Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Private Access (ZPA)
  3. API Docs
  4. ApplicationSegmentBrowserAccess
Zscaler Private Access v0.0.12 published on Tuesday, Jul 30, 2024 by Zscaler
zscaler/pulumi-zpa

zpa.ApplicationSegmentBrowserAccess

Explore with Pulumi AI

zpa logo
Zscaler Private Access v0.0.12 published on Tuesday, Jul 30, 2024 by Zscaler
zscaler/pulumi-zpa

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";
import * as zpa from "@pulumi/zpa";

const testCert = zpa.getBaCertificate({
    name: "sales.acme.com",
});
// ZPA Segment Group resource
const exampleSegmentGroup = new zpa.SegmentGroup("exampleSegmentGroup", {
    description: "Example",
    enabled: true,
});
const exampleAppConnectorGroup = zpa.getAppConnectorGroup({
    name: "AWS-Connector",
});
// ZPA Server Group resource
const exampleServerGroup = new zpa.ServerGroup("exampleServerGroup", {
    description: "Example",
    enabled: true,
    dynamicDiscovery: true,
    appConnectorGroups: [{
        ids: [exampleAppConnectorGroup.then(exampleAppConnectorGroup => exampleAppConnectorGroup.id)],
    }],
});
// Create Browser Access Application
const browserAccessApps = new zpa.ApplicationSegmentBrowserAccess("browserAccessApps", {
    description: "Browser Access Apps",
    enabled: true,
    healthReporting: "ON_ACCESS",
    bypassType: "NEVER",
    tcpPortRanges: [
        "80",
        "80",
    ],
    domainNames: ["sales.acme.com"],
    segmentGroupId: exampleSegmentGroup.id,
    clientlessApps: [{
        name: "sales.acme.com",
        applicationProtocol: "HTTP",
        applicationPort: "80",
        certificateId: testCert.then(testCert => testCert.id),
        trustUntrustedCert: true,
        enabled: true,
        domain: "sales.acme.com",
    }],
    serverGroups: [{
        ids: [exampleServerGroup.id],
    }],
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

test_cert = zpa.get_ba_certificate(name="sales.acme.com")
# ZPA Segment Group resource
example_segment_group = zpa.SegmentGroup("exampleSegmentGroup",
    description="Example",
    enabled=True)
example_app_connector_group = zpa.get_app_connector_group(name="AWS-Connector")
# ZPA Server Group resource
example_server_group = zpa.ServerGroup("exampleServerGroup",
    description="Example",
    enabled=True,
    dynamic_discovery=True,
    app_connector_groups=[zpa.ServerGroupAppConnectorGroupArgs(
        ids=[example_app_connector_group.id],
    )])
# Create Browser Access Application
browser_access_apps = zpa.ApplicationSegmentBrowserAccess("browserAccessApps",
    description="Browser Access Apps",
    enabled=True,
    health_reporting="ON_ACCESS",
    bypass_type="NEVER",
    tcp_port_ranges=[
        "80",
        "80",
    ],
    domain_names=["sales.acme.com"],
    segment_group_id=example_segment_group.id,
    clientless_apps=[zpa.ApplicationSegmentBrowserAccessClientlessAppArgs(
        name="sales.acme.com",
        application_protocol="HTTP",
        application_port="80",
        certificate_id=test_cert.id,
        trust_untrusted_cert=True,
        enabled=True,
        domain="sales.acme.com",
    )],
    server_groups=[zpa.ApplicationSegmentBrowserAccessServerGroupArgs(
        ids=[example_server_group.id],
    )])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		testCert, err := zpa.GetBaCertificate(ctx, &zpa.GetBaCertificateArgs{
			Name: pulumi.StringRef("sales.acme.com"),
		}, nil)
		if err != nil {
			return err
		}
		// ZPA Segment Group resource
		exampleSegmentGroup, err := zpa.NewSegmentGroup(ctx, "exampleSegmentGroup", &zpa.SegmentGroupArgs{
			Description: pulumi.String("Example"),
			Enabled:     pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		exampleAppConnectorGroup, err := zpa.GetAppConnectorGroup(ctx, &zpa.GetAppConnectorGroupArgs{
			Name: pulumi.StringRef("AWS-Connector"),
		}, nil)
		if err != nil {
			return err
		}
		// ZPA Server Group resource
		exampleServerGroup, err := zpa.NewServerGroup(ctx, "exampleServerGroup", &zpa.ServerGroupArgs{
			Description:      pulumi.String("Example"),
			Enabled:          pulumi.Bool(true),
			DynamicDiscovery: pulumi.Bool(true),
			AppConnectorGroups: zpa.ServerGroupAppConnectorGroupArray{
				&zpa.ServerGroupAppConnectorGroupArgs{
					Ids: pulumi.StringArray{
						pulumi.String(exampleAppConnectorGroup.Id),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		// Create Browser Access Application
		_, err = zpa.NewApplicationSegmentBrowserAccess(ctx, "browserAccessApps", &zpa.ApplicationSegmentBrowserAccessArgs{
			Description:     pulumi.String("Browser Access Apps"),
			Enabled:         pulumi.Bool(true),
			HealthReporting: pulumi.String("ON_ACCESS"),
			BypassType:      pulumi.String("NEVER"),
			TcpPortRanges: pulumi.StringArray{
				pulumi.String("80"),
				pulumi.String("80"),
			},
			DomainNames: pulumi.StringArray{
				pulumi.String("sales.acme.com"),
			},
			SegmentGroupId: exampleSegmentGroup.ID(),
			ClientlessApps: zpa.ApplicationSegmentBrowserAccessClientlessAppArray{
				&zpa.ApplicationSegmentBrowserAccessClientlessAppArgs{
					Name:                pulumi.String("sales.acme.com"),
					ApplicationProtocol: pulumi.String("HTTP"),
					ApplicationPort:     pulumi.String("80"),
					CertificateId:       pulumi.String(testCert.Id),
					TrustUntrustedCert:  pulumi.Bool(true),
					Enabled:             pulumi.Bool(true),
					Domain:              pulumi.String("sales.acme.com"),
				},
			},
			ServerGroups: zpa.ApplicationSegmentBrowserAccessServerGroupArray{
				&zpa.ApplicationSegmentBrowserAccessServerGroupArgs{
					Ids: pulumi.StringArray{
						exampleServerGroup.ID(),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = Pulumi.Zpa;
using Zpa = Zscaler.Zpa;

return await Deployment.RunAsync(() => 
{
    var testCert = Zpa.GetBaCertificate.Invoke(new()
    {
        Name = "sales.acme.com",
    });

    // ZPA Segment Group resource
    var exampleSegmentGroup = new Zpa.SegmentGroup("exampleSegmentGroup", new()
    {
        Description = "Example",
        Enabled = true,
    });

    var exampleAppConnectorGroup = Zpa.GetAppConnectorGroup.Invoke(new()
    {
        Name = "AWS-Connector",
    });

    // ZPA Server Group resource
    var exampleServerGroup = new Zpa.ServerGroup("exampleServerGroup", new()
    {
        Description = "Example",
        Enabled = true,
        DynamicDiscovery = true,
        AppConnectorGroups = new[]
        {
            new Zpa.Inputs.ServerGroupAppConnectorGroupArgs
            {
                Ids = new[]
                {
                    exampleAppConnectorGroup.Apply(getAppConnectorGroupResult => getAppConnectorGroupResult.Id),
                },
            },
        },
    });

    // Create Browser Access Application
    var browserAccessApps = new Zpa.ApplicationSegmentBrowserAccess("browserAccessApps", new()
    {
        Description = "Browser Access Apps",
        Enabled = true,
        HealthReporting = "ON_ACCESS",
        BypassType = "NEVER",
        TcpPortRanges = new[]
        {
            "80",
            "80",
        },
        DomainNames = new[]
        {
            "sales.acme.com",
        },
        SegmentGroupId = exampleSegmentGroup.Id,
        ClientlessApps = new[]
        {
            new Zpa.Inputs.ApplicationSegmentBrowserAccessClientlessAppArgs
            {
                Name = "sales.acme.com",
                ApplicationProtocol = "HTTP",
                ApplicationPort = "80",
                CertificateId = testCert.Apply(getBaCertificateResult => getBaCertificateResult.Id),
                TrustUntrustedCert = true,
                Enabled = true,
                Domain = "sales.acme.com",
            },
        },
        ServerGroups = new[]
        {
            new Zpa.Inputs.ApplicationSegmentBrowserAccessServerGroupArgs
            {
                Ids = new[]
                {
                    exampleServerGroup.Id,
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetBaCertificateArgs;
import com.pulumi.zpa.SegmentGroup;
import com.pulumi.zpa.SegmentGroupArgs;
import com.pulumi.zpa.inputs.GetAppConnectorGroupArgs;
import com.pulumi.zpa.ServerGroup;
import com.pulumi.zpa.ServerGroupArgs;
import com.pulumi.zpa.inputs.ServerGroupAppConnectorGroupArgs;
import com.pulumi.zpa.ApplicationSegmentBrowserAccess;
import com.pulumi.zpa.ApplicationSegmentBrowserAccessArgs;
import com.pulumi.zpa.inputs.ApplicationSegmentBrowserAccessClientlessAppArgs;
import com.pulumi.zpa.inputs.ApplicationSegmentBrowserAccessServerGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testCert = ZpaFunctions.getBaCertificate(GetBaCertificateArgs.builder()
            .name("sales.acme.com")
            .build());

        // ZPA Segment Group resource
        var exampleSegmentGroup = new SegmentGroup("exampleSegmentGroup", SegmentGroupArgs.builder()
            .description("Example")
            .enabled(true)
            .build());

        final var exampleAppConnectorGroup = ZpaFunctions.getAppConnectorGroup(GetAppConnectorGroupArgs.builder()
            .name("AWS-Connector")
            .build());

        // ZPA Server Group resource
        var exampleServerGroup = new ServerGroup("exampleServerGroup", ServerGroupArgs.builder()
            .description("Example")
            .enabled(true)
            .dynamicDiscovery(true)
            .appConnectorGroups(ServerGroupAppConnectorGroupArgs.builder()
                .ids(exampleAppConnectorGroup.applyValue(getAppConnectorGroupResult -> getAppConnectorGroupResult.id()))
                .build())
            .build());

        // Create Browser Access Application
        var browserAccessApps = new ApplicationSegmentBrowserAccess("browserAccessApps", ApplicationSegmentBrowserAccessArgs.builder()
            .description("Browser Access Apps")
            .enabled(true)
            .healthReporting("ON_ACCESS")
            .bypassType("NEVER")
            .tcpPortRanges(            
                "80",
                "80")
            .domainNames("sales.acme.com")
            .segmentGroupId(exampleSegmentGroup.id())
            .clientlessApps(ApplicationSegmentBrowserAccessClientlessAppArgs.builder()
                .name("sales.acme.com")
                .applicationProtocol("HTTP")
                .applicationPort("80")
                .certificateId(testCert.applyValue(getBaCertificateResult -> getBaCertificateResult.id()))
                .trustUntrustedCert(true)
                .enabled(true)
                .domain("sales.acme.com")
                .build())
            .serverGroups(ApplicationSegmentBrowserAccessServerGroupArgs.builder()
                .ids(exampleServerGroup.id())
                .build())
            .build());

    }
}

    resources:
  # Create Browser Access Application
  browserAccessApps:
    type: zpa:ApplicationSegmentBrowserAccess
    properties:
      description: Browser Access Apps
      enabled: true
      healthReporting: ON_ACCESS
      bypassType: NEVER
      tcpPortRanges:
        - '80'
        - '80'
      domainNames:
        - sales.acme.com
      segmentGroupId: ${exampleSegmentGroup.id}
      clientlessApps:
        - name: sales.acme.com
          applicationProtocol: HTTP
          applicationPort: '80'
          certificateId: ${testCert.id}
          trustUntrustedCert: true
          enabled: true
          domain: sales.acme.com
      serverGroups:
        - ids:
            - ${exampleServerGroup.id}
  # ZPA Segment Group resource
  exampleSegmentGroup:
    type: zpa:SegmentGroup
    properties:
      description: Example
      enabled: true
  # ZPA Server Group resource
  exampleServerGroup:
    type: zpa:ServerGroup
    properties:
      description: Example
      enabled: true
      dynamicDiscovery: true
      appConnectorGroups:
        - ids:
            - ${exampleAppConnectorGroup.id}
variables:
  testCert:
    fn::invoke:
      Function: zpa:getBaCertificate
      Arguments:
        name: sales.acme.com
  exampleAppConnectorGroup:
    fn::invoke:
      Function: zpa:getAppConnectorGroup
      Arguments:
        name: AWS-Connector

    Create ApplicationSegmentBrowserAccess Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ApplicationSegmentBrowserAccess(name: string, args: ApplicationSegmentBrowserAccessArgs, opts?: CustomResourceOptions);
    @overload
def ApplicationSegmentBrowserAccess(resource_name: str,
                                    args: ApplicationSegmentBrowserAccessArgs,
                                    opts: Optional[ResourceOptions] = None)

@overload
def ApplicationSegmentBrowserAccess(resource_name: str,
                                    opts: Optional[ResourceOptions] = None,
                                    domain_names: Optional[Sequence[str]] = None,
                                    clientless_apps: Optional[Sequence[ApplicationSegmentBrowserAccessClientlessAppArgs]] = None,
                                    segment_group_id: Optional[str] = None,
                                    is_incomplete_dr_config: Optional[bool] = None,
                                    name: Optional[str] = None,
                                    double_encrypt: Optional[bool] = None,
                                    enabled: Optional[bool] = None,
                                    health_check_type: Optional[str] = None,
                                    health_reporting: Optional[str] = None,
                                    icmp_access_type: Optional[str] = None,
                                    ip_anchored: Optional[bool] = None,
                                    is_cname_enabled: Optional[bool] = None,
                                    bypass_type: Optional[str] = None,
                                    match_style: Optional[str] = None,
                                    description: Optional[str] = None,
                                    passive_health_enabled: Optional[bool] = None,
                                    config_space: Optional[str] = None,
                                    segment_group_name: Optional[str] = None,
                                    select_connector_close_to_app: Optional[bool] = None,
                                    server_groups: Optional[Sequence[ApplicationSegmentBrowserAccessServerGroupArgs]] = None,
                                    tcp_keep_alive: Optional[str] = None,
                                    tcp_port_range: Optional[Sequence[ApplicationSegmentBrowserAccessTcpPortRangeArgs]] = None,
                                    tcp_port_ranges: Optional[Sequence[str]] = None,
                                    udp_port_range: Optional[Sequence[ApplicationSegmentBrowserAccessUdpPortRangeArgs]] = None,
                                    udp_port_ranges: Optional[Sequence[str]] = None,
                                    use_in_dr_mode: Optional[bool] = None)
    func NewApplicationSegmentBrowserAccess(ctx *Context, name string, args ApplicationSegmentBrowserAccessArgs, opts ...ResourceOption) (*ApplicationSegmentBrowserAccess, error)
    public ApplicationSegmentBrowserAccess(string name, ApplicationSegmentBrowserAccessArgs args, CustomResourceOptions? opts = null)
    public ApplicationSegmentBrowserAccess(String name, ApplicationSegmentBrowserAccessArgs args)
public ApplicationSegmentBrowserAccess(String name, ApplicationSegmentBrowserAccessArgs args, CustomResourceOptions options)

    type: zpa:ApplicationSegmentBrowserAccess
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ApplicationSegmentBrowserAccessArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ApplicationSegmentBrowserAccessArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ApplicationSegmentBrowserAccessArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ApplicationSegmentBrowserAccessArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ApplicationSegmentBrowserAccessArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var applicationSegmentBrowserAccessResource = new Zpa.ApplicationSegmentBrowserAccess("applicationSegmentBrowserAccessResource", new()
{
    DomainNames = new[]
    {
        "string",
    },
    ClientlessApps = new[]
    {
        new Zpa.Inputs.ApplicationSegmentBrowserAccessClientlessAppArgs
        {
            ApplicationPort = "string",
            ApplicationProtocol = "string",
            Name = "string",
            AllowOptions = false,
            CertificateId = "string",
            Description = "string",
            Domain = "string",
            Enabled = false,
            Id = "string",
            TrustUntrustedCert = false,
        },
    },
    SegmentGroupId = "string",
    IsIncompleteDrConfig = false,
    Name = "string",
    DoubleEncrypt = false,
    Enabled = false,
    HealthCheckType = "string",
    HealthReporting = "string",
    IcmpAccessType = "string",
    IpAnchored = false,
    IsCnameEnabled = false,
    BypassType = "string",
    MatchStyle = "string",
    Description = "string",
    PassiveHealthEnabled = false,
    ConfigSpace = "string",
    SegmentGroupName = "string",
    SelectConnectorCloseToApp = false,
    ServerGroups = new[]
    {
        new Zpa.Inputs.ApplicationSegmentBrowserAccessServerGroupArgs
        {
            Ids = new[]
            {
                "string",
            },
        },
    },
    TcpKeepAlive = "string",
    TcpPortRange = new[]
    {
        new Zpa.Inputs.ApplicationSegmentBrowserAccessTcpPortRangeArgs
        {
            From = "string",
            To = "string",
        },
    },
    TcpPortRanges = new[]
    {
        "string",
    },
    UdpPortRange = new[]
    {
        new Zpa.Inputs.ApplicationSegmentBrowserAccessUdpPortRangeArgs
        {
            From = "string",
            To = "string",
        },
    },
    UdpPortRanges = new[]
    {
        "string",
    },
    UseInDrMode = false,
});

    example, err := zpa.NewApplicationSegmentBrowserAccess(ctx, "applicationSegmentBrowserAccessResource", &zpa.ApplicationSegmentBrowserAccessArgs{
	DomainNames: pulumi.StringArray{
		pulumi.String("string"),
	},
	ClientlessApps: zpa.ApplicationSegmentBrowserAccessClientlessAppArray{
		&zpa.ApplicationSegmentBrowserAccessClientlessAppArgs{
			ApplicationPort:     pulumi.String("string"),
			ApplicationProtocol: pulumi.String("string"),
			Name:                pulumi.String("string"),
			AllowOptions:        pulumi.Bool(false),
			CertificateId:       pulumi.String("string"),
			Description:         pulumi.String("string"),
			Domain:              pulumi.String("string"),
			Enabled:             pulumi.Bool(false),
			Id:                  pulumi.String("string"),
			TrustUntrustedCert:  pulumi.Bool(false),
		},
	},
	SegmentGroupId:            pulumi.String("string"),
	IsIncompleteDrConfig:      pulumi.Bool(false),
	Name:                      pulumi.String("string"),
	DoubleEncrypt:             pulumi.Bool(false),
	Enabled:                   pulumi.Bool(false),
	HealthCheckType:           pulumi.String("string"),
	HealthReporting:           pulumi.String("string"),
	IcmpAccessType:            pulumi.String("string"),
	IpAnchored:                pulumi.Bool(false),
	IsCnameEnabled:            pulumi.Bool(false),
	BypassType:                pulumi.String("string"),
	MatchStyle:                pulumi.String("string"),
	Description:               pulumi.String("string"),
	PassiveHealthEnabled:      pulumi.Bool(false),
	ConfigSpace:               pulumi.String("string"),
	SegmentGroupName:          pulumi.String("string"),
	SelectConnectorCloseToApp: pulumi.Bool(false),
	ServerGroups: zpa.ApplicationSegmentBrowserAccessServerGroupArray{
		&zpa.ApplicationSegmentBrowserAccessServerGroupArgs{
			Ids: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	TcpKeepAlive: pulumi.String("string"),
	TcpPortRange: zpa.ApplicationSegmentBrowserAccessTcpPortRangeArray{
		&zpa.ApplicationSegmentBrowserAccessTcpPortRangeArgs{
			From: pulumi.String("string"),
			To:   pulumi.String("string"),
		},
	},
	TcpPortRanges: pulumi.StringArray{
		pulumi.String("string"),
	},
	UdpPortRange: zpa.ApplicationSegmentBrowserAccessUdpPortRangeArray{
		&zpa.ApplicationSegmentBrowserAccessUdpPortRangeArgs{
			From: pulumi.String("string"),
			To:   pulumi.String("string"),
		},
	},
	UdpPortRanges: pulumi.StringArray{
		pulumi.String("string"),
	},
	UseInDrMode: pulumi.Bool(false),
})

    var applicationSegmentBrowserAccessResource = new ApplicationSegmentBrowserAccess("applicationSegmentBrowserAccessResource", ApplicationSegmentBrowserAccessArgs.builder()
    .domainNames("string")
    .clientlessApps(ApplicationSegmentBrowserAccessClientlessAppArgs.builder()
        .applicationPort("string")
        .applicationProtocol("string")
        .name("string")
        .allowOptions(false)
        .certificateId("string")
        .description("string")
        .domain("string")
        .enabled(false)
        .id("string")
        .trustUntrustedCert(false)
        .build())
    .segmentGroupId("string")
    .isIncompleteDrConfig(false)
    .name("string")
    .doubleEncrypt(false)
    .enabled(false)
    .healthCheckType("string")
    .healthReporting("string")
    .icmpAccessType("string")
    .ipAnchored(false)
    .isCnameEnabled(false)
    .bypassType("string")
    .matchStyle("string")
    .description("string")
    .passiveHealthEnabled(false)
    .configSpace("string")
    .segmentGroupName("string")
    .selectConnectorCloseToApp(false)
    .serverGroups(ApplicationSegmentBrowserAccessServerGroupArgs.builder()
        .ids("string")
        .build())
    .tcpKeepAlive("string")
    .tcpPortRange(ApplicationSegmentBrowserAccessTcpPortRangeArgs.builder()
        .from("string")
        .to("string")
        .build())
    .tcpPortRanges("string")
    .udpPortRange(ApplicationSegmentBrowserAccessUdpPortRangeArgs.builder()
        .from("string")
        .to("string")
        .build())
    .udpPortRanges("string")
    .useInDrMode(false)
    .build());

    application_segment_browser_access_resource = zpa.ApplicationSegmentBrowserAccess("applicationSegmentBrowserAccessResource",
    domain_names=["string"],
    clientless_apps=[{
        "application_port": "string",
        "application_protocol": "string",
        "name": "string",
        "allow_options": False,
        "certificate_id": "string",
        "description": "string",
        "domain": "string",
        "enabled": False,
        "id": "string",
        "trust_untrusted_cert": False,
    }],
    segment_group_id="string",
    is_incomplete_dr_config=False,
    name="string",
    double_encrypt=False,
    enabled=False,
    health_check_type="string",
    health_reporting="string",
    icmp_access_type="string",
    ip_anchored=False,
    is_cname_enabled=False,
    bypass_type="string",
    match_style="string",
    description="string",
    passive_health_enabled=False,
    config_space="string",
    segment_group_name="string",
    select_connector_close_to_app=False,
    server_groups=[{
        "ids": ["string"],
    }],
    tcp_keep_alive="string",
    tcp_port_range=[{
        "from_": "string",
        "to": "string",
    }],
    tcp_port_ranges=["string"],
    udp_port_range=[{
        "from_": "string",
        "to": "string",
    }],
    udp_port_ranges=["string"],
    use_in_dr_mode=False)

    const applicationSegmentBrowserAccessResource = new zpa.ApplicationSegmentBrowserAccess("applicationSegmentBrowserAccessResource", {
    domainNames: ["string"],
    clientlessApps: [{
        applicationPort: "string",
        applicationProtocol: "string",
        name: "string",
        allowOptions: false,
        certificateId: "string",
        description: "string",
        domain: "string",
        enabled: false,
        id: "string",
        trustUntrustedCert: false,
    }],
    segmentGroupId: "string",
    isIncompleteDrConfig: false,
    name: "string",
    doubleEncrypt: false,
    enabled: false,
    healthCheckType: "string",
    healthReporting: "string",
    icmpAccessType: "string",
    ipAnchored: false,
    isCnameEnabled: false,
    bypassType: "string",
    matchStyle: "string",
    description: "string",
    passiveHealthEnabled: false,
    configSpace: "string",
    segmentGroupName: "string",
    selectConnectorCloseToApp: false,
    serverGroups: [{
        ids: ["string"],
    }],
    tcpKeepAlive: "string",
    tcpPortRange: [{
        from: "string",
        to: "string",
    }],
    tcpPortRanges: ["string"],
    udpPortRange: [{
        from: "string",
        to: "string",
    }],
    udpPortRanges: ["string"],
    useInDrMode: false,
});

    type: zpa:ApplicationSegmentBrowserAccess
properties:
    bypassType: string
    clientlessApps:
        - allowOptions: false
          applicationPort: string
          applicationProtocol: string
          certificateId: string
          description: string
          domain: string
          enabled: false
          id: string
          name: string
          trustUntrustedCert: false
    configSpace: string
    description: string
    domainNames:
        - string
    doubleEncrypt: false
    enabled: false
    healthCheckType: string
    healthReporting: string
    icmpAccessType: string
    ipAnchored: false
    isCnameEnabled: false
    isIncompleteDrConfig: false
    matchStyle: string
    name: string
    passiveHealthEnabled: false
    segmentGroupId: string
    segmentGroupName: string
    selectConnectorCloseToApp: false
    serverGroups:
        - ids:
            - string
    tcpKeepAlive: string
    tcpPortRange:
        - from: string
          to: string
    tcpPortRanges:
        - string
    udpPortRange:
        - from: string
          to: string
    udpPortRanges:
        - string
    useInDrMode: false

    ApplicationSegmentBrowserAccess Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ApplicationSegmentBrowserAccess resource accepts the following input properties:

    ClientlessApps List<Zscaler.Zpa.Inputs.ApplicationSegmentBrowserAccessClientlessApp>
    DomainNames List<string>
    List of domains and IPs.
    SegmentGroupId string
    BypassType string
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    ConfigSpace string
    Description string
    Description of the application.
    DoubleEncrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    Enabled bool
    HealthCheckType string
    HealthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    IcmpAccessType string
    IpAnchored bool
    IsCnameEnabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    IsIncompleteDrConfig bool
    MatchStyle string
    Name string
    Name of the application.
    PassiveHealthEnabled bool
    SegmentGroupName string
    SelectConnectorCloseToApp bool
    ServerGroups List<Zscaler.Zpa.Inputs.ApplicationSegmentBrowserAccessServerGroup>
    List of the server group IDs.
    TcpKeepAlive string
    TcpPortRange List<Zscaler.Zpa.Inputs.ApplicationSegmentBrowserAccessTcpPortRange>
    tcp port range
    TcpPortRanges List<string>
    TCP port ranges used to access the app.
    UdpPortRange List<Zscaler.Zpa.Inputs.ApplicationSegmentBrowserAccessUdpPortRange>
    udp port range
    UdpPortRanges List<string>
    UDP port ranges used to access the app.
    UseInDrMode bool
    ClientlessApps []ApplicationSegmentBrowserAccessClientlessAppArgs
    DomainNames []string
    List of domains and IPs.
    SegmentGroupId string
    BypassType string
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    ConfigSpace string
    Description string
    Description of the application.
    DoubleEncrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    Enabled bool
    HealthCheckType string
    HealthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    IcmpAccessType string
    IpAnchored bool
    IsCnameEnabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    IsIncompleteDrConfig bool
    MatchStyle string
    Name string
    Name of the application.
    PassiveHealthEnabled bool
    SegmentGroupName string
    SelectConnectorCloseToApp bool
    ServerGroups []ApplicationSegmentBrowserAccessServerGroupArgs
    List of the server group IDs.
    TcpKeepAlive string
    TcpPortRange []ApplicationSegmentBrowserAccessTcpPortRangeArgs
    tcp port range
    TcpPortRanges []string
    TCP port ranges used to access the app.
    UdpPortRange []ApplicationSegmentBrowserAccessUdpPortRangeArgs
    udp port range
    UdpPortRanges []string
    UDP port ranges used to access the app.
    UseInDrMode bool
    clientlessApps List<ApplicationSegmentBrowserAccessClientlessApp>
    domainNames List<String>
    List of domains and IPs.
    segmentGroupId String
    bypassType String
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    configSpace String
    description String
    Description of the application.
    doubleEncrypt Boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled Boolean
    healthCheckType String
    healthReporting String
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType String
    ipAnchored Boolean
    isCnameEnabled Boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig Boolean
    matchStyle String
    name String
    Name of the application.
    passiveHealthEnabled Boolean
    segmentGroupName String
    selectConnectorCloseToApp Boolean
    serverGroups List<ApplicationSegmentBrowserAccessServerGroup>
    List of the server group IDs.
    tcpKeepAlive String
    tcpPortRange List<ApplicationSegmentBrowserAccessTcpPortRange>
    tcp port range
    tcpPortRanges List<String>
    TCP port ranges used to access the app.
    udpPortRange List<ApplicationSegmentBrowserAccessUdpPortRange>
    udp port range
    udpPortRanges List<String>
    UDP port ranges used to access the app.
    useInDrMode Boolean
    clientlessApps ApplicationSegmentBrowserAccessClientlessApp[]
    domainNames string[]
    List of domains and IPs.
    segmentGroupId string
    bypassType string
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    configSpace string
    description string
    Description of the application.
    doubleEncrypt boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled boolean
    healthCheckType string
    healthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType string
    ipAnchored boolean
    isCnameEnabled boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig boolean
    matchStyle string
    name string
    Name of the application.
    passiveHealthEnabled boolean
    segmentGroupName string
    selectConnectorCloseToApp boolean
    serverGroups ApplicationSegmentBrowserAccessServerGroup[]
    List of the server group IDs.
    tcpKeepAlive string
    tcpPortRange ApplicationSegmentBrowserAccessTcpPortRange[]
    tcp port range
    tcpPortRanges string[]
    TCP port ranges used to access the app.
    udpPortRange ApplicationSegmentBrowserAccessUdpPortRange[]
    udp port range
    udpPortRanges string[]
    UDP port ranges used to access the app.
    useInDrMode boolean
    clientless_apps Sequence[ApplicationSegmentBrowserAccessClientlessAppArgs]
    domain_names Sequence[str]
    List of domains and IPs.
    segment_group_id str
    bypass_type str
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    config_space str
    description str
    Description of the application.
    double_encrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    enabled bool
    health_check_type str
    health_reporting str
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmp_access_type str
    ip_anchored bool
    is_cname_enabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    is_incomplete_dr_config bool
    match_style str
    name str
    Name of the application.
    passive_health_enabled bool
    segment_group_name str
    select_connector_close_to_app bool
    server_groups Sequence[ApplicationSegmentBrowserAccessServerGroupArgs]
    List of the server group IDs.
    tcp_keep_alive str
    tcp_port_range Sequence[ApplicationSegmentBrowserAccessTcpPortRangeArgs]
    tcp port range
    tcp_port_ranges Sequence[str]
    TCP port ranges used to access the app.
    udp_port_range Sequence[ApplicationSegmentBrowserAccessUdpPortRangeArgs]
    udp port range
    udp_port_ranges Sequence[str]
    UDP port ranges used to access the app.
    use_in_dr_mode bool
    clientlessApps List<Property Map>
    domainNames List<String>
    List of domains and IPs.
    segmentGroupId String
    bypassType String
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    configSpace String
    description String
    Description of the application.
    doubleEncrypt Boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled Boolean
    healthCheckType String
    healthReporting String
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType String
    ipAnchored Boolean
    isCnameEnabled Boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig Boolean
    matchStyle String
    name String
    Name of the application.
    passiveHealthEnabled Boolean
    segmentGroupName String
    selectConnectorCloseToApp Boolean
    serverGroups List<Property Map>
    List of the server group IDs.
    tcpKeepAlive String
    tcpPortRange List<Property Map>
    tcp port range
    tcpPortRanges List<String>
    TCP port ranges used to access the app.
    udpPortRange List<Property Map>
    udp port range
    udpPortRanges List<String>
    UDP port ranges used to access the app.
    useInDrMode Boolean

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ApplicationSegmentBrowserAccess resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ApplicationSegmentBrowserAccess Resource

    Get an existing ApplicationSegmentBrowserAccess resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ApplicationSegmentBrowserAccessState, opts?: CustomResourceOptions): ApplicationSegmentBrowserAccess
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        bypass_type: Optional[str] = None,
        clientless_apps: Optional[Sequence[ApplicationSegmentBrowserAccessClientlessAppArgs]] = None,
        config_space: Optional[str] = None,
        description: Optional[str] = None,
        domain_names: Optional[Sequence[str]] = None,
        double_encrypt: Optional[bool] = None,
        enabled: Optional[bool] = None,
        health_check_type: Optional[str] = None,
        health_reporting: Optional[str] = None,
        icmp_access_type: Optional[str] = None,
        ip_anchored: Optional[bool] = None,
        is_cname_enabled: Optional[bool] = None,
        is_incomplete_dr_config: Optional[bool] = None,
        match_style: Optional[str] = None,
        name: Optional[str] = None,
        passive_health_enabled: Optional[bool] = None,
        segment_group_id: Optional[str] = None,
        segment_group_name: Optional[str] = None,
        select_connector_close_to_app: Optional[bool] = None,
        server_groups: Optional[Sequence[ApplicationSegmentBrowserAccessServerGroupArgs]] = None,
        tcp_keep_alive: Optional[str] = None,
        tcp_port_range: Optional[Sequence[ApplicationSegmentBrowserAccessTcpPortRangeArgs]] = None,
        tcp_port_ranges: Optional[Sequence[str]] = None,
        udp_port_range: Optional[Sequence[ApplicationSegmentBrowserAccessUdpPortRangeArgs]] = None,
        udp_port_ranges: Optional[Sequence[str]] = None,
        use_in_dr_mode: Optional[bool] = None) -> ApplicationSegmentBrowserAccess
    func GetApplicationSegmentBrowserAccess(ctx *Context, name string, id IDInput, state *ApplicationSegmentBrowserAccessState, opts ...ResourceOption) (*ApplicationSegmentBrowserAccess, error)
    public static ApplicationSegmentBrowserAccess Get(string name, Input<string> id, ApplicationSegmentBrowserAccessState? state, CustomResourceOptions? opts = null)
    public static ApplicationSegmentBrowserAccess get(String name, Output<String> id, ApplicationSegmentBrowserAccessState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    BypassType string
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    ClientlessApps List<Zscaler.Zpa.Inputs.ApplicationSegmentBrowserAccessClientlessApp>
    ConfigSpace string
    Description string
    Description of the application.
    DomainNames List<string>
    List of domains and IPs.
    DoubleEncrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    Enabled bool
    HealthCheckType string
    HealthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    IcmpAccessType string
    IpAnchored bool
    IsCnameEnabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    IsIncompleteDrConfig bool
    MatchStyle string
    Name string
    Name of the application.
    PassiveHealthEnabled bool
    SegmentGroupId string
    SegmentGroupName string
    SelectConnectorCloseToApp bool
    ServerGroups List<Zscaler.Zpa.Inputs.ApplicationSegmentBrowserAccessServerGroup>
    List of the server group IDs.
    TcpKeepAlive string
    TcpPortRange List<Zscaler.Zpa.Inputs.ApplicationSegmentBrowserAccessTcpPortRange>
    tcp port range
    TcpPortRanges List<string>
    TCP port ranges used to access the app.
    UdpPortRange List<Zscaler.Zpa.Inputs.ApplicationSegmentBrowserAccessUdpPortRange>
    udp port range
    UdpPortRanges List<string>
    UDP port ranges used to access the app.
    UseInDrMode bool
    BypassType string
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    ClientlessApps []ApplicationSegmentBrowserAccessClientlessAppArgs
    ConfigSpace string
    Description string
    Description of the application.
    DomainNames []string
    List of domains and IPs.
    DoubleEncrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    Enabled bool
    HealthCheckType string
    HealthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    IcmpAccessType string
    IpAnchored bool
    IsCnameEnabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    IsIncompleteDrConfig bool
    MatchStyle string
    Name string
    Name of the application.
    PassiveHealthEnabled bool
    SegmentGroupId string
    SegmentGroupName string
    SelectConnectorCloseToApp bool
    ServerGroups []ApplicationSegmentBrowserAccessServerGroupArgs
    List of the server group IDs.
    TcpKeepAlive string
    TcpPortRange []ApplicationSegmentBrowserAccessTcpPortRangeArgs
    tcp port range
    TcpPortRanges []string
    TCP port ranges used to access the app.
    UdpPortRange []ApplicationSegmentBrowserAccessUdpPortRangeArgs
    udp port range
    UdpPortRanges []string
    UDP port ranges used to access the app.
    UseInDrMode bool
    bypassType String
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    clientlessApps List<ApplicationSegmentBrowserAccessClientlessApp>
    configSpace String
    description String
    Description of the application.
    domainNames List<String>
    List of domains and IPs.
    doubleEncrypt Boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled Boolean
    healthCheckType String
    healthReporting String
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType String
    ipAnchored Boolean
    isCnameEnabled Boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig Boolean
    matchStyle String
    name String
    Name of the application.
    passiveHealthEnabled Boolean
    segmentGroupId String
    segmentGroupName String
    selectConnectorCloseToApp Boolean
    serverGroups List<ApplicationSegmentBrowserAccessServerGroup>
    List of the server group IDs.
    tcpKeepAlive String
    tcpPortRange List<ApplicationSegmentBrowserAccessTcpPortRange>
    tcp port range
    tcpPortRanges List<String>
    TCP port ranges used to access the app.
    udpPortRange List<ApplicationSegmentBrowserAccessUdpPortRange>
    udp port range
    udpPortRanges List<String>
    UDP port ranges used to access the app.
    useInDrMode Boolean
    bypassType string
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    clientlessApps ApplicationSegmentBrowserAccessClientlessApp[]
    configSpace string
    description string
    Description of the application.
    domainNames string[]
    List of domains and IPs.
    doubleEncrypt boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled boolean
    healthCheckType string
    healthReporting string
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType string
    ipAnchored boolean
    isCnameEnabled boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig boolean
    matchStyle string
    name string
    Name of the application.
    passiveHealthEnabled boolean
    segmentGroupId string
    segmentGroupName string
    selectConnectorCloseToApp boolean
    serverGroups ApplicationSegmentBrowserAccessServerGroup[]
    List of the server group IDs.
    tcpKeepAlive string
    tcpPortRange ApplicationSegmentBrowserAccessTcpPortRange[]
    tcp port range
    tcpPortRanges string[]
    TCP port ranges used to access the app.
    udpPortRange ApplicationSegmentBrowserAccessUdpPortRange[]
    udp port range
    udpPortRanges string[]
    UDP port ranges used to access the app.
    useInDrMode boolean
    bypass_type str
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    clientless_apps Sequence[ApplicationSegmentBrowserAccessClientlessAppArgs]
    config_space str
    description str
    Description of the application.
    domain_names Sequence[str]
    List of domains and IPs.
    double_encrypt bool
    Whether Double Encryption is enabled or disabled for the app.
    enabled bool
    health_check_type str
    health_reporting str
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmp_access_type str
    ip_anchored bool
    is_cname_enabled bool
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    is_incomplete_dr_config bool
    match_style str
    name str
    Name of the application.
    passive_health_enabled bool
    segment_group_id str
    segment_group_name str
    select_connector_close_to_app bool
    server_groups Sequence[ApplicationSegmentBrowserAccessServerGroupArgs]
    List of the server group IDs.
    tcp_keep_alive str
    tcp_port_range Sequence[ApplicationSegmentBrowserAccessTcpPortRangeArgs]
    tcp port range
    tcp_port_ranges Sequence[str]
    TCP port ranges used to access the app.
    udp_port_range Sequence[ApplicationSegmentBrowserAccessUdpPortRangeArgs]
    udp port range
    udp_port_ranges Sequence[str]
    UDP port ranges used to access the app.
    use_in_dr_mode bool
    bypassType String
    Indicates whether users can bypass ZPA to access applications. Default: NEVER. Supported values: ALWAYS, NEVER, ON_NET. The value NEVER indicates the use of the client forwarding policy.
    clientlessApps List<Property Map>
    configSpace String
    description String
    Description of the application.
    domainNames List<String>
    List of domains and IPs.
    doubleEncrypt Boolean
    Whether Double Encryption is enabled or disabled for the app.
    enabled Boolean
    healthCheckType String
    healthReporting String
    Whether health reporting for the app is Continuous or On Access. Supported values: NONE, ON_ACCESS, CONTINUOUS.
    icmpAccessType String
    ipAnchored Boolean
    isCnameEnabled Boolean
    Indicates if the Zscaler Client Connector (formerly Zscaler App or Z App) receives CNAME DNS records from the connectors.
    isIncompleteDrConfig Boolean
    matchStyle String
    name String
    Name of the application.
    passiveHealthEnabled Boolean
    segmentGroupId String
    segmentGroupName String
    selectConnectorCloseToApp Boolean
    serverGroups List<Property Map>
    List of the server group IDs.
    tcpKeepAlive String
    tcpPortRange List<Property Map>
    tcp port range
    tcpPortRanges List<String>
    TCP port ranges used to access the app.
    udpPortRange List<Property Map>
    udp port range
    udpPortRanges List<String>
    UDP port ranges used to access the app.
    useInDrMode Boolean

    Supporting Types

    ApplicationSegmentBrowserAccessClientlessApp, ApplicationSegmentBrowserAccessClientlessAppArgs

    ApplicationPort string
    Port for the BA app.
    ApplicationProtocol string
    Protocol for the BA app.
    Name string
    AllowOptions bool
    If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.
    CertificateId string
    ID of the BA certificate.
    Description string
    Domain string
    Domain name or IP address of the BA app.
    Enabled bool
    Id string
    TrustUntrustedCert bool
    Indicates whether Use Untrusted Certificates is enabled or disabled for a BA app.
    ApplicationPort string
    Port for the BA app.
    ApplicationProtocol string
    Protocol for the BA app.
    Name string
    AllowOptions bool
    If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.
    CertificateId string
    ID of the BA certificate.
    Description string
    Domain string
    Domain name or IP address of the BA app.
    Enabled bool
    Id string
    TrustUntrustedCert bool
    Indicates whether Use Untrusted Certificates is enabled or disabled for a BA app.
    applicationPort String
    Port for the BA app.
    applicationProtocol String
    Protocol for the BA app.
    name String
    allowOptions Boolean
    If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.
    certificateId String
    ID of the BA certificate.
    description String
    domain String
    Domain name or IP address of the BA app.
    enabled Boolean
    id String
    trustUntrustedCert Boolean
    Indicates whether Use Untrusted Certificates is enabled or disabled for a BA app.
    applicationPort string
    Port for the BA app.
    applicationProtocol string
    Protocol for the BA app.
    name string
    allowOptions boolean
    If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.
    certificateId string
    ID of the BA certificate.
    description string
    domain string
    Domain name or IP address of the BA app.
    enabled boolean
    id string
    trustUntrustedCert boolean
    Indicates whether Use Untrusted Certificates is enabled or disabled for a BA app.
    application_port str
    Port for the BA app.
    application_protocol str
    Protocol for the BA app.
    name str
    allow_options bool
    If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.
    certificate_id str
    ID of the BA certificate.
    description str
    domain str
    Domain name or IP address of the BA app.
    enabled bool
    id str
    trust_untrusted_cert bool
    Indicates whether Use Untrusted Certificates is enabled or disabled for a BA app.
    applicationPort String
    Port for the BA app.
    applicationProtocol String
    Protocol for the BA app.
    name String
    allowOptions Boolean
    If you want ZPA to forward unauthenticated HTTP preflight OPTIONS requests from the browser to the app.
    certificateId String
    ID of the BA certificate.
    description String
    domain String
    Domain name or IP address of the BA app.
    enabled Boolean
    id String
    trustUntrustedCert Boolean
    Indicates whether Use Untrusted Certificates is enabled or disabled for a BA app.

    ApplicationSegmentBrowserAccessServerGroup, ApplicationSegmentBrowserAccessServerGroupArgs

    Ids List<string>
    Ids []string
    ids List<String>
    ids string[]
    ids Sequence[str]
    ids List<String>

    ApplicationSegmentBrowserAccessTcpPortRange, ApplicationSegmentBrowserAccessTcpPortRangeArgs

    From string
    To string
    From string
    To string
    from String
    to String
    from string
    to string
    from_ str
    to str
    from String
    to String

    ApplicationSegmentBrowserAccessUdpPortRange, ApplicationSegmentBrowserAccessUdpPortRangeArgs

    From string
    To string
    From string
    To string
    from String
    to String
    from string
    to string
    from_ str
    to str
    from String
    to String

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZPA configurations into Terraform-compliant HashiCorp Configuration Language.

    Visit

    zpa_application_segment_browser_access Application Segment Browser Access can be imported by using <BROWSER ACCESS ID> or <<BROWSER ACCESS NAME> as the import ID.

    For example:

    $ pulumi import zpa:index/applicationSegmentBrowserAccess:ApplicationSegmentBrowserAccess example <browser_access_id>.

    or

    $ pulumi import zpa:index/applicationSegmentBrowserAccess:ApplicationSegmentBrowserAccess example <browser_access_name>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zpa zscaler/pulumi-zpa
    License
    MIT
    Notes
    This Pulumi package is based on the zpa Terraform Provider.
    zpa logo
    Zscaler Private Access v0.0.12 published on Tuesday, Jul 30, 2024 by Zscaler
    zscaler/pulumi-zpa