@robinmordasiewicz/f5xc-terraform-mcp 2.3.0 → 2.4.4

package/dist/docs/resources/network_connector.md

@@ -0,0 +1,252 @@
+---
+page_title: "f5xc_network_connector Resource - terraform-provider-f5xc"
+subcategory: "Networking"
+description: |-
+  [Category: Networking] [Namespace: required] Manages a Network Connector resource in F5 Distributed Cloud for network connector is created by users in system namespace configuration.
+---
+
+# f5xc_network_connector (Resource)
+
+[Category: Networking] [Namespace: required] Manages a Network Connector resource in F5 Distributed Cloud for network connector is created by users in system namespace configuration.
+
+~> **Note** Please refer to [Network Connector API docs](https://docs.cloud.f5.com/docs-v2/api/network-connector) to learn more.
+
+## Example Usage
+
+```terraform
+# Network Connector Resource Example
+# [Category: Networking] [Namespace: required] Manages a Network Connector resource in F5 Distributed Cloud for network connector is created by users in system namespace configuration.
+
+# Basic Network Connector configuration
+resource "f5xc_network_connector" "example" {
+  name      = "example-network-connector"
+  namespace = "system"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Network Connector configuration
+  # Direct connection
+  sli_to_global_dr {
+    global_vn {
+      name      = "global-network"
+      namespace = "system"
+    }
+  }
+
+  # Disable forward proxy
+  disable_forward_proxy {}
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the Network Connector. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the Network Connector will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+-> **One of the following:**
+&#x2022; <a id="disable-forward-proxy"></a>[`disable_forward_proxy`](#disable-forward-proxy) - Optional Block<br>Enable this option
+
+<a id="enable-forward-proxy"></a>&#x2022; [`enable_forward_proxy`](#enable-forward-proxy) - Optional Block<br>Forward Proxy Configuration. Fine tune forward proxy behavior Few configurations allowed are White listed ports and IP prefixes: Forward proxy does application protocol detection and server name(SNI) detection by peeking into the traffic on the incoming downstream connection. Few protocols doesn't have client sending the first data. In such cases, protocol and SNI detection fails. This configuration allows, skipping protocol and SNI detection for whitelisted IP-prefix-list and ports connection_timeout: The timeout for new network connections to upstream server. max_connect_attempts: Maximum number of attempts made to make new network connection to upstream server<br>See [Enable Forward Proxy](#enable-forward-proxy) below for details.
+
+-> **One of the following:**
+&#x2022; <a id="sli-to-global-dr"></a>[`sli_to_global_dr`](#sli-to-global-dr) - Optional Block<br>Global Network. Global network reference for direct connection<br>See [SLI To Global DR](#sli-to-global-dr) below for details.
+<br><br>&#x2022; <a id="sli-to-slo-snat"></a>[`sli_to_slo_snat`](#sli-to-slo-snat) - Optional Block<br>SNAT Configuration. description<br>See [SLI To Slo Snat](#sli-to-slo-snat) below for details.
+<br><br>&#x2022; <a id="slo-to-global-dr"></a>[`slo_to_global_dr`](#slo-to-global-dr) - Optional Block<br>Global Network. Global network reference for direct connection<br>See [Slo To Global DR](#slo-to-global-dr) below for details.
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### Enable Forward Proxy
+
+An [`enable_forward_proxy`](#enable-forward-proxy) block supports the following:
+
+<a id="enable-forward-proxy-connection-timeout"></a>&#x2022; [`connection_timeout`](#enable-forward-proxy-connection-timeout) - Optional Number  Defaults to `2000`  Specified in milliseconds<br>Connection Timeout. The timeout for new network connections to upstream server.  The (2 seconds)
+
+<a id="enable-forward-proxy-max-connect-attempts"></a>&#x2022; [`max_connect_attempts`](#enable-forward-proxy-max-connect-attempts) - Optional Number  Defaults to `1`<br>Number of connect attempts. Specifies the allowed number of retries on connect failure to upstream server
+
+<a id="enable-forward-proxy-no-interception"></a>&#x2022; [`no_interception`](#enable-forward-proxy-no-interception) - Optional Block<br>Enable this option
+
+<a id="enable-forward-proxy-tls-intercept"></a>&#x2022; [`tls_intercept`](#enable-forward-proxy-tls-intercept) - Optional Block<br>Configuration for TLS interception. Configuration to enable TLS interception<br>See [TLS Intercept](#enable-forward-proxy-tls-intercept) below.
+
+<a id="enable-forward-proxy-white-listed-ports"></a>&#x2022; [`white_listed_ports`](#enable-forward-proxy-white-listed-ports) - Optional List<br>TCP Ports to Skip Protocol Parsing. Traffic to these destination TCP ports is not subjected to protocol parsing Example 'tmate' server port
+
+<a id="enable-forward-proxy-white-listed-prefixes"></a>&#x2022; [`white_listed_prefixes`](#enable-forward-proxy-white-listed-prefixes) - Optional List<br>IP Prefixes to Skip Protocol Parsing. Traffic to these destination IP prefixes is not subjected to protocol parsing Example 'tmate' server IP
+
+#### Enable Forward Proxy TLS Intercept
+
+A [`tls_intercept`](#enable-forward-proxy-tls-intercept) block (within [`enable_forward_proxy`](#enable-forward-proxy)) supports the following:
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate"></a>&#x2022; [`custom_certificate`](#enable-forward-proxy-tls-intercept-custom-certificate) - Optional Block<br>TLS Certificate. Handle to fetch certificate and key<br>See [Custom Certificate](#enable-forward-proxy-tls-intercept-custom-certificate) below.
+
+<a id="enable-forward-proxy-tls-intercept-enable-for-all-domains"></a>&#x2022; [`enable_for_all_domains`](#enable-forward-proxy-tls-intercept-enable-for-all-domains) - Optional Block<br>Enable this option
+
+<a id="enable-forward-proxy-tls-intercept-policy"></a>&#x2022; [`policy`](#enable-forward-proxy-tls-intercept-policy) - Optional Block<br>TLS Interception Policy. Policy to enable or disable TLS interception<br>See [Policy](#enable-forward-proxy-tls-intercept-policy) below.
+
+<a id="enable-forward-proxy-tls-intercept-trusted-ca-url"></a>&#x2022; [`trusted_ca_url`](#enable-forward-proxy-tls-intercept-trusted-ca-url) - Optional String<br>Custom Root CA Certificate. Custom Root CA Certificate for validating upstream server certificate
+
+<a id="enable-forward-proxy-tls-intercept-volterra-certificate"></a>&#x2022; [`volterra_certificate`](#enable-forward-proxy-tls-intercept-volterra-certificate) - Optional Block<br>Enable this option
+
+<a id="enable-forward-proxy-tls-intercept-volterra-trusted-ca"></a>&#x2022; [`volterra_trusted_ca`](#enable-forward-proxy-tls-intercept-volterra-trusted-ca) - Optional Block<br>Enable this option
+
+#### Enable Forward Proxy TLS Intercept Custom Certificate
+
+A [`custom_certificate`](#enable-forward-proxy-tls-intercept-custom-certificate) block (within [`enable_forward_proxy.tls_intercept`](#enable-forward-proxy-tls-intercept)) supports the following:
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-certificate-url"></a>&#x2022; [`certificate_url`](#enable-forward-proxy-tls-intercept-custom-certificate-certificate-url) - Optional String<br>Certificate. TLS certificate. Certificate or certificate chain in PEM format including the PEM headers
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-custom-hash-algorithms"></a>&#x2022; [`custom_hash_algorithms`](#enable-forward-proxy-tls-intercept-custom-certificate-custom-hash-algorithms) - Optional Block<br>Hash Algorithms. Specifies the hash algorithms to be used<br>See [Custom Hash Algorithms](#enable-forward-proxy-tls-intercept-custom-certificate-custom-hash-algorithms) below.
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-description-spec"></a>&#x2022; [`description_spec`](#enable-forward-proxy-tls-intercept-custom-certificate-description-spec) - Optional String<br>Description. Description for the certificate
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-disable-ocsp-stapling"></a>&#x2022; [`disable_ocsp_stapling`](#enable-forward-proxy-tls-intercept-custom-certificate-disable-ocsp-stapling) - Optional Block<br>Enable this option
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-private-key"></a>&#x2022; [`private_key`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#enable-forward-proxy-tls-intercept-custom-certificate-private-key) below.
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-use-system-defaults"></a>&#x2022; [`use_system_defaults`](#enable-forward-proxy-tls-intercept-custom-certificate-use-system-defaults) - Optional Block<br>Enable this option
+
+#### Enable Forward Proxy TLS Intercept Custom Certificate Custom Hash Algorithms
+
+A [`custom_hash_algorithms`](#enable-forward-proxy-tls-intercept-custom-certificate-custom-hash-algorithms) block (within [`enable_forward_proxy.tls_intercept.custom_certificate`](#enable-forward-proxy-tls-intercept-custom-certificate)) supports the following:
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-custom-hash-algorithms-hash-algorithms"></a>&#x2022; [`hash_algorithms`](#enable-forward-proxy-tls-intercept-custom-certificate-custom-hash-algorithms-hash-algorithms) - Optional List  Defaults to `INVALID_HASH_ALGORITHM`<br>Possible values are `INVALID_HASH_ALGORITHM`, `SHA256`, `SHA1`<br>[Enum: INVALID_HASH_ALGORITHM|SHA256|SHA1] Hash Algorithms. Ordered list of hash algorithms to be used
+
+#### Enable Forward Proxy TLS Intercept Custom Certificate Private Key
+
+A [`private_key`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key) block (within [`enable_forward_proxy.tls_intercept.custom_certificate`](#enable-forward-proxy-tls-intercept-custom-certificate)) supports the following:
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info) below.
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-private-key-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-clear-secret-info) below.
+
+#### Enable Forward Proxy TLS Intercept Custom Certificate Private Key Blindfold Secret Info
+
+A [`blindfold_secret_info`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info) block (within [`enable_forward_proxy.tls_intercept.custom_certificate.private_key`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key)) supports the following:
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info-location"></a>&#x2022; [`location`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### Enable Forward Proxy TLS Intercept Custom Certificate Private Key Clear Secret Info
+
+A [`clear_secret_info`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-clear-secret-info) block (within [`enable_forward_proxy.tls_intercept.custom_certificate.private_key`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key)) supports the following:
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-private-key-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="enable-forward-proxy-tls-intercept-custom-certificate-private-key-clear-secret-info-url"></a>&#x2022; [`url`](#enable-forward-proxy-tls-intercept-custom-certificate-private-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### Enable Forward Proxy TLS Intercept Policy
+
+A [`policy`](#enable-forward-proxy-tls-intercept-policy) block (within [`enable_forward_proxy.tls_intercept`](#enable-forward-proxy-tls-intercept)) supports the following:
+
+<a id="enable-forward-proxy-tls-intercept-policy-interception-rules"></a>&#x2022; [`interception_rules`](#enable-forward-proxy-tls-intercept-policy-interception-rules) - Optional Block<br>TLS Interception Rules. List of ordered rules to enable or disable for TLS interception<br>See [Interception Rules](#enable-forward-proxy-tls-intercept-policy-interception-rules) below.
+
+#### Enable Forward Proxy TLS Intercept Policy Interception Rules
+
+An [`interception_rules`](#enable-forward-proxy-tls-intercept-policy-interception-rules) block (within [`enable_forward_proxy.tls_intercept.policy`](#enable-forward-proxy-tls-intercept-policy)) supports the following:
+
+<a id="enable-forward-proxy-tls-intercept-policy-interception-rules-disable-interception"></a>&#x2022; [`disable_interception`](#enable-forward-proxy-tls-intercept-policy-interception-rules-disable-interception) - Optional Block<br>Enable this option
+
+<a id="enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match"></a>&#x2022; [`domain_match`](#enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match) - Optional Block<br>Domains. Domains names<br>See [Domain Match](#enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match) below.
+
+<a id="enable-forward-proxy-tls-intercept-policy-interception-rules-enable-interception"></a>&#x2022; [`enable_interception`](#enable-forward-proxy-tls-intercept-policy-interception-rules-enable-interception) - Optional Block<br>Enable this option
+
+#### Enable Forward Proxy TLS Intercept Policy Interception Rules Domain Match
+
+A [`domain_match`](#enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match) block (within [`enable_forward_proxy.tls_intercept.policy.interception_rules`](#enable-forward-proxy-tls-intercept-policy-interception-rules)) supports the following:
+
+<a id="enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match-exact-value"></a>&#x2022; [`exact_value`](#enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match-exact-value) - Optional String<br>Exact Value. Exact domain name
+
+<a id="enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match-regex-value"></a>&#x2022; [`regex_value`](#enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match-regex-value) - Optional String<br>Regex Values of Domains. Regular Expression value for the domain name
+
+<a id="enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match-suffix-value"></a>&#x2022; [`suffix_value`](#enable-forward-proxy-tls-intercept-policy-interception-rules-domain-match-suffix-value) - Optional String<br>Suffix Value. Suffix of domain name e.g 'xyz.com' will match '*.xyz.com' and 'xyz.com'
+
+#### SLI To Global DR
+
+A [`sli_to_global_dr`](#sli-to-global-dr) block supports the following:
+
+<a id="sli-to-global-dr-global-vn"></a>&#x2022; [`global_vn`](#sli-to-global-dr-global-vn) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Global Vn](#sli-to-global-dr-global-vn) below.
+
+#### SLI To Global DR Global Vn
+
+A [`global_vn`](#sli-to-global-dr-global-vn) block (within [`sli_to_global_dr`](#sli-to-global-dr)) supports the following:
+
+<a id="sli-to-global-dr-global-vn-name"></a>&#x2022; [`name`](#sli-to-global-dr-global-vn-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="sli-to-global-dr-global-vn-namespace"></a>&#x2022; [`namespace`](#sli-to-global-dr-global-vn-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="sli-to-global-dr-global-vn-tenant"></a>&#x2022; [`tenant`](#sli-to-global-dr-global-vn-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### SLI To Slo Snat
+
+A [`sli_to_slo_snat`](#sli-to-slo-snat) block supports the following:
+
+<a id="sli-to-slo-snat-default-gw-snat"></a>&#x2022; [`default_gw_snat`](#sli-to-slo-snat-default-gw-snat) - Optional Block<br>Enable this option
+
+<a id="sli-to-slo-snat-interface-ip"></a>&#x2022; [`interface_ip`](#sli-to-slo-snat-interface-ip) - Optional Block<br>Enable this option
+
+#### Slo To Global DR
+
+A [`slo_to_global_dr`](#slo-to-global-dr) block supports the following:
+
+<a id="slo-to-global-dr-global-vn"></a>&#x2022; [`global_vn`](#slo-to-global-dr-global-vn) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Global Vn](#slo-to-global-dr-global-vn) below.
+
+#### Slo To Global DR Global Vn
+
+A [`global_vn`](#slo-to-global-dr-global-vn) block (within [`slo_to_global_dr`](#slo-to-global-dr)) supports the following:
+
+<a id="slo-to-global-dr-global-vn-name"></a>&#x2022; [`name`](#slo-to-global-dr-global-vn-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="slo-to-global-dr-global-vn-namespace"></a>&#x2022; [`namespace`](#slo-to-global-dr-global-vn-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="slo-to-global-dr-global-vn-tenant"></a>&#x2022; [`tenant`](#slo-to-global-dr-global-vn-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_network_connector.example system/example
+```

package/dist/docs/resources/network_firewall.md

@@ -0,0 +1,178 @@
+---
+page_title: "f5xc_network_firewall Resource - terraform-provider-f5xc"
+subcategory: "Security"
+description: |-
+  [Category: Security] [Namespace: required] Manages a Network Firewall resource in F5 Distributed Cloud for network firewall is created by users in system namespace configuration.
+---
+
+# f5xc_network_firewall (Resource)
+
+[Category: Security] [Namespace: required] Manages a Network Firewall resource in F5 Distributed Cloud for network firewall is created by users in system namespace configuration.
+
+~> **Note** Please refer to [Network Firewall API docs](https://docs.cloud.f5.com/docs-v2/api/network-firewall) to learn more.
+
+## Example Usage
+
+```terraform
+# Network Firewall Resource Example
+# [Category: Security] [Namespace: required] Manages a Network Firewall resource in F5 Distributed Cloud for network firewall is created by users in system namespace configuration.
+
+# Basic Network Firewall configuration
+resource "f5xc_network_firewall" "example" {
+  name      = "example-network-firewall"
+  namespace = "system"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Resource-specific configuration
+  # [OneOf: active_enhanced_firewall_policies, active_network...
+  active_enhanced_firewall_policies {
+    # Configure active_enhanced_firewall_policies settings
+  }
+  # Enhanced Firewall Policy. Ordered List of Enhanced Firewa...
+  enhanced_firewall_policies {
+    # Configure enhanced_firewall_policies settings
+  }
+  # [OneOf: active_fast_acls, disable_fast_acl; Default: disa...
+  active_fast_acls {
+    # Configure active_fast_acls settings
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the Network Firewall. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the Network Firewall will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+-> **One of the following:**
+&#x2022; <a id="active-enhanced-firewall-policies"></a>[`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies) - Optional Block<br>Active Enhanced Network Policies Type. List of Enhanced Firewall Policies These policies use session-based rules and provide all options available under firewall policies with an additional option for service insertion<br>See [Active Enhanced Firewall Policies](#active-enhanced-firewall-policies) below for details.
+<br><br>&#x2022; <a id="active-network-policies"></a>[`active_network_policies`](#active-network-policies) - Optional Block<br>Active Firewall Policies Type. List of firewall policy views<br>See [Active Network Policies](#active-network-policies) below for details.
+
+-> **One of the following:**
+&#x2022; <a id="active-fast-acls"></a>[`active_fast_acls`](#active-fast-acls) - Optional Block<br>Active Fast ACL(s). List of Fast ACL(s)<br>See [Active Fast Acls](#active-fast-acls) below for details.
+
+-> **One of the following:**
+&#x2022; <a id="active-forward-proxy-policies"></a>[`active_forward_proxy_policies`](#active-forward-proxy-policies) - Optional Block<br>Active Forward Proxy Policies Type. Ordered List of Forward Proxy Policies active<br>See [Active Forward Proxy Policies](#active-forward-proxy-policies) below for details.
+
+<a id="disable-fast-acl"></a>&#x2022; [`disable_fast_acl`](#disable-fast-acl) - Optional Block<br>Enable this option
+
+<a id="disable-forward-proxy-policy"></a>&#x2022; [`disable_forward_proxy_policy`](#disable-forward-proxy-policy) - Optional Block<br>Enable this option
+
+<a id="disable-network-policy"></a>&#x2022; [`disable_network_policy`](#disable-network-policy) - Optional Block<br>Enable this option
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### Active Enhanced Firewall Policies
+
+An [`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies) block supports the following:
+
+<a id="active-enhanced-firewall-policies-enhanced-firewall-policies"></a>&#x2022; [`enhanced_firewall_policies`](#active-enhanced-firewall-policies-enhanced-firewall-policies) - Optional Block<br>Enhanced Firewall Policy. Ordered List of Enhanced Firewall Policies active<br>See [Enhanced Firewall Policies](#active-enhanced-firewall-policies-enhanced-firewall-policies) below.
+
+#### Active Enhanced Firewall Policies Enhanced Firewall Policies
+
+An [`enhanced_firewall_policies`](#active-enhanced-firewall-policies-enhanced-firewall-policies) block (within [`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies)) supports the following:
+
+<a id="active-enhanced-firewall-policies-enhanced-firewall-policies-name"></a>&#x2022; [`name`](#active-enhanced-firewall-policies-enhanced-firewall-policies-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="active-enhanced-firewall-policies-enhanced-firewall-policies-namespace"></a>&#x2022; [`namespace`](#active-enhanced-firewall-policies-enhanced-firewall-policies-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="active-enhanced-firewall-policies-enhanced-firewall-policies-tenant"></a>&#x2022; [`tenant`](#active-enhanced-firewall-policies-enhanced-firewall-policies-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Active Fast Acls
+
+An [`active_fast_acls`](#active-fast-acls) block supports the following:
+
+<a id="active-fast-acls-fast-acls"></a>&#x2022; [`fast_acls`](#active-fast-acls-fast-acls) - Optional Block<br>Fast ACL(s). Ordered List of Fast ACL(s) active for this network firewall<br>See [Fast Acls](#active-fast-acls-fast-acls) below.
+
+#### Active Fast Acls Fast Acls
+
+A [`fast_acls`](#active-fast-acls-fast-acls) block (within [`active_fast_acls`](#active-fast-acls)) supports the following:
+
+<a id="active-fast-acls-fast-acls-name"></a>&#x2022; [`name`](#active-fast-acls-fast-acls-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="active-fast-acls-fast-acls-namespace"></a>&#x2022; [`namespace`](#active-fast-acls-fast-acls-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="active-fast-acls-fast-acls-tenant"></a>&#x2022; [`tenant`](#active-fast-acls-fast-acls-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Active Forward Proxy Policies
+
+An [`active_forward_proxy_policies`](#active-forward-proxy-policies) block supports the following:
+
+<a id="active-forward-proxy-policies-forward-proxy-policies"></a>&#x2022; [`forward_proxy_policies`](#active-forward-proxy-policies-forward-proxy-policies) - Optional Block<br>Forward Proxy Policies. Ordered List of Forward Proxy Policies active<br>See [Forward Proxy Policies](#active-forward-proxy-policies-forward-proxy-policies) below.
+
+#### Active Forward Proxy Policies Forward Proxy Policies
+
+A [`forward_proxy_policies`](#active-forward-proxy-policies-forward-proxy-policies) block (within [`active_forward_proxy_policies`](#active-forward-proxy-policies)) supports the following:
+
+<a id="active-forward-proxy-policies-forward-proxy-policies-name"></a>&#x2022; [`name`](#active-forward-proxy-policies-forward-proxy-policies-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="active-forward-proxy-policies-forward-proxy-policies-namespace"></a>&#x2022; [`namespace`](#active-forward-proxy-policies-forward-proxy-policies-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="active-forward-proxy-policies-forward-proxy-policies-tenant"></a>&#x2022; [`tenant`](#active-forward-proxy-policies-forward-proxy-policies-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Active Network Policies
+
+An [`active_network_policies`](#active-network-policies) block supports the following:
+
+<a id="active-network-policies-network-policies"></a>&#x2022; [`network_policies`](#active-network-policies-network-policies) - Optional Block<br>Firewall Policy. Ordered List of Firewall Policies active for this network firewall<br>See [Network Policies](#active-network-policies-network-policies) below.
+
+#### Active Network Policies Network Policies
+
+A [`network_policies`](#active-network-policies-network-policies) block (within [`active_network_policies`](#active-network-policies)) supports the following:
+
+<a id="active-network-policies-network-policies-name"></a>&#x2022; [`name`](#active-network-policies-network-policies-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="active-network-policies-network-policies-namespace"></a>&#x2022; [`namespace`](#active-network-policies-network-policies-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="active-network-policies-network-policies-tenant"></a>&#x2022; [`tenant`](#active-network-policies-network-policies-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_network_firewall.example system/example
+```