---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# gcp_networksecurity_gateway_security_policy_rule{% #gcp_networksecurity_gateway_security_policy_rule %}

## `ancestors`{% #ancestors %}

**Type**: `UNORDERED_LIST_STRING`

## `application_matcher`{% #application_matcher %}

**Type**: `STRING`**Provider name**: `applicationMatcher`**Description**: Optional. CEL expression for matching on L7/application level criteria.

## `basic_profile`{% #basic_profile %}

**Type**: `STRING`**Provider name**: `basicProfile`**Description**: Required. Profile which tells what the primitive action should be.**Possible values**:

- `BASIC_PROFILE_UNSPECIFIED` - If there is not a mentioned action for the target.
- `ALLOW` - Allow the matched traffic.
- `DENY` - Deny the matched traffic.

## `create_time`{% #create_time %}

**Type**: `TIMESTAMP`**Provider name**: `createTime`**Description**: Output only. Time when the rule was created.

## `description`{% #description %}

**Type**: `STRING`**Provider name**: `description`**Description**: Optional. Free-text description of the resource.

## `enabled`{% #enabled %}

**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: Required. Whether the rule is enforced.

## `labels`{% #labels %}

**Type**: `UNORDERED_LIST_STRING`

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `name`**Description**: Required. Immutable. Name of the resource. ame is the full resource name so projects/{project}/locations/{location}/gatewaySecurityPolicies/{gateway_security_policy}/rules/{rule} rule should match the pattern: (^a-z?$).

## `organization_id`{% #organization_id %}

**Type**: `STRING`

## `parent`{% #parent %}

**Type**: `STRING`

## `priority`{% #priority %}

**Type**: `INT32`**Provider name**: `priority`**Description**: Required. Priority of the rule. Lower number corresponds to higher precedence.

## `project_id`{% #project_id %}

**Type**: `STRING`

## `project_number`{% #project_number %}

**Type**: `STRING`

## `region_id`{% #region_id %}

**Type**: `STRING`

## `resource_name`{% #resource_name %}

**Type**: `STRING`

## `session_matcher`{% #session_matcher %}

**Type**: `STRING`**Provider name**: `sessionMatcher`**Description**: Required. CEL expression for matching on session criteria.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `tls_inspection_enabled`{% #tls_inspection_enabled %}

**Type**: `BOOLEAN`**Provider name**: `tlsInspectionEnabled`**Description**: Optional. Flag to enable TLS inspection of traffic matching on , can only be true if the parent GatewaySecurityPolicy references a TLSInspectionConfig.

## `update_time`{% #update_time %}

**Type**: `TIMESTAMP`**Provider name**: `updateTime`**Description**: Output only. Time when the rule was updated.

## `zone_id`{% #zone_id %}

**Type**: `STRING`