@pulumi/scm 1.0.0-alpha.1762562132 → 1.0.0-alpha.1762844275
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/address.d.ts +3 -3
- package/address.js +3 -3
- package/addressGroup.d.ts +2 -2
- package/addressGroup.js +2 -2
- package/{aggregateEthernetInterface.d.ts → aggregateInterface.d.ts} +26 -24
- package/{aggregateEthernetInterface.js → aggregateInterface.js} +13 -11
- package/aggregateInterface.js.map +1 -0
- package/antiSpywareSignature.d.ts +3 -3
- package/appOverrideRule.d.ts +128 -3
- package/appOverrideRule.js +95 -0
- package/appOverrideRule.js.map +1 -1
- package/applicationFilter.d.ts +16 -0
- package/applicationFilter.js +16 -0
- package/applicationFilter.js.map +1 -1
- package/authenticationRule.d.ts +123 -0
- package/authenticationRule.js +103 -0
- package/authenticationRule.js.map +1 -1
- package/bgpRouteMapRedistribution.d.ts +6 -6
- package/certificateProfile.d.ts +29 -0
- package/certificateProfile.js +29 -0
- package/certificateProfile.js.map +1 -1
- package/decryptionProfile.d.ts +139 -0
- package/decryptionProfile.js +139 -0
- package/decryptionProfile.js.map +1 -1
- package/decryptionRule.d.ts +139 -0
- package/decryptionRule.js +119 -0
- package/decryptionRule.js.map +1 -1
- package/dnsProxy.d.ts +6 -6
- package/dnsSecurityProfile.d.ts +2 -0
- package/dnsSecurityProfile.js +2 -0
- package/dnsSecurityProfile.js.map +1 -1
- package/dynamicUserGroup.d.ts +3 -3
- package/dynamicUserGroup.js +3 -3
- package/ethernetInterface.d.ts +13 -11
- package/ethernetInterface.js +2 -0
- package/ethernetInterface.js.map +1 -1
- package/externalDynamicList.d.ts +80 -0
- package/externalDynamicList.js +80 -0
- package/externalDynamicList.js.map +1 -1
- package/folder.d.ts +60 -0
- package/folder.js +60 -0
- package/folder.js.map +1 -1
- package/getAddressGroupList.d.ts +4 -4
- package/getAddressGroupList.js +4 -4
- package/getAddressList.d.ts +4 -4
- package/getAddressList.js +4 -4
- package/getAggregateInterface.d.ts +116 -0
- package/getAggregateInterface.js +68 -0
- package/getAggregateInterface.js.map +1 -0
- package/{getAggregateEthernetInterfaceList.d.ts → getAggregateInterfaceList.d.ts} +35 -9
- package/getAggregateInterfaceList.js +66 -0
- package/getAggregateInterfaceList.js.map +1 -0
- package/getAntiSpywareProfileList.d.ts +2 -2
- package/getAntiSpywareProfileList.js +2 -2
- package/getAntiSpywareSignature.d.ts +1 -1
- package/getAntiSpywareSignatureList.d.ts +2 -2
- package/getAntiSpywareSignatureList.js +2 -2
- package/getAppOverrideRule.d.ts +65 -1
- package/getAppOverrideRule.js +52 -0
- package/getAppOverrideRule.js.map +1 -1
- package/getAppOverrideRuleList.d.ts +48 -2
- package/getAppOverrideRuleList.js +36 -2
- package/getAppOverrideRuleList.js.map +1 -1
- package/getApplicationGroupList.d.ts +4 -4
- package/getApplicationGroupList.js +4 -4
- package/getApplicationList.d.ts +2 -2
- package/getApplicationList.js +2 -2
- package/getAuthenticationRule.d.ts +74 -0
- package/getAuthenticationRule.js +62 -0
- package/getAuthenticationRule.js.map +1 -1
- package/getAuthenticationRuleList.d.ts +50 -2
- package/getAuthenticationRuleList.js +38 -2
- package/getAuthenticationRuleList.js.map +1 -1
- package/getBgpRouteMapRedistribution.d.ts +7 -7
- package/getCertificateProfileList.d.ts +2 -2
- package/getCertificateProfileList.js +2 -2
- package/getDecryptionProfile.d.ts +40 -0
- package/getDecryptionProfile.js +40 -0
- package/getDecryptionProfile.js.map +1 -1
- package/getDecryptionProfileList.d.ts +32 -0
- package/getDecryptionProfileList.js +32 -0
- package/getDecryptionProfileList.js.map +1 -1
- package/getDecryptionRule.d.ts +74 -0
- package/getDecryptionRule.js +62 -0
- package/getDecryptionRule.js.map +1 -1
- package/getDecryptionRuleList.d.ts +48 -2
- package/getDecryptionRuleList.js +36 -2
- package/getDecryptionRuleList.js.map +1 -1
- package/getDnsProxy.d.ts +1 -1
- package/getDnsSecurityProfile.d.ts +40 -0
- package/getDnsSecurityProfile.js +40 -0
- package/getDnsSecurityProfile.js.map +1 -1
- package/getDnsSecurityProfileList.d.ts +32 -0
- package/getDnsSecurityProfileList.js +32 -0
- package/getDnsSecurityProfileList.js.map +1 -1
- package/getDynamicUserGroupList.d.ts +4 -4
- package/getDynamicUserGroupList.js +4 -4
- package/getEthernetInterface.d.ts +40 -2
- package/getEthernetInterface.js +38 -0
- package/getEthernetInterface.js.map +1 -1
- package/getEthernetInterfaceList.d.ts +26 -0
- package/getEthernetInterfaceList.js +26 -0
- package/getEthernetInterfaceList.js.map +1 -1
- package/getExternalDynamicListList.d.ts +4 -4
- package/getExternalDynamicListList.js +4 -4
- package/getFolder.d.ts +36 -0
- package/getFolder.js +36 -0
- package/getFolder.js.map +1 -1
- package/getHipObjectList.d.ts +4 -4
- package/getHipObjectList.js +4 -4
- package/getHipProfileList.d.ts +4 -4
- package/getHipProfileList.js +4 -4
- package/getInterfaceManagementProfile.d.ts +89 -8
- package/getInterfaceManagementProfile.js +80 -0
- package/getInterfaceManagementProfile.js.map +1 -1
- package/getInterfaceManagementProfileList.d.ts +42 -0
- package/getInterfaceManagementProfileList.js +42 -0
- package/getInterfaceManagementProfileList.js.map +1 -1
- package/getLayer2Subinterface.d.ts +42 -2
- package/getLayer2Subinterface.js +40 -0
- package/getLayer2Subinterface.js.map +1 -1
- package/getLayer2SubinterfaceList.d.ts +26 -0
- package/getLayer2SubinterfaceList.js +26 -0
- package/getLayer2SubinterfaceList.js.map +1 -1
- package/getLayer3Subinterface.d.ts +45 -3
- package/getLayer3Subinterface.js +42 -0
- package/getLayer3Subinterface.js.map +1 -1
- package/getLayer3SubinterfaceList.d.ts +26 -0
- package/getLayer3SubinterfaceList.js +26 -0
- package/getLayer3SubinterfaceList.js.map +1 -1
- package/getLogicalRouter.d.ts +38 -0
- package/getLogicalRouter.js +38 -0
- package/getLogicalRouter.js.map +1 -1
- package/getLogicalRouterList.d.ts +40 -0
- package/getLogicalRouterList.js +30 -0
- package/getLogicalRouterList.js.map +1 -1
- package/getLoopbackInterface.d.ts +49 -7
- package/getLoopbackInterface.js +38 -0
- package/getLoopbackInterface.js.map +1 -1
- package/getLoopbackInterfaceList.d.ts +26 -0
- package/getLoopbackInterfaceList.js +26 -0
- package/getLoopbackInterfaceList.js.map +1 -1
- package/getNatRule.d.ts +86 -14
- package/getNatRule.js +76 -0
- package/getNatRule.js.map +1 -1
- package/getNatRuleList.d.ts +52 -2
- package/getNatRuleList.js +40 -2
- package/getNatRuleList.js.map +1 -1
- package/getPbfRule.d.ts +88 -0
- package/getPbfRule.js +88 -0
- package/getPbfRule.js.map +1 -1
- package/getPbfRuleList.d.ts +34 -0
- package/getPbfRuleList.js +34 -0
- package/getPbfRuleList.js.map +1 -1
- package/getQosPolicyRule.d.ts +72 -0
- package/getQosPolicyRule.js +60 -0
- package/getQosPolicyRule.js.map +1 -1
- package/getQosPolicyRuleList.d.ts +48 -2
- package/getQosPolicyRuleList.js +36 -2
- package/getQosPolicyRuleList.js.map +1 -1
- package/getRadiusServerProfile.d.ts +54 -0
- package/getRadiusServerProfile.js +54 -0
- package/getRadiusServerProfile.js.map +1 -1
- package/getSdwanTrafficDistributionProfile.d.ts +1 -1
- package/getSecurityRule.d.ts +106 -0
- package/getSecurityRule.js +94 -0
- package/getSecurityRule.js.map +1 -1
- package/getSecurityRuleList.d.ts +46 -2
- package/getSecurityRuleList.js +34 -2
- package/getSecurityRuleList.js.map +1 -1
- package/getServiceConnection.d.ts +177 -1
- package/getServiceConnection.js +176 -0
- package/getServiceConnection.js.map +1 -1
- package/getServiceConnectionGroup.d.ts +208 -0
- package/getServiceConnectionGroup.js +208 -0
- package/getServiceConnectionGroup.js.map +1 -1
- package/getServiceGroupList.d.ts +2 -2
- package/getServiceGroupList.js +2 -2
- package/getServiceList.d.ts +4 -4
- package/getServiceList.js +4 -4
- package/getSnippet.d.ts +48 -0
- package/getSnippet.js +48 -0
- package/getSnippet.js.map +1 -1
- package/getSnippetList.d.ts +24 -0
- package/getSnippetList.js +24 -0
- package/getSnippetList.js.map +1 -1
- package/getTagList.d.ts +2 -2
- package/getTagList.js +2 -2
- package/getTunnelInterface.d.ts +42 -4
- package/getTunnelInterface.js +38 -0
- package/getTunnelInterface.js.map +1 -1
- package/getTunnelInterfaceList.d.ts +26 -0
- package/getTunnelInterfaceList.js +26 -0
- package/getTunnelInterfaceList.js.map +1 -1
- package/getUrlAccessProfileList.d.ts +2 -2
- package/getUrlAccessProfileList.js +2 -2
- package/getUrlCategoryList.d.ts +4 -4
- package/getUrlCategoryList.js +4 -4
- package/getVlanInterface.d.ts +46 -6
- package/getVlanInterface.js +40 -0
- package/getVlanInterface.js.map +1 -1
- package/getVlanInterfaceList.d.ts +26 -0
- package/getVlanInterfaceList.js +26 -0
- package/getVlanInterfaceList.js.map +1 -1
- package/getVulnerabilityProtectionProfileList.d.ts +2 -2
- package/getVulnerabilityProtectionProfileList.js +2 -2
- package/getVulnerabilityProtectionSignature.d.ts +41 -1
- package/getVulnerabilityProtectionSignature.js +40 -0
- package/getVulnerabilityProtectionSignature.js.map +1 -1
- package/getVulnerabilityProtectionSignatureList.d.ts +32 -0
- package/getVulnerabilityProtectionSignatureList.js +32 -0
- package/getVulnerabilityProtectionSignatureList.js.map +1 -1
- package/getZone.d.ts +44 -0
- package/getZone.js +44 -0
- package/getZone.js.map +1 -1
- package/getZoneList.d.ts +26 -0
- package/getZoneList.js +26 -0
- package/getZoneList.js.map +1 -1
- package/ikeGateway.d.ts +49 -0
- package/ikeGateway.js +49 -0
- package/ikeGateway.js.map +1 -1
- package/index.d.ts +9 -9
- package/index.js +12 -12
- package/index.js.map +1 -1
- package/interfaceManagementProfile.d.ts +56 -24
- package/interfaceManagementProfile.js +30 -0
- package/interfaceManagementProfile.js.map +1 -1
- package/ipsecCryptoProfile.d.ts +28 -0
- package/ipsecCryptoProfile.js +28 -0
- package/ipsecCryptoProfile.js.map +1 -1
- package/ipsecTunnel.d.ts +66 -0
- package/ipsecTunnel.js +66 -0
- package/ipsecTunnel.js.map +1 -1
- package/layer2Subinterface.d.ts +36 -7
- package/layer2Subinterface.js +32 -0
- package/layer2Subinterface.js.map +1 -1
- package/layer3Subinterface.d.ts +70 -11
- package/layer3Subinterface.js +59 -0
- package/layer3Subinterface.js.map +1 -1
- package/logicalRouter.d.ts +2 -0
- package/logicalRouter.js +2 -0
- package/logicalRouter.js.map +1 -1
- package/loopbackInterface.d.ts +58 -15
- package/loopbackInterface.js +35 -2
- package/loopbackInterface.js.map +1 -1
- package/natRule.d.ts +135 -42
- package/natRule.js +121 -8
- package/natRule.js.map +1 -1
- package/package.json +2 -2
- package/pbfRule.d.ts +89 -0
- package/pbfRule.js +89 -0
- package/pbfRule.js.map +1 -1
- package/qosPolicyRule.d.ts +95 -0
- package/qosPolicyRule.js +75 -0
- package/qosPolicyRule.js.map +1 -1
- package/radiusServerProfile.d.ts +38 -0
- package/radiusServerProfile.js +38 -0
- package/radiusServerProfile.js.map +1 -1
- package/remoteNetwork.d.ts +81 -0
- package/remoteNetwork.js +81 -0
- package/remoteNetwork.js.map +1 -1
- package/sdwanTrafficDistributionProfile.d.ts +4 -4
- package/securityRule.d.ts +181 -0
- package/securityRule.js +161 -0
- package/securityRule.js.map +1 -1
- package/serviceConnection.d.ts +82 -3
- package/serviceConnection.js +81 -2
- package/serviceConnection.js.map +1 -1
- package/serviceConnectionGroup.d.ts +100 -0
- package/serviceConnectionGroup.js +100 -0
- package/serviceConnectionGroup.js.map +1 -1
- package/serviceGroup.d.ts +2 -2
- package/serviceGroup.js +2 -2
- package/snippet.d.ts +23 -0
- package/snippet.js +23 -0
- package/snippet.js.map +1 -1
- package/tag.d.ts +3 -3
- package/tag.js +3 -3
- package/tunnelInterface.d.ts +42 -12
- package/tunnelInterface.js +32 -2
- package/tunnelInterface.js.map +1 -1
- package/types/input.d.ts +607 -335
- package/types/output.d.ts +1945 -1069
- package/vlanInterface.d.ts +40 -20
- package/vlanInterface.js +20 -0
- package/vlanInterface.js.map +1 -1
- package/vulnerabilityProtectionSignature.d.ts +12 -10
- package/vulnerabilityProtectionSignature.js +14 -0
- package/vulnerabilityProtectionSignature.js.map +1 -1
- package/zone.d.ts +71 -0
- package/zone.js +71 -0
- package/zone.js.map +1 -1
- package/aggregateEthernetInterface.js.map +0 -1
- package/getAggregateEthernetInterface.d.ts +0 -78
- package/getAggregateEthernetInterface.js +0 -30
- package/getAggregateEthernetInterface.js.map +0 -1
- package/getAggregateEthernetInterfaceList.js +0 -40
- package/getAggregateEthernetInterfaceList.js.map +0 -1
package/applicationFilter.js
CHANGED
|
@@ -9,6 +9,22 @@ const utilities = require("./utilities");
|
|
|
9
9
|
* ApplicationFilter resource
|
|
10
10
|
*
|
|
11
11
|
* ## Example Usage
|
|
12
|
+
*
|
|
13
|
+
* ```typescript
|
|
14
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
15
|
+
* import * as scm from "@pulumi/scm";
|
|
16
|
+
*
|
|
17
|
+
* const scmApplicationFilter1 = new scm.ApplicationFilter("scm_application_filter_1", {
|
|
18
|
+
* folder: "Shared",
|
|
19
|
+
* name: "scm_application_filter_1",
|
|
20
|
+
* categories: ["business-systems"],
|
|
21
|
+
* risks: [1],
|
|
22
|
+
* evasive: true,
|
|
23
|
+
* tagging: {
|
|
24
|
+
* noTag: true,
|
|
25
|
+
* },
|
|
26
|
+
* });
|
|
27
|
+
* ```
|
|
12
28
|
*/
|
|
13
29
|
class ApplicationFilter extends pulumi.CustomResource {
|
|
14
30
|
/**
|
package/applicationFilter.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"applicationFilter.js","sourceRoot":"","sources":["../applicationFilter.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"applicationFilter.js","sourceRoot":"","sources":["../applicationFilter.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;IAoGD,YAAY,IAAY,EAAE,WAA4D,EAAE,IAAmC;QACvH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAiD,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;SAC1D;aAAM;YACH,MAAM,IAAI,GAAG,WAAgD,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;;AAtLL,8CAuLC;AAzKG,gBAAgB;AACO,8BAAY,GAAG,+CAA+C,CAAC"}
|
package/authenticationRule.d.ts
CHANGED
|
@@ -1,6 +1,105 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
3
|
* AuthenticationRule resource
|
|
4
|
+
*
|
|
5
|
+
* ## Example Usage
|
|
6
|
+
*
|
|
7
|
+
* ```typescript
|
|
8
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
9
|
+
* import * as scm from "@pulumi/scm";
|
|
10
|
+
*
|
|
11
|
+
* const appAccessTag = new scm.Tag("app_access_tag", {
|
|
12
|
+
* folder: "All",
|
|
13
|
+
* name: "app-access-test_25",
|
|
14
|
+
* color: "Blue",
|
|
15
|
+
* });
|
|
16
|
+
* // -----------------------------------------------------------------------------
|
|
17
|
+
* // 2. ANCHOR RULE (Used for relative positioning by other rules)
|
|
18
|
+
* // -----------------------------------------------------------------------------
|
|
19
|
+
* const anchorRule = new scm.AuthenticationRule("anchor_rule", {
|
|
20
|
+
* name: "test_anchor_rule_251",
|
|
21
|
+
* description: "Base rule. Used to test 'before' and 'after' positioning",
|
|
22
|
+
* position: "pre",
|
|
23
|
+
* folder: "All",
|
|
24
|
+
* destinations: ["any"],
|
|
25
|
+
* froms: ["any"],
|
|
26
|
+
* tos: ["any"],
|
|
27
|
+
* sources: ["any"],
|
|
28
|
+
* services: [
|
|
29
|
+
* "service-http",
|
|
30
|
+
* "service-https",
|
|
31
|
+
* ],
|
|
32
|
+
* sourceUsers: ["any"],
|
|
33
|
+
* timeout: 1200,
|
|
34
|
+
* negateSource: false,
|
|
35
|
+
* negateDestination: false,
|
|
36
|
+
* tags: [appAccessTag.name],
|
|
37
|
+
* categories: ["any"],
|
|
38
|
+
* destinationHips: ["any"],
|
|
39
|
+
* logAuthenticationTimeout: false,
|
|
40
|
+
* disabled: false,
|
|
41
|
+
* });
|
|
42
|
+
* // # -----------------------------------------------------------------------------
|
|
43
|
+
* // # 3. ABSOLUTE POSITIONING Examples ("top" and "bottom")
|
|
44
|
+
* // # -----------------------------------------------------------------------------
|
|
45
|
+
* const ruleTopOfList = new scm.AuthenticationRule("rule_top_of_list", {
|
|
46
|
+
* name: "test_top_rule_25",
|
|
47
|
+
* description: "Placed at the very top of the 'pre' rulebase.",
|
|
48
|
+
* folder: "All",
|
|
49
|
+
* position: "pre",
|
|
50
|
+
* relativePosition: "top",
|
|
51
|
+
* destinations: ["any"],
|
|
52
|
+
* froms: ["untrust"],
|
|
53
|
+
* tos: ["trust"],
|
|
54
|
+
* sources: ["any"],
|
|
55
|
+
* services: ["any"],
|
|
56
|
+
* sourceUsers: ["any"],
|
|
57
|
+
* });
|
|
58
|
+
* const ruleBottomOfList = new scm.AuthenticationRule("rule_bottom_of_list", {
|
|
59
|
+
* name: "test_bottom_rule_25",
|
|
60
|
+
* description: "Placed at the very bottom of the 'pre' rulebase.",
|
|
61
|
+
* folder: "All",
|
|
62
|
+
* position: "pre",
|
|
63
|
+
* relativePosition: "bottom",
|
|
64
|
+
* destinations: ["any"],
|
|
65
|
+
* froms: ["any"],
|
|
66
|
+
* tos: ["any"],
|
|
67
|
+
* sources: ["any"],
|
|
68
|
+
* services: ["any"],
|
|
69
|
+
* sourceUsers: ["any"],
|
|
70
|
+
* });
|
|
71
|
+
* // -----------------------------------------------------------------------------
|
|
72
|
+
* // 4. RELATIVE POSITIONING Examples ("before" and "after")
|
|
73
|
+
* // -----------------------------------------------------------------------------
|
|
74
|
+
* const ruleBeforeAnchor = new scm.AuthenticationRule("rule_before_anchor", {
|
|
75
|
+
* name: "test_before_rule_25_updating",
|
|
76
|
+
* description: "Positioned immediately BEFORE the anchor_rule.",
|
|
77
|
+
* folder: "All",
|
|
78
|
+
* position: "pre",
|
|
79
|
+
* relativePosition: "before",
|
|
80
|
+
* targetRule: anchorRule.id,
|
|
81
|
+
* destinations: ["any"],
|
|
82
|
+
* froms: ["any"],
|
|
83
|
+
* tos: ["any"],
|
|
84
|
+
* sources: ["any"],
|
|
85
|
+
* services: ["any"],
|
|
86
|
+
* sourceUsers: ["any"],
|
|
87
|
+
* });
|
|
88
|
+
* const ruleAfterAnchor = new scm.AuthenticationRule("rule_after_anchor", {
|
|
89
|
+
* name: "test_after_rule_25",
|
|
90
|
+
* description: "Positioned immediately AFTER the anchor_rule.",
|
|
91
|
+
* folder: "All",
|
|
92
|
+
* position: "pre",
|
|
93
|
+
* relativePosition: "after",
|
|
94
|
+
* targetRule: anchorRule.id,
|
|
95
|
+
* destinations: ["any"],
|
|
96
|
+
* froms: ["any"],
|
|
97
|
+
* tos: ["any"],
|
|
98
|
+
* sources: ["any"],
|
|
99
|
+
* services: ["any"],
|
|
100
|
+
* sourceUsers: ["any"],
|
|
101
|
+
* });
|
|
102
|
+
* ```
|
|
4
103
|
*/
|
|
5
104
|
export declare class AuthenticationRule extends pulumi.CustomResource {
|
|
6
105
|
/**
|
|
@@ -86,6 +185,10 @@ export declare class AuthenticationRule extends pulumi.CustomResource {
|
|
|
86
185
|
* The relative position of the rule
|
|
87
186
|
*/
|
|
88
187
|
readonly position: pulumi.Output<string>;
|
|
188
|
+
/**
|
|
189
|
+
* Relative positioning rule. String must be one of these: `"before"`, `"after"`, `"top"`, `"bottom"`. If not specified, rule is created at the bottom of the ruleset.
|
|
190
|
+
*/
|
|
191
|
+
readonly relativePosition: pulumi.Output<string | undefined>;
|
|
89
192
|
/**
|
|
90
193
|
* The destination ports
|
|
91
194
|
*/
|
|
@@ -110,6 +213,10 @@ export declare class AuthenticationRule extends pulumi.CustomResource {
|
|
|
110
213
|
* The authentication rule tags
|
|
111
214
|
*/
|
|
112
215
|
readonly tags: pulumi.Output<string[] | undefined>;
|
|
216
|
+
/**
|
|
217
|
+
* The name or UUID of the rule to position this rule relative to. Required when `relativePosition` is `"before"` or `"after"`.
|
|
218
|
+
*/
|
|
219
|
+
readonly targetRule: pulumi.Output<string | undefined>;
|
|
113
220
|
readonly tfid: pulumi.Output<string>;
|
|
114
221
|
/**
|
|
115
222
|
* The authentication session timeout (seconds)
|
|
@@ -200,6 +307,10 @@ export interface AuthenticationRuleState {
|
|
|
200
307
|
* The relative position of the rule
|
|
201
308
|
*/
|
|
202
309
|
position?: pulumi.Input<string>;
|
|
310
|
+
/**
|
|
311
|
+
* Relative positioning rule. String must be one of these: `"before"`, `"after"`, `"top"`, `"bottom"`. If not specified, rule is created at the bottom of the ruleset.
|
|
312
|
+
*/
|
|
313
|
+
relativePosition?: pulumi.Input<string>;
|
|
203
314
|
/**
|
|
204
315
|
* The destination ports
|
|
205
316
|
*/
|
|
@@ -224,6 +335,10 @@ export interface AuthenticationRuleState {
|
|
|
224
335
|
* The authentication rule tags
|
|
225
336
|
*/
|
|
226
337
|
tags?: pulumi.Input<pulumi.Input<string>[]>;
|
|
338
|
+
/**
|
|
339
|
+
* The name or UUID of the rule to position this rule relative to. Required when `relativePosition` is `"before"` or `"after"`.
|
|
340
|
+
*/
|
|
341
|
+
targetRule?: pulumi.Input<string>;
|
|
227
342
|
tfid?: pulumi.Input<string>;
|
|
228
343
|
/**
|
|
229
344
|
* The authentication session timeout (seconds)
|
|
@@ -306,6 +421,10 @@ export interface AuthenticationRuleArgs {
|
|
|
306
421
|
* The relative position of the rule
|
|
307
422
|
*/
|
|
308
423
|
position?: pulumi.Input<string>;
|
|
424
|
+
/**
|
|
425
|
+
* Relative positioning rule. String must be one of these: `"before"`, `"after"`, `"top"`, `"bottom"`. If not specified, rule is created at the bottom of the ruleset.
|
|
426
|
+
*/
|
|
427
|
+
relativePosition?: pulumi.Input<string>;
|
|
309
428
|
/**
|
|
310
429
|
* The destination ports
|
|
311
430
|
*/
|
|
@@ -330,6 +449,10 @@ export interface AuthenticationRuleArgs {
|
|
|
330
449
|
* The authentication rule tags
|
|
331
450
|
*/
|
|
332
451
|
tags?: pulumi.Input<pulumi.Input<string>[]>;
|
|
452
|
+
/**
|
|
453
|
+
* The name or UUID of the rule to position this rule relative to. Required when `relativePosition` is `"before"` or `"after"`.
|
|
454
|
+
*/
|
|
455
|
+
targetRule?: pulumi.Input<string>;
|
|
333
456
|
/**
|
|
334
457
|
* The authentication session timeout (seconds)
|
|
335
458
|
*/
|
package/authenticationRule.js
CHANGED
|
@@ -7,6 +7,105 @@ const pulumi = require("@pulumi/pulumi");
|
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
9
|
* AuthenticationRule resource
|
|
10
|
+
*
|
|
11
|
+
* ## Example Usage
|
|
12
|
+
*
|
|
13
|
+
* ```typescript
|
|
14
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
15
|
+
* import * as scm from "@pulumi/scm";
|
|
16
|
+
*
|
|
17
|
+
* const appAccessTag = new scm.Tag("app_access_tag", {
|
|
18
|
+
* folder: "All",
|
|
19
|
+
* name: "app-access-test_25",
|
|
20
|
+
* color: "Blue",
|
|
21
|
+
* });
|
|
22
|
+
* // -----------------------------------------------------------------------------
|
|
23
|
+
* // 2. ANCHOR RULE (Used for relative positioning by other rules)
|
|
24
|
+
* // -----------------------------------------------------------------------------
|
|
25
|
+
* const anchorRule = new scm.AuthenticationRule("anchor_rule", {
|
|
26
|
+
* name: "test_anchor_rule_251",
|
|
27
|
+
* description: "Base rule. Used to test 'before' and 'after' positioning",
|
|
28
|
+
* position: "pre",
|
|
29
|
+
* folder: "All",
|
|
30
|
+
* destinations: ["any"],
|
|
31
|
+
* froms: ["any"],
|
|
32
|
+
* tos: ["any"],
|
|
33
|
+
* sources: ["any"],
|
|
34
|
+
* services: [
|
|
35
|
+
* "service-http",
|
|
36
|
+
* "service-https",
|
|
37
|
+
* ],
|
|
38
|
+
* sourceUsers: ["any"],
|
|
39
|
+
* timeout: 1200,
|
|
40
|
+
* negateSource: false,
|
|
41
|
+
* negateDestination: false,
|
|
42
|
+
* tags: [appAccessTag.name],
|
|
43
|
+
* categories: ["any"],
|
|
44
|
+
* destinationHips: ["any"],
|
|
45
|
+
* logAuthenticationTimeout: false,
|
|
46
|
+
* disabled: false,
|
|
47
|
+
* });
|
|
48
|
+
* // # -----------------------------------------------------------------------------
|
|
49
|
+
* // # 3. ABSOLUTE POSITIONING Examples ("top" and "bottom")
|
|
50
|
+
* // # -----------------------------------------------------------------------------
|
|
51
|
+
* const ruleTopOfList = new scm.AuthenticationRule("rule_top_of_list", {
|
|
52
|
+
* name: "test_top_rule_25",
|
|
53
|
+
* description: "Placed at the very top of the 'pre' rulebase.",
|
|
54
|
+
* folder: "All",
|
|
55
|
+
* position: "pre",
|
|
56
|
+
* relativePosition: "top",
|
|
57
|
+
* destinations: ["any"],
|
|
58
|
+
* froms: ["untrust"],
|
|
59
|
+
* tos: ["trust"],
|
|
60
|
+
* sources: ["any"],
|
|
61
|
+
* services: ["any"],
|
|
62
|
+
* sourceUsers: ["any"],
|
|
63
|
+
* });
|
|
64
|
+
* const ruleBottomOfList = new scm.AuthenticationRule("rule_bottom_of_list", {
|
|
65
|
+
* name: "test_bottom_rule_25",
|
|
66
|
+
* description: "Placed at the very bottom of the 'pre' rulebase.",
|
|
67
|
+
* folder: "All",
|
|
68
|
+
* position: "pre",
|
|
69
|
+
* relativePosition: "bottom",
|
|
70
|
+
* destinations: ["any"],
|
|
71
|
+
* froms: ["any"],
|
|
72
|
+
* tos: ["any"],
|
|
73
|
+
* sources: ["any"],
|
|
74
|
+
* services: ["any"],
|
|
75
|
+
* sourceUsers: ["any"],
|
|
76
|
+
* });
|
|
77
|
+
* // -----------------------------------------------------------------------------
|
|
78
|
+
* // 4. RELATIVE POSITIONING Examples ("before" and "after")
|
|
79
|
+
* // -----------------------------------------------------------------------------
|
|
80
|
+
* const ruleBeforeAnchor = new scm.AuthenticationRule("rule_before_anchor", {
|
|
81
|
+
* name: "test_before_rule_25_updating",
|
|
82
|
+
* description: "Positioned immediately BEFORE the anchor_rule.",
|
|
83
|
+
* folder: "All",
|
|
84
|
+
* position: "pre",
|
|
85
|
+
* relativePosition: "before",
|
|
86
|
+
* targetRule: anchorRule.id,
|
|
87
|
+
* destinations: ["any"],
|
|
88
|
+
* froms: ["any"],
|
|
89
|
+
* tos: ["any"],
|
|
90
|
+
* sources: ["any"],
|
|
91
|
+
* services: ["any"],
|
|
92
|
+
* sourceUsers: ["any"],
|
|
93
|
+
* });
|
|
94
|
+
* const ruleAfterAnchor = new scm.AuthenticationRule("rule_after_anchor", {
|
|
95
|
+
* name: "test_after_rule_25",
|
|
96
|
+
* description: "Positioned immediately AFTER the anchor_rule.",
|
|
97
|
+
* folder: "All",
|
|
98
|
+
* position: "pre",
|
|
99
|
+
* relativePosition: "after",
|
|
100
|
+
* targetRule: anchorRule.id,
|
|
101
|
+
* destinations: ["any"],
|
|
102
|
+
* froms: ["any"],
|
|
103
|
+
* tos: ["any"],
|
|
104
|
+
* sources: ["any"],
|
|
105
|
+
* services: ["any"],
|
|
106
|
+
* sourceUsers: ["any"],
|
|
107
|
+
* });
|
|
108
|
+
* ```
|
|
10
109
|
*/
|
|
11
110
|
class AuthenticationRule extends pulumi.CustomResource {
|
|
12
111
|
/**
|
|
@@ -53,12 +152,14 @@ class AuthenticationRule extends pulumi.CustomResource {
|
|
|
53
152
|
resourceInputs["negateDestination"] = state?.negateDestination;
|
|
54
153
|
resourceInputs["negateSource"] = state?.negateSource;
|
|
55
154
|
resourceInputs["position"] = state?.position;
|
|
155
|
+
resourceInputs["relativePosition"] = state?.relativePosition;
|
|
56
156
|
resourceInputs["services"] = state?.services;
|
|
57
157
|
resourceInputs["snippet"] = state?.snippet;
|
|
58
158
|
resourceInputs["sourceHips"] = state?.sourceHips;
|
|
59
159
|
resourceInputs["sourceUsers"] = state?.sourceUsers;
|
|
60
160
|
resourceInputs["sources"] = state?.sources;
|
|
61
161
|
resourceInputs["tags"] = state?.tags;
|
|
162
|
+
resourceInputs["targetRule"] = state?.targetRule;
|
|
62
163
|
resourceInputs["tfid"] = state?.tfid;
|
|
63
164
|
resourceInputs["timeout"] = state?.timeout;
|
|
64
165
|
resourceInputs["tos"] = state?.tos;
|
|
@@ -97,12 +198,14 @@ class AuthenticationRule extends pulumi.CustomResource {
|
|
|
97
198
|
resourceInputs["negateDestination"] = args?.negateDestination;
|
|
98
199
|
resourceInputs["negateSource"] = args?.negateSource;
|
|
99
200
|
resourceInputs["position"] = args?.position;
|
|
201
|
+
resourceInputs["relativePosition"] = args?.relativePosition;
|
|
100
202
|
resourceInputs["services"] = args?.services;
|
|
101
203
|
resourceInputs["snippet"] = args?.snippet;
|
|
102
204
|
resourceInputs["sourceHips"] = args?.sourceHips;
|
|
103
205
|
resourceInputs["sourceUsers"] = args?.sourceUsers;
|
|
104
206
|
resourceInputs["sources"] = args?.sources;
|
|
105
207
|
resourceInputs["tags"] = args?.tags;
|
|
208
|
+
resourceInputs["targetRule"] = args?.targetRule;
|
|
106
209
|
resourceInputs["timeout"] = args?.timeout;
|
|
107
210
|
resourceInputs["tos"] = args?.tos;
|
|
108
211
|
resourceInputs["tfid"] = undefined /*out*/;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authenticationRule.js","sourceRoot":"","sources":["../authenticationRule.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"authenticationRule.js","sourceRoot":"","sources":["../authenticationRule.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqGG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;IAwHD,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;SACtC;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;aACtD;YACD,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;YAClC,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;;AAnOL,gDAoOC;AAtNG,gBAAgB;AACO,+BAAY,GAAG,iDAAiD,CAAC"}
|
|
@@ -29,7 +29,7 @@ export declare class BgpRouteMapRedistribution extends pulumi.CustomResource {
|
|
|
29
29
|
*/
|
|
30
30
|
readonly connectedStatic: pulumi.Output<outputs.BgpRouteMapRedistributionConnectedStatic | undefined>;
|
|
31
31
|
/**
|
|
32
|
-
* Description
|
|
32
|
+
* BGP Route Map Redistributions Description
|
|
33
33
|
*/
|
|
34
34
|
readonly description: pulumi.Output<string | undefined>;
|
|
35
35
|
/**
|
|
@@ -41,7 +41,7 @@ export declare class BgpRouteMapRedistribution extends pulumi.CustomResource {
|
|
|
41
41
|
*/
|
|
42
42
|
readonly folder: pulumi.Output<string | undefined>;
|
|
43
43
|
/**
|
|
44
|
-
* Name
|
|
44
|
+
* BGP Route Map Redistributions Name
|
|
45
45
|
*/
|
|
46
46
|
readonly name: pulumi.Output<string>;
|
|
47
47
|
/**
|
|
@@ -75,7 +75,7 @@ export interface BgpRouteMapRedistributionState {
|
|
|
75
75
|
*/
|
|
76
76
|
connectedStatic?: pulumi.Input<inputs.BgpRouteMapRedistributionConnectedStatic>;
|
|
77
77
|
/**
|
|
78
|
-
* Description
|
|
78
|
+
* BGP Route Map Redistributions Description
|
|
79
79
|
*/
|
|
80
80
|
description?: pulumi.Input<string>;
|
|
81
81
|
/**
|
|
@@ -87,7 +87,7 @@ export interface BgpRouteMapRedistributionState {
|
|
|
87
87
|
*/
|
|
88
88
|
folder?: pulumi.Input<string>;
|
|
89
89
|
/**
|
|
90
|
-
* Name
|
|
90
|
+
* BGP Route Map Redistributions Name
|
|
91
91
|
*/
|
|
92
92
|
name?: pulumi.Input<string>;
|
|
93
93
|
/**
|
|
@@ -113,7 +113,7 @@ export interface BgpRouteMapRedistributionArgs {
|
|
|
113
113
|
*/
|
|
114
114
|
connectedStatic?: pulumi.Input<inputs.BgpRouteMapRedistributionConnectedStatic>;
|
|
115
115
|
/**
|
|
116
|
-
* Description
|
|
116
|
+
* BGP Route Map Redistributions Description
|
|
117
117
|
*/
|
|
118
118
|
description?: pulumi.Input<string>;
|
|
119
119
|
/**
|
|
@@ -125,7 +125,7 @@ export interface BgpRouteMapRedistributionArgs {
|
|
|
125
125
|
*/
|
|
126
126
|
folder?: pulumi.Input<string>;
|
|
127
127
|
/**
|
|
128
|
-
* Name
|
|
128
|
+
* BGP Route Map Redistributions Name
|
|
129
129
|
*/
|
|
130
130
|
name?: pulumi.Input<string>;
|
|
131
131
|
/**
|
package/certificateProfile.d.ts
CHANGED
|
@@ -5,6 +5,35 @@ import * as outputs from "./types/output";
|
|
|
5
5
|
* CertificateProfile resource
|
|
6
6
|
*
|
|
7
7
|
* ## Example Usage
|
|
8
|
+
*
|
|
9
|
+
* ```typescript
|
|
10
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
11
|
+
* import * as scm from "@pulumi/scm";
|
|
12
|
+
*
|
|
13
|
+
* const scmCp1 = new scm.CertificateProfile("scm_cp_1", {
|
|
14
|
+
* folder: "Shared",
|
|
15
|
+
* name: "scm_cp_1",
|
|
16
|
+
* domain: "test",
|
|
17
|
+
* useCrl: true,
|
|
18
|
+
* useOcsp: true,
|
|
19
|
+
* blockUnknownCert: true,
|
|
20
|
+
* blockTimeoutCert: true,
|
|
21
|
+
* blockUnauthenticatedCert: true,
|
|
22
|
+
* blockExpiredCert: true,
|
|
23
|
+
* crlReceiveTimeout: "5",
|
|
24
|
+
* ocspReceiveTimeout: "5",
|
|
25
|
+
* certStatusTimeout: "5",
|
|
26
|
+
* caCertificates: [{
|
|
27
|
+
* name: "Forward-Trust-CA",
|
|
28
|
+
* defaultOcspUrl: "http://test.com",
|
|
29
|
+
* ocspVerifyCert: "Forward-Trust-CA-ECDSA",
|
|
30
|
+
* templateName: "something",
|
|
31
|
+
* }],
|
|
32
|
+
* usernameField: {
|
|
33
|
+
* subject: "common-name",
|
|
34
|
+
* },
|
|
35
|
+
* });
|
|
36
|
+
* ```
|
|
8
37
|
*/
|
|
9
38
|
export declare class CertificateProfile extends pulumi.CustomResource {
|
|
10
39
|
/**
|
package/certificateProfile.js
CHANGED
|
@@ -9,6 +9,35 @@ const utilities = require("./utilities");
|
|
|
9
9
|
* CertificateProfile resource
|
|
10
10
|
*
|
|
11
11
|
* ## Example Usage
|
|
12
|
+
*
|
|
13
|
+
* ```typescript
|
|
14
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
15
|
+
* import * as scm from "@pulumi/scm";
|
|
16
|
+
*
|
|
17
|
+
* const scmCp1 = new scm.CertificateProfile("scm_cp_1", {
|
|
18
|
+
* folder: "Shared",
|
|
19
|
+
* name: "scm_cp_1",
|
|
20
|
+
* domain: "test",
|
|
21
|
+
* useCrl: true,
|
|
22
|
+
* useOcsp: true,
|
|
23
|
+
* blockUnknownCert: true,
|
|
24
|
+
* blockTimeoutCert: true,
|
|
25
|
+
* blockUnauthenticatedCert: true,
|
|
26
|
+
* blockExpiredCert: true,
|
|
27
|
+
* crlReceiveTimeout: "5",
|
|
28
|
+
* ocspReceiveTimeout: "5",
|
|
29
|
+
* certStatusTimeout: "5",
|
|
30
|
+
* caCertificates: [{
|
|
31
|
+
* name: "Forward-Trust-CA",
|
|
32
|
+
* defaultOcspUrl: "http://test.com",
|
|
33
|
+
* ocspVerifyCert: "Forward-Trust-CA-ECDSA",
|
|
34
|
+
* templateName: "something",
|
|
35
|
+
* }],
|
|
36
|
+
* usernameField: {
|
|
37
|
+
* subject: "common-name",
|
|
38
|
+
* },
|
|
39
|
+
* });
|
|
40
|
+
* ```
|
|
12
41
|
*/
|
|
13
42
|
class CertificateProfile extends pulumi.CustomResource {
|
|
14
43
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"certificateProfile.js","sourceRoot":"","sources":["../certificateProfile.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"certificateProfile.js","sourceRoot":"","sources":["../certificateProfile.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;IA4ED,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;SAC1D;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;;AArJL,gDAsJC;AAxIG,gBAAgB;AACO,+BAAY,GAAG,iDAAiD,CAAC"}
|
package/decryptionProfile.d.ts
CHANGED
|
@@ -3,6 +3,145 @@ import * as inputs from "./types/input";
|
|
|
3
3
|
import * as outputs from "./types/output";
|
|
4
4
|
/**
|
|
5
5
|
* DecryptionProfile resource
|
|
6
|
+
*
|
|
7
|
+
* ## Example Usage
|
|
8
|
+
*
|
|
9
|
+
* ```typescript
|
|
10
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
11
|
+
* import * as scm from "@pulumi/scm";
|
|
12
|
+
*
|
|
13
|
+
* const scmDecryptionProfileBase = new scm.DecryptionProfile("scm_decryption_profile_base", {
|
|
14
|
+
* folder: "ngfw-shared",
|
|
15
|
+
* name: "dp_base",
|
|
16
|
+
* });
|
|
17
|
+
* const scmDecryptionProfileForwardProxy = new scm.DecryptionProfile("scm_decryption_profile_forward_proxy", {
|
|
18
|
+
* folder: "ngfw-shared",
|
|
19
|
+
* name: "dp_forward_proxy",
|
|
20
|
+
* sslForwardProxy: {
|
|
21
|
+
* autoIncludeAltname: false,
|
|
22
|
+
* blockClientCert: true,
|
|
23
|
+
* blockExpiredCertificate: true,
|
|
24
|
+
* blockTimeoutCert: true,
|
|
25
|
+
* blockTls13DowngradeNoResource: false,
|
|
26
|
+
* blockUnknownCert: false,
|
|
27
|
+
* blockUnsupportedCipher: true,
|
|
28
|
+
* blockUnsupportedVersion: true,
|
|
29
|
+
* blockUntrustedIssuer: true,
|
|
30
|
+
* restrictCertExts: false,
|
|
31
|
+
* stripAlpn: true,
|
|
32
|
+
* },
|
|
33
|
+
* });
|
|
34
|
+
* const scmDecryptionProfileInboundProxy = new scm.DecryptionProfile("scm_decryption_profile_inbound_proxy", {
|
|
35
|
+
* folder: "ngfw-shared",
|
|
36
|
+
* name: "dp_inbound_proxy",
|
|
37
|
+
* sslInboundProxy: {
|
|
38
|
+
* blockIfHsmUnavailable: true,
|
|
39
|
+
* blockIfNoResource: true,
|
|
40
|
+
* blockUnsupportedCipher: false,
|
|
41
|
+
* blockUnsupportedVersion: true,
|
|
42
|
+
* },
|
|
43
|
+
* });
|
|
44
|
+
* const scmDecryptionProfileNoProxy = new scm.DecryptionProfile("scm_decryption_profile_no_proxy", {
|
|
45
|
+
* folder: "ngfw-shared",
|
|
46
|
+
* name: "dp_no_proxy",
|
|
47
|
+
* sslNoProxy: {
|
|
48
|
+
* blockExpiredCertificate: true,
|
|
49
|
+
* blockUntrustedIssuer: false,
|
|
50
|
+
* },
|
|
51
|
+
* });
|
|
52
|
+
* const scmDecryptionProfileProtocolSettings = new scm.DecryptionProfile("scm_decryption_profile_protocol_settings", {
|
|
53
|
+
* folder: "ngfw-shared",
|
|
54
|
+
* name: "dp_protocol_settings",
|
|
55
|
+
* sslProtocolSettings: {
|
|
56
|
+
* authAlgoMd5: true,
|
|
57
|
+
* authAlgoSha1: true,
|
|
58
|
+
* authAlgoSha256: true,
|
|
59
|
+
* authAlgoSha384: false,
|
|
60
|
+
* encAlgo3des: false,
|
|
61
|
+
* encAlgoAes128Cbc: false,
|
|
62
|
+
* encAlgoAes128Gcm: true,
|
|
63
|
+
* encAlgoAes256Cbc: false,
|
|
64
|
+
* encAlgoAes256Gcm: true,
|
|
65
|
+
* encAlgoChacha20Poly1305: false,
|
|
66
|
+
* encAlgoRc4: false,
|
|
67
|
+
* keyxchgAlgoDhe: true,
|
|
68
|
+
* keyxchgAlgoEcdhe: true,
|
|
69
|
+
* keyxchgAlgoRsa: false,
|
|
70
|
+
* maxVersion: "max",
|
|
71
|
+
* minVersion: "tls1-2",
|
|
72
|
+
* },
|
|
73
|
+
* });
|
|
74
|
+
* const mixedDecryptionProfile = new scm.DecryptionProfile("mixed_decryption_profile", {
|
|
75
|
+
* folder: "ngfw-shared",
|
|
76
|
+
* name: "mixed_dp",
|
|
77
|
+
* sslForwardProxy: {
|
|
78
|
+
* autoIncludeAltname: true,
|
|
79
|
+
* blockClientCert: true,
|
|
80
|
+
* blockExpiredCertificate: false,
|
|
81
|
+
* restrictCertExts: false,
|
|
82
|
+
* stripAlpn: true,
|
|
83
|
+
* },
|
|
84
|
+
* sslInboundProxy: {
|
|
85
|
+
* blockIfHsmUnavailable: true,
|
|
86
|
+
* blockIfNoResource: true,
|
|
87
|
+
* blockUnsupportedCipher: true,
|
|
88
|
+
* blockUnsupportedVersion: true,
|
|
89
|
+
* },
|
|
90
|
+
* sslProtocolSettings: {
|
|
91
|
+
* authAlgoMd5: true,
|
|
92
|
+
* authAlgoSha1: true,
|
|
93
|
+
* authAlgoSha256: false,
|
|
94
|
+
* authAlgoSha384: true,
|
|
95
|
+
* encAlgo3des: true,
|
|
96
|
+
* encAlgoRc4: true,
|
|
97
|
+
* keyxchgAlgoDhe: false,
|
|
98
|
+
* keyxchgAlgoEcdhe: false,
|
|
99
|
+
* maxVersion: "tls1-3",
|
|
100
|
+
* minVersion: "tls1-1",
|
|
101
|
+
* },
|
|
102
|
+
* });
|
|
103
|
+
* const fullMixedDecryptionProfile = new scm.DecryptionProfile("full_mixed_decryption_profile", {
|
|
104
|
+
* folder: "ngfw-shared",
|
|
105
|
+
* name: "full_mixed_dp",
|
|
106
|
+
* sslForwardProxy: {
|
|
107
|
+
* autoIncludeAltname: true,
|
|
108
|
+
* blockClientCert: true,
|
|
109
|
+
* blockExpiredCertificate: false,
|
|
110
|
+
* blockTimeoutCert: true,
|
|
111
|
+
* blockUnknownCert: false,
|
|
112
|
+
* blockUnsupportedCipher: true,
|
|
113
|
+
* blockUntrustedIssuer: false,
|
|
114
|
+
* restrictCertExts: false,
|
|
115
|
+
* stripAlpn: true,
|
|
116
|
+
* },
|
|
117
|
+
* sslInboundProxy: {
|
|
118
|
+
* blockIfHsmUnavailable: true,
|
|
119
|
+
* blockIfNoResource: false,
|
|
120
|
+
* blockUnsupportedCipher: true,
|
|
121
|
+
* blockUnsupportedVersion: false,
|
|
122
|
+
* },
|
|
123
|
+
* sslNoProxy: {
|
|
124
|
+
* blockExpiredCertificate: false,
|
|
125
|
+
* blockUntrustedIssuer: true,
|
|
126
|
+
* },
|
|
127
|
+
* sslProtocolSettings: {
|
|
128
|
+
* authAlgoMd5: false,
|
|
129
|
+
* authAlgoSha1: true,
|
|
130
|
+
* authAlgoSha256: false,
|
|
131
|
+
* authAlgoSha384: true,
|
|
132
|
+
* encAlgo3des: false,
|
|
133
|
+
* encAlgoAes128Gcm: true,
|
|
134
|
+
* encAlgoAes256Cbc: false,
|
|
135
|
+
* encAlgoAes256Gcm: true,
|
|
136
|
+
* encAlgoRc4: true,
|
|
137
|
+
* keyxchgAlgoDhe: false,
|
|
138
|
+
* keyxchgAlgoEcdhe: true,
|
|
139
|
+
* keyxchgAlgoRsa: false,
|
|
140
|
+
* maxVersion: "tls1-0",
|
|
141
|
+
* minVersion: "sslv3",
|
|
142
|
+
* },
|
|
143
|
+
* });
|
|
144
|
+
* ```
|
|
6
145
|
*/
|
|
7
146
|
export declare class DecryptionProfile extends pulumi.CustomResource {
|
|
8
147
|
/**
|