@pulumi/cloudngfwaws 0.0.1

package/accountOnboardingStack.d.ts

@@ -0,0 +1,233 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Resource for Account Onboarding.
+ *
+ * ## Admin Permission Type
+ *
+ * * `Rulestack` (for `scope="Local"`)
+ * * `Global Rulestack` (for `scope="Global"`)
+ */
+export declare class AccountOnboardingStack extends pulumi.CustomResource {
+    /**
+     * Get an existing AccountOnboardingStack resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: AccountOnboardingStackState, opts?: pulumi.CustomResourceOptions): AccountOnboardingStack;
+    /**
+     * Returns true if the given object is an instance of AccountOnboardingStack.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is AccountOnboardingStack;
+    /**
+     * The account IDs
+     */
+    readonly accountId: pulumi.Output<string>;
+    /**
+     * Audit Log Group Name
+     */
+    readonly auditlogGroup: pulumi.Output<string | undefined>;
+    /**
+     * Role name to run the account onboarding CFT in each account to be onboarded.
+     */
+    readonly cftRoleName: pulumi.Output<string>;
+    /**
+     * Cloudwatch Log Group
+     */
+    readonly cloudwatchLogGroup: pulumi.Output<string | undefined>;
+    /**
+     * Cloudwatch Namespace
+     */
+    readonly cloudwatchNamespace: pulumi.Output<string | undefined>;
+    /**
+     * The CloudNGFW can decrypt inbound and outbound traffic by providing a
+     * 					  certificate stored in secret Manager.
+     * 		 			  The role allows the service to access a certificate configured in the rulestack.
+     * 		 			  Only certificated tagged with PaloAltoCloudNGFW can be accessed
+     */
+    readonly decryptionCert: pulumi.Output<string | undefined>;
+    /**
+     * Controls whether cloud NGFW will create firewall endpoints automatitically in customer subnets
+     */
+    readonly endpointMode: pulumi.Output<string | undefined>;
+    /**
+     * External Id of the onboarded account
+     */
+    readonly externalId: pulumi.Output<string>;
+    /**
+     * Kinesis Firehose for logging
+     */
+    readonly kinesisFirehose: pulumi.Output<string | undefined>;
+    /**
+     * Role name to run the account onboarding CFT in each account to be onboarded.
+     */
+    readonly onboardingCft: pulumi.Output<string>;
+    /**
+     * S3 Bucket Name for Logging. Logging roles provide access to create log contents in this bucket.
+     */
+    readonly s3Bucket: pulumi.Output<string | undefined>;
+    /**
+     * SNS topic ARN to publish the role ARNs
+     */
+    readonly snsTopicArn: pulumi.Output<string>;
+    /**
+     * ID of the account onboarding CFT stack
+     */
+    readonly stackId: pulumi.Output<string>;
+    /**
+     * Status of the account onboarding CFT stack.
+     */
+    readonly stackStatus: pulumi.Output<string>;
+    /**
+     * PANW Cloud NGFW trusted account Id
+     */
+    readonly trustedAccount: pulumi.Output<string>;
+    /**
+     * Create a AccountOnboardingStack resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: AccountOnboardingStackArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering AccountOnboardingStack resources.
+ */
+export interface AccountOnboardingStackState {
+    /**
+     * The account IDs
+     */
+    accountId?: pulumi.Input<string>;
+    /**
+     * Audit Log Group Name
+     */
+    auditlogGroup?: pulumi.Input<string>;
+    /**
+     * Role name to run the account onboarding CFT in each account to be onboarded.
+     */
+    cftRoleName?: pulumi.Input<string>;
+    /**
+     * Cloudwatch Log Group
+     */
+    cloudwatchLogGroup?: pulumi.Input<string>;
+    /**
+     * Cloudwatch Namespace
+     */
+    cloudwatchNamespace?: pulumi.Input<string>;
+    /**
+     * The CloudNGFW can decrypt inbound and outbound traffic by providing a
+     * 					  certificate stored in secret Manager.
+     * 		 			  The role allows the service to access a certificate configured in the rulestack.
+     * 		 			  Only certificated tagged with PaloAltoCloudNGFW can be accessed
+     */
+    decryptionCert?: pulumi.Input<string>;
+    /**
+     * Controls whether cloud NGFW will create firewall endpoints automatitically in customer subnets
+     */
+    endpointMode?: pulumi.Input<string>;
+    /**
+     * External Id of the onboarded account
+     */
+    externalId?: pulumi.Input<string>;
+    /**
+     * Kinesis Firehose for logging
+     */
+    kinesisFirehose?: pulumi.Input<string>;
+    /**
+     * Role name to run the account onboarding CFT in each account to be onboarded.
+     */
+    onboardingCft?: pulumi.Input<string>;
+    /**
+     * S3 Bucket Name for Logging. Logging roles provide access to create log contents in this bucket.
+     */
+    s3Bucket?: pulumi.Input<string>;
+    /**
+     * SNS topic ARN to publish the role ARNs
+     */
+    snsTopicArn?: pulumi.Input<string>;
+    /**
+     * ID of the account onboarding CFT stack
+     */
+    stackId?: pulumi.Input<string>;
+    /**
+     * Status of the account onboarding CFT stack.
+     */
+    stackStatus?: pulumi.Input<string>;
+    /**
+     * PANW Cloud NGFW trusted account Id
+     */
+    trustedAccount?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a AccountOnboardingStack resource.
+ */
+export interface AccountOnboardingStackArgs {
+    /**
+     * The account IDs
+     */
+    accountId: pulumi.Input<string>;
+    /**
+     * Audit Log Group Name
+     */
+    auditlogGroup?: pulumi.Input<string>;
+    /**
+     * Role name to run the account onboarding CFT in each account to be onboarded.
+     */
+    cftRoleName: pulumi.Input<string>;
+    /**
+     * Cloudwatch Log Group
+     */
+    cloudwatchLogGroup?: pulumi.Input<string>;
+    /**
+     * Cloudwatch Namespace
+     */
+    cloudwatchNamespace?: pulumi.Input<string>;
+    /**
+     * The CloudNGFW can decrypt inbound and outbound traffic by providing a
+     * 					  certificate stored in secret Manager.
+     * 		 			  The role allows the service to access a certificate configured in the rulestack.
+     * 		 			  Only certificated tagged with PaloAltoCloudNGFW can be accessed
+     */
+    decryptionCert?: pulumi.Input<string>;
+    /**
+     * Controls whether cloud NGFW will create firewall endpoints automatitically in customer subnets
+     */
+    endpointMode?: pulumi.Input<string>;
+    /**
+     * External Id of the onboarded account
+     */
+    externalId: pulumi.Input<string>;
+    /**
+     * Kinesis Firehose for logging
+     */
+    kinesisFirehose?: pulumi.Input<string>;
+    /**
+     * Role name to run the account onboarding CFT in each account to be onboarded.
+     */
+    onboardingCft: pulumi.Input<string>;
+    /**
+     * S3 Bucket Name for Logging. Logging roles provide access to create log contents in this bucket.
+     */
+    s3Bucket?: pulumi.Input<string>;
+    /**
+     * SNS topic ARN to publish the role ARNs
+     */
+    snsTopicArn: pulumi.Input<string>;
+    /**
+     * ID of the account onboarding CFT stack
+     */
+    stackId?: pulumi.Input<string>;
+    /**
+     * Status of the account onboarding CFT stack.
+     */
+    stackStatus?: pulumi.Input<string>;
+    /**
+     * PANW Cloud NGFW trusted account Id
+     */
+    trustedAccount: pulumi.Input<string>;
+}

package/accountOnboardingStack.js

@@ -0,0 +1,103 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountOnboardingStack = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Resource for Account Onboarding.
+ *
+ * ## Admin Permission Type
+ *
+ * * `Rulestack` (for `scope="Local"`)
+ * * `Global Rulestack` (for `scope="Global"`)
+ */
+class AccountOnboardingStack extends pulumi.CustomResource {
+    /**
+     * Get an existing AccountOnboardingStack resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new AccountOnboardingStack(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of AccountOnboardingStack.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === AccountOnboardingStack.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accountId"] = state ? state.accountId : undefined;
+            resourceInputs["auditlogGroup"] = state ? state.auditlogGroup : undefined;
+            resourceInputs["cftRoleName"] = state ? state.cftRoleName : undefined;
+            resourceInputs["cloudwatchLogGroup"] = state ? state.cloudwatchLogGroup : undefined;
+            resourceInputs["cloudwatchNamespace"] = state ? state.cloudwatchNamespace : undefined;
+            resourceInputs["decryptionCert"] = state ? state.decryptionCert : undefined;
+            resourceInputs["endpointMode"] = state ? state.endpointMode : undefined;
+            resourceInputs["externalId"] = state ? state.externalId : undefined;
+            resourceInputs["kinesisFirehose"] = state ? state.kinesisFirehose : undefined;
+            resourceInputs["onboardingCft"] = state ? state.onboardingCft : undefined;
+            resourceInputs["s3Bucket"] = state ? state.s3Bucket : undefined;
+            resourceInputs["snsTopicArn"] = state ? state.snsTopicArn : undefined;
+            resourceInputs["stackId"] = state ? state.stackId : undefined;
+            resourceInputs["stackStatus"] = state ? state.stackStatus : undefined;
+            resourceInputs["trustedAccount"] = state ? state.trustedAccount : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accountId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accountId'");
+            }
+            if ((!args || args.cftRoleName === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'cftRoleName'");
+            }
+            if ((!args || args.externalId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'externalId'");
+            }
+            if ((!args || args.onboardingCft === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'onboardingCft'");
+            }
+            if ((!args || args.snsTopicArn === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'snsTopicArn'");
+            }
+            if ((!args || args.trustedAccount === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'trustedAccount'");
+            }
+            resourceInputs["accountId"] = args ? args.accountId : undefined;
+            resourceInputs["auditlogGroup"] = args ? args.auditlogGroup : undefined;
+            resourceInputs["cftRoleName"] = args ? args.cftRoleName : undefined;
+            resourceInputs["cloudwatchLogGroup"] = args ? args.cloudwatchLogGroup : undefined;
+            resourceInputs["cloudwatchNamespace"] = args ? args.cloudwatchNamespace : undefined;
+            resourceInputs["decryptionCert"] = args ? args.decryptionCert : undefined;
+            resourceInputs["endpointMode"] = args ? args.endpointMode : undefined;
+            resourceInputs["externalId"] = args ? args.externalId : undefined;
+            resourceInputs["kinesisFirehose"] = args ? args.kinesisFirehose : undefined;
+            resourceInputs["onboardingCft"] = args ? args.onboardingCft : undefined;
+            resourceInputs["s3Bucket"] = args ? args.s3Bucket : undefined;
+            resourceInputs["snsTopicArn"] = args ? args.snsTopicArn : undefined;
+            resourceInputs["stackId"] = args ? args.stackId : undefined;
+            resourceInputs["stackStatus"] = args ? args.stackStatus : undefined;
+            resourceInputs["trustedAccount"] = args ? args.trustedAccount : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(AccountOnboardingStack.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.AccountOnboardingStack = AccountOnboardingStack;
+/** @internal */
+AccountOnboardingStack.__pulumiType = 'cloudngfwaws:index/accountOnboardingStack:AccountOnboardingStack';
+//# sourceMappingURL=accountOnboardingStack.js.map

package/accountOnboardingStack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountOnboardingStack.js","sourceRoot":"","sources":["../accountOnboardingStack.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;GAOG;AACH,MAAa,sBAAuB,SAAQ,MAAM,CAAC,cAAc;IAC7D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmC,EAAE,IAAmC;QACjI,OAAO,IAAI,sBAAsB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,sBAAsB,CAAC,YAAY,CAAC;IACvE,CAAC;IA0ED,YAAY,IAAY,EAAE,WAAsE,EAAE,IAAmC;QACjI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsD,CAAC;YACrE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/E;aAAM;YACH,MAAM,IAAI,GAAG,WAAqD,CAAC;YACnE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7E;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,sBAAsB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;;AA9JL,wDA+JC;AAjJG,gBAAgB;AACO,mCAAY,GAAG,kEAAkE,CAAC"}

package/certificate.d.ts

@@ -0,0 +1,168 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Resource for certificate manipulation.
+ *
+ * ## Admin Permission Type
+ *
+ * * `Rulestack` (for `scope="Local"`)
+ * * `Global Rulestack` (for `scope="Global"`)
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudngfwaws from "@pulumi/cloudngfwaws";
+ *
+ * const r = new cloudngfwaws.Rulestack("r", {
+ *     name: "terraform-rulestack",
+ *     scope: "Local",
+ *     accountId: "123456789",
+ *     description: "Made by Pulumi",
+ *     profileConfig: {
+ *         antiSpyware: "BestPractice",
+ *     },
+ * });
+ * const example = new cloudngfwaws.Certificate("example", {
+ *     rulestack: r.name,
+ *     name: "tf-cert",
+ *     description: "Also configured by Terraform",
+ *     selfSigned: true,
+ *     auditComment: "initial config",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * import name is <scope>:<rulestack>:<certificate_name>
+ *
+ * ```sh
+ * $ pulumi import cloudngfwaws:index/certificate:Certificate example Local:terraform-rulestack:tf-cert
+ * ```
+ */
+export declare class Certificate extends pulumi.CustomResource {
+    /**
+     * Get an existing Certificate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CertificateState, opts?: pulumi.CustomResourceOptions): Certificate;
+    /**
+     * Returns true if the given object is an instance of Certificate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Certificate;
+    /**
+     * The audit comment.
+     */
+    readonly auditComment: pulumi.Output<string | undefined>;
+    /**
+     * The description.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * The name.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The rulestack.
+     */
+    readonly rulestack: pulumi.Output<string>;
+    /**
+     * The rulestack's scope. A local rulestack will require that you've retrieved a LRA JWT. A global rulestack will require that you've retrieved a GRA JWT. Valid values are `Local` or `Global`. Defaults to `Local`.
+     */
+    readonly scope: pulumi.Output<string | undefined>;
+    /**
+     * Set to true if certificate is self-signed.
+     */
+    readonly selfSigned: pulumi.Output<boolean | undefined>;
+    /**
+     * The certificate signer ARN.
+     */
+    readonly signerArn: pulumi.Output<string | undefined>;
+    /**
+     * The update token.
+     */
+    readonly updateToken: pulumi.Output<string>;
+    /**
+     * Create a Certificate resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: CertificateArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Certificate resources.
+ */
+export interface CertificateState {
+    /**
+     * The audit comment.
+     */
+    auditComment?: pulumi.Input<string>;
+    /**
+     * The description.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The name.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The rulestack.
+     */
+    rulestack?: pulumi.Input<string>;
+    /**
+     * The rulestack's scope. A local rulestack will require that you've retrieved a LRA JWT. A global rulestack will require that you've retrieved a GRA JWT. Valid values are `Local` or `Global`. Defaults to `Local`.
+     */
+    scope?: pulumi.Input<string>;
+    /**
+     * Set to true if certificate is self-signed.
+     */
+    selfSigned?: pulumi.Input<boolean>;
+    /**
+     * The certificate signer ARN.
+     */
+    signerArn?: pulumi.Input<string>;
+    /**
+     * The update token.
+     */
+    updateToken?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a Certificate resource.
+ */
+export interface CertificateArgs {
+    /**
+     * The audit comment.
+     */
+    auditComment?: pulumi.Input<string>;
+    /**
+     * The description.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The name.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The rulestack.
+     */
+    rulestack: pulumi.Input<string>;
+    /**
+     * The rulestack's scope. A local rulestack will require that you've retrieved a LRA JWT. A global rulestack will require that you've retrieved a GRA JWT. Valid values are `Local` or `Global`. Defaults to `Local`.
+     */
+    scope?: pulumi.Input<string>;
+    /**
+     * Set to true if certificate is self-signed.
+     */
+    selfSigned?: pulumi.Input<boolean>;
+    /**
+     * The certificate signer ARN.
+     */
+    signerArn?: pulumi.Input<string>;
+}

package/certificate.js

@@ -0,0 +1,106 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Certificate = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Resource for certificate manipulation.
+ *
+ * ## Admin Permission Type
+ *
+ * * `Rulestack` (for `scope="Local"`)
+ * * `Global Rulestack` (for `scope="Global"`)
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudngfwaws from "@pulumi/cloudngfwaws";
+ *
+ * const r = new cloudngfwaws.Rulestack("r", {
+ *     name: "terraform-rulestack",
+ *     scope: "Local",
+ *     accountId: "123456789",
+ *     description: "Made by Pulumi",
+ *     profileConfig: {
+ *         antiSpyware: "BestPractice",
+ *     },
+ * });
+ * const example = new cloudngfwaws.Certificate("example", {
+ *     rulestack: r.name,
+ *     name: "tf-cert",
+ *     description: "Also configured by Terraform",
+ *     selfSigned: true,
+ *     auditComment: "initial config",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * import name is <scope>:<rulestack>:<certificate_name>
+ *
+ * ```sh
+ * $ pulumi import cloudngfwaws:index/certificate:Certificate example Local:terraform-rulestack:tf-cert
+ * ```
+ */
+class Certificate extends pulumi.CustomResource {
+    /**
+     * Get an existing Certificate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Certificate(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Certificate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Certificate.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["auditComment"] = state ? state.auditComment : undefined;
+            resourceInputs["description"] = state ? state.description : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["rulestack"] = state ? state.rulestack : undefined;
+            resourceInputs["scope"] = state ? state.scope : undefined;
+            resourceInputs["selfSigned"] = state ? state.selfSigned : undefined;
+            resourceInputs["signerArn"] = state ? state.signerArn : undefined;
+            resourceInputs["updateToken"] = state ? state.updateToken : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.rulestack === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'rulestack'");
+            }
+            resourceInputs["auditComment"] = args ? args.auditComment : undefined;
+            resourceInputs["description"] = args ? args.description : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["rulestack"] = args ? args.rulestack : undefined;
+            resourceInputs["scope"] = args ? args.scope : undefined;
+            resourceInputs["selfSigned"] = args ? args.selfSigned : undefined;
+            resourceInputs["signerArn"] = args ? args.signerArn : undefined;
+            resourceInputs["updateToken"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Certificate.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Certificate = Certificate;
+/** @internal */
+Certificate.__pulumiType = 'cloudngfwaws:index/certificate:Certificate';
+//# sourceMappingURL=certificate.js.map

package/certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.js","sourceRoot":"","sources":["../certificate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA2CD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AAlGL,kCAmGC;AArFG,gBAAgB;AACO,wBAAY,GAAG,4CAA4C,CAAC"}