pulumi-cloudngfwaws 0.2.0a1759529059__py3-none-any.whl → 1.1.0a1762407264__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -21,46 +21,64 @@ __all__ = ['NgfwArgs', 'Ngfw']
21
21
  @pulumi.input_type
22
22
  class NgfwArgs:
23
23
  def __init__(__self__, *,
24
- endpoint_mode: pulumi.Input[_builtins.str],
25
- subnet_mappings: pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]],
26
- vpc_id: pulumi.Input[_builtins.str],
24
+ az_lists: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]],
27
25
  account_id: Optional[pulumi.Input[_builtins.str]] = None,
26
+ allowlist_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
28
27
  app_id_version: Optional[pulumi.Input[_builtins.str]] = None,
29
28
  automatic_upgrade_app_id_version: Optional[pulumi.Input[_builtins.bool]] = None,
29
+ change_protections: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
30
30
  description: Optional[pulumi.Input[_builtins.str]] = None,
31
+ egress_nats: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEgressNatArgs']]]] = None,
32
+ endpoint_mode: Optional[pulumi.Input[_builtins.str]] = None,
33
+ endpoints: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEndpointArgs']]]] = None,
31
34
  global_rulestack: Optional[pulumi.Input[_builtins.str]] = None,
32
35
  link_id: Optional[pulumi.Input[_builtins.str]] = None,
33
36
  multi_vpc: Optional[pulumi.Input[_builtins.bool]] = None,
34
37
  name: Optional[pulumi.Input[_builtins.str]] = None,
38
+ private_accesses: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwPrivateAccessArgs']]]] = None,
35
39
  rulestack: Optional[pulumi.Input[_builtins.str]] = None,
36
- tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None):
40
+ subnet_mappings: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]]] = None,
41
+ tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
42
+ user_ids: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwUserIdArgs']]]] = None,
43
+ vpc_id: Optional[pulumi.Input[_builtins.str]] = None):
37
44
  """
38
45
  The set of arguments for constructing a Ngfw resource.
39
- :param pulumi.Input[_builtins.str] endpoint_mode: Set endpoint mode from the following options. Valid values are `ServiceManaged` or `CustomerManaged`.
40
- :param pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]] subnet_mappings: Subnet mappings.
41
- :param pulumi.Input[_builtins.str] vpc_id: The vpc id.
42
- :param pulumi.Input[_builtins.str] account_id: The account ID. This field is mandatory if using multiple accounts.
46
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] az_lists: The list of availability zones for this NGFW.
47
+ :param pulumi.Input[_builtins.str] account_id: The description.
48
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowlist_accounts: The list of allowed accounts for this NGFW.
43
49
  :param pulumi.Input[_builtins.str] app_id_version: App-ID version number.
44
50
  :param pulumi.Input[_builtins.bool] automatic_upgrade_app_id_version: Automatic App-ID upgrade version number. Defaults to `true`.
45
- :param pulumi.Input[_builtins.str] description: The description.
51
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] change_protections: Enables or disables change protection for the NGFW.
52
+ :param pulumi.Input[_builtins.str] description: The NGFW description.
53
+ :param pulumi.Input[_builtins.str] endpoint_mode: Set endpoint mode from the following options. Valid values are `ServiceManaged` or `CustomerManaged`.
46
54
  :param pulumi.Input[_builtins.str] global_rulestack: The global rulestack for this NGFW.
47
- :param pulumi.Input[_builtins.str] link_id: A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
55
+ :param pulumi.Input[_builtins.str] link_id: The link ID.
48
56
  :param pulumi.Input[_builtins.bool] multi_vpc: Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
49
57
  :param pulumi.Input[_builtins.str] name: The NGFW name.
50
58
  :param pulumi.Input[_builtins.str] rulestack: The rulestack for this NGFW.
59
+ :param pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]] subnet_mappings: Subnet mappings.
51
60
  :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: The tags.
61
+ :param pulumi.Input[_builtins.str] vpc_id: The VPC ID for the NGFW.
52
62
  """
53
- pulumi.set(__self__, "endpoint_mode", endpoint_mode)
54
- pulumi.set(__self__, "subnet_mappings", subnet_mappings)
55
- pulumi.set(__self__, "vpc_id", vpc_id)
63
+ pulumi.set(__self__, "az_lists", az_lists)
56
64
  if account_id is not None:
57
65
  pulumi.set(__self__, "account_id", account_id)
66
+ if allowlist_accounts is not None:
67
+ pulumi.set(__self__, "allowlist_accounts", allowlist_accounts)
58
68
  if app_id_version is not None:
59
69
  pulumi.set(__self__, "app_id_version", app_id_version)
60
70
  if automatic_upgrade_app_id_version is not None:
61
71
  pulumi.set(__self__, "automatic_upgrade_app_id_version", automatic_upgrade_app_id_version)
72
+ if change_protections is not None:
73
+ pulumi.set(__self__, "change_protections", change_protections)
62
74
  if description is not None:
63
75
  pulumi.set(__self__, "description", description)
76
+ if egress_nats is not None:
77
+ pulumi.set(__self__, "egress_nats", egress_nats)
78
+ if endpoint_mode is not None:
79
+ pulumi.set(__self__, "endpoint_mode", endpoint_mode)
80
+ if endpoints is not None:
81
+ pulumi.set(__self__, "endpoints", endpoints)
64
82
  if global_rulestack is not None:
65
83
  pulumi.set(__self__, "global_rulestack", global_rulestack)
66
84
  if link_id is not None:
@@ -69,52 +87,36 @@ class NgfwArgs:
69
87
  pulumi.set(__self__, "multi_vpc", multi_vpc)
70
88
  if name is not None:
71
89
  pulumi.set(__self__, "name", name)
90
+ if private_accesses is not None:
91
+ pulumi.set(__self__, "private_accesses", private_accesses)
72
92
  if rulestack is not None:
73
93
  pulumi.set(__self__, "rulestack", rulestack)
94
+ if subnet_mappings is not None:
95
+ pulumi.set(__self__, "subnet_mappings", subnet_mappings)
74
96
  if tags is not None:
75
97
  pulumi.set(__self__, "tags", tags)
98
+ if user_ids is not None:
99
+ pulumi.set(__self__, "user_ids", user_ids)
100
+ if vpc_id is not None:
101
+ pulumi.set(__self__, "vpc_id", vpc_id)
76
102
 
77
103
  @_builtins.property
78
- @pulumi.getter(name="endpointMode")
79
- def endpoint_mode(self) -> pulumi.Input[_builtins.str]:
80
- """
81
- Set endpoint mode from the following options. Valid values are `ServiceManaged` or `CustomerManaged`.
82
- """
83
- return pulumi.get(self, "endpoint_mode")
84
-
85
- @endpoint_mode.setter
86
- def endpoint_mode(self, value: pulumi.Input[_builtins.str]):
87
- pulumi.set(self, "endpoint_mode", value)
88
-
89
- @_builtins.property
90
- @pulumi.getter(name="subnetMappings")
91
- def subnet_mappings(self) -> pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]]:
92
- """
93
- Subnet mappings.
94
- """
95
- return pulumi.get(self, "subnet_mappings")
96
-
97
- @subnet_mappings.setter
98
- def subnet_mappings(self, value: pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]]):
99
- pulumi.set(self, "subnet_mappings", value)
100
-
101
- @_builtins.property
102
- @pulumi.getter(name="vpcId")
103
- def vpc_id(self) -> pulumi.Input[_builtins.str]:
104
+ @pulumi.getter(name="azLists")
105
+ def az_lists(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]:
104
106
  """
105
- The vpc id.
107
+ The list of availability zones for this NGFW.
106
108
  """
107
- return pulumi.get(self, "vpc_id")
109
+ return pulumi.get(self, "az_lists")
108
110
 
109
- @vpc_id.setter
110
- def vpc_id(self, value: pulumi.Input[_builtins.str]):
111
- pulumi.set(self, "vpc_id", value)
111
+ @az_lists.setter
112
+ def az_lists(self, value: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
113
+ pulumi.set(self, "az_lists", value)
112
114
 
113
115
  @_builtins.property
114
116
  @pulumi.getter(name="accountId")
115
117
  def account_id(self) -> Optional[pulumi.Input[_builtins.str]]:
116
118
  """
117
- The account ID. This field is mandatory if using multiple accounts.
119
+ The description.
118
120
  """
119
121
  return pulumi.get(self, "account_id")
120
122
 
@@ -122,6 +124,18 @@ class NgfwArgs:
122
124
  def account_id(self, value: Optional[pulumi.Input[_builtins.str]]):
123
125
  pulumi.set(self, "account_id", value)
124
126
 
127
+ @_builtins.property
128
+ @pulumi.getter(name="allowlistAccounts")
129
+ def allowlist_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
130
+ """
131
+ The list of allowed accounts for this NGFW.
132
+ """
133
+ return pulumi.get(self, "allowlist_accounts")
134
+
135
+ @allowlist_accounts.setter
136
+ def allowlist_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
137
+ pulumi.set(self, "allowlist_accounts", value)
138
+
125
139
  @_builtins.property
126
140
  @pulumi.getter(name="appIdVersion")
127
141
  def app_id_version(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -146,11 +160,23 @@ class NgfwArgs:
146
160
  def automatic_upgrade_app_id_version(self, value: Optional[pulumi.Input[_builtins.bool]]):
147
161
  pulumi.set(self, "automatic_upgrade_app_id_version", value)
148
162
 
163
+ @_builtins.property
164
+ @pulumi.getter(name="changeProtections")
165
+ def change_protections(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
166
+ """
167
+ Enables or disables change protection for the NGFW.
168
+ """
169
+ return pulumi.get(self, "change_protections")
170
+
171
+ @change_protections.setter
172
+ def change_protections(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
173
+ pulumi.set(self, "change_protections", value)
174
+
149
175
  @_builtins.property
150
176
  @pulumi.getter
151
177
  def description(self) -> Optional[pulumi.Input[_builtins.str]]:
152
178
  """
153
- The description.
179
+ The NGFW description.
154
180
  """
155
181
  return pulumi.get(self, "description")
156
182
 
@@ -158,6 +184,36 @@ class NgfwArgs:
158
184
  def description(self, value: Optional[pulumi.Input[_builtins.str]]):
159
185
  pulumi.set(self, "description", value)
160
186
 
187
+ @_builtins.property
188
+ @pulumi.getter(name="egressNats")
189
+ def egress_nats(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEgressNatArgs']]]]:
190
+ return pulumi.get(self, "egress_nats")
191
+
192
+ @egress_nats.setter
193
+ def egress_nats(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEgressNatArgs']]]]):
194
+ pulumi.set(self, "egress_nats", value)
195
+
196
+ @_builtins.property
197
+ @pulumi.getter(name="endpointMode")
198
+ def endpoint_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
199
+ """
200
+ Set endpoint mode from the following options. Valid values are `ServiceManaged` or `CustomerManaged`.
201
+ """
202
+ return pulumi.get(self, "endpoint_mode")
203
+
204
+ @endpoint_mode.setter
205
+ def endpoint_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
206
+ pulumi.set(self, "endpoint_mode", value)
207
+
208
+ @_builtins.property
209
+ @pulumi.getter
210
+ def endpoints(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEndpointArgs']]]]:
211
+ return pulumi.get(self, "endpoints")
212
+
213
+ @endpoints.setter
214
+ def endpoints(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEndpointArgs']]]]):
215
+ pulumi.set(self, "endpoints", value)
216
+
161
217
  @_builtins.property
162
218
  @pulumi.getter(name="globalRulestack")
163
219
  def global_rulestack(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -174,7 +230,7 @@ class NgfwArgs:
174
230
  @pulumi.getter(name="linkId")
175
231
  def link_id(self) -> Optional[pulumi.Input[_builtins.str]]:
176
232
  """
177
- A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
233
+ The link ID.
178
234
  """
179
235
  return pulumi.get(self, "link_id")
180
236
 
@@ -206,6 +262,15 @@ class NgfwArgs:
206
262
  def name(self, value: Optional[pulumi.Input[_builtins.str]]):
207
263
  pulumi.set(self, "name", value)
208
264
 
265
+ @_builtins.property
266
+ @pulumi.getter(name="privateAccesses")
267
+ def private_accesses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwPrivateAccessArgs']]]]:
268
+ return pulumi.get(self, "private_accesses")
269
+
270
+ @private_accesses.setter
271
+ def private_accesses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwPrivateAccessArgs']]]]):
272
+ pulumi.set(self, "private_accesses", value)
273
+
209
274
  @_builtins.property
210
275
  @pulumi.getter
211
276
  def rulestack(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -218,6 +283,18 @@ class NgfwArgs:
218
283
  def rulestack(self, value: Optional[pulumi.Input[_builtins.str]]):
219
284
  pulumi.set(self, "rulestack", value)
220
285
 
286
+ @_builtins.property
287
+ @pulumi.getter(name="subnetMappings")
288
+ def subnet_mappings(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]]]:
289
+ """
290
+ Subnet mappings.
291
+ """
292
+ return pulumi.get(self, "subnet_mappings")
293
+
294
+ @subnet_mappings.setter
295
+ def subnet_mappings(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]]]):
296
+ pulumi.set(self, "subnet_mappings", value)
297
+
221
298
  @_builtins.property
222
299
  @pulumi.getter
223
300
  def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
@@ -230,39 +307,72 @@ class NgfwArgs:
230
307
  def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
231
308
  pulumi.set(self, "tags", value)
232
309
 
310
+ @_builtins.property
311
+ @pulumi.getter(name="userIds")
312
+ def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwUserIdArgs']]]]:
313
+ return pulumi.get(self, "user_ids")
314
+
315
+ @user_ids.setter
316
+ def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwUserIdArgs']]]]):
317
+ pulumi.set(self, "user_ids", value)
318
+
319
+ @_builtins.property
320
+ @pulumi.getter(name="vpcId")
321
+ def vpc_id(self) -> Optional[pulumi.Input[_builtins.str]]:
322
+ """
323
+ The VPC ID for the NGFW.
324
+ """
325
+ return pulumi.get(self, "vpc_id")
326
+
327
+ @vpc_id.setter
328
+ def vpc_id(self, value: Optional[pulumi.Input[_builtins.str]]):
329
+ pulumi.set(self, "vpc_id", value)
330
+
233
331
 
234
332
  @pulumi.input_type
235
333
  class _NgfwState:
236
334
  def __init__(__self__, *,
237
335
  account_id: Optional[pulumi.Input[_builtins.str]] = None,
336
+ allowlist_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
238
337
  app_id_version: Optional[pulumi.Input[_builtins.str]] = None,
239
338
  automatic_upgrade_app_id_version: Optional[pulumi.Input[_builtins.bool]] = None,
339
+ az_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
340
+ change_protections: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
341
+ deployment_update_token: Optional[pulumi.Input[_builtins.str]] = None,
240
342
  description: Optional[pulumi.Input[_builtins.str]] = None,
343
+ egress_nats: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEgressNatArgs']]]] = None,
241
344
  endpoint_mode: Optional[pulumi.Input[_builtins.str]] = None,
242
345
  endpoint_service_name: Optional[pulumi.Input[_builtins.str]] = None,
346
+ endpoints: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEndpointArgs']]]] = None,
243
347
  firewall_id: Optional[pulumi.Input[_builtins.str]] = None,
244
348
  global_rulestack: Optional[pulumi.Input[_builtins.str]] = None,
245
349
  link_id: Optional[pulumi.Input[_builtins.str]] = None,
246
350
  link_status: Optional[pulumi.Input[_builtins.str]] = None,
247
351
  multi_vpc: Optional[pulumi.Input[_builtins.bool]] = None,
248
352
  name: Optional[pulumi.Input[_builtins.str]] = None,
353
+ private_accesses: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwPrivateAccessArgs']]]] = None,
249
354
  rulestack: Optional[pulumi.Input[_builtins.str]] = None,
250
355
  statuses: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwStatusArgs']]]] = None,
251
356
  subnet_mappings: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]]] = None,
252
357
  tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
253
358
  update_token: Optional[pulumi.Input[_builtins.str]] = None,
359
+ user_ids: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwUserIdArgs']]]] = None,
254
360
  vpc_id: Optional[pulumi.Input[_builtins.str]] = None):
255
361
  """
256
362
  Input properties used for looking up and filtering Ngfw resources.
257
- :param pulumi.Input[_builtins.str] account_id: The account ID. This field is mandatory if using multiple accounts.
363
+ :param pulumi.Input[_builtins.str] account_id: The description.
364
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowlist_accounts: The list of allowed accounts for this NGFW.
258
365
  :param pulumi.Input[_builtins.str] app_id_version: App-ID version number.
259
366
  :param pulumi.Input[_builtins.bool] automatic_upgrade_app_id_version: Automatic App-ID upgrade version number. Defaults to `true`.
260
- :param pulumi.Input[_builtins.str] description: The description.
367
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] az_lists: The list of availability zones for this NGFW.
368
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] change_protections: Enables or disables change protection for the NGFW.
369
+ :param pulumi.Input[_builtins.str] deployment_update_token: The update token.
370
+ :param pulumi.Input[_builtins.str] description: The NGFW description.
261
371
  :param pulumi.Input[_builtins.str] endpoint_mode: Set endpoint mode from the following options. Valid values are `ServiceManaged` or `CustomerManaged`.
262
372
  :param pulumi.Input[_builtins.str] endpoint_service_name: The endpoint service name.
263
- :param pulumi.Input[_builtins.str] firewall_id: The Id of the NGFW.
373
+ :param pulumi.Input[_builtins.str] firewall_id: The Firewall ID.
264
374
  :param pulumi.Input[_builtins.str] global_rulestack: The global rulestack for this NGFW.
265
- :param pulumi.Input[_builtins.str] link_id: A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
375
+ :param pulumi.Input[_builtins.str] link_id: The link ID.
266
376
  :param pulumi.Input[_builtins.str] link_status: The link status.
267
377
  :param pulumi.Input[_builtins.bool] multi_vpc: Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
268
378
  :param pulumi.Input[_builtins.str] name: The NGFW name.
@@ -270,20 +380,32 @@ class _NgfwState:
270
380
  :param pulumi.Input[Sequence[pulumi.Input['NgfwSubnetMappingArgs']]] subnet_mappings: Subnet mappings.
271
381
  :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: The tags.
272
382
  :param pulumi.Input[_builtins.str] update_token: The update token.
273
- :param pulumi.Input[_builtins.str] vpc_id: The vpc id.
383
+ :param pulumi.Input[_builtins.str] vpc_id: The VPC ID for the NGFW.
274
384
  """
275
385
  if account_id is not None:
276
386
  pulumi.set(__self__, "account_id", account_id)
387
+ if allowlist_accounts is not None:
388
+ pulumi.set(__self__, "allowlist_accounts", allowlist_accounts)
277
389
  if app_id_version is not None:
278
390
  pulumi.set(__self__, "app_id_version", app_id_version)
279
391
  if automatic_upgrade_app_id_version is not None:
280
392
  pulumi.set(__self__, "automatic_upgrade_app_id_version", automatic_upgrade_app_id_version)
393
+ if az_lists is not None:
394
+ pulumi.set(__self__, "az_lists", az_lists)
395
+ if change_protections is not None:
396
+ pulumi.set(__self__, "change_protections", change_protections)
397
+ if deployment_update_token is not None:
398
+ pulumi.set(__self__, "deployment_update_token", deployment_update_token)
281
399
  if description is not None:
282
400
  pulumi.set(__self__, "description", description)
401
+ if egress_nats is not None:
402
+ pulumi.set(__self__, "egress_nats", egress_nats)
283
403
  if endpoint_mode is not None:
284
404
  pulumi.set(__self__, "endpoint_mode", endpoint_mode)
285
405
  if endpoint_service_name is not None:
286
406
  pulumi.set(__self__, "endpoint_service_name", endpoint_service_name)
407
+ if endpoints is not None:
408
+ pulumi.set(__self__, "endpoints", endpoints)
287
409
  if firewall_id is not None:
288
410
  pulumi.set(__self__, "firewall_id", firewall_id)
289
411
  if global_rulestack is not None:
@@ -296,6 +418,8 @@ class _NgfwState:
296
418
  pulumi.set(__self__, "multi_vpc", multi_vpc)
297
419
  if name is not None:
298
420
  pulumi.set(__self__, "name", name)
421
+ if private_accesses is not None:
422
+ pulumi.set(__self__, "private_accesses", private_accesses)
299
423
  if rulestack is not None:
300
424
  pulumi.set(__self__, "rulestack", rulestack)
301
425
  if statuses is not None:
@@ -306,6 +430,8 @@ class _NgfwState:
306
430
  pulumi.set(__self__, "tags", tags)
307
431
  if update_token is not None:
308
432
  pulumi.set(__self__, "update_token", update_token)
433
+ if user_ids is not None:
434
+ pulumi.set(__self__, "user_ids", user_ids)
309
435
  if vpc_id is not None:
310
436
  pulumi.set(__self__, "vpc_id", vpc_id)
311
437
 
@@ -313,7 +439,7 @@ class _NgfwState:
313
439
  @pulumi.getter(name="accountId")
314
440
  def account_id(self) -> Optional[pulumi.Input[_builtins.str]]:
315
441
  """
316
- The account ID. This field is mandatory if using multiple accounts.
442
+ The description.
317
443
  """
318
444
  return pulumi.get(self, "account_id")
319
445
 
@@ -321,6 +447,18 @@ class _NgfwState:
321
447
  def account_id(self, value: Optional[pulumi.Input[_builtins.str]]):
322
448
  pulumi.set(self, "account_id", value)
323
449
 
450
+ @_builtins.property
451
+ @pulumi.getter(name="allowlistAccounts")
452
+ def allowlist_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
453
+ """
454
+ The list of allowed accounts for this NGFW.
455
+ """
456
+ return pulumi.get(self, "allowlist_accounts")
457
+
458
+ @allowlist_accounts.setter
459
+ def allowlist_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
460
+ pulumi.set(self, "allowlist_accounts", value)
461
+
324
462
  @_builtins.property
325
463
  @pulumi.getter(name="appIdVersion")
326
464
  def app_id_version(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -345,11 +483,47 @@ class _NgfwState:
345
483
  def automatic_upgrade_app_id_version(self, value: Optional[pulumi.Input[_builtins.bool]]):
346
484
  pulumi.set(self, "automatic_upgrade_app_id_version", value)
347
485
 
486
+ @_builtins.property
487
+ @pulumi.getter(name="azLists")
488
+ def az_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
489
+ """
490
+ The list of availability zones for this NGFW.
491
+ """
492
+ return pulumi.get(self, "az_lists")
493
+
494
+ @az_lists.setter
495
+ def az_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
496
+ pulumi.set(self, "az_lists", value)
497
+
498
+ @_builtins.property
499
+ @pulumi.getter(name="changeProtections")
500
+ def change_protections(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
501
+ """
502
+ Enables or disables change protection for the NGFW.
503
+ """
504
+ return pulumi.get(self, "change_protections")
505
+
506
+ @change_protections.setter
507
+ def change_protections(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
508
+ pulumi.set(self, "change_protections", value)
509
+
510
+ @_builtins.property
511
+ @pulumi.getter(name="deploymentUpdateToken")
512
+ def deployment_update_token(self) -> Optional[pulumi.Input[_builtins.str]]:
513
+ """
514
+ The update token.
515
+ """
516
+ return pulumi.get(self, "deployment_update_token")
517
+
518
+ @deployment_update_token.setter
519
+ def deployment_update_token(self, value: Optional[pulumi.Input[_builtins.str]]):
520
+ pulumi.set(self, "deployment_update_token", value)
521
+
348
522
  @_builtins.property
349
523
  @pulumi.getter
350
524
  def description(self) -> Optional[pulumi.Input[_builtins.str]]:
351
525
  """
352
- The description.
526
+ The NGFW description.
353
527
  """
354
528
  return pulumi.get(self, "description")
355
529
 
@@ -357,6 +531,15 @@ class _NgfwState:
357
531
  def description(self, value: Optional[pulumi.Input[_builtins.str]]):
358
532
  pulumi.set(self, "description", value)
359
533
 
534
+ @_builtins.property
535
+ @pulumi.getter(name="egressNats")
536
+ def egress_nats(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEgressNatArgs']]]]:
537
+ return pulumi.get(self, "egress_nats")
538
+
539
+ @egress_nats.setter
540
+ def egress_nats(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEgressNatArgs']]]]):
541
+ pulumi.set(self, "egress_nats", value)
542
+
360
543
  @_builtins.property
361
544
  @pulumi.getter(name="endpointMode")
362
545
  def endpoint_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -381,11 +564,20 @@ class _NgfwState:
381
564
  def endpoint_service_name(self, value: Optional[pulumi.Input[_builtins.str]]):
382
565
  pulumi.set(self, "endpoint_service_name", value)
383
566
 
567
+ @_builtins.property
568
+ @pulumi.getter
569
+ def endpoints(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEndpointArgs']]]]:
570
+ return pulumi.get(self, "endpoints")
571
+
572
+ @endpoints.setter
573
+ def endpoints(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwEndpointArgs']]]]):
574
+ pulumi.set(self, "endpoints", value)
575
+
384
576
  @_builtins.property
385
577
  @pulumi.getter(name="firewallId")
386
578
  def firewall_id(self) -> Optional[pulumi.Input[_builtins.str]]:
387
579
  """
388
- The Id of the NGFW.
580
+ The Firewall ID.
389
581
  """
390
582
  return pulumi.get(self, "firewall_id")
391
583
 
@@ -409,7 +601,7 @@ class _NgfwState:
409
601
  @pulumi.getter(name="linkId")
410
602
  def link_id(self) -> Optional[pulumi.Input[_builtins.str]]:
411
603
  """
412
- A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
604
+ The link ID.
413
605
  """
414
606
  return pulumi.get(self, "link_id")
415
607
 
@@ -453,6 +645,15 @@ class _NgfwState:
453
645
  def name(self, value: Optional[pulumi.Input[_builtins.str]]):
454
646
  pulumi.set(self, "name", value)
455
647
 
648
+ @_builtins.property
649
+ @pulumi.getter(name="privateAccesses")
650
+ def private_accesses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwPrivateAccessArgs']]]]:
651
+ return pulumi.get(self, "private_accesses")
652
+
653
+ @private_accesses.setter
654
+ def private_accesses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwPrivateAccessArgs']]]]):
655
+ pulumi.set(self, "private_accesses", value)
656
+
456
657
  @_builtins.property
457
658
  @pulumi.getter
458
659
  def rulestack(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -510,11 +711,20 @@ class _NgfwState:
510
711
  def update_token(self, value: Optional[pulumi.Input[_builtins.str]]):
511
712
  pulumi.set(self, "update_token", value)
512
713
 
714
+ @_builtins.property
715
+ @pulumi.getter(name="userIds")
716
+ def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwUserIdArgs']]]]:
717
+ return pulumi.get(self, "user_ids")
718
+
719
+ @user_ids.setter
720
+ def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwUserIdArgs']]]]):
721
+ pulumi.set(self, "user_ids", value)
722
+
513
723
  @_builtins.property
514
724
  @pulumi.getter(name="vpcId")
515
725
  def vpc_id(self) -> Optional[pulumi.Input[_builtins.str]]:
516
726
  """
517
- The vpc id.
727
+ The VPC ID for the NGFW.
518
728
  """
519
729
  return pulumi.get(self, "vpc_id")
520
730
 
@@ -530,17 +740,24 @@ class Ngfw(pulumi.CustomResource):
530
740
  resource_name: str,
531
741
  opts: Optional[pulumi.ResourceOptions] = None,
532
742
  account_id: Optional[pulumi.Input[_builtins.str]] = None,
743
+ allowlist_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
533
744
  app_id_version: Optional[pulumi.Input[_builtins.str]] = None,
534
745
  automatic_upgrade_app_id_version: Optional[pulumi.Input[_builtins.bool]] = None,
746
+ az_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
747
+ change_protections: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
535
748
  description: Optional[pulumi.Input[_builtins.str]] = None,
749
+ egress_nats: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwEgressNatArgs', 'NgfwEgressNatArgsDict']]]]] = None,
536
750
  endpoint_mode: Optional[pulumi.Input[_builtins.str]] = None,
751
+ endpoints: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwEndpointArgs', 'NgfwEndpointArgsDict']]]]] = None,
537
752
  global_rulestack: Optional[pulumi.Input[_builtins.str]] = None,
538
753
  link_id: Optional[pulumi.Input[_builtins.str]] = None,
539
754
  multi_vpc: Optional[pulumi.Input[_builtins.bool]] = None,
540
755
  name: Optional[pulumi.Input[_builtins.str]] = None,
756
+ private_accesses: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwPrivateAccessArgs', 'NgfwPrivateAccessArgsDict']]]]] = None,
541
757
  rulestack: Optional[pulumi.Input[_builtins.str]] = None,
542
758
  subnet_mappings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwSubnetMappingArgs', 'NgfwSubnetMappingArgsDict']]]]] = None,
543
759
  tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
760
+ user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwUserIdArgs', 'NgfwUserIdArgsDict']]]]] = None,
544
761
  vpc_id: Optional[pulumi.Input[_builtins.str]] = None,
545
762
  __props__=None):
546
763
  """
@@ -564,32 +781,26 @@ class Ngfw(pulumi.CustomResource):
564
781
  tags={
565
782
  name: tf-example,
566
783
  })
567
- subnet2 = aws.index.Subnet("subnet2",
568
- vpc_id=my_vpc.id,
569
- cidr_block=172.16.20.0/24,
570
- availability_zone=us-west-2b,
571
- tags={
572
- name: tf-example,
573
- })
574
784
  example = cloudngfwaws.Ngfw("example",
575
785
  name="example-instance",
576
- vpc_id=example_vpc["id"],
577
- account_id="12345678",
578
786
  description="Example description",
579
- link_id="Link-81e80ccc-357a-4e4e-8325-1ed1d830cba5",
580
- endpoint_mode="ServiceManaged",
581
- subnet_mappings=[
582
- {
583
- "subnet_id": subnet1["id"],
584
- },
585
- {
586
- "subnet_id": subnet2["id"],
587
- },
588
- ],
787
+ endpoints=[{
788
+ "subnet_id": subnet1["id"],
789
+ "mode": "ServiceManaged",
790
+ "vpc_id": example_vpc["id"],
791
+ "account_id": "12345678",
792
+ }],
589
793
  rulestack=rs.rulestack,
590
794
  tags={
591
795
  "Foo": "bar",
592
796
  })
797
+ subnet2 = aws.index.Subnet("subnet2",
798
+ vpc_id=my_vpc.id,
799
+ cidr_block=172.16.20.0/24,
800
+ availability_zone=us-west-2b,
801
+ tags={
802
+ name: tf-example,
803
+ })
593
804
  ```
594
805
 
595
806
  ## Import
@@ -602,19 +813,22 @@ class Ngfw(pulumi.CustomResource):
602
813
 
603
814
  :param str resource_name: The name of the resource.
604
815
  :param pulumi.ResourceOptions opts: Options for the resource.
605
- :param pulumi.Input[_builtins.str] account_id: The account ID. This field is mandatory if using multiple accounts.
816
+ :param pulumi.Input[_builtins.str] account_id: The description.
817
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowlist_accounts: The list of allowed accounts for this NGFW.
606
818
  :param pulumi.Input[_builtins.str] app_id_version: App-ID version number.
607
819
  :param pulumi.Input[_builtins.bool] automatic_upgrade_app_id_version: Automatic App-ID upgrade version number. Defaults to `true`.
608
- :param pulumi.Input[_builtins.str] description: The description.
820
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] az_lists: The list of availability zones for this NGFW.
821
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] change_protections: Enables or disables change protection for the NGFW.
822
+ :param pulumi.Input[_builtins.str] description: The NGFW description.
609
823
  :param pulumi.Input[_builtins.str] endpoint_mode: Set endpoint mode from the following options. Valid values are `ServiceManaged` or `CustomerManaged`.
610
824
  :param pulumi.Input[_builtins.str] global_rulestack: The global rulestack for this NGFW.
611
- :param pulumi.Input[_builtins.str] link_id: A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
825
+ :param pulumi.Input[_builtins.str] link_id: The link ID.
612
826
  :param pulumi.Input[_builtins.bool] multi_vpc: Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
613
827
  :param pulumi.Input[_builtins.str] name: The NGFW name.
614
828
  :param pulumi.Input[_builtins.str] rulestack: The rulestack for this NGFW.
615
829
  :param pulumi.Input[Sequence[pulumi.Input[Union['NgfwSubnetMappingArgs', 'NgfwSubnetMappingArgsDict']]]] subnet_mappings: Subnet mappings.
616
830
  :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: The tags.
617
- :param pulumi.Input[_builtins.str] vpc_id: The vpc id.
831
+ :param pulumi.Input[_builtins.str] vpc_id: The VPC ID for the NGFW.
618
832
  """
619
833
  ...
620
834
  @overload
@@ -643,32 +857,26 @@ class Ngfw(pulumi.CustomResource):
643
857
  tags={
644
858
  name: tf-example,
645
859
  })
646
- subnet2 = aws.index.Subnet("subnet2",
647
- vpc_id=my_vpc.id,
648
- cidr_block=172.16.20.0/24,
649
- availability_zone=us-west-2b,
650
- tags={
651
- name: tf-example,
652
- })
653
860
  example = cloudngfwaws.Ngfw("example",
654
861
  name="example-instance",
655
- vpc_id=example_vpc["id"],
656
- account_id="12345678",
657
862
  description="Example description",
658
- link_id="Link-81e80ccc-357a-4e4e-8325-1ed1d830cba5",
659
- endpoint_mode="ServiceManaged",
660
- subnet_mappings=[
661
- {
662
- "subnet_id": subnet1["id"],
663
- },
664
- {
665
- "subnet_id": subnet2["id"],
666
- },
667
- ],
863
+ endpoints=[{
864
+ "subnet_id": subnet1["id"],
865
+ "mode": "ServiceManaged",
866
+ "vpc_id": example_vpc["id"],
867
+ "account_id": "12345678",
868
+ }],
668
869
  rulestack=rs.rulestack,
669
870
  tags={
670
871
  "Foo": "bar",
671
872
  })
873
+ subnet2 = aws.index.Subnet("subnet2",
874
+ vpc_id=my_vpc.id,
875
+ cidr_block=172.16.20.0/24,
876
+ availability_zone=us-west-2b,
877
+ tags={
878
+ name: tf-example,
879
+ })
672
880
  ```
673
881
 
674
882
  ## Import
@@ -695,17 +903,24 @@ class Ngfw(pulumi.CustomResource):
695
903
  resource_name: str,
696
904
  opts: Optional[pulumi.ResourceOptions] = None,
697
905
  account_id: Optional[pulumi.Input[_builtins.str]] = None,
906
+ allowlist_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
698
907
  app_id_version: Optional[pulumi.Input[_builtins.str]] = None,
699
908
  automatic_upgrade_app_id_version: Optional[pulumi.Input[_builtins.bool]] = None,
909
+ az_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
910
+ change_protections: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
700
911
  description: Optional[pulumi.Input[_builtins.str]] = None,
912
+ egress_nats: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwEgressNatArgs', 'NgfwEgressNatArgsDict']]]]] = None,
701
913
  endpoint_mode: Optional[pulumi.Input[_builtins.str]] = None,
914
+ endpoints: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwEndpointArgs', 'NgfwEndpointArgsDict']]]]] = None,
702
915
  global_rulestack: Optional[pulumi.Input[_builtins.str]] = None,
703
916
  link_id: Optional[pulumi.Input[_builtins.str]] = None,
704
917
  multi_vpc: Optional[pulumi.Input[_builtins.bool]] = None,
705
918
  name: Optional[pulumi.Input[_builtins.str]] = None,
919
+ private_accesses: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwPrivateAccessArgs', 'NgfwPrivateAccessArgsDict']]]]] = None,
706
920
  rulestack: Optional[pulumi.Input[_builtins.str]] = None,
707
921
  subnet_mappings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwSubnetMappingArgs', 'NgfwSubnetMappingArgsDict']]]]] = None,
708
922
  tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
923
+ user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwUserIdArgs', 'NgfwUserIdArgsDict']]]]] = None,
709
924
  vpc_id: Optional[pulumi.Input[_builtins.str]] = None,
710
925
  __props__=None):
711
926
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -717,24 +932,28 @@ class Ngfw(pulumi.CustomResource):
717
932
  __props__ = NgfwArgs.__new__(NgfwArgs)
718
933
 
719
934
  __props__.__dict__["account_id"] = account_id
935
+ __props__.__dict__["allowlist_accounts"] = allowlist_accounts
720
936
  __props__.__dict__["app_id_version"] = app_id_version
721
937
  __props__.__dict__["automatic_upgrade_app_id_version"] = automatic_upgrade_app_id_version
938
+ if az_lists is None and not opts.urn:
939
+ raise TypeError("Missing required property 'az_lists'")
940
+ __props__.__dict__["az_lists"] = az_lists
941
+ __props__.__dict__["change_protections"] = change_protections
722
942
  __props__.__dict__["description"] = description
723
- if endpoint_mode is None and not opts.urn:
724
- raise TypeError("Missing required property 'endpoint_mode'")
943
+ __props__.__dict__["egress_nats"] = egress_nats
725
944
  __props__.__dict__["endpoint_mode"] = endpoint_mode
945
+ __props__.__dict__["endpoints"] = endpoints
726
946
  __props__.__dict__["global_rulestack"] = global_rulestack
727
947
  __props__.__dict__["link_id"] = link_id
728
948
  __props__.__dict__["multi_vpc"] = multi_vpc
729
949
  __props__.__dict__["name"] = name
950
+ __props__.__dict__["private_accesses"] = private_accesses
730
951
  __props__.__dict__["rulestack"] = rulestack
731
- if subnet_mappings is None and not opts.urn:
732
- raise TypeError("Missing required property 'subnet_mappings'")
733
952
  __props__.__dict__["subnet_mappings"] = subnet_mappings
734
953
  __props__.__dict__["tags"] = tags
735
- if vpc_id is None and not opts.urn:
736
- raise TypeError("Missing required property 'vpc_id'")
954
+ __props__.__dict__["user_ids"] = user_ids
737
955
  __props__.__dict__["vpc_id"] = vpc_id
956
+ __props__.__dict__["deployment_update_token"] = None
738
957
  __props__.__dict__["endpoint_service_name"] = None
739
958
  __props__.__dict__["firewall_id"] = None
740
959
  __props__.__dict__["link_status"] = None
@@ -751,22 +970,30 @@ class Ngfw(pulumi.CustomResource):
751
970
  id: pulumi.Input[str],
752
971
  opts: Optional[pulumi.ResourceOptions] = None,
753
972
  account_id: Optional[pulumi.Input[_builtins.str]] = None,
973
+ allowlist_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
754
974
  app_id_version: Optional[pulumi.Input[_builtins.str]] = None,
755
975
  automatic_upgrade_app_id_version: Optional[pulumi.Input[_builtins.bool]] = None,
976
+ az_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
977
+ change_protections: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
978
+ deployment_update_token: Optional[pulumi.Input[_builtins.str]] = None,
756
979
  description: Optional[pulumi.Input[_builtins.str]] = None,
980
+ egress_nats: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwEgressNatArgs', 'NgfwEgressNatArgsDict']]]]] = None,
757
981
  endpoint_mode: Optional[pulumi.Input[_builtins.str]] = None,
758
982
  endpoint_service_name: Optional[pulumi.Input[_builtins.str]] = None,
983
+ endpoints: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwEndpointArgs', 'NgfwEndpointArgsDict']]]]] = None,
759
984
  firewall_id: Optional[pulumi.Input[_builtins.str]] = None,
760
985
  global_rulestack: Optional[pulumi.Input[_builtins.str]] = None,
761
986
  link_id: Optional[pulumi.Input[_builtins.str]] = None,
762
987
  link_status: Optional[pulumi.Input[_builtins.str]] = None,
763
988
  multi_vpc: Optional[pulumi.Input[_builtins.bool]] = None,
764
989
  name: Optional[pulumi.Input[_builtins.str]] = None,
990
+ private_accesses: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwPrivateAccessArgs', 'NgfwPrivateAccessArgsDict']]]]] = None,
765
991
  rulestack: Optional[pulumi.Input[_builtins.str]] = None,
766
992
  statuses: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwStatusArgs', 'NgfwStatusArgsDict']]]]] = None,
767
993
  subnet_mappings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwSubnetMappingArgs', 'NgfwSubnetMappingArgsDict']]]]] = None,
768
994
  tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
769
995
  update_token: Optional[pulumi.Input[_builtins.str]] = None,
996
+ user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwUserIdArgs', 'NgfwUserIdArgsDict']]]]] = None,
770
997
  vpc_id: Optional[pulumi.Input[_builtins.str]] = None) -> 'Ngfw':
771
998
  """
772
999
  Get an existing Ngfw resource's state with the given name, id, and optional extra
@@ -775,15 +1002,19 @@ class Ngfw(pulumi.CustomResource):
775
1002
  :param str resource_name: The unique name of the resulting resource.
776
1003
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
777
1004
  :param pulumi.ResourceOptions opts: Options for the resource.
778
- :param pulumi.Input[_builtins.str] account_id: The account ID. This field is mandatory if using multiple accounts.
1005
+ :param pulumi.Input[_builtins.str] account_id: The description.
1006
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowlist_accounts: The list of allowed accounts for this NGFW.
779
1007
  :param pulumi.Input[_builtins.str] app_id_version: App-ID version number.
780
1008
  :param pulumi.Input[_builtins.bool] automatic_upgrade_app_id_version: Automatic App-ID upgrade version number. Defaults to `true`.
781
- :param pulumi.Input[_builtins.str] description: The description.
1009
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] az_lists: The list of availability zones for this NGFW.
1010
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] change_protections: Enables or disables change protection for the NGFW.
1011
+ :param pulumi.Input[_builtins.str] deployment_update_token: The update token.
1012
+ :param pulumi.Input[_builtins.str] description: The NGFW description.
782
1013
  :param pulumi.Input[_builtins.str] endpoint_mode: Set endpoint mode from the following options. Valid values are `ServiceManaged` or `CustomerManaged`.
783
1014
  :param pulumi.Input[_builtins.str] endpoint_service_name: The endpoint service name.
784
- :param pulumi.Input[_builtins.str] firewall_id: The Id of the NGFW.
1015
+ :param pulumi.Input[_builtins.str] firewall_id: The Firewall ID.
785
1016
  :param pulumi.Input[_builtins.str] global_rulestack: The global rulestack for this NGFW.
786
- :param pulumi.Input[_builtins.str] link_id: A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
1017
+ :param pulumi.Input[_builtins.str] link_id: The link ID.
787
1018
  :param pulumi.Input[_builtins.str] link_status: The link status.
788
1019
  :param pulumi.Input[_builtins.bool] multi_vpc: Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
789
1020
  :param pulumi.Input[_builtins.str] name: The NGFW name.
@@ -791,29 +1022,37 @@ class Ngfw(pulumi.CustomResource):
791
1022
  :param pulumi.Input[Sequence[pulumi.Input[Union['NgfwSubnetMappingArgs', 'NgfwSubnetMappingArgsDict']]]] subnet_mappings: Subnet mappings.
792
1023
  :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: The tags.
793
1024
  :param pulumi.Input[_builtins.str] update_token: The update token.
794
- :param pulumi.Input[_builtins.str] vpc_id: The vpc id.
1025
+ :param pulumi.Input[_builtins.str] vpc_id: The VPC ID for the NGFW.
795
1026
  """
796
1027
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
797
1028
 
798
1029
  __props__ = _NgfwState.__new__(_NgfwState)
799
1030
 
800
1031
  __props__.__dict__["account_id"] = account_id
1032
+ __props__.__dict__["allowlist_accounts"] = allowlist_accounts
801
1033
  __props__.__dict__["app_id_version"] = app_id_version
802
1034
  __props__.__dict__["automatic_upgrade_app_id_version"] = automatic_upgrade_app_id_version
1035
+ __props__.__dict__["az_lists"] = az_lists
1036
+ __props__.__dict__["change_protections"] = change_protections
1037
+ __props__.__dict__["deployment_update_token"] = deployment_update_token
803
1038
  __props__.__dict__["description"] = description
1039
+ __props__.__dict__["egress_nats"] = egress_nats
804
1040
  __props__.__dict__["endpoint_mode"] = endpoint_mode
805
1041
  __props__.__dict__["endpoint_service_name"] = endpoint_service_name
1042
+ __props__.__dict__["endpoints"] = endpoints
806
1043
  __props__.__dict__["firewall_id"] = firewall_id
807
1044
  __props__.__dict__["global_rulestack"] = global_rulestack
808
1045
  __props__.__dict__["link_id"] = link_id
809
1046
  __props__.__dict__["link_status"] = link_status
810
1047
  __props__.__dict__["multi_vpc"] = multi_vpc
811
1048
  __props__.__dict__["name"] = name
1049
+ __props__.__dict__["private_accesses"] = private_accesses
812
1050
  __props__.__dict__["rulestack"] = rulestack
813
1051
  __props__.__dict__["statuses"] = statuses
814
1052
  __props__.__dict__["subnet_mappings"] = subnet_mappings
815
1053
  __props__.__dict__["tags"] = tags
816
1054
  __props__.__dict__["update_token"] = update_token
1055
+ __props__.__dict__["user_ids"] = user_ids
817
1056
  __props__.__dict__["vpc_id"] = vpc_id
818
1057
  return Ngfw(resource_name, opts=opts, __props__=__props__)
819
1058
 
@@ -821,10 +1060,18 @@ class Ngfw(pulumi.CustomResource):
821
1060
  @pulumi.getter(name="accountId")
822
1061
  def account_id(self) -> pulumi.Output[Optional[_builtins.str]]:
823
1062
  """
824
- The account ID. This field is mandatory if using multiple accounts.
1063
+ The description.
825
1064
  """
826
1065
  return pulumi.get(self, "account_id")
827
1066
 
1067
+ @_builtins.property
1068
+ @pulumi.getter(name="allowlistAccounts")
1069
+ def allowlist_accounts(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
1070
+ """
1071
+ The list of allowed accounts for this NGFW.
1072
+ """
1073
+ return pulumi.get(self, "allowlist_accounts")
1074
+
828
1075
  @_builtins.property
829
1076
  @pulumi.getter(name="appIdVersion")
830
1077
  def app_id_version(self) -> pulumi.Output[_builtins.str]:
@@ -841,17 +1088,46 @@ class Ngfw(pulumi.CustomResource):
841
1088
  """
842
1089
  return pulumi.get(self, "automatic_upgrade_app_id_version")
843
1090
 
1091
+ @_builtins.property
1092
+ @pulumi.getter(name="azLists")
1093
+ def az_lists(self) -> pulumi.Output[Sequence[_builtins.str]]:
1094
+ """
1095
+ The list of availability zones for this NGFW.
1096
+ """
1097
+ return pulumi.get(self, "az_lists")
1098
+
1099
+ @_builtins.property
1100
+ @pulumi.getter(name="changeProtections")
1101
+ def change_protections(self) -> pulumi.Output[Sequence[_builtins.str]]:
1102
+ """
1103
+ Enables or disables change protection for the NGFW.
1104
+ """
1105
+ return pulumi.get(self, "change_protections")
1106
+
1107
+ @_builtins.property
1108
+ @pulumi.getter(name="deploymentUpdateToken")
1109
+ def deployment_update_token(self) -> pulumi.Output[_builtins.str]:
1110
+ """
1111
+ The update token.
1112
+ """
1113
+ return pulumi.get(self, "deployment_update_token")
1114
+
844
1115
  @_builtins.property
845
1116
  @pulumi.getter
846
1117
  def description(self) -> pulumi.Output[Optional[_builtins.str]]:
847
1118
  """
848
- The description.
1119
+ The NGFW description.
849
1120
  """
850
1121
  return pulumi.get(self, "description")
851
1122
 
1123
+ @_builtins.property
1124
+ @pulumi.getter(name="egressNats")
1125
+ def egress_nats(self) -> pulumi.Output[Sequence['outputs.NgfwEgressNat']]:
1126
+ return pulumi.get(self, "egress_nats")
1127
+
852
1128
  @_builtins.property
853
1129
  @pulumi.getter(name="endpointMode")
854
- def endpoint_mode(self) -> pulumi.Output[_builtins.str]:
1130
+ def endpoint_mode(self) -> pulumi.Output[Optional[_builtins.str]]:
855
1131
  """
856
1132
  Set endpoint mode from the following options. Valid values are `ServiceManaged` or `CustomerManaged`.
857
1133
  """
@@ -865,11 +1141,16 @@ class Ngfw(pulumi.CustomResource):
865
1141
  """
866
1142
  return pulumi.get(self, "endpoint_service_name")
867
1143
 
1144
+ @_builtins.property
1145
+ @pulumi.getter
1146
+ def endpoints(self) -> pulumi.Output[Optional[Sequence['outputs.NgfwEndpoint']]]:
1147
+ return pulumi.get(self, "endpoints")
1148
+
868
1149
  @_builtins.property
869
1150
  @pulumi.getter(name="firewallId")
870
1151
  def firewall_id(self) -> pulumi.Output[_builtins.str]:
871
1152
  """
872
- The Id of the NGFW.
1153
+ The Firewall ID.
873
1154
  """
874
1155
  return pulumi.get(self, "firewall_id")
875
1156
 
@@ -885,7 +1166,7 @@ class Ngfw(pulumi.CustomResource):
885
1166
  @pulumi.getter(name="linkId")
886
1167
  def link_id(self) -> pulumi.Output[_builtins.str]:
887
1168
  """
888
- A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
1169
+ The link ID.
889
1170
  """
890
1171
  return pulumi.get(self, "link_id")
891
1172
 
@@ -913,6 +1194,11 @@ class Ngfw(pulumi.CustomResource):
913
1194
  """
914
1195
  return pulumi.get(self, "name")
915
1196
 
1197
+ @_builtins.property
1198
+ @pulumi.getter(name="privateAccesses")
1199
+ def private_accesses(self) -> pulumi.Output[Sequence['outputs.NgfwPrivateAccess']]:
1200
+ return pulumi.get(self, "private_accesses")
1201
+
916
1202
  @_builtins.property
917
1203
  @pulumi.getter
918
1204
  def rulestack(self) -> pulumi.Output[Optional[_builtins.str]]:
@@ -928,7 +1214,7 @@ class Ngfw(pulumi.CustomResource):
928
1214
 
929
1215
  @_builtins.property
930
1216
  @pulumi.getter(name="subnetMappings")
931
- def subnet_mappings(self) -> pulumi.Output[Sequence['outputs.NgfwSubnetMapping']]:
1217
+ def subnet_mappings(self) -> pulumi.Output[Optional[Sequence['outputs.NgfwSubnetMapping']]]:
932
1218
  """
933
1219
  Subnet mappings.
934
1220
  """
@@ -936,7 +1222,7 @@ class Ngfw(pulumi.CustomResource):
936
1222
 
937
1223
  @_builtins.property
938
1224
  @pulumi.getter
939
- def tags(self) -> pulumi.Output[Optional[Mapping[str, _builtins.str]]]:
1225
+ def tags(self) -> pulumi.Output[Mapping[str, _builtins.str]]:
940
1226
  """
941
1227
  The tags.
942
1228
  """
@@ -950,11 +1236,16 @@ class Ngfw(pulumi.CustomResource):
950
1236
  """
951
1237
  return pulumi.get(self, "update_token")
952
1238
 
1239
+ @_builtins.property
1240
+ @pulumi.getter(name="userIds")
1241
+ def user_ids(self) -> pulumi.Output[Sequence['outputs.NgfwUserId']]:
1242
+ return pulumi.get(self, "user_ids")
1243
+
953
1244
  @_builtins.property
954
1245
  @pulumi.getter(name="vpcId")
955
- def vpc_id(self) -> pulumi.Output[_builtins.str]:
1246
+ def vpc_id(self) -> pulumi.Output[Optional[_builtins.str]]:
956
1247
  """
957
- The vpc id.
1248
+ The VPC ID for the NGFW.
958
1249
  """
959
1250
  return pulumi.get(self, "vpc_id")
960
1251