@pulumi/ise 0.1.0-alpha.1715070880

package/networkaccessauthentication/rule.d.ts

@@ -0,0 +1,303 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * This resource can manage a Network Access Authentication Rule.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as ise from "@pulumi/ise";
+ *
+ * const example = new ise.networkaccessauthentication.Rule("example", {
+ *     policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
+ *     name: "Rule1",
+ *     "default": false,
+ *     rank: 0,
+ *     state: "enabled",
+ *     conditionType: "ConditionAttributes",
+ *     conditionIsNegate: false,
+ *     conditionAttributeName: "Location",
+ *     conditionAttributeValue: "All Locations",
+ *     conditionDictionaryName: "DEVICE",
+ *     conditionOperator: "equals",
+ *     identitySourceName: "Internal Endpoints",
+ *     ifAuthFail: "REJECT",
+ *     ifProcessFail: "DROP",
+ *     ifUserNotFound: "REJECT",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import ise:NetworkAccessAuthentication/rule:Rule example "76d24097-41c4-4558-a4d0-a8c07ac08470,76d24097-41c4-4558-a4d0-a8c07ac08470"
+ * ```
+ */
+export declare class Rule extends pulumi.CustomResource {
+    /**
+     * Get an existing Rule resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: RuleState, opts?: pulumi.CustomResourceOptions): Rule;
+    /**
+     * Returns true if the given object is an instance of Rule.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Rule;
+    /**
+     * List of child conditions. `condition_type` must be one of `ConditionAndBlock` or `ConditionOrBlock`.
+     */
+    readonly childrens: pulumi.Output<outputs.NetworkAccessAuthentication.RuleChildren[] | undefined>;
+    /**
+     * Dictionary attribute name
+     */
+    readonly conditionAttributeName: pulumi.Output<string | undefined>;
+    /**
+     * Attribute value for condition. Value type is specified in dictionary object.
+     */
+    readonly conditionAttributeValue: pulumi.Output<string | undefined>;
+    /**
+     * Dictionary name
+     */
+    readonly conditionDictionaryName: pulumi.Output<string | undefined>;
+    /**
+     * Dictionary value
+     */
+    readonly conditionDictionaryValue: pulumi.Output<string | undefined>;
+    /**
+     * UUID for condition
+     */
+    readonly conditionId: pulumi.Output<string | undefined>;
+    /**
+     * Indicates whereas this condition is in negate mode
+     */
+    readonly conditionIsNegate: pulumi.Output<boolean | undefined>;
+    /**
+     * Equality operator - Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`,
+     * `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`,
+     * `notEquals`, `notIn`, `notStartsWith`, `startsWith`
+     */
+    readonly conditionOperator: pulumi.Output<string | undefined>;
+    /**
+     * Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that
+     * additional conditions are present under the children attribute. - Choices: `ConditionAndBlock`, `ConditionAttributes`,
+     * `ConditionOrBlock`, `ConditionReference`
+     */
+    readonly conditionType: pulumi.Output<string | undefined>;
+    /**
+     * Indicates if this rule is the default one
+     */
+    readonly default: pulumi.Output<boolean | undefined>;
+    /**
+     * Identity source name from the identity stores
+     */
+    readonly identitySourceName: pulumi.Output<string | undefined>;
+    /**
+     * Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: `REJECT`,
+     * `DROP`, `CONTINUE`
+     */
+    readonly ifAuthFail: pulumi.Output<string>;
+    /**
+     * Action to perform when ISE is uanble to access the identity database - Choices: `REJECT`, `DROP`, `CONTINUE`
+     */
+    readonly ifProcessFail: pulumi.Output<string>;
+    /**
+     * Action to perform when user is not found in any of identity stores - Choices: `REJECT`, `DROP`, `CONTINUE`
+     */
+    readonly ifUserNotFound: pulumi.Output<string>;
+    /**
+     * Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Policy set ID
+     */
+    readonly policySetId: pulumi.Output<string>;
+    /**
+     * The rank (priority) in relation to other rules. Lower rank is higher priority.
+     */
+    readonly rank: pulumi.Output<number | undefined>;
+    /**
+     * The state that the rule is in. A disabled rule cannot be matched. - Choices: `disabled`, `enabled`, `monitor`
+     */
+    readonly state: pulumi.Output<string | undefined>;
+    /**
+     * Create a Rule resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: RuleArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Rule resources.
+ */
+export interface RuleState {
+    /**
+     * List of child conditions. `condition_type` must be one of `ConditionAndBlock` or `ConditionOrBlock`.
+     */
+    childrens?: pulumi.Input<pulumi.Input<inputs.NetworkAccessAuthentication.RuleChildren>[]>;
+    /**
+     * Dictionary attribute name
+     */
+    conditionAttributeName?: pulumi.Input<string>;
+    /**
+     * Attribute value for condition. Value type is specified in dictionary object.
+     */
+    conditionAttributeValue?: pulumi.Input<string>;
+    /**
+     * Dictionary name
+     */
+    conditionDictionaryName?: pulumi.Input<string>;
+    /**
+     * Dictionary value
+     */
+    conditionDictionaryValue?: pulumi.Input<string>;
+    /**
+     * UUID for condition
+     */
+    conditionId?: pulumi.Input<string>;
+    /**
+     * Indicates whereas this condition is in negate mode
+     */
+    conditionIsNegate?: pulumi.Input<boolean>;
+    /**
+     * Equality operator - Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`,
+     * `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`,
+     * `notEquals`, `notIn`, `notStartsWith`, `startsWith`
+     */
+    conditionOperator?: pulumi.Input<string>;
+    /**
+     * Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that
+     * additional conditions are present under the children attribute. - Choices: `ConditionAndBlock`, `ConditionAttributes`,
+     * `ConditionOrBlock`, `ConditionReference`
+     */
+    conditionType?: pulumi.Input<string>;
+    /**
+     * Indicates if this rule is the default one
+     */
+    default?: pulumi.Input<boolean>;
+    /**
+     * Identity source name from the identity stores
+     */
+    identitySourceName?: pulumi.Input<string>;
+    /**
+     * Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: `REJECT`,
+     * `DROP`, `CONTINUE`
+     */
+    ifAuthFail?: pulumi.Input<string>;
+    /**
+     * Action to perform when ISE is uanble to access the identity database - Choices: `REJECT`, `DROP`, `CONTINUE`
+     */
+    ifProcessFail?: pulumi.Input<string>;
+    /**
+     * Action to perform when user is not found in any of identity stores - Choices: `REJECT`, `DROP`, `CONTINUE`
+     */
+    ifUserNotFound?: pulumi.Input<string>;
+    /**
+     * Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Policy set ID
+     */
+    policySetId?: pulumi.Input<string>;
+    /**
+     * The rank (priority) in relation to other rules. Lower rank is higher priority.
+     */
+    rank?: pulumi.Input<number>;
+    /**
+     * The state that the rule is in. A disabled rule cannot be matched. - Choices: `disabled`, `enabled`, `monitor`
+     */
+    state?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a Rule resource.
+ */
+export interface RuleArgs {
+    /**
+     * List of child conditions. `condition_type` must be one of `ConditionAndBlock` or `ConditionOrBlock`.
+     */
+    childrens?: pulumi.Input<pulumi.Input<inputs.NetworkAccessAuthentication.RuleChildren>[]>;
+    /**
+     * Dictionary attribute name
+     */
+    conditionAttributeName?: pulumi.Input<string>;
+    /**
+     * Attribute value for condition. Value type is specified in dictionary object.
+     */
+    conditionAttributeValue?: pulumi.Input<string>;
+    /**
+     * Dictionary name
+     */
+    conditionDictionaryName?: pulumi.Input<string>;
+    /**
+     * Dictionary value
+     */
+    conditionDictionaryValue?: pulumi.Input<string>;
+    /**
+     * UUID for condition
+     */
+    conditionId?: pulumi.Input<string>;
+    /**
+     * Indicates whereas this condition is in negate mode
+     */
+    conditionIsNegate?: pulumi.Input<boolean>;
+    /**
+     * Equality operator - Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`,
+     * `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`,
+     * `notEquals`, `notIn`, `notStartsWith`, `startsWith`
+     */
+    conditionOperator?: pulumi.Input<string>;
+    /**
+     * Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that
+     * additional conditions are present under the children attribute. - Choices: `ConditionAndBlock`, `ConditionAttributes`,
+     * `ConditionOrBlock`, `ConditionReference`
+     */
+    conditionType?: pulumi.Input<string>;
+    /**
+     * Indicates if this rule is the default one
+     */
+    default?: pulumi.Input<boolean>;
+    /**
+     * Identity source name from the identity stores
+     */
+    identitySourceName?: pulumi.Input<string>;
+    /**
+     * Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: `REJECT`,
+     * `DROP`, `CONTINUE`
+     */
+    ifAuthFail: pulumi.Input<string>;
+    /**
+     * Action to perform when ISE is uanble to access the identity database - Choices: `REJECT`, `DROP`, `CONTINUE`
+     */
+    ifProcessFail: pulumi.Input<string>;
+    /**
+     * Action to perform when user is not found in any of identity stores - Choices: `REJECT`, `DROP`, `CONTINUE`
+     */
+    ifUserNotFound: pulumi.Input<string>;
+    /**
+     * Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Policy set ID
+     */
+    policySetId: pulumi.Input<string>;
+    /**
+     * The rank (priority) in relation to other rules. Lower rank is higher priority.
+     */
+    rank?: pulumi.Input<number>;
+    /**
+     * The state that the rule is in. A disabled rule cannot be matched. - Choices: `disabled`, `enabled`, `monitor`
+     */
+    state?: pulumi.Input<string>;
+}

package/networkaccessauthentication/rule.js

@@ -0,0 +1,129 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Rule = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * This resource can manage a Network Access Authentication Rule.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as ise from "@pulumi/ise";
+ *
+ * const example = new ise.networkaccessauthentication.Rule("example", {
+ *     policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
+ *     name: "Rule1",
+ *     "default": false,
+ *     rank: 0,
+ *     state: "enabled",
+ *     conditionType: "ConditionAttributes",
+ *     conditionIsNegate: false,
+ *     conditionAttributeName: "Location",
+ *     conditionAttributeValue: "All Locations",
+ *     conditionDictionaryName: "DEVICE",
+ *     conditionOperator: "equals",
+ *     identitySourceName: "Internal Endpoints",
+ *     ifAuthFail: "REJECT",
+ *     ifProcessFail: "DROP",
+ *     ifUserNotFound: "REJECT",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import ise:NetworkAccessAuthentication/rule:Rule example "76d24097-41c4-4558-a4d0-a8c07ac08470,76d24097-41c4-4558-a4d0-a8c07ac08470"
+ * ```
+ */
+class Rule extends pulumi.CustomResource {
+    /**
+     * Get an existing Rule resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Rule(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Rule.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Rule.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["childrens"] = state ? state.childrens : undefined;
+            resourceInputs["conditionAttributeName"] = state ? state.conditionAttributeName : undefined;
+            resourceInputs["conditionAttributeValue"] = state ? state.conditionAttributeValue : undefined;
+            resourceInputs["conditionDictionaryName"] = state ? state.conditionDictionaryName : undefined;
+            resourceInputs["conditionDictionaryValue"] = state ? state.conditionDictionaryValue : undefined;
+            resourceInputs["conditionId"] = state ? state.conditionId : undefined;
+            resourceInputs["conditionIsNegate"] = state ? state.conditionIsNegate : undefined;
+            resourceInputs["conditionOperator"] = state ? state.conditionOperator : undefined;
+            resourceInputs["conditionType"] = state ? state.conditionType : undefined;
+            resourceInputs["default"] = state ? state.default : undefined;
+            resourceInputs["identitySourceName"] = state ? state.identitySourceName : undefined;
+            resourceInputs["ifAuthFail"] = state ? state.ifAuthFail : undefined;
+            resourceInputs["ifProcessFail"] = state ? state.ifProcessFail : undefined;
+            resourceInputs["ifUserNotFound"] = state ? state.ifUserNotFound : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["policySetId"] = state ? state.policySetId : undefined;
+            resourceInputs["rank"] = state ? state.rank : undefined;
+            resourceInputs["state"] = state ? state.state : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.ifAuthFail === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'ifAuthFail'");
+            }
+            if ((!args || args.ifProcessFail === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'ifProcessFail'");
+            }
+            if ((!args || args.ifUserNotFound === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'ifUserNotFound'");
+            }
+            if ((!args || args.policySetId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'policySetId'");
+            }
+            resourceInputs["childrens"] = args ? args.childrens : undefined;
+            resourceInputs["conditionAttributeName"] = args ? args.conditionAttributeName : undefined;
+            resourceInputs["conditionAttributeValue"] = args ? args.conditionAttributeValue : undefined;
+            resourceInputs["conditionDictionaryName"] = args ? args.conditionDictionaryName : undefined;
+            resourceInputs["conditionDictionaryValue"] = args ? args.conditionDictionaryValue : undefined;
+            resourceInputs["conditionId"] = args ? args.conditionId : undefined;
+            resourceInputs["conditionIsNegate"] = args ? args.conditionIsNegate : undefined;
+            resourceInputs["conditionOperator"] = args ? args.conditionOperator : undefined;
+            resourceInputs["conditionType"] = args ? args.conditionType : undefined;
+            resourceInputs["default"] = args ? args.default : undefined;
+            resourceInputs["identitySourceName"] = args ? args.identitySourceName : undefined;
+            resourceInputs["ifAuthFail"] = args ? args.ifAuthFail : undefined;
+            resourceInputs["ifProcessFail"] = args ? args.ifProcessFail : undefined;
+            resourceInputs["ifUserNotFound"] = args ? args.ifUserNotFound : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["policySetId"] = args ? args.policySetId : undefined;
+            resourceInputs["rank"] = args ? args.rank : undefined;
+            resourceInputs["state"] = args ? args.state : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Rule.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Rule = Rule;
+/** @internal */
+Rule.__pulumiType = 'ise:NetworkAccessAuthentication/rule:Rule';
+//# sourceMappingURL=rule.js.map

package/networkaccessauthentication/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../networkaccessauthentication/rule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAwFD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AA5KL,oBA6KC;AA/JG,gBAAgB;AACO,iBAAY,GAAG,2CAA2C,CAAC"}

package/networkaccessauthorization/getRule.d.ts

@@ -0,0 +1,141 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as outputs from "../types/output";
+/**
+ * This data source can read the Network Access Authorization Rule.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as ise from "@pulumi/ise";
+ *
+ * const example = ise.NetworkAccessAuthorization.getRule({
+ *     id: "76d24097-41c4-4558-a4d0-a8c07ac08470",
+ *     policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
+ * });
+ * ```
+ */
+export declare function getRule(args: GetRuleArgs, opts?: pulumi.InvokeOptions): Promise<GetRuleResult>;
+/**
+ * A collection of arguments for invoking getRule.
+ */
+export interface GetRuleArgs {
+    /**
+     * The id of the object
+     */
+    id?: string;
+    /**
+     * Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
+     */
+    name?: string;
+    /**
+     * Policy set ID
+     */
+    policySetId: string;
+}
+/**
+ * A collection of values returned by getRule.
+ */
+export interface GetRuleResult {
+    /**
+     * List of child conditions. `conditionType` must be one of `ConditionAndBlock` or `ConditionOrBlock`.
+     */
+    readonly childrens: outputs.NetworkAccessAuthorization.GetRuleChildren[];
+    /**
+     * Dictionary attribute name
+     */
+    readonly conditionAttributeName: string;
+    /**
+     * Attribute value for condition. Value type is specified in dictionary object.
+     */
+    readonly conditionAttributeValue: string;
+    /**
+     * Dictionary name
+     */
+    readonly conditionDictionaryName: string;
+    /**
+     * Dictionary value
+     */
+    readonly conditionDictionaryValue: string;
+    /**
+     * UUID for condition
+     */
+    readonly conditionId: string;
+    /**
+     * Indicates whereas this condition is in negate mode
+     */
+    readonly conditionIsNegate: boolean;
+    /**
+     * Equality operator
+     */
+    readonly conditionOperator: string;
+    /**
+     * Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
+     */
+    readonly conditionType: string;
+    /**
+     * Indicates if this rule is the default one
+     */
+    readonly default: boolean;
+    /**
+     * The id of the object
+     */
+    readonly id: string;
+    /**
+     * Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
+     */
+    readonly name: string;
+    /**
+     * Policy set ID
+     */
+    readonly policySetId: string;
+    /**
+     * The authorization profile(s)
+     */
+    readonly profiles: string[];
+    /**
+     * The rank (priority) in relation to other rules. Lower rank is higher priority.
+     */
+    readonly rank: number;
+    /**
+     * Security group used in authorization policies
+     */
+    readonly securityGroup: string;
+    /**
+     * The state that the rule is in. A disabled rule cannot be matched.
+     */
+    readonly state: string;
+}
+/**
+ * This data source can read the Network Access Authorization Rule.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as ise from "@pulumi/ise";
+ *
+ * const example = ise.NetworkAccessAuthorization.getRule({
+ *     id: "76d24097-41c4-4558-a4d0-a8c07ac08470",
+ *     policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
+ * });
+ * ```
+ */
+export declare function getRuleOutput(args: GetRuleOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetRuleResult>;
+/**
+ * A collection of arguments for invoking getRule.
+ */
+export interface GetRuleOutputArgs {
+    /**
+     * The id of the object
+     */
+    id?: pulumi.Input<string>;
+    /**
+     * Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Policy set ID
+     */
+    policySetId: pulumi.Input<string>;
+}

package/networkaccessauthorization/getRule.js

@@ -0,0 +1,51 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRuleOutput = exports.getRule = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * This data source can read the Network Access Authorization Rule.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as ise from "@pulumi/ise";
+ *
+ * const example = ise.NetworkAccessAuthorization.getRule({
+ *     id: "76d24097-41c4-4558-a4d0-a8c07ac08470",
+ *     policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
+ * });
+ * ```
+ */
+function getRule(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("ise:NetworkAccessAuthorization/getRule:getRule", {
+        "id": args.id,
+        "name": args.name,
+        "policySetId": args.policySetId,
+    }, opts);
+}
+exports.getRule = getRule;
+/**
+ * This data source can read the Network Access Authorization Rule.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as ise from "@pulumi/ise";
+ *
+ * const example = ise.NetworkAccessAuthorization.getRule({
+ *     id: "76d24097-41c4-4558-a4d0-a8c07ac08470",
+ *     policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
+ * });
+ * ```
+ */
+function getRuleOutput(args, opts) {
+    return pulumi.output(args).apply((a) => getRule(a, opts));
+}
+exports.getRuleOutput = getRuleOutput;
+//# sourceMappingURL=getRule.js.map

package/networkaccessauthorization/getRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getRule.js","sourceRoot":"","sources":["../../networkaccessauthorization/getRule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;GAcG;AACH,SAAgB,OAAO,CAAC,IAAiB,EAAE,IAA2B;IAElE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gDAAgD,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AARD,0BAQC;AA6FD;;;;;;;;;;;;;;GAcG;AACH,SAAgB,aAAa,CAAC,IAAuB,EAAE,IAA2B;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAClE,CAAC;AAFD,sCAEC"}

package/networkaccessauthorization/index.d.ts

@@ -0,0 +1,6 @@
+export { GetRuleArgs, GetRuleResult, GetRuleOutputArgs } from "./getRule";
+export declare const getRule: typeof import("./getRule").getRule;
+export declare const getRuleOutput: typeof import("./getRule").getRuleOutput;
+export { RuleArgs, RuleState } from "./rule";
+export type Rule = import("./rule").Rule;
+export declare const Rule: typeof import("./rule").Rule;

package/networkaccessauthorization/index.js

@@ -0,0 +1,25 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Rule = exports.getRuleOutput = exports.getRule = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+exports.getRule = null;
+exports.getRuleOutput = null;
+utilities.lazyLoad(exports, ["getRule", "getRuleOutput"], () => require("./getRule"));
+exports.Rule = null;
+utilities.lazyLoad(exports, ["Rule"], () => require("./rule"));
+const _module = {
+    version: utilities.getVersion(),
+    construct: (name, type, urn) => {
+        switch (type) {
+            case "ise:NetworkAccessAuthorization/rule:Rule":
+                return new exports.Rule(name, undefined, { urn });
+            default:
+                throw new Error(`unknown resource type ${type}`);
+        }
+    },
+};
+pulumi.runtime.registerResourceModule("ise", "NetworkAccessAuthorization/rule", _module);
+//# sourceMappingURL=index.js.map

package/networkaccessauthorization/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../networkaccessauthorization/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAI7B,QAAA,OAAO,GAAuC,IAAW,CAAC;AAC1D,QAAA,aAAa,GAA6C,IAAW,CAAC;AACnF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,SAAS,EAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;AAIxE,QAAA,IAAI,GAAiC,IAAW,CAAC;AAC9D,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AAG/D,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,0CAA0C;gBAC3C,OAAO,IAAI,YAAI,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAClD;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,iCAAiC,EAAE,OAAO,CAAC,CAAA"}