import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
 * The zia_sandbox_rules resource manages sandbox policy rules in the Zscaler Internet Access (ZIA) cloud service. Sandbox rules define actions for file analysis based on criteria such as locations, departments, groups, users, and file types.
 *
 * For more information, see the [ZIA Cloud Sandbox documentation](https://help.zscaler.com/zia/about-cloud-sandbox-policies).
 *
 * ## Example Usage
 * ### Basic Sandbox Rule
 *
 * ```typescript
 * import * as zia from "@bdzscaler/pulumi-zia";
 *
 * const example = new zia.SandboxRule("example", {
 *     name: "Example Sandbox Rule",
 *     description: "Block suspicious file types",
 *     order: 1,
 *     state: "ENABLED",
 *     baRuleAction: "ALLOW",
 *     fileTypes: ["ALL_OUTBOUND"],
 *     protocols: ["FTP_RULE", "SSL_RULE", "FOHTTP_RULE", "HTTP_PROXY"],
 * });
 * ```
 *
 * ## Import
 *
 * An existing Sandbox Rule can be imported using its resource ID, e.g.
 *
 * ```sh
 * $ pulumi import zia:index:SandboxRule example 12345
 * ```
 */
export declare class SandboxRule extends pulumi.CustomResource {
    /**
     * Get an existing SandboxRule resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): SandboxRule;
    /**
     * Returns true if the given object is an instance of SandboxRule.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is SandboxRule;
    /**
     * List of behavioral analysis policy categories.
     */
    readonly baPolicyCategories: pulumi.Output<string[] | undefined>;
    /**
     * The action applied when the rule is matched. Valid values: `ALLOW`, `BLOCK`, `QUARANTINE`.
     */
    readonly baRuleAction: pulumi.Output<string | undefined>;
    /**
     * Threat score threshold for the rule. Files with a score above this value trigger the action.
     */
    readonly byThreatScore: pulumi.Output<number | undefined>;
    /**
     * IDs of departments to which the rule applies.
     */
    readonly departments: pulumi.Output<number[] | undefined>;
    /**
     * Additional information about the sandbox rule.
     */
    readonly description: pulumi.Output<string | undefined>;
    /**
     * List of file types for which the rule applies (e.g., `ALL_OUTBOUND`, `EXE`, `DLL`).
     */
    readonly fileTypes: pulumi.Output<string[] | undefined>;
    /**
     * If set to true, a first-time action is enabled.
     */
    readonly firstTimeEnable: pulumi.Output<boolean | undefined>;
    /**
     * The action for first-time file downloads. Valid values: `ALLOW_SCAN`, `QUARANTINE`.
     */
    readonly firstTimeOperation: pulumi.Output<string | undefined>;
    /**
     * IDs of groups to which the rule applies.
     */
    readonly groups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of labels associated with the rule.
     */
    readonly labels: pulumi.Output<number[] | undefined>;
    /**
     * IDs of location groups to which the rule applies.
     */
    readonly locationGroups: pulumi.Output<number[] | undefined>;
    /**
     * IDs of locations to which the rule applies.
     */
    readonly locations: pulumi.Output<number[] | undefined>;
    /**
     * If set to true, machine learning-based analysis action is enabled.
     */
    readonly mlActionEnabled: pulumi.Output<boolean | undefined>;
    /**
     * The name of the sandbox rule. Must be unique.
     */
    readonly name: pulumi.Output<string>;
    /**
     * The order of execution of the rule with respect to other sandbox rules.
     */
    readonly order: pulumi.Output<number>;
    /**
     * Protocols to which the rule applies. Valid values: `FTP_RULE`, `SSL_RULE`, `FOHTTP_RULE`, `HTTP_PROXY`.
     */
    readonly protocols: pulumi.Output<string[] | undefined>;
    /**
     * Admin rank of the sandbox policy rule. Valid values: 0-7. Default: 7.
     */
    readonly rank: pulumi.Output<number | undefined>;
    /**
     * The system-generated ID of the sandbox rule.
     */
    readonly ruleId: pulumi.Output<number>;
    /**
     * Rule state. Valid values: `ENABLED`, `DISABLED`.
     */
    readonly state: pulumi.Output<string | undefined>;
    /**
     * List of URL categories to which the rule applies.
     */
    readonly urlCategories: pulumi.Output<string[] | undefined>;
    /**
     * IDs of users to which the rule applies.
     */
    readonly users: pulumi.Output<number[] | undefined>;
    /**
     * List of ZPA application segments to which the rule applies.
     */
    readonly zpaAppSegments: pulumi.Output<outputs.ZPAAppSegmentInput[] | undefined>;
    /**
     * Create a SandboxRule resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: SandboxRuleArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * The set of arguments for constructing a SandboxRule resource.
 */
export interface SandboxRuleArgs {
    /**
     * List of behavioral analysis policy categories.
     */
    baPolicyCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * The action applied when the rule is matched. Valid values: `ALLOW`, `BLOCK`, `QUARANTINE`.
     */
    baRuleAction?: pulumi.Input<string | undefined>;
    /**
     * Threat score threshold for the rule. Files with a score above this value trigger the action.
     */
    byThreatScore?: pulumi.Input<number | undefined>;
    /**
     * IDs of departments to which the rule applies.
     */
    departments?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * Additional information about the sandbox rule.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * List of file types for which the rule applies (e.g., `ALL_OUTBOUND`, `EXE`, `DLL`).
     */
    fileTypes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * If set to true, a first-time action is enabled.
     */
    firstTimeEnable?: pulumi.Input<boolean | undefined>;
    /**
     * The action for first-time file downloads. Valid values: `ALLOW_SCAN`, `QUARANTINE`.
     */
    firstTimeOperation?: pulumi.Input<string | undefined>;
    /**
     * IDs of groups to which the rule applies.
     */
    groups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of labels associated with the rule.
     */
    labels?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of location groups to which the rule applies.
     */
    locationGroups?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * IDs of locations to which the rule applies.
     */
    locations?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * If set to true, machine learning-based analysis action is enabled.
     */
    mlActionEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * The name of the sandbox rule. Must be unique.
     */
    name: pulumi.Input<string>;
    /**
     * The order of execution of the rule with respect to other sandbox rules.
     */
    order: pulumi.Input<number>;
    /**
     * Protocols to which the rule applies. Valid values: `FTP_RULE`, `SSL_RULE`, `FOHTTP_RULE`, `HTTP_PROXY`.
     */
    protocols?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Admin rank of the sandbox policy rule. Valid values: 0-7. Default: 7.
     */
    rank?: pulumi.Input<number | undefined>;
    /**
     * Rule state. Valid values: `ENABLED`, `DISABLED`.
     */
    state?: pulumi.Input<string | undefined>;
    /**
     * List of URL categories to which the rule applies.
     */
    urlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * IDs of users to which the rule applies.
     */
    users?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * List of ZPA application segments to which the rule applies.
     */
    zpaAppSegments?: pulumi.Input<pulumi.Input<inputs.ZPAAppSegmentInputArgs>[] | undefined>;
}
//# sourceMappingURL=sandboxRule.d.ts.map