@pulumi/cloudngfwaws 0.0.1

package/commitRulestack.d.ts

@@ -0,0 +1,123 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Resource for committing the rulestack config.
+ *
+ * !> **NOTE:** This resource should be placed in a separate plan as the plan that configures the rulestack and its contents.  If you do not, you will have perpetual configuration drift and will need to run your plan twice so the commit is performed.  Placing instances of this resource with instances of NGFW resources (such as `cloudngfwaws.Ngfw`) is fine.
+ *
+ * ## Admin Permission Type
+ *
+ * * `Rulestack` (for `scope="Local"`)
+ * * `Global Rulestack` (for `scope="Global"`)
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudngfwaws from "@pulumi/cloudngfwaws";
+ *
+ * const example = new cloudngfwaws.CommitRulestack("example", {rulestack: "my-rulestack"});
+ * ```
+ */
+export declare class CommitRulestack extends pulumi.CustomResource {
+    /**
+     * Get an existing CommitRulestack resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CommitRulestackState, opts?: pulumi.CustomResourceOptions): CommitRulestack;
+    /**
+     * Returns true if the given object is an instance of CommitRulestack.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is CommitRulestack;
+    /**
+     * Commit error messages.
+     */
+    readonly commitErrors: pulumi.Output<string[]>;
+    /**
+     * The commit status.
+     */
+    readonly commitStatus: pulumi.Output<string>;
+    /**
+     * The rulestack.
+     */
+    readonly rulestack: pulumi.Output<string>;
+    /**
+     * The rulestack's scope. A local rulestack will require that you've retrieved a LRA JWT. A global rulestack will require that you've retrieved a GRA JWT. Valid values are `Local` or `Global`. Defaults to `Local`.
+     */
+    readonly scope: pulumi.Output<string | undefined>;
+    /**
+     * The rulestack state. This can only be the default value. Defaults to `Running`.
+     */
+    readonly state: pulumi.Output<string | undefined>;
+    /**
+     * Validation error messages.
+     */
+    readonly validationErrors: pulumi.Output<string[]>;
+    /**
+     * The validation status.
+     */
+    readonly validationStatus: pulumi.Output<string>;
+    /**
+     * Create a CommitRulestack resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: CommitRulestackArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering CommitRulestack resources.
+ */
+export interface CommitRulestackState {
+    /**
+     * Commit error messages.
+     */
+    commitErrors?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The commit status.
+     */
+    commitStatus?: pulumi.Input<string>;
+    /**
+     * The rulestack.
+     */
+    rulestack?: pulumi.Input<string>;
+    /**
+     * The rulestack's scope. A local rulestack will require that you've retrieved a LRA JWT. A global rulestack will require that you've retrieved a GRA JWT. Valid values are `Local` or `Global`. Defaults to `Local`.
+     */
+    scope?: pulumi.Input<string>;
+    /**
+     * The rulestack state. This can only be the default value. Defaults to `Running`.
+     */
+    state?: pulumi.Input<string>;
+    /**
+     * Validation error messages.
+     */
+    validationErrors?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The validation status.
+     */
+    validationStatus?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a CommitRulestack resource.
+ */
+export interface CommitRulestackArgs {
+    /**
+     * The rulestack.
+     */
+    rulestack: pulumi.Input<string>;
+    /**
+     * The rulestack's scope. A local rulestack will require that you've retrieved a LRA JWT. A global rulestack will require that you've retrieved a GRA JWT. Valid values are `Local` or `Global`. Defaults to `Local`.
+     */
+    scope?: pulumi.Input<string>;
+    /**
+     * The rulestack state. This can only be the default value. Defaults to `Running`.
+     */
+    state?: pulumi.Input<string>;
+}

package/commitRulestack.js

@@ -0,0 +1,83 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CommitRulestack = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Resource for committing the rulestack config.
+ *
+ * !> **NOTE:** This resource should be placed in a separate plan as the plan that configures the rulestack and its contents.  If you do not, you will have perpetual configuration drift and will need to run your plan twice so the commit is performed.  Placing instances of this resource with instances of NGFW resources (such as `cloudngfwaws.Ngfw`) is fine.
+ *
+ * ## Admin Permission Type
+ *
+ * * `Rulestack` (for `scope="Local"`)
+ * * `Global Rulestack` (for `scope="Global"`)
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudngfwaws from "@pulumi/cloudngfwaws";
+ *
+ * const example = new cloudngfwaws.CommitRulestack("example", {rulestack: "my-rulestack"});
+ * ```
+ */
+class CommitRulestack extends pulumi.CustomResource {
+    /**
+     * Get an existing CommitRulestack resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new CommitRulestack(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of CommitRulestack.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === CommitRulestack.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["commitErrors"] = state ? state.commitErrors : undefined;
+            resourceInputs["commitStatus"] = state ? state.commitStatus : undefined;
+            resourceInputs["rulestack"] = state ? state.rulestack : undefined;
+            resourceInputs["scope"] = state ? state.scope : undefined;
+            resourceInputs["state"] = state ? state.state : undefined;
+            resourceInputs["validationErrors"] = state ? state.validationErrors : undefined;
+            resourceInputs["validationStatus"] = state ? state.validationStatus : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.rulestack === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'rulestack'");
+            }
+            resourceInputs["rulestack"] = args ? args.rulestack : undefined;
+            resourceInputs["scope"] = args ? args.scope : undefined;
+            resourceInputs["state"] = args ? args.state : undefined;
+            resourceInputs["commitErrors"] = undefined /*out*/;
+            resourceInputs["commitStatus"] = undefined /*out*/;
+            resourceInputs["validationErrors"] = undefined /*out*/;
+            resourceInputs["validationStatus"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(CommitRulestack.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.CommitRulestack = CommitRulestack;
+/** @internal */
+CommitRulestack.__pulumiType = 'cloudngfwaws:index/commitRulestack:CommitRulestack';
+//# sourceMappingURL=commitRulestack.js.map

package/commitRulestack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitRulestack.js","sourceRoot":"","sources":["../commitRulestack.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAa,eAAgB,SAAQ,MAAM,CAAC,cAAc;IACtD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4B,EAAE,IAAmC;QAC1H,OAAO,IAAI,eAAe,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACtE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC;IAChE,CAAC;IAuCD,YAAY,IAAY,EAAE,WAAwD,EAAE,IAAmC;QACnH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+C,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnF;aAAM;YACH,MAAM,IAAI,GAAG,WAA8C,CAAC;YAC5D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC1D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;;AA5FL,0CA6FC;AA/EG,gBAAgB;AACO,4BAAY,GAAG,oDAAoD,CAAC"}

package/config/index.d.ts

@@ -0,0 +1 @@
+export * from "./vars";

package/config/index.js

@@ -0,0 +1,21 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Export members:
+__exportStar(require("./vars"), exports);
+//# sourceMappingURL=index.js.map

package/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../config/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;;;;;;;;;;;;;;AAEjF,kBAAkB;AAClB,yCAAuB"}

package/config/vars.d.ts

@@ -0,0 +1,96 @@
+/**
+ * (Used for the initial `sts assume role`) AWS access key. Environment variable: `CLOUDNGFWAWS_ACCESS_KEY`. JSON conf file
+ * variable: `access-key`.
+ */
+export declare const accessKey: string | undefined;
+/**
+ * The ARN allowing account admin permissions. Environment variable: `CLOUDNGFWAWS_ACCT_ADMIN_ARN`. JSON conf file
+ * variable: `account-admin-arn`.
+ */
+export declare const accountAdminArn: string | undefined;
+/**
+ * The ARN allowing firewall, rulestack, and global rulestack admin permissions. Global rulestack admin permissions can be
+ * enabled only if the AWS account is onboarded by AWS Firewall Manager. Use 'lfa_arn' and 'lra_arn' if you want to enable
+ * only firewall and rulestack admin permissions. Environment variable: `CLOUDNGFWAWS_ARN`. JSON conf file variable: `arn`.
+ */
+export declare const arn: string | undefined;
+/**
+ * The ARN allowing global rulestack admin permissions. Global rulestack admin permissions can be enabled only if the AWS
+ * account is onboarded by AWS Firewall Manager. 'gra_arn' is preferentially used over the `arn` param if both are
+ * specified. Environment variable: `CLOUDNGFWAWS_GRA_ARN`. JSON conf file variable: `gra-arn`.
+ */
+export declare const graArn: string | undefined;
+/**
+ * Additional HTTP headers to send with API calls. Environment variable: `CLOUDNGFWAWS_HEADERS`. JSON conf file variable:
+ * `headers`.
+ */
+export declare const headers: {
+    [key: string]: string;
+} | undefined;
+/**
+ * The hostname of the API (default: `api.us-east-1.aws.cloudngfw.paloaltonetworks.com`). Environment variable:
+ * `CLOUDNGFWAWS_HOST`. JSON conf file variable: `host`.
+ */
+export declare const host: string | undefined;
+/**
+ * Retrieve provider configuration from this JSON file.
+ */
+export declare const jsonConfigFile: string | undefined;
+/**
+ * The ARN allowing firewall admin permissions. This is preferentially used over the `arn` param if both are specified.
+ * Environment variable: `CLOUDNGFWAWS_LFA_ARN`. JSON conf file variable: `lfa-arn`.
+ */
+export declare const lfaArn: string | undefined;
+/**
+ * The logging options for the provider. Environment variable: `CLOUDNGFWAWS_LOGGING`. JSON conf file variable: `logging`.
+ */
+export declare const loggings: string[] | undefined;
+/**
+ * The ARN allowing rulestack admin permissions. This is preferentially used over the `arn` param if both are specified.
+ * Environment variable: `CLOUDNGFWAWS_LRA_ARN`. JSON conf file variable: `lra-arn`.
+ */
+export declare const lraArn: string | undefined;
+/**
+ * AWS management plane region. Environment variable: `CLOUDNGFWAWS_MP_REGION`. JSON conf file variable: `mpRegion`.
+ */
+export declare const mpRegion: string | undefined;
+/**
+ * AWS management plane MP region host Environment variable: `CLOUDNGFWAWS_MP_REGION_HOST`. JSON conf file variable:
+ * `mpRegionHost`.
+ */
+export declare const mpRegionHost: string | undefined;
+/**
+ * (Used for the initial `sts assume role`) AWS PROFILE. Environment variable: `CLOUDNGFWAWS_PROFILE`. JSON conf file
+ * variable: `profile`.
+ */
+export declare const profile: string | undefined;
+/**
+ * The protocol (defaults to `https`). Environment variable: `CLOUDNGFWAWS_PROTOCOL`. JSON conf file variable: `protocol`.
+ * Valid values are `https` or `http`.
+ */
+export declare const protocol: string | undefined;
+/**
+ * AWS region. Environment variable: `CLOUDNGFWAWS_REGION`. JSON conf file variable: `region`.
+ */
+export declare const region: string | undefined;
+export declare const resourceTimeout: number | undefined;
+/**
+ * (Used for the initial `sts assume role`) AWS secret key. Environment variable: `CLOUDNGFWAWS_SECRET_KEY`. JSON conf file
+ * variable: `secret-key`.
+ */
+export declare const secretKey: string | undefined;
+/**
+ * Skip verifying the SSL certificate. Environment variable: `CLOUDNGFWAWS_SKIP_VERIFY_CERTIFICATE`. JSON conf file
+ * variable: `skip-verify-certificate`.
+ */
+export declare const skipVerifyCertificate: boolean | undefined;
+/**
+ * Enable synchronous mode while creating resources Environment variable: `CLOUDNGFWAWS_SYNC_MODE`. JSON conf file
+ * variable: `syncMode`.
+ */
+export declare const syncMode: boolean | undefined;
+/**
+ * The timeout for any single API call (default: `30`). Environment variable: `CLOUDNGFWAWS_TIMEOUT`. JSON conf file
+ * variable: `timeout`.
+ */
+export declare const timeout: number | undefined;

package/config/vars.js

@@ -0,0 +1,127 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+const pulumi = require("@pulumi/pulumi");
+const __config = new pulumi.Config("cloudngfwaws");
+Object.defineProperty(exports, "accessKey", {
+    get() {
+        return __config.get("accessKey");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "accountAdminArn", {
+    get() {
+        return __config.get("accountAdminArn");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "arn", {
+    get() {
+        return __config.get("arn");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "graArn", {
+    get() {
+        return __config.get("graArn");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "headers", {
+    get() {
+        return __config.getObject("headers");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "host", {
+    get() {
+        return __config.get("host");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "jsonConfigFile", {
+    get() {
+        return __config.get("jsonConfigFile");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "lfaArn", {
+    get() {
+        return __config.get("lfaArn");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "loggings", {
+    get() {
+        return __config.getObject("loggings");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "lraArn", {
+    get() {
+        return __config.get("lraArn");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "mpRegion", {
+    get() {
+        return __config.get("mpRegion");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "mpRegionHost", {
+    get() {
+        return __config.get("mpRegionHost");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "profile", {
+    get() {
+        return __config.get("profile");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "protocol", {
+    get() {
+        return __config.get("protocol");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "region", {
+    get() {
+        return __config.get("region");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "resourceTimeout", {
+    get() {
+        return __config.getObject("resourceTimeout");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "secretKey", {
+    get() {
+        return __config.get("secretKey");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "skipVerifyCertificate", {
+    get() {
+        return __config.getObject("skipVerifyCertificate");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "syncMode", {
+    get() {
+        return __config.getObject("syncMode");
+    },
+    enumerable: true,
+});
+Object.defineProperty(exports, "timeout", {
+    get() {
+        return __config.getObject("timeout");
+    },
+    enumerable: true,
+});
+//# sourceMappingURL=vars.js.map

package/config/vars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vars.js","sourceRoot":"","sources":["../../config/vars.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;AAEjF,yCAAyC;AAIzC,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAOnD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE;IACxC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,EAAE;IAC9C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAQH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE;IAClC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAQH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;IACrC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE;IACtC,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAA0B,SAAS,CAAC,CAAC;IAClE,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE;IACnC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE;IAC7C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;IACrC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAW,UAAU,CAAC,CAAC;IACpD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;IACrC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;IAC3C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE;IACtC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;IACrC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,EAAE;IAC9C,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAS,iBAAiB,CAAC,CAAC;IACzD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE;IACxC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,uBAAuB,EAAE;IACpD,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,uBAAuB,CAAC,CAAC;IAChE,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,UAAU,CAAC,CAAC;IACnD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE;IACtC,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAS,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC"}

package/customUrlCategory.d.ts

@@ -0,0 +1,172 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Resource for custom url category manipulation.
+ *
+ * ## Admin Permission Type
+ *
+ * * `Rulestack` (for `scope="Local"`)
+ * * `Global Rulestack` (for `scope="Global"`)
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudngfwaws from "@pulumi/cloudngfwaws";
+ *
+ * const r = new cloudngfwaws.Rulestack("r", {
+ *     name: "terraform-rulestack",
+ *     scope: "Local",
+ *     accountId: "123456789",
+ *     description: "Made by Pulumi",
+ *     profileConfig: {
+ *         antiSpyware: "BestPractice",
+ *     },
+ * });
+ * const example = new cloudngfwaws.CustomUrlCategory("example", {
+ *     rulestack: r.name,
+ *     name: "tf-custom-category",
+ *     description: "Also configured by Terraform",
+ *     urlLists: [
+ *         "example.com",
+ *         "paloaltonetworks.com",
+ *         "foobar.org",
+ *     ],
+ *     action: "alert",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * import name is <scope>:<rulestack>:<category_name>
+ *
+ * ```sh
+ * $ pulumi import cloudngfwaws:index/customUrlCategory:CustomUrlCategory example Local:terraform-rulestack:tf-custom-category
+ * ```
+ */
+export declare class CustomUrlCategory extends pulumi.CustomResource {
+    /**
+     * Get an existing CustomUrlCategory resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CustomUrlCategoryState, opts?: pulumi.CustomResourceOptions): CustomUrlCategory;
+    /**
+     * Returns true if the given object is an instance of CustomUrlCategory.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is CustomUrlCategory;
+    /**
+     * The action to take. Valid values are `none`, `alert`, `allow`, `block`, `continue`, or `override`. Defaults to `none`.
+     */
+    readonly action: pulumi.Output<string | undefined>;
+    /**
+     * The audit comment.
+     */
+    readonly auditComment: pulumi.Output<string | undefined>;
+    /**
+     * The description.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * The name.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The rulestack.
+     */
+    readonly rulestack: pulumi.Output<string>;
+    /**
+     * The rulestack's scope. A local rulestack will require that you've retrieved a LRA JWT. A global rulestack will require that you've retrieved a GRA JWT. Valid values are `Local` or `Global`. Defaults to `Local`.
+     */
+    readonly scope: pulumi.Output<string | undefined>;
+    /**
+     * The update token.
+     */
+    readonly updateToken: pulumi.Output<string>;
+    /**
+     * The URL list for this custom URL category.
+     */
+    readonly urlLists: pulumi.Output<string[]>;
+    /**
+     * Create a CustomUrlCategory resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: CustomUrlCategoryArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering CustomUrlCategory resources.
+ */
+export interface CustomUrlCategoryState {
+    /**
+     * The action to take. Valid values are `none`, `alert`, `allow`, `block`, `continue`, or `override`. Defaults to `none`.
+     */
+    action?: pulumi.Input<string>;
+    /**
+     * The audit comment.
+     */
+    auditComment?: pulumi.Input<string>;
+    /**
+     * The description.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The name.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The rulestack.
+     */
+    rulestack?: pulumi.Input<string>;
+    /**
+     * The rulestack's scope. A local rulestack will require that you've retrieved a LRA JWT. A global rulestack will require that you've retrieved a GRA JWT. Valid values are `Local` or `Global`. Defaults to `Local`.
+     */
+    scope?: pulumi.Input<string>;
+    /**
+     * The update token.
+     */
+    updateToken?: pulumi.Input<string>;
+    /**
+     * The URL list for this custom URL category.
+     */
+    urlLists?: pulumi.Input<pulumi.Input<string>[]>;
+}
+/**
+ * The set of arguments for constructing a CustomUrlCategory resource.
+ */
+export interface CustomUrlCategoryArgs {
+    /**
+     * The action to take. Valid values are `none`, `alert`, `allow`, `block`, `continue`, or `override`. Defaults to `none`.
+     */
+    action?: pulumi.Input<string>;
+    /**
+     * The audit comment.
+     */
+    auditComment?: pulumi.Input<string>;
+    /**
+     * The description.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The name.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The rulestack.
+     */
+    rulestack: pulumi.Input<string>;
+    /**
+     * The rulestack's scope. A local rulestack will require that you've retrieved a LRA JWT. A global rulestack will require that you've retrieved a GRA JWT. Valid values are `Local` or `Global`. Defaults to `Local`.
+     */
+    scope?: pulumi.Input<string>;
+    /**
+     * The URL list for this custom URL category.
+     */
+    urlLists: pulumi.Input<pulumi.Input<string>[]>;
+}