountNetworkPolicyIngressPublicAccessArgs.builder()
            .restrictionMode("string")
            .allowRules(AccountNetworkPolicyIngressPublicAccessAllowRuleArgs.builder()
                .authentication(AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationArgs.builder()
                    .identities(AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentityArgs.builder()
                        .principalId("string")
                        .principalType("string")
                        .build())
                    .identityType("string")
                    .build())
                .destination(AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationArgs.builder()
                    .allDestinations(false)
                    .workspaceApi(AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApiArgs.builder()
                        .scopes("string")
                        .build())
                    .workspaceUi(AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUiArgs.builder()
                        .allDestinations(false)
                        .build())
                    .build())
                .label("string")
                .origin(AccountNetworkPolicyIngressPublicAccessAllowRuleOriginArgs.builder()
                    .allIpRanges(false)
                    .excludedIpRanges(AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRangesArgs.builder()
                        .ipRanges("string")
                        .build())
                    .includedIpRanges(AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRangesArgs.builder()
                        .ipRanges("string")
                        .build())
                    .build())
                .build())
            .denyRules(AccountNetworkPolicyIngressPublicAccessDenyRuleArgs.builder()
                .authentication(AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationArgs.builder()
                    .identities(AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentityArgs.builder()
                        .principalId("string")
                        .principalType("string")
                        .build())
                    .identityType("string")
                    .build())
                .destination(AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationArgs.builder()
                    .allDestinations(false)
                    .workspaceApi(AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApiArgs.builder()
                        .scopes("string")
                        .build())
                    .workspaceUi(AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUiArgs.builder()
                        .allDestinations(false)
                        .build())
                    .build())
                .label("string")
                .origin(AccountNetworkPolicyIngressPublicAccessDenyRuleOriginArgs.builder()
                    .allIpRanges(false)
                    .excludedIpRanges(AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRangesArgs.builder()
                        .ipRanges("string")
                        .build())
                    .includedIpRanges(AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRangesArgs.builder()
                        .ipRanges("string")
                        .build())
                    .build())
                .build())
            .build())
        .build())
    .ingressDryRun(AccountNetworkPolicyIngressDryRunArgs.builder()
        .publicAccess(AccountNetworkPolicyIngressDryRunPublicAccessArgs.builder()
            .restrictionMode("string")
            .allowRules(AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleArgs.builder()
                .authentication(AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationArgs.builder()
                    .identities(AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentityArgs.builder()
                        .principalId("string")
                        .principalType("string")
                        .build())
                    .identityType("string")
                    .build())
                .destination(AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationArgs.builder()
                    .allDestinations(false)
                    .workspaceApi(AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApiArgs.builder()
                        .scopes("string")
                        .build())
                    .workspaceUi(AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUiArgs.builder()
                        .allDestinations(false)
                        .build())
                    .build())
                .label("string")
                .origin(AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginArgs.builder()
                    .allIpRanges(false)
                    .excludedIpRanges(AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRangesArgs.builder()
                        .ipRanges("string")
                        .build())
                    .includedIpRanges(AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRangesArgs.builder()
                        .ipRanges("string")
                        .build())
                    .build())
                .build())
            .denyRules(AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleArgs.builder()
                .authentication(AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationArgs.builder()
                    .identities(AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentityArgs.builder()
                        .principalId("string")
                        .principalType("string")
                        .build())
                    .identityType("string")
                    .build())
                .destination(AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationArgs.builder()
                    .allDestinations(false)
                    .workspaceApi(AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApiArgs.builder()
                        .scopes("string")
                        .build())
                    .workspaceUi(AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUiArgs.builder()
                        .allDestinations(false)
                        .build())
                    .build())
                .label("string")
                .origin(AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginArgs.builder()
                    .allIpRanges(false)
                    .excludedIpRanges(AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRangesArgs.builder()
                        .ipRanges("string")
                        .build())
                    .includedIpRanges(AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRangesArgs.builder()
                        .ipRanges("string")
                        .build())
                    .build())
                .build())
            .build())
        .build())
    .networkPolicyId("string")
    .build());

    account_network_policy_resource = databricks.AccountNetworkPolicy("accountNetworkPolicyResource",
    account_id="string",
    egress={
        "network_access": {
            "restriction_mode": "string",
            "allowed_internet_destinations": [{
                "destination": "string",
                "internet_destination_type": "string",
            }],
            "allowed_storage_destinations": [{
                "azure_storage_account": "string",
                "azure_storage_service": "string",
                "bucket_name": "string",
                "region": "string",
                "storage_destination_type": "string",
            }],
            "policy_enforcement": {
                "dry_run_mode_product_filters": ["string"],
                "enforcement_mode": "string",
            },
        },
    },
    ingress={
        "public_access": {
            "restriction_mode": "string",
            "allow_rules": [{
                "authentication": {
                    "identities": [{
                        "principal_id": "string",
                        "principal_type": "string",
                    }],
                    "identity_type": "string",
                },
                "destination": {
                    "all_destinations": False,
                    "workspace_api": {
                        "scopes": ["string"],
                    },
                    "workspace_ui": {
                        "all_destinations": False,
                    },
                },
                "label": "string",
                "origin": {
                    "all_ip_ranges": False,
                    "excluded_ip_ranges": {
                        "ip_ranges": ["string"],
                    },
                    "included_ip_ranges": {
                        "ip_ranges": ["string"],
                    },
                },
            }],
            "deny_rules": [{
                "authentication": {
                    "identities": [{
                        "principal_id": "string",
                        "principal_type": "string",
                    }],
                    "identity_type": "string",
                },
                "destination": {
                    "all_destinations": False,
                    "workspace_api": {
                        "scopes": ["string"],
                    },
                    "workspace_ui": {
                        "all_destinations": False,
                    },
                },
                "label": "string",
                "origin": {
                    "all_ip_ranges": False,
                    "excluded_ip_ranges": {
                        "ip_ranges": ["string"],
                    },
                    "included_ip_ranges": {
                        "ip_ranges": ["string"],
                    },
                },
            }],
        },
    },
    ingress_dry_run={
        "public_access": {
            "restriction_mode": "string",
            "allow_rules": [{
                "authentication": {
                    "identities": [{
                        "principal_id": "string",
                        "principal_type": "string",
                    }],
                    "identity_type": "string",
                },
                "destination": {
                    "all_destinations": False,
                    "workspace_api": {
                        "scopes": ["string"],
                    },
                    "workspace_ui": {
                        "all_destinations": False,
                    },
                },
                "label": "string",
                "origin": {
                    "all_ip_ranges": False,
                    "excluded_ip_ranges": {
                        "ip_ranges": ["string"],
                    },
                    "included_ip_ranges": {
                        "ip_ranges": ["string"],
                    },
                },
            }],
            "deny_rules": [{
                "authentication": {
                    "identities": [{
                        "principal_id": "string",
                        "principal_type": "string",
                    }],
                    "identity_type": "string",
                },
                "destination": {
                    "all_destinations": False,
                    "workspace_api": {
                        "scopes": ["string"],
                    },
                    "workspace_ui": {
                        "all_destinations": False,
                    },
                },
                "label": "string",
                "origin": {
                    "all_ip_ranges": False,
                    "excluded_ip_ranges": {
                        "ip_ranges": ["string"],
                    },
                    "included_ip_ranges": {
                        "ip_ranges": ["string"],
                    },
                },
            }],
        },
    },
    network_policy_id="string")

    const accountNetworkPolicyResource = new databricks.AccountNetworkPolicy("accountNetworkPolicyResource", {
    accountId: "string",
    egress: {
        networkAccess: {
            restrictionMode: "string",
            allowedInternetDestinations: [{
                destination: "string",
                internetDestinationType: "string",
            }],
            allowedStorageDestinations: [{
                azureStorageAccount: "string",
                azureStorageService: "string",
                bucketName: "string",
                region: "string",
                storageDestinationType: "string",
            }],
            policyEnforcement: {
                dryRunModeProductFilters: ["string"],
                enforcementMode: "string",
            },
        },
    },
    ingress: {
        publicAccess: {
            restrictionMode: "string",
            allowRules: [{
                authentication: {
                    identities: [{
                        principalId: "string",
                        principalType: "string",
                    }],
                    identityType: "string",
                },
                destination: {
                    allDestinations: false,
                    workspaceApi: {
                        scopes: ["string"],
                    },
                    workspaceUi: {
                        allDestinations: false,
                    },
                },
                label: "string",
                origin: {
                    allIpRanges: false,
                    excludedIpRanges: {
                        ipRanges: ["string"],
                    },
                    includedIpRanges: {
                        ipRanges: ["string"],
                    },
                },
            }],
            denyRules: [{
                authentication: {
                    identities: [{
                        principalId: "string",
                        principalType: "string",
                    }],
                    identityType: "string",
                },
                destination: {
                    allDestinations: false,
                    workspaceApi: {
                        scopes: ["string"],
                    },
                    workspaceUi: {
                        allDestinations: false,
                    },
                },
                label: "string",
                origin: {
                    allIpRanges: false,
                    excludedIpRanges: {
                        ipRanges: ["string"],
                    },
                    includedIpRanges: {
                        ipRanges: ["string"],
                    },
                },
            }],
        },
    },
    ingressDryRun: {
        publicAccess: {
            restrictionMode: "string",
            allowRules: [{
                authentication: {
                    identities: [{
                        principalId: "string",
                        principalType: "string",
                    }],
                    identityType: "string",
                },
                destination: {
                    allDestinations: false,
                    workspaceApi: {
                        scopes: ["string"],
                    },
                    workspaceUi: {
                        allDestinations: false,
                    },
                },
                label: "string",
                origin: {
                    allIpRanges: false,
                    excludedIpRanges: {
                        ipRanges: ["string"],
                    },
                    includedIpRanges: {
                        ipRanges: ["string"],
                    },
                },
            }],
            denyRules: [{
                authentication: {
                    identities: [{
                        principalId: "string",
                        principalType: "string",
                    }],
                    identityType: "string",
                },
                destination: {
                    allDestinations: false,
                    workspaceApi: {
                        scopes: ["string"],
                    },
                    workspaceUi: {
                        allDestinations: false,
                    },
                },
                label: "string",
                origin: {
                    allIpRanges: false,
                    excludedIpRanges: {
                        ipRanges: ["string"],
                    },
                    includedIpRanges: {
                        ipRanges: ["string"],
                    },
                },
            }],
        },
    },
    networkPolicyId: "string",
});

    type: databricks:AccountNetworkPolicy
properties:
    accountId: string
    egress:
        networkAccess:
            allowedInternetDestinations:
                - destination: string
                  internetDestinationType: string
            allowedStorageDestinations:
                - azureStorageAccount: string
                  azureStorageService: string
                  bucketName: string
                  region: string
                  storageDestinationType: string
            policyEnforcement:
                dryRunModeProductFilters:
                    - string
                enforcementMode: string
            restrictionMode: string
    ingress:
        publicAccess:
            allowRules:
                - authentication:
                    identities:
                        - principalId: string
                          principalType: string
                    identityType: string
                  destination:
                    allDestinations: false
                    workspaceApi:
                        scopes:
                            - string
                    workspaceUi:
                        allDestinations: false
                  label: string
                  origin:
                    allIpRanges: false
                    excludedIpRanges:
                        ipRanges:
                            - string
                    includedIpRanges:
                        ipRanges:
                            - string
            denyRules:
                - authentication:
                    identities:
                        - principalId: string
                          principalType: string
                    identityType: string
                  destination:
                    allDestinations: false
                    workspaceApi:
                        scopes:
                            - string
                    workspaceUi:
                        allDestinations: false
                  label: string
                  origin:
                    allIpRanges: false
                    excludedIpRanges:
                        ipRanges:
                            - string
                    includedIpRanges:
                        ipRanges:
                            - string
            restrictionMode: string
    ingressDryRun:
        publicAccess:
            allowRules:
                - authentication:
                    identities:
                        - principalId: string
                          principalType: string
                    identityType: string
                  destination:
                    allDestinations: false
                    workspaceApi:
                        scopes:
                            - string
                    workspaceUi:
                        allDestinations: false
                  label: string
                  origin:
                    allIpRanges: false
                    excludedIpRanges:
                        ipRanges:
                            - string
                    includedIpRanges:
                        ipRanges:
                            - string
            denyRules:
                - authentication:
                    identities:
                        - principalId: string
                          principalType: string
                    identityType: string
                  destination:
                    allDestinations: false
                    workspaceApi:
                        scopes:
                            - string
                    workspaceUi:
                        allDestinations: false
                  label: string
                  origin:
                    allIpRanges: false
                    excludedIpRanges:
                        ipRanges:
                            - string
                    includedIpRanges:
                        ipRanges:
                            - string
            restrictionMode: string
    networkPolicyId: string

    AccountNetworkPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AccountNetworkPolicy resource accepts the following input properties:

    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    Ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    IngressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    The unique identifier for the network policy
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    Ingress AccountNetworkPolicyIngressArgs
    The network policies applying for ingress traffic
    IngressDryRun AccountNetworkPolicyIngressDryRunArgs
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    ingressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    The unique identifier for the network policy
    accountId string
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    ingressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId string
    The unique identifier for the network policy
    account_id str
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngressArgs
    The network policies applying for ingress traffic
    ingress_dry_run AccountNetworkPolicyIngressDryRunArgs
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    network_policy_id str
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress Property Map
    The network policies applying for egress traffic
    ingress Property Map
    The network policies applying for ingress traffic
    ingressDryRun Property Map
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    The unique identifier for the network policy

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AccountNetworkPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AccountNetworkPolicy Resource

    Get an existing AccountNetworkPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AccountNetworkPolicyState, opts?: CustomResourceOptions): AccountNetworkPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        egress: Optional[AccountNetworkPolicyEgressArgs] = None,
        ingress: Optional[AccountNetworkPolicyIngressArgs] = None,
        ingress_dry_run: Optional[AccountNetworkPolicyIngressDryRunArgs] = None,
        network_policy_id: Optional[str] = None) -> AccountNetworkPolicy
    func GetAccountNetworkPolicy(ctx *Context, name string, id IDInput, state *AccountNetworkPolicyState, opts ...ResourceOption) (*AccountNetworkPolicy, error)
    public static AccountNetworkPolicy Get(string name, Input<string> id, AccountNetworkPolicyState? state, CustomResourceOptions? opts = null)
    public static AccountNetworkPolicy get(String name, Output<String> id, AccountNetworkPolicyState state, CustomResourceOptions options)
    resources:  _:    type: databricks:AccountNetworkPolicy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    Ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    IngressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    The unique identifier for the network policy
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    Ingress AccountNetworkPolicyIngressArgs
    The network policies applying for ingress traffic
    IngressDryRun AccountNetworkPolicyIngressDryRunArgs
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    ingressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    The unique identifier for the network policy
    accountId string
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgress
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngress
    The network policies applying for ingress traffic
    ingressDryRun AccountNetworkPolicyIngressDryRun
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId string
    The unique identifier for the network policy
    account_id str
    (string) - The associated account ID for this Network Policy object
    egress AccountNetworkPolicyEgressArgs
    The network policies applying for egress traffic
    ingress AccountNetworkPolicyIngressArgs
    The network policies applying for ingress traffic
    ingress_dry_run AccountNetworkPolicyIngressDryRunArgs
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    network_policy_id str
    The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress Property Map
    The network policies applying for egress traffic
    ingress Property Map
    The network policies applying for ingress traffic
    ingressDryRun Property Map
    The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    The unique identifier for the network policy

    Supporting Types

    AccountNetworkPolicyEgress, AccountNetworkPolicyEgressArgs

    NetworkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    NetworkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    networkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    networkAccess AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    network_access AccountNetworkPolicyEgressNetworkAccess
    The access policy enforced for egress traffic to the internet
    networkAccess Property Map
    The access policy enforced for egress traffic to the internet

    AccountNetworkPolicyEgressNetworkAccess, AccountNetworkPolicyEgressNetworkAccessArgs

    RestrictionMode string
    AllowedInternetDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    RestrictionMode string
    AllowedInternetDestinations []AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations []AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    allowedInternetDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode string
    allowedInternetDestinations AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination[]
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination[]
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restriction_mode str
    allowed_internet_destinations Sequence[AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination]
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_storage_destinations Sequence[AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination]
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policy_enforcement AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    allowedInternetDestinations List<Property Map>
    List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<Property Map>
    List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement Property Map
    Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

    AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination, AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinationArgs

    Destination string
    InternetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    Destination string
    InternetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    internetDestinationType String
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    internetDestinationType string
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination str
    internet_destination_type str
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    internetDestinationType String
    The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

    AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination, AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinationArgs

    AzureStorageAccount string
    The Azure storage account name
    AzureStorageService string
    The Azure storage service type (blob, dfs, etc.)
    BucketName string
    Region string
    StorageDestinationType string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    AzureStorageAccount string
    The Azure storage account name
    AzureStorageService string
    The Azure storage service type (blob, dfs, etc.)
    BucketName string
    Region string
    StorageDestinationType string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    The Azure storage account name
    azureStorageService String
    The Azure storage service type (blob, dfs, etc.)
    bucketName String
    region String
    storageDestinationType String
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount string
    The Azure storage account name
    azureStorageService string
    The Azure storage service type (blob, dfs, etc.)
    bucketName string
    region string
    storageDestinationType string
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azure_storage_account str
    The Azure storage account name
    azure_storage_service str
    The Azure storage service type (blob, dfs, etc.)
    bucket_name str
    region str
    storage_destination_type str
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    The Azure storage account name
    azureStorageService String
    The Azure storage service type (blob, dfs, etc.)
    bucketName String
    region String
    storageDestinationType String
    The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

    AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement, AccountNetworkPolicyEgressNetworkAccessPolicyEnforcementArgs

    DryRunModeProductFilters List<string>
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    DryRunModeProductFilters []string
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters string[]
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode string
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dry_run_mode_product_filters Sequence[str]
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcement_mode str
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

    AccountNetworkPolicyIngress, AccountNetworkPolicyIngressArgs

    AccountNetworkPolicyIngressDryRun, AccountNetworkPolicyIngressDryRunArgs

    AccountNetworkPolicyIngressDryRunPublicAccess, AccountNetworkPolicyIngressDryRunPublicAccessArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRule, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleArgs

    authentication Property Map
    destination Property Map
    label String
    User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApiArgs

    Scopes List<string>
    Scopes []string
    scopes List<String>
    scopes string[]
    scopes Sequence[str]
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginArgs

    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    included_ip_ranges AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    Will not allow IP ranges with private IPs

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges, AccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRule, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleArgs

    authentication Property Map
    destination Property Map
    label String
    User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationArgs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApiArgs

    Scopes List<string>
    Scopes []string
    scopes List<String>
    scopes string[]
    scopes Sequence[str]
    scopes List<String>

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginArgs

    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    included_ip_ranges AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    Will not allow IP ranges with private IPs

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges, AccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressPublicAccess, AccountNetworkPolicyIngressPublicAccessArgs

    AccountNetworkPolicyIngressPublicAccessAllowRule, AccountNetworkPolicyIngressPublicAccessAllowRuleArgs

    authentication Property Map
    destination Property Map
    label String
    User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map

    AccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication, AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity, AccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestination, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationArgs

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApiArgs

    Scopes List<string>
    Scopes []string
    scopes List<String>
    scopes string[]
    scopes Sequence[str]
    scopes List<String>

    AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressPublicAccessAllowRuleOrigin, AccountNetworkPolicyIngressPublicAccessAllowRuleOriginArgs

    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    included_ip_ranges AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    Will not allow IP ranges with private IPs

    AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges, AccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges, AccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressPublicAccessDenyRule, AccountNetworkPolicyIngressPublicAccessDenyRuleArgs

    authentication Property Map
    destination Property Map
    label String
    User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map

    AccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication, AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationArgs

    Identities List<AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity[]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity]
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity, AccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentityArgs

    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId string
    PrincipalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId string
    principalType string
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id str
    principal_type str
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId String
    principalType String
    Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestination, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationArgs

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApiArgs

    Scopes List<string>
    Scopes []string
    scopes List<String>
    scopes string[]
    scopes Sequence[str]
    scopes List<String>

    AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi, AccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUiArgs

    AccountNetworkPolicyIngressPublicAccessDenyRuleOrigin, AccountNetworkPolicyIngressPublicAccessDenyRuleOriginArgs

    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    AllIpRanges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    IncludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    includedIpRanges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    all_ip_ranges bool
    Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    Excluded means: all public IP ranges except this one
    included_ip_ranges AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    Will not allow IP ranges with private IPs
    allIpRanges Boolean
    Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    Will not allow IP ranges with private IPs

    AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges, AccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges, AccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRangesArgs

    IpRanges List<string>
    We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    We only support IPv4 and IPv4 CIDR notation for now

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo
    Viewing docs for Databricks v1.91.1
    published on Friday, May 1, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-databricks
      Try Pulumi Cloud free. Your team will thank you.