1. Packages
  2. Packages
  3. Databricks Provider
  4. API Docs
  5. getAccountNetworkPolicy
Viewing docs for Databricks v1.91.1
published on Friday, May 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

databricks.getAccountNetworkPolicy

databricks logo
Viewing docs for Databricks v1.91.1
published on Friday, May 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

    GA

    This data source can be used to get a single network policy.

    Note This data source can only be used with an account-level provider!

    Example Usage

    Referring to a network policy by id:

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    variables:
  this:
    fn::invoke:
      function: databricks:getAccountNetworkPolicy
      arguments:
        policyId: test

    Using getAccountNetworkPolicy

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAccountNetworkPolicy(args: GetAccountNetworkPolicyArgs, opts?: InvokeOptions): Promise<GetAccountNetworkPolicyResult>
function getAccountNetworkPolicyOutput(args: GetAccountNetworkPolicyOutputArgs, opts?: InvokeOptions): Output<GetAccountNetworkPolicyResult>
    def get_account_network_policy(network_policy_id: Optional[str] = None,
                               opts: Optional[InvokeOptions] = None) -> GetAccountNetworkPolicyResult
def get_account_network_policy_output(network_policy_id: pulumi.Input[Optional[str]] = None,
                               opts: Optional[InvokeOptions] = None) -> Output[GetAccountNetworkPolicyResult]
    func LookupAccountNetworkPolicy(ctx *Context, args *LookupAccountNetworkPolicyArgs, opts ...InvokeOption) (*LookupAccountNetworkPolicyResult, error)
func LookupAccountNetworkPolicyOutput(ctx *Context, args *LookupAccountNetworkPolicyOutputArgs, opts ...InvokeOption) LookupAccountNetworkPolicyResultOutput

    > Note: This function is named LookupAccountNetworkPolicy in the Go SDK.

    public static class GetAccountNetworkPolicy 
{
    public static Task<GetAccountNetworkPolicyResult> InvokeAsync(GetAccountNetworkPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetAccountNetworkPolicyResult> Invoke(GetAccountNetworkPolicyInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetAccountNetworkPolicyResult> getAccountNetworkPolicy(GetAccountNetworkPolicyArgs args, InvokeOptions options)
public static Output<GetAccountNetworkPolicyResult> getAccountNetworkPolicy(GetAccountNetworkPolicyArgs args, InvokeOptions options)

    fn::invoke:
  function: databricks:index/getAccountNetworkPolicy:getAccountNetworkPolicy
  arguments:
    # arguments dictionary

    The following arguments are supported:

    NetworkPolicyId string
    The unique identifier for the network policy
    NetworkPolicyId string
    The unique identifier for the network policy
    networkPolicyId String
    The unique identifier for the network policy
    networkPolicyId string
    The unique identifier for the network policy
    network_policy_id str
    The unique identifier for the network policy
    networkPolicyId String
    The unique identifier for the network policy

    getAccountNetworkPolicy Result

    The following output properties are available:

    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    Id string
    The provider-assigned unique ID for this managed resource.
    Ingress GetAccountNetworkPolicyIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    IngressDryRun GetAccountNetworkPolicyIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    (string) - The unique identifier for the network policy
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    Id string
    The provider-assigned unique ID for this managed resource.
    Ingress GetAccountNetworkPolicyIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    IngressDryRun GetAccountNetworkPolicyIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    NetworkPolicyId string
    (string) - The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    id String
    The provider-assigned unique ID for this managed resource.
    ingress GetAccountNetworkPolicyIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    ingressDryRun GetAccountNetworkPolicyIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    (string) - The unique identifier for the network policy
    accountId string
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    id string
    The provider-assigned unique ID for this managed resource.
    ingress GetAccountNetworkPolicyIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    ingressDryRun GetAccountNetworkPolicyIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId string
    (string) - The unique identifier for the network policy
    account_id str
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPolicyEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    id str
    The provider-assigned unique ID for this managed resource.
    ingress GetAccountNetworkPolicyIngress
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    ingress_dry_run GetAccountNetworkPolicyIngressDryRun
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    network_policy_id str
    (string) - The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress Property Map
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    id String
    The provider-assigned unique ID for this managed resource.
    ingress Property Map
    (CustomerFacingIngressNetworkPolicy) - The network policies applying for ingress traffic
    ingressDryRun Property Map
    (CustomerFacingIngressNetworkPolicy) - The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests
    networkPolicyId String
    (string) - The unique identifier for the network policy

    Supporting Types

    GetAccountNetworkPolicyEgress

    NetworkAccess GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    NetworkAccess GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    network_access GetAccountNetworkPolicyEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess Property Map
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

    GetAccountNetworkPolicyEgressNetworkAccess

    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations []GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations []GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination[]
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination[]
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restriction_mode str
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowed_internet_destinations Sequence[GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination]
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_storage_destinations Sequence[GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination]
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policy_enforcement GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<Property Map>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<Property Map>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement Property Map
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policyEnforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

    GetAccountNetworkPolicyEgressNetworkAccessAllowedInternetDestination

    Destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    Destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination str
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internet_destination_type str
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

    GetAccountNetworkPolicyEgressNetworkAccessAllowedStorageDestination

    AzureStorageAccount string
    (string) - The Azure storage account name
    AzureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    BucketName string
    (string)
    Region string
    (string)
    StorageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    AzureStorageAccount string
    (string) - The Azure storage account name
    AzureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    BucketName string
    (string)
    Region string
    (string)
    StorageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    (string) - The Azure storage account name
    azureStorageService String
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName String
    (string)
    region String
    (string)
    storageDestinationType String
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount string
    (string) - The Azure storage account name
    azureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName string
    (string)
    region string
    (string)
    storageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azure_storage_account str
    (string) - The Azure storage account name
    azure_storage_service str
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucket_name str
    (string)
    region str
    (string)
    storage_destination_type str
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    (string) - The Azure storage account name
    azureStorageService String
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName String
    (string)
    region String
    (string)
    storageDestinationType String
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

    GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement

    DryRunModeProductFilters List<string>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    DryRunModeProductFilters []string
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters string[]
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dry_run_mode_product_filters Sequence[str]
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcement_mode str
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

    GetAccountNetworkPolicyIngress

    PublicAccess GetAccountNetworkPolicyIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    PublicAccess GetAccountNetworkPolicyIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess GetAccountNetworkPolicyIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess GetAccountNetworkPolicyIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    public_access GetAccountNetworkPolicyIngressPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess Property Map
    (CustomerFacingIngressNetworkPolicyPublicAccess)

    GetAccountNetworkPolicyIngressDryRun

    PublicAccess GetAccountNetworkPolicyIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    PublicAccess GetAccountNetworkPolicyIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess GetAccountNetworkPolicyIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess GetAccountNetworkPolicyIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    public_access GetAccountNetworkPolicyIngressDryRunPublicAccess
    (CustomerFacingIngressNetworkPolicyPublicAccess)
    publicAccess Property Map
    (CustomerFacingIngressNetworkPolicyPublicAccess)

    GetAccountNetworkPolicyIngressDryRunPublicAccess

    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowRules List<GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    DenyRules List<GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowRules []GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    DenyRules []GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules List<GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules List<GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule[]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule[]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restriction_mode str
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allow_rules Sequence[GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    deny_rules Sequence[GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

    GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRule

    Authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    Authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label str
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication Property Map
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination Property Map
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

    GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthentication

    Identities List<GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity[]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleAuthenticationIdentity

    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Integer
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId number
    (integer)
    principalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id int
    (integer)
    principal_type str
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Number
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestination

    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    all_destinations bool
    (boolean) - Must be set to true
    workspace_api GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspace_ui GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations

    GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceApi

    Scopes List<string>
    (list of string)
    Scopes []string
    (list of string)
    scopes List<String>
    (list of string)
    scopes string[]
    (list of string)
    scopes Sequence[str]
    (list of string)
    scopes List<String>
    (list of string)

    GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleDestinationWorkspaceUi

    AllDestinations bool
    (boolean) - Must be set to true
    AllDestinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true
    allDestinations boolean
    (boolean) - Must be set to true
    all_destinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true

    GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOrigin

    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    all_ip_ranges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    included_ip_ranges GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

    GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginExcludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPolicyIngressDryRunPublicAccessAllowRuleOriginIncludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRule

    Authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    Authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label str
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication Property Map
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination Property Map
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

    GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthentication

    Identities List<GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity[]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleAuthenticationIdentity

    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Integer
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId number
    (integer)
    principalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id int
    (integer)
    principal_type str
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Number
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestination

    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    all_destinations bool
    (boolean) - Must be set to true
    workspace_api GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspace_ui GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations

    GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceApi

    Scopes List<string>
    (list of string)
    Scopes []string
    (list of string)
    scopes List<String>
    (list of string)
    scopes string[]
    (list of string)
    scopes Sequence[str]
    (list of string)
    scopes List<String>
    (list of string)

    GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleDestinationWorkspaceUi

    AllDestinations bool
    (boolean) - Must be set to true
    AllDestinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true
    allDestinations boolean
    (boolean) - Must be set to true
    all_destinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true

    GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOrigin

    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    all_ip_ranges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    included_ip_ranges GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

    GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginExcludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPolicyIngressDryRunPublicAccessDenyRuleOriginIncludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPolicyIngressPublicAccess

    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowRules List<GetAccountNetworkPolicyIngressPublicAccessAllowRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    DenyRules List<GetAccountNetworkPolicyIngressPublicAccessDenyRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowRules []GetAccountNetworkPolicyIngressPublicAccessAllowRule
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    DenyRules []GetAccountNetworkPolicyIngressPublicAccessDenyRule
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules List<GetAccountNetworkPolicyIngressPublicAccessAllowRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules List<GetAccountNetworkPolicyIngressPublicAccessDenyRule>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules GetAccountNetworkPolicyIngressPublicAccessAllowRule[]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules GetAccountNetworkPolicyIngressPublicAccessDenyRule[]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restriction_mode str
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allow_rules Sequence[GetAccountNetworkPolicyIngressPublicAccessAllowRule]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    deny_rules Sequence[GetAccountNetworkPolicyIngressPublicAccessDenyRule]
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowRules List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)
    denyRules List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyPublicIngressRule)

    GetAccountNetworkPolicyIngressPublicAccessAllowRule

    Authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    Authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label str
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication Property Map
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination Property Map
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

    GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthentication

    Identities List<GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity[]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    GetAccountNetworkPolicyIngressPublicAccessAllowRuleAuthenticationIdentity

    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Integer
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId number
    (integer)
    principalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id int
    (integer)
    principal_type str
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Number
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestination

    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    all_destinations bool
    (boolean) - Must be set to true
    workspace_api GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspace_ui GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations

    GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceApi

    Scopes List<string>
    (list of string)
    Scopes []string
    (list of string)
    scopes List<String>
    (list of string)
    scopes string[]
    (list of string)
    scopes Sequence[str]
    (list of string)
    scopes List<String>
    (list of string)

    GetAccountNetworkPolicyIngressPublicAccessAllowRuleDestinationWorkspaceUi

    AllDestinations bool
    (boolean) - Must be set to true
    AllDestinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true
    allDestinations boolean
    (boolean) - Must be set to true
    all_destinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true

    GetAccountNetworkPolicyIngressPublicAccessAllowRuleOrigin

    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    all_ip_ranges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    included_ip_ranges GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

    GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginExcludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPolicyIngressPublicAccessAllowRuleOriginIncludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPolicyIngressPublicAccessDenyRule

    Authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    Authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    Destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    Label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    Origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label string
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label str
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)
    authentication Property Map
    (CustomerFacingIngressNetworkPolicyAuthentication)
    destination Property Map
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    label String
    (string) - User-provided name for this ingress rule. Helps identify which rule caused a request to be denied or dry-run denied
    origin Property Map
    (CustomerFacingIngressNetworkPolicyPublicRequestOrigin)

    GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthentication

    Identities List<GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    Identities []GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    IdentityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity[]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType string
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities Sequence[GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity]
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identity_type str
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES
    identities List<Property Map>
    (list of CustomerFacingIngressNetworkPolicyAuthenticationIdentity) - Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES
    identityType String
    (string) - Possible values are: IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS, IDENTITY_TYPE_ALL_USERS, IDENTITY_TYPE_SELECTED_IDENTITIES

    GetAccountNetworkPolicyIngressPublicAccessDenyRuleAuthenticationIdentity

    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    PrincipalId int
    (integer)
    PrincipalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Integer
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId number
    (integer)
    principalType string
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principal_id int
    (integer)
    principal_type str
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER
    principalId Number
    (integer)
    principalType String
    (string) - Possible values are: PRINCIPAL_TYPE_SERVICE_PRINCIPAL, PRINCIPAL_TYPE_USER

    GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestination

    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    AllDestinations bool
    (boolean) - Must be set to true
    WorkspaceApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    WorkspaceUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations boolean
    (boolean) - Must be set to true
    workspaceApi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    all_destinations bool
    (boolean) - Must be set to true
    workspace_api GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspace_ui GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations
    allDestinations Boolean
    (boolean) - Must be set to true
    workspaceApi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceApiDestination)
    workspaceUi Property Map
    (CustomerFacingIngressNetworkPolicyWorkspaceUiDestination) - Workspace destinations

    GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceApi

    Scopes List<string>
    (list of string)
    Scopes []string
    (list of string)
    scopes List<String>
    (list of string)
    scopes string[]
    (list of string)
    scopes Sequence[str]
    (list of string)
    scopes List<String>
    (list of string)

    GetAccountNetworkPolicyIngressPublicAccessDenyRuleDestinationWorkspaceUi

    AllDestinations bool
    (boolean) - Must be set to true
    AllDestinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true
    allDestinations boolean
    (boolean) - Must be set to true
    all_destinations bool
    (boolean) - Must be set to true
    allDestinations Boolean
    (boolean) - Must be set to true

    GetAccountNetworkPolicyIngressPublicAccessDenyRuleOrigin

    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    AllIpRanges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    ExcludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    IncludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    all_ip_ranges bool
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excluded_ip_ranges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    included_ip_ranges GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs
    allIpRanges Boolean
    (boolean) - Matches all IPv4 and IPv6 ranges (both public and private)
    excludedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Excluded means: all public IP ranges except this one
    includedIpRanges Property Map
    (CustomerFacingIngressNetworkPolicyIpRanges) - Will not allow IP ranges with private IPs

    GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginExcludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    GetAccountNetworkPolicyIngressPublicAccessDenyRuleOriginIncludedIpRanges

    IpRanges List<string>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    IpRanges []string
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges string[]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ip_ranges Sequence[str]
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now
    ipRanges List<String>
    (list of string) - We only support IPv4 and IPv4 CIDR notation for now

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo
    Viewing docs for Databricks v1.91.1
    published on Friday, May 1, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-databricks
      Try Pulumi Cloud free. Your team will thank you.