1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. NetworkFirewall
  5. getNetworkFirewallPolicyDecryptionRules
Oracle Cloud Infrastructure v2.31.0 published on Thursday, Apr 17, 2025 by Pulumi

oci.NetworkFirewall.getNetworkFirewallPolicyDecryptionRules

Explore with Pulumi AI

This data source provides the list of Network Firewall Policy Decryption Rules in Oracle Cloud Infrastructure Network Firewall service.

Returns a list of Decryption Rule for the Network Firewall Policy.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testNetworkFirewallPolicyDecryptionRules = oci.NetworkFirewall.getNetworkFirewallPolicyDecryptionRules({
    networkFirewallPolicyId: testNetworkFirewallPolicy.id,
    decryptionRulePriorityOrder: networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder,
    displayName: networkFirewallPolicyDecryptionRuleDisplayName,
});
Copy
import pulumi
import pulumi_oci as oci

test_network_firewall_policy_decryption_rules = oci.NetworkFirewall.get_network_firewall_policy_decryption_rules(network_firewall_policy_id=test_network_firewall_policy["id"],
    decryption_rule_priority_order=network_firewall_policy_decryption_rule_decryption_rule_priority_order,
    display_name=network_firewall_policy_decryption_rule_display_name)
Copy
package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/networkfirewall"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := networkfirewall.GetNetworkFirewallPolicyDecryptionRules(ctx, &networkfirewall.GetNetworkFirewallPolicyDecryptionRulesArgs{
			NetworkFirewallPolicyId:     testNetworkFirewallPolicy.Id,
			DecryptionRulePriorityOrder: pulumi.IntRef(networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder),
			DisplayName:                 pulumi.StringRef(networkFirewallPolicyDecryptionRuleDisplayName),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testNetworkFirewallPolicyDecryptionRules = Oci.NetworkFirewall.GetNetworkFirewallPolicyDecryptionRules.Invoke(new()
    {
        NetworkFirewallPolicyId = testNetworkFirewallPolicy.Id,
        DecryptionRulePriorityOrder = networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder,
        DisplayName = networkFirewallPolicyDecryptionRuleDisplayName,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.NetworkFirewall.NetworkFirewallFunctions;
import com.pulumi.oci.NetworkFirewall.inputs.GetNetworkFirewallPolicyDecryptionRulesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testNetworkFirewallPolicyDecryptionRules = NetworkFirewallFunctions.getNetworkFirewallPolicyDecryptionRules(GetNetworkFirewallPolicyDecryptionRulesArgs.builder()
            .networkFirewallPolicyId(testNetworkFirewallPolicy.id())
            .decryptionRulePriorityOrder(networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder)
            .displayName(networkFirewallPolicyDecryptionRuleDisplayName)
            .build());

    }
}
Copy
variables:
  testNetworkFirewallPolicyDecryptionRules:
    fn::invoke:
      function: oci:NetworkFirewall:getNetworkFirewallPolicyDecryptionRules
      arguments:
        networkFirewallPolicyId: ${testNetworkFirewallPolicy.id}
        decryptionRulePriorityOrder: ${networkFirewallPolicyDecryptionRuleDecryptionRulePriorityOrder}
        displayName: ${networkFirewallPolicyDecryptionRuleDisplayName}
Copy

Using getNetworkFirewallPolicyDecryptionRules

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getNetworkFirewallPolicyDecryptionRules(args: GetNetworkFirewallPolicyDecryptionRulesArgs, opts?: InvokeOptions): Promise<GetNetworkFirewallPolicyDecryptionRulesResult>
function getNetworkFirewallPolicyDecryptionRulesOutput(args: GetNetworkFirewallPolicyDecryptionRulesOutputArgs, opts?: InvokeOptions): Output<GetNetworkFirewallPolicyDecryptionRulesResult>
Copy
def get_network_firewall_policy_decryption_rules(decryption_rule_priority_order: Optional[int] = None,
                                                 display_name: Optional[str] = None,
                                                 filters: Optional[Sequence[_networkfirewall.GetNetworkFirewallPolicyDecryptionRulesFilter]] = None,
                                                 network_firewall_policy_id: Optional[str] = None,
                                                 opts: Optional[InvokeOptions] = None) -> GetNetworkFirewallPolicyDecryptionRulesResult
def get_network_firewall_policy_decryption_rules_output(decryption_rule_priority_order: Optional[pulumi.Input[int]] = None,
                                                 display_name: Optional[pulumi.Input[str]] = None,
                                                 filters: Optional[pulumi.Input[Sequence[pulumi.Input[_networkfirewall.GetNetworkFirewallPolicyDecryptionRulesFilterArgs]]]] = None,
                                                 network_firewall_policy_id: Optional[pulumi.Input[str]] = None,
                                                 opts: Optional[InvokeOptions] = None) -> Output[GetNetworkFirewallPolicyDecryptionRulesResult]
Copy
func GetNetworkFirewallPolicyDecryptionRules(ctx *Context, args *GetNetworkFirewallPolicyDecryptionRulesArgs, opts ...InvokeOption) (*GetNetworkFirewallPolicyDecryptionRulesResult, error)
func GetNetworkFirewallPolicyDecryptionRulesOutput(ctx *Context, args *GetNetworkFirewallPolicyDecryptionRulesOutputArgs, opts ...InvokeOption) GetNetworkFirewallPolicyDecryptionRulesResultOutput
Copy

> Note: This function is named GetNetworkFirewallPolicyDecryptionRules in the Go SDK.

public static class GetNetworkFirewallPolicyDecryptionRules 
{
    public static Task<GetNetworkFirewallPolicyDecryptionRulesResult> InvokeAsync(GetNetworkFirewallPolicyDecryptionRulesArgs args, InvokeOptions? opts = null)
    public static Output<GetNetworkFirewallPolicyDecryptionRulesResult> Invoke(GetNetworkFirewallPolicyDecryptionRulesInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetNetworkFirewallPolicyDecryptionRulesResult> getNetworkFirewallPolicyDecryptionRules(GetNetworkFirewallPolicyDecryptionRulesArgs args, InvokeOptions options)
public static Output<GetNetworkFirewallPolicyDecryptionRulesResult> getNetworkFirewallPolicyDecryptionRules(GetNetworkFirewallPolicyDecryptionRulesArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: oci:NetworkFirewall/getNetworkFirewallPolicyDecryptionRules:getNetworkFirewallPolicyDecryptionRules
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

NetworkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
DecryptionRulePriorityOrder int
Unique priority order for Decryption Rules in the network firewall policy.
DisplayName string
A filter to return only resources that match the entire display name given.
Filters Changes to this property will trigger replacement. List<GetNetworkFirewallPolicyDecryptionRulesFilter>
NetworkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
DecryptionRulePriorityOrder int
Unique priority order for Decryption Rules in the network firewall policy.
DisplayName string
A filter to return only resources that match the entire display name given.
Filters Changes to this property will trigger replacement. []GetNetworkFirewallPolicyDecryptionRulesFilter
networkFirewallPolicyId This property is required. String
Unique Network Firewall Policy identifier
decryptionRulePriorityOrder Integer
Unique priority order for Decryption Rules in the network firewall policy.
displayName String
A filter to return only resources that match the entire display name given.
filters Changes to this property will trigger replacement. List<GetPolicyDecryptionRulesFilter>
networkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
decryptionRulePriorityOrder number
Unique priority order for Decryption Rules in the network firewall policy.
displayName string
A filter to return only resources that match the entire display name given.
filters Changes to this property will trigger replacement. GetNetworkFirewallPolicyDecryptionRulesFilter[]
network_firewall_policy_id This property is required. str
Unique Network Firewall Policy identifier
decryption_rule_priority_order int
Unique priority order for Decryption Rules in the network firewall policy.
display_name str
A filter to return only resources that match the entire display name given.
filters Changes to this property will trigger replacement. Sequence[networkfirewall.GetNetworkFirewallPolicyDecryptionRulesFilter]
networkFirewallPolicyId This property is required. String
Unique Network Firewall Policy identifier
decryptionRulePriorityOrder Number
Unique priority order for Decryption Rules in the network firewall policy.
displayName String
A filter to return only resources that match the entire display name given.
filters Changes to this property will trigger replacement. List<Property Map>

getNetworkFirewallPolicyDecryptionRules Result

The following output properties are available:

decryptionRuleSummaryCollections List<GetPolicyDecryptionRulesDecryptionRuleSummaryCollection>
The list of decryption_rule_summary_collection.
id String
The provider-assigned unique ID for this managed resource.
networkFirewallPolicyId String
decryptionRulePriorityOrder Integer
displayName String
filters List<GetPolicyDecryptionRulesFilter>
decryptionRuleSummaryCollections List<Property Map>
The list of decryption_rule_summary_collection.
id String
The provider-assigned unique ID for this managed resource.
networkFirewallPolicyId String
decryptionRulePriorityOrder Number
displayName String
filters List<Property Map>

Supporting Types

GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollection

items This property is required. List<Property Map>

GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItem

Action This property is required. string
Action:

  • NO_DECRYPT - Matching traffic is not decrypted.
  • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
Condition This property is required. GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
Match criteria used in Decryption Rule used on the firewall policy rules.
Name This property is required. string
Name for the decryption rule, must be unique within the policy.
NetworkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
ParentResourceId This property is required. string
OCID of the Network Firewall Policy this decryption rule belongs to.
Position This property is required. GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
DecryptionProfile string
The name of the decryption profile to use.
PriorityOrder string
Secret string
The name of a mapped secret. Its type must match that of the specified decryption profile.
Action This property is required. string
Action:

  • NO_DECRYPT - Matching traffic is not decrypted.
  • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
Condition This property is required. GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
Match criteria used in Decryption Rule used on the firewall policy rules.
Name This property is required. string
Name for the decryption rule, must be unique within the policy.
NetworkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
ParentResourceId This property is required. string
OCID of the Network Firewall Policy this decryption rule belongs to.
Position This property is required. GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
DecryptionProfile string
The name of the decryption profile to use.
PriorityOrder string
Secret string
The name of a mapped secret. Its type must match that of the specified decryption profile.
action This property is required. String
Action:

  • NO_DECRYPT - Matching traffic is not decrypted.
  • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
condition This property is required. GetPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
Match criteria used in Decryption Rule used on the firewall policy rules.
name This property is required. String
Name for the decryption rule, must be unique within the policy.
networkFirewallPolicyId This property is required. String
Unique Network Firewall Policy identifier
parentResourceId This property is required. String
OCID of the Network Firewall Policy this decryption rule belongs to.
position This property is required. GetPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
decryptionProfile String
The name of the decryption profile to use.
priorityOrder String
secret String
The name of a mapped secret. Its type must match that of the specified decryption profile.
action This property is required. string
Action:

  • NO_DECRYPT - Matching traffic is not decrypted.
  • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
condition This property is required. GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
Match criteria used in Decryption Rule used on the firewall policy rules.
name This property is required. string
Name for the decryption rule, must be unique within the policy.
networkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
parentResourceId This property is required. string
OCID of the Network Firewall Policy this decryption rule belongs to.
position This property is required. GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
decryptionProfile string
The name of the decryption profile to use.
priorityOrder string
secret string
The name of a mapped secret. Its type must match that of the specified decryption profile.
action This property is required. str
Action:

  • NO_DECRYPT - Matching traffic is not decrypted.
  • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
condition This property is required. networkfirewall.GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition
Match criteria used in Decryption Rule used on the firewall policy rules.
name This property is required. str
Name for the decryption rule, must be unique within the policy.
network_firewall_policy_id This property is required. str
Unique Network Firewall Policy identifier
parent_resource_id This property is required. str
OCID of the Network Firewall Policy this decryption rule belongs to.
position This property is required. networkfirewall.GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
decryption_profile str
The name of the decryption profile to use.
priority_order str
secret str
The name of a mapped secret. Its type must match that of the specified decryption profile.
action This property is required. String
Action:

  • NO_DECRYPT - Matching traffic is not decrypted.
  • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
condition This property is required. Property Map
Match criteria used in Decryption Rule used on the firewall policy rules.
name This property is required. String
Name for the decryption rule, must be unique within the policy.
networkFirewallPolicyId This property is required. String
Unique Network Firewall Policy identifier
parentResourceId This property is required. String
OCID of the Network Firewall Policy this decryption rule belongs to.
position This property is required. Property Map
An object which defines the position of the rule.
decryptionProfile String
The name of the decryption profile to use.
priorityOrder String
secret String
The name of a mapped secret. Its type must match that of the specified decryption profile.

GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemCondition

DestinationAddresses List<string>
An array of IP address list names to be evaluated against the traffic destination address.
SourceAddresses List<string>
An array of IP address list names to be evaluated against the traffic source address.
DestinationAddresses []string
An array of IP address list names to be evaluated against the traffic destination address.
SourceAddresses []string
An array of IP address list names to be evaluated against the traffic source address.
destinationAddresses List<String>
An array of IP address list names to be evaluated against the traffic destination address.
sourceAddresses List<String>
An array of IP address list names to be evaluated against the traffic source address.
destinationAddresses string[]
An array of IP address list names to be evaluated against the traffic destination address.
sourceAddresses string[]
An array of IP address list names to be evaluated against the traffic source address.
destination_addresses Sequence[str]
An array of IP address list names to be evaluated against the traffic destination address.
source_addresses Sequence[str]
An array of IP address list names to be evaluated against the traffic source address.
destinationAddresses List<String>
An array of IP address list names to be evaluated against the traffic destination address.
sourceAddresses List<String>
An array of IP address list names to be evaluated against the traffic source address.

GetNetworkFirewallPolicyDecryptionRulesDecryptionRuleSummaryCollectionItemPosition

AfterRule This property is required. string
Identifier for rule after which this rule lies.
BeforeRule This property is required. string
Identifier for rule before which this rule lies.
AfterRule This property is required. string
Identifier for rule after which this rule lies.
BeforeRule This property is required. string
Identifier for rule before which this rule lies.
afterRule This property is required. String
Identifier for rule after which this rule lies.
beforeRule This property is required. String
Identifier for rule before which this rule lies.
afterRule This property is required. string
Identifier for rule after which this rule lies.
beforeRule This property is required. string
Identifier for rule before which this rule lies.
after_rule This property is required. str
Identifier for rule after which this rule lies.
before_rule This property is required. str
Identifier for rule before which this rule lies.
afterRule This property is required. String
Identifier for rule after which this rule lies.
beforeRule This property is required. String
Identifier for rule before which this rule lies.

GetNetworkFirewallPolicyDecryptionRulesFilter

Name This property is required. string
Name for the decryption rule, must be unique within the policy.
Values This property is required. List<string>
Regex bool
Name This property is required. string
Name for the decryption rule, must be unique within the policy.
Values This property is required. []string
Regex bool
name This property is required. String
Name for the decryption rule, must be unique within the policy.
values This property is required. List<String>
regex Boolean
name This property is required. string
Name for the decryption rule, must be unique within the policy.
values This property is required. string[]
regex boolean
name This property is required. str
Name for the decryption rule, must be unique within the policy.
values This property is required. Sequence[str]
regex bool
name This property is required. String
Name for the decryption rule, must be unique within the policy.
values This property is required. List<String>
regex Boolean

Package Details

Repository
oci pulumi/pulumi-oci
License
Apache-2.0
Notes
This Pulumi package is based on the oci Terraform Provider.