import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
 * The zia_cloud_app_control_rules resource manages cloud application control rules in the Zscaler Internet Access (ZIA) cloud service. Cloud app control rules define policies that govern user access to cloud applications, allowing administrators to allow, block, or isolate specific application activities.
 *
 * For more information, see the [ZIA Cloud App Control documentation](https://help.zscaler.com/zia/cloud-app-control).
 *
 * ## Example Usage
 * ### Basic Cloud App Control Rule
 *
 * ```typescript
 * import * as zia from "@bdzscaler/pulumi-zia";
 *
 * const example = new zia.CloudAppControlRule("example", {
 *     name: "Example Cloud App Control Rule",
 *     description: "Block file sharing uploads",
 *     type: "STREAMING_MEDIA",
 *     order: 1,
 *     state: "ENABLED",
 *     actions: ["BLOCK"],
 *     applications: ["YOUTUBE"],
 * });
 * ```
 *
 * ## Import
 *
 * An existing Cloud App Control Rule can be imported using its resource ID, e.g.
 *
 * ```sh
 * $ pulumi import zia:index:CloudAppControlRule example 12345
 * ```
 */
export declare class CloudAppControlRule extends pulumi.CustomResource {
    /**
     * Get an existing CloudAppControlRule resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): CloudAppControlRule;
    /**
     * Returns true if the given object is an instance of CloudAppControlRule.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is CloudAppControlRule;
    /**
     * Actions taken when traffic matches rule criteria. Valid values: `ALLOW`, `BLOCK`, `CAUTION`, `ISOLATE`.
     */
    readonly actions: pulumi.Output<string[] | undefined>;
    /**
     * List of cloud application names to which the rule applies.
     */
    readonly applications: pulumi.Output<string[] | undefined>;
    /**
     * The ID of the Browser End User Notification template.
     */
    readonly browserEunTemplateId: pulumi.Output<number | undefined>;
    /**
     * If true, cascading to other rules is enabled when this rule matches.
     */
    readonly cascadingEnabled: pulumi.Output<boolean | undefined>;
    /**
     * The Cloud Browser Isolation (CBI) profile. Required when action is 'ISOLATE'.
     */
    readonly cbiProfile: pulumi.Output<outputs.CBIProfileInput | undefined>;
    /**
     * The ID of the cloud application risk profile associated with this rule.
     */
    readonly cloudAppRiskProfileId: pulumi.Output<number | undefined>;
    /**
     * IDs of departments for which the rule must be applied.
     */
    readonly departments: pulumi.Output<number[] | undefined>;
    /**
     * Additional information about the cloud app control rule.
     */
    readonly description: pulumi.Output<string | undefined>;
    /**
     * IDs of device groups for which the rule must be applied.
     */
    readonly deviceGroups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of devices for which the rule must be applied.
     */
    readonly devices: pulumi.Output<number[] | undefined>;
    /**
     * Enforce a set validity time period for the rule.
     */
    readonly enforceTimeValidity: pulumi.Output<boolean | undefined>;
    /**
     * If true, End User Notification is enabled for this rule.
     */
    readonly eunEnabled: pulumi.Output<boolean | undefined>;
    /**
     * The ID of the End User Notification template.
     */
    readonly eunTemplateId: pulumi.Output<number | undefined>;
    /**
     * IDs of groups for which the rule must be applied.
     */
    readonly groups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of labels associated with the cloud app control rule.
     */
    readonly labels: pulumi.Output<number[] | undefined>;
    /**
     * IDs of location groups for which the rule must be applied.
     */
    readonly locationGroups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of locations for which the rule must be applied.
     */
    readonly locations: pulumi.Output<number[] | undefined>;
    /**
     * The name of the cloud app control rule. Must be unique.
     */
    readonly name: pulumi.Output<string>;
    /**
     * The order of execution of the rule with respect to other cloud app control rules.
     */
    readonly order: pulumi.Output<number>;
    /**
     * Admin rank of the cloud app control rule. Valid values: 0-7. Default: 7.
     */
    readonly rank: pulumi.Output<number | undefined>;
    /**
     * The system-generated ID of the cloud app control rule.
     */
    readonly ruleId: pulumi.Output<number>;
    /**
     * Size quota in MB beyond which the rule is applied. Not applicable when action is 'BLOCK'.
     */
    readonly sizeQuota: pulumi.Output<number | undefined>;
    /**
     * Rule state. Valid values: `ENABLED`, `DISABLED`.
     */
    readonly state: pulumi.Output<string | undefined>;
    /**
     * IDs of tenancy profiles for which the rule must be applied.
     */
    readonly tenancyProfileIds: pulumi.Output<number[] | undefined>;
    /**
     * Time quota in minutes, after which the rule is applied. Not applicable when action is 'BLOCK'.
     */
    readonly timeQuota: pulumi.Output<number | undefined>;
    /**
     * IDs of time intervals during which the rule must be enforced.
     */
    readonly timeWindows: pulumi.Output<number[] | undefined>;
    /**
     * The rule type, corresponding to the cloud application category. Valid values: `STREAMING_MEDIA`, `SOCIAL_NETWORKING`, `WEBMAIL`, `INSTANT_MESSAGING`, `FILE_SHARE`, `BUSINESS_PRODUCTIVITY`, `SYSTEM_AND_DEVELOPMENT`, `CONSUMER`, `HOSTING_PROVIDER`, `DNS_OVER_HTTPS`, `ENTERPRISE_COLLABORATION`, `GENERATIVE_AI`, `SALES_AND_MARKETING`, `HEALTH_CARE`, `LEGAL`, `HUMAN_RESOURCES`, `FINANCE`.
     */
    readonly type: pulumi.Output<string>;
    /**
     * IDs of users for which the rule must be applied.
     */
    readonly users: pulumi.Output<number[] | undefined>;
    /**
     * Create a CloudAppControlRule resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: CloudAppControlRuleArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * The set of arguments for constructing a CloudAppControlRule resource.
 */
export interface CloudAppControlRuleArgs {
    /**
     * Actions taken when traffic matches rule criteria. Valid values: `ALLOW`, `BLOCK`, `CAUTION`, `ISOLATE`.
     */
    actions?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * List of cloud application names to which the rule applies.
     */
    applications?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * The ID of the Browser End User Notification template.
     */
    browserEunTemplateId?: pulumi.Input<number | undefined>;
    /**
     * If true, cascading to other rules is enabled when this rule matches.
     */
    cascadingEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * The Cloud Browser Isolation (CBI) profile. Required when action is 'ISOLATE'.
     */
    cbiProfile?: pulumi.Input<inputs.CBIProfileInputArgs | undefined>;
    /**
     * The ID of the cloud application risk profile associated with this rule.
     */
    cloudAppRiskProfileId?: pulumi.Input<number | undefined>;
    /**
     * IDs of departments for which the rule must be applied.
     */
    departments?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * Additional information about the cloud app control rule.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * IDs of device groups for which the rule must be applied.
     */
    deviceGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of devices for which the rule must be applied.
     */
    devices?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * Enforce a set validity time period for the rule.
     */
    enforceTimeValidity?: pulumi.Input<boolean | undefined>;
    /**
     * If true, End User Notification is enabled for this rule.
     */
    eunEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * The ID of the End User Notification template.
     */
    eunTemplateId?: pulumi.Input<number | undefined>;
    /**
     * IDs of groups for which the rule must be applied.
     */
    groups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of labels associated with the cloud app control rule.
     */
    labels?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of location groups for which the rule must be applied.
     */
    locationGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of locations for which the rule must be applied.
     */
    locations?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * The name of the cloud app control rule. Must be unique.
     */
    name: pulumi.Input<string>;
    /**
     * The order of execution of the rule with respect to other cloud app control rules.
     */
    order: pulumi.Input<number>;
    /**
     * Admin rank of the cloud app control rule. Valid values: 0-7. Default: 7.
     */
    rank?: pulumi.Input<number | undefined>;
    /**
     * Size quota in MB beyond which the rule is applied. Not applicable when action is 'BLOCK'.
     */
    sizeQuota?: pulumi.Input<number | undefined>;
    /**
     * Rule state. Valid values: `ENABLED`, `DISABLED`.
     */
    state?: pulumi.Input<string | undefined>;
    /**
     * IDs of tenancy profiles for which the rule must be applied.
     */
    tenancyProfileIds?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * Time quota in minutes, after which the rule is applied. Not applicable when action is 'BLOCK'.
     */
    timeQuota?: pulumi.Input<number | undefined>;
    /**
     * IDs of time intervals during which the rule must be enforced.
     */
    timeWindows?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * The rule type, corresponding to the cloud application category. Valid values: `STREAMING_MEDIA`, `SOCIAL_NETWORKING`, `WEBMAIL`, `INSTANT_MESSAGING`, `FILE_SHARE`, `BUSINESS_PRODUCTIVITY`, `SYSTEM_AND_DEVELOPMENT`, `CONSUMER`, `HOSTING_PROVIDER`, `DNS_OVER_HTTPS`, `ENTERPRISE_COLLABORATION`, `GENERATIVE_AI`, `SALES_AND_MARKETING`, `HEALTH_CARE`, `LEGAL`, `HUMAN_RESOURCES`, `FINANCE`.
     */
    type: pulumi.Input<string>;
    /**
     * IDs of users for which the rule must be applied.
     */
    users?: pulumi.Input<pulumi.Input<number>[] | undefined>;
}
//# sourceMappingURL=cloudAppControlRule.d.ts.map