@pulumi/scm 1.0.0 → 1.0.2

package/sdwanTrafficDistributionProfile.d.ts

@@ -3,6 +3,32 @@ import * as inputs from "./types/input";
 import * as outputs from "./types/output";
 /**
  * SdwanTrafficDistributionProfile resource
+ *
+ * ## Import
+ *
+ * The following command can be used to import a resource not managed by Terraform:
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/sdwanTrafficDistributionProfile:SdwanTrafficDistributionProfile example folder:::id
+ * ```
+ *
+ * or
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/sdwanTrafficDistributionProfile:SdwanTrafficDistributionProfile example :snippet::id
+ * ```
+ *
+ * or
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/sdwanTrafficDistributionProfile:SdwanTrafficDistributionProfile example ::device:id
+ * ```
  */
 export declare class SdwanTrafficDistributionProfile extends pulumi.CustomResource {
     /**
@@ -22,14 +48,16 @@ export declare class SdwanTrafficDistributionProfile extends pulumi.CustomResour
     static isInstance(obj: any): obj is SdwanTrafficDistributionProfile;
     /**
      * The device in which the resource is defined
+     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
      */
     readonly device: pulumi.Output<string | undefined>;
     /**
      * The folder in which the resource is defined
+     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
      */
     readonly folder: pulumi.Output<string | undefined>;
     /**
-     * Link tags
+     * Link-Tags for interfaces identified by defined tags
      */
     readonly linkTags: pulumi.Output<outputs.SdwanTrafficDistributionProfileLinkTag[] | undefined>;
     /**
@@ -38,13 +66,14 @@ export declare class SdwanTrafficDistributionProfile extends pulumi.CustomResour
     readonly name: pulumi.Output<string>;
     /**
      * The snippet in which the resource is defined
+     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
      */
     readonly snippet: pulumi.Output<string | undefined>;
     readonly tfid: pulumi.Output<string>;
     /**
      * Traffic distribution
      */
-    readonly trafficDistribution: pulumi.Output<string | undefined>;
+    readonly trafficDistribution: pulumi.Output<string>;
     /**
      * Create a SdwanTrafficDistributionProfile resource with the given unique name, arguments, and options.
      *
@@ -60,14 +89,16 @@ export declare class SdwanTrafficDistributionProfile extends pulumi.CustomResour
 export interface SdwanTrafficDistributionProfileState {
     /**
      * The device in which the resource is defined
+     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
      */
     device?: pulumi.Input<string>;
     /**
      * The folder in which the resource is defined
+     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
      */
     folder?: pulumi.Input<string>;
     /**
-     * Link tags
+     * Link-Tags for interfaces identified by defined tags
      */
     linkTags?: pulumi.Input<pulumi.Input<inputs.SdwanTrafficDistributionProfileLinkTag>[]>;
     /**
@@ -76,6 +107,7 @@ export interface SdwanTrafficDistributionProfileState {
     name?: pulumi.Input<string>;
     /**
      * The snippet in which the resource is defined
+     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
      */
     snippet?: pulumi.Input<string>;
     tfid?: pulumi.Input<string>;
@@ -90,14 +122,16 @@ export interface SdwanTrafficDistributionProfileState {
 export interface SdwanTrafficDistributionProfileArgs {
     /**
      * The device in which the resource is defined
+     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
      */
     device?: pulumi.Input<string>;
     /**
      * The folder in which the resource is defined
+     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
      */
     folder?: pulumi.Input<string>;
     /**
-     * Link tags
+     * Link-Tags for interfaces identified by defined tags
      */
     linkTags?: pulumi.Input<pulumi.Input<inputs.SdwanTrafficDistributionProfileLinkTag>[]>;
     /**
@@ -106,6 +140,7 @@ export interface SdwanTrafficDistributionProfileArgs {
     name?: pulumi.Input<string>;
     /**
      * The snippet in which the resource is defined
+     * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
      */
     snippet?: pulumi.Input<string>;
     /**

package/sdwanTrafficDistributionProfile.js

@@ -7,6 +7,32 @@ const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
  * SdwanTrafficDistributionProfile resource
+ *
+ * ## Import
+ *
+ * The following command can be used to import a resource not managed by Terraform:
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/sdwanTrafficDistributionProfile:SdwanTrafficDistributionProfile example folder:::id
+ * ```
+ *
+ * or
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/sdwanTrafficDistributionProfile:SdwanTrafficDistributionProfile example :snippet::id
+ * ```
+ *
+ * or
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/sdwanTrafficDistributionProfile:SdwanTrafficDistributionProfile example ::device:id
+ * ```
  */
 class SdwanTrafficDistributionProfile extends pulumi.CustomResource {
     /**

package/sdwanTrafficDistributionProfile.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdwanTrafficDistributionProfile.js","sourceRoot":"","sources":["../sdwanTrafficDistributionProfile.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;GAEG;AACH,MAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4C,EAAE,IAAmC;QAC1I,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,+BAA+B,CAAC,YAAY,CAAC;IAChF,CAAC;IAoCD,YAAY,IAAY,EAAE,WAAwF,EAAE,IAAmC;QACnJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+D,CAAC;YAC9E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;SACtE;aAAM;YACH,MAAM,IAAI,GAAG,WAA8D,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,+BAA+B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;;AAtFL,0EAuFC;AAzEG,gBAAgB;AACO,4CAAY,GAAG,2EAA2E,CAAC"}
+{"version":3,"file":"sdwanTrafficDistributionProfile.js","sourceRoot":"","sources":["../sdwanTrafficDistributionProfile.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4C,EAAE,IAAmC;QAC1I,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,+BAA+B,CAAC,YAAY,CAAC;IAChF,CAAC;IAuCD,YAAY,IAAY,EAAE,WAAwF,EAAE,IAAmC;QACnJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+D,CAAC;YAC9E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;SACtE;aAAM;YACH,MAAM,IAAI,GAAG,WAA8D,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,+BAA+B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;;AAzFL,0EA0FC;AA5EG,gBAAgB;AACO,4CAAY,GAAG,2EAA2E,CAAC"}

package/securityRule.d.ts

@@ -5,6 +5,189 @@ import * as outputs from "./types/output";
  * SecurityRule resource
  *
  * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as scm from "@pulumi/scm";
+ *
+ * // First, create the tag objects that you will reference.
+ * const outboundTag = new scm.Tag("outbound_tag", {
+ *     folder: "All",
+ *     name: "outbound143",
+ *     color: "Red",
+ * });
+ * const webTag = new scm.Tag("web_tag", {
+ *     folder: "All",
+ *     name: "web143",
+ *     color: "Blue",
+ * });
+ * // --- Existing Rules (Backward Compatibility) ---
+ * const standardWebAccess = new scm.SecurityRule("standard_web_access", {
+ *     folder: "All",
+ *     name: "Allow Standard Web Access143",
+ *     description: "Allow outbound web traffic to any destination...",
+ *     position: "pre",
+ *     action: "allow",
+ *     categories: ["any"],
+ *     applications: [
+ *         "web-browsing",
+ *         "ssl",
+ *     ],
+ *     services: [
+ *         "service-http",
+ *         "service-https",
+ *     ],
+ *     froms: [
+ *         "untrust",
+ *         "trust",
+ *     ],
+ *     tos: ["trust"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     negateSource: false,
+ *     negateDestination: false,
+ *     sourceUsers: ["any"],
+ *     sourceHips: ["any"],
+ *     destinationHips: ["any"],
+ *     logStart: true,
+ *     logEnd: true,
+ *     disabled: false,
+ *     tags: [
+ *         outboundTag.name,
+ *         webTag.name,
+ *     ],
+ * });
+ * const blockRiskySaas = new scm.SecurityRule("block_risky_saas", {
+ *     folder: "All",
+ *     name: "Block Risky SaaS Applications143",
+ *     description: "Prevent data exfiltration by blocking risky SaaS apps...",
+ *     action: "deny",
+ *     policyType: "Internet",
+ *     securitySettings: {
+ *         antiSpyware: "yes",
+ *         vulnerability: "yes",
+ *         virusAndWildfireAnalysis: "yes",
+ *     },
+ *     blockWebApplications: ["facebook-posting"],
+ *     logSettings: {
+ *         logSessions: true,
+ *     },
+ *     froms: ["any"],
+ *     tos: ["any"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     disabled: false,
+ *     tags: [
+ *         outboundTag.name,
+ *         webTag.name,
+ *     ],
+ * });
+ * // --- NEW Examples Demonstrating Rule Ordering ---
+ * // Example 1: Place a critical block rule at the absolute top
+ * const criticalBlockTop = new scm.SecurityRule("critical_block_top", {
+ *     folder: "All",
+ *     name: "CRITICAL Block Malicious IPs Top143",
+ *     description: "Always block known malicious IPs first.",
+ *     relativePosition: "top",
+ *     action: "deny",
+ *     froms: ["any"],
+ *     tos: ["any"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     categories: ["any"],
+ *     applications: ["any"],
+ *     services: ["any"],
+ *     logEnd: true,
+ *     tags: [outboundTag.name],
+ * });
+ * // Example 2: Place a cleanup rule at the absolute bottom
+ * const cleanupDenyBottom = new scm.SecurityRule("cleanup_deny_bottom", {
+ *     folder: "All",
+ *     name: "Cleanup Deny All Bottom143",
+ *     description: "Deny any traffic not explicitly allowed.",
+ *     relativePosition: "bottom",
+ *     action: "deny",
+ *     froms: ["any"],
+ *     tos: ["any"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     categories: ["any"],
+ *     applications: ["any"],
+ *     services: ["any"],
+ *     logEnd: true,
+ *     tags: [outboundTag.name],
+ * });
+ * // Example 3: Place a rule *before* the standard web access rule
+ * const allowUpdatesBeforeWeb = new scm.SecurityRule("allow_updates_before_web", {
+ *     folder: "All",
+ *     name: "Allow OS Updates Before Web143",
+ *     description: "Allow specific OS update traffic before general web access.",
+ *     relativePosition: "before",
+ *     targetRule: standardWebAccess.id,
+ *     action: "allow",
+ *     froms: ["trust"],
+ *     tos: ["untrust"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     categories: ["any"],
+ *     applications: [
+ *         "ms-update",
+ *         "apple-update",
+ *     ],
+ *     services: ["service-https"],
+ *     logEnd: true,
+ *     tags: [outboundTag.name],
+ * });
+ * // Example 4: Place a rule *after* the standard web access rule
+ * const allowCorpAppsAfterWeb = new scm.SecurityRule("allow_corp_apps_after_web", {
+ *     folder: "All",
+ *     name: "Allow Corp Apps After Web143",
+ *     description: "Allow access to specific corporate apps after general web access.",
+ *     relativePosition: "after",
+ *     targetRule: standardWebAccess.id,
+ *     action: "allow",
+ *     froms: ["trust"],
+ *     tos: ["untrust"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     categories: ["any"],
+ *     applications: ["ms-update"],
+ *     services: ["service-https"],
+ *     logEnd: true,
+ *     tags: [webTag.name],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * The following command can be used to import a resource not managed by Terraform:
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/securityRule:SecurityRule example folder:::id
+ * ```
+ *
+ * or
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/securityRule:SecurityRule example :snippet::id
+ * ```
+ *
+ * or
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/securityRule:SecurityRule example ::device:id
+ * ```
  */
 export declare class SecurityRule extends pulumi.CustomResource {
     /**
@@ -130,6 +313,10 @@ export declare class SecurityRule extends pulumi.CustomResource {
      * The security profile object
      */
     readonly profileSetting: pulumi.Output<outputs.SecurityRuleProfileSetting>;
+    /**
+     * Relative positioning rule. String must be one of these: `"before"`, `"after"`, `"top"`, `"bottom"`. If not specified, rule is created at the bottom of the ruleset.
+     */
+    readonly relativePosition: pulumi.Output<string | undefined>;
     /**
      * Schedule in which this rule will be applied
      */
@@ -162,6 +349,10 @@ export declare class SecurityRule extends pulumi.CustomResource {
      * The tags associated with the security rule
      */
     readonly tags: pulumi.Output<string[] | undefined>;
+    /**
+     * The name or UUID of the rule to position this rule relative to. Required when `relativePosition` is `"before"` or `"after"`.
+     */
+    readonly targetRule: pulumi.Output<string | undefined>;
     /**
      * Tenant restrictions
      */
@@ -292,6 +483,10 @@ export interface SecurityRuleState {
      * The security profile object
      */
     profileSetting?: pulumi.Input<inputs.SecurityRuleProfileSetting>;
+    /**
+     * Relative positioning rule. String must be one of these: `"before"`, `"after"`, `"top"`, `"bottom"`. If not specified, rule is created at the bottom of the ruleset.
+     */
+    relativePosition?: pulumi.Input<string>;
     /**
      * Schedule in which this rule will be applied
      */
@@ -324,6 +519,10 @@ export interface SecurityRuleState {
      * The tags associated with the security rule
      */
     tags?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The name or UUID of the rule to position this rule relative to. Required when `relativePosition` is `"before"` or `"after"`.
+     */
+    targetRule?: pulumi.Input<string>;
     /**
      * Tenant restrictions
      */
@@ -446,6 +645,10 @@ export interface SecurityRuleArgs {
      * The security profile object
      */
     profileSetting?: pulumi.Input<inputs.SecurityRuleProfileSetting>;
+    /**
+     * Relative positioning rule. String must be one of these: `"before"`, `"after"`, `"top"`, `"bottom"`. If not specified, rule is created at the bottom of the ruleset.
+     */
+    relativePosition?: pulumi.Input<string>;
     /**
      * Schedule in which this rule will be applied
      */
@@ -478,6 +681,10 @@ export interface SecurityRuleArgs {
      * The tags associated with the security rule
      */
     tags?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The name or UUID of the rule to position this rule relative to. Required when `relativePosition` is `"before"` or `"after"`.
+     */
+    targetRule?: pulumi.Input<string>;
     /**
      * Tenant restrictions
      */

package/securityRule.js

@@ -9,6 +9,189 @@ const utilities = require("./utilities");
  * SecurityRule resource
  *
  * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as scm from "@pulumi/scm";
+ *
+ * // First, create the tag objects that you will reference.
+ * const outboundTag = new scm.Tag("outbound_tag", {
+ *     folder: "All",
+ *     name: "outbound143",
+ *     color: "Red",
+ * });
+ * const webTag = new scm.Tag("web_tag", {
+ *     folder: "All",
+ *     name: "web143",
+ *     color: "Blue",
+ * });
+ * // --- Existing Rules (Backward Compatibility) ---
+ * const standardWebAccess = new scm.SecurityRule("standard_web_access", {
+ *     folder: "All",
+ *     name: "Allow Standard Web Access143",
+ *     description: "Allow outbound web traffic to any destination...",
+ *     position: "pre",
+ *     action: "allow",
+ *     categories: ["any"],
+ *     applications: [
+ *         "web-browsing",
+ *         "ssl",
+ *     ],
+ *     services: [
+ *         "service-http",
+ *         "service-https",
+ *     ],
+ *     froms: [
+ *         "untrust",
+ *         "trust",
+ *     ],
+ *     tos: ["trust"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     negateSource: false,
+ *     negateDestination: false,
+ *     sourceUsers: ["any"],
+ *     sourceHips: ["any"],
+ *     destinationHips: ["any"],
+ *     logStart: true,
+ *     logEnd: true,
+ *     disabled: false,
+ *     tags: [
+ *         outboundTag.name,
+ *         webTag.name,
+ *     ],
+ * });
+ * const blockRiskySaas = new scm.SecurityRule("block_risky_saas", {
+ *     folder: "All",
+ *     name: "Block Risky SaaS Applications143",
+ *     description: "Prevent data exfiltration by blocking risky SaaS apps...",
+ *     action: "deny",
+ *     policyType: "Internet",
+ *     securitySettings: {
+ *         antiSpyware: "yes",
+ *         vulnerability: "yes",
+ *         virusAndWildfireAnalysis: "yes",
+ *     },
+ *     blockWebApplications: ["facebook-posting"],
+ *     logSettings: {
+ *         logSessions: true,
+ *     },
+ *     froms: ["any"],
+ *     tos: ["any"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     disabled: false,
+ *     tags: [
+ *         outboundTag.name,
+ *         webTag.name,
+ *     ],
+ * });
+ * // --- NEW Examples Demonstrating Rule Ordering ---
+ * // Example 1: Place a critical block rule at the absolute top
+ * const criticalBlockTop = new scm.SecurityRule("critical_block_top", {
+ *     folder: "All",
+ *     name: "CRITICAL Block Malicious IPs Top143",
+ *     description: "Always block known malicious IPs first.",
+ *     relativePosition: "top",
+ *     action: "deny",
+ *     froms: ["any"],
+ *     tos: ["any"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     categories: ["any"],
+ *     applications: ["any"],
+ *     services: ["any"],
+ *     logEnd: true,
+ *     tags: [outboundTag.name],
+ * });
+ * // Example 2: Place a cleanup rule at the absolute bottom
+ * const cleanupDenyBottom = new scm.SecurityRule("cleanup_deny_bottom", {
+ *     folder: "All",
+ *     name: "Cleanup Deny All Bottom143",
+ *     description: "Deny any traffic not explicitly allowed.",
+ *     relativePosition: "bottom",
+ *     action: "deny",
+ *     froms: ["any"],
+ *     tos: ["any"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     categories: ["any"],
+ *     applications: ["any"],
+ *     services: ["any"],
+ *     logEnd: true,
+ *     tags: [outboundTag.name],
+ * });
+ * // Example 3: Place a rule *before* the standard web access rule
+ * const allowUpdatesBeforeWeb = new scm.SecurityRule("allow_updates_before_web", {
+ *     folder: "All",
+ *     name: "Allow OS Updates Before Web143",
+ *     description: "Allow specific OS update traffic before general web access.",
+ *     relativePosition: "before",
+ *     targetRule: standardWebAccess.id,
+ *     action: "allow",
+ *     froms: ["trust"],
+ *     tos: ["untrust"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     categories: ["any"],
+ *     applications: [
+ *         "ms-update",
+ *         "apple-update",
+ *     ],
+ *     services: ["service-https"],
+ *     logEnd: true,
+ *     tags: [outboundTag.name],
+ * });
+ * // Example 4: Place a rule *after* the standard web access rule
+ * const allowCorpAppsAfterWeb = new scm.SecurityRule("allow_corp_apps_after_web", {
+ *     folder: "All",
+ *     name: "Allow Corp Apps After Web143",
+ *     description: "Allow access to specific corporate apps after general web access.",
+ *     relativePosition: "after",
+ *     targetRule: standardWebAccess.id,
+ *     action: "allow",
+ *     froms: ["trust"],
+ *     tos: ["untrust"],
+ *     sources: ["any"],
+ *     destinations: ["any"],
+ *     sourceUsers: ["any"],
+ *     categories: ["any"],
+ *     applications: ["ms-update"],
+ *     services: ["service-https"],
+ *     logEnd: true,
+ *     tags: [webTag.name],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * The following command can be used to import a resource not managed by Terraform:
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/securityRule:SecurityRule example folder:::id
+ * ```
+ *
+ * or
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/securityRule:SecurityRule example :snippet::id
+ * ```
+ *
+ * or
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import scm:index/securityRule:SecurityRule example ::device:id
+ * ```
  */
 class SecurityRule extends pulumi.CustomResource {
     /**
@@ -65,6 +248,7 @@ class SecurityRule extends pulumi.CustomResource {
             resourceInputs["policyType"] = state?.policyType;
             resourceInputs["position"] = state?.position;
             resourceInputs["profileSetting"] = state?.profileSetting;
+            resourceInputs["relativePosition"] = state?.relativePosition;
             resourceInputs["schedule"] = state?.schedule;
             resourceInputs["securitySettings"] = state?.securitySettings;
             resourceInputs["services"] = state?.services;
@@ -73,6 +257,7 @@ class SecurityRule extends pulumi.CustomResource {
             resourceInputs["sourceUsers"] = state?.sourceUsers;
             resourceInputs["sources"] = state?.sources;
             resourceInputs["tags"] = state?.tags;
+            resourceInputs["targetRule"] = state?.targetRule;
             resourceInputs["tenantRestrictions"] = state?.tenantRestrictions;
             resourceInputs["tfid"] = state?.tfid;
             resourceInputs["tos"] = state?.tos;
@@ -106,6 +291,7 @@ class SecurityRule extends pulumi.CustomResource {
             resourceInputs["policyType"] = args?.policyType;
             resourceInputs["position"] = args?.position;
             resourceInputs["profileSetting"] = args?.profileSetting;
+            resourceInputs["relativePosition"] = args?.relativePosition;
             resourceInputs["schedule"] = args?.schedule;
             resourceInputs["securitySettings"] = args?.securitySettings;
             resourceInputs["services"] = args?.services;
@@ -114,6 +300,7 @@ class SecurityRule extends pulumi.CustomResource {
             resourceInputs["sourceUsers"] = args?.sourceUsers;
             resourceInputs["sources"] = args?.sources;
             resourceInputs["tags"] = args?.tags;
+            resourceInputs["targetRule"] = args?.targetRule;
             resourceInputs["tenantRestrictions"] = args?.tenantRestrictions;
             resourceInputs["tos"] = args?.tos;
             resourceInputs["tfid"] = undefined /*out*/;

package/securityRule.js.map

@@ -1 +1 @@
-{"version":3,"file":"securityRule.js","sourceRoot":"","sources":["../securityRule.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;GAIG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAgKD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,EAAE,sBAAsB,CAAC;YACzE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;SACtC;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,EAAE,sBAAsB,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;YAClC,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AAhRL,oCAiRC;AAnQG,gBAAgB;AACO,yBAAY,GAAG,qCAAqC,CAAC"}
+{"version":3,"file":"securityRule.js","sourceRoot":"","sources":["../securityRule.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2LG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAwKD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,EAAE,sBAAsB,CAAC;YACzE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;SACtC;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,EAAE,sBAAsB,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;YAClC,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AA5RL,oCA6RC;AA/QG,gBAAgB;AACO,yBAAY,GAAG,qCAAqC,CAAC"}