Zscaler ZPA

Zscaler Private Access (ZPA) provides zero trust network access to internal applications. Apono discovers ZPA access policy rules and grants temporary, user scoped network access to them

Example Usage

---

Terraform

zscaler-zpa-integration.tf

resource "apono_integration" "zscaler-zpa-integration" {
  name                     = "Zscaler ZPA"
  type                     = "zscaler-zpa"
  connector_id             = "apono-connector-id"
  connected_resource_types = ["zscaler-zpa-access-policy-rule"]
  metadata = {
    customer_id = "<Customer ID>"
    policy_attribute_protocol = "<Policy Attribute Protocol>"
    policy_email_attribute = "<Policy Email Attribute>"
    idp_name = "<IdP Name>"
  }
  aws_secret = {
    region    = "aws_region_template_value"
    secret_id = "aws_secret_id_template_value"
  }
}

Terraform V2

zscaler-zpa-integration.tf

resource "apono_resource_integration" "zscaler-zpa-integration" {
  name                     = "Zscaler ZPA"
  type                     = "zscaler-zpa"
  connector_id             = "apono-connector-id"
  connected_resource_types = ["zscaler-zpa-access-policy-rule"]
  integration_config = {
    customer_id = "<Customer ID>"
    policy_attribute_protocol = "<Policy Attribute Protocol>"
    policy_email_attribute = "<Policy Email Attribute>"
    idp_name = "<IdP Name>"
  }
  secret_store_config = {
    aws = {
      region    = "aws_region_template_value"
      secret_id = "aws_secret_id_template_value"
    }
}

Public API

zscaler-zpa-integration.json

{
    "zscaler-zpa-integration": {
        "name": "Zscaler ZPA",
        "type": "zscaler-zpa",
        "connector_id": "apono-connector-id",
        "connected_resource_types": [
            "zscaler-zpa-access-policy-rule"
        ],
        "integration_config": {
            "customer_id": "<Customer ID>",
            "policy_attribute_protocol": "<Policy Attribute Protocol>",
            "policy_email_attribute": "<Policy Email Attribute>",
            "idp_name": "<IdP Name>",
        },
	"secret_store_config": {
    	    "region": "aws_region_template_value",
    	    "secret_id": "aws_secret_id_template_value"
  	    }
    }
}

Schema

---

• type zscaler-zpa

• connected_resource_types List of resource types to sync.

Available resource types you can use

• zscaler-zpa-access-policy-rule

Integration Config

---

• customer_id (Required | String) Customer ID

• policy_attribute_protocol (Optional | String) Policy Attribute Protocol

  • Default value: scim

  • Possible values: scim, saml

• policy_email_attribute (Required | String) Policy Email Attribute

• idp_name (Required | String) IdP Name