AccountNetworkPolicy

`laktory.models.resources.databricks.AccountNetworkPolicy` ¤

Bases: AccountNetworkPolicyBase

Databricks account network policy (account level)

Network access rules (serverless egress destinations, ingress) that workspaces of the account can be bound to. Requires an account-level provider.

Examples:

import io

from laktory import models

policy_yaml = '''
network_policy_id: restricted-egress
egress:
  network_access:
    restriction_mode: RESTRICTED_ACCESS
    allowed_internet_destinations:
    - destination: pypi.org
      internet_destination_type: DNS_NAME
    policy_enforcement:
      enforcement_mode: ENFORCED
workspace_ids:
- 1234567890123456
'''
policy = models.resources.databricks.AccountNetworkPolicy.model_validate_yaml(
    io.StringIO(policy_yaml)
)

References

BASE	DESCRIPTION
`account_id`	The associated account ID for this Network Policy object TYPE: `str \| None \| VariableType` DEFAULT: `None`
`egress`	The network policies applying for egress traffic TYPE: `AccountNetworkPolicyEgress \| None \| VariableType` DEFAULT: `None`
`ingress`	The network policies applying for ingress traffic TYPE: `AccountNetworkPolicyIngress \| None \| VariableType` DEFAULT: `None`
`ingress_dry_run`	The ingress policy for dry run mode. Dry run will always run even if the request is allowed by the ingress policy. When this field is set, the policy will be evaluated and emit logs only without blocking requests TYPE: `AccountNetworkPolicyIngressDryRun \| None \| VariableType` DEFAULT: `None`
`network_policy_id`	The unique identifier for the network policy TYPE: `str \| None \| VariableType` DEFAULT: `None`

LAKTORY	DESCRIPTION
`workspace_ids`	Workspaces the policy is applied to. Each is deployed as a `WorkspaceNetworkOption`. TYPE: `list[int \| VariableType] \| VariableType` DEFAULT: `None`

ATTRIBUTE	DESCRIPTION
`additional_core_resources`	workspace network options TYPE: `list`

`additional_core_resources` `property` ¤

workspace network options

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgress` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`network_access`	The access policy enforced for egress traffic to the internet TYPE: `AccountNetworkPolicyEgressNetworkAccess \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccess` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`allowed_databricks_destinations`	List of Databricks workspace destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode TYPE: `list[AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestinations] \| None \| VariableType` DEFAULT: `None`
`allowed_internet_destinations`	List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode TYPE: `list[AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinations] \| None \| VariableType` DEFAULT: `None`
`allowed_storage_destinations`	List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode TYPE: `list[AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinations] \| None \| VariableType` DEFAULT: `None`
`blocked_internet_destinations`	List of internet destinations that serverless workloads are blocked from accessing. These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN. Currently supports DNS_NAME type only; IP_RANGE support is planned TYPE: `list[AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestinations] \| None \| VariableType` DEFAULT: `None`
`policy_enforcement`	Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES TYPE: `AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement \| None \| VariableType` DEFAULT: `None`
`restriction_mode`	The restriction mode that controls how serverless workloads can access the internet. Possible values are: `FULL_ACCESS`, `RESTRICTED_ACCESS` TYPE: `str \| VariableType`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestinations` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`workspace_ids`	The workspace IDs to allow egress traffic to TYPE: `list[int] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinations` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `str \| None \| VariableType` DEFAULT: `None`
`internet_destination_type`	The type of internet destination. Currently only DNS_NAME is supported. Possible values are: `DNS_NAME` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinations` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`azure_storage_account`	The Azure storage account name TYPE: `str \| None \| VariableType` DEFAULT: `None`
`azure_storage_service`	The Azure storage service type (blob, dfs, etc.) * `bucket_name` (string, optional) * `region` (string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`bucket_name`	TYPE: `str \| None \| VariableType` DEFAULT: `None`
`region`	TYPE: `str \| None \| VariableType` DEFAULT: `None`
`storage_destination_type`	The type of storage destination. Possible values are: `AWS_S3`, `AZURE_STORAGE`, `GOOGLE_CLOUD_STORAGE` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestinations` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `str \| None \| VariableType` DEFAULT: `None`
`internet_destination_type`	The type of internet destination. Currently only DNS_NAME is supported. Possible values are: `DNS_NAME` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`dry_run_mode_product_filter`	When empty, it means dry run for all products. When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`enforcement_mode`	The mode of policy enforcement. ENFORCED blocks traffic that violates policy, while DRY_RUN only logs violations without blocking. When not specified, defaults to ENFORCED. Possible values are: `DRY_RUN`, `ENFORCED` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngress` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`cross_workspace_access`	TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccess \| None \| VariableType` DEFAULT: `None`
`private_access`	The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed TYPE: `AccountNetworkPolicyIngressPrivateAccess \| None \| VariableType` DEFAULT: `None`
`public_access`	The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access TYPE: `AccountNetworkPolicyIngressPublicAccess \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccess` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`allow_rules`	Allow rules are evaluated after deny rules. A request matching any allow rule is allowed; a request matching no rule is denied by default. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRules] \| None \| VariableType` DEFAULT: `None`
`deny_rules`	Deny rules are evaluated first. A request matching any deny rule is denied, regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRules] \| None \| VariableType` DEFAULT: `None`
`restriction_mode`	The restriction mode that controls how serverless workloads can access the internet. Possible values are: `FULL_ACCESS`, `RESTRICTED_ACCESS` TYPE: `str \| VariableType`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_source_workspaces`	Matches all source workspaces TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`selected_workspaces`	Specific source workspace IDs to match TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesOriginSelectedWorkspaces \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesOriginSelectedWorkspaces` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`workspace_ids`	The workspace IDs to allow egress traffic to TYPE: `list[int] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_source_workspaces`	Matches all source workspaces TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`selected_workspaces`	Specific source workspace IDs to match TYPE: `AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesOriginSelectedWorkspaces \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesOriginSelectedWorkspaces` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`workspace_ids`	The workspace IDs to allow egress traffic to TYPE: `list[int] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRun` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`cross_workspace_access`	TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess \| None \| VariableType` DEFAULT: `None`
`private_access`	The network policy restrictions for private access. Configures how requests arriving over private connectivity are governed TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccess \| None \| VariableType` DEFAULT: `None`
`public_access`	The network policy restrictions for public access to the workspace. Configures how public internet traffic is allowed or denied access TYPE: `AccountNetworkPolicyIngressDryRunPublicAccess \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`allow_rules`	Allow rules are evaluated after deny rules. A request matching any allow rule is allowed; a request matching no rule is denied by default. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRules] \| None \| VariableType` DEFAULT: `None`
`deny_rules`	Deny rules are evaluated first. A request matching any deny rule is denied, regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRules] \| None \| VariableType` DEFAULT: `None`
`restriction_mode`	The restriction mode that controls how serverless workloads can access the internet. Possible values are: `FULL_ACCESS`, `RESTRICTED_ACCESS` TYPE: `str \| VariableType`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_source_workspaces`	Matches all source workspaces TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`selected_workspaces`	Specific source workspace IDs to match TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesOriginSelectedWorkspaces \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesOriginSelectedWorkspaces` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`workspace_ids`	The workspace IDs to allow egress traffic to TYPE: `list[int] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_source_workspaces`	Matches all source workspaces TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`selected_workspaces`	Specific source workspace IDs to match TYPE: `AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesOriginSelectedWorkspaces \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesOriginSelectedWorkspaces` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`workspace_ids`	The workspace IDs to allow egress traffic to TYPE: `list[int] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccess` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`allow_rules`	Allow rules are evaluated after deny rules. A request matching any allow rule is allowed; a request matching no rule is denied by default. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressDryRunPrivateAccessAllowRules] \| None \| VariableType` DEFAULT: `None`
`deny_rules`	Deny rules are evaluated first. A request matching any deny rule is denied, regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressDryRunPrivateAccessDenyRules] \| None \| VariableType` DEFAULT: `None`
`restriction_mode`	The restriction mode that controls how serverless workloads can access the internet. Possible values are: `FULL_ACCESS`, `RESTRICTED_ACCESS` TYPE: `str \| VariableType`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_private_access`	Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`all_registered_endpoints`	Matches requests arriving through any endpoint registered to the account. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`azure_workspace_private_link`	Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`endpoints`	Matches requests arriving through any of the specified registered endpoints TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesOriginEndpoints \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesOriginEndpoints` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`endpoint_ids`	The IDs of the registered endpoints. Must contain at least one endpoint ID TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_private_access`	Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`all_registered_endpoints`	Matches requests arriving through any endpoint registered to the account. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`azure_workspace_private_link`	Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`endpoints`	Matches requests arriving through any of the specified registered endpoints TYPE: `AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesOriginEndpoints \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRulesOriginEndpoints` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`endpoint_ids`	The IDs of the registered endpoints. Must contain at least one endpoint ID TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccess` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`allow_rules`	Allow rules are evaluated after deny rules. A request matching any allow rule is allowed; a request matching no rule is denied by default. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressDryRunPublicAccessAllowRules] \| None \| VariableType` DEFAULT: `None`
`deny_rules`	Deny rules are evaluated first. A request matching any deny rule is denied, regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressDryRunPublicAccessDenyRules] \| None \| VariableType` DEFAULT: `None`
`restriction_mode`	The restriction mode that controls how serverless workloads can access the internet. Possible values are: `FULL_ACCESS`, `RESTRICTED_ACCESS` TYPE: `str \| VariableType`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_ip_ranges`	Matches all IPv4 and IPv6 ranges (both public and private) TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`excluded_ip_ranges`	Excluded means: all public IP ranges except this one TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesOriginExcludedIpRanges \| None \| VariableType` DEFAULT: `None`
`included_ip_ranges`	Will not allow IP ranges with private IPs TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesOriginIncludedIpRanges \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesOriginExcludedIpRanges` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`ip_ranges`	We only support IPv4 and IPv4 CIDR notation for now TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessAllowRulesOriginIncludedIpRanges` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`ip_ranges`	We only support IPv4 and IPv4 CIDR notation for now TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_ip_ranges`	Matches all IPv4 and IPv6 ranges (both public and private) TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`excluded_ip_ranges`	Excluded means: all public IP ranges except this one TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesOriginExcludedIpRanges \| None \| VariableType` DEFAULT: `None`
`included_ip_ranges`	Will not allow IP ranges with private IPs TYPE: `AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesOriginIncludedIpRanges \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesOriginExcludedIpRanges` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`ip_ranges`	We only support IPv4 and IPv4 CIDR notation for now TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPublicAccessDenyRulesOriginIncludedIpRanges` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`ip_ranges`	We only support IPv4 and IPv4 CIDR notation for now TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccess` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`allow_rules`	Allow rules are evaluated after deny rules. A request matching any allow rule is allowed; a request matching no rule is denied by default. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressPrivateAccessAllowRules] \| None \| VariableType` DEFAULT: `None`
`deny_rules`	Deny rules are evaluated first. A request matching any deny rule is denied, regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressPrivateAccessDenyRules] \| None \| VariableType` DEFAULT: `None`
`restriction_mode`	The restriction mode that controls how serverless workloads can access the internet. Possible values are: `FULL_ACCESS`, `RESTRICTED_ACCESS` TYPE: `str \| VariableType`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressPrivateAccessAllowRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_private_access`	Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`all_registered_endpoints`	Matches requests arriving through any endpoint registered to the account. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`azure_workspace_private_link`	Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`endpoints`	Matches requests arriving through any of the specified registered endpoints TYPE: `AccountNetworkPolicyIngressPrivateAccessAllowRulesOriginEndpoints \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessAllowRulesOriginEndpoints` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`endpoint_ids`	The IDs of the registered endpoints. Must contain at least one endpoint ID TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressPrivateAccessDenyRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_private_access`	Matches requests arriving over any private connectivity, including registered endpoints and the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`all_registered_endpoints`	Matches requests arriving through any endpoint registered to the account. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`azure_workspace_private_link`	Matches requests arriving through the workspace's Azure Private Link (ui-api) endpoints. Can only be used in deny rules of workspace-level network policies. Must be set to true when specified TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`endpoints`	Matches requests arriving through any of the specified registered endpoints TYPE: `AccountNetworkPolicyIngressPrivateAccessDenyRulesOriginEndpoints \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPrivateAccessDenyRulesOriginEndpoints` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`endpoint_ids`	The IDs of the registered endpoints. Must contain at least one endpoint ID TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccess` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`allow_rules`	Allow rules are evaluated after deny rules. A request matching any allow rule is allowed; a request matching no rule is denied by default. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressPublicAccessAllowRules] \| None \| VariableType` DEFAULT: `None`
`deny_rules`	Deny rules are evaluated first. A request matching any deny rule is denied, regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS TYPE: `list[AccountNetworkPolicyIngressPublicAccessDenyRules] \| None \| VariableType` DEFAULT: `None`
`restriction_mode`	The restriction mode that controls how serverless workloads can access the internet. Possible values are: `FULL_ACCESS`, `RESTRICTED_ACCESS` TYPE: `str \| VariableType`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressPublicAccessAllowRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_ip_ranges`	Matches all IPv4 and IPv6 ranges (both public and private) TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`excluded_ip_ranges`	Excluded means: all public IP ranges except this one TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesOriginExcludedIpRanges \| None \| VariableType` DEFAULT: `None`
`included_ip_ranges`	Will not allow IP ranges with private IPs TYPE: `AccountNetworkPolicyIngressPublicAccessAllowRulesOriginIncludedIpRanges \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesOriginExcludedIpRanges` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`ip_ranges`	We only support IPv4 and IPv4 CIDR notation for now TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessAllowRulesOriginIncludedIpRanges` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`ip_ranges`	We only support IPv4 and IPv4 CIDR notation for now TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRules` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`authentication`	The authenticated identity the request must match. When unset, the rule matches all users and service principals. On the account-level network policy, scoping to specific identities is not currently supported, so this field must be unset (the rule matches all users and service principals) TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesAuthentication \| None \| VariableType` DEFAULT: `None`
`destination`	The internet destination to which access will be allowed. Format dependent on the destination type TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesDestination \| None \| VariableType` DEFAULT: `None`
`label`	The label for this ingress rule * `origin` (CustomerFacingIngressNetworkPolicyPublicRequestOrigin, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`origin`	The origin the request must match — the private connectivity the request arrives through, for example a specific set of registered endpoints or any endpoint registered to the account. See PrivateRequestOrigin TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesOrigin \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesAuthentication` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`identities`	Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES TYPE: `list[AccountNetworkPolicyIngressPublicAccessDenyRulesAuthenticationIdentities] \| None \| VariableType` DEFAULT: `None`
`identity_type`	Possible values are: `IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS`, `IDENTITY_TYPE_ALL_USERS`, `IDENTITY_TYPE_SELECTED_IDENTITIES` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesAuthenticationIdentities` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`principal_id`	TYPE: `int \| None \| VariableType` DEFAULT: `None`
`principal_type`	Possible values are: `PRINCIPAL_TYPE_SERVICE_PRINCIPAL`, `PRINCIPAL_TYPE_USER` TYPE: `str \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesDestination` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`account_api`	Matches requests to account-level APIs. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationAccountApi \| None \| VariableType` DEFAULT: `None`
`account_databricks_one`	Account DatabricksOne destination is not supported TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationAccountDatabricksOne \| None \| VariableType` DEFAULT: `None`
`account_ui`	Matches requests to the account console UI. Can only be used in the account-level network policy TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationAccountUi \| None \| VariableType` DEFAULT: `None`
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`apps_runtime`	TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationAppsRuntime \| None \| VariableType` DEFAULT: `None`
`lakebase_runtime`	TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationLakebaseRuntime \| None \| VariableType` DEFAULT: `None`
`workspace_api`	TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationWorkspaceApi \| None \| VariableType` DEFAULT: `None`
`workspace_ui`	TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationWorkspaceUi \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationAccountApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationAccountDatabricksOne` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationAccountUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationAppsRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationLakebaseRuntime` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationWorkspaceApi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`excluded_scopes`	Inverse of `scopes`: matches every API scope EXCEPT those listed here ('allow all except'). Mutually exclusive with `scopes` — a single destination may set at most one of the two TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`
`scope_qualifier`	Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. Possible values are: `API_SCOPE_QUALIFIER_ALL`, `API_SCOPE_QUALIFIER_READ` * `scopes` (list of string, optional) TYPE: `str \| None \| VariableType` DEFAULT: `None`
`scopes`	The API scopes to match. Use 'all-apis' to match any account-level API TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesDestinationWorkspaceUi` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_destinations`	Must be set to true TYPE: `bool \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesOrigin` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`all_ip_ranges`	Matches all IPv4 and IPv6 ranges (both public and private) TYPE: `bool \| None \| VariableType` DEFAULT: `None`
`excluded_ip_ranges`	Excluded means: all public IP ranges except this one TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesOriginExcludedIpRanges \| None \| VariableType` DEFAULT: `None`
`included_ip_ranges`	Will not allow IP ranges with private IPs TYPE: `AccountNetworkPolicyIngressPublicAccessDenyRulesOriginIncludedIpRanges \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesOriginExcludedIpRanges` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`ip_ranges`	We only support IPv4 and IPv4 CIDR notation for now TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressPublicAccessDenyRulesOriginIncludedIpRanges` ¤

Bases: BaseModel

PARAMETER	DESCRIPTION
`ip_ranges`	We only support IPv4 and IPv4 CIDR notation for now TYPE: `list[str] \| None \| VariableType` DEFAULT: `None`

AccountNetworkPolicy

laktory.models.resources.databricks.AccountNetworkPolicy ¤

additional_core_resources property ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgress ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccess ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestinations ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinations ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinations ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestinations ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngress ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccess ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRules ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesAuthentication ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesAuthenticationIdentities ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestination ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountDatabricksOne ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAppsRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationLakebaseRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationWorkspaceApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationWorkspaceUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesOrigin ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesOriginSelectedWorkspaces ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRules ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesAuthentication ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesAuthenticationIdentities ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestination ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountDatabricksOne ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAppsRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationLakebaseRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationWorkspaceApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationWorkspaceUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesOrigin ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesOriginSelectedWorkspaces ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRun ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRules ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesAuthentication ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesAuthenticationIdentities ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestination ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountDatabricksOne ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAppsRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationLakebaseRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationWorkspaceApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationWorkspaceUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesOrigin ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesOriginSelectedWorkspaces ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRules ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesAuthentication ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesAuthenticationIdentities ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestination ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountDatabricksOne ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAppsRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationLakebaseRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationWorkspaceApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationWorkspaceUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesOrigin ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesOriginSelectedWorkspaces ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccess ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRules ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesAuthentication ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesAuthenticationIdentities ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestination ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountDatabricksOne ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAppsRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationLakebaseRuntime ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationWorkspaceApi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationWorkspaceUi ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesOrigin ¤

laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesOriginEndpoints ¤

`laktory.models.resources.databricks.AccountNetworkPolicy` ¤

`additional_core_resources` `property` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgress` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccess` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessAllowedDatabricksDestinations` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessAllowedInternetDestinations` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessAllowedStorageDestinations` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessBlockedInternetDestinations` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngress` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccess` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRules` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesAuthentication` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesAuthenticationIdentities` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestination` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountDatabricksOne` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAccountUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationAppsRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationLakebaseRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationWorkspaceApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesDestinationWorkspaceUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesOrigin` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessAllowRulesOriginSelectedWorkspaces` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRules` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesAuthentication` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesAuthenticationIdentities` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestination` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountDatabricksOne` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAccountUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationAppsRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationLakebaseRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationWorkspaceApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesDestinationWorkspaceUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesOrigin` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressCrossWorkspaceAccessDenyRulesOriginSelectedWorkspaces` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRun` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccess` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRules` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesAuthentication` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesAuthenticationIdentities` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestination` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountDatabricksOne` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAccountUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationAppsRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationLakebaseRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationWorkspaceApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesDestinationWorkspaceUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesOrigin` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessAllowRulesOriginSelectedWorkspaces` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRules` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesAuthentication` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesAuthenticationIdentities` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestination` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountDatabricksOne` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAccountUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationAppsRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationLakebaseRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationWorkspaceApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesDestinationWorkspaceUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesOrigin` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunCrossWorkspaceAccessDenyRulesOriginSelectedWorkspaces` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccess` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRules` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesAuthentication` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesAuthenticationIdentities` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestination` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountDatabricksOne` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAccountUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationAppsRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationLakebaseRuntime` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationWorkspaceApi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesDestinationWorkspaceUi` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesOrigin` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessAllowRulesOriginEndpoints` ¤

`laktory.models.resources.databricks.accountnetworkpolicy.AccountNetworkPolicyIngressDryRunPrivateAccessDenyRules` ¤