@pulumi/sdwan 0.9.5 → 0.9.6

package/types/output.d.ts

@@ -238,7 +238,7 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceAction {
     appqoeServiceNodeGroup?: string;
     appqoeTcpOptimization?: boolean;
     /**
-     * Backup SLA perferred color
+     * Backup SLA preferred color
      */
     backupSlaPreferredColors?: string[];
     cflowd?: boolean;
@@ -298,6 +298,10 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSetParamete
     nextHopLoose?: boolean;
     policerId?: string;
     preferredColorGroupId?: string;
+    /**
+     * Restrict traffic to the preferred color group, requires `preferredColorGroupId` to be set, Attribute conditional on SD-WAN Manager version `20.18.1` or higher
+     */
+    preferredColorGroupRestrict?: boolean;
     preferredRemoteColorRestrict?: boolean;
     preferredRemoteColors?: string[];
     serviceChainFallbackToRouting?: boolean;
@@ -349,6 +353,10 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSetParamete
 export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSlaClass {
     fallbackToBestPath?: boolean;
     preferredColorGroupListId?: string;
+    /**
+     * Restrict traffic to the preferred color group, requires `preferredColorGroupListId` to be set, Attribute conditional on SD-WAN Manager version `20.18.1` or higher
+     */
+    preferredColorGroupRestrict?: boolean;
     preferredColors?: string[];
     preferredRemoteColors?: string[];
     remoteColorRestrict?: boolean;
@@ -386,6 +394,10 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceMatchEntry {
      * DSCP numbers
      */
     dscps?: number[];
+    /**
+     * Site List, Attribute conditional on SD-WAN Manager version `20.18.1` or higher
+     */
+    hierarchyIds?: string[];
     /**
      * ICMP6 Message
      */
@@ -6245,8 +6257,22 @@ export interface EmbeddedSecurityNgfwPolicySequence {
      */
     baseAction?: string;
     disableSequence?: boolean;
+    /**
+     * , Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    isRuleSet?: boolean;
     matchEntries?: outputs.EmbeddedSecurityNgfwPolicySequenceMatchEntry[];
+    /**
+     * , Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sequenceComment?: string;
     sequenceId?: string;
+    /**
+     * IP address family the sequence matches on, `ipv4` sequences only accept the IPv4 match attributes and `ipv6` sequences only accept the IPv6 ones, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     *   - Choices: `ipv4`, `ipv6`
+     *   - Default value: `ipv4`
+     */
+    sequenceIpType?: string;
     sequenceName?: string;
     sequenceType?: string;
 }
@@ -6262,6 +6288,10 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
     appListIds?: string[];
     applicationFamilies?: string[];
     applications?: string[];
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    destinationDataIpv6PrefixListIds?: string[];
     destinationDataPrefixListIds?: string[];
     destinationDataPrefixes?: string[];
     /**
@@ -6280,6 +6310,18 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
      * Variable name
      */
     destinationGeoLocationsVariable?: string;
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    destinationIpv6DataPrefixes?: string[];
+    /**
+     * Variable name, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    destinationIpv6DataPrefixesVariable?: string;
+    /**
+     * , Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    destinationObjectGroupListIds?: string[];
     destinationPortListIds?: string[];
     destinationPorts?: string[];
     /**
@@ -6287,11 +6329,22 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
      */
     destinationPortsVariable?: string;
     destinationScalableGroupTagListIds?: string[];
+    /**
+     * Deprecated, use `destinationObjectGroupListIds` instead, Attribute conditional on SD-WAN Manager version lower than `20.18.0`
+     */
     destinationSecurityGroupListIds?: string[];
     flatAppListIds?: string[];
     protocolNameListIds?: string[];
     protocolNames?: string[];
     protocols?: string[];
+    /**
+     * Security rule set IDs, requires `isRuleSet` set to `true` on the sequence, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    ruleSetListIds?: string[];
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sourceDataIpv6PrefixListIds?: string[];
     sourceDataPrefixListIds?: string[];
     sourceDataPrefixes?: string[];
     /**
@@ -6307,6 +6360,18 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
     sourceIdentityListIds?: string[];
     sourceIdentityUsergroups?: string[];
     sourceIdentityUsers?: string[];
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sourceIpv6DataPrefixes?: string[];
+    /**
+     * Variable name, Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sourceIpv6DataPrefixesVariable?: string;
+    /**
+     * Referenced object groups must not contain FQDNs, SD-WAN Manager rejects them as a source (PPARC0012), Attribute conditional on SD-WAN Manager version `20.18.0` or higher
+     */
+    sourceObjectGroupListIds?: string[];
     sourcePortListIds?: string[];
     sourcePorts?: string[];
     /**
@@ -6314,6 +6379,9 @@ export interface EmbeddedSecurityNgfwPolicySequenceMatchEntry {
      */
     sourcePortsVariable?: string;
     sourceScalableGroupTagListIds?: string[];
+    /**
+     * Deprecated, use `sourceObjectGroupListIds` instead, Attribute conditional on SD-WAN Manager version lower than `20.18.0`
+     */
     sourceSecurityGroupListIds?: string[];
 }
 export interface EmbeddedSecurityPolicyAssembly {
@@ -6334,6 +6402,20 @@ export interface EmbeddedSecurityPolicyAssemblyEntry {
     sourceZone?: string;
     sourceZoneListId?: string;
 }
+export interface EmbeddedSecurityPolicyHighSpeedLogging {
+    /**
+     * - Choices: `server1`, `server2`, `server3`, `server4`
+     */
+    name?: string;
+    /**
+     * InterfaceName
+     */
+    sourceInterface?: string;
+    /**
+     * Variable name
+     */
+    sourceInterfaceVariable?: string;
+}
 export interface ExpandedCommunityListPolicyObjectEntry {
     /**
      * Expanded community value, e.g. `100:1000`
@@ -6636,7 +6718,7 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequenceAction {
     appqoeServiceNodeGroup: string;
     appqoeTcpOptimization: boolean;
     /**
-     * Backup SLA perferred color
+     * Backup SLA preferred color
      */
     backupSlaPreferredColors: string[];
     cflowd: boolean;
@@ -6675,6 +6757,10 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequenceActionSetParam
     nextHopLoose: boolean;
     policerId: string;
     preferredColorGroupId: string;
+    /**
+     * Restrict traffic to the preferred color group, requires `preferredColorGroupId` to be set
+     */
+    preferredColorGroupRestrict: boolean;
     preferredRemoteColorRestrict: boolean;
     preferredRemoteColors: string[];
     serviceChainFallbackToRouting: boolean;
@@ -6702,6 +6788,10 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequenceActionSetParam
 export interface GetApplicationPriorityTrafficPolicyPolicySequenceActionSlaClass {
     fallbackToBestPath: boolean;
     preferredColorGroupListId: string;
+    /**
+     * Restrict traffic to the preferred color group, requires `preferredColorGroupListId` to be set
+     */
+    preferredColorGroupRestrict: boolean;
     preferredColors: string[];
     preferredRemoteColors: string[];
     remoteColorRestrict: boolean;
@@ -6737,6 +6827,10 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequenceMatchEntry {
      * DSCP numbers
      */
     dscps: number[];
+    /**
+     * Site List
+     */
+    hierarchyIds: string[];
     /**
      * ICMP6 Message
      */
@@ -12134,8 +12228,14 @@ export interface GetEmbeddedSecurityNgfwPolicySequence {
     actions: outputs.GetEmbeddedSecurityNgfwPolicySequenceAction[];
     baseAction: string;
     disableSequence: boolean;
+    isRuleSet: boolean;
     matchEntries: outputs.GetEmbeddedSecurityNgfwPolicySequenceMatchEntry[];
+    sequenceComment: string;
     sequenceId: string;
+    /**
+     * IP address family the sequence matches on, `ipv4` sequences only accept the IPv4 match attributes and `ipv6` sequences only accept the IPv6 ones
+     */
+    sequenceIpType: string;
     sequenceName: string;
     sequenceType: string;
 }
@@ -12148,6 +12248,10 @@ export interface GetEmbeddedSecurityNgfwPolicySequenceMatchEntry {
     appListIds: string[];
     applicationFamilies: string[];
     applications: string[];
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`
+     */
+    destinationDataIpv6PrefixListIds: string[];
     destinationDataPrefixListIds: string[];
     destinationDataPrefixes: string[];
     /**
@@ -12166,6 +12270,15 @@ export interface GetEmbeddedSecurityNgfwPolicySequenceMatchEntry {
      * Variable name
      */
     destinationGeoLocationsVariable: string;
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`
+     */
+    destinationIpv6DataPrefixes: string[];
+    /**
+     * Variable name
+     */
+    destinationIpv6DataPrefixesVariable: string;
+    destinationObjectGroupListIds: string[];
     destinationPortListIds: string[];
     destinationPorts: string[];
     /**
@@ -12173,11 +12286,22 @@ export interface GetEmbeddedSecurityNgfwPolicySequenceMatchEntry {
      */
     destinationPortsVariable: string;
     destinationScalableGroupTagListIds: string[];
+    /**
+     * Deprecated, use `destinationObjectGroupListIds` instead
+     */
     destinationSecurityGroupListIds: string[];
     flatAppListIds: string[];
     protocolNameListIds: string[];
     protocolNames: string[];
     protocols: string[];
+    /**
+     * Security rule set IDs, requires `isRuleSet` set to `true` on the sequence
+     */
+    ruleSetListIds: string[];
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`
+     */
+    sourceDataIpv6PrefixListIds: string[];
     sourceDataPrefixListIds: string[];
     sourceDataPrefixes: string[];
     /**
@@ -12193,6 +12317,18 @@ export interface GetEmbeddedSecurityNgfwPolicySequenceMatchEntry {
     sourceIdentityListIds: string[];
     sourceIdentityUsergroups: string[];
     sourceIdentityUsers: string[];
+    /**
+     * Only supported on sequences with `sequenceIpType` set to `ipv6`
+     */
+    sourceIpv6DataPrefixes: string[];
+    /**
+     * Variable name
+     */
+    sourceIpv6DataPrefixesVariable: string;
+    /**
+     * Referenced object groups must not contain FQDNs, SD-WAN Manager rejects them as a source (PPARC0012)
+     */
+    sourceObjectGroupListIds: string[];
     sourcePortListIds: string[];
     sourcePorts: string[];
     /**
@@ -12200,6 +12336,9 @@ export interface GetEmbeddedSecurityNgfwPolicySequenceMatchEntry {
      */
     sourcePortsVariable: string;
     sourceScalableGroupTagListIds: string[];
+    /**
+     * Deprecated, use `sourceObjectGroupListIds` instead
+     */
     sourceSecurityGroupListIds: string[];
 }
 export interface GetEmbeddedSecurityPolicyAssembly {
@@ -12214,6 +12353,17 @@ export interface GetEmbeddedSecurityPolicyAssemblyEntry {
     sourceZone: string;
     sourceZoneListId: string;
 }
+export interface GetEmbeddedSecurityPolicyHighSpeedLogging {
+    name: string;
+    /**
+     * InterfaceName
+     */
+    sourceInterface: string;
+    /**
+     * Variable name
+     */
+    sourceInterfaceVariable: string;
+}
 export interface GetExpandedCommunityListPolicyObjectEntry {
     /**
      * Expanded community value, e.g. `100:1000`
@@ -12930,6 +13080,30 @@ export interface GetNetworkHierarchyNodeAddress {
      */
     zipcode: string;
 }
+export interface GetNetworkHierarchyNodesNodes {
+    /**
+     * The node's Network Hierarchy UUID
+     */
+    id: string;
+    /**
+     * The type of node: `site`, `region`, `group` or `global`
+     */
+    type: string;
+}
+export interface GetNetworkHierarchyNodesResolvedSite {
+    /**
+     * The site's Network Hierarchy node UUID
+     */
+    id: string;
+    /**
+     * The site's name
+     */
+    name: string;
+    /**
+     * The site's numeric site ID
+     */
+    siteId: number;
+}
 export interface GetNetworkHierarchySecurityLoggingHighSpeedLogging {
     /**
      * Server port number
@@ -13316,6 +13490,13 @@ export interface GetPolicyObjectSecurityDataIpv4PrefixListEntry {
      */
     ipPrefixVariable: string;
 }
+export interface GetPolicyObjectSecurityDataIpv6PrefixListEntry {
+    ipv6Prefix: string;
+    /**
+     * Variable name
+     */
+    ipv6PrefixVariable: string;
+}
 export interface GetPolicyObjectSecurityFqdnListEntry {
     pattern: string;
 }
@@ -13344,6 +13525,38 @@ export interface GetPolicyObjectSecurityLocalApplicationListEntry {
 export interface GetPolicyObjectSecurityLocalDomainListEntry {
     localDomain: string;
 }
+export interface GetPolicyObjectSecurityObjectGroupEntry {
+    dataIpv4PrefixListIds: string[];
+    dataIpv4Prefixes: string[];
+    /**
+     * Variable name
+     */
+    dataIpv4PrefixesVariable: string;
+    dataIpv6PrefixListIds: string[];
+    dataIpv6Prefixes: string[];
+    /**
+     * Variable name
+     */
+    dataIpv6PrefixesVariable: string;
+    fqdnListIds: string[];
+    fqdns: string[];
+    /**
+     * Variable name
+     */
+    fqdnsVariable: string;
+    geoLocationListIds: string[];
+    geoLocations: string[];
+    /**
+     * Variable name
+     */
+    geoLocationsVariable: string;
+    portListIds: string[];
+    ports: string[];
+    /**
+     * Variable name
+     */
+    portsVariable: string;
+}
 export interface GetPolicyObjectSecurityPortListEntry {
     /**
      * can be single port or port range
@@ -13353,6 +13566,108 @@ export interface GetPolicyObjectSecurityPortListEntry {
 export interface GetPolicyObjectSecurityProtocolListEntry {
     protocolName: string;
 }
+export interface GetPolicyObjectSecurityRuleSetSequence {
+    /**
+     * action
+     */
+    action: string;
+    /**
+     * Variable name
+     */
+    actionVariable: string;
+    destinationDataIpv4PrefixListIds: string[];
+    destinationDataIpv6PrefixListIds: string[];
+    destinationFqdnListIds: string[];
+    destinationFqdns: string[];
+    /**
+     * Variable name
+     */
+    destinationFqdnsVariable: string;
+    destinationGeoLocationListIds: string[];
+    /**
+     * Destination Geolocation
+     */
+    destinationGeoLocations: string[];
+    /**
+     * Variable name
+     */
+    destinationGeoLocationsVariable: string;
+    destinationIpv4Prefixes: string[];
+    /**
+     * Variable name
+     */
+    destinationIpv4PrefixesVariable: string;
+    destinationIpv6Prefixes: string[];
+    /**
+     * Variable name
+     */
+    destinationIpv6PrefixesVariable: string;
+    destinationObjectGroupListIds: string[];
+    destinationPortListIds: string[];
+    destinationPorts: string[];
+    /**
+     * Variable name
+     */
+    destinationPortsVariable: string;
+    /**
+     * Sequence name
+     */
+    name: string;
+    /**
+     * Variable name
+     */
+    nameVariable: string;
+    protocolNameListIds: string[];
+    protocolNames: string[];
+    /**
+     * Variable name
+     */
+    protocolNamesVariable: string;
+    /**
+     * protocol
+     */
+    protocols: string[];
+    /**
+     * Sequence Id
+     */
+    sequenceId: string;
+    /**
+     * Variable name
+     */
+    sequenceIdVariable: string;
+    /**
+     * ipv4/ ipv6
+     */
+    sequenceIpType: string;
+    sourceDataIpv4PrefixListIds: string[];
+    sourceDataIpv6PrefixListIds: string[];
+    sourceGeoLocationListIds: string[];
+    /**
+     * Source Geolocation
+     */
+    sourceGeoLocations: string[];
+    /**
+     * Variable name
+     */
+    sourceGeoLocationsVariable: string;
+    sourceIpv4Prefixes: string[];
+    /**
+     * Variable name
+     */
+    sourceIpv4PrefixesVariable: string;
+    sourceIpv6Prefixes: string[];
+    /**
+     * Variable name
+     */
+    sourceIpv6PrefixesVariable: string;
+    sourceObjectGroupListIds: string[];
+    sourcePortListIds: string[];
+    sourcePorts: string[];
+    /**
+     * Variable name
+     */
+    sourcePortsVariable: string;
+}
 export interface GetPolicyObjectSecurityScalableGroupTagListEntry {
     sgtName: string;
     tag: string;
@@ -18030,6 +18345,9 @@ export interface GetSseZscalerFeatureSubLocation {
      * Variable name
      */
     displayTimeUnitVariable: string;
+    /**
+     * Download Bandwidth in Mbps
+     */
     dnBandwidth: number;
     /**
      * Variable name
@@ -18059,6 +18377,9 @@ export interface GetSseZscalerFeatureSubLocation {
      * Variable name
      */
     idleTimeVariable: string;
+    /**
+     * Internal Ip address
+     */
     internalIps: outputs.GetSseZscalerFeatureSubLocationInternalIp[];
     /**
      * If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored
@@ -18068,6 +18389,9 @@ export interface GetSseZscalerFeatureSubLocation {
      * Variable name
      */
     ipEnforcedForKnownBrowsersVariable: string;
+    /**
+     * Sub-location name
+     */
     name: string;
     /**
      * Variable name
@@ -18101,6 +18425,9 @@ export interface GetSseZscalerFeatureSubLocation {
      * Variable name
      */
     serviceVpnVariable: string;
+    /**
+     * Sub-location Service VPN
+     */
     serviceVpns: string[];
     /**
      * Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic.
@@ -18110,6 +18437,9 @@ export interface GetSseZscalerFeatureSubLocation {
      * Variable name
      */
     surrogateIpVariable: string;
+    /**
+     * Upload Bandwidth in Mbps
+     */
     upBandwidth: number;
     /**
      * Variable name
@@ -19386,6 +19716,9 @@ export interface GetTlsSslDecryptionPolicyDefinitionUrlRule {
     tlsSslProfilePolicyVersion: number;
 }
 export interface GetTopologyCustomControlFeatureSequence {
+    /**
+     * List of action entries
+     */
     actionEntries: outputs.GetTopologyCustomControlFeatureSequenceActionEntry[];
     /**
      * Base Action
@@ -19399,6 +19732,9 @@ export interface GetTopologyCustomControlFeatureSequence {
      * Sequence IP Type
      */
     ipType: string;
+    /**
+     * Set of match entries
+     */
     matchEntries: outputs.GetTopologyCustomControlFeatureSequenceMatchEntry[];
     /**
      * Sequence Name
@@ -24730,6 +25066,13 @@ export interface PolicyObjectSecurityDataIpv4PrefixListEntry {
      */
     ipPrefixVariable?: string;
 }
+export interface PolicyObjectSecurityDataIpv6PrefixListEntry {
+    ipv6Prefix?: string;
+    /**
+     * Variable name
+     */
+    ipv6PrefixVariable?: string;
+}
 export interface PolicyObjectSecurityFqdnListEntry {
     pattern?: string;
 }
@@ -24760,6 +25103,38 @@ export interface PolicyObjectSecurityLocalApplicationListEntry {
 export interface PolicyObjectSecurityLocalDomainListEntry {
     localDomain?: string;
 }
+export interface PolicyObjectSecurityObjectGroupEntry {
+    dataIpv4PrefixListIds?: string[];
+    dataIpv4Prefixes?: string[];
+    /**
+     * Variable name
+     */
+    dataIpv4PrefixesVariable?: string;
+    dataIpv6PrefixListIds?: string[];
+    dataIpv6Prefixes?: string[];
+    /**
+     * Variable name
+     */
+    dataIpv6PrefixesVariable?: string;
+    fqdnListIds?: string[];
+    fqdns?: string[];
+    /**
+     * Variable name
+     */
+    fqdnsVariable?: string;
+    geoLocationListIds?: string[];
+    geoLocations?: string[];
+    /**
+     * Variable name
+     */
+    geoLocationsVariable?: string;
+    portListIds?: string[];
+    ports?: string[];
+    /**
+     * Variable name
+     */
+    portsVariable?: string;
+}
 export interface PolicyObjectSecurityPortListEntry {
     /**
      * can be single port or port range
@@ -24772,6 +25147,110 @@ export interface PolicyObjectSecurityProtocolListEntry {
      */
     protocolName?: string;
 }
+export interface PolicyObjectSecurityRuleSetSequence {
+    /**
+     * action
+     *   - Choices: `pass`, `inspect`, `drop`
+     */
+    action?: string;
+    /**
+     * Variable name
+     */
+    actionVariable?: string;
+    destinationDataIpv4PrefixListIds?: string[];
+    destinationDataIpv6PrefixListIds?: string[];
+    destinationFqdnListIds?: string[];
+    destinationFqdns?: string[];
+    /**
+     * Variable name
+     */
+    destinationFqdnsVariable?: string;
+    destinationGeoLocationListIds?: string[];
+    /**
+     * Destination Geolocation
+     */
+    destinationGeoLocations?: string[];
+    /**
+     * Variable name
+     */
+    destinationGeoLocationsVariable?: string;
+    destinationIpv4Prefixes?: string[];
+    /**
+     * Variable name
+     */
+    destinationIpv4PrefixesVariable?: string;
+    destinationIpv6Prefixes?: string[];
+    /**
+     * Variable name
+     */
+    destinationIpv6PrefixesVariable?: string;
+    destinationObjectGroupListIds?: string[];
+    destinationPortListIds?: string[];
+    destinationPorts?: string[];
+    /**
+     * Variable name
+     */
+    destinationPortsVariable?: string;
+    /**
+     * Sequence name
+     */
+    name?: string;
+    /**
+     * Variable name
+     */
+    nameVariable?: string;
+    protocolNameListIds?: string[];
+    protocolNames?: string[];
+    /**
+     * Variable name
+     */
+    protocolNamesVariable?: string;
+    /**
+     * protocol
+     */
+    protocols?: string[];
+    /**
+     * Sequence Id
+     */
+    sequenceId?: string;
+    /**
+     * Variable name
+     */
+    sequenceIdVariable?: string;
+    /**
+     * ipv4/ ipv6
+     *   - Choices: `ipv4`, `ipv6`
+     */
+    sequenceIpType?: string;
+    sourceDataIpv4PrefixListIds?: string[];
+    sourceDataIpv6PrefixListIds?: string[];
+    sourceGeoLocationListIds?: string[];
+    /**
+     * Source Geolocation
+     */
+    sourceGeoLocations?: string[];
+    /**
+     * Variable name
+     */
+    sourceGeoLocationsVariable?: string;
+    sourceIpv4Prefixes?: string[];
+    /**
+     * Variable name
+     */
+    sourceIpv4PrefixesVariable?: string;
+    sourceIpv6Prefixes?: string[];
+    /**
+     * Variable name
+     */
+    sourceIpv6PrefixesVariable?: string;
+    sourceObjectGroupListIds?: string[];
+    sourcePortListIds?: string[];
+    sourcePorts?: string[];
+    /**
+     * Variable name
+     */
+    sourcePortsVariable?: string;
+}
 export interface PolicyObjectSecurityScalableGroupTagListEntry {
     sgtName?: string;
     tag?: string;
@@ -26116,6 +26595,7 @@ export interface ServiceLanVpnFeatureIpv4StaticRoute {
     /**
      * Gateway distance, Attribute conditional on `gateway` equal to `null0`
      *   - Range: `1`-`255`
+     *   - Default value: `1`
      */
     administrativeDistance?: number;
     /**
@@ -26189,6 +26669,7 @@ export interface ServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterfaceNextHo
     /**
      * Administrative distance
      *   - Range: `1`-`255`
+     *   - Default value: `1`
      */
     administrativeDistance?: number;
     /**
@@ -26313,6 +26794,7 @@ export interface ServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterfaceNext
     /**
      * Administrative distance
      *   - Range: `1`-`254`
+     *   - Default value: `1`
      */
     administrativeDistance?: number;
     /**
@@ -29343,7 +29825,7 @@ export interface ServiceWirelessLanFeatureSsid {
     radiusServerSecretVariable?: string;
     /**
      * Select security type
-     *   - Choices: `personal`, `open`, `enterprise`
+     *   - Choices: `enterprise`, `personal`, `open`
      */
     securityType?: string;
     /**
@@ -29919,7 +30401,7 @@ export interface SseZscalerFeatureSubLocation {
      */
     displayTimeUnitVariable?: string;
     /**
-     * , Attribute conditional on `enforceBandwidthControl` equal to `override`
+     * Download Bandwidth in Mbps, Attribute conditional on `enforceBandwidthControl` equal to `override`
      *   - Range: `0.1`-`99999`
      */
     dnBandwidth?: number;
@@ -29956,6 +30438,9 @@ export interface SseZscalerFeatureSubLocation {
      * Variable name, Attribute conditional on `surrogateIp` equal to `true`
      */
     idleTimeVariable?: string;
+    /**
+     * Internal Ip address
+     */
     internalIps?: outputs.SseZscalerFeatureSubLocationInternalIp[];
     /**
      * If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored
@@ -29966,6 +30451,9 @@ export interface SseZscalerFeatureSubLocation {
      * Variable name
      */
     ipEnforcedForKnownBrowsersVariable?: string;
+    /**
+     * Sub-location name
+     */
     name?: string;
     /**
      * Variable name
@@ -30004,6 +30492,9 @@ export interface SseZscalerFeatureSubLocation {
      * Variable name
      */
     serviceVpnVariable?: string;
+    /**
+     * Sub-location Service VPN
+     */
     serviceVpns?: string[];
     /**
      * Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic., Attribute conditional on `authRequired` equal to `true`
@@ -30015,7 +30506,7 @@ export interface SseZscalerFeatureSubLocation {
      */
     surrogateIpVariable?: string;
     /**
-     * , Attribute conditional on `enforceBandwidthControl` equal to `override`
+     * Upload Bandwidth in Mbps, Attribute conditional on `enforceBandwidthControl` equal to `override`
      *   - Range: `0.1`-`99999`
      */
     upBandwidth?: number;
@@ -31413,6 +31904,9 @@ export interface TlsSslDecryptionPolicyDefinitionUrlRule {
     tlsSslProfilePolicyVersion?: number;
 }
 export interface TopologyCustomControlFeatureSequence {
+    /**
+     * List of action entries
+     */
     actionEntries?: outputs.TopologyCustomControlFeatureSequenceActionEntry[];
     /**
      * Base Action
@@ -31429,6 +31923,9 @@ export interface TopologyCustomControlFeatureSequence {
      *   - Choices: `ipv4`, `ipv6`, `all`
      */
     ipType?: string;
+    /**
+     * Set of match entries
+     */
     matchEntries?: outputs.TopologyCustomControlFeatureSequenceMatchEntry[];
     /**
      * Sequence Name