scm.Zone

Strata Cloud Manager v0.4.3, Nov 8 25

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as scm from "@pulumi/scm";

//
// Creates an empty layer3 zone
//
const scmLayer3Zone = new scm.Zone("scm_layer3_zone", {
    name: "scm_layer3_zone",
    folder: "ngfw-shared",
    network: {
        layer3s: [],
    },
});
//
// Creates an empty layer2 zone
//
const scmLayer2Zone = new scm.Zone("scm_layer2_zone", {
    name: "scm_layer2_zone",
    folder: "ngfw-shared",
    network: {
        layer2s: [],
    },
});
//
// Creates an empty tap zone
//
const scmTapZone = new scm.Zone("scm_tap_zone", {
    name: "scm_tap_zone",
    folder: "ngfw-shared",
    network: {
        taps: [],
    },
});
//
// Creates an empty vwire zone
//
const scmVwireZone = new scm.Zone("scm_vwire_zone", {
    name: "scm_vwire_zone",
    folder: "ngfw-shared",
    network: {
        virtualWires: [],
    },
});
//
// Creates a layer3 zone
// Requires Interface $scm_l3_interface to exist
//
const scmLayer3ZoneComplex = new scm.Zone("scm_layer3_zone_complex", {
    name: "scm_layer3_zone_complex",
    folder: "ngfw-shared",
    network: {
        layer3s: ["$scm_l3_interface"],
        zoneProtectionProfile: "best-practice",
        enablePacketBufferProtection: true,
    },
    enableDeviceIdentification: true,
    deviceAcl: {
        includeLists: ["198.18.1.0/24"],
        excludeLists: ["198.18.2.0/24"],
    },
    enableUserIdentification: true,
    userAcl: {
        includeLists: ["198.18.3.0/24"],
        excludeLists: ["198.18.4.0/24"],
    },
});

import pulumi
import pulumi_scm as scm

#
# Creates an empty layer3 zone
#
scm_layer3_zone = scm.Zone("scm_layer3_zone",
    name="scm_layer3_zone",
    folder="ngfw-shared",
    network={
        "layer3s": [],
    })
#
# Creates an empty layer2 zone
#
scm_layer2_zone = scm.Zone("scm_layer2_zone",
    name="scm_layer2_zone",
    folder="ngfw-shared",
    network={
        "layer2s": [],
    })
#
# Creates an empty tap zone
#
scm_tap_zone = scm.Zone("scm_tap_zone",
    name="scm_tap_zone",
    folder="ngfw-shared",
    network={
        "taps": [],
    })
#
# Creates an empty vwire zone
#
scm_vwire_zone = scm.Zone("scm_vwire_zone",
    name="scm_vwire_zone",
    folder="ngfw-shared",
    network={
        "virtual_wires": [],
    })
#
# Creates a layer3 zone
# Requires Interface $scm_l3_interface to exist
#
scm_layer3_zone_complex = scm.Zone("scm_layer3_zone_complex",
    name="scm_layer3_zone_complex",
    folder="ngfw-shared",
    network={
        "layer3s": ["$scm_l3_interface"],
        "zone_protection_profile": "best-practice",
        "enable_packet_buffer_protection": True,
    },
    enable_device_identification=True,
    device_acl={
        "include_lists": ["198.18.1.0/24"],
        "exclude_lists": ["198.18.2.0/24"],
    },
    enable_user_identification=True,
    user_acl={
        "include_lists": ["198.18.3.0/24"],
        "exclude_lists": ["198.18.4.0/24"],
    })

package main

import (
	"github.com/pulumi/pulumi-scm/sdk/go/scm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Creates an empty layer3 zone
		_, err := scm.NewZone(ctx, "scm_layer3_zone", &scm.ZoneArgs{
			Name:   pulumi.String("scm_layer3_zone"),
			Folder: pulumi.String("ngfw-shared"),
			Network: &scm.ZoneNetworkArgs{
				Layer3s: pulumi.StringArray{},
			},
		})
		if err != nil {
			return err
		}
		// Creates an empty layer2 zone
		_, err = scm.NewZone(ctx, "scm_layer2_zone", &scm.ZoneArgs{
			Name:   pulumi.String("scm_layer2_zone"),
			Folder: pulumi.String("ngfw-shared"),
			Network: &scm.ZoneNetworkArgs{
				Layer2s: pulumi.StringArray{},
			},
		})
		if err != nil {
			return err
		}
		// Creates an empty tap zone
		_, err = scm.NewZone(ctx, "scm_tap_zone", &scm.ZoneArgs{
			Name:   pulumi.String("scm_tap_zone"),
			Folder: pulumi.String("ngfw-shared"),
			Network: &scm.ZoneNetworkArgs{
				Taps: pulumi.StringArray{},
			},
		})
		if err != nil {
			return err
		}
		// Creates an empty vwire zone
		_, err = scm.NewZone(ctx, "scm_vwire_zone", &scm.ZoneArgs{
			Name:   pulumi.String("scm_vwire_zone"),
			Folder: pulumi.String("ngfw-shared"),
			Network: &scm.ZoneNetworkArgs{
				VirtualWires: pulumi.StringArray{},
			},
		})
		if err != nil {
			return err
		}
		// Creates a layer3 zone
		// Requires Interface $scm_l3_interface to exist
		_, err = scm.NewZone(ctx, "scm_layer3_zone_complex", &scm.ZoneArgs{
			Name:   pulumi.String("scm_layer3_zone_complex"),
			Folder: pulumi.String("ngfw-shared"),
			Network: &scm.ZoneNetworkArgs{
				Layer3s: pulumi.StringArray{
					pulumi.String("$scm_l3_interface"),
				},
				ZoneProtectionProfile:        pulumi.String("best-practice"),
				EnablePacketBufferProtection: pulumi.Bool(true),
			},
			EnableDeviceIdentification: pulumi.Bool(true),
			DeviceAcl: &scm.ZoneDeviceAclArgs{
				IncludeLists: pulumi.StringArray{
					pulumi.String("198.18.1.0/24"),
				},
				ExcludeLists: pulumi.StringArray{
					pulumi.String("198.18.2.0/24"),
				},
			},
			EnableUserIdentification: pulumi.Bool(true),
			UserAcl: &scm.ZoneUserAclArgs{
				IncludeLists: pulumi.StringArray{
					pulumi.String("198.18.3.0/24"),
				},
				ExcludeLists: pulumi.StringArray{
					pulumi.String("198.18.4.0/24"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scm = Pulumi.Scm;

return await Deployment.RunAsync(() => 
{
    //
    // Creates an empty layer3 zone
    //
    var scmLayer3Zone = new Scm.Zone("scm_layer3_zone", new()
    {
        Name = "scm_layer3_zone",
        Folder = "ngfw-shared",
        Network = new Scm.Inputs.ZoneNetworkArgs
        {
            Layer3s = new() { },
        },
    });

    //
    // Creates an empty layer2 zone
    //
    var scmLayer2Zone = new Scm.Zone("scm_layer2_zone", new()
    {
        Name = "scm_layer2_zone",
        Folder = "ngfw-shared",
        Network = new Scm.Inputs.ZoneNetworkArgs
        {
            Layer2s = new() { },
        },
    });

    //
    // Creates an empty tap zone
    //
    var scmTapZone = new Scm.Zone("scm_tap_zone", new()
    {
        Name = "scm_tap_zone",
        Folder = "ngfw-shared",
        Network = new Scm.Inputs.ZoneNetworkArgs
        {
            Taps = new() { },
        },
    });

    //
    // Creates an empty vwire zone
    //
    var scmVwireZone = new Scm.Zone("scm_vwire_zone", new()
    {
        Name = "scm_vwire_zone",
        Folder = "ngfw-shared",
        Network = new Scm.Inputs.ZoneNetworkArgs
        {
            VirtualWires = new() { },
        },
    });

    //
    // Creates a layer3 zone
    // Requires Interface $scm_l3_interface to exist
    //
    var scmLayer3ZoneComplex = new Scm.Zone("scm_layer3_zone_complex", new()
    {
        Name = "scm_layer3_zone_complex",
        Folder = "ngfw-shared",
        Network = new Scm.Inputs.ZoneNetworkArgs
        {
            Layer3s = new[]
            {
                "$scm_l3_interface",
            },
            ZoneProtectionProfile = "best-practice",
            EnablePacketBufferProtection = true,
        },
        EnableDeviceIdentification = true,
        DeviceAcl = new Scm.Inputs.ZoneDeviceAclArgs
        {
            IncludeLists = new[]
            {
                "198.18.1.0/24",
            },
            ExcludeLists = new[]
            {
                "198.18.2.0/24",
            },
        },
        EnableUserIdentification = true,
        UserAcl = new Scm.Inputs.ZoneUserAclArgs
        {
            IncludeLists = new[]
            {
                "198.18.3.0/24",
            },
            ExcludeLists = new[]
            {
                "198.18.4.0/24",
            },
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scm.Zone;
import com.pulumi.scm.ZoneArgs;
import com.pulumi.scm.inputs.ZoneNetworkArgs;
import com.pulumi.scm.inputs.ZoneDeviceAclArgs;
import com.pulumi.scm.inputs.ZoneUserAclArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        //
        // Creates an empty layer3 zone
        //
        var scmLayer3Zone = new Zone("scmLayer3Zone", ZoneArgs.builder()
            .name("scm_layer3_zone")
            .folder("ngfw-shared")
            .network(ZoneNetworkArgs.builder()
                .layer3s()
                .build())
            .build());

        //
        // Creates an empty layer2 zone
        //
        var scmLayer2Zone = new Zone("scmLayer2Zone", ZoneArgs.builder()
            .name("scm_layer2_zone")
            .folder("ngfw-shared")
            .network(ZoneNetworkArgs.builder()
                .layer2s()
                .build())
            .build());

        //
        // Creates an empty tap zone
        //
        var scmTapZone = new Zone("scmTapZone", ZoneArgs.builder()
            .name("scm_tap_zone")
            .folder("ngfw-shared")
            .network(ZoneNetworkArgs.builder()
                .taps()
                .build())
            .build());

        //
        // Creates an empty vwire zone
        //
        var scmVwireZone = new Zone("scmVwireZone", ZoneArgs.builder()
            .name("scm_vwire_zone")
            .folder("ngfw-shared")
            .network(ZoneNetworkArgs.builder()
                .virtualWires()
                .build())
            .build());

        //
        // Creates a layer3 zone
        // Requires Interface $scm_l3_interface to exist
        //
        var scmLayer3ZoneComplex = new Zone("scmLayer3ZoneComplex", ZoneArgs.builder()
            .name("scm_layer3_zone_complex")
            .folder("ngfw-shared")
            .network(ZoneNetworkArgs.builder()
                .layer3s("$scm_l3_interface")
                .zoneProtectionProfile("best-practice")
                .enablePacketBufferProtection(true)
                .build())
            .enableDeviceIdentification(true)
            .deviceAcl(ZoneDeviceAclArgs.builder()
                .includeLists("198.18.1.0/24")
                .excludeLists("198.18.2.0/24")
                .build())
            .enableUserIdentification(true)
            .userAcl(ZoneUserAclArgs.builder()
                .includeLists("198.18.3.0/24")
                .excludeLists("198.18.4.0/24")
                .build())
            .build());

    }
}

resources:
  #
  # Creates an empty layer3 zone
  #
  scmLayer3Zone:
    type: scm:Zone
    name: scm_layer3_zone
    properties:
      name: scm_layer3_zone
      folder: ngfw-shared
      network:
        layer3s: []
  #
  # Creates an empty layer2 zone
  #
  scmLayer2Zone:
    type: scm:Zone
    name: scm_layer2_zone
    properties:
      name: scm_layer2_zone
      folder: ngfw-shared
      network:
        layer2s: []
  #
  # Creates an empty tap zone
  #
  scmTapZone:
    type: scm:Zone
    name: scm_tap_zone
    properties:
      name: scm_tap_zone
      folder: ngfw-shared
      network:
        taps: []
  #
  # Creates an empty vwire zone
  #
  scmVwireZone:
    type: scm:Zone
    name: scm_vwire_zone
    properties:
      name: scm_vwire_zone
      folder: ngfw-shared
      network:
        virtualWires: []
  #
  # Creates a layer3 zone
  # Requires Interface $scm_l3_interface to exist
  #
  scmLayer3ZoneComplex:
    type: scm:Zone
    name: scm_layer3_zone_complex
    properties:
      name: scm_layer3_zone_complex
      folder: ngfw-shared
      network:
        layer3s:
          - $scm_l3_interface
        zoneProtectionProfile: best-practice
        enablePacketBufferProtection: true
      enableDeviceIdentification: true
      deviceAcl:
        includeLists:
          - 198.18.1.0/24
        excludeLists:
          - 198.18.2.0/24
      enableUserIdentification: true
      userAcl:
        includeLists:
          - 198.18.3.0/24
        excludeLists:
          - 198.18.4.0/24

Create Zone Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Zone(name: string, args?: ZoneArgs, opts?: CustomResourceOptions);

@overload
def Zone(resource_name: str,
         args: Optional[ZoneArgs] = None,
         opts: Optional[ResourceOptions] = None)

@overload
def Zone(resource_name: str,
         opts: Optional[ResourceOptions] = None,
         device: Optional[str] = None,
         device_acl: Optional[ZoneDeviceAclArgs] = None,
         dos_log_setting: Optional[str] = None,
         dos_profile: Optional[str] = None,
         enable_device_identification: Optional[bool] = None,
         enable_user_identification: Optional[bool] = None,
         folder: Optional[str] = None,
         name: Optional[str] = None,
         network: Optional[ZoneNetworkArgs] = None,
         snippet: Optional[str] = None,
         user_acl: Optional[ZoneUserAclArgs] = None)

func NewZone(ctx *Context, name string, args *ZoneArgs, opts ...ResourceOption) (*Zone, error)

public Zone(string name, ZoneArgs? args = null, CustomResourceOptions? opts = null)

public Zone(String name, ZoneArgs args)
public Zone(String name, ZoneArgs args, CustomResourceOptions options)

type: scm:Zone
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args ZoneArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ZoneArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ZoneArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ZoneArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ZoneArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var zoneResource = new Scm.Zone("zoneResource", new()
{
    Device = "string",
    DeviceAcl = new Scm.Inputs.ZoneDeviceAclArgs
    {
        ExcludeLists = new[]
        {
            "string",
        },
        IncludeLists = new[]
        {
            "string",
        },
    },
    DosLogSetting = "string",
    DosProfile = "string",
    EnableDeviceIdentification = false,
    EnableUserIdentification = false,
    Folder = "string",
    Name = "string",
    Network = new Scm.Inputs.ZoneNetworkArgs
    {
        EnablePacketBufferProtection = false,
        Externals = new[]
        {
            "string",
        },
        Layer2s = new[]
        {
            "string",
        },
        Layer3s = new[]
        {
            "string",
        },
        LogSetting = "string",
        Taps = new[]
        {
            "string",
        },
        Tunnel = null,
        VirtualWires = new[]
        {
            "string",
        },
        ZoneProtectionProfile = "string",
    },
    Snippet = "string",
    UserAcl = new Scm.Inputs.ZoneUserAclArgs
    {
        ExcludeLists = new[]
        {
            "string",
        },
        IncludeLists = new[]
        {
            "string",
        },
    },
});

example, err := scm.NewZone(ctx, "zoneResource", &scm.ZoneArgs{
	Device: pulumi.String("string"),
	DeviceAcl: &scm.ZoneDeviceAclArgs{
		ExcludeLists: pulumi.StringArray{
			pulumi.String("string"),
		},
		IncludeLists: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	DosLogSetting:              pulumi.String("string"),
	DosProfile:                 pulumi.String("string"),
	EnableDeviceIdentification: pulumi.Bool(false),
	EnableUserIdentification:   pulumi.Bool(false),
	Folder:                     pulumi.String("string"),
	Name:                       pulumi.String("string"),
	Network: &scm.ZoneNetworkArgs{
		EnablePacketBufferProtection: pulumi.Bool(false),
		Externals: pulumi.StringArray{
			pulumi.String("string"),
		},
		Layer2s: pulumi.StringArray{
			pulumi.String("string"),
		},
		Layer3s: pulumi.StringArray{
			pulumi.String("string"),
		},
		LogSetting: pulumi.String("string"),
		Taps: pulumi.StringArray{
			pulumi.String("string"),
		},
		Tunnel: &scm.ZoneNetworkTunnelArgs{},
		VirtualWires: pulumi.StringArray{
			pulumi.String("string"),
		},
		ZoneProtectionProfile: pulumi.String("string"),
	},
	Snippet: pulumi.String("string"),
	UserAcl: &scm.ZoneUserAclArgs{
		ExcludeLists: pulumi.StringArray{
			pulumi.String("string"),
		},
		IncludeLists: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
})

var zoneResource = new Zone("zoneResource", ZoneArgs.builder()
    .device("string")
    .deviceAcl(ZoneDeviceAclArgs.builder()
        .excludeLists("string")
        .includeLists("string")
        .build())
    .dosLogSetting("string")
    .dosProfile("string")
    .enableDeviceIdentification(false)
    .enableUserIdentification(false)
    .folder("string")
    .name("string")
    .network(ZoneNetworkArgs.builder()
        .enablePacketBufferProtection(false)
        .externals("string")
        .layer2s("string")
        .layer3s("string")
        .logSetting("string")
        .taps("string")
        .tunnel(ZoneNetworkTunnelArgs.builder()
            .build())
        .virtualWires("string")
        .zoneProtectionProfile("string")
        .build())
    .snippet("string")
    .userAcl(ZoneUserAclArgs.builder()
        .excludeLists("string")
        .includeLists("string")
        .build())
    .build());

zone_resource = scm.Zone("zoneResource",
    device="string",
    device_acl={
        "exclude_lists": ["string"],
        "include_lists": ["string"],
    },
    dos_log_setting="string",
    dos_profile="string",
    enable_device_identification=False,
    enable_user_identification=False,
    folder="string",
    name="string",
    network={
        "enable_packet_buffer_protection": False,
        "externals": ["string"],
        "layer2s": ["string"],
        "layer3s": ["string"],
        "log_setting": "string",
        "taps": ["string"],
        "tunnel": {},
        "virtual_wires": ["string"],
        "zone_protection_profile": "string",
    },
    snippet="string",
    user_acl={
        "exclude_lists": ["string"],
        "include_lists": ["string"],
    })

const zoneResource = new scm.Zone("zoneResource", {
    device: "string",
    deviceAcl: {
        excludeLists: ["string"],
        includeLists: ["string"],
    },
    dosLogSetting: "string",
    dosProfile: "string",
    enableDeviceIdentification: false,
    enableUserIdentification: false,
    folder: "string",
    name: "string",
    network: {
        enablePacketBufferProtection: false,
        externals: ["string"],
        layer2s: ["string"],
        layer3s: ["string"],
        logSetting: "string",
        taps: ["string"],
        tunnel: {},
        virtualWires: ["string"],
        zoneProtectionProfile: "string",
    },
    snippet: "string",
    userAcl: {
        excludeLists: ["string"],
        includeLists: ["string"],
    },
});

type: scm:Zone
properties:
    device: string
    deviceAcl:
        excludeLists:
            - string
        includeLists:
            - string
    dosLogSetting: string
    dosProfile: string
    enableDeviceIdentification: false
    enableUserIdentification: false
    folder: string
    name: string
    network:
        enablePacketBufferProtection: false
        externals:
            - string
        layer2s:
            - string
        layer3s:
            - string
        logSetting: string
        taps:
            - string
        tunnel: {}
        virtualWires:
            - string
        zoneProtectionProfile: string
    snippet: string
    userAcl:
        excludeLists:
            - string
        includeLists:
            - string

Zone Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Zone resource accepts the following input properties:

Device string: The device in which the resource is defined
DeviceAcl ZoneDeviceAcl: Device acl
DosLogSetting string: Dos log setting
DosProfile string: Dos profile
EnableDeviceIdentification bool: Enable device identification
EnableUserIdentification bool: Enable user identification
Folder string: Folder
Name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
Network ZoneNetwork: Network
Snippet string: The snippet in which the resource is defined
UserAcl ZoneUserAcl: User acl

Device string: The device in which the resource is defined
DeviceAcl ZoneDeviceAclArgs: Device acl
DosLogSetting string: Dos log setting
DosProfile string: Dos profile
EnableDeviceIdentification bool: Enable device identification
EnableUserIdentification bool: Enable user identification
Folder string: Folder
Name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
Network ZoneNetworkArgs: Network
Snippet string: The snippet in which the resource is defined
UserAcl ZoneUserAclArgs: User acl

device String: The device in which the resource is defined
deviceAcl ZoneDeviceAcl: Device acl
dosLogSetting String: Dos log setting
dosProfile String: Dos profile
enableDeviceIdentification Boolean: Enable device identification
enableUserIdentification Boolean: Enable user identification
folder String: Folder
name String: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
network ZoneNetwork: Network
snippet String: The snippet in which the resource is defined
userAcl ZoneUserAcl: User acl

device string: The device in which the resource is defined
deviceAcl ZoneDeviceAcl: Device acl
dosLogSetting string: Dos log setting
dosProfile string: Dos profile
enableDeviceIdentification boolean: Enable device identification
enableUserIdentification boolean: Enable user identification
folder string: Folder
name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
network ZoneNetwork: Network
snippet string: The snippet in which the resource is defined
userAcl ZoneUserAcl: User acl

device str: The device in which the resource is defined
device_acl ZoneDeviceAclArgs: Device acl
dos_log_setting str: Dos log setting
dos_profile str: Dos profile
enable_device_identification bool: Enable device identification
enable_user_identification bool: Enable user identification
folder str: Folder
name str: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
network ZoneNetworkArgs: Network
snippet str: The snippet in which the resource is defined
user_acl ZoneUserAclArgs: User acl

device String: The device in which the resource is defined
deviceAcl Property Map: Device acl
dosLogSetting String: Dos log setting
dosProfile String: Dos profile
enableDeviceIdentification Boolean: Enable device identification
enableUserIdentification Boolean: Enable user identification
folder String: Folder
name String: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
network Property Map: Network
snippet String: The snippet in which the resource is defined
userAcl Property Map: User acl

Outputs

All input properties are implicitly available as output properties. Additionally, the Zone resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
Tfid string

Id string: The provider-assigned unique ID for this managed resource.
Tfid string

id String: The provider-assigned unique ID for this managed resource.
tfid String

id string: The provider-assigned unique ID for this managed resource.
tfid string

id str: The provider-assigned unique ID for this managed resource.
tfid str

id String: The provider-assigned unique ID for this managed resource.
tfid String

Look up Existing Zone Resource

Get an existing Zone resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ZoneState, opts?: CustomResourceOptions): Zone

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        device: Optional[str] = None,
        device_acl: Optional[ZoneDeviceAclArgs] = None,
        dos_log_setting: Optional[str] = None,
        dos_profile: Optional[str] = None,
        enable_device_identification: Optional[bool] = None,
        enable_user_identification: Optional[bool] = None,
        folder: Optional[str] = None,
        name: Optional[str] = None,
        network: Optional[ZoneNetworkArgs] = None,
        snippet: Optional[str] = None,
        tfid: Optional[str] = None,
        user_acl: Optional[ZoneUserAclArgs] = None) -> Zone

func GetZone(ctx *Context, name string, id IDInput, state *ZoneState, opts ...ResourceOption) (*Zone, error)

public static Zone Get(string name, Input<string> id, ZoneState? state, CustomResourceOptions? opts = null)

public static Zone get(String name, Output<String> id, ZoneState state, CustomResourceOptions options)

resources:  _:    type: scm:Zone    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Device string: The device in which the resource is defined
DeviceAcl ZoneDeviceAcl: Device acl
DosLogSetting string: Dos log setting
DosProfile string: Dos profile
EnableDeviceIdentification bool: Enable device identification
EnableUserIdentification bool: Enable user identification
Folder string: Folder
Name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
Network ZoneNetwork: Network
Snippet string: The snippet in which the resource is defined
Tfid string
UserAcl ZoneUserAcl: User acl

Device string: The device in which the resource is defined
DeviceAcl ZoneDeviceAclArgs: Device acl
DosLogSetting string: Dos log setting
DosProfile string: Dos profile
EnableDeviceIdentification bool: Enable device identification
EnableUserIdentification bool: Enable user identification
Folder string: Folder
Name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
Network ZoneNetworkArgs: Network
Snippet string: The snippet in which the resource is defined
Tfid string
UserAcl ZoneUserAclArgs: User acl

device String: The device in which the resource is defined
deviceAcl ZoneDeviceAcl: Device acl
dosLogSetting String: Dos log setting
dosProfile String: Dos profile
enableDeviceIdentification Boolean: Enable device identification
enableUserIdentification Boolean: Enable user identification
folder String: Folder
name String: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
network ZoneNetwork: Network
snippet String: The snippet in which the resource is defined
tfid String
userAcl ZoneUserAcl: User acl

device string: The device in which the resource is defined
deviceAcl ZoneDeviceAcl: Device acl
dosLogSetting string: Dos log setting
dosProfile string: Dos profile
enableDeviceIdentification boolean: Enable device identification
enableUserIdentification boolean: Enable user identification
folder string: Folder
name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
network ZoneNetwork: Network
snippet string: The snippet in which the resource is defined
tfid string
userAcl ZoneUserAcl: User acl

device str: The device in which the resource is defined
device_acl ZoneDeviceAclArgs: Device acl
dos_log_setting str: Dos log setting
dos_profile str: Dos profile
enable_device_identification bool: Enable device identification
enable_user_identification bool: Enable user identification
folder str: Folder
name str: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
network ZoneNetworkArgs: Network
snippet str: The snippet in which the resource is defined
tfid str
user_acl ZoneUserAclArgs: User acl

device String: The device in which the resource is defined
deviceAcl Property Map: Device acl
dosLogSetting String: Dos log setting
dosProfile String: Dos profile
enableDeviceIdentification Boolean: Enable device identification
enableUserIdentification Boolean: Enable user identification
folder String: Folder
name String: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
network Property Map: Network
snippet String: The snippet in which the resource is defined
tfid String
userAcl Property Map: User acl

Supporting Types

ZoneDeviceAcl, ZoneDeviceAclArgs

ExcludeLists List<string>: Exclude list
IncludeLists List<string>: Include list

ExcludeLists []string: Exclude list
IncludeLists []string: Include list

excludeLists List<String>: Exclude list
includeLists List<String>: Include list

excludeLists string[]: Exclude list
includeLists string[]: Include list

exclude_lists Sequence[str]: Exclude list
include_lists Sequence[str]: Include list

excludeLists List<String>: Exclude list
includeLists List<String>: Include list

ZoneNetwork, ZoneNetworkArgs

EnablePacketBufferProtection bool: Enable packet buffer protection
Externals List<string>: External
Layer2s List<string>: Layer2
Layer3s List<string>: Layer3
LogSetting string: Log setting
Taps List<string>: Tap
Tunnel ZoneNetworkTunnel: Tunnel
VirtualWires List<string>: Virtual wire
ZoneProtectionProfile string: Zone protection profile

EnablePacketBufferProtection bool: Enable packet buffer protection
Externals []string: External
Layer2s []string: Layer2
Layer3s []string: Layer3
LogSetting string: Log setting
Taps []string: Tap
Tunnel ZoneNetworkTunnel: Tunnel
VirtualWires []string: Virtual wire
ZoneProtectionProfile string: Zone protection profile

enablePacketBufferProtection Boolean: Enable packet buffer protection
externals List<String>: External
layer2s List<String>: Layer2
layer3s List<String>: Layer3
logSetting String: Log setting
taps List<String>: Tap
tunnel ZoneNetworkTunnel: Tunnel
virtualWires List<String>: Virtual wire
zoneProtectionProfile String: Zone protection profile

enablePacketBufferProtection boolean: Enable packet buffer protection
externals string[]: External
layer2s string[]: Layer2
layer3s string[]: Layer3
logSetting string: Log setting
taps string[]: Tap
tunnel ZoneNetworkTunnel: Tunnel
virtualWires string[]: Virtual wire
zoneProtectionProfile string: Zone protection profile

enable_packet_buffer_protection bool: Enable packet buffer protection
externals Sequence[str]: External
layer2s Sequence[str]: Layer2
layer3s Sequence[str]: Layer3
log_setting str: Log setting
taps Sequence[str]: Tap
tunnel ZoneNetworkTunnel: Tunnel
virtual_wires Sequence[str]: Virtual wire
zone_protection_profile str: Zone protection profile

enablePacketBufferProtection Boolean: Enable packet buffer protection
externals List<String>: External
layer2s List<String>: Layer2
layer3s List<String>: Layer3
logSetting String: Log setting
taps List<String>: Tap
tunnel Property Map: Tunnel
virtualWires List<String>: Virtual wire
zoneProtectionProfile String: Zone protection profile

ZoneUserAcl, ZoneUserAclArgs

ExcludeLists List<string>: Exclude list
IncludeLists List<string>: Include list

ExcludeLists []string: Exclude list
IncludeLists []string: Include list

excludeLists List<String>: Exclude list
includeLists List<String>: Include list

excludeLists string[]: Exclude list
includeLists string[]: Include list

exclude_lists Sequence[str]: Exclude list
include_lists Sequence[str]: Include list

excludeLists List<String>: Exclude list
includeLists List<String>: Include list

Package Details

Repository: scm pulumi/pulumi-scm
License: Apache-2.0
Notes: This Pulumi package is based on the scm Terraform Provider.

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

On this page

On this page

Example Usage

Create Zone Resource

Constructor syntax

Parameters

Constructor example

Zone Resource Properties

Inputs

Outputs

Look up Existing Zone Resource

Supporting Types

ZoneDeviceAcl, ZoneDeviceAclArgs

ZoneNetwork, ZoneNetworkArgs

ZoneUserAcl, ZoneUserAclArgs

Package Details

On this page

On this page