import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
 * The zia_forwarding_control_rule resource manages forwarding control rules in the Zscaler Internet Access (ZIA) cloud service. Forwarding control rules determine how traffic is forwarded — directly to the internet, via an explicit proxy, or through Zscaler Private Access (ZPA).
 *
 * For more information, see the [ZIA Forwarding Control documentation](https://help.zscaler.com/zia/forwarding-control-policies).
 *
 * ## Example Usage
 * ### Basic Forwarding Control Rule
 *
 * ```typescript
 * import * as zia from "@bdzscaler/pulumi-zia";
 *
 * const example = new zia.ForwardingControlRule("example", {
 *     name: "Example Forwarding Rule",
 *     description: "Forward traffic directly",
 *     order: 1,
 *     state: "ENABLED",
 *     forwardMethod: "DIRECT",
 * });
 * ```
 *
 * ## Import
 *
 * An existing Forwarding Control Rule can be imported using its resource ID, e.g.
 *
 * ```sh
 * $ pulumi import zia:index:ForwardingControlRule example 12345
 * ```
 */
export declare class ForwardingControlRule extends pulumi.CustomResource {
    /**
     * Get an existing ForwardingControlRule resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): ForwardingControlRule;
    /**
     * Returns true if the given object is an instance of ForwardingControlRule.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is ForwardingControlRule;
    /**
     * IDs of application service groups to which the rule applies.
     */
    readonly appServiceGroups: pulumi.Output<number[] | undefined>;
    /**
     * The ID of the dedicated IP gateway. Applicable only for the Proxy Chaining forwarding method.
     */
    readonly dedicatedIpGatewayId: pulumi.Output<number | undefined>;
    /**
     * IDs of departments to which the rule must be applied.
     */
    readonly departments: pulumi.Output<number[] | undefined>;
    /**
     * Additional information about the forwarding control rule.
     */
    readonly description: pulumi.Output<string | undefined>;
    /**
     * Destination IP addresses, FQDNs, or wildcard FQDNs for the rule.
     */
    readonly destAddresses: pulumi.Output<string[] | undefined>;
    /**
     * Destination countries (ISO 3166-1 alpha-2 codes) for the rule.
     */
    readonly destCountries: pulumi.Output<string[] | undefined>;
    /**
     * Destination IP address URL categories for the rule.
     */
    readonly destIpCategories: pulumi.Output<string[] | undefined>;
    /**
     * IDs of destination IP address groups for the rule.
     */
    readonly destIpGroups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of destination IPv6 address groups for the rule.
     */
    readonly destIpv6Groups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of device groups for which the rule must be applied. Applicable for devices managed using Zscaler Client Connector.
     */
    readonly deviceGroups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of Zscaler Edge Connector groups to which the rule applies.
     */
    readonly ecGroups: pulumi.Output<number[] | undefined>;
    /**
     * The type of traffic forwarding method. Valid values: `INVALID`, `DIRECT`, `PROXYCHAIN`, `ZPA`, `ECZPA`, `ZIA`, `ECSELF`, `DROP`, `ENATDEDIP`.
     */
    readonly forwardMethod: pulumi.Output<string>;
    /**
     * IDs of groups to which the rule must be applied.
     */
    readonly groups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of labels associated with the rule.
     */
    readonly labels: pulumi.Output<number[] | undefined>;
    /**
     * IDs of location groups to which the rule must be applied.
     */
    readonly locationGroups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of locations to which the rule must be applied.
     */
    readonly locations: pulumi.Output<number[] | undefined>;
    /**
     * The name of the forwarding control rule. Must be unique.
     */
    readonly name: pulumi.Output<string>;
    /**
     * IDs of network application groups to which the rule applies.
     */
    readonly nwApplicationGroups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of network service groups to which the rule applies.
     */
    readonly nwServiceGroups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of network services to which the rule applies.
     */
    readonly nwServices: pulumi.Output<number[] | undefined>;
    /**
     * The order of execution of the rule with respect to other forwarding control rules.
     */
    readonly order: pulumi.Output<number>;
    /**
     * The ID of the proxy gateway. Required when forwardMethod is `PROXYCHAIN`.
     */
    readonly proxyGatewayId: pulumi.Output<number | undefined>;
    /**
     * Admin rank of the forwarding control policy rule. Valid values: 0-7. Default: 7.
     */
    readonly rank: pulumi.Output<number | undefined>;
    /**
     * URL categories that apply to the response for the rule.
     */
    readonly resCategories: pulumi.Output<string[] | undefined>;
    /**
     * The system-generated ID of the forwarding control rule.
     */
    readonly ruleId: pulumi.Output<number>;
    /**
     * IDs of source IP address groups for the rule.
     */
    readonly srcIpGroups: pulumi.Output<number[] | undefined>;
    /**
     * Source IP addresses or CIDR ranges for the rule.
     */
    readonly srcIps: pulumi.Output<string[] | undefined>;
    /**
     * IDs of source IPv6 address groups for the rule.
     */
    readonly srcIpv6Groups: pulumi.Output<number[] | undefined>;
    /**
     * Rule state. Valid values: `ENABLED`, `DISABLED`.
     */
    readonly state: pulumi.Output<string | undefined>;
    /**
     * The rule type. Valid values: `FORWARDING`.
     */
    readonly type: pulumi.Output<string | undefined>;
    /**
     * IDs of users to which the rule must be applied.
     */
    readonly users: pulumi.Output<number[] | undefined>;
    /**
     * List of ZPA application segments for which this rule is applicable. This field is applicable only when forwardMethod is `ZPA`.
     */
    readonly zpaAppSegments: pulumi.Output<outputs.ZPAAppSegmentInput[] | undefined>;
    /**
     * The ID of the ZPA gateway. Required when forwardMethod is `ZPA`.
     */
    readonly zpaGatewayId: pulumi.Output<number | undefined>;
    /**
     * Create a ForwardingControlRule resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: ForwardingControlRuleArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * The set of arguments for constructing a ForwardingControlRule resource.
 */
export interface ForwardingControlRuleArgs {
    /**
     * IDs of application service groups to which the rule applies.
     */
    appServiceGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * The ID of the dedicated IP gateway. Applicable only for the Proxy Chaining forwarding method.
     */
    dedicatedIpGatewayId?: pulumi.Input<number | undefined>;
    /**
     * IDs of departments to which the rule must be applied.
     */
    departments?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * Additional information about the forwarding control rule.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * Destination IP addresses, FQDNs, or wildcard FQDNs for the rule.
     */
    destAddresses?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Destination countries (ISO 3166-1 alpha-2 codes) for the rule.
     */
    destCountries?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Destination IP address URL categories for the rule.
     */
    destIpCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * IDs of destination IP address groups for the rule.
     */
    destIpGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of destination IPv6 address groups for the rule.
     */
    destIpv6Groups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of device groups for which the rule must be applied. Applicable for devices managed using Zscaler Client Connector.
     */
    deviceGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of Zscaler Edge Connector groups to which the rule applies.
     */
    ecGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * The type of traffic forwarding method. Valid values: `INVALID`, `DIRECT`, `PROXYCHAIN`, `ZPA`, `ECZPA`, `ZIA`, `ECSELF`, `DROP`, `ENATDEDIP`.
     */
    forwardMethod: pulumi.Input<string>;
    /**
     * IDs of groups to which the rule must be applied.
     */
    groups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of labels associated with the rule.
     */
    labels?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of location groups to which the rule must be applied.
     */
    locationGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of locations to which the rule must be applied.
     */
    locations?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * The name of the forwarding control rule. Must be unique.
     */
    name: pulumi.Input<string>;
    /**
     * IDs of network application groups to which the rule applies.
     */
    nwApplicationGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of network service groups to which the rule applies.
     */
    nwServiceGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of network services to which the rule applies.
     */
    nwServices?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * The order of execution of the rule with respect to other forwarding control rules.
     */
    order: pulumi.Input<number>;
    /**
     * The ID of the proxy gateway. Required when forwardMethod is `PROXYCHAIN`.
     */
    proxyGatewayId?: pulumi.Input<number | undefined>;
    /**
     * Admin rank of the forwarding control policy rule. Valid values: 0-7. Default: 7.
     */
    rank?: pulumi.Input<number | undefined>;
    /**
     * URL categories that apply to the response for the rule.
     */
    resCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * IDs of source IP address groups for the rule.
     */
    srcIpGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * Source IP addresses or CIDR ranges for the rule.
     */
    srcIps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * IDs of source IPv6 address groups for the rule.
     */
    srcIpv6Groups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * Rule state. Valid values: `ENABLED`, `DISABLED`.
     */
    state?: pulumi.Input<string | undefined>;
    /**
     * The rule type. Valid values: `FORWARDING`.
     */
    type?: pulumi.Input<string | undefined>;
    /**
     * IDs of users to which the rule must be applied.
     */
    users?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * List of ZPA application segments for which this rule is applicable. This field is applicable only when forwardMethod is `ZPA`.
     */
    zpaAppSegments?: pulumi.Input<pulumi.Input<inputs.ZPAAppSegmentInputArgs>[] | undefined>;
    /**
     * The ID of the ZPA gateway. Required when forwardMethod is `ZPA`.
     */
    zpaGatewayId?: pulumi.Input<number | undefined>;
}
//# sourceMappingURL=forwardingControlRule.d.ts.map