1. Packages
  2. Databricks Provider
  3. API Docs
  4. getAccountNetworkPolicies
Databricks v1.78.0 published on Friday, Nov 7, 2025 by Pulumi
pulumi/pulumi-databricks

databricks.getAccountNetworkPolicies

Start a Neo task
Explain and create a databricks.getAccountNetworkPolicies resource
databricks logo
Databricks v1.78.0 published on Friday, Nov 7, 2025 by Pulumi
pulumi/pulumi-databricks

    GA

    This data source can be used to fetch the list of network policies.

    Note This data source can only be used with an account-level provider!

    Example Usage

    Getting a list of all network policies:

    import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const all = databricks.getAccountNetworkPolicies({});

    import pulumi
import pulumi_databricks as databricks

all = databricks.get_account_network_policies()

    package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := databricks.GetAccountNetworkPolicies(ctx, map[string]interface{}{}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var all = Databricks.GetAccountNetworkPolicies.Invoke();

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.DatabricksFunctions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var all = DatabricksFunctions.getAccountNetworkPolicies(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference);

    }
}

    variables:
  all:
    fn::invoke:
      function: databricks:getAccountNetworkPolicies
      arguments: {}

    Using getAccountNetworkPolicies

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAccountNetworkPolicies(opts?: InvokeOptions): Promise<GetAccountNetworkPoliciesResult>
function getAccountNetworkPoliciesOutput(opts?: InvokeOptions): Output<GetAccountNetworkPoliciesResult>
    def get_account_network_policies(opts: Optional[InvokeOptions] = None) -> GetAccountNetworkPoliciesResult
def get_account_network_policies_output(opts: Optional[InvokeOptions] = None) -> Output[GetAccountNetworkPoliciesResult]
    func GetAccountNetworkPolicies(ctx *Context, opts ...InvokeOption) (*GetAccountNetworkPoliciesResult, error)
func GetAccountNetworkPoliciesOutput(ctx *Context, opts ...InvokeOption) GetAccountNetworkPoliciesResultOutput

    > Note: This function is named GetAccountNetworkPolicies in the Go SDK.

    public static class GetAccountNetworkPolicies 
{
    public static Task<GetAccountNetworkPoliciesResult> InvokeAsync(InvokeOptions? opts = null)
    public static Output<GetAccountNetworkPoliciesResult> Invoke(InvokeOptions? opts = null)
}
    public static CompletableFuture<GetAccountNetworkPoliciesResult> getAccountNetworkPolicies(InvokeOptions options)
public static Output<GetAccountNetworkPoliciesResult> getAccountNetworkPolicies(InvokeOptions options)

    fn::invoke:
  function: databricks:index/getAccountNetworkPolicies:getAccountNetworkPolicies
  arguments:
    # arguments dictionary

    getAccountNetworkPolicies Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    Items List<GetAccountNetworkPoliciesItem>
    Id string
    The provider-assigned unique ID for this managed resource.
    Items []GetAccountNetworkPoliciesItem
    id String
    The provider-assigned unique ID for this managed resource.
    items List<GetAccountNetworkPoliciesItem>
    id string
    The provider-assigned unique ID for this managed resource.
    items GetAccountNetworkPoliciesItem[]
    id str
    The provider-assigned unique ID for this managed resource.
    items Sequence[GetAccountNetworkPoliciesItem]
    id String
    The provider-assigned unique ID for this managed resource.
    items List<Property Map>

    Supporting Types

    GetAccountNetworkPoliciesItem

    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    NetworkPolicyId string
    (string) - The unique identifier for the network policy
    AccountId string
    (string) - The associated account ID for this Network Policy object
    Egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    NetworkPolicyId string
    (string) - The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    networkPolicyId String
    (string) - The unique identifier for the network policy
    accountId string
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    networkPolicyId string
    (string) - The unique identifier for the network policy
    account_id str
    (string) - The associated account ID for this Network Policy object
    egress GetAccountNetworkPoliciesItemEgress
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    network_policy_id str
    (string) - The unique identifier for the network policy
    accountId String
    (string) - The associated account ID for this Network Policy object
    egress Property Map
    (NetworkPolicyEgress) - The network policies applying for egress traffic
    networkPolicyId String
    (string) - The unique identifier for the network policy

    GetAccountNetworkPoliciesItemEgress

    NetworkAccess GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    NetworkAccess GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    network_access GetAccountNetworkPoliciesItemEgressNetworkAccess
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet
    networkAccess Property Map
    (EgressNetworkPolicyNetworkAccessPolicy) - The access policy enforced for egress traffic to the internet

    GetAccountNetworkPoliciesItemEgressNetworkAccess

    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations List<GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations List<GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    RestrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    AllowedInternetDestinations []GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    AllowedStorageDestinations []GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    PolicyEnforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode string
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination[]
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination[]
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restriction_mode str
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowed_internet_destinations Sequence[GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination]
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowed_storage_destinations Sequence[GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination]
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policy_enforcement GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES
    restrictionMode String
    (string) - The restriction mode that controls how serverless workloads can access the internet. Possible values are: FULL_ACCESS, RESTRICTED_ACCESS
    allowedInternetDestinations List<Property Map>
    (list of EgressNetworkPolicyNetworkAccessPolicyInternetDestination) - List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    allowedStorageDestinations List<Property Map>
    (list of EgressNetworkPolicyNetworkAccessPolicyStorageDestination) - List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode
    policyEnforcement Property Map
    (EgressNetworkPolicyNetworkAccessPolicyPolicyEnforcement) - Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES

    GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedInternetDestination

    Destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    Destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    InternetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination string
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType string
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination str
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internet_destination_type str
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME
    destination String
    (string) - The internet destination to which access will be allowed. Format dependent on the destination type
    internetDestinationType String
    (string) - The type of internet destination. Currently only DNS_NAME is supported. Possible values are: DNS_NAME

    GetAccountNetworkPoliciesItemEgressNetworkAccessAllowedStorageDestination

    AzureStorageAccount string
    (string) - The Azure storage account name
    AzureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    BucketName string
    (string)
    Region string
    (string)
    StorageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    AzureStorageAccount string
    (string) - The Azure storage account name
    AzureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    BucketName string
    (string)
    Region string
    (string)
    StorageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    (string) - The Azure storage account name
    azureStorageService String
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName String
    (string)
    region String
    (string)
    storageDestinationType String
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount string
    (string) - The Azure storage account name
    azureStorageService string
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName string
    (string)
    region string
    (string)
    storageDestinationType string
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azure_storage_account str
    (string) - The Azure storage account name
    azure_storage_service str
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucket_name str
    (string)
    region str
    (string)
    storage_destination_type str
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE
    azureStorageAccount String
    (string) - The Azure storage account name
    azureStorageService String
    (string) - The Azure storage service type (blob, dfs, etc.)
    bucketName String
    (string)
    region String
    (string)
    storageDestinationType String
    (string) - The type of storage destination. Possible values are: AWS_S3, AZURE_STORAGE, GOOGLE_CLOUD_STORAGE

    GetAccountNetworkPoliciesItemEgressNetworkAccessPolicyEnforcement

    DryRunModeProductFilters List<string>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    DryRunModeProductFilters []string
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    EnforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters string[]
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode string
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dry_run_mode_product_filters Sequence[str]
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcement_mode str
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED
    dryRunModeProductFilters List<String>
    (list of string) - When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode
    enforcementMode String
    (string) - The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: DRY_RUN, ENFORCED

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo
    Databricks v1.78.0 published on Friday, Nov 7, 2025 by Pulumi
    pulumi/pulumi-databricks
      Meet Neo: Your AI Platform Teammate