@pulumi/sdwan 0.1.0-alpha.1716879684

package/tlsSslDecryptionPolicyDefinition.d.ts

@@ -0,0 +1,283 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * This resource can manage a TLS SSL Decryption Policy Definition .
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
+ * ```
+ */
+export declare class TlsSslDecryptionPolicyDefinition extends pulumi.CustomResource {
+    /**
+     * Get an existing TlsSslDecryptionPolicyDefinition resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: TlsSslDecryptionPolicyDefinitionState, opts?: pulumi.CustomResourceOptions): TlsSslDecryptionPolicyDefinition;
+    /**
+     * Returns true if the given object is an instance of TlsSslDecryptionPolicyDefinition.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is TlsSslDecryptionPolicyDefinition;
+    /**
+     * Certificate Lifetime(in Days)
+     */
+    readonly certificateLifetimeInDays: pulumi.Output<number | undefined>;
+    /**
+     * Certificate revocation status - Choices: `ocsp`, `none`
+     */
+    readonly certificateRevocationStatus: pulumi.Output<string | undefined>;
+    /**
+     * Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
+     */
+    readonly defaultAction: pulumi.Output<string | undefined>;
+    /**
+     * The description of the policy definition.
+     */
+    readonly description: pulumi.Output<string>;
+    /**
+     * EC Key Type - Choices: `P256`, `P384`, `P521`
+     */
+    readonly ecKeyType: pulumi.Output<string | undefined>;
+    /**
+     * Expired certificate action - Choices: `drop`, `decrypt`
+     */
+    readonly expiredCertificate: pulumi.Output<string | undefined>;
+    /**
+     * Failure mode - Choices: `open`, `close`
+     */
+    readonly failureMode: pulumi.Output<string | undefined>;
+    /**
+     * Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
+     */
+    readonly minimalTlsVersion: pulumi.Output<string | undefined>;
+    /**
+     * The policy mode - Choices: `security`, `unified`
+     */
+    readonly mode: pulumi.Output<string | undefined>;
+    /**
+     * The name of the policy definition.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * List of network rules (applies when `mode` set to `security`)
+     */
+    readonly networkRules: pulumi.Output<outputs.TlsSslDecryptionPolicyDefinitionNetworkRule[] | undefined>;
+    /**
+     * RSA key pair modules - Choices: `1024`, `2048`, `4096`
+     */
+    readonly rsaKeyPairModulus: pulumi.Output<string | undefined>;
+    /**
+     * SSL decryption enabled
+     */
+    readonly sslDecryptionEnabled: pulumi.Output<string | undefined>;
+    /**
+     * Unknown revocation status action - Choices: `drop`, `decrypt`
+     */
+    readonly unknownRevocationStatus: pulumi.Output<string | undefined>;
+    /**
+     * Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
+     */
+    readonly unsupportedCipherSuites: pulumi.Output<string | undefined>;
+    /**
+     * Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
+     */
+    readonly unsupportedProtocolVersions: pulumi.Output<string | undefined>;
+    /**
+     * Untrusted certificate action - Choices: `drop`, `decrypt`
+     */
+    readonly untrustedCertificate: pulumi.Output<string | undefined>;
+    /**
+     * List of url rules (applies when `mode` set to `security`)
+     */
+    readonly urlRules: pulumi.Output<outputs.TlsSslDecryptionPolicyDefinitionUrlRule[] | undefined>;
+    /**
+     * Use default CA certificate bundle
+     */
+    readonly useDefaultCaCertBundle: pulumi.Output<boolean | undefined>;
+    /**
+     * The version of the object
+     */
+    readonly version: pulumi.Output<number>;
+    /**
+     * Create a TlsSslDecryptionPolicyDefinition resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: TlsSslDecryptionPolicyDefinitionArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering TlsSslDecryptionPolicyDefinition resources.
+ */
+export interface TlsSslDecryptionPolicyDefinitionState {
+    /**
+     * Certificate Lifetime(in Days)
+     */
+    certificateLifetimeInDays?: pulumi.Input<number>;
+    /**
+     * Certificate revocation status - Choices: `ocsp`, `none`
+     */
+    certificateRevocationStatus?: pulumi.Input<string>;
+    /**
+     * Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
+     */
+    defaultAction?: pulumi.Input<string>;
+    /**
+     * The description of the policy definition.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * EC Key Type - Choices: `P256`, `P384`, `P521`
+     */
+    ecKeyType?: pulumi.Input<string>;
+    /**
+     * Expired certificate action - Choices: `drop`, `decrypt`
+     */
+    expiredCertificate?: pulumi.Input<string>;
+    /**
+     * Failure mode - Choices: `open`, `close`
+     */
+    failureMode?: pulumi.Input<string>;
+    /**
+     * Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
+     */
+    minimalTlsVersion?: pulumi.Input<string>;
+    /**
+     * The policy mode - Choices: `security`, `unified`
+     */
+    mode?: pulumi.Input<string>;
+    /**
+     * The name of the policy definition.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * List of network rules (applies when `mode` set to `security`)
+     */
+    networkRules?: pulumi.Input<pulumi.Input<inputs.TlsSslDecryptionPolicyDefinitionNetworkRule>[]>;
+    /**
+     * RSA key pair modules - Choices: `1024`, `2048`, `4096`
+     */
+    rsaKeyPairModulus?: pulumi.Input<string>;
+    /**
+     * SSL decryption enabled
+     */
+    sslDecryptionEnabled?: pulumi.Input<string>;
+    /**
+     * Unknown revocation status action - Choices: `drop`, `decrypt`
+     */
+    unknownRevocationStatus?: pulumi.Input<string>;
+    /**
+     * Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
+     */
+    unsupportedCipherSuites?: pulumi.Input<string>;
+    /**
+     * Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
+     */
+    unsupportedProtocolVersions?: pulumi.Input<string>;
+    /**
+     * Untrusted certificate action - Choices: `drop`, `decrypt`
+     */
+    untrustedCertificate?: pulumi.Input<string>;
+    /**
+     * List of url rules (applies when `mode` set to `security`)
+     */
+    urlRules?: pulumi.Input<pulumi.Input<inputs.TlsSslDecryptionPolicyDefinitionUrlRule>[]>;
+    /**
+     * Use default CA certificate bundle
+     */
+    useDefaultCaCertBundle?: pulumi.Input<boolean>;
+    /**
+     * The version of the object
+     */
+    version?: pulumi.Input<number>;
+}
+/**
+ * The set of arguments for constructing a TlsSslDecryptionPolicyDefinition resource.
+ */
+export interface TlsSslDecryptionPolicyDefinitionArgs {
+    /**
+     * Certificate Lifetime(in Days)
+     */
+    certificateLifetimeInDays?: pulumi.Input<number>;
+    /**
+     * Certificate revocation status - Choices: `ocsp`, `none`
+     */
+    certificateRevocationStatus?: pulumi.Input<string>;
+    /**
+     * Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
+     */
+    defaultAction?: pulumi.Input<string>;
+    /**
+     * The description of the policy definition.
+     */
+    description: pulumi.Input<string>;
+    /**
+     * EC Key Type - Choices: `P256`, `P384`, `P521`
+     */
+    ecKeyType?: pulumi.Input<string>;
+    /**
+     * Expired certificate action - Choices: `drop`, `decrypt`
+     */
+    expiredCertificate?: pulumi.Input<string>;
+    /**
+     * Failure mode - Choices: `open`, `close`
+     */
+    failureMode?: pulumi.Input<string>;
+    /**
+     * Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
+     */
+    minimalTlsVersion?: pulumi.Input<string>;
+    /**
+     * The policy mode - Choices: `security`, `unified`
+     */
+    mode?: pulumi.Input<string>;
+    /**
+     * The name of the policy definition.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * List of network rules (applies when `mode` set to `security`)
+     */
+    networkRules?: pulumi.Input<pulumi.Input<inputs.TlsSslDecryptionPolicyDefinitionNetworkRule>[]>;
+    /**
+     * RSA key pair modules - Choices: `1024`, `2048`, `4096`
+     */
+    rsaKeyPairModulus?: pulumi.Input<string>;
+    /**
+     * SSL decryption enabled
+     */
+    sslDecryptionEnabled?: pulumi.Input<string>;
+    /**
+     * Unknown revocation status action - Choices: `drop`, `decrypt`
+     */
+    unknownRevocationStatus?: pulumi.Input<string>;
+    /**
+     * Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
+     */
+    unsupportedCipherSuites?: pulumi.Input<string>;
+    /**
+     * Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
+     */
+    unsupportedProtocolVersions?: pulumi.Input<string>;
+    /**
+     * Untrusted certificate action - Choices: `drop`, `decrypt`
+     */
+    untrustedCertificate?: pulumi.Input<string>;
+    /**
+     * List of url rules (applies when `mode` set to `security`)
+     */
+    urlRules?: pulumi.Input<pulumi.Input<inputs.TlsSslDecryptionPolicyDefinitionUrlRule>[]>;
+    /**
+     * Use default CA certificate bundle
+     */
+    useDefaultCaCertBundle?: pulumi.Input<boolean>;
+}

package/tlsSslDecryptionPolicyDefinition.js

@@ -0,0 +1,99 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TlsSslDecryptionPolicyDefinition = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * This resource can manage a TLS SSL Decryption Policy Definition .
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
+ * ```
+ */
+class TlsSslDecryptionPolicyDefinition extends pulumi.CustomResource {
+    /**
+     * Get an existing TlsSslDecryptionPolicyDefinition resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new TlsSslDecryptionPolicyDefinition(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of TlsSslDecryptionPolicyDefinition.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === TlsSslDecryptionPolicyDefinition.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["certificateLifetimeInDays"] = state ? state.certificateLifetimeInDays : undefined;
+            resourceInputs["certificateRevocationStatus"] = state ? state.certificateRevocationStatus : undefined;
+            resourceInputs["defaultAction"] = state ? state.defaultAction : undefined;
+            resourceInputs["description"] = state ? state.description : undefined;
+            resourceInputs["ecKeyType"] = state ? state.ecKeyType : undefined;
+            resourceInputs["expiredCertificate"] = state ? state.expiredCertificate : undefined;
+            resourceInputs["failureMode"] = state ? state.failureMode : undefined;
+            resourceInputs["minimalTlsVersion"] = state ? state.minimalTlsVersion : undefined;
+            resourceInputs["mode"] = state ? state.mode : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["networkRules"] = state ? state.networkRules : undefined;
+            resourceInputs["rsaKeyPairModulus"] = state ? state.rsaKeyPairModulus : undefined;
+            resourceInputs["sslDecryptionEnabled"] = state ? state.sslDecryptionEnabled : undefined;
+            resourceInputs["unknownRevocationStatus"] = state ? state.unknownRevocationStatus : undefined;
+            resourceInputs["unsupportedCipherSuites"] = state ? state.unsupportedCipherSuites : undefined;
+            resourceInputs["unsupportedProtocolVersions"] = state ? state.unsupportedProtocolVersions : undefined;
+            resourceInputs["untrustedCertificate"] = state ? state.untrustedCertificate : undefined;
+            resourceInputs["urlRules"] = state ? state.urlRules : undefined;
+            resourceInputs["useDefaultCaCertBundle"] = state ? state.useDefaultCaCertBundle : undefined;
+            resourceInputs["version"] = state ? state.version : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.description === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'description'");
+            }
+            resourceInputs["certificateLifetimeInDays"] = args ? args.certificateLifetimeInDays : undefined;
+            resourceInputs["certificateRevocationStatus"] = args ? args.certificateRevocationStatus : undefined;
+            resourceInputs["defaultAction"] = args ? args.defaultAction : undefined;
+            resourceInputs["description"] = args ? args.description : undefined;
+            resourceInputs["ecKeyType"] = args ? args.ecKeyType : undefined;
+            resourceInputs["expiredCertificate"] = args ? args.expiredCertificate : undefined;
+            resourceInputs["failureMode"] = args ? args.failureMode : undefined;
+            resourceInputs["minimalTlsVersion"] = args ? args.minimalTlsVersion : undefined;
+            resourceInputs["mode"] = args ? args.mode : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["networkRules"] = args ? args.networkRules : undefined;
+            resourceInputs["rsaKeyPairModulus"] = args ? args.rsaKeyPairModulus : undefined;
+            resourceInputs["sslDecryptionEnabled"] = args ? args.sslDecryptionEnabled : undefined;
+            resourceInputs["unknownRevocationStatus"] = args ? args.unknownRevocationStatus : undefined;
+            resourceInputs["unsupportedCipherSuites"] = args ? args.unsupportedCipherSuites : undefined;
+            resourceInputs["unsupportedProtocolVersions"] = args ? args.unsupportedProtocolVersions : undefined;
+            resourceInputs["untrustedCertificate"] = args ? args.untrustedCertificate : undefined;
+            resourceInputs["urlRules"] = args ? args.urlRules : undefined;
+            resourceInputs["useDefaultCaCertBundle"] = args ? args.useDefaultCaCertBundle : undefined;
+            resourceInputs["version"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(TlsSslDecryptionPolicyDefinition.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.TlsSslDecryptionPolicyDefinition = TlsSslDecryptionPolicyDefinition;
+/** @internal */
+TlsSslDecryptionPolicyDefinition.__pulumiType = 'sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition';
+//# sourceMappingURL=tlsSslDecryptionPolicyDefinition.js.map

package/tlsSslDecryptionPolicyDefinition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tlsSslDecryptionPolicyDefinition.js","sourceRoot":"","sources":["../tlsSslDecryptionPolicyDefinition.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;GAQG;AACH,MAAa,gCAAiC,SAAQ,MAAM,CAAC,cAAc;IACvE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6C,EAAE,IAAmC;QAC3I,OAAO,IAAI,gCAAgC,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACvF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gCAAgC,CAAC,YAAY,CAAC;IACjF,CAAC;IA2FD,YAAY,IAAY,EAAE,WAA0F,EAAE,IAAmC;QACrJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgE,CAAC;YAC/E,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAA+D,CAAC;YAC7E,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gCAAgC,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrF,CAAC;;AA1KL,4EA2KC;AA7JG,gBAAgB;AACO,6CAAY,GAAG,+EAA+E,CAAC"}

package/tlsSslProfilePolicyDefinition.d.ts

@@ -0,0 +1,228 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * This resource can manage a TLS SSL Profile Policy Definition .
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as sdwan from "@pulumi/sdwan";
+ *
+ * const example = new sdwan.TlsSslProfilePolicyDefinition("example", {
+ *     name: "Example",
+ *     description: "My description",
+ *     mode: "security",
+ *     decryptCategories: ["alcohol-and-tobacco"],
+ *     neverDecryptCategories: ["auctions"],
+ *     skipDecryptCategories: ["cdns"],
+ *     decryptThreshold: "high-risk",
+ *     reputation: false,
+ *     failDecrypt: true,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import sdwan:index/tlsSslProfilePolicyDefinition:TlsSslProfilePolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
+ * ```
+ */
+export declare class TlsSslProfilePolicyDefinition extends pulumi.CustomResource {
+    /**
+     * Get an existing TlsSslProfilePolicyDefinition resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: TlsSslProfilePolicyDefinitionState, opts?: pulumi.CustomResourceOptions): TlsSslProfilePolicyDefinition;
+    /**
+     * Returns true if the given object is an instance of TlsSslProfilePolicyDefinition.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is TlsSslProfilePolicyDefinition;
+    /**
+     * Allow URL list ID
+     */
+    readonly allowUrlListId: pulumi.Output<string | undefined>;
+    /**
+     * Allow URL list version
+     */
+    readonly allowUrlListVersion: pulumi.Output<number | undefined>;
+    /**
+     * Block URL list ID
+     */
+    readonly blockUrlListId: pulumi.Output<string | undefined>;
+    /**
+     * Block URL list version
+     */
+    readonly blockUrlListVersion: pulumi.Output<number | undefined>;
+    /**
+     * Categories that should be decrypted
+     */
+    readonly decryptCategories: pulumi.Output<string[] | undefined>;
+    /**
+     * Decrypt threshold - Choices: `high-risk`, `suspicious`, `moderate-risk`, `low-risk`, `trustworthy`
+     */
+    readonly decryptThreshold: pulumi.Output<string | undefined>;
+    /**
+     * The description of the policy definition.
+     */
+    readonly description: pulumi.Output<string>;
+    /**
+     * Fail decrypt enabled
+     */
+    readonly failDecrypt: pulumi.Output<boolean | undefined>;
+    /**
+     * The policy mode - Choices: `security`, `unified`
+     */
+    readonly mode: pulumi.Output<string | undefined>;
+    /**
+     * The name of the policy definition.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Categories that should never be decrypted
+     */
+    readonly neverDecryptCategories: pulumi.Output<string[] | undefined>;
+    /**
+     * Reputation enabled
+     */
+    readonly reputation: pulumi.Output<boolean | undefined>;
+    /**
+     * Categories that should skipped
+     */
+    readonly skipDecryptCategories: pulumi.Output<string[] | undefined>;
+    /**
+     * The version of the object
+     */
+    readonly version: pulumi.Output<number>;
+    /**
+     * Create a TlsSslProfilePolicyDefinition resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: TlsSslProfilePolicyDefinitionArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering TlsSslProfilePolicyDefinition resources.
+ */
+export interface TlsSslProfilePolicyDefinitionState {
+    /**
+     * Allow URL list ID
+     */
+    allowUrlListId?: pulumi.Input<string>;
+    /**
+     * Allow URL list version
+     */
+    allowUrlListVersion?: pulumi.Input<number>;
+    /**
+     * Block URL list ID
+     */
+    blockUrlListId?: pulumi.Input<string>;
+    /**
+     * Block URL list version
+     */
+    blockUrlListVersion?: pulumi.Input<number>;
+    /**
+     * Categories that should be decrypted
+     */
+    decryptCategories?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Decrypt threshold - Choices: `high-risk`, `suspicious`, `moderate-risk`, `low-risk`, `trustworthy`
+     */
+    decryptThreshold?: pulumi.Input<string>;
+    /**
+     * The description of the policy definition.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Fail decrypt enabled
+     */
+    failDecrypt?: pulumi.Input<boolean>;
+    /**
+     * The policy mode - Choices: `security`, `unified`
+     */
+    mode?: pulumi.Input<string>;
+    /**
+     * The name of the policy definition.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Categories that should never be decrypted
+     */
+    neverDecryptCategories?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Reputation enabled
+     */
+    reputation?: pulumi.Input<boolean>;
+    /**
+     * Categories that should skipped
+     */
+    skipDecryptCategories?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The version of the object
+     */
+    version?: pulumi.Input<number>;
+}
+/**
+ * The set of arguments for constructing a TlsSslProfilePolicyDefinition resource.
+ */
+export interface TlsSslProfilePolicyDefinitionArgs {
+    /**
+     * Allow URL list ID
+     */
+    allowUrlListId?: pulumi.Input<string>;
+    /**
+     * Allow URL list version
+     */
+    allowUrlListVersion?: pulumi.Input<number>;
+    /**
+     * Block URL list ID
+     */
+    blockUrlListId?: pulumi.Input<string>;
+    /**
+     * Block URL list version
+     */
+    blockUrlListVersion?: pulumi.Input<number>;
+    /**
+     * Categories that should be decrypted
+     */
+    decryptCategories?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Decrypt threshold - Choices: `high-risk`, `suspicious`, `moderate-risk`, `low-risk`, `trustworthy`
+     */
+    decryptThreshold?: pulumi.Input<string>;
+    /**
+     * The description of the policy definition.
+     */
+    description: pulumi.Input<string>;
+    /**
+     * Fail decrypt enabled
+     */
+    failDecrypt?: pulumi.Input<boolean>;
+    /**
+     * The policy mode - Choices: `security`, `unified`
+     */
+    mode?: pulumi.Input<string>;
+    /**
+     * The name of the policy definition.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Categories that should never be decrypted
+     */
+    neverDecryptCategories?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Reputation enabled
+     */
+    reputation?: pulumi.Input<boolean>;
+    /**
+     * Categories that should skipped
+     */
+    skipDecryptCategories?: pulumi.Input<pulumi.Input<string>[]>;
+}