Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. NetworkFirewall
  5. getNetworkFirewallPolicyDecryptionRules
Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi
pulumi/pulumi-oci

oci.NetworkFirewall.getNetworkFirewallPolicyDecryptionRules

Explore with Pulumi AI

oci logo
Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi
pulumi/pulumi-oci

    This data source provides the list of Network Firewall Policy Decryption Rules in Oracle Cloud Infrastructure Network Firewall service.

    Returns a list of Decryption Rule for the Network Firewall Policy.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testNetworkFirewallPolicyDecryptionRules = oci.NetworkFirewall.getNetworkFirewallPolicyDecryptionRules({
    networkFirewallPolicyId: testNetworkFirewallPolicy.id,
    decryptionRulePriorityOrder: networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder,
    displayName: networkFirewallPolicyDecryptionRuleDisplayName,
});

    import pulumi
import pulumi_oci as oci

test_network_firewall_policy_decryption_rules = oci.NetworkFirewall.get_network_firewall_policy_decryption_rules(network_firewall_policy_id=test_network_firewall_policy["id"],
    decryption_rule_priority_order=network_firewall_policy_decryption_rule_decryption_rule_priority_order,
    display_name=network_firewall_policy_decryption_rule_display_name)

    package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/networkfirewall"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := networkfirewall.GetNetworkFirewallPolicyDecryptionRules(ctx, &networkfirewall.GetNetworkFirewallPolicyDecryptionRulesArgs{
			NetworkFirewallPolicyId:     testNetworkFirewallPolicy.Id,
			DecryptionRulePriorityOrder: pulumi.IntRef(networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder),
			DisplayName:                 pulumi.StringRef(networkFirewallPolicyDecryptionRuleDisplayName),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testNetworkFirewallPolicyDecryptionRules = Oci.NetworkFirewall.GetNetworkFirewallPolicyDecryptionRules.Invoke(new()
    {
        NetworkFirewallPolicyId = testNetworkFirewallPolicy.Id,
        DecryptionRulePriorityOrder = networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder,
        DisplayName = networkFirewallPolicyDecryptionRuleDisplayName,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.NetworkFirewall.NetworkFirewallFunctions;
import com.pulumi.oci.NetworkFirewall.inputs.GetNetworkFirewallPolicyDecryptionRulesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testNetworkFirewallPolicyDecryptionRules = NetworkFirewallFunctions.getNetworkFirewallPolicyDecryptionRules(GetNetworkFirewallPolicyDecryptionRulesArgs.builder()
            .networkFirewallPolicyId(testNetworkFirewallPolicy.id())
            .decryptionRulePriorityOrder(networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder)
            .displayName(networkFirewallPolicyDecryptionRuleDisplayName)
            .build());

    }
}

    variables:
  testNetworkFirewallPolicyDecryptionRules:
    fn::invoke:
      function: oci:NetworkFirewall:getNetworkFirewallPolicyDecryptionRules
      arguments:
        networkFirewallPolicyId: ${testNetworkFirewallPolicy.id}
        decryptionRulePriorityOrder: ${networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder}
        displayName: ${networkFirewallPolicyDecryptionRuleDisplayName}

    Using getNetworkFirewallPolicyDecryptionRules

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getNetworkFirewallPolicyDecryptionRules(args: GetNetworkFirewallPolicyDecryptionRulesArgs, opts?: InvokeOptions): Promise<GetNetworkFirewallPolicyDecryptionRulesResult>
function getNetworkFirewallPolicyDecryptionRulesOutput(args: GetNetworkFirewallPolicyDecryptionRulesOutputArgs, opts?: InvokeOptions): Output<GetNetworkFirewallPolicyDecryptionRulesResult>
    def get_network_firewall_policy_decryption_rules(decryption_rule_priority_order: Optional[int] = None,
                                                 display_name: Optional[str] = None,
                                                 filters: Optional[Sequence[GetNetworkFirewallPolicyDecryptionRulesFilter]] = None,
                                                 network_firewall_policy_id: Optional[str] = None,
                                                 opts: Optional[InvokeOptions] = None) -> GetNetworkFirewallPolicyDecryptionRulesResult
def get_network_firewall_policy_decryption_rules_output(decryption_rule_priority_order: Optional[pulumi.Input[int]] = None,
                                                 display_name: Optional[pulumi.Input[str]] = None,
                                                 filters: Optional[pulumi.Input[Sequence[pulumi.Input[GetNetworkFirewallPolicyDecryptionRulesFilterArgs]]]] = None,
                                                 network_firewall_policy_id: Optional[pulumi.Input[str]] = None,
                                                 opts: Optional[InvokeOptions] = None) -> Output[GetNetworkFirewallPolicyDecryptionRulesResult]
    func GetNetworkFirewallPolicyDecryptionRules(ctx *Context, args *GetNetworkFirewallPolicyDecryptionRulesArgs, opts ...InvokeOption) (*GetNetworkFirewallPolicyDecryptionRulesResult, error)
func GetNetworkFirewallPolicyDecryptionRulesOutput(ctx *Context, args *GetNetworkFirewallPolicyDecryptionRulesOutputArgs, opts ...InvokeOption) GetNetworkFirewallPolicyDecryptionRulesResultOutput

    > Note: This function is named GetNetworkFirewallPolicyDecryptionRules in the Go SDK.

    public static class GetNetworkFirewallPolicyDecryptionRules 
{
    public static Task<GetNetworkFirewallPolicyDecryptionRulesResult> InvokeAsync(GetNetworkFirewallPolicyDecryptionRulesArgs args, InvokeOptions? opts = null)
    public static Output<GetNetworkFirewallPolicyDecryptionRulesResult> Invoke(GetNetworkFirewallPolicyDecryptionRulesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetNetworkFirewallPolicyDecryptionRulesResult> getNetworkFirewallPolicyDecryptionRules(GetNetworkFirewallPolicyDecryptionRulesArgs args, InvokeOptions options)
public static Output<GetNetworkFirewallPolicyDecryptionRulesResult> getNetworkFirewallPolicyDecryptionRules(GetNetworkFirewallPolicyDecryptionRulesArgs args, InvokeOptions options)

    fn::invoke:
  function: oci:NetworkFirewall/getNetworkFirewallPolicyDecryptionRules:getNetworkFirewallPolicyDecryptionRules
  arguments:
    # arguments dictionary

    The following arguments are supported:

    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    DecryptionRulePriorityOrder int
    Unique priority order for Decryption Rules in the network firewall policy.
    DisplayName string
    A filter to return only resources that match the entire display name given.
    Filters List<GetNetworkFirewallPolicyDecryptionRulesFilter>
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    DecryptionRulePriorityOrder int
    Unique priority order for Decryption Rules in the network firewall policy.
    DisplayName string
    A filter to return only resources that match the entire display name given.
    Filters []GetNetworkFirewallPolicyDecryptionRulesFilter
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    decryptionRulePriorityOrder Integer
    Unique priority order for Decryption Rules in the network firewall policy.
    displayName String
    A filter to return only resources that match the entire display name given.
    filters List<GetPolicyDecryptionRulesFilter>
    networkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    decryptionRulePriorityOrder number
    Unique priority order for Decryption Rules in the network firewall policy.
    displayName string
    A filter to return only resources that match the entire display name given.
    filters GetNetworkFirewallPolicyDecryptionRulesFilter[]
    network_firewall_policy_id str
    Unique Network Firewall Policy identifier
    decryption_rule_priority_order int
    Unique priority order for Decryption Rules in the network firewall policy.
    display_name str
    A filter to return only resources that match the entire display name given.
    filters Sequence[GetNetworkFirewallPolicyDecryptionRulesFilter]
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    decryptionRulePriorityOrder Number
    Unique priority order for Decryption Rules in the network firewall policy.
    displayName String
    A filter to return only resources that match the entire display name given.
    filters List<Property Map>

    getNetworkFirewallPolicyDecryptionRules Result

    The following output properties are available:

    decryptionRuleSummaryCollections List<GetPolicyDecryptionRulesDecryptionRuleSummaryCollection>
    The list of decryption_rule_summary_collection.
    id String
    The provider-assigned unique ID for this managed resource.
    networkFirewallPolicyId String
    decryptionRulePriorityOrder Integer
    displayName String
    filters List<GetPolicyDecryptionRulesFilter>
    decryptionRuleSummaryCollections List<Property Map>
    The list of decryption_rule_summary_collection.
    id String
    The provider-assigned unique ID for this managed resource.
    networkFirewallPolicyId String
    decryptionRulePriorityOrder Number
    displayName String
    filters List<Property Map>

    Supporting Types

    GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollection

    GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItem

    Action string
    Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    Condition GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
    Match criteria used in Decryption Rule used on the firewall policy rules.
    Name string
    Name for the decryption rule, must be unique within the policy.
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    ParentResourceId string
    OCID of the Network Firewall Policy this decryption rule belongs to.
    Position GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    DecryptionProfile string
    The name of the decryption profile to use.
    PriorityOrder string
    Secret string
    The name of a mapped secret. Its type must match that of the specified decryption profile.
    Action string
    Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    Condition GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
    Match criteria used in Decryption Rule used on the firewall policy rules.
    Name string
    Name for the decryption rule, must be unique within the policy.
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    ParentResourceId string
    OCID of the Network Firewall Policy this decryption rule belongs to.
    Position GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    DecryptionProfile string
    The name of the decryption profile to use.
    PriorityOrder string
    Secret string
    The name of a mapped secret. Its type must match that of the specified decryption profile.
    action String
    Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition GetPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
    Match criteria used in Decryption Rule used on the firewall policy rules.
    name String
    Name for the decryption rule, must be unique within the policy.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    parentResourceId String
    OCID of the Network Firewall Policy this decryption rule belongs to.
    position GetPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    decryptionProfile String
    The name of the decryption profile to use.
    priorityOrder String
    secret String
    The name of a mapped secret. Its type must match that of the specified decryption profile.
    action string
    Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
    Match criteria used in Decryption Rule used on the firewall policy rules.
    name string
    Name for the decryption rule, must be unique within the policy.
    networkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    parentResourceId string
    OCID of the Network Firewall Policy this decryption rule belongs to.
    position GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    decryptionProfile string
    The name of the decryption profile to use.
    priorityOrder string
    secret string
    The name of a mapped secret. Its type must match that of the specified decryption profile.
    action str
    Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
    Match criteria used in Decryption Rule used on the firewall policy rules.
    name str
    Name for the decryption rule, must be unique within the policy.
    network_firewall_policy_id str
    Unique Network Firewall Policy identifier
    parent_resource_id str
    OCID of the Network Firewall Policy this decryption rule belongs to.
    position GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    decryption_profile str
    The name of the decryption profile to use.
    priority_order str
    secret str
    The name of a mapped secret. Its type must match that of the specified decryption profile.
    action String
    Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition Property Map
    Match criteria used in Decryption Rule used on the firewall policy rules.
    name String
    Name for the decryption rule, must be unique within the policy.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    parentResourceId String
    OCID of the Network Firewall Policy this decryption rule belongs to.
    position Property Map
    An object which defines the position of the rule.
    decryptionProfile String
    The name of the decryption profile to use.
    priorityOrder String
    secret String
    The name of a mapped secret. Its type must match that of the specified decryption profile.

    GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition

    DestinationAddresses List<string>
    An array of IP address list names to be evaluated against the traffic destination address.
    SourceAddresses List<string>
    An array of IP address list names to be evaluated against the traffic source address.
    DestinationAddresses []string
    An array of IP address list names to be evaluated against the traffic destination address.
    SourceAddresses []string
    An array of IP address list names to be evaluated against the traffic source address.
    destinationAddresses List<String>
    An array of IP address list names to be evaluated against the traffic destination address.
    sourceAddresses List<String>
    An array of IP address list names to be evaluated against the traffic source address.
    destinationAddresses string[]
    An array of IP address list names to be evaluated against the traffic destination address.
    sourceAddresses string[]
    An array of IP address list names to be evaluated against the traffic source address.
    destination_addresses Sequence[str]
    An array of IP address list names to be evaluated against the traffic destination address.
    source_addresses Sequence[str]
    An array of IP address list names to be evaluated against the traffic source address.
    destinationAddresses List<String>
    An array of IP address list names to be evaluated against the traffic destination address.
    sourceAddresses List<String>
    An array of IP address list names to be evaluated against the traffic source address.

    GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition

    AfterRule string
    Identifier for rule after which this rule lies.
    BeforeRule string
    Identifier for rule before which this rule lies.
    AfterRule string
    Identifier for rule after which this rule lies.
    BeforeRule string
    Identifier for rule before which this rule lies.
    afterRule String
    Identifier for rule after which this rule lies.
    beforeRule String
    Identifier for rule before which this rule lies.
    afterRule string
    Identifier for rule after which this rule lies.
    beforeRule string
    Identifier for rule before which this rule lies.
    after_rule str
    Identifier for rule after which this rule lies.
    before_rule str
    Identifier for rule before which this rule lies.
    afterRule String
    Identifier for rule after which this rule lies.
    beforeRule String
    Identifier for rule before which this rule lies.

    GetNetworkFirewallPolicyDecryptionRulesFilter

    Name string
    Name for the decryption rule, must be unique within the policy.
    Values List<string>
    Regex bool
    Name string
    Name for the decryption rule, must be unique within the policy.
    Values []string
    Regex bool
    name String
    Name for the decryption rule, must be unique within the policy.
    values List<String>
    regex Boolean
    name string
    Name for the decryption rule, must be unique within the policy.
    values string[]
    regex boolean
    name str
    Name for the decryption rule, must be unique within the policy.
    values Sequence[str]
    regex bool
    name String
    Name for the decryption rule, must be unique within the policy.
    values List<String>
    regex Boolean

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo
    Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi
    pulumi/pulumi-oci