@pulumi/alicloud 3.27.0 → 3.28.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (94) hide show
  1. package/adb/dbcluster.d.ts +1 -1
  2. package/adb/dbcluster.js +1 -1
  3. package/alikafka/instance.d.ts +37 -9
  4. package/alikafka/instance.js +4 -0
  5. package/alikafka/instance.js.map +1 -1
  6. package/apigateway/backend.d.ts +116 -0
  7. package/apigateway/backend.js +93 -0
  8. package/apigateway/backend.js.map +1 -0
  9. package/apigateway/getBackends.d.ts +69 -0
  10. package/apigateway/getBackends.js +44 -0
  11. package/apigateway/getBackends.js.map +1 -0
  12. package/apigateway/index.d.ts +2 -0
  13. package/apigateway/index.js +6 -0
  14. package/apigateway/index.js.map +1 -1
  15. package/cloudstoragegateway/gatewayBlockVolume.d.ts +3 -3
  16. package/cloudstoragegateway/gatewayFileShare.d.ts +3 -3
  17. package/cms/alarm.d.ts +18 -0
  18. package/cms/alarm.js +2 -0
  19. package/cms/alarm.js.map +1 -1
  20. package/cs/nodePool.d.ts +76 -9
  21. package/cs/nodePool.js +47 -0
  22. package/cs/nodePool.js.map +1 -1
  23. package/ddos/bgpIp.d.ts +113 -0
  24. package/ddos/bgpIp.js +94 -0
  25. package/ddos/bgpIp.js.map +1 -0
  26. package/ddos/getDdosBgpIps.d.ts +92 -0
  27. package/ddos/getDdosBgpIps.js +51 -0
  28. package/ddos/getDdosBgpIps.js.map +1 -0
  29. package/ddos/index.d.ts +2 -0
  30. package/ddos/index.js +6 -0
  31. package/ddos/index.js.map +1 -1
  32. package/ecs/autoProvisioningGroup.d.ts +3 -3
  33. package/ecs/disk.d.ts +1 -1
  34. package/ecs/ecsDisk.d.ts +1 -1
  35. package/ecs/ecsInstanceSet.d.ts +3 -3
  36. package/ecs/instance.d.ts +36 -0
  37. package/ecs/instance.js +6 -0
  38. package/ecs/instance.js.map +1 -1
  39. package/fc/functionAsyncInvokeConfig.d.ts +3 -3
  40. package/fc/index.d.ts +1 -0
  41. package/fc/index.js +5 -0
  42. package/fc/index.js.map +1 -1
  43. package/fc/layerVersion.d.ts +177 -0
  44. package/fc/layerVersion.js +100 -0
  45. package/fc/layerVersion.js.map +1 -0
  46. package/package.json +2 -2
  47. package/package.json.dev +2 -2
  48. package/polardb/getGlobalDatabaseNetworks.d.ts +101 -0
  49. package/polardb/getGlobalDatabaseNetworks.js +53 -0
  50. package/polardb/getGlobalDatabaseNetworks.js.map +1 -0
  51. package/polardb/globalDatabaseNetwork.d.ts +117 -0
  52. package/polardb/globalDatabaseNetwork.js +105 -0
  53. package/polardb/globalDatabaseNetwork.js.map +1 -0
  54. package/polardb/index.d.ts +2 -0
  55. package/polardb/index.js +6 -0
  56. package/polardb/index.js.map +1 -1
  57. package/resourcemanager/account.d.ts +18 -0
  58. package/resourcemanager/account.js +2 -0
  59. package/resourcemanager/account.js.map +1 -1
  60. package/resourcemanager/delegatedAdministrator.d.ts +92 -0
  61. package/resourcemanager/delegatedAdministrator.js +89 -0
  62. package/resourcemanager/delegatedAdministrator.js.map +1 -0
  63. package/resourcemanager/getDelegatedAdministrators.d.ts +70 -0
  64. package/resourcemanager/getDelegatedAdministrators.js +46 -0
  65. package/resourcemanager/getDelegatedAdministrators.js.map +1 -0
  66. package/resourcemanager/index.d.ts +2 -0
  67. package/resourcemanager/index.js +6 -0
  68. package/resourcemanager/index.js.map +1 -1
  69. package/types/input.d.ts +221 -41
  70. package/types/output.d.ts +497 -1
  71. package/vod/domain.d.ts +2 -2
  72. package/vpc/getIpv4Gateways.d.ts +94 -0
  73. package/vpc/getIpv4Gateways.js +49 -0
  74. package/vpc/getIpv4Gateways.js.map +1 -0
  75. package/vpc/index.d.ts +2 -0
  76. package/vpc/index.js +6 -0
  77. package/vpc/index.js.map +1 -1
  78. package/vpc/ipv4Gateway.d.ts +124 -0
  79. package/vpc/ipv4Gateway.js +92 -0
  80. package/vpc/ipv4Gateway.js.map +1 -0
  81. package/vpc/natIp.d.ts +7 -1
  82. package/vpc/natIp.js.map +1 -1
  83. package/vpc/subnet.d.ts +4 -0
  84. package/vpc/subnet.js +6 -0
  85. package/vpc/subnet.js.map +1 -1
  86. package/vpn/gatewayVpnAttachment.d.ts +260 -0
  87. package/vpn/gatewayVpnAttachment.js +153 -0
  88. package/vpn/gatewayVpnAttachment.js.map +1 -0
  89. package/vpn/getGatewayVpnAttachments.d.ts +91 -0
  90. package/vpn/getGatewayVpnAttachments.js +50 -0
  91. package/vpn/getGatewayVpnAttachments.js.map +1 -0
  92. package/vpn/index.d.ts +2 -0
  93. package/vpn/index.js +6 -0
  94. package/vpn/index.js.map +1 -1
package/types/input.d.ts CHANGED
@@ -1900,53 +1900,53 @@ export declare namespace cs {
1900
1900
  */
1901
1901
  required?: pulumi.Input<boolean>;
1902
1902
  }
1903
- interface GetKubernetesPermissionPermission {
1903
+ interface GetKubernetesPermissionPermissionArgs {
1904
1904
  /**
1905
1905
  * ndicates whether the permissions are granted to the cluster owner. Valid values `0`, `1`.
1906
1906
  * * `isRamRole` -Indicates whether the permissions are granted to the RAM role. Valid values `0`,`1`.
1907
1907
  */
1908
- isOwner?: boolean;
1909
- isRamRole?: boolean;
1908
+ isOwner?: pulumi.Input<boolean>;
1909
+ isRamRole?: pulumi.Input<boolean>;
1910
1910
  /**
1911
1911
  * The permission settings to manage ACK clusters.
1912
1912
  */
1913
- resourceId: string;
1913
+ resourceId: pulumi.Input<string>;
1914
1914
  /**
1915
1915
  * The authorization type. Valid values `cluster`, `namespace` and `console`.
1916
1916
  */
1917
- resourceType: string;
1917
+ resourceType: pulumi.Input<string>;
1918
1918
  /**
1919
1919
  * The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.
1920
1920
  */
1921
- roleName: string;
1921
+ roleName: pulumi.Input<string>;
1922
1922
  /**
1923
1923
  * The predefined role. Valid values `admin`,`ops`,`dev`,`restricted` and `custom`.
1924
1924
  */
1925
- roleType?: string;
1925
+ roleType?: pulumi.Input<string>;
1926
1926
  }
1927
- interface GetKubernetesPermissionPermissionArgs {
1927
+ interface GetKubernetesPermissionPermission {
1928
1928
  /**
1929
1929
  * ndicates whether the permissions are granted to the cluster owner. Valid values `0`, `1`.
1930
1930
  * * `isRamRole` -Indicates whether the permissions are granted to the RAM role. Valid values `0`,`1`.
1931
1931
  */
1932
- isOwner?: pulumi.Input<boolean>;
1933
- isRamRole?: pulumi.Input<boolean>;
1932
+ isOwner?: boolean;
1933
+ isRamRole?: boolean;
1934
1934
  /**
1935
1935
  * The permission settings to manage ACK clusters.
1936
1936
  */
1937
- resourceId: pulumi.Input<string>;
1937
+ resourceId: string;
1938
1938
  /**
1939
1939
  * The authorization type. Valid values `cluster`, `namespace` and `console`.
1940
1940
  */
1941
- resourceType: pulumi.Input<string>;
1941
+ resourceType: string;
1942
1942
  /**
1943
1943
  * The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.
1944
1944
  */
1945
- roleName: pulumi.Input<string>;
1945
+ roleName: string;
1946
1946
  /**
1947
1947
  * The predefined role. Valid values `admin`,`ops`,`dev`,`restricted` and `custom`.
1948
1948
  */
1949
- roleType?: pulumi.Input<string>;
1949
+ roleType?: string;
1950
1950
  }
1951
1951
  interface KubernetesAddon {
1952
1952
  config?: pulumi.Input<string>;
@@ -2236,6 +2236,70 @@ export declare namespace cs {
2236
2236
  size?: pulumi.Input<number>;
2237
2237
  snapshotId?: pulumi.Input<string>;
2238
2238
  }
2239
+ interface NodePoolKubeletConfiguration {
2240
+ /**
2241
+ * Same as cpuManagerPolicy. The name of the policy to use. Requires the CPUManager feature gate to be enabled. Valid value is `none` or `static`.
2242
+ */
2243
+ cpuManagerPolicy?: pulumi.Input<string>;
2244
+ /**
2245
+ * Same as eventBurst. The maximum size of a burst of event creations, temporarily allows event creations to burst to this number, while still not exceeding `eventRecordQps`. It is only used when `eventRecordQps` is greater than 0. Valid value is `[0-100]`.
2246
+ */
2247
+ eventBurst?: pulumi.Input<string>;
2248
+ /**
2249
+ * Same as eventRecordQPS. The maximum event creations per second. If 0, there is no limit enforced. Valid value is `[0-50]`.
2250
+ */
2251
+ eventRecordQps?: pulumi.Input<string>;
2252
+ /**
2253
+ * Same as evictionHard. The map of signal names to quantities that defines hard eviction thresholds. For example: `{"memory.available" = "300Mi"}`.
2254
+ */
2255
+ evictionHard?: pulumi.Input<{
2256
+ [key: string]: any;
2257
+ }>;
2258
+ /**
2259
+ * Same as evictionSoft. The map of signal names to quantities that defines soft eviction thresholds. For example: `{"memory.available" = "300Mi"}`.
2260
+ */
2261
+ evictionSoft?: pulumi.Input<{
2262
+ [key: string]: any;
2263
+ }>;
2264
+ /**
2265
+ * Same as evictionSoftGracePeriod. The map of signal names to quantities that defines grace periods for each soft eviction signal. For example: `{"memory.available" = "30s"}`.
2266
+ */
2267
+ evictionSoftGracePeriod?: pulumi.Input<{
2268
+ [key: string]: any;
2269
+ }>;
2270
+ /**
2271
+ * Same as kubeAPIBurst. The burst to allow while talking with kubernetes api-server. Valid value is `[0-100]`.
2272
+ */
2273
+ kubeApiBurst?: pulumi.Input<string>;
2274
+ /**
2275
+ * Same as kubeAPIQPS. The QPS to use while talking with kubernetes api-server. Valid value is `[0-50]`.
2276
+ */
2277
+ kubeApiQps?: pulumi.Input<string>;
2278
+ /**
2279
+ * Same as kubeReserved. The set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs that describe resources reserved for kubernetes system components. Currently, cpu, memory and local storage for root file system are supported. See [compute resources](http://kubernetes.io/docs/user-guide/compute-resources) for more details.
2280
+ */
2281
+ kubeReserved?: pulumi.Input<{
2282
+ [key: string]: any;
2283
+ }>;
2284
+ /**
2285
+ * Same as registryBurst. The maximum size of burst pulls, temporarily allows pulls to burst to this number, while still not exceeding `registryPullQps`. Only used if `registryPullQps` is greater than 0. Valid value is `[0-100]`.
2286
+ */
2287
+ registryBurst?: pulumi.Input<string>;
2288
+ /**
2289
+ * Same as registryPullQPS. The limit of registry pulls per second. Setting it to `0` means no limit. Valid value is `[0-50]`.
2290
+ */
2291
+ registryPullQps?: pulumi.Input<string>;
2292
+ /**
2293
+ * Same as serializeImagePulls. When enabled, it tells the Kubelet to pull images one at a time. We recommend not changing the default value on nodes that run docker daemon with version < 1.9 or an Aufs storage backend. Valid value is `true` or `false`.
2294
+ */
2295
+ serializeImagePulls?: pulumi.Input<string>;
2296
+ /**
2297
+ * Same as systemReserved. The set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs that describe resources reserved for non-kubernetes components. Currently, only cpu and memory are supported. See [compute resources](http://kubernetes.io/docs/user-guide/compute-resources) for more details.
2298
+ */
2299
+ systemReserved?: pulumi.Input<{
2300
+ [key: string]: any;
2301
+ }>;
2302
+ }
2239
2303
  interface NodePoolLabel {
2240
2304
  /**
2241
2305
  * The label key.
@@ -2268,6 +2332,12 @@ export declare namespace cs {
2268
2332
  */
2269
2333
  surgePercentage?: pulumi.Input<number>;
2270
2334
  }
2335
+ interface NodePoolRolloutPolicy {
2336
+ /**
2337
+ * Max number of unavailable nodes. Default to `1`.
2338
+ */
2339
+ maxUnavailable?: pulumi.Input<number>;
2340
+ }
2271
2341
  interface NodePoolScalingConfig {
2272
2342
  /**
2273
2343
  * Peak EIP bandwidth. Its valid value range [1~500] in Mbps. Default to `5`.
@@ -3082,17 +3152,17 @@ export declare namespace ecs {
3082
3152
  */
3083
3153
  description?: pulumi.Input<string>;
3084
3154
  }
3085
- interface GetDedicatedHostsOperationLockArgs {
3155
+ interface GetDedicatedHostsOperationLock {
3086
3156
  /**
3087
3157
  * The reason why the dedicated host resource is locked.
3088
3158
  */
3089
- lockReason?: pulumi.Input<string>;
3159
+ lockReason?: string;
3090
3160
  }
3091
- interface GetDedicatedHostsOperationLock {
3161
+ interface GetDedicatedHostsOperationLockArgs {
3092
3162
  /**
3093
3163
  * The reason why the dedicated host resource is locked.
3094
3164
  */
3095
- lockReason?: string;
3165
+ lockReason?: pulumi.Input<string>;
3096
3166
  }
3097
3167
  interface GetDisksOperationLockArgs {
3098
3168
  lockReason?: pulumi.Input<string>;
@@ -3100,12 +3170,12 @@ export declare namespace ecs {
3100
3170
  interface GetDisksOperationLock {
3101
3171
  lockReason?: string;
3102
3172
  }
3103
- interface GetEcsDisksOperationLock {
3104
- lockReason?: string;
3105
- }
3106
3173
  interface GetEcsDisksOperationLockArgs {
3107
3174
  lockReason?: pulumi.Input<string>;
3108
3175
  }
3176
+ interface GetEcsDisksOperationLock {
3177
+ lockReason?: string;
3178
+ }
3109
3179
  interface ImageDiskDeviceMapping {
3110
3180
  /**
3111
3181
  * Specifies the name of a disk in the combined custom image. Value range: /dev/xvda to /dev/xvdz.
@@ -3204,6 +3274,16 @@ export declare namespace ecs {
3204
3274
  */
3205
3275
  snapshotId?: pulumi.Input<string>;
3206
3276
  }
3277
+ interface InstanceMaintenanceTime {
3278
+ /**
3279
+ * The end time of maintenance. The time must be on the hour at exactly 0 minute and 0 second. The `startTime` and `endTime` parameters must be specified at the same time. The `endTime` value must be 1 to 23 hours later than the `startTime` value. Specify the time in the HH:mm:ss format. The time must be in UTC+8.
3280
+ */
3281
+ endTime?: pulumi.Input<string>;
3282
+ /**
3283
+ * The start time of maintenance. The time must be on the hour at exactly 0 minute and 0 second. The `startTime` and `endTime` parameters must be specified at the same time. The `endTime` value must be 1 to 23 hours later than the `startTime` value. Specify the time in the HH:mm:ss format. The time must be in UTC+8.
3284
+ */
3285
+ startTime?: pulumi.Input<string>;
3286
+ }
3207
3287
  interface LaunchTemplateDataDisk {
3208
3288
  /**
3209
3289
  * The category of the disk:
@@ -4155,33 +4235,33 @@ export declare namespace hbase {
4155
4235
  }
4156
4236
  }
4157
4237
  export declare namespace hbr {
4158
- interface GetBackupJobsFilterArgs {
4238
+ interface GetBackupJobsFilter {
4159
4239
  /**
4160
4240
  * The key of the field to filter. Valid values: `PlanId`, `VaultId`, `InstanceId`, `Bucket`, `FileSystemId`, `CompleteTime`.
4161
4241
  */
4162
- key?: pulumi.Input<string>;
4242
+ key?: string;
4163
4243
  /**
4164
4244
  * The operator of the field to filter. Valid values: `EQUAL`, `NOT_EQUAL`, `GREATER_THAN`, `GREATER_THAN_OR_EQUAL`, `LESS_THAN`, `LESS_THAN_OR_EQUAL`, `BETWEEN`, `IN`.
4165
4245
  */
4166
- operator?: pulumi.Input<string>;
4246
+ operator?: string;
4167
4247
  /**
4168
4248
  * Set of values that are accepted for the given field.
4169
4249
  */
4170
- values?: pulumi.Input<pulumi.Input<string>[]>;
4250
+ values?: string[];
4171
4251
  }
4172
- interface GetBackupJobsFilter {
4252
+ interface GetBackupJobsFilterArgs {
4173
4253
  /**
4174
4254
  * The key of the field to filter. Valid values: `PlanId`, `VaultId`, `InstanceId`, `Bucket`, `FileSystemId`, `CompleteTime`.
4175
4255
  */
4176
- key?: string;
4256
+ key?: pulumi.Input<string>;
4177
4257
  /**
4178
4258
  * The operator of the field to filter. Valid values: `EQUAL`, `NOT_EQUAL`, `GREATER_THAN`, `GREATER_THAN_OR_EQUAL`, `LESS_THAN`, `LESS_THAN_OR_EQUAL`, `BETWEEN`, `IN`.
4179
4259
  */
4180
- operator?: string;
4260
+ operator?: pulumi.Input<string>;
4181
4261
  /**
4182
4262
  * Set of values that are accepted for the given field.
4183
4263
  */
4184
- values?: string[];
4264
+ values?: pulumi.Input<pulumi.Input<string>[]>;
4185
4265
  }
4186
4266
  interface GetServerBackupPlansFilterArgs {
4187
4267
  /**
@@ -5264,25 +5344,25 @@ export declare namespace quotas {
5264
5344
  key?: pulumi.Input<string>;
5265
5345
  value?: pulumi.Input<string>;
5266
5346
  }
5267
- interface GetQuotaAlarmsQuotaDimension {
5347
+ interface GetQuotaAlarmsQuotaDimensionArgs {
5268
5348
  /**
5269
5349
  * The key of quota_dimensions.
5270
5350
  */
5271
- key?: string;
5351
+ key?: pulumi.Input<string>;
5272
5352
  /**
5273
5353
  * The value of quota_dimensions.
5274
5354
  */
5275
- value?: string;
5355
+ value?: pulumi.Input<string>;
5276
5356
  }
5277
- interface GetQuotaAlarmsQuotaDimensionArgs {
5357
+ interface GetQuotaAlarmsQuotaDimension {
5278
5358
  /**
5279
5359
  * The key of quota_dimensions.
5280
5360
  */
5281
- key?: pulumi.Input<string>;
5361
+ key?: string;
5282
5362
  /**
5283
5363
  * The value of quota_dimensions.
5284
5364
  */
5285
- value?: pulumi.Input<string>;
5365
+ value?: string;
5286
5366
  }
5287
5367
  interface GetQuotaApplicationsDimension {
5288
5368
  /**
@@ -5304,25 +5384,25 @@ export declare namespace quotas {
5304
5384
  */
5305
5385
  value?: pulumi.Input<string>;
5306
5386
  }
5307
- interface GetQuotasDimensionArgs {
5387
+ interface GetQuotasDimension {
5308
5388
  /**
5309
5389
  * The key of dimensions.
5310
5390
  */
5311
- key?: pulumi.Input<string>;
5391
+ key?: string;
5312
5392
  /**
5313
5393
  * The value of dimensions.
5314
5394
  */
5315
- value?: pulumi.Input<string>;
5395
+ value?: string;
5316
5396
  }
5317
- interface GetQuotasDimension {
5397
+ interface GetQuotasDimensionArgs {
5318
5398
  /**
5319
5399
  * The key of dimensions.
5320
5400
  */
5321
- key?: string;
5401
+ key?: pulumi.Input<string>;
5322
5402
  /**
5323
5403
  * The value of dimensions.
5324
5404
  */
5325
- value?: string;
5405
+ value?: pulumi.Input<string>;
5326
5406
  }
5327
5407
  interface QuotaAlarmQuotaDimension {
5328
5408
  /**
@@ -6482,6 +6562,106 @@ export declare namespace vpn {
6482
6562
  */
6483
6563
  ipsecPfs?: pulumi.Input<string>;
6484
6564
  }
6565
+ interface GatewayVpnAttachmentBgpConfig {
6566
+ /**
6567
+ * Whether to enable BGP.
6568
+ */
6569
+ enable?: pulumi.Input<boolean>;
6570
+ /**
6571
+ * The ASN on the Alibaba Cloud side.
6572
+ */
6573
+ localAsn?: pulumi.Input<number>;
6574
+ /**
6575
+ * The BGP IP address on the Alibaba Cloud side.
6576
+ */
6577
+ localBgpIp?: pulumi.Input<string>;
6578
+ /**
6579
+ * The CIDR block of the IPsec tunnel. The CIDR block belongs to 169.254.0.0/16. The mask of the CIDR block is 30 bits in length.
6580
+ */
6581
+ tunnelCidr?: pulumi.Input<string>;
6582
+ }
6583
+ interface GatewayVpnAttachmentHealthCheckConfig {
6584
+ /**
6585
+ * The destination IP address that is used for health checks.
6586
+ */
6587
+ dip?: pulumi.Input<string>;
6588
+ /**
6589
+ * Whether to enable BGP.
6590
+ */
6591
+ enable?: pulumi.Input<boolean>;
6592
+ /**
6593
+ * The interval between two consecutive health checks. Unit: seconds.
6594
+ */
6595
+ interval?: pulumi.Input<number>;
6596
+ /**
6597
+ * Whether to revoke the published route when the health check fails. Valid values: `revokeRoute` or `reserveRoute`.
6598
+ */
6599
+ policy?: pulumi.Input<string>;
6600
+ /**
6601
+ * The maximum number of health check retries.
6602
+ */
6603
+ retry?: pulumi.Input<number>;
6604
+ /**
6605
+ * The source IP address that is used for health checks.
6606
+ */
6607
+ sip?: pulumi.Input<string>;
6608
+ }
6609
+ interface GatewayVpnAttachmentIkeConfig {
6610
+ /**
6611
+ * IKE authentication algorithm supports sha1 and MD5.
6612
+ */
6613
+ ikeAuthAlg?: pulumi.Input<string>;
6614
+ /**
6615
+ * The encryption algorithm of phase-one negotiation. Valid value: aes | aes192 | aes256 | des | 3des. Default Valid value: aes.
6616
+ */
6617
+ ikeEncAlg?: pulumi.Input<string>;
6618
+ /**
6619
+ * The SA lifecycle as the result of phase-one negotiation. The valid value of n is [0, 86400], the unit is second and the default value is 86400.
6620
+ */
6621
+ ikeLifetime?: pulumi.Input<number>;
6622
+ /**
6623
+ * The negotiation mode of IKE V1. Valid value: main (main mode) | aggressive (aggressive mode). Default value: `main`.
6624
+ */
6625
+ ikeMode?: pulumi.Input<string>;
6626
+ /**
6627
+ * The Diffie-Hellman key exchange algorithm used by phase-one negotiation. Valid value: group1 | group2 | group5 | group14 | group24. Default value: group2
6628
+ */
6629
+ ikePfs?: pulumi.Input<string>;
6630
+ /**
6631
+ * The version of the IKE protocol. Valid value: `ikev1`, `ikev2`. Default value: `ikev1`.
6632
+ */
6633
+ ikeVersion?: pulumi.Input<string>;
6634
+ /**
6635
+ * The local ID, which supports the FQDN and IP formats. The current VPN gateway IP address is selected by default.
6636
+ */
6637
+ localId?: pulumi.Input<string>;
6638
+ /**
6639
+ * Used for authentication between the IPsec VPN gateway and the customer gateway.
6640
+ */
6641
+ psk?: pulumi.Input<string>;
6642
+ /**
6643
+ * The peer ID, which supports FQDN and IP formats. By default, the IP address of the currently selected user gateway.
6644
+ */
6645
+ remoteId?: pulumi.Input<string>;
6646
+ }
6647
+ interface GatewayVpnAttachmentIpsecConfig {
6648
+ /**
6649
+ * The authentication algorithm of phase-two negotiation. Valid value: md5 | sha1 | sha256 | sha384 | sha512 |. Default value: sha1
6650
+ */
6651
+ ipsecAuthAlg?: pulumi.Input<string>;
6652
+ /**
6653
+ * The encryption algorithm of phase-two negotiation. Valid value: aes | aes192 | aes256 | des | 3des. Default value: aes
6654
+ */
6655
+ ipsecEncAlg?: pulumi.Input<string>;
6656
+ /**
6657
+ * The SA lifecycle as the result of phase-two negotiation. The valid value is [0, 86400], the unit is second and the default value is 86400.
6658
+ */
6659
+ ipsecLifetime?: pulumi.Input<number>;
6660
+ /**
6661
+ * The Diffie-Hellman key exchange algorithm used by phase-two negotiation. Valid value: group1 | group2 | group5 | group14 | group24| disabled. Default value: group2
6662
+ */
6663
+ ipsecPfs?: pulumi.Input<string>;
6664
+ }
6485
6665
  interface IpsecServerIkeConfig {
6486
6666
  /**
6487
6667
  * The authentication algorithm that is used in Phase 1 negotiations. Default value: `sha1`.