@pulumi/sdwan 0.9.5 → 0.9.6

package/types/input.d.ts

@@ -239,7 +239,7 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceAction {
     appqoeServiceNodeGroup?: pulumi.Input<string | undefined>;
     appqoeTcpOptimization?: pulumi.Input<boolean | undefined>;
     /**
-     * Backup SLA perferred color
+     * Backup SLA preferred color
      */
     backupSlaPreferredColors?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     cflowd?: pulumi.Input<boolean | undefined>;
@@ -299,6 +299,10 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSetParamete
     nextHopLoose?: pulumi.Input<boolean | undefined>;
     policerId?: pulumi.Input<string | undefined>;
     preferredColorGroupId?: pulumi.Input<string | undefined>;
+    /**
+     * Restrict traffic to the preferred color group, requires `preferredColorGroupId` to be set, Attribute conditional on SD-WAN Manager version `20.18.1` or higher
+     */
+    preferredColorGroupRestrict?: pulumi.Input<boolean | undefined>;
     preferredRemoteColorRestrict?: pulumi.Input<boolean | undefined>;
     preferredRemoteColors?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     serviceChainFallbackToRouting?: pulumi.Input<boolean | undefined>;
@@ -350,6 +354,10 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSetParamete
 export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSlaClass {
     fallbackToBestPath?: pulumi.Input<boolean | undefined>;
     preferredColorGroupListId?: pulumi.Input<string | undefined>;
+    /**
+     * Restrict traffic to the preferred color group, requires `preferredColorGroupListId` to be set, Attribute conditional on SD-WAN Manager version `20.18.1` or higher
+     */
+    preferredColorGroupRestrict?: pulumi.Input<boolean | undefined>;
     preferredColors?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     preferredRemoteColors?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     remoteColorRestrict?: pulumi.Input<boolean | undefined>;
@@ -387,6 +395,10 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceMatchEntry {
      * DSCP numbers
      */
     dscps?: pulumi.Input<pulumi.Input<number>[] | undefined>;
+    /**
+     * Site List, Attribute conditional on SD-WAN Manager version `20.18.1` or higher
+     */
+    hierarchyIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
      * ICMP6 Message
      */
@@ -6246,8 +6258,22 @@ export interface EmbeddedSecurityNgfwPolicySequence {
      */
     baseAction?: pulumi.Input<string | undefined>;
     disableSequence?: pulumi.Input<boolean | undefined>;
+    /**
+     * , Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    isRuleSet?: pulumi.Input<boolean | undefined>;
     matchEntries?: pulumi.Input<pulumi.Input<inputs.EmbeddedSecurityNgfwPolicySequenceMatchEntry>[] | undefined>;
+    /**
+     * , Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sequenceComment?: pulumi.Input<string | undefined>;
     sequenceId?: pulumi.Input<string | undefined>;
+    /**
+     * IP address family the sequence matches on, `ipv4` sequences only accept the IPv4 match attributes and `ipv6` sequences only accept the IPv6 ones, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     *   - Choices: `ipv4`, `ipv6`
+     *   - Default value: `ipv4`
+     */
+    sequenceIpType?: pulumi.Input<string | undefined>;
     sequenceName?: pulumi.Input<string | undefined>;
     sequenceType?: pulumi.Input<string | undefined>;
 }
@@ -6263,6 +6289,10 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
     appListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     applicationFamilies?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     applications?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    destinationDataIpv6PrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     destinationDataPrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     destinationDataPrefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
@@ -6281,6 +6311,18 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
      * Variable name
      */
     destinationGeoLocationsVariable?: pulumi.Input<string | undefined>;
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    destinationIpv6DataPrefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    destinationIpv6DataPrefixesVariable?: pulumi.Input<string | undefined>;
+    /**
+     * , Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    destinationObjectGroupListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     destinationPortListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     destinationPorts?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
@@ -6288,11 +6330,22 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
      */
     destinationPortsVariable?: pulumi.Input<string | undefined>;
     destinationScalableGroupTagListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Deprecated, use `destinationObjectGroupListIds` instead, Attribute conditional on SD-WAN Manager version lower than `20.18.0`
+     */
     destinationSecurityGroupListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     flatAppListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     protocolNameListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     protocolNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     protocols?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Security rule set IDs, requires `isRuleSet` set to `true` on the sequence, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    ruleSetListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sourceDataIpv6PrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     sourceDataPrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     sourceDataPrefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
@@ -6308,6 +6361,18 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
     sourceIdentityListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     sourceIdentityUsergroups?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     sourceIdentityUsers?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sourceIpv6DataPrefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sourceIpv6DataPrefixesVariable?: pulumi.Input<string | undefined>;
+    /**
+     * Referenced object groups must not contain FQDNs, SD-WAN Manager rejects them as a source (PPARC0012), Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sourceObjectGroupListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     sourcePortListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     sourcePorts?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
@@ -6315,6 +6380,9 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
      */
     sourcePortsVariable?: pulumi.Input<string | undefined>;
     sourceScalableGroupTagListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Deprecated, use `sourceObjectGroupListIds` instead, Attribute conditional on SD-WAN Manager version lower than `20.18.0`
+     */
     sourceSecurityGroupListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
 }
 export interface EmbeddedSecurityPolicyAssembly {
@@ -6335,6 +6403,20 @@ export interface EmbeddedSecurityPolicyAssemblyEntry {
     sourceZone?: pulumi.Input<string | undefined>;
     sourceZoneListId?: pulumi.Input<string | undefined>;
 }
+export interface EmbeddedSecurityPolicyHighSpeedLogging {
+    /**
+     * - Choices: `server1`, `server2`, `server3`, `server4`
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * InterfaceName
+     */
+    sourceInterface?: pulumi.Input<string | undefined>;
+    /**
+     * Variable name
+     */
+    sourceInterfaceVariable?: pulumi.Input<string | undefined>;
+}
 export interface ExpandedCommunityListPolicyObjectEntry {
     /**
      * Expanded community value, e.g. `100:1000`
@@ -7495,6 +7577,13 @@ export interface PolicyObjectSecurityDataIpv4PrefixListEntry {
      */
     ipPrefixVariable?: pulumi.Input<string | undefined>;
 }
+export interface PolicyObjectSecurityDataIpv6PrefixListEntry {
+    ipv6Prefix?: pulumi.Input<string | undefined>;
+    /**
+     * Variable name
+     */
+    ipv6PrefixVariable?: pulumi.Input<string | undefined>;
+}
 export interface PolicyObjectSecurityFqdnListEntry {
     pattern?: pulumi.Input<string | undefined>;
 }
@@ -7525,6 +7614,38 @@ export interface PolicyObjectSecurityLocalApplicationListEntry {
 export interface PolicyObjectSecurityLocalDomainListEntry {
     localDomain?: pulumi.Input<string | undefined>;
 }
+export interface PolicyObjectSecurityObjectGroupEntry {
+    dataIpv4PrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    dataIpv4Prefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    dataIpv4PrefixesVariable?: pulumi.Input<string | undefined>;
+    dataIpv6PrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    dataIpv6Prefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    dataIpv6PrefixesVariable?: pulumi.Input<string | undefined>;
+    fqdnListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    fqdns?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    fqdnsVariable?: pulumi.Input<string | undefined>;
+    geoLocationListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    geoLocations?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    geoLocationsVariable?: pulumi.Input<string | undefined>;
+    portListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    ports?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    portsVariable?: pulumi.Input<string | undefined>;
+}
 export interface PolicyObjectSecurityPortListEntry {
     /**
      * can be single port or port range
@@ -7537,6 +7658,110 @@ export interface PolicyObjectSecurityProtocolListEntry {
      */
     protocolName?: pulumi.Input<string | undefined>;
 }
+export interface PolicyObjectSecurityRuleSetSequence {
+    /**
+     * action
+     *   - Choices: `pass`, `inspect`, `drop`
+     */
+    action?: pulumi.Input<string | undefined>;
+    /**
+     * Variable name
+     */
+    actionVariable?: pulumi.Input<string | undefined>;
+    destinationDataIpv4PrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    destinationDataIpv6PrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    destinationFqdnListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    destinationFqdns?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    destinationFqdnsVariable?: pulumi.Input<string | undefined>;
+    destinationGeoLocationListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Destination Geolocation
+     */
+    destinationGeoLocations?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    destinationGeoLocationsVariable?: pulumi.Input<string | undefined>;
+    destinationIpv4Prefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    destinationIpv4PrefixesVariable?: pulumi.Input<string | undefined>;
+    destinationIpv6Prefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    destinationIpv6PrefixesVariable?: pulumi.Input<string | undefined>;
+    destinationObjectGroupListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    destinationPortListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    destinationPorts?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    destinationPortsVariable?: pulumi.Input<string | undefined>;
+    /**
+     * Sequence name
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Variable name
+     */
+    nameVariable?: pulumi.Input<string | undefined>;
+    protocolNameListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    protocolNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    protocolNamesVariable?: pulumi.Input<string | undefined>;
+    /**
+     * protocol
+     */
+    protocols?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Sequence Id
+     */
+    sequenceId?: pulumi.Input<string | undefined>;
+    /**
+     * Variable name
+     */
+    sequenceIdVariable?: pulumi.Input<string | undefined>;
+    /**
+     * ipv4/ ipv6
+     *   - Choices: `ipv4`, `ipv6`
+     */
+    sequenceIpType?: pulumi.Input<string | undefined>;
+    sourceDataIpv4PrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    sourceDataIpv6PrefixListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    sourceGeoLocationListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Source Geolocation
+     */
+    sourceGeoLocations?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    sourceGeoLocationsVariable?: pulumi.Input<string | undefined>;
+    sourceIpv4Prefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    sourceIpv4PrefixesVariable?: pulumi.Input<string | undefined>;
+    sourceIpv6Prefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    sourceIpv6PrefixesVariable?: pulumi.Input<string | undefined>;
+    sourceObjectGroupListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    sourcePortListIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    sourcePorts?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Variable name
+     */
+    sourcePortsVariable?: pulumi.Input<string | undefined>;
+}
 export interface PolicyObjectSecurityScalableGroupTagListEntry {
     sgtName?: pulumi.Input<string | undefined>;
     tag?: pulumi.Input<string | undefined>;
@@ -8881,6 +9106,7 @@ export interface ServiceLanVpnFeatureIpv4StaticRoute {
     /**
      * Gateway distance, Attribute conditional on `gateway` equal to `null0`
      *   - Range: `1`-`255`
+     *   - Default value: `1`
      */
     administrativeDistance?: pulumi.Input<number | undefined>;
     /**
@@ -8954,6 +9180,7 @@ export interface ServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterfaceNextHo
     /**
      * Administrative distance
      *   - Range: `1`-`255`
+     *   - Default value: `1`
      */
     administrativeDistance?: pulumi.Input<number | undefined>;
     /**
@@ -9078,6 +9305,7 @@ export interface ServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterfaceNext
     /**
      * Administrative distance
      *   - Range: `1`-`254`
+     *   - Default value: `1`
      */
     administrativeDistance?: pulumi.Input<number | undefined>;
     /**
@@ -12108,7 +12336,7 @@ export interface ServiceWirelessLanFeatureSsid {
     radiusServerSecretVariable?: pulumi.Input<string | undefined>;
     /**
      * Select security type
-     *   - Choices: `personal`, `open`, `enterprise`
+     *   - Choices: `enterprise`, `personal`, `open`
      */
     securityType?: pulumi.Input<string | undefined>;
     /**
@@ -12684,7 +12912,7 @@ export interface SseZscalerFeatureSubLocation {
      */
     displayTimeUnitVariable?: pulumi.Input<string | undefined>;
     /**
-     * , Attribute conditional on `enforceBandwidthControl` equal to `override`
+     * Download Bandwidth in Mbps, Attribute conditional on `enforceBandwidthControl` equal to `override`
      *   - Range: `0.1`-`99999`
      */
     dnBandwidth?: pulumi.Input<number | undefined>;
@@ -12721,6 +12949,9 @@ export interface SseZscalerFeatureSubLocation {
      * Variable name, Attribute conditional on `surrogateIp` equal to `true`
      */
     idleTimeVariable?: pulumi.Input<string | undefined>;
+    /**
+     * Internal Ip address
+     */
     internalIps?: pulumi.Input<pulumi.Input<inputs.SseZscalerFeatureSubLocationInternalIp>[] | undefined>;
     /**
      * If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored
@@ -12731,6 +12962,9 @@ export interface SseZscalerFeatureSubLocation {
      * Variable name
      */
     ipEnforcedForKnownBrowsersVariable?: pulumi.Input<string | undefined>;
+    /**
+     * Sub-location name
+     */
     name?: pulumi.Input<string | undefined>;
     /**
      * Variable name
@@ -12769,6 +13003,9 @@ export interface SseZscalerFeatureSubLocation {
      * Variable name
      */
     serviceVpnVariable?: pulumi.Input<string | undefined>;
+    /**
+     * Sub-location Service VPN
+     */
     serviceVpns?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
      * Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic., Attribute conditional on `authRequired` equal to `true`
@@ -12780,7 +13017,7 @@ export interface SseZscalerFeatureSubLocation {
      */
     surrogateIpVariable?: pulumi.Input<string | undefined>;
     /**
-     * , Attribute conditional on `enforceBandwidthControl` equal to `override`
+     * Upload Bandwidth in Mbps, Attribute conditional on `enforceBandwidthControl` equal to `override`
      *   - Range: `0.1`-`99999`
      */
     upBandwidth?: pulumi.Input<number | undefined>;
@@ -14178,6 +14415,9 @@ export interface TlsSslDecryptionPolicyDefinitionUrlRule {
     tlsSslProfilePolicyVersion?: pulumi.Input<number | undefined>;
 }
 export interface TopologyCustomControlFeatureSequence {
+    /**
+     * List of action entries
+     */
     actionEntries?: pulumi.Input<pulumi.Input<inputs.TopologyCustomControlFeatureSequenceActionEntry>[] | undefined>;
     /**
      * Base Action
@@ -14194,6 +14434,9 @@ export interface TopologyCustomControlFeatureSequence {
      *   - Choices: `ipv4`, `ipv6`, `all`
      */
     ipType?: pulumi.Input<string | undefined>;
+    /**
+     * Set of match entries
+     */
     matchEntries?: pulumi.Input<pulumi.Input<inputs.TopologyCustomControlFeatureSequenceMatchEntry>[] | undefined>;
     /**
      * Sequence Name