@robinmordasiewicz/f5xc-terraform-mcp 3.5.0 → 3.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (111) hide show
  1. package/README.md +283 -104
  2. package/dist/docs/data-sources/bgp.md +2 -2
  3. package/dist/docs/data-sources/discovery.md +2 -2
  4. package/dist/docs/data-sources/fast_acl.md +2 -2
  5. package/dist/docs/data-sources/fast_acl_rule.md +2 -2
  6. package/dist/docs/data-sources/irule.md +2 -2
  7. package/dist/docs/data-sources/log_receiver.md +2 -2
  8. package/dist/docs/data-sources/network_policy.md +2 -2
  9. package/dist/docs/data-sources/route.md +2 -2
  10. package/dist/docs/data-sources/site.md +2 -2
  11. package/dist/docs/resources/address_allocator.md +7 -7
  12. package/dist/docs/resources/advertise_policy.md +57 -57
  13. package/dist/docs/resources/alert_policy.md +40 -40
  14. package/dist/docs/resources/alert_receiver.md +57 -57
  15. package/dist/docs/resources/api_crawler.md +13 -13
  16. package/dist/docs/resources/api_definition.md +11 -11
  17. package/dist/docs/resources/api_discovery.md +4 -4
  18. package/dist/docs/resources/api_testing.md +27 -27
  19. package/dist/docs/resources/apm.md +40 -40
  20. package/dist/docs/resources/app_api_group.md +20 -20
  21. package/dist/docs/resources/app_firewall.md +50 -50
  22. package/dist/docs/resources/app_setting.md +19 -19
  23. package/dist/docs/resources/app_type.md +7 -7
  24. package/dist/docs/resources/authentication.md +29 -29
  25. package/dist/docs/resources/aws_tgw_site.md +140 -140
  26. package/dist/docs/resources/aws_vpc_site.md +174 -174
  27. package/dist/docs/resources/azure_vnet_site.md +245 -245
  28. package/dist/docs/resources/bgp.md +37 -205
  29. package/dist/docs/resources/bgp_asn_set.md +1 -1
  30. package/dist/docs/resources/bgp_routing_policy.md +19 -19
  31. package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
  32. package/dist/docs/resources/cdn_cache_rule.md +5 -5
  33. package/dist/docs/resources/cdn_loadbalancer.md +418 -418
  34. package/dist/docs/resources/certificate.md +1 -1
  35. package/dist/docs/resources/certificate_chain.md +1 -1
  36. package/dist/docs/resources/cloud_connect.md +28 -28
  37. package/dist/docs/resources/cloud_credentials.md +35 -35
  38. package/dist/docs/resources/cloud_elastic_ip.md +8 -8
  39. package/dist/docs/resources/cloud_link.md +36 -36
  40. package/dist/docs/resources/cluster.md +86 -86
  41. package/dist/docs/resources/cminstance.md +22 -22
  42. package/dist/docs/resources/code_base_integration.md +24 -24
  43. package/dist/docs/resources/container_registry.md +13 -13
  44. package/dist/docs/resources/crl.md +1 -1
  45. package/dist/docs/resources/data_type.md +16 -16
  46. package/dist/docs/resources/dc_cluster_group.md +4 -4
  47. package/dist/docs/resources/discovery.md +8 -259
  48. package/dist/docs/resources/dns_compliance_checks.md +1 -1
  49. package/dist/docs/resources/dns_domain.md +3 -3
  50. package/dist/docs/resources/endpoint.md +44 -44
  51. package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
  52. package/dist/docs/resources/external_connector.md +42 -42
  53. package/dist/docs/resources/fast_acl.md +60 -166
  54. package/dist/docs/resources/fast_acl_rule.md +28 -28
  55. package/dist/docs/resources/filter_set.md +10 -10
  56. package/dist/docs/resources/fleet.md +160 -160
  57. package/dist/docs/resources/forward_proxy_policy.md +82 -82
  58. package/dist/docs/resources/forwarding_class.md +14 -14
  59. package/dist/docs/resources/gcp_vpc_site.md +152 -152
  60. package/dist/docs/resources/global_log_receiver.md +238 -238
  61. package/dist/docs/resources/healthcheck.md +17 -17
  62. package/dist/docs/resources/http_loadbalancer.md +1003 -1003
  63. package/dist/docs/resources/irule.md +5 -7
  64. package/dist/docs/resources/log_receiver.md +825 -44
  65. package/dist/docs/resources/malicious_user_mitigation.md +10 -10
  66. package/dist/docs/resources/nat_policy.md +86 -86
  67. package/dist/docs/resources/network_connector.md +31 -31
  68. package/dist/docs/resources/network_firewall.md +22 -22
  69. package/dist/docs/resources/network_interface.md +77 -77
  70. package/dist/docs/resources/network_policy.md +38 -217
  71. package/dist/docs/resources/network_policy_rule.md +21 -21
  72. package/dist/docs/resources/network_policy_view.md +65 -65
  73. package/dist/docs/resources/nfv_service.md +76 -76
  74. package/dist/docs/resources/nginx_service_discovery.md +10 -10
  75. package/dist/docs/resources/origin_pool.md +166 -166
  76. package/dist/docs/resources/policer.md +4 -4
  77. package/dist/docs/resources/policy_based_routing.md +28 -28
  78. package/dist/docs/resources/protocol_inspection.md +12 -12
  79. package/dist/docs/resources/protocol_policer.md +14 -14
  80. package/dist/docs/resources/proxy.md +111 -111
  81. package/dist/docs/resources/rate_limiter.md +15 -15
  82. package/dist/docs/resources/rate_limiter_policy.md +56 -56
  83. package/dist/docs/resources/route.md +183 -183
  84. package/dist/docs/resources/secret_management_access.md +68 -68
  85. package/dist/docs/resources/securemesh_site.md +1619 -258
  86. package/dist/docs/resources/segment.md +4 -4
  87. package/dist/docs/resources/sensitive_data_policy.md +9 -9
  88. package/dist/docs/resources/service_policy.md +175 -175
  89. package/dist/docs/resources/service_policy_rule.md +142 -142
  90. package/dist/docs/resources/site.md +381 -303
  91. package/dist/docs/resources/site_mesh_group.md +18 -18
  92. package/dist/docs/resources/subnet.md +17 -17
  93. package/dist/docs/resources/tcp_loadbalancer.md +130 -130
  94. package/dist/docs/resources/tenant_configuration.md +10 -10
  95. package/dist/docs/resources/trusted_ca_list.md +1 -1
  96. package/dist/docs/resources/tunnel.md +36 -36
  97. package/dist/docs/resources/udp_loadbalancer.md +59 -59
  98. package/dist/docs/resources/usb_policy.md +6 -6
  99. package/dist/docs/resources/user_identification.md +16 -16
  100. package/dist/docs/resources/virtual_host.md +225 -225
  101. package/dist/docs/resources/virtual_network.md +14 -14
  102. package/dist/docs/resources/virtual_site.md +3 -3
  103. package/dist/docs/resources/voltstack_site.md +141 -141
  104. package/dist/docs/resources/waf_exclusion_policy.md +17 -17
  105. package/dist/docs/resources/workload.md +327 -327
  106. package/dist/docs/resources/workload_flavor.md +3 -3
  107. package/dist/metadata/resource-metadata.json +1484 -942
  108. package/dist/types.d.ts +11 -0
  109. package/dist/types.d.ts.map +1 -1
  110. package/dist/types.js.map +1 -1
  111. package/package.json +1 -1
@@ -77,16 +77,16 @@ resource "f5xc_app_firewall" "example" {
77
77
  ### Spec Argument Reference
78
78
 
79
79
  -> **One of the following:**
80
- &#x2022; <a id="ai-risk-based-blocking"></a>[`ai_risk_based_blocking`](#ai-risk-based-blocking) - Optional Block<br>Risk-Based Blocking (Powered by AI) - Preview. All Attack Types, including high, medium, and low accuracy signatures, automatic Attack Signature tuning, Threat Campaigns, and all Violations will be enabled. AI and ML algorithms will assess request risk, and only high-risk requests will be blocked by default. This feature is in preview mode<br>See [Ai Risk Based Blocking](#ai-risk-based-blocking) below for details.
81
- <br><br>&#x2022; <a id="default-detection-settings"></a>[`default_detection_settings`](#default-detection-settings) - Optional Block<br>Enable this option
80
+ &#x2022; <a id="ai-risk-based-blocking"></a>[`ai_risk_based_blocking`](#ai-risk-based-blocking) - Optional Block<br>All Attack Types, including high, medium, and low accuracy signatures, automatic Attack Signature tuning, Threat Campaigns, and all Violations will be enabled. AI and ML algorithms will assess request risk, and only high-risk requests will be blocked by default. This feature is in preview mode<br>See [Ai Risk Based Blocking](#ai-risk-based-blocking) below for details.
81
+ <br><br>&#x2022; <a id="default-detection-settings"></a>[`default_detection_settings`](#default-detection-settings) - Optional Block<br>Can be used for messages where no values are needed
82
82
 
83
83
  -> **One of the following:**
84
- &#x2022; <a id="allow-all-response-codes"></a>[`allow_all_response_codes`](#allow-all-response-codes) - Optional Block<br>Enable this option
85
- <br><br>&#x2022; <a id="allowed-response-codes"></a>[`allowed_response_codes`](#allowed-response-codes) - Optional Block<br>Allowed Response Codes. List of HTTP response status codes that are allowed<br>See [Allowed Response Codes](#allowed-response-codes) below for details.
84
+ &#x2022; <a id="allow-all-response-codes"></a>[`allow_all_response_codes`](#allow-all-response-codes) - Optional Block<br>Can be used for messages where no values are needed
85
+ <br><br>&#x2022; <a id="allowed-response-codes"></a>[`allowed_response_codes`](#allowed-response-codes) - Optional Block<br>List of HTTP response status codes that are allowed<br>See [Allowed Response Codes](#allowed-response-codes) below for details.
86
86
 
87
87
  -> **One of the following:**
88
- &#x2022; <a id="blocking"></a>[`blocking`](#blocking) - Optional Block<br>Enable this option
89
- <br><br>&#x2022; <a id="monitoring"></a>[`monitoring`](#monitoring) - Optional Block<br>Enable this option
88
+ &#x2022; <a id="blocking"></a>[`blocking`](#blocking) - Optional Block<br>Can be used for messages where no values are needed
89
+ <br><br>&#x2022; <a id="monitoring"></a>[`monitoring`](#monitoring) - Optional Block<br>Can be used for messages where no values are needed
90
90
 
91
91
  -> **One of the following:**
92
92
  &#x2022; <a id="blocking-page"></a>[`blocking_page`](#blocking-page) - Optional Block<br>Custom Blocking Response Page. Custom blocking response page body<br>See [Blocking Page](#blocking-page) below for details.
@@ -95,18 +95,18 @@ resource "f5xc_app_firewall" "example" {
95
95
  &#x2022; <a id="bot-protection-setting"></a>[`bot_protection_setting`](#bot-protection-setting) - Optional Block<br>Bot Protection. Configuration of WAF Bot Protection<br>See [Bot Protection Setting](#bot-protection-setting) below for details.
96
96
 
97
97
  -> **One of the following:**
98
- &#x2022; <a id="custom-anonymization"></a>[`custom_anonymization`](#custom-anonymization) - Optional Block<br>Anonymization Configuration. Anonymization settings which is a list of HTTP headers, parameters and cookies<br>See [Custom Anonymization](#custom-anonymization) below for details.
99
- <br><br>&#x2022; <a id="default-anonymization"></a>[`default_anonymization`](#default-anonymization) - Optional Block<br>Enable this option
98
+ &#x2022; <a id="custom-anonymization"></a>[`custom_anonymization`](#custom-anonymization) - Optional Block<br>Anonymization settings which is a list of HTTP headers, parameters and cookies<br>See [Custom Anonymization](#custom-anonymization) below for details.
99
+ <br><br>&#x2022; <a id="default-anonymization"></a>[`default_anonymization`](#default-anonymization) - Optional Block<br>Can be used for messages where no values are needed
100
100
 
101
- <a id="default-bot-setting"></a>&#x2022; [`default_bot_setting`](#default-bot-setting) - Optional Block<br>Enable this option
101
+ <a id="default-bot-setting"></a>&#x2022; [`default_bot_setting`](#default-bot-setting) - Optional Block<br>Can be used for messages where no values are needed
102
102
 
103
- <a id="detection-settings"></a>&#x2022; [`detection_settings`](#detection-settings) - Optional Block<br>Detection Settings. Specifies detection settings to be used by WAF<br>See [Detection Settings](#detection-settings) below for details.
103
+ <a id="detection-settings"></a>&#x2022; [`detection_settings`](#detection-settings) - Optional Block<br>Specifies detection settings to be used by WAF<br>See [Detection Settings](#detection-settings) below for details.
104
104
 
105
- <a id="disable-anonymization"></a>&#x2022; [`disable_anonymization`](#disable-anonymization) - Optional Block<br>Enable this option
105
+ <a id="disable-anonymization"></a>&#x2022; [`disable_anonymization`](#disable-anonymization) - Optional Block<br>Can be used for messages where no values are needed
106
106
 
107
107
  <a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
108
108
 
109
- <a id="use-default-blocking-page"></a>&#x2022; [`use_default_blocking_page`](#use-default-blocking-page) - Optional Block<br>Enable this option
109
+ <a id="use-default-blocking-page"></a>&#x2022; [`use_default_blocking_page`](#use-default-blocking-page) - Optional Block<br>Can be used for messages where no values are needed
110
110
 
111
111
  ### Attributes Reference
112
112
 
@@ -120,69 +120,69 @@ In addition to all arguments above, the following attributes are exported:
120
120
 
121
121
  An [`ai_risk_based_blocking`](#ai-risk-based-blocking) block supports the following:
122
122
 
123
- <a id="ai-risk-based-blocking-high-risk-action"></a>&#x2022; [`high_risk_action`](#ai-risk-based-blocking-high-risk-action) - Optional String Defaults to `AI_BLOCK`<br>Possible values are `AI_BLOCK`, `AI_REPORT`<br>[Enum: AI_BLOCK|AI_REPORT] Risk Based Blocking Action. Action to be performed on the request Log and block Log only
123
+ <a id="ai-risk-based-blocking-high-risk-action"></a>&#x2022; [`high_risk_action`](#ai-risk-based-blocking-high-risk-action) - Optional String Defaults to `AI_BLOCK`<br>Possible values are `AI_BLOCK`, `AI_REPORT`<br>[Enum: AI_BLOCK|AI_REPORT] Action to be performed on the request Log and block Log only
124
124
 
125
- <a id="ai-risk-based-blocking-low-risk-action"></a>&#x2022; [`low_risk_action`](#ai-risk-based-blocking-low-risk-action) - Optional String Defaults to `AI_BLOCK`<br>Possible values are `AI_BLOCK`, `AI_REPORT`<br>[Enum: AI_BLOCK|AI_REPORT] Risk Based Blocking Action. Action to be performed on the request Log and block Log only
125
+ <a id="ai-risk-based-blocking-low-risk-action"></a>&#x2022; [`low_risk_action`](#ai-risk-based-blocking-low-risk-action) - Optional String Defaults to `AI_BLOCK`<br>Possible values are `AI_BLOCK`, `AI_REPORT`<br>[Enum: AI_BLOCK|AI_REPORT] Action to be performed on the request Log and block Log only
126
126
 
127
- <a id="action-da1a5e"></a>&#x2022; [`medium_risk_action`](#action-da1a5e) - Optional String Defaults to `AI_BLOCK`<br>Possible values are `AI_BLOCK`, `AI_REPORT`<br>[Enum: AI_BLOCK|AI_REPORT] Risk Based Blocking Action. Action to be performed on the request Log and block Log only
127
+ <a id="action-da1a5e"></a>&#x2022; [`medium_risk_action`](#action-da1a5e) - Optional String Defaults to `AI_BLOCK`<br>Possible values are `AI_BLOCK`, `AI_REPORT`<br>[Enum: AI_BLOCK|AI_REPORT] Action to be performed on the request Log and block Log only
128
128
 
129
129
  #### Allowed Response Codes
130
130
 
131
131
  An [`allowed_response_codes`](#allowed-response-codes) block supports the following:
132
132
 
133
- <a id="allowed-response-codes-response-code"></a>&#x2022; [`response_code`](#allowed-response-codes-response-code) - Optional List<br>Response Code. List of HTTP response status codes that are allowed
133
+ <a id="allowed-response-codes-response-code"></a>&#x2022; [`response_code`](#allowed-response-codes-response-code) - Optional List<br>List of HTTP response status codes that are allowed
134
134
 
135
135
  #### Blocking Page
136
136
 
137
137
  A [`blocking_page`](#blocking-page) block supports the following:
138
138
 
139
- <a id="blocking-page-blocking-page"></a>&#x2022; [`blocking_page`](#blocking-page-blocking-page) - Optional String<br>Blocking Response Page Body. Define the content of the response page (e.g., an HTML document or a JSON object), use the {{request_id}} placeholder to provide users with a unique identifier to be able to trace the blocked request in the logs. The maximum allowed size of response body is 4096 bytes after base64 encoding, which would be about 3070 bytes in plain text
139
+ <a id="blocking-page-blocking-page"></a>&#x2022; [`blocking_page`](#blocking-page-blocking-page) - Optional String<br>Define the content of the response page (e.g., an HTML document or a JSON object), use the {{request_id}} placeholder to provide users with a unique identifier to be able to trace the blocked request in the logs. The maximum allowed size of response body is 4096 bytes after base64 encoding
140
140
 
141
- <a id="blocking-page-response-code"></a>&#x2022; [`response_code`](#blocking-page-response-code) - Optional String Defaults to `EmptyStatusCode`<br>Possible values are `EmptyStatusCode`, `Continue`, `OK`, `Created`, `Accepted`, `NonAuthoritativeInformation`, `NoContent`, `ResetContent`, `PartialContent`, `MultiStatus`, `AlreadyReported`, `IMUsed`, `MultipleChoices`, `MovedPermanently`, `Found`, `SeeOther`, `NotModified`, `UseProxy`, `TemporaryRedirect`, `PermanentRedirect`, `BadRequest`, `Unauthorized`, `PaymentRequired`, `Forbidden`, `NotFound`, `MethodNotAllowed`, `NotAcceptable`, `ProxyAuthenticationRequired`, `RequestTimeout`, `Conflict`, `Gone`, `LengthRequired`, `PreconditionFailed`, `PayloadTooLarge`, `URITooLong`, `UnsupportedMediaType`, `RangeNotSatisfiable`, `ExpectationFailed`, `MisdirectedRequest`, `UnprocessableEntity`, `Locked`, `FailedDependency`, `UpgradeRequired`, `PreconditionRequired`, `TooManyRequests`, `RequestHeaderFieldsTooLarge`, `InternalServerError`, `NotImplemented`, `BadGateway`, `ServiceUnavailable`, `GatewayTimeout`, `HTTPVersionNotSupported`, `VariantAlsoNegotiates`, `InsufficientStorage`, `LoopDetected`, `NotExtended`, `NetworkAuthenticationRequired`<br>[Enum: EmptyStatusCode|Continue|OK|Created|Accepted|NonAuthoritativeInformation|NoContent|ResetContent|PartialContent|MultiStatus|AlreadyReported|IMUsed|MultipleChoices|MovedPermanently|Found|SeeOther|NotModified|UseProxy|TemporaryRedirect|PermanentRedirect|BadRequest|Unauthorized|PaymentRequired|Forbidden|NotFound|MethodNotAllowed|NotAcceptable|ProxyAuthenticationRequired|RequestTimeout|Conflict|Gone|LengthRequired|PreconditionFailed|PayloadTooLarge|URITooLong|UnsupportedMediaType|RangeNotSatisfiable|ExpectationFailed|MisdirectedRequest|UnprocessableEntity|Locked|FailedDependency|UpgradeRequired|PreconditionRequired|TooManyRequests|RequestHeaderFieldsTooLarge|InternalServerError|NotImplemented|BadGateway|ServiceUnavailable|GatewayTimeout|HTTPVersionNotSupported|VariantAlsoNegotiates|InsufficientStorage|LoopDetected|NotExtended|NetworkAuthenticationRequired] HTTP Status Code. HTTP response status codes EmptyStatusCode response codes means it is not specified Continue status code OK status code Created status code Accepted status code Non Authoritative Information status code No Content status code Reset Content status code Partial Content status code Multi Status status code Already Reported status code Im Used status code Multiple Choices status code Moved Permanently status code Found status code See Other status code Not Modified status code Use Proxy status code Temporary Redirect status code Permanent Redirect status code Bad Request status code Unauthorized status code Payment Required status code Forbidden status code Not Found status code Method Not Allowed status code Not Acceptable status code Proxy Authentication Required status code Request Timeout status code Conflict status code Gone status code Length Required status code Precondition Failed status code Payload Too Large status code URI Too Long status code Unsupported Media Type status code Range Not Satisfiable status code Expectation Failed status code Misdirected Request status code Unprocessable Entity status code Locked status code Failed Dependency status code Upgrade Required status code Precondition Required status code Too Many Requests status code Request Header Fields Too Large status code Internal Server Error status code Not Implemented status code Bad Gateway status code Service Unavailable status code Gateway Timeout status code HTTP Version Not Supported status code Variant Also Negotiates status code Insufficient Storage status code Loop Detected status code Not Extended status code Network Authentication Required status code
141
+ <a id="blocking-page-response-code"></a>&#x2022; [`response_code`](#blocking-page-response-code) - Optional String Defaults to `EmptyStatusCode`<br>Possible values are `EmptyStatusCode`, `Continue`, `OK`, `Created`, `Accepted`, `NonAuthoritativeInformation`, `NoContent`, `ResetContent`, `PartialContent`, `MultiStatus`, `AlreadyReported`, `IMUsed`, `MultipleChoices`, `MovedPermanently`, `Found`, `SeeOther`, `NotModified`, `UseProxy`, `TemporaryRedirect`, `PermanentRedirect`, `BadRequest`, `Unauthorized`, `PaymentRequired`, `Forbidden`, `NotFound`, `MethodNotAllowed`, `NotAcceptable`, `ProxyAuthenticationRequired`, `RequestTimeout`, `Conflict`, `Gone`, `LengthRequired`, `PreconditionFailed`, `PayloadTooLarge`, `URITooLong`, `UnsupportedMediaType`, `RangeNotSatisfiable`, `ExpectationFailed`, `MisdirectedRequest`, `UnprocessableEntity`, `Locked`, `FailedDependency`, `UpgradeRequired`, `PreconditionRequired`, `TooManyRequests`, `RequestHeaderFieldsTooLarge`, `InternalServerError`, `NotImplemented`, `BadGateway`, `ServiceUnavailable`, `GatewayTimeout`, `HTTPVersionNotSupported`, `VariantAlsoNegotiates`, `InsufficientStorage`, `LoopDetected`, `NotExtended`, `NetworkAuthenticationRequired`<br>[Enum: EmptyStatusCode|Continue|OK|Created|Accepted|NonAuthoritativeInformation|NoContent|ResetContent|PartialContent|MultiStatus|AlreadyReported|IMUsed|MultipleChoices|MovedPermanently|Found|SeeOther|NotModified|UseProxy|TemporaryRedirect|PermanentRedirect|BadRequest|Unauthorized|PaymentRequired|Forbidden|NotFound|MethodNotAllowed|NotAcceptable|ProxyAuthenticationRequired|RequestTimeout|Conflict|Gone|LengthRequired|PreconditionFailed|PayloadTooLarge|URITooLong|UnsupportedMediaType|RangeNotSatisfiable|ExpectationFailed|MisdirectedRequest|UnprocessableEntity|Locked|FailedDependency|UpgradeRequired|PreconditionRequired|TooManyRequests|RequestHeaderFieldsTooLarge|InternalServerError|NotImplemented|BadGateway|ServiceUnavailable|GatewayTimeout|HTTPVersionNotSupported|VariantAlsoNegotiates|InsufficientStorage|LoopDetected|NotExtended|NetworkAuthenticationRequired] HTTP response status codes EmptyStatusCode response codes means it is not specified Continue status code OK status code Created status code Accepted status code Non Authoritative Information status code No Content status code Reset Content status code Partial Content status code Multi Status
142
142
 
143
143
  #### Bot Protection Setting
144
144
 
145
145
  A [`bot_protection_setting`](#bot-protection-setting) block supports the following:
146
146
 
147
- <a id="bot-protection-setting-good-bot-action"></a>&#x2022; [`good_bot_action`](#bot-protection-setting-good-bot-action) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Bot Action. Action to be performed on the request Log and block Log only Disable detection
147
+ <a id="bot-protection-setting-good-bot-action"></a>&#x2022; [`good_bot_action`](#bot-protection-setting-good-bot-action) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Action to be performed on the request Log and block Log only Disable detection
148
148
 
149
- <a id="action-a39578"></a>&#x2022; [`malicious_bot_action`](#action-a39578) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Bot Action. Action to be performed on the request Log and block Log only Disable detection
149
+ <a id="action-a39578"></a>&#x2022; [`malicious_bot_action`](#action-a39578) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Action to be performed on the request Log and block Log only Disable detection
150
150
 
151
- <a id="action-7e372f"></a>&#x2022; [`suspicious_bot_action`](#action-7e372f) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Bot Action. Action to be performed on the request Log and block Log only Disable detection
151
+ <a id="action-7e372f"></a>&#x2022; [`suspicious_bot_action`](#action-7e372f) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Action to be performed on the request Log and block Log only Disable detection
152
152
 
153
153
  #### Custom Anonymization
154
154
 
155
155
  A [`custom_anonymization`](#custom-anonymization) block supports the following:
156
156
 
157
- <a id="config-0b4528"></a>&#x2022; [`anonymization_config`](#config-0b4528) - Optional Block<br>Configuration. List of HTTP headers, cookies and query parameters whose values will be masked<br>See [Anonymization Config](#config-0b4528) below.
157
+ <a id="config-0b4528"></a>&#x2022; [`anonymization_config`](#config-0b4528) - Optional Block<br>List of HTTP headers, cookies and query parameters whose values will be masked<br>See [Anonymization Config](#config-0b4528) below.
158
158
 
159
159
  #### Custom Anonymization Anonymization Config
160
160
 
161
161
  An [`anonymization_config`](#config-0b4528) block (within [`custom_anonymization`](#custom-anonymization)) supports the following:
162
162
 
163
- <a id="cookie-df02b1"></a>&#x2022; [`cookie`](#cookie-df02b1) - Optional Block<br>Anonymize HTTP Cookie. Configure anonymization for HTTP Cookies<br>See [Cookie](#cookie-df02b1) below.
163
+ <a id="cookie-df02b1"></a>&#x2022; [`cookie`](#cookie-df02b1) - Optional Block<br>Configure anonymization for HTTP Cookies<br>See [Cookie](#cookie-df02b1) below.
164
164
 
165
- <a id="header-65f784"></a>&#x2022; [`http_header`](#header-65f784) - Optional Block<br>Anonymize HTTP Header. Configure anonymization for HTTP Headers<br>See [HTTP Header](#header-65f784) below.
165
+ <a id="header-65f784"></a>&#x2022; [`http_header`](#header-65f784) - Optional Block<br>Configure anonymization for HTTP Headers<br>See [HTTP Header](#header-65f784) below.
166
166
 
167
- <a id="parameter-dd1b2a"></a>&#x2022; [`query_parameter`](#parameter-dd1b2a) - Optional Block<br>Anonymize HTTP Query Parameter. Configure anonymization for HTTP Parameters<br>See [Query Parameter](#parameter-dd1b2a) below.
167
+ <a id="parameter-dd1b2a"></a>&#x2022; [`query_parameter`](#parameter-dd1b2a) - Optional Block<br>Configure anonymization for HTTP Parameters<br>See [Query Parameter](#parameter-dd1b2a) below.
168
168
 
169
169
  #### Custom Anonymization Anonymization Config Cookie
170
170
 
171
171
  A [`cookie`](#cookie-df02b1) block (within [`custom_anonymization.anonymization_config`](#config-0b4528)) supports the following:
172
172
 
173
- <a id="name-856338"></a>&#x2022; [`cookie_name`](#name-856338) - Optional String<br>Cookie Name. Masks the cookie value. The setting does not mask the cookie name
173
+ <a id="name-856338"></a>&#x2022; [`cookie_name`](#name-856338) - Optional String<br>Masks the cookie value. The setting does not mask the cookie name
174
174
 
175
175
  #### Custom Anonymization Anonymization Config HTTP Header
176
176
 
177
177
  A [`http_header`](#header-65f784) block (within [`custom_anonymization.anonymization_config`](#config-0b4528)) supports the following:
178
178
 
179
- <a id="name-ace46c"></a>&#x2022; [`header_name`](#name-ace46c) - Optional String<br>Header Name. Masks the HTTP header value. The setting does not mask the HTTP header name
179
+ <a id="name-ace46c"></a>&#x2022; [`header_name`](#name-ace46c) - Optional String<br>Masks the HTTP header value. The setting does not mask the HTTP header name
180
180
 
181
181
  #### Custom Anonymization Anonymization Config Query Parameter
182
182
 
183
183
  A [`query_parameter`](#parameter-dd1b2a) block (within [`custom_anonymization.anonymization_config`](#config-0b4528)) supports the following:
184
184
 
185
- <a id="name-043171"></a>&#x2022; [`query_param_name`](#name-043171) - Optional String<br>Query Parameter Name. Masks the query parameter value. The setting does not mask the query parameter name
185
+ <a id="name-043171"></a>&#x2022; [`query_param_name`](#name-043171) - Optional String<br>Masks the query parameter value. The setting does not mask the query parameter name
186
186
 
187
187
  #### Detection Settings
188
188
 
@@ -190,51 +190,51 @@ A [`detection_settings`](#detection-settings) block supports the following:
190
190
 
191
191
  <a id="setting-37e8d9"></a>&#x2022; [`bot_protection_setting`](#setting-37e8d9) - Optional Block<br>Bot Protection. Configuration of WAF Bot Protection<br>See [Bot Protection Setting](#setting-37e8d9) below.
192
192
 
193
- <a id="detection-settings-default-bot-setting"></a>&#x2022; [`default_bot_setting`](#detection-settings-default-bot-setting) - Optional Block<br>Enable this option
193
+ <a id="detection-settings-default-bot-setting"></a>&#x2022; [`default_bot_setting`](#detection-settings-default-bot-setting) - Optional Block<br>Can be used for messages where no values are needed
194
194
 
195
- <a id="settings-da3fa7"></a>&#x2022; [`default_violation_settings`](#settings-da3fa7) - Optional Block<br>Enable this option
195
+ <a id="settings-da3fa7"></a>&#x2022; [`default_violation_settings`](#settings-da3fa7) - Optional Block<br>Can be used for messages where no values are needed
196
196
 
197
- <a id="detection-settings-disable-staging"></a>&#x2022; [`disable_staging`](#detection-settings-disable-staging) - Optional Block<br>Enable this option
197
+ <a id="detection-settings-disable-staging"></a>&#x2022; [`disable_staging`](#detection-settings-disable-staging) - Optional Block<br>Can be used for messages where no values are needed
198
198
 
199
- <a id="detection-settings-disable-suppression"></a>&#x2022; [`disable_suppression`](#detection-settings-disable-suppression) - Optional Block<br>Enable this option
199
+ <a id="detection-settings-disable-suppression"></a>&#x2022; [`disable_suppression`](#detection-settings-disable-suppression) - Optional Block<br>Can be used for messages where no values are needed
200
200
 
201
- <a id="campaigns-7bf1af"></a>&#x2022; [`disable_threat_campaigns`](#campaigns-7bf1af) - Optional Block<br>Enable this option
201
+ <a id="campaigns-7bf1af"></a>&#x2022; [`disable_threat_campaigns`](#campaigns-7bf1af) - Optional Block<br>Can be used for messages where no values are needed
202
202
 
203
- <a id="detection-settings-enable-suppression"></a>&#x2022; [`enable_suppression`](#detection-settings-enable-suppression) - Optional Block<br>Enable this option
203
+ <a id="detection-settings-enable-suppression"></a>&#x2022; [`enable_suppression`](#detection-settings-enable-suppression) - Optional Block<br>Can be used for messages where no values are needed
204
204
 
205
- <a id="campaigns-16aa5e"></a>&#x2022; [`enable_threat_campaigns`](#campaigns-16aa5e) - Optional Block<br>Enable this option
205
+ <a id="campaigns-16aa5e"></a>&#x2022; [`enable_threat_campaigns`](#campaigns-16aa5e) - Optional Block<br>Can be used for messages where no values are needed
206
206
 
207
- <a id="setting-306450"></a>&#x2022; [`signature_selection_setting`](#setting-306450) - Optional Block<br>Attack Signatures. Attack Signatures are patterns that identify attacks on a web application and its components<br>See [Signature Selection Setting](#setting-306450) below.
207
+ <a id="setting-306450"></a>&#x2022; [`signature_selection_setting`](#setting-306450) - Optional Block<br>Attack Signatures are patterns that identify attacks on a web application and its components<br>See [Signature Selection Setting](#setting-306450) below.
208
208
 
209
- <a id="signatures-2278ab"></a>&#x2022; [`stage_new_and_updated_signatures`](#signatures-2278ab) - Optional Block<br>Attack Signatures Staging Settings. Attack Signatures staging configuration<br>See [Stage New And Updated Signatures](#signatures-2278ab) below.
209
+ <a id="signatures-2278ab"></a>&#x2022; [`stage_new_and_updated_signatures`](#signatures-2278ab) - Optional Block<br>Attack Signatures staging configuration<br>See [Stage New And Updated Signatures](#signatures-2278ab) below.
210
210
 
211
- <a id="detection-settings-stage-new-signatures"></a>&#x2022; [`stage_new_signatures`](#detection-settings-stage-new-signatures) - Optional Block<br>Attack Signatures Staging Settings. Attack Signatures staging configuration<br>See [Stage New Signatures](#detection-settings-stage-new-signatures) below.
211
+ <a id="detection-settings-stage-new-signatures"></a>&#x2022; [`stage_new_signatures`](#detection-settings-stage-new-signatures) - Optional Block<br>Attack Signatures staging configuration<br>See [Stage New Signatures](#detection-settings-stage-new-signatures) below.
212
212
 
213
- <a id="detection-settings-violation-settings"></a>&#x2022; [`violation_settings`](#detection-settings-violation-settings) - Optional Block<br>Violation Settings. Specifies violation settings to be used by WAF<br>See [Violation Settings](#detection-settings-violation-settings) below.
213
+ <a id="detection-settings-violation-settings"></a>&#x2022; [`violation_settings`](#detection-settings-violation-settings) - Optional Block<br>Specifies violation settings to be used by WAF<br>See [Violation Settings](#detection-settings-violation-settings) below.
214
214
 
215
215
  #### Detection Settings Bot Protection Setting
216
216
 
217
217
  A [`bot_protection_setting`](#setting-37e8d9) block (within [`detection_settings`](#detection-settings)) supports the following:
218
218
 
219
- <a id="action-1a1e0b"></a>&#x2022; [`good_bot_action`](#action-1a1e0b) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Bot Action. Action to be performed on the request Log and block Log only Disable detection
219
+ <a id="action-1a1e0b"></a>&#x2022; [`good_bot_action`](#action-1a1e0b) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Action to be performed on the request Log and block Log only Disable detection
220
220
 
221
- <a id="action-321642"></a>&#x2022; [`malicious_bot_action`](#action-321642) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Bot Action. Action to be performed on the request Log and block Log only Disable detection
221
+ <a id="action-321642"></a>&#x2022; [`malicious_bot_action`](#action-321642) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Action to be performed on the request Log and block Log only Disable detection
222
222
 
223
- <a id="action-223ae0"></a>&#x2022; [`suspicious_bot_action`](#action-223ae0) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Bot Action. Action to be performed on the request Log and block Log only Disable detection
223
+ <a id="action-223ae0"></a>&#x2022; [`suspicious_bot_action`](#action-223ae0) - Optional String Defaults to `BLOCK`<br>Possible values are `BLOCK`, `REPORT`, `IGNORE`<br>[Enum: BLOCK|REPORT|IGNORE] Action to be performed on the request Log and block Log only Disable detection
224
224
 
225
225
  #### Detection Settings Signature Selection Setting
226
226
 
227
227
  A [`signature_selection_setting`](#setting-306450) block (within [`detection_settings`](#detection-settings)) supports the following:
228
228
 
229
- <a id="settings-72f64b"></a>&#x2022; [`attack_type_settings`](#settings-72f64b) - Optional Block<br>Attack Type Settings. Specifies attack-type settings to be used by WAF<br>See [Attack Type Settings](#settings-72f64b) below.
229
+ <a id="settings-72f64b"></a>&#x2022; [`attack_type_settings`](#settings-72f64b) - Optional Block<br>Specifies attack-type settings to be used by WAF<br>See [Attack Type Settings](#settings-72f64b) below.
230
230
 
231
- <a id="settings-067018"></a>&#x2022; [`default_attack_type_settings`](#settings-067018) - Optional Block<br>Enable this option
231
+ <a id="settings-067018"></a>&#x2022; [`default_attack_type_settings`](#settings-067018) - Optional Block<br>Can be used for messages where no values are needed
232
232
 
233
- <a id="signatures-38e545"></a>&#x2022; [`high_medium_accuracy_signatures`](#signatures-38e545) - Optional Block<br>Enable this option
233
+ <a id="signatures-38e545"></a>&#x2022; [`high_medium_accuracy_signatures`](#signatures-38e545) - Optional Block<br>Can be used for messages where no values are needed
234
234
 
235
- <a id="signatures-b902f3"></a>&#x2022; [`high_medium_low_accuracy_signatures`](#signatures-b902f3) - Optional Block<br>Enable this option
235
+ <a id="signatures-b902f3"></a>&#x2022; [`high_medium_low_accuracy_signatures`](#signatures-b902f3) - Optional Block<br>Can be used for messages where no values are needed
236
236
 
237
- <a id="signatures-a0c47d"></a>&#x2022; [`only_high_accuracy_signatures`](#signatures-a0c47d) - Optional Block<br>Enable this option
237
+ <a id="signatures-a0c47d"></a>&#x2022; [`only_high_accuracy_signatures`](#signatures-a0c47d) - Optional Block<br>Can be used for messages where no values are needed
238
238
 
239
239
  #### Detection Settings Signature Selection Setting Attack Type Settings
240
240
 
@@ -244,19 +244,19 @@ A [`signature_selection_setting`](#setting-306450) block (within [`detection_set
244
244
 
245
245
  A [`stage_new_and_updated_signatures`](#signatures-2278ab) block (within [`detection_settings`](#detection-settings)) supports the following:
246
246
 
247
- <a id="period-dbffd2"></a>&#x2022; [`staging_period`](#period-dbffd2) - Optional Number<br>Staging Period. Define staging period in days. The default staging period is 7 days and the max supported staging period is 20 days
247
+ <a id="period-dbffd2"></a>&#x2022; [`staging_period`](#period-dbffd2) - Optional Number<br>Define staging period in days. The default staging period is 7 days and the max supported staging period is 20 days
248
248
 
249
249
  #### Detection Settings Stage New Signatures
250
250
 
251
251
  A [`stage_new_signatures`](#detection-settings-stage-new-signatures) block (within [`detection_settings`](#detection-settings)) supports the following:
252
252
 
253
- <a id="period-627ff7"></a>&#x2022; [`staging_period`](#period-627ff7) - Optional Number<br>Staging Period. Define staging period in days. The default staging period is 7 days and the max supported staging period is 20 days
253
+ <a id="period-627ff7"></a>&#x2022; [`staging_period`](#period-627ff7) - Optional Number<br>Define staging period in days. The default staging period is 7 days and the max supported staging period is 20 days
254
254
 
255
255
  #### Detection Settings Violation Settings
256
256
 
257
257
  A [`violation_settings`](#detection-settings-violation-settings) block (within [`detection_settings`](#detection-settings)) supports the following:
258
258
 
259
- <a id="types-5a07a0"></a>&#x2022; [`disabled_violation_types`](#types-5a07a0) - Optional List Defaults to `VIOL_NONE`<br>Possible values are `VIOL_NONE`, `VIOL_FILETYPE`, `VIOL_METHOD`, `VIOL_MANDATORY_HEADER`, `VIOL_HTTP_RESPONSE_STATUS`, `VIOL_REQUEST_MAX_LENGTH`, `VIOL_FILE_UPLOAD`, `VIOL_FILE_UPLOAD_IN_BODY`, `VIOL_XML_MALFORMED`, `VIOL_JSON_MALFORMED`, `VIOL_ASM_COOKIE_MODIFIED`, `VIOL_HTTP_PROTOCOL_MULTIPLE_HOST_HEADERS`, `VIOL_HTTP_PROTOCOL_BAD_HOST_HEADER_VALUE`, `VIOL_HTTP_PROTOCOL_UNPARSABLE_REQUEST_CONTENT`, `VIOL_HTTP_PROTOCOL_NULL_IN_REQUEST`, `VIOL_HTTP_PROTOCOL_BAD_HTTP_VERSION`, `VIOL_HTTP_PROTOCOL_SEVERAL_CONTENT_LENGTH_HEADERS`, `VIOL_EVASION_DIRECTORY_TRAVERSALS`, `VIOL_MALFORMED_REQUEST`, `VIOL_EVASION_MULTIPLE_DECODING`, `VIOL_DATA_GUARD`, `VIOL_EVASION_APACHE_WHITESPACE`, `VIOL_COOKIE_MODIFIED`, `VIOL_EVASION_IIS_UNICODE_CODEPOINTS`, `VIOL_EVASION_IIS_BACKSLASHES`, `VIOL_EVASION_PERCENT_U_DECODING`, `VIOL_EVASION_BARE_BYTE_DECODING`, `VIOL_EVASION_BAD_UNESCAPE`, `VIOL_HTTP_PROTOCOL_BODY_IN_GET_OR_HEAD_REQUEST`, `VIOL_ENCODING`, `VIOL_COOKIE_MALFORMED`, `VIOL_GRAPHQL_FORMAT`, `VIOL_GRAPHQL_MALFORMED`, `VIOL_GRAPHQL_INTROSPECTION_QUERY`<br>[Enum: VIOL_NONE|VIOL_FILETYPE|VIOL_METHOD|VIOL_MANDATORY_HEADER|VIOL_HTTP_RESPONSE_STATUS|VIOL_REQUEST_MAX_LENGTH|VIOL_FILE_UPLOAD|VIOL_FILE_UPLOAD_IN_BODY|VIOL_XML_MALFORMED|VIOL_JSON_MALFORMED|VIOL_ASM_COOKIE_MODIFIED|VIOL_HTTP_PROTOCOL_MULTIPLE_HOST_HEADERS|VIOL_HTTP_PROTOCOL_BAD_HOST_HEADER_VALUE|VIOL_HTTP_PROTOCOL_UNPARSABLE_REQUEST_CONTENT|VIOL_HTTP_PROTOCOL_NULL_IN_REQUEST|VIOL_HTTP_PROTOCOL_BAD_HTTP_VERSION|VIOL_HTTP_PROTOCOL_SEVERAL_CONTENT_LENGTH_HEADERS|VIOL_EVASION_DIRECTORY_TRAVERSALS|VIOL_MALFORMED_REQUEST|VIOL_EVASION_MULTIPLE_DECODING|VIOL_DATA_GUARD|VIOL_EVASION_APACHE_WHITESPACE|VIOL_COOKIE_MODIFIED|VIOL_EVASION_IIS_UNICODE_CODEPOINTS|VIOL_EVASION_IIS_BACKSLASHES|VIOL_EVASION_PERCENT_U_DECODING|VIOL_EVASION_BARE_BYTE_DECODING|VIOL_EVASION_BAD_UNESCAPE|VIOL_HTTP_PROTOCOL_BODY_IN_GET_OR_HEAD_REQUEST|VIOL_ENCODING|VIOL_COOKIE_MALFORMED|VIOL_GRAPHQL_FORMAT|VIOL_GRAPHQL_MALFORMED|VIOL_GRAPHQL_INTROSPECTION_QUERY] Disabled Violations. List of violations to be excluded
259
+ <a id="types-5a07a0"></a>&#x2022; [`disabled_violation_types`](#types-5a07a0) - Optional List Defaults to `VIOL_NONE`<br>Possible values are `VIOL_NONE`, `VIOL_FILETYPE`, `VIOL_METHOD`, `VIOL_MANDATORY_HEADER`, `VIOL_HTTP_RESPONSE_STATUS`, `VIOL_REQUEST_MAX_LENGTH`, `VIOL_FILE_UPLOAD`, `VIOL_FILE_UPLOAD_IN_BODY`, `VIOL_XML_MALFORMED`, `VIOL_JSON_MALFORMED`, `VIOL_ASM_COOKIE_MODIFIED`, `VIOL_HTTP_PROTOCOL_MULTIPLE_HOST_HEADERS`, `VIOL_HTTP_PROTOCOL_BAD_HOST_HEADER_VALUE`, `VIOL_HTTP_PROTOCOL_UNPARSABLE_REQUEST_CONTENT`, `VIOL_HTTP_PROTOCOL_NULL_IN_REQUEST`, `VIOL_HTTP_PROTOCOL_BAD_HTTP_VERSION`, `VIOL_HTTP_PROTOCOL_SEVERAL_CONTENT_LENGTH_HEADERS`, `VIOL_EVASION_DIRECTORY_TRAVERSALS`, `VIOL_MALFORMED_REQUEST`, `VIOL_EVASION_MULTIPLE_DECODING`, `VIOL_DATA_GUARD`, `VIOL_EVASION_APACHE_WHITESPACE`, `VIOL_COOKIE_MODIFIED`, `VIOL_EVASION_IIS_UNICODE_CODEPOINTS`, `VIOL_EVASION_IIS_BACKSLASHES`, `VIOL_EVASION_PERCENT_U_DECODING`, `VIOL_EVASION_BARE_BYTE_DECODING`, `VIOL_EVASION_BAD_UNESCAPE`, `VIOL_HTTP_PROTOCOL_BODY_IN_GET_OR_HEAD_REQUEST`, `VIOL_ENCODING`, `VIOL_COOKIE_MALFORMED`, `VIOL_GRAPHQL_FORMAT`, `VIOL_GRAPHQL_MALFORMED`, `VIOL_GRAPHQL_INTROSPECTION_QUERY`<br>[Enum: VIOL_NONE|VIOL_FILETYPE|VIOL_METHOD|VIOL_MANDATORY_HEADER|VIOL_HTTP_RESPONSE_STATUS|VIOL_REQUEST_MAX_LENGTH|VIOL_FILE_UPLOAD|VIOL_FILE_UPLOAD_IN_BODY|VIOL_XML_MALFORMED|VIOL_JSON_MALFORMED|VIOL_ASM_COOKIE_MODIFIED|VIOL_HTTP_PROTOCOL_MULTIPLE_HOST_HEADERS|VIOL_HTTP_PROTOCOL_BAD_HOST_HEADER_VALUE|VIOL_HTTP_PROTOCOL_UNPARSABLE_REQUEST_CONTENT|VIOL_HTTP_PROTOCOL_NULL_IN_REQUEST|VIOL_HTTP_PROTOCOL_BAD_HTTP_VERSION|VIOL_HTTP_PROTOCOL_SEVERAL_CONTENT_LENGTH_HEADERS|VIOL_EVASION_DIRECTORY_TRAVERSALS|VIOL_MALFORMED_REQUEST|VIOL_EVASION_MULTIPLE_DECODING|VIOL_DATA_GUARD|VIOL_EVASION_APACHE_WHITESPACE|VIOL_COOKIE_MODIFIED|VIOL_EVASION_IIS_UNICODE_CODEPOINTS|VIOL_EVASION_IIS_BACKSLASHES|VIOL_EVASION_PERCENT_U_DECODING|VIOL_EVASION_BARE_BYTE_DECODING|VIOL_EVASION_BAD_UNESCAPE|VIOL_HTTP_PROTOCOL_BODY_IN_GET_OR_HEAD_REQUEST|VIOL_ENCODING|VIOL_COOKIE_MALFORMED|VIOL_GRAPHQL_FORMAT|VIOL_GRAPHQL_MALFORMED|VIOL_GRAPHQL_INTROSPECTION_QUERY] List of violations to be excluded
260
260
 
261
261
  #### Timeouts
262
262
 
@@ -32,15 +32,15 @@ resource "f5xc_app_setting" "example" {
32
32
  }
33
33
 
34
34
  # Resource-specific configuration
35
- # Customize AppType For This Namespace. List of settings to...
35
+ # List of settings to enable for each AppType, given instan...
36
36
  app_type_settings {
37
37
  # Configure app_type_settings settings
38
38
  }
39
- # AppType. The AppType of App instance in current Namespace...
39
+ # The AppType of App instance in current Namespace. Associa...
40
40
  app_type_ref {
41
41
  # Configure app_type_ref settings
42
42
  }
43
- # API Discovery. Settings specifying how API Discovery will...
43
+ # Settings specifying how API Discovery will be performed.
44
44
  business_logic_markup_setting {
45
45
  # Configure business_logic_markup_setting settings
46
46
  }
@@ -66,7 +66,7 @@ resource "f5xc_app_setting" "example" {
66
66
 
67
67
  ### Spec Argument Reference
68
68
 
69
- <a id="app-type-settings"></a>&#x2022; [`app_type_settings`](#app-type-settings) - Optional Block<br>Customize AppType For This Namespace. List of settings to enable for each AppType, given instance of AppType Exist in this Namespace<br>See [App Type Settings](#app-type-settings) below for details.
69
+ <a id="app-type-settings"></a>&#x2022; [`app_type_settings`](#app-type-settings) - Optional Block<br>List of settings to enable for each AppType, given instance of AppType Exist in this Namespace<br>See [App Type Settings](#app-type-settings) below for details.
70
70
 
71
71
  <a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
72
72
 
@@ -82,41 +82,41 @@ In addition to all arguments above, the following attributes are exported:
82
82
 
83
83
  An [`app_type_settings`](#app-type-settings) block supports the following:
84
84
 
85
- <a id="app-type-settings-app-type-ref"></a>&#x2022; [`app_type_ref`](#app-type-settings-app-type-ref) - Optional Block<br>AppType. The AppType of App instance in current Namespace. Associating an AppType reference, will enable analysis on this instance's generated data<br>See [App Type Ref](#app-type-settings-app-type-ref) below.
85
+ <a id="app-type-settings-app-type-ref"></a>&#x2022; [`app_type_ref`](#app-type-settings-app-type-ref) - Optional Block<br>The AppType of App instance in current Namespace. Associating an AppType reference, will enable analysis on this instance's generated data<br>See [App Type Ref](#app-type-settings-app-type-ref) below.
86
86
 
87
- <a id="setting-ebbad6"></a>&#x2022; [`business_logic_markup_setting`](#setting-ebbad6) - Optional Block<br>API Discovery. Settings specifying how API Discovery will be performed<br>See [Business Logic Markup Setting](#setting-ebbad6) below.
87
+ <a id="setting-ebbad6"></a>&#x2022; [`business_logic_markup_setting`](#setting-ebbad6) - Optional Block<br>Settings specifying how API Discovery will be performed<br>See [Business Logic Markup Setting](#setting-ebbad6) below.
88
88
 
89
89
  <a id="setting-7d0042"></a>&#x2022; [`timeseries_analyses_setting`](#setting-7d0042) - Optional Block<br>DDOS Settings. Configuration for DDOS Detection<br>See [Timeseries Analyses Setting](#setting-7d0042) below.
90
90
 
91
- <a id="setting-2c7217"></a>&#x2022; [`user_behavior_analysis_setting`](#setting-2c7217) - Optional Block<br>User Behavior Analysis Setting. Configuration for user behavior analysis<br>See [User Behavior Analysis Setting](#setting-2c7217) below.
91
+ <a id="setting-2c7217"></a>&#x2022; [`user_behavior_analysis_setting`](#setting-2c7217) - Optional Block<br>Configuration for user behavior analysis<br>See [User Behavior Analysis Setting](#setting-2c7217) below.
92
92
 
93
93
  #### App Type Settings App Type Ref
94
94
 
95
95
  An [`app_type_ref`](#app-type-settings-app-type-ref) block (within [`app_type_settings`](#app-type-settings)) supports the following:
96
96
 
97
- <a id="app-type-settings-app-type-ref-kind"></a>&#x2022; [`kind`](#app-type-settings-app-type-ref-kind) - Optional String<br>Kind. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
97
+ <a id="app-type-settings-app-type-ref-kind"></a>&#x2022; [`kind`](#app-type-settings-app-type-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
98
98
 
99
- <a id="app-type-settings-app-type-ref-name"></a>&#x2022; [`name`](#app-type-settings-app-type-ref-name) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
99
+ <a id="app-type-settings-app-type-ref-name"></a>&#x2022; [`name`](#app-type-settings-app-type-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
100
100
 
101
- <a id="namespace-49608f"></a>&#x2022; [`namespace`](#namespace-49608f) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
101
+ <a id="namespace-49608f"></a>&#x2022; [`namespace`](#namespace-49608f) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
102
102
 
103
- <a id="app-type-settings-app-type-ref-tenant"></a>&#x2022; [`tenant`](#app-type-settings-app-type-ref-tenant) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
103
+ <a id="app-type-settings-app-type-ref-tenant"></a>&#x2022; [`tenant`](#app-type-settings-app-type-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
104
104
 
105
- <a id="app-type-settings-app-type-ref-uid"></a>&#x2022; [`uid`](#app-type-settings-app-type-ref-uid) - Optional String<br>UID. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
105
+ <a id="app-type-settings-app-type-ref-uid"></a>&#x2022; [`uid`](#app-type-settings-app-type-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
106
106
 
107
107
  #### App Type Settings Business Logic Markup Setting
108
108
 
109
109
  A [`business_logic_markup_setting`](#setting-ebbad6) block (within [`app_type_settings`](#app-type-settings)) supports the following:
110
110
 
111
- <a id="disable-d65146"></a>&#x2022; [`disable`](#disable-d65146) - Optional Block<br>Enable this option
111
+ <a id="disable-d65146"></a>&#x2022; [`disable`](#disable-d65146) - Optional Block<br>Can be used for messages where no values are needed
112
112
 
113
- <a id="enable-280dfb"></a>&#x2022; [`enable`](#enable-280dfb) - Optional Block<br>Enable this option
113
+ <a id="enable-280dfb"></a>&#x2022; [`enable`](#enable-280dfb) - Optional Block<br>Can be used for messages where no values are needed
114
114
 
115
115
  #### App Type Settings Timeseries Analyses Setting
116
116
 
117
117
  A [`timeseries_analyses_setting`](#setting-7d0042) block (within [`app_type_settings`](#app-type-settings)) supports the following:
118
118
 
119
- <a id="selectors-2cc4b7"></a>&#x2022; [`metric_selectors`](#selectors-2cc4b7) - Optional Block<br>Metric Selectors. Define the metric selection criteria, i.e. The metrics source and the actual metrics that should be included in the detection logic<br>See [Metric Selectors](#selectors-2cc4b7) below.
119
+ <a id="selectors-2cc4b7"></a>&#x2022; [`metric_selectors`](#selectors-2cc4b7) - Optional Block<br>Define the metric selection criteria, i.e. The metrics source and the actual metrics that should be included in the detection logic<br>See [Metric Selectors](#selectors-2cc4b7) below.
120
120
 
121
121
  #### App Type Settings Timeseries Analyses Setting Metric Selectors
122
122
 
@@ -126,13 +126,13 @@ A [`timeseries_analyses_setting`](#setting-7d0042) block (within [`app_type_sett
126
126
 
127
127
  An [`user_behavior_analysis_setting`](#setting-2c7217) block (within [`app_type_settings`](#app-type-settings)) supports the following:
128
128
 
129
- <a id="detection-dd4d64"></a>&#x2022; [`disable_detection`](#detection-dd4d64) - Optional Block<br>Enable this option
129
+ <a id="detection-dd4d64"></a>&#x2022; [`disable_detection`](#detection-dd4d64) - Optional Block<br>Can be used for messages where no values are needed
130
130
 
131
- <a id="learning-b549ee"></a>&#x2022; [`disable_learning`](#learning-b549ee) - Optional Block<br>Enable this option
131
+ <a id="learning-b549ee"></a>&#x2022; [`disable_learning`](#learning-b549ee) - Optional Block<br>Can be used for messages where no values are needed
132
132
 
133
- <a id="detection-4127d2"></a>&#x2022; [`enable_detection`](#detection-4127d2) - Optional Block<br>Malicious User Detection Settings. Various factors about user activity are monitored and analysed to determine malicious users. These settings allow tuning those factors used by the system to detect malicious users<br>See [Enable Detection](#detection-4127d2) below.
133
+ <a id="detection-4127d2"></a>&#x2022; [`enable_detection`](#detection-4127d2) - Optional Block<br>Various factors about user activity are monitored and analysed to determine malicious users. These settings allow tuning those factors used by the system to detect malicious users<br>See [Enable Detection](#detection-4127d2) below.
134
134
 
135
- <a id="learning-94d2dc"></a>&#x2022; [`enable_learning`](#learning-94d2dc) - Optional Block<br>Enable this option
135
+ <a id="learning-94d2dc"></a>&#x2022; [`enable_learning`](#learning-94d2dc) - Optional Block<br>Can be used for messages where no values are needed
136
136
 
137
137
  #### App Type Settings User Behavior Analysis Setting Enable Detection
138
138
 
@@ -32,11 +32,11 @@ resource "f5xc_app_type" "example" {
32
32
  }
33
33
 
34
34
  # Resource-specific configuration
35
- # API Discovery Settings. Settings specifying how API Disco...
35
+ # Settings specifying how API Discovery will be performed.
36
36
  business_logic_markup_setting {
37
37
  # Configure business_logic_markup_setting settings
38
38
  }
39
- # Enable this option
39
+ # Can be used for messages where no values are needed.
40
40
  disable {
41
41
  # Configure disable settings
42
42
  }
@@ -66,7 +66,7 @@ resource "f5xc_app_type" "example" {
66
66
 
67
67
  ### Spec Argument Reference
68
68
 
69
- <a id="business-logic-markup-setting"></a>&#x2022; [`business_logic_markup_setting`](#business-logic-markup-setting) - Optional Block<br>API Discovery Settings. Settings specifying how API Discovery will be performed<br>See [Business Logic Markup Setting](#business-logic-markup-setting) below for details.
69
+ <a id="business-logic-markup-setting"></a>&#x2022; [`business_logic_markup_setting`](#business-logic-markup-setting) - Optional Block<br>Settings specifying how API Discovery will be performed<br>See [Business Logic Markup Setting](#business-logic-markup-setting) below for details.
70
70
 
71
71
  <a id="features"></a>&#x2022; [`features`](#features) - Optional Block<br>Features. List of various AI/ML features enabled<br>See [Features](#features) below for details.
72
72
 
@@ -84,23 +84,23 @@ In addition to all arguments above, the following attributes are exported:
84
84
 
85
85
  A [`business_logic_markup_setting`](#business-logic-markup-setting) block supports the following:
86
86
 
87
- <a id="business-logic-markup-setting-disable"></a>&#x2022; [`disable`](#business-logic-markup-setting-disable) - Optional Block<br>Enable this option
87
+ <a id="business-logic-markup-setting-disable"></a>&#x2022; [`disable`](#business-logic-markup-setting-disable) - Optional Block<br>Can be used for messages where no values are needed
88
88
 
89
89
  <a id="settings-c32a65"></a>&#x2022; [`discovered_api_settings`](#settings-c32a65) - Optional Block<br>Discovered API Settings. Configure Discovered API Settings<br>See [Discovered API Settings](#settings-c32a65) below.
90
90
 
91
- <a id="business-logic-markup-setting-enable"></a>&#x2022; [`enable`](#business-logic-markup-setting-enable) - Optional Block<br>Enable this option
91
+ <a id="business-logic-markup-setting-enable"></a>&#x2022; [`enable`](#business-logic-markup-setting-enable) - Optional Block<br>Can be used for messages where no values are needed
92
92
 
93
93
  #### Business Logic Markup Setting Discovered API Settings
94
94
 
95
95
  A [`discovered_api_settings`](#settings-c32a65) block (within [`business_logic_markup_setting`](#business-logic-markup-setting)) supports the following:
96
96
 
97
- <a id="apis-85d7fa"></a>&#x2022; [`purge_duration_for_inactive_discovered_apis`](#apis-85d7fa) - Optional Number<br>Purge Duration for Inactive Discovered APIs from Traffic. Inactive discovered API will be deleted after configured duration
97
+ <a id="apis-85d7fa"></a>&#x2022; [`purge_duration_for_inactive_discovered_apis`](#apis-85d7fa) - Optional Number<br>Inactive discovered API will be deleted after configured duration
98
98
 
99
99
  #### Features
100
100
 
101
101
  A [`features`](#features) block supports the following:
102
102
 
103
- <a id="features-type"></a>&#x2022; [`type`](#features-type) - Optional String Defaults to `BUSINESS_LOGIC_MARKUP`<br>Possible values are `BUSINESS_LOGIC_MARKUP`, `TIMESERIES_ANOMALY_DETECTION`, `PER_REQ_ANOMALY_DETECTION`, `USER_BEHAVIOR_ANALYSIS`<br>[Enum: BUSINESS_LOGIC_MARKUP|TIMESERIES_ANOMALY_DETECTION|PER_REQ_ANOMALY_DETECTION|USER_BEHAVIOR_ANALYSIS] AI/ML Features. Enumeration for AI/ML features supported API Discovery enables generation of model for various API interactions between services of App type. Enable analysis of timeseries for various metric collected like requests, errors, latency etc. Enable anomaly detection per API request, i.e. The probability density function (PDF) charts generation for API endpoints Enable user behavior analysis
103
+ <a id="features-type"></a>&#x2022; [`type`](#features-type) - Optional String Defaults to `BUSINESS_LOGIC_MARKUP`<br>Possible values are `BUSINESS_LOGIC_MARKUP`, `TIMESERIES_ANOMALY_DETECTION`, `PER_REQ_ANOMALY_DETECTION`, `USER_BEHAVIOR_ANALYSIS`<br>[Enum: BUSINESS_LOGIC_MARKUP|TIMESERIES_ANOMALY_DETECTION|PER_REQ_ANOMALY_DETECTION|USER_BEHAVIOR_ANALYSIS] Enumeration for AI/ML features supported API Discovery enables generation of model for various API interactions between services of App type. Enable analysis of timeseries for various metric collected like requests, errors, latency etc. Enable anomaly detection per API request, i.e
104
104
 
105
105
  #### Timeouts
106
106
 
@@ -32,15 +32,15 @@ resource "f5xc_authentication" "example" {
32
32
  }
33
33
 
34
34
  # Resource-specific configuration
35
- # Cookie Parameters. Specifies different cookie related con...
35
+ # Specifies different cookie related config parameters for ...
36
36
  cookie_params {
37
37
  # Configure cookie_params settings
38
38
  }
39
- # HMAC Key Pair. HMAC primary and secondary keys to be used...
39
+ # HMAC primary and secondary keys to be used for hashing th...
40
40
  auth_hmac {
41
41
  # Configure auth_hmac settings
42
42
  }
43
- # Secret. SecretType is used in an object to indicate a sen...
43
+ # SecretType is used in an object to indicate a sensitive/c...
44
44
  prim_key {
45
45
  # Configure prim_key settings
46
46
  }
@@ -66,7 +66,7 @@ resource "f5xc_authentication" "example" {
66
66
 
67
67
  ### Spec Argument Reference
68
68
 
69
- <a id="cookie-params"></a>&#x2022; [`cookie_params`](#cookie-params) - Optional Block<br>Cookie Parameters. Specifies different cookie related config parameters for authentication<br>See [Cookie Params](#cookie-params) below for details.
69
+ <a id="cookie-params"></a>&#x2022; [`cookie_params`](#cookie-params) - Optional Block<br>Specifies different cookie related config parameters for authentication<br>See [Cookie Params](#cookie-params) below for details.
70
70
 
71
71
  <a id="oidc-auth"></a>&#x2022; [`oidc_auth`](#oidc-auth) - Optional Block<br>OIDCAuthType<br>See [OIDC Auth](#oidc-auth) below for details.
72
72
 
@@ -84,35 +84,35 @@ In addition to all arguments above, the following attributes are exported:
84
84
 
85
85
  A [`cookie_params`](#cookie-params) block supports the following:
86
86
 
87
- <a id="cookie-params-auth-hmac"></a>&#x2022; [`auth_hmac`](#cookie-params-auth-hmac) - Optional Block<br>HMAC Key Pair. HMAC primary and secondary keys to be used for hashing the Cookie. Each key also have an associated expiry timestamp, beyond which key is invalid<br>See [Auth HMAC](#cookie-params-auth-hmac) below.
87
+ <a id="cookie-params-auth-hmac"></a>&#x2022; [`auth_hmac`](#cookie-params-auth-hmac) - Optional Block<br>HMAC primary and secondary keys to be used for hashing the Cookie. Each key also have an associated expiry timestamp, beyond which key is invalid<br>See [Auth HMAC](#cookie-params-auth-hmac) below.
88
88
 
89
- <a id="cookie-params-cookie-expiry"></a>&#x2022; [`cookie_expiry`](#cookie-params-cookie-expiry) - Optional Number<br>Cookie Expiry duration. Specifies in seconds max duration of the allocated cookie. This maps to “Max-Age” attribute in the session cookie. This will act as an expiry duration on the client side after which client will not be setting the cookie as part of the request. Default cookie expiry is 3600 seconds
89
+ <a id="cookie-params-cookie-expiry"></a>&#x2022; [`cookie_expiry`](#cookie-params-cookie-expiry) - Optional Number<br>Specifies in seconds max duration of the allocated cookie. This maps to “Max-Age” attribute in the session cookie. This will act as an expiry duration on the client side after which client will not be setting the cookie as part of the request
90
90
 
91
- <a id="cookie-params-cookie-refresh-interval"></a>&#x2022; [`cookie_refresh_interval`](#cookie-params-cookie-refresh-interval) - Optional Number<br>Cookie Refresh Interval. Specifies in seconds refresh interval for session cookie. This is used to keep the active user active and reduce RE-login. When an incoming cookie's session expiry is still valid, and time to expire falls behind this interval, RE-issue a cookie with new expiry and with the same original session expiry. Default refresh interval is 3000 seconds
91
+ <a id="cookie-params-cookie-refresh-interval"></a>&#x2022; [`cookie_refresh_interval`](#cookie-params-cookie-refresh-interval) - Optional Number<br>Specifies in seconds refresh interval for session cookie. This is used to keep the active user active and reduce RE-login. When an incoming cookie's session expiry is still valid, and time to expire falls behind this interval, RE-issue a cookie with new expiry and with the same original session
92
92
 
93
93
  <a id="cookie-params-kms-key-hmac"></a>&#x2022; [`kms_key_hmac`](#cookie-params-kms-key-hmac) - Optional Block<br>KMS Key Reference. Reference to KMS Key Object
94
94
 
95
- <a id="cookie-params-session-expiry"></a>&#x2022; [`session_expiry`](#cookie-params-session-expiry) - Optional Number<br>Session Expiry duration. Specifies in seconds max lifetime of an authenticated session after which the user will be forced to login again. Default session expiry is 86400 seconds(24 hours)
95
+ <a id="cookie-params-session-expiry"></a>&#x2022; [`session_expiry`](#cookie-params-session-expiry) - Optional Number<br>Specifies in seconds max lifetime of an authenticated session after which the user will be forced to login again. Default session expiry is 86400 seconds(24 hours)
96
96
 
97
97
  #### Cookie Params Auth HMAC
98
98
 
99
99
  An [`auth_hmac`](#cookie-params-auth-hmac) block (within [`cookie_params`](#cookie-params)) supports the following:
100
100
 
101
- <a id="cookie-params-auth-hmac-prim-key"></a>&#x2022; [`prim_key`](#cookie-params-auth-hmac-prim-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Prim Key](#cookie-params-auth-hmac-prim-key) below.
101
+ <a id="cookie-params-auth-hmac-prim-key"></a>&#x2022; [`prim_key`](#cookie-params-auth-hmac-prim-key) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Prim Key](#cookie-params-auth-hmac-prim-key) below.
102
102
 
103
- <a id="cookie-params-auth-hmac-prim-key-expiry"></a>&#x2022; [`prim_key_expiry`](#cookie-params-auth-hmac-prim-key-expiry) - Optional String<br>HMAC Primary Key Expiry. Primary HMAC Key Expiry time
103
+ <a id="cookie-params-auth-hmac-prim-key-expiry"></a>&#x2022; [`prim_key_expiry`](#cookie-params-auth-hmac-prim-key-expiry) - Optional String<br>Primary HMAC Key Expiry time
104
104
 
105
- <a id="cookie-params-auth-hmac-sec-key"></a>&#x2022; [`sec_key`](#cookie-params-auth-hmac-sec-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Sec Key](#cookie-params-auth-hmac-sec-key) below.
105
+ <a id="cookie-params-auth-hmac-sec-key"></a>&#x2022; [`sec_key`](#cookie-params-auth-hmac-sec-key) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Sec Key](#cookie-params-auth-hmac-sec-key) below.
106
106
 
107
- <a id="cookie-params-auth-hmac-sec-key-expiry"></a>&#x2022; [`sec_key_expiry`](#cookie-params-auth-hmac-sec-key-expiry) - Optional String<br>HMAC Secondary Key Expiry. Secondary HMAC Key Expiry time
107
+ <a id="cookie-params-auth-hmac-sec-key-expiry"></a>&#x2022; [`sec_key_expiry`](#cookie-params-auth-hmac-sec-key-expiry) - Optional String<br>Secondary HMAC Key Expiry time
108
108
 
109
109
  #### Cookie Params Auth HMAC Prim Key
110
110
 
111
111
  A [`prim_key`](#cookie-params-auth-hmac-prim-key) block (within [`cookie_params.auth_hmac`](#cookie-params-auth-hmac)) supports the following:
112
112
 
113
- <a id="info-6001c9"></a>&#x2022; [`blindfold_secret_info`](#info-6001c9) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-6001c9) below.
113
+ <a id="info-6001c9"></a>&#x2022; [`blindfold_secret_info`](#info-6001c9) - Optional Block<br>BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-6001c9) below.
114
114
 
115
- <a id="info-73f0e1"></a>&#x2022; [`clear_secret_info`](#info-73f0e1) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-73f0e1) below.
115
+ <a id="info-73f0e1"></a>&#x2022; [`clear_secret_info`](#info-73f0e1) - Optional Block<br>ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-73f0e1) below.
116
116
 
117
117
  #### Cookie Params Auth HMAC Prim Key Blindfold Secret Info
118
118
 
@@ -126,9 +126,9 @@ A [`prim_key`](#cookie-params-auth-hmac-prim-key) block (within [`cookie_params.
126
126
 
127
127
  A [`sec_key`](#cookie-params-auth-hmac-sec-key) block (within [`cookie_params.auth_hmac`](#cookie-params-auth-hmac)) supports the following:
128
128
 
129
- <a id="info-e2433d"></a>&#x2022; [`blindfold_secret_info`](#info-e2433d) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-e2433d) below.
129
+ <a id="info-e2433d"></a>&#x2022; [`blindfold_secret_info`](#info-e2433d) - Optional Block<br>BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-e2433d) below.
130
130
 
131
- <a id="info-15d634"></a>&#x2022; [`clear_secret_info`](#info-15d634) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-15d634) below.
131
+ <a id="info-15d634"></a>&#x2022; [`clear_secret_info`](#info-15d634) - Optional Block<br>ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-15d634) below.
132
132
 
133
133
  #### Cookie Params Auth HMAC Sec Key Blindfold Secret Info
134
134
 
@@ -142,49 +142,49 @@ A [`sec_key`](#cookie-params-auth-hmac-sec-key) block (within [`cookie_params.au
142
142
 
143
143
  An [`oidc_auth`](#oidc-auth) block supports the following:
144
144
 
145
- <a id="oidc-auth-client-secret"></a>&#x2022; [`client_secret`](#oidc-auth-client-secret) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Client Secret](#oidc-auth-client-secret) below.
145
+ <a id="oidc-auth-client-secret"></a>&#x2022; [`client_secret`](#oidc-auth-client-secret) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Client Secret](#oidc-auth-client-secret) below.
146
146
 
147
147
  <a id="oidc-auth-oidc-auth-params"></a>&#x2022; [`oidc_auth_params`](#oidc-auth-oidc-auth-params) - Optional Block<br>OIDCAuthParams<br>See [OIDC Auth Params](#oidc-auth-oidc-auth-params) below.
148
148
 
149
- <a id="oidc-auth-oidc-client-id"></a>&#x2022; [`oidc_client_id`](#oidc-auth-oidc-client-id) - Optional String<br>OIDC Client ID. Client ID used while sending the Authorization Request to OIDC server
149
+ <a id="oidc-auth-oidc-client-id"></a>&#x2022; [`oidc_client_id`](#oidc-auth-oidc-client-id) - Optional String<br>Client ID used while sending the Authorization Request to OIDC server
150
150
 
151
- <a id="oidc-auth-oidc-well-known-config-url"></a>&#x2022; [`oidc_well_known_config_url`](#oidc-auth-oidc-well-known-config-url) - Optional String<br>Well-known Configuration URL. An OIDC well-known configuration URL that will be used to fetch authentication related endpoints
151
+ <a id="oidc-auth-oidc-well-known-config-url"></a>&#x2022; [`oidc_well_known_config_url`](#oidc-auth-oidc-well-known-config-url) - Optional String<br>An OIDC well-known configuration URL that will be used to fetch authentication related endpoints
152
152
 
153
153
  #### OIDC Auth Client Secret
154
154
 
155
155
  A [`client_secret`](#oidc-auth-client-secret) block (within [`oidc_auth`](#oidc-auth)) supports the following:
156
156
 
157
- <a id="info-672642"></a>&#x2022; [`blindfold_secret_info`](#info-672642) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-672642) below.
157
+ <a id="info-672642"></a>&#x2022; [`blindfold_secret_info`](#info-672642) - Optional Block<br>BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-672642) below.
158
158
 
159
- <a id="info-b8137a"></a>&#x2022; [`clear_secret_info`](#info-b8137a) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-b8137a) below.
159
+ <a id="info-b8137a"></a>&#x2022; [`clear_secret_info`](#info-b8137a) - Optional Block<br>ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-b8137a) below.
160
160
 
161
161
  #### OIDC Auth Client Secret Blindfold Secret Info
162
162
 
163
163
  A [`blindfold_secret_info`](#info-672642) block (within [`oidc_auth.client_secret`](#oidc-auth-client-secret)) supports the following:
164
164
 
165
- <a id="provider-0b6f3e"></a>&#x2022; [`decryption_provider`](#provider-0b6f3e) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
165
+ <a id="provider-0b6f3e"></a>&#x2022; [`decryption_provider`](#provider-0b6f3e) - Optional String<br>Name of the Secret Management Access object that contains information about the backend Secret Management service
166
166
 
167
- <a id="location-102885"></a>&#x2022; [`location`](#location-102885) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
167
+ <a id="location-102885"></a>&#x2022; [`location`](#location-102885) - Optional String<br>Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
168
168
 
169
- <a id="provider-3da802"></a>&#x2022; [`store_provider`](#provider-3da802) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
169
+ <a id="provider-3da802"></a>&#x2022; [`store_provider`](#provider-3da802) - Optional String<br>Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
170
170
 
171
171
  #### OIDC Auth Client Secret Clear Secret Info
172
172
 
173
173
  A [`clear_secret_info`](#info-b8137a) block (within [`oidc_auth.client_secret`](#oidc-auth-client-secret)) supports the following:
174
174
 
175
- <a id="ref-4470bf"></a>&#x2022; [`provider_ref`](#ref-4470bf) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
175
+ <a id="ref-4470bf"></a>&#x2022; [`provider_ref`](#ref-4470bf) - Optional String<br>Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
176
176
 
177
- <a id="url-6086d3"></a>&#x2022; [`url`](#url-6086d3) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
177
+ <a id="url-6086d3"></a>&#x2022; [`url`](#url-6086d3) - Optional String<br>URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
178
178
 
179
179
  #### OIDC Auth OIDC Auth Params
180
180
 
181
181
  An [`oidc_auth_params`](#oidc-auth-oidc-auth-params) block (within [`oidc_auth`](#oidc-auth)) supports the following:
182
182
 
183
- <a id="url-f36686"></a>&#x2022; [`auth_endpoint_url`](#url-f36686) - Optional String<br>Authorization Endpoint. URL of the authorization server's authorization endpoint
183
+ <a id="url-f36686"></a>&#x2022; [`auth_endpoint_url`](#url-f36686) - Optional String<br>URL of the authorization server's authorization endpoint
184
184
 
185
- <a id="url-e9b22b"></a>&#x2022; [`end_session_endpoint_url`](#url-e9b22b) - Optional String<br>Logout Endpoint. URL of the authorization server's Logout endpoint
185
+ <a id="url-e9b22b"></a>&#x2022; [`end_session_endpoint_url`](#url-e9b22b) - Optional String<br>URL of the authorization server's Logout endpoint
186
186
 
187
- <a id="url-75b563"></a>&#x2022; [`token_endpoint_url`](#url-75b563) - Optional String<br>Token Endpoint. URL of the authorization server's Token endpoint
187
+ <a id="url-75b563"></a>&#x2022; [`token_endpoint_url`](#url-75b563) - Optional String<br>URL of the authorization server's Token endpoint
188
188
 
189
189
  #### Timeouts
190
190