@pulumi/cloudngfwaws 2.0.0 → 2.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/account.d.ts +18 -17
- package/account.d.ts.map +1 -0
- package/account.js +27 -4
- package/account.js.map +1 -1
- package/accountOnboarding.d.ts +4 -3
- package/accountOnboarding.d.ts.map +1 -0
- package/accountOnboarding.js +27 -4
- package/accountOnboarding.js.map +1 -1
- package/accountOnboardingStack.d.ts +25 -24
- package/accountOnboardingStack.d.ts.map +1 -0
- package/accountOnboardingStack.js +27 -4
- package/accountOnboardingStack.js.map +1 -1
- package/certificate.d.ts +15 -14
- package/certificate.d.ts.map +1 -0
- package/certificate.js +27 -4
- package/certificate.js.map +1 -1
- package/commitRulestack.d.ts +10 -9
- package/commitRulestack.d.ts.map +1 -0
- package/commitRulestack.js +27 -4
- package/commitRulestack.js.map +1 -1
- package/config/index.d.ts +1 -0
- package/config/index.d.ts.map +1 -0
- package/config/vars.d.ts +1 -0
- package/config/vars.d.ts.map +1 -0
- package/config/vars.js +24 -1
- package/config/vars.js.map +1 -1
- package/customUrlCategory.d.ts +14 -13
- package/customUrlCategory.d.ts.map +1 -0
- package/customUrlCategory.js +27 -4
- package/customUrlCategory.js.map +1 -1
- package/fqdnList.d.ts +12 -11
- package/fqdnList.d.ts.map +1 -0
- package/fqdnList.js +27 -4
- package/fqdnList.js.map +1 -1
- package/getAccount.d.ts +9 -8
- package/getAccount.d.ts.map +1 -0
- package/getAccount.js +25 -2
- package/getAccount.js.map +1 -1
- package/getAccounts.d.ts +4 -3
- package/getAccounts.d.ts.map +1 -0
- package/getAccounts.js +25 -2
- package/getAccounts.js.map +1 -1
- package/getAppIdVersion.d.ts +3 -2
- package/getAppIdVersion.d.ts.map +1 -0
- package/getAppIdVersion.js +25 -2
- package/getAppIdVersion.js.map +1 -1
- package/getAppIdVersions.d.ts +3 -2
- package/getAppIdVersions.d.ts.map +1 -0
- package/getAppIdVersions.js +25 -2
- package/getAppIdVersions.js.map +1 -1
- package/getCertificate.d.ts +3 -2
- package/getCertificate.d.ts.map +1 -0
- package/getCertificate.js +25 -2
- package/getCertificate.js.map +1 -1
- package/getCountry.d.ts +3 -2
- package/getCountry.d.ts.map +1 -0
- package/getCountry.js +25 -2
- package/getCountry.js.map +1 -1
- package/getCustomUrlCategory.d.ts +3 -2
- package/getCustomUrlCategory.d.ts.map +1 -0
- package/getCustomUrlCategory.js +25 -2
- package/getCustomUrlCategory.js.map +1 -1
- package/getFqdnList.d.ts +3 -2
- package/getFqdnList.d.ts.map +1 -0
- package/getFqdnList.js +25 -2
- package/getFqdnList.js.map +1 -1
- package/getIntelligentFeed.d.ts +3 -2
- package/getIntelligentFeed.d.ts.map +1 -0
- package/getIntelligentFeed.js +25 -2
- package/getIntelligentFeed.js.map +1 -1
- package/getNgfw.d.ts +4 -7
- package/getNgfw.d.ts.map +1 -0
- package/getNgfw.js +25 -2
- package/getNgfw.js.map +1 -1
- package/getNgfwLogProfile.d.ts +4 -3
- package/getNgfwLogProfile.d.ts.map +1 -0
- package/getNgfwLogProfile.js +25 -2
- package/getNgfwLogProfile.js.map +1 -1
- package/getNgfws.d.ts +4 -3
- package/getNgfws.d.ts.map +1 -0
- package/getNgfws.js +25 -2
- package/getNgfws.js.map +1 -1
- package/getPredefinedUrlCategories.d.ts +3 -2
- package/getPredefinedUrlCategories.d.ts.map +1 -0
- package/getPredefinedUrlCategories.js +25 -2
- package/getPredefinedUrlCategories.js.map +1 -1
- package/getPredefinedUrlCategoryOverride.d.ts +2 -1
- package/getPredefinedUrlCategoryOverride.d.ts.map +1 -0
- package/getPredefinedUrlCategoryOverride.js +25 -2
- package/getPredefinedUrlCategoryOverride.js.map +1 -1
- package/getPrefixList.d.ts +3 -2
- package/getPrefixList.d.ts.map +1 -0
- package/getPrefixList.js +25 -2
- package/getPrefixList.js.map +1 -1
- package/getRulestack.d.ts +3 -2
- package/getRulestack.d.ts.map +1 -0
- package/getRulestack.js +25 -2
- package/getRulestack.js.map +1 -1
- package/getSecurityRule.d.ts +4 -3
- package/getSecurityRule.d.ts.map +1 -0
- package/getSecurityRule.js +25 -2
- package/getSecurityRule.js.map +1 -1
- package/getValidateRulestack.d.ts +2 -1
- package/getValidateRulestack.d.ts.map +1 -0
- package/getValidateRulestack.js +25 -2
- package/getValidateRulestack.js.map +1 -1
- package/index.d.ts +1 -0
- package/index.d.ts.map +1 -0
- package/index.js +16 -4
- package/index.js.map +1 -1
- package/intelligentFeed.d.ts +20 -19
- package/intelligentFeed.d.ts.map +1 -0
- package/intelligentFeed.js +27 -4
- package/intelligentFeed.js.map +1 -1
- package/ngfw.d.ts +62 -61
- package/ngfw.d.ts.map +1 -0
- package/ngfw.js +39 -6
- package/ngfw.js.map +1 -1
- package/ngfwLogProfile.d.ts +128 -65
- package/ngfwLogProfile.d.ts.map +1 -0
- package/ngfwLogProfile.js +135 -50
- package/ngfwLogProfile.js.map +1 -1
- package/package.json +3 -3
- package/predefinedUrlCategoryOverride.d.ts +9 -8
- package/predefinedUrlCategoryOverride.d.ts.map +1 -0
- package/predefinedUrlCategoryOverride.js +27 -4
- package/predefinedUrlCategoryOverride.js.map +1 -1
- package/prefixList.d.ts +12 -11
- package/prefixList.d.ts.map +1 -0
- package/prefixList.js +27 -4
- package/prefixList.js.map +1 -1
- package/provider.d.ts +21 -20
- package/provider.d.ts.map +1 -0
- package/provider.js +27 -4
- package/provider.js.map +1 -1
- package/rulestack.d.ts +19 -18
- package/rulestack.d.ts.map +1 -0
- package/rulestack.js +27 -4
- package/rulestack.js.map +1 -1
- package/securityRule.d.ts +35 -34
- package/securityRule.d.ts.map +1 -0
- package/securityRule.js +27 -4
- package/securityRule.js.map +1 -1
- package/types/index.d.ts +1 -0
- package/types/index.d.ts.map +1 -0
- package/types/index.js +25 -2
- package/types/index.js.map +1 -1
- package/types/input.d.ts +69 -68
- package/types/input.d.ts.map +1 -0
- package/types/output.d.ts +1 -0
- package/types/output.d.ts.map +1 -0
- package/utilities.d.ts +1 -0
- package/utilities.d.ts.map +1 -0
- package/utilities.js +24 -1
- package/utilities.js.map +1 -1
package/ngfwLogProfile.d.ts
CHANGED
|
@@ -8,57 +8,36 @@ import * as outputs from "./types/output";
|
|
|
8
8
|
*
|
|
9
9
|
* * `Firewall`
|
|
10
10
|
*
|
|
11
|
-
* ##
|
|
11
|
+
* ## Schema Overview
|
|
12
|
+
*
|
|
13
|
+
* The log profile resource supports two schemas for configuring log delivery:
|
|
14
|
+
*
|
|
15
|
+
* | | V1 Schema | V2 Schema |
|
|
16
|
+
* |---|---|---|
|
|
17
|
+
* | **Block** | `logDestination` | `logConfig` |
|
|
18
|
+
* | **Log types per block** | One | Multiple (Set) |
|
|
19
|
+
* | **Cross-account logging** | Not supported | Supported via `roleType` + `accountId` |
|
|
20
|
+
* | **Use case** | Existing deployments | New deployments |
|
|
21
|
+
*
|
|
22
|
+
* ***
|
|
23
|
+
*
|
|
24
|
+
* ## V1 Schema — `logDestination` (Existing Deployments)
|
|
25
|
+
*
|
|
26
|
+
* > Use V1 if you already have a log profile deployed using `logDestination` blocks.
|
|
27
|
+
* Existing configurations do not need to be migrated.
|
|
28
|
+
*
|
|
29
|
+
* One `logDestination` block is required per log type. The following destination types
|
|
30
|
+
* are supported: `S3`, `CloudWatchLogs`, `KinesisDataFirehose`.
|
|
31
|
+
*
|
|
32
|
+
* **Full example — V1 log profile with multiple destinations:**
|
|
12
33
|
*
|
|
13
34
|
* ```typescript
|
|
14
35
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
|
-
* import * as aws from "@pulumi/aws";
|
|
16
36
|
* import * as cloudngfwaws from "@pulumi/cloudngfwaws";
|
|
17
37
|
*
|
|
18
|
-
* const exampleVpc = new aws.index.Vpc("example", {
|
|
19
|
-
* cidrBlock: "172.16.0.0/16",
|
|
20
|
-
* tags: {
|
|
21
|
-
* name: "tf-example",
|
|
22
|
-
* },
|
|
23
|
-
* });
|
|
24
|
-
* const subnet1 = new aws.index.Subnet("subnet1", {
|
|
25
|
-
* vpcId: myVpc.id,
|
|
26
|
-
* cidrBlock: "172.16.10.0/24",
|
|
27
|
-
* availabilityZone: "us-west-2a",
|
|
28
|
-
* tags: {
|
|
29
|
-
* name: "tf-example",
|
|
30
|
-
* },
|
|
31
|
-
* });
|
|
32
|
-
* const subnet2 = new aws.index.Subnet("subnet2", {
|
|
33
|
-
* vpcId: myVpc.id,
|
|
34
|
-
* cidrBlock: "172.16.20.0/24",
|
|
35
|
-
* availabilityZone: "us-west-2b",
|
|
36
|
-
* tags: {
|
|
37
|
-
* name: "tf-example",
|
|
38
|
-
* },
|
|
39
|
-
* });
|
|
40
|
-
* const x = new cloudngfwaws.Ngfw("x", {
|
|
41
|
-
* name: "example-instance",
|
|
42
|
-
* vpcId: exampleVpc.id,
|
|
43
|
-
* accountId: "12345678",
|
|
44
|
-
* description: "Example description",
|
|
45
|
-
* endpointMode: "ServiceManaged",
|
|
46
|
-
* subnetMappings: [
|
|
47
|
-
* {
|
|
48
|
-
* subnetId: subnet1.id,
|
|
49
|
-
* },
|
|
50
|
-
* {
|
|
51
|
-
* subnetId: subnet2.id,
|
|
52
|
-
* },
|
|
53
|
-
* ],
|
|
54
|
-
* rulestack: "example-rulestack",
|
|
55
|
-
* tags: {
|
|
56
|
-
* Foo: "bar",
|
|
57
|
-
* },
|
|
58
|
-
* });
|
|
59
38
|
* const example = new cloudngfwaws.NgfwLogProfile("example", {
|
|
60
|
-
* ngfw:
|
|
61
|
-
* accountId:
|
|
39
|
+
* ngfw: exampleCloudngfwawsNgfw.name,
|
|
40
|
+
* accountId: exampleCloudngfwawsNgfw.accountId,
|
|
62
41
|
* logDestinations: [
|
|
63
42
|
* {
|
|
64
43
|
* destinationType: "S3",
|
|
@@ -67,13 +46,96 @@ import * as outputs from "./types/output";
|
|
|
67
46
|
* },
|
|
68
47
|
* {
|
|
69
48
|
* destinationType: "CloudWatchLogs",
|
|
70
|
-
* destination: "
|
|
49
|
+
* destination: "my-log-group",
|
|
71
50
|
* logType: "THREAT",
|
|
72
51
|
* },
|
|
52
|
+
* {
|
|
53
|
+
* destinationType: "KinesisDataFirehose",
|
|
54
|
+
* destination: "my-firehose-stream",
|
|
55
|
+
* logType: "DECRYPTION",
|
|
56
|
+
* },
|
|
73
57
|
* ],
|
|
74
58
|
* });
|
|
75
59
|
* ```
|
|
76
60
|
*
|
|
61
|
+
* **To add a destination:** add another `logDestination` block and re-apply.
|
|
62
|
+
* **To remove a destination:** remove the block and re-apply.
|
|
63
|
+
*
|
|
64
|
+
* ***
|
|
65
|
+
*
|
|
66
|
+
* ## V2 Schema — `logConfig` (New Deployments)
|
|
67
|
+
*
|
|
68
|
+
* > Use V2 for new deployments. It consolidates all destination configuration into a
|
|
69
|
+
* single `logConfig` block and supports multiple log types per destination.
|
|
70
|
+
*
|
|
71
|
+
* **Full example — V2 log profile, same-account delivery:**
|
|
72
|
+
*
|
|
73
|
+
* ```typescript
|
|
74
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
75
|
+
* import * as cloudngfwaws from "@pulumi/cloudngfwaws";
|
|
76
|
+
*
|
|
77
|
+
* const example = new cloudngfwaws.NgfwLogProfile("example", {
|
|
78
|
+
* ngfw: exampleCloudngfwawsNgfw.name,
|
|
79
|
+
* accountId: exampleCloudngfwawsNgfw.accountId,
|
|
80
|
+
* logConfig: {
|
|
81
|
+
* logDestinationType: "S3",
|
|
82
|
+
* logDestination: "my-s3-bucket",
|
|
83
|
+
* logTypes: [
|
|
84
|
+
* "TRAFFIC",
|
|
85
|
+
* "THREAT",
|
|
86
|
+
* "DECRYPTION",
|
|
87
|
+
* ],
|
|
88
|
+
* },
|
|
89
|
+
* });
|
|
90
|
+
* ```
|
|
91
|
+
*
|
|
92
|
+
* **Full example — V2 log profile with cross-account delivery:**
|
|
93
|
+
*
|
|
94
|
+
* ```typescript
|
|
95
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
96
|
+
* import * as cloudngfwaws from "@pulumi/cloudngfwaws";
|
|
97
|
+
*
|
|
98
|
+
* const example = new cloudngfwaws.NgfwLogProfile("example", {
|
|
99
|
+
* ngfw: exampleCloudngfwawsNgfw.name,
|
|
100
|
+
* accountId: exampleCloudngfwawsNgfw.accountId,
|
|
101
|
+
* logConfig: {
|
|
102
|
+
* logDestinationType: "CloudWatchLogs",
|
|
103
|
+
* logDestination: "arn:aws:logs:us-east-1:222222222222:log-group:my-log-group",
|
|
104
|
+
* logTypes: [
|
|
105
|
+
* "TRAFFIC",
|
|
106
|
+
* "THREAT",
|
|
107
|
+
* ],
|
|
108
|
+
* roleType: "CrossAccount",
|
|
109
|
+
* accountId: "222222222222",
|
|
110
|
+
* },
|
|
111
|
+
* });
|
|
112
|
+
* ```
|
|
113
|
+
*
|
|
114
|
+
* **Full example — V2 log profile with advanced threat logging and CloudWatch metrics:**
|
|
115
|
+
*
|
|
116
|
+
* ```typescript
|
|
117
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
118
|
+
* import * as cloudngfwaws from "@pulumi/cloudngfwaws";
|
|
119
|
+
*
|
|
120
|
+
* const example = new cloudngfwaws.NgfwLogProfile("example", {
|
|
121
|
+
* ngfw: exampleCloudngfwawsNgfw.name,
|
|
122
|
+
* accountId: exampleCloudngfwawsNgfw.accountId,
|
|
123
|
+
* advancedThreatLog: true,
|
|
124
|
+
* cloudWatchMetricNamespace: "CloudNGFW",
|
|
125
|
+
* logConfig: {
|
|
126
|
+
* logDestinationType: "KinesisDataFirehose",
|
|
127
|
+
* logDestination: "my-firehose-stream",
|
|
128
|
+
* logTypes: [
|
|
129
|
+
* "TRAFFIC",
|
|
130
|
+
* "THREAT",
|
|
131
|
+
* "DECRYPTION",
|
|
132
|
+
* ],
|
|
133
|
+
* },
|
|
134
|
+
* });
|
|
135
|
+
* ```
|
|
136
|
+
*
|
|
137
|
+
* ***
|
|
138
|
+
*
|
|
77
139
|
* ## Import
|
|
78
140
|
*
|
|
79
141
|
* import name is <account_id>:<ngfw>
|
|
@@ -154,43 +216,43 @@ export interface NgfwLogProfileState {
|
|
|
154
216
|
/**
|
|
155
217
|
* The unique ID of the account.
|
|
156
218
|
*/
|
|
157
|
-
accountId?: pulumi.Input<string>;
|
|
219
|
+
accountId?: pulumi.Input<string | undefined>;
|
|
158
220
|
/**
|
|
159
221
|
* Enable advanced threat logging.
|
|
160
222
|
*/
|
|
161
|
-
advancedThreatLog?: pulumi.Input<boolean>;
|
|
223
|
+
advancedThreatLog?: pulumi.Input<boolean | undefined>;
|
|
162
224
|
/**
|
|
163
225
|
* The CloudWatch metric namespace.
|
|
164
226
|
*/
|
|
165
|
-
cloudWatchMetricNamespace?: pulumi.Input<string>;
|
|
227
|
+
cloudWatchMetricNamespace?: pulumi.Input<string | undefined>;
|
|
166
228
|
/**
|
|
167
229
|
* Cloudwatch metric fields.
|
|
168
230
|
*/
|
|
169
|
-
cloudwatchMetricFields?: pulumi.Input<pulumi.Input<string>[]>;
|
|
231
|
+
cloudwatchMetricFields?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
170
232
|
/**
|
|
171
233
|
* The Firewall Id for the NGFW.
|
|
172
234
|
*/
|
|
173
|
-
firewallId?: pulumi.Input<string>;
|
|
235
|
+
firewallId?: pulumi.Input<string | undefined>;
|
|
174
236
|
/**
|
|
175
237
|
* Log configuration details.
|
|
176
238
|
*/
|
|
177
|
-
logConfig?: pulumi.Input<inputs.NgfwLogProfileLogConfig>;
|
|
239
|
+
logConfig?: pulumi.Input<inputs.NgfwLogProfileLogConfig | undefined>;
|
|
178
240
|
/**
|
|
179
241
|
* List of log destinations.
|
|
180
242
|
*/
|
|
181
|
-
logDestinations?: pulumi.Input<pulumi.Input<inputs.NgfwLogProfileLogDestination>[]>;
|
|
243
|
+
logDestinations?: pulumi.Input<pulumi.Input<inputs.NgfwLogProfileLogDestination>[] | undefined>;
|
|
182
244
|
/**
|
|
183
245
|
* The name of the NGFW.
|
|
184
246
|
*/
|
|
185
|
-
ngfw?: pulumi.Input<string>;
|
|
247
|
+
ngfw?: pulumi.Input<string | undefined>;
|
|
186
248
|
/**
|
|
187
249
|
* The region of the NGFW.
|
|
188
250
|
*/
|
|
189
|
-
region?: pulumi.Input<string>;
|
|
251
|
+
region?: pulumi.Input<string | undefined>;
|
|
190
252
|
/**
|
|
191
253
|
* The update token.
|
|
192
254
|
*/
|
|
193
|
-
updateToken?: pulumi.Input<string>;
|
|
255
|
+
updateToken?: pulumi.Input<string | undefined>;
|
|
194
256
|
}
|
|
195
257
|
/**
|
|
196
258
|
* The set of arguments for constructing a NgfwLogProfile resource.
|
|
@@ -199,37 +261,38 @@ export interface NgfwLogProfileArgs {
|
|
|
199
261
|
/**
|
|
200
262
|
* The unique ID of the account.
|
|
201
263
|
*/
|
|
202
|
-
accountId?: pulumi.Input<string>;
|
|
264
|
+
accountId?: pulumi.Input<string | undefined>;
|
|
203
265
|
/**
|
|
204
266
|
* Enable advanced threat logging.
|
|
205
267
|
*/
|
|
206
|
-
advancedThreatLog?: pulumi.Input<boolean>;
|
|
268
|
+
advancedThreatLog?: pulumi.Input<boolean | undefined>;
|
|
207
269
|
/**
|
|
208
270
|
* The CloudWatch metric namespace.
|
|
209
271
|
*/
|
|
210
|
-
cloudWatchMetricNamespace?: pulumi.Input<string>;
|
|
272
|
+
cloudWatchMetricNamespace?: pulumi.Input<string | undefined>;
|
|
211
273
|
/**
|
|
212
274
|
* Cloudwatch metric fields.
|
|
213
275
|
*/
|
|
214
|
-
cloudwatchMetricFields?: pulumi.Input<pulumi.Input<string>[]>;
|
|
276
|
+
cloudwatchMetricFields?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
215
277
|
/**
|
|
216
278
|
* The Firewall Id for the NGFW.
|
|
217
279
|
*/
|
|
218
|
-
firewallId?: pulumi.Input<string>;
|
|
280
|
+
firewallId?: pulumi.Input<string | undefined>;
|
|
219
281
|
/**
|
|
220
282
|
* Log configuration details.
|
|
221
283
|
*/
|
|
222
|
-
logConfig?: pulumi.Input<inputs.NgfwLogProfileLogConfig>;
|
|
284
|
+
logConfig?: pulumi.Input<inputs.NgfwLogProfileLogConfig | undefined>;
|
|
223
285
|
/**
|
|
224
286
|
* List of log destinations.
|
|
225
287
|
*/
|
|
226
|
-
logDestinations?: pulumi.Input<pulumi.Input<inputs.NgfwLogProfileLogDestination>[]>;
|
|
288
|
+
logDestinations?: pulumi.Input<pulumi.Input<inputs.NgfwLogProfileLogDestination>[] | undefined>;
|
|
227
289
|
/**
|
|
228
290
|
* The name of the NGFW.
|
|
229
291
|
*/
|
|
230
|
-
ngfw?: pulumi.Input<string>;
|
|
292
|
+
ngfw?: pulumi.Input<string | undefined>;
|
|
231
293
|
/**
|
|
232
294
|
* The region of the NGFW.
|
|
233
295
|
*/
|
|
234
|
-
region?: pulumi.Input<string>;
|
|
296
|
+
region?: pulumi.Input<string | undefined>;
|
|
235
297
|
}
|
|
298
|
+
//# sourceMappingURL=ngfwLogProfile.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ngfwLogProfile.d.ts","sourceRoot":"","sources":["../ngfwLogProfile.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8IG;AACH,qBAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IACrD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,cAAc;IAO9I;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,cAAc;IAOzD;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,SAAwB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9E;;OAEG;IACH,SAAwB,yBAAyB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrF;;OAEG;IACH,SAAwB,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACpF;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IAC9F;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,EAAE,GAAG,SAAS,CAAC,CAAC;IAC3G;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;;OAEG;IACH,SAAgC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAgC3F;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACtD;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC1E;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACtD;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC1E;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC7C"}
|
package/ngfwLogProfile.js
CHANGED
|
@@ -1,10 +1,33 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
5
|
+
if (k2 === undefined) k2 = k;
|
|
6
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
7
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
8
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
9
|
+
}
|
|
10
|
+
Object.defineProperty(o, k2, desc);
|
|
11
|
+
}) : (function(o, m, k, k2) {
|
|
12
|
+
if (k2 === undefined) k2 = k;
|
|
13
|
+
o[k2] = m[k];
|
|
14
|
+
}));
|
|
15
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
16
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
17
|
+
}) : function(o, v) {
|
|
18
|
+
o["default"] = v;
|
|
19
|
+
});
|
|
20
|
+
var __importStar = (this && this.__importStar) || function (mod) {
|
|
21
|
+
if (mod && mod.__esModule) return mod;
|
|
22
|
+
var result = {};
|
|
23
|
+
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
|
|
24
|
+
__setModuleDefault(result, mod);
|
|
25
|
+
return result;
|
|
26
|
+
};
|
|
4
27
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
28
|
exports.NgfwLogProfile = void 0;
|
|
6
|
-
const pulumi = require("@pulumi/pulumi");
|
|
7
|
-
const utilities = require("./utilities");
|
|
29
|
+
const pulumi = __importStar(require("@pulumi/pulumi"));
|
|
30
|
+
const utilities = __importStar(require("./utilities"));
|
|
8
31
|
/**
|
|
9
32
|
* Resource for NGFW log profile manipulation.
|
|
10
33
|
*
|
|
@@ -12,57 +35,36 @@ const utilities = require("./utilities");
|
|
|
12
35
|
*
|
|
13
36
|
* * `Firewall`
|
|
14
37
|
*
|
|
15
|
-
* ##
|
|
38
|
+
* ## Schema Overview
|
|
39
|
+
*
|
|
40
|
+
* The log profile resource supports two schemas for configuring log delivery:
|
|
41
|
+
*
|
|
42
|
+
* | | V1 Schema | V2 Schema |
|
|
43
|
+
* |---|---|---|
|
|
44
|
+
* | **Block** | `logDestination` | `logConfig` |
|
|
45
|
+
* | **Log types per block** | One | Multiple (Set) |
|
|
46
|
+
* | **Cross-account logging** | Not supported | Supported via `roleType` + `accountId` |
|
|
47
|
+
* | **Use case** | Existing deployments | New deployments |
|
|
48
|
+
*
|
|
49
|
+
* ***
|
|
50
|
+
*
|
|
51
|
+
* ## V1 Schema — `logDestination` (Existing Deployments)
|
|
52
|
+
*
|
|
53
|
+
* > Use V1 if you already have a log profile deployed using `logDestination` blocks.
|
|
54
|
+
* Existing configurations do not need to be migrated.
|
|
55
|
+
*
|
|
56
|
+
* One `logDestination` block is required per log type. The following destination types
|
|
57
|
+
* are supported: `S3`, `CloudWatchLogs`, `KinesisDataFirehose`.
|
|
58
|
+
*
|
|
59
|
+
* **Full example — V1 log profile with multiple destinations:**
|
|
16
60
|
*
|
|
17
61
|
* ```typescript
|
|
18
62
|
* import * as pulumi from "@pulumi/pulumi";
|
|
19
|
-
* import * as aws from "@pulumi/aws";
|
|
20
63
|
* import * as cloudngfwaws from "@pulumi/cloudngfwaws";
|
|
21
64
|
*
|
|
22
|
-
* const exampleVpc = new aws.index.Vpc("example", {
|
|
23
|
-
* cidrBlock: "172.16.0.0/16",
|
|
24
|
-
* tags: {
|
|
25
|
-
* name: "tf-example",
|
|
26
|
-
* },
|
|
27
|
-
* });
|
|
28
|
-
* const subnet1 = new aws.index.Subnet("subnet1", {
|
|
29
|
-
* vpcId: myVpc.id,
|
|
30
|
-
* cidrBlock: "172.16.10.0/24",
|
|
31
|
-
* availabilityZone: "us-west-2a",
|
|
32
|
-
* tags: {
|
|
33
|
-
* name: "tf-example",
|
|
34
|
-
* },
|
|
35
|
-
* });
|
|
36
|
-
* const subnet2 = new aws.index.Subnet("subnet2", {
|
|
37
|
-
* vpcId: myVpc.id,
|
|
38
|
-
* cidrBlock: "172.16.20.0/24",
|
|
39
|
-
* availabilityZone: "us-west-2b",
|
|
40
|
-
* tags: {
|
|
41
|
-
* name: "tf-example",
|
|
42
|
-
* },
|
|
43
|
-
* });
|
|
44
|
-
* const x = new cloudngfwaws.Ngfw("x", {
|
|
45
|
-
* name: "example-instance",
|
|
46
|
-
* vpcId: exampleVpc.id,
|
|
47
|
-
* accountId: "12345678",
|
|
48
|
-
* description: "Example description",
|
|
49
|
-
* endpointMode: "ServiceManaged",
|
|
50
|
-
* subnetMappings: [
|
|
51
|
-
* {
|
|
52
|
-
* subnetId: subnet1.id,
|
|
53
|
-
* },
|
|
54
|
-
* {
|
|
55
|
-
* subnetId: subnet2.id,
|
|
56
|
-
* },
|
|
57
|
-
* ],
|
|
58
|
-
* rulestack: "example-rulestack",
|
|
59
|
-
* tags: {
|
|
60
|
-
* Foo: "bar",
|
|
61
|
-
* },
|
|
62
|
-
* });
|
|
63
65
|
* const example = new cloudngfwaws.NgfwLogProfile("example", {
|
|
64
|
-
* ngfw:
|
|
65
|
-
* accountId:
|
|
66
|
+
* ngfw: exampleCloudngfwawsNgfw.name,
|
|
67
|
+
* accountId: exampleCloudngfwawsNgfw.accountId,
|
|
66
68
|
* logDestinations: [
|
|
67
69
|
* {
|
|
68
70
|
* destinationType: "S3",
|
|
@@ -71,13 +73,96 @@ const utilities = require("./utilities");
|
|
|
71
73
|
* },
|
|
72
74
|
* {
|
|
73
75
|
* destinationType: "CloudWatchLogs",
|
|
74
|
-
* destination: "
|
|
76
|
+
* destination: "my-log-group",
|
|
75
77
|
* logType: "THREAT",
|
|
76
78
|
* },
|
|
79
|
+
* {
|
|
80
|
+
* destinationType: "KinesisDataFirehose",
|
|
81
|
+
* destination: "my-firehose-stream",
|
|
82
|
+
* logType: "DECRYPTION",
|
|
83
|
+
* },
|
|
77
84
|
* ],
|
|
78
85
|
* });
|
|
79
86
|
* ```
|
|
80
87
|
*
|
|
88
|
+
* **To add a destination:** add another `logDestination` block and re-apply.
|
|
89
|
+
* **To remove a destination:** remove the block and re-apply.
|
|
90
|
+
*
|
|
91
|
+
* ***
|
|
92
|
+
*
|
|
93
|
+
* ## V2 Schema — `logConfig` (New Deployments)
|
|
94
|
+
*
|
|
95
|
+
* > Use V2 for new deployments. It consolidates all destination configuration into a
|
|
96
|
+
* single `logConfig` block and supports multiple log types per destination.
|
|
97
|
+
*
|
|
98
|
+
* **Full example — V2 log profile, same-account delivery:**
|
|
99
|
+
*
|
|
100
|
+
* ```typescript
|
|
101
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
102
|
+
* import * as cloudngfwaws from "@pulumi/cloudngfwaws";
|
|
103
|
+
*
|
|
104
|
+
* const example = new cloudngfwaws.NgfwLogProfile("example", {
|
|
105
|
+
* ngfw: exampleCloudngfwawsNgfw.name,
|
|
106
|
+
* accountId: exampleCloudngfwawsNgfw.accountId,
|
|
107
|
+
* logConfig: {
|
|
108
|
+
* logDestinationType: "S3",
|
|
109
|
+
* logDestination: "my-s3-bucket",
|
|
110
|
+
* logTypes: [
|
|
111
|
+
* "TRAFFIC",
|
|
112
|
+
* "THREAT",
|
|
113
|
+
* "DECRYPTION",
|
|
114
|
+
* ],
|
|
115
|
+
* },
|
|
116
|
+
* });
|
|
117
|
+
* ```
|
|
118
|
+
*
|
|
119
|
+
* **Full example — V2 log profile with cross-account delivery:**
|
|
120
|
+
*
|
|
121
|
+
* ```typescript
|
|
122
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
123
|
+
* import * as cloudngfwaws from "@pulumi/cloudngfwaws";
|
|
124
|
+
*
|
|
125
|
+
* const example = new cloudngfwaws.NgfwLogProfile("example", {
|
|
126
|
+
* ngfw: exampleCloudngfwawsNgfw.name,
|
|
127
|
+
* accountId: exampleCloudngfwawsNgfw.accountId,
|
|
128
|
+
* logConfig: {
|
|
129
|
+
* logDestinationType: "CloudWatchLogs",
|
|
130
|
+
* logDestination: "arn:aws:logs:us-east-1:222222222222:log-group:my-log-group",
|
|
131
|
+
* logTypes: [
|
|
132
|
+
* "TRAFFIC",
|
|
133
|
+
* "THREAT",
|
|
134
|
+
* ],
|
|
135
|
+
* roleType: "CrossAccount",
|
|
136
|
+
* accountId: "222222222222",
|
|
137
|
+
* },
|
|
138
|
+
* });
|
|
139
|
+
* ```
|
|
140
|
+
*
|
|
141
|
+
* **Full example — V2 log profile with advanced threat logging and CloudWatch metrics:**
|
|
142
|
+
*
|
|
143
|
+
* ```typescript
|
|
144
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
145
|
+
* import * as cloudngfwaws from "@pulumi/cloudngfwaws";
|
|
146
|
+
*
|
|
147
|
+
* const example = new cloudngfwaws.NgfwLogProfile("example", {
|
|
148
|
+
* ngfw: exampleCloudngfwawsNgfw.name,
|
|
149
|
+
* accountId: exampleCloudngfwawsNgfw.accountId,
|
|
150
|
+
* advancedThreatLog: true,
|
|
151
|
+
* cloudWatchMetricNamespace: "CloudNGFW",
|
|
152
|
+
* logConfig: {
|
|
153
|
+
* logDestinationType: "KinesisDataFirehose",
|
|
154
|
+
* logDestination: "my-firehose-stream",
|
|
155
|
+
* logTypes: [
|
|
156
|
+
* "TRAFFIC",
|
|
157
|
+
* "THREAT",
|
|
158
|
+
* "DECRYPTION",
|
|
159
|
+
* ],
|
|
160
|
+
* },
|
|
161
|
+
* });
|
|
162
|
+
* ```
|
|
163
|
+
*
|
|
164
|
+
* ***
|
|
165
|
+
*
|
|
81
166
|
* ## Import
|
|
82
167
|
*
|
|
83
168
|
* import name is <account_id>:<ngfw>
|
|
@@ -99,6 +184,8 @@ class NgfwLogProfile extends pulumi.CustomResource {
|
|
|
99
184
|
static get(name, id, state, opts) {
|
|
100
185
|
return new NgfwLogProfile(name, state, { ...opts, id: id });
|
|
101
186
|
}
|
|
187
|
+
/** @internal */
|
|
188
|
+
static __pulumiType = 'cloudngfwaws:index/ngfwLogProfile:NgfwLogProfile';
|
|
102
189
|
/**
|
|
103
190
|
* Returns true if the given object is an instance of NgfwLogProfile. This is designed to work even
|
|
104
191
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
@@ -143,6 +230,4 @@ class NgfwLogProfile extends pulumi.CustomResource {
|
|
|
143
230
|
}
|
|
144
231
|
}
|
|
145
232
|
exports.NgfwLogProfile = NgfwLogProfile;
|
|
146
|
-
/** @internal */
|
|
147
|
-
NgfwLogProfile.__pulumiType = 'cloudngfwaws:index/ngfwLogProfile:NgfwLogProfile';
|
|
148
233
|
//# sourceMappingURL=ngfwLogProfile.js.map
|
package/ngfwLogProfile.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ngfwLogProfile.js","sourceRoot":"","sources":["../ngfwLogProfile.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF
|
|
1
|
+
{"version":3,"file":"ngfwLogProfile.js","sourceRoot":"","sources":["../ngfwLogProfile.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8IG;AACH,MAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IACrD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2B,EAAE,IAAmC;QACzH,OAAO,IAAI,cAAc,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,kDAAkD,CAAC;IAEzF;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,cAAc,CAAC,YAAY,CAAC;IAC/D,CAAC;IAmDD,YAAY,IAAY,EAAE,WAAsD,EAAE,IAAmC;QACjH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8C,CAAC;YAC7D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,EAAE,sBAAsB,CAAC;YACzE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;SACtD;aAAM;YACH,MAAM,IAAI,GAAG,WAA6C,CAAC;YAC3D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,EAAE,sBAAsB,CAAC;YACxE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;;AA3GL,wCA4GC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/cloudngfwaws",
|
|
3
|
-
"version": "2.0.
|
|
3
|
+
"version": "2.0.1",
|
|
4
4
|
"description": "A Pulumi package for creating and managing Cloud NGFW for AWS resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -21,12 +21,12 @@
|
|
|
21
21
|
"devDependencies": {
|
|
22
22
|
"@types/mime": "^2.0.0",
|
|
23
23
|
"@types/node": "^10.0.0",
|
|
24
|
-
"typescript": "^4.
|
|
24
|
+
"typescript": "^4.7.0"
|
|
25
25
|
},
|
|
26
26
|
"pulumi": {
|
|
27
27
|
"resource": true,
|
|
28
28
|
"name": "cloudngfwaws",
|
|
29
|
-
"version": "2.0.
|
|
29
|
+
"version": "2.0.1",
|
|
30
30
|
"server": "github://api.github.com/pulumi/pulumi-cloudngfwaws"
|
|
31
31
|
}
|
|
32
32
|
}
|
|
@@ -89,23 +89,23 @@ export interface PredefinedUrlCategoryOverrideState {
|
|
|
89
89
|
/**
|
|
90
90
|
* The action to take. Valid values are `none`, `allow`, `alert`, or `block`. Defaults to `none`.
|
|
91
91
|
*/
|
|
92
|
-
action?: pulumi.Input<string>;
|
|
92
|
+
action?: pulumi.Input<string | undefined>;
|
|
93
93
|
/**
|
|
94
94
|
* The audit comment.
|
|
95
95
|
*/
|
|
96
|
-
auditComment?: pulumi.Input<string>;
|
|
96
|
+
auditComment?: pulumi.Input<string | undefined>;
|
|
97
97
|
/**
|
|
98
98
|
* The name.
|
|
99
99
|
*/
|
|
100
|
-
name?: pulumi.Input<string>;
|
|
100
|
+
name?: pulumi.Input<string | undefined>;
|
|
101
101
|
/**
|
|
102
102
|
* The rulestack.
|
|
103
103
|
*/
|
|
104
|
-
rulestack?: pulumi.Input<string>;
|
|
104
|
+
rulestack?: pulumi.Input<string | undefined>;
|
|
105
105
|
/**
|
|
106
106
|
* Update token.
|
|
107
107
|
*/
|
|
108
|
-
updateToken?: pulumi.Input<string>;
|
|
108
|
+
updateToken?: pulumi.Input<string | undefined>;
|
|
109
109
|
}
|
|
110
110
|
/**
|
|
111
111
|
* The set of arguments for constructing a PredefinedUrlCategoryOverride resource.
|
|
@@ -114,17 +114,18 @@ export interface PredefinedUrlCategoryOverrideArgs {
|
|
|
114
114
|
/**
|
|
115
115
|
* The action to take. Valid values are `none`, `allow`, `alert`, or `block`. Defaults to `none`.
|
|
116
116
|
*/
|
|
117
|
-
action?: pulumi.Input<string>;
|
|
117
|
+
action?: pulumi.Input<string | undefined>;
|
|
118
118
|
/**
|
|
119
119
|
* The audit comment.
|
|
120
120
|
*/
|
|
121
|
-
auditComment?: pulumi.Input<string>;
|
|
121
|
+
auditComment?: pulumi.Input<string | undefined>;
|
|
122
122
|
/**
|
|
123
123
|
* The name.
|
|
124
124
|
*/
|
|
125
|
-
name?: pulumi.Input<string>;
|
|
125
|
+
name?: pulumi.Input<string | undefined>;
|
|
126
126
|
/**
|
|
127
127
|
* The rulestack.
|
|
128
128
|
*/
|
|
129
129
|
rulestack: pulumi.Input<string>;
|
|
130
130
|
}
|
|
131
|
+
//# sourceMappingURL=predefinedUrlCategoryOverride.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"predefinedUrlCategoryOverride.d.ts","sourceRoot":"","sources":["../predefinedUrlCategoryOverride.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,qBAAa,6BAA8B,SAAQ,MAAM,CAAC,cAAc;IACpE;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,kCAAkC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,6BAA6B;IAO5K;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,6BAA6B;IAOxE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxE;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAgC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAyBzG;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IAC/C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAC9C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACnC"}
|
|
@@ -1,10 +1,33 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
5
|
+
if (k2 === undefined) k2 = k;
|
|
6
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
7
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
8
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
9
|
+
}
|
|
10
|
+
Object.defineProperty(o, k2, desc);
|
|
11
|
+
}) : (function(o, m, k, k2) {
|
|
12
|
+
if (k2 === undefined) k2 = k;
|
|
13
|
+
o[k2] = m[k];
|
|
14
|
+
}));
|
|
15
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
16
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
17
|
+
}) : function(o, v) {
|
|
18
|
+
o["default"] = v;
|
|
19
|
+
});
|
|
20
|
+
var __importStar = (this && this.__importStar) || function (mod) {
|
|
21
|
+
if (mod && mod.__esModule) return mod;
|
|
22
|
+
var result = {};
|
|
23
|
+
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
|
|
24
|
+
__setModuleDefault(result, mod);
|
|
25
|
+
return result;
|
|
26
|
+
};
|
|
4
27
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
28
|
exports.PredefinedUrlCategoryOverride = void 0;
|
|
6
|
-
const pulumi = require("@pulumi/pulumi");
|
|
7
|
-
const utilities = require("./utilities");
|
|
29
|
+
const pulumi = __importStar(require("@pulumi/pulumi"));
|
|
30
|
+
const utilities = __importStar(require("./utilities"));
|
|
8
31
|
/**
|
|
9
32
|
* Resource for predefined URL category override management.
|
|
10
33
|
*
|
|
@@ -56,6 +79,8 @@ class PredefinedUrlCategoryOverride extends pulumi.CustomResource {
|
|
|
56
79
|
static get(name, id, state, opts) {
|
|
57
80
|
return new PredefinedUrlCategoryOverride(name, state, { ...opts, id: id });
|
|
58
81
|
}
|
|
82
|
+
/** @internal */
|
|
83
|
+
static __pulumiType = 'cloudngfwaws:index/predefinedUrlCategoryOverride:PredefinedUrlCategoryOverride';
|
|
59
84
|
/**
|
|
60
85
|
* Returns true if the given object is an instance of PredefinedUrlCategoryOverride. This is designed to work even
|
|
61
86
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
@@ -93,6 +118,4 @@ class PredefinedUrlCategoryOverride extends pulumi.CustomResource {
|
|
|
93
118
|
}
|
|
94
119
|
}
|
|
95
120
|
exports.PredefinedUrlCategoryOverride = PredefinedUrlCategoryOverride;
|
|
96
|
-
/** @internal */
|
|
97
|
-
PredefinedUrlCategoryOverride.__pulumiType = 'cloudngfwaws:index/predefinedUrlCategoryOverride:PredefinedUrlCategoryOverride';
|
|
98
121
|
//# sourceMappingURL=predefinedUrlCategoryOverride.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"predefinedUrlCategoryOverride.js","sourceRoot":"","sources":["../predefinedUrlCategoryOverride.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF
|
|
1
|
+
{"version":3,"file":"predefinedUrlCategoryOverride.js","sourceRoot":"","sources":["../predefinedUrlCategoryOverride.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAa,6BAA8B,SAAQ,MAAM,CAAC,cAAc;IACpE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0C,EAAE,IAAmC;QACxI,OAAO,IAAI,6BAA6B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,gFAAgF,CAAC;IAEvH;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,6BAA6B,CAAC,YAAY,CAAC;IAC9E,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAoF,EAAE,IAAmC;QAC/I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA6D,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;SACtD;aAAM;YACH,MAAM,IAAI,GAAG,WAA4D,CAAC;YAC1E,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,6BAA6B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;;AAhFL,sEAiFC"}
|