1. Packages
  2. Packages
  3. Databricks Provider
  4. API Docs
  5. getAccountNetworkPolicies
Viewing docs for Databricks v1.91.1
published on Friday, May 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

databricks.getAccountNetworkPolicies

databricks logo
Viewing docs for Databricks v1.91.1
published on Friday, May 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

    GA

    This data source can be used to fetch the list of network policies.

    Note This data source can only be used with an account-level provider!

    Example Usage

    Getting a list of all network policies:

    import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const all = databricks.getAccountNetworkPolicies({});

    import pulumi
import pulumi_databricks as databricks

all = databricks.get_account_network_policies()

    package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := databricks.GetAccountNetworkPolicies(ctx, map[string]interface{}{}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var all = Databricks.Index.GetAccountNetworkPolicies.Invoke();

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.DatabricksFunctions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var all = DatabricksFunctions.getAccountNetworkPolicies(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference);

    }
}

    variables:
  all:
    fn::invoke:
      function: databricks:getAccountNetworkPolicies
      arguments: {}

    Using getAccountNetworkPolicies

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAccountNetworkPolicies(opts?: InvokeOptions): Promise<GetAccountNetworkPoliciesResult>
function getAccountNetworkPoliciesOutput(opts?: InvokeOptions): Output<GetAccountNetworkPoliciesResult>
    def get_account_network_policies(opts: Optional[InvokeOptions] = None) -> GetAccountNetworkPoliciesResult
def get_account_network_policies_output(opts: Optional[InvokeOptions] = None) -> Output[GetAccountNetworkPoliciesResult]
    func GetAccountNetworkPolicies(ctx *Context, opts ...InvokeOption) (*GetAccountNetworkPoliciesResult, error)
func GetAccountNetworkPoliciesOutput(ctx *Context, opts ...InvokeOption) GetAccountNetworkPoliciesResultOutput

    > Note: This function is named GetAccountNetworkPolicies in the Go SDK.

    public static class GetAccountNetworkPolicies 
{
    public static Task<GetAccountNetworkPoliciesResult> InvokeAsync(InvokeOptions? opts = null)
    public static Output<GetAccountNetworkPoliciesResult> Invoke(InvokeOptions? opts = null)
}
    public static CompletableFuture<GetAccountNetworkPoliciesResult> getAccountNetworkPolicies(InvokeOptions options)
public static Output<GetAccountNetworkPoliciesResult> getAccountNetworkPolicies(InvokeOptions options)

    fn::invoke:
  function: databricks:index/getAccountNetworkPolicies:getAccountNetworkPolicies
  arguments:
    # arguments dictionary

    getAccountNetworkPolicies Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    Items List<GetAccountNetworkPoliciesItem>
    Id string
    The provider-assigned unique ID for this managed resource.
    Items []GetAccountNetworkPoliciesItem
    id String
    The provider-assigned unique ID for this managed resource.
    items List<GetAccountNetworkPoliciesItem>
    id string
    The provider-assigned unique ID for this managed resource.
    items GetAccountNetworkPoliciesItem[]
    id str
    The provider-assigned unique ID for this managed resource.
    items Sequence[GetAccountNetworkPoliciesItem]
    id String
    The provider-assigned unique ID for this managed resource.
    items List<Property Map>

    Supporting Types

    GetAccountNetworkPoliciesItem

    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    Ingress GetAccountNetworkPoliciesItemIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    IngressDryRun GetAccountNetworkPoliciesItemIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    (string) - The unique identifier for the network policy
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    Ingress GetAccountNetworkPoliciesItemIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    IngressDryRun GetAccountNetworkPoliciesItemIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    (string) - The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    ingress GetAccountNetworkPoliciesItemIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    ingressDryRun GetAccountNetworkPoliciesItemIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    (string) - The unique identifier for the network policy
    accountId string
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    ingress GetAccountNetworkPoliciesItemIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    ingressDryRun GetAccountNetworkPoliciesItemIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId string
    (string) - The unique identifier for the network policy
    account_id str
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    ingress GetAccountNetworkPoliciesItemIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    ingress_dry_run GetAccountNetworkPoliciesItemIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    network_policy_id str
    (string) - The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress Property Map
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    ingress Property Map
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    ingressDryRun Property Map
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    (string) - The unique identifier for the network policy

    GetAccountNetworkPoliciesItemEgress

    NetworkAccess GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    NetworkAccess GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    network_access GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess Property Map
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

    GetAccountNetworkPoliciesItemEgressNetworkAccess

    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations List<GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations List<GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations []GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations []GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination[]
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination[]
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restriction_mode str
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowed_internet_destinations Sequence[GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination]
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_storage_destinations Sequence[GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination]
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policy_enforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<Property Map>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<Property Map>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement Property Map
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

    GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination

    Destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    Destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination str
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internet_destination_type str
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

    GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination

    AzureStorageAccount string
    (string) - The Azure storage account name
    AzureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    BucketName string
    (string)
    Region string
    (string)
    StorageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    AzureStorageAccount string
    (string) - The Azure storage account name
    AzureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    BucketName string
    (string)
    Region string
    (string)
    StorageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    (string) - The Azure storage account name
    azureStorageService String
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName String
    (string)
    region String
    (string)
    storageDestinationType String
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount string
    (string) - The Azure storage account name
    azureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName string
    (string)
    region string
    (string)
    storageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azure_storage_account str
    (string) - The Azure storage account name
    azure_storage_service str
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucket_name str
    (string)
    region str
    (string)
    storage_destination_type str
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    (string) - The Azure storage account name
    azureStorageService String
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName String
    (string)
    region String
    (string)
    storageDestinationType String
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

    GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement

    DryRunModeProductFilters List<string>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    DryRunModeProductFilters []string
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters string[]
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dry_run_mode_product_filters Sequence[str]
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcement_mode str
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

    GetAccountNetworkPoliciesItemIngress

    PublicAccess GetAccountNetworkPoliciesItemIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    PublicAccess GetAccountNetworkPoliciesItemIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess GetAccountNetworkPoliciesItemIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess GetAccountNetworkPoliciesItemIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    public_access GetAccountNetworkPoliciesItemIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess Property Map
    (CustomerFacingIngressNetworkPolicyPublicAccess)

    GetAccountNetworkPoliciesItemIngressDryRun

    PublicAccess GetAccountNetworkPoliciesItemIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    PublicAccess GetAccountNetworkPoliciesItemIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess GetAccountNetworkPoliciesItemIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess GetAccountNetworkPoliciesItemIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    public_access GetAccountNetworkPoliciesItemIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess Property Map
    (CustomerFacingIngressNetworkPolicyPublicAccess)

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccess

    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowRules List<GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    DenyRules List<GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowRules []GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRule
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    DenyRules []GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRule
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules List<GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules List<GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRule[]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRule[]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restriction_mode str
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allow_rules Sequence[GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRule]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    deny_rules Sequence[GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRule]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRule

    Authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    Authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label str
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication Property Map
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination Property Map
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthentication

    Identities List<GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthenticationIdentity
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthenticationIdentity[]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthenticationIdentity]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleAuthenticationIdentity

    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Integer
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId number
    (integer)
    principalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id int
    (integer)
    principal_type str
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Number
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestination

    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    all_destinations bool
    (boolean) - Must be set to true
    workspace_api GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspace_ui GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi

    Scopes List<string>
    (list of string)
    Scopes []string
    (list of string)
    scopes List<String>
    (list of string)
    scopes string[]
    (list of string)
    scopes Sequence[str]
    (list of string)
    scopes List<String>
    (list of string)

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi

    AllDestinations bool
    (boolean) - Must be set to true
    AllDestinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true
    allDestinations boolean
    (boolean) - Must be set to true
    all_destinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOrigin

    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    all_ip_ranges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    included_ip_ranges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRule

    Authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    Authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label str
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication Property Map
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination Property Map
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthentication

    Identities List<GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthenticationIdentity
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthenticationIdentity[]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthenticationIdentity]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleAuthenticationIdentity

    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Integer
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId number
    (integer)
    principalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id int
    (integer)
    principal_type str
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Number
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestination

    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    all_destinations bool
    (boolean) - Must be set to true
    workspace_api GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspace_ui GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi

    Scopes List<string>
    (list of string)
    Scopes []string
    (list of string)
    scopes List<String>
    (list of string)
    scopes string[]
    (list of string)
    scopes Sequence[str]
    (list of string)
    scopes List<String>
    (list of string)

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi

    AllDestinations bool
    (boolean) - Must be set to true
    AllDestinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true
    allDestinations boolean
    (boolean) - Must be set to true
    all_destinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOrigin

    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    all_ip_ranges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    included_ip_ranges GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPoliciesItemIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPoliciesItemIngressPublicAccess

    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowRules List<GetAccountNetworkPoliciesItemIngressPublicAccessAllowRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    DenyRules List<GetAccountNetworkPoliciesItemIngressPublicAccessDenyRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowRules []GetAccountNetworkPoliciesItemIngressPublicAccessAllowRule
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    DenyRules []GetAccountNetworkPoliciesItemIngressPublicAccessDenyRule
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules List<GetAccountNetworkPoliciesItemIngressPublicAccessAllowRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules List<GetAccountNetworkPoliciesItemIngressPublicAccessDenyRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules GetAccountNetworkPoliciesItemIngressPublicAccessAllowRule[]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules GetAccountNetworkPoliciesItemIngressPublicAccessDenyRule[]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restriction_mode str
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allow_rules Sequence[GetAccountNetworkPoliciesItemIngressPublicAccessAllowRule]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    deny_rules Sequence[GetAccountNetworkPoliciesItemIngressPublicAccessDenyRule]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

    GetAccountNetworkPoliciesItemIngressPublicAccessAllowRule

    Authentication GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    Authentication GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label str
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication Property Map
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination Property Map
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

    GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthentication

    Identities List<GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthenticationIdentity
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthenticationIdentity[]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthenticationIdentity]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleAuthenticationIdentity

    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Integer
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId number
    (integer)
    principalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id int
    (integer)
    principal_type str
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Number
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestination

    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    all_destinations bool
    (boolean) - Must be set to true
    workspace_api GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspace_ui GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations

    GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceApi

    Scopes List<string>
    (list of string)
    Scopes []string
    (list of string)
    scopes List<String>
    (list of string)
    scopes string[]
    (list of string)
    scopes Sequence[str]
    (list of string)
    scopes List<String>
    (list of string)

    GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleDestinationWorkspaceUi

    AllDestinations bool
    (boolean) - Must be set to true
    AllDestinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true
    allDestinations boolean
    (boolean) - Must be set to true
    all_destinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true

    GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOrigin

    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    all_ip_ranges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    included_ip_ranges GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

    GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginExcludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPoliciesItemIngressPublicAccessAllowRuleOriginIncludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPoliciesItemIngressPublicAccessDenyRule

    Authentication GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    Authentication GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label str
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication Property Map
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination Property Map
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

    GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthentication

    Identities List<GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthenticationIdentity
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthenticationIdentity[]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthenticationIdentity]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleAuthenticationIdentity

    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Integer
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId number
    (integer)
    principalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id int
    (integer)
    principal_type str
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Number
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestination

    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    all_destinations bool
    (boolean) - Must be set to true
    workspace_api GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspace_ui GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations

    GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceApi

    Scopes List<string>
    (list of string)
    Scopes []string
    (list of string)
    scopes List<String>
    (list of string)
    scopes string[]
    (list of string)
    scopes Sequence[str]
    (list of string)
    scopes List<String>
    (list of string)

    GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleDestinationWorkspaceUi

    AllDestinations bool
    (boolean) - Must be set to true
    AllDestinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true
    allDestinations boolean
    (boolean) - Must be set to true
    all_destinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true

    GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOrigin

    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    all_ip_ranges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    included_ip_ranges GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

    GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginExcludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPoliciesItemIngressPublicAccessDenyRuleOriginIncludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo
    Viewing docs for Databricks v1.91.1
    published on Friday, May 1, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-databricks
      Try Pulumi Cloud free. Your team will thank you.