pulumi-cloudngfwaws 0.2.0a1759529059__py3-none-any.whl → 1.1.0a1762407264__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_cloudngfwaws/_inputs.py +774 -107
- pulumi_cloudngfwaws/config/__init__.pyi +5 -2
- pulumi_cloudngfwaws/config/vars.py +7 -4
- pulumi_cloudngfwaws/get_ngfw.py +112 -32
- pulumi_cloudngfwaws/get_ngfw_log_profile.py +64 -8
- pulumi_cloudngfwaws/get_ngfws.py +23 -3
- pulumi_cloudngfwaws/get_security_rule.py +4 -0
- pulumi_cloudngfwaws/ngfw.py +410 -119
- pulumi_cloudngfwaws/ngfw_log_profile.py +271 -108
- pulumi_cloudngfwaws/outputs.py +1131 -234
- pulumi_cloudngfwaws/provider.py +29 -16
- pulumi_cloudngfwaws/pulumi-plugin.json +1 -1
- {pulumi_cloudngfwaws-0.2.0a1759529059.dist-info → pulumi_cloudngfwaws-1.1.0a1762407264.dist-info}/METADATA +1 -1
- {pulumi_cloudngfwaws-0.2.0a1759529059.dist-info → pulumi_cloudngfwaws-1.1.0a1762407264.dist-info}/RECORD +16 -16
- {pulumi_cloudngfwaws-0.2.0a1759529059.dist-info → pulumi_cloudngfwaws-1.1.0a1762407264.dist-info}/WHEEL +0 -0
- {pulumi_cloudngfwaws-0.2.0a1759529059.dist-info → pulumi_cloudngfwaws-1.1.0a1762407264.dist-info}/top_level.txt +0 -0
|
@@ -21,66 +21,68 @@ __all__ = ['NgfwLogProfileArgs', 'NgfwLogProfile']
|
|
|
21
21
|
@pulumi.input_type
|
|
22
22
|
class NgfwLogProfileArgs:
|
|
23
23
|
def __init__(__self__, *,
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
ngfw: pulumi.Input[_builtins.str],
|
|
24
|
+
firewall_id: pulumi.Input[_builtins.str],
|
|
25
|
+
account_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
26
|
advanced_threat_log: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
28
27
|
cloud_watch_metric_namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
-
cloudwatch_metric_fields: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None
|
|
28
|
+
cloudwatch_metric_fields: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
29
|
+
log_config: Optional[pulumi.Input['NgfwLogProfileLogConfigArgs']] = None,
|
|
30
|
+
log_destinations: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwLogProfileLogDestinationArgs']]]] = None,
|
|
31
|
+
ngfw: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
region: Optional[pulumi.Input[_builtins.str]] = None):
|
|
30
33
|
"""
|
|
31
34
|
The set of arguments for constructing a NgfwLogProfile resource.
|
|
35
|
+
:param pulumi.Input[_builtins.str] firewall_id: The Firewall Id for the NGFW.
|
|
32
36
|
:param pulumi.Input[_builtins.str] account_id: The unique ID of the account.
|
|
33
|
-
:param pulumi.Input[Sequence[pulumi.Input['NgfwLogProfileLogDestinationArgs']]] log_destinations: List of log destinations.
|
|
34
|
-
:param pulumi.Input[_builtins.str] ngfw: The name of the NGFW.
|
|
35
37
|
:param pulumi.Input[_builtins.bool] advanced_threat_log: Enable advanced threat logging.
|
|
36
38
|
:param pulumi.Input[_builtins.str] cloud_watch_metric_namespace: The CloudWatch metric namespace.
|
|
37
39
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] cloudwatch_metric_fields: Cloudwatch metric fields.
|
|
40
|
+
:param pulumi.Input['NgfwLogProfileLogConfigArgs'] log_config: Log configuration details.
|
|
41
|
+
:param pulumi.Input[Sequence[pulumi.Input['NgfwLogProfileLogDestinationArgs']]] log_destinations: List of log destinations.
|
|
42
|
+
:param pulumi.Input[_builtins.str] ngfw: The name of the NGFW.
|
|
43
|
+
:param pulumi.Input[_builtins.str] region: The region of the NGFW.
|
|
38
44
|
"""
|
|
39
|
-
pulumi.set(__self__, "
|
|
40
|
-
|
|
41
|
-
|
|
45
|
+
pulumi.set(__self__, "firewall_id", firewall_id)
|
|
46
|
+
if account_id is not None:
|
|
47
|
+
pulumi.set(__self__, "account_id", account_id)
|
|
42
48
|
if advanced_threat_log is not None:
|
|
43
49
|
pulumi.set(__self__, "advanced_threat_log", advanced_threat_log)
|
|
44
50
|
if cloud_watch_metric_namespace is not None:
|
|
45
51
|
pulumi.set(__self__, "cloud_watch_metric_namespace", cloud_watch_metric_namespace)
|
|
46
52
|
if cloudwatch_metric_fields is not None:
|
|
47
53
|
pulumi.set(__self__, "cloudwatch_metric_fields", cloudwatch_metric_fields)
|
|
54
|
+
if log_config is not None:
|
|
55
|
+
pulumi.set(__self__, "log_config", log_config)
|
|
56
|
+
if log_destinations is not None:
|
|
57
|
+
pulumi.set(__self__, "log_destinations", log_destinations)
|
|
58
|
+
if ngfw is not None:
|
|
59
|
+
pulumi.set(__self__, "ngfw", ngfw)
|
|
60
|
+
if region is not None:
|
|
61
|
+
pulumi.set(__self__, "region", region)
|
|
48
62
|
|
|
49
63
|
@_builtins.property
|
|
50
|
-
@pulumi.getter(name="
|
|
51
|
-
def
|
|
52
|
-
"""
|
|
53
|
-
The unique ID of the account.
|
|
54
|
-
"""
|
|
55
|
-
return pulumi.get(self, "account_id")
|
|
56
|
-
|
|
57
|
-
@account_id.setter
|
|
58
|
-
def account_id(self, value: pulumi.Input[_builtins.str]):
|
|
59
|
-
pulumi.set(self, "account_id", value)
|
|
60
|
-
|
|
61
|
-
@_builtins.property
|
|
62
|
-
@pulumi.getter(name="logDestinations")
|
|
63
|
-
def log_destinations(self) -> pulumi.Input[Sequence[pulumi.Input['NgfwLogProfileLogDestinationArgs']]]:
|
|
64
|
+
@pulumi.getter(name="firewallId")
|
|
65
|
+
def firewall_id(self) -> pulumi.Input[_builtins.str]:
|
|
64
66
|
"""
|
|
65
|
-
|
|
67
|
+
The Firewall Id for the NGFW.
|
|
66
68
|
"""
|
|
67
|
-
return pulumi.get(self, "
|
|
69
|
+
return pulumi.get(self, "firewall_id")
|
|
68
70
|
|
|
69
|
-
@
|
|
70
|
-
def
|
|
71
|
-
pulumi.set(self, "
|
|
71
|
+
@firewall_id.setter
|
|
72
|
+
def firewall_id(self, value: pulumi.Input[_builtins.str]):
|
|
73
|
+
pulumi.set(self, "firewall_id", value)
|
|
72
74
|
|
|
73
75
|
@_builtins.property
|
|
74
|
-
@pulumi.getter
|
|
75
|
-
def
|
|
76
|
+
@pulumi.getter(name="accountId")
|
|
77
|
+
def account_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
76
78
|
"""
|
|
77
|
-
The
|
|
79
|
+
The unique ID of the account.
|
|
78
80
|
"""
|
|
79
|
-
return pulumi.get(self, "
|
|
81
|
+
return pulumi.get(self, "account_id")
|
|
80
82
|
|
|
81
|
-
@
|
|
82
|
-
def
|
|
83
|
-
pulumi.set(self, "
|
|
83
|
+
@account_id.setter
|
|
84
|
+
def account_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
85
|
+
pulumi.set(self, "account_id", value)
|
|
84
86
|
|
|
85
87
|
@_builtins.property
|
|
86
88
|
@pulumi.getter(name="advancedThreatLog")
|
|
@@ -118,6 +120,54 @@ class NgfwLogProfileArgs:
|
|
|
118
120
|
def cloudwatch_metric_fields(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
119
121
|
pulumi.set(self, "cloudwatch_metric_fields", value)
|
|
120
122
|
|
|
123
|
+
@_builtins.property
|
|
124
|
+
@pulumi.getter(name="logConfig")
|
|
125
|
+
def log_config(self) -> Optional[pulumi.Input['NgfwLogProfileLogConfigArgs']]:
|
|
126
|
+
"""
|
|
127
|
+
Log configuration details.
|
|
128
|
+
"""
|
|
129
|
+
return pulumi.get(self, "log_config")
|
|
130
|
+
|
|
131
|
+
@log_config.setter
|
|
132
|
+
def log_config(self, value: Optional[pulumi.Input['NgfwLogProfileLogConfigArgs']]):
|
|
133
|
+
pulumi.set(self, "log_config", value)
|
|
134
|
+
|
|
135
|
+
@_builtins.property
|
|
136
|
+
@pulumi.getter(name="logDestinations")
|
|
137
|
+
def log_destinations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwLogProfileLogDestinationArgs']]]]:
|
|
138
|
+
"""
|
|
139
|
+
List of log destinations.
|
|
140
|
+
"""
|
|
141
|
+
return pulumi.get(self, "log_destinations")
|
|
142
|
+
|
|
143
|
+
@log_destinations.setter
|
|
144
|
+
def log_destinations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwLogProfileLogDestinationArgs']]]]):
|
|
145
|
+
pulumi.set(self, "log_destinations", value)
|
|
146
|
+
|
|
147
|
+
@_builtins.property
|
|
148
|
+
@pulumi.getter
|
|
149
|
+
def ngfw(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
150
|
+
"""
|
|
151
|
+
The name of the NGFW.
|
|
152
|
+
"""
|
|
153
|
+
return pulumi.get(self, "ngfw")
|
|
154
|
+
|
|
155
|
+
@ngfw.setter
|
|
156
|
+
def ngfw(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
157
|
+
pulumi.set(self, "ngfw", value)
|
|
158
|
+
|
|
159
|
+
@_builtins.property
|
|
160
|
+
@pulumi.getter
|
|
161
|
+
def region(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
162
|
+
"""
|
|
163
|
+
The region of the NGFW.
|
|
164
|
+
"""
|
|
165
|
+
return pulumi.get(self, "region")
|
|
166
|
+
|
|
167
|
+
@region.setter
|
|
168
|
+
def region(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
169
|
+
pulumi.set(self, "region", value)
|
|
170
|
+
|
|
121
171
|
|
|
122
172
|
@pulumi.input_type
|
|
123
173
|
class _NgfwLogProfileState:
|
|
@@ -126,16 +176,24 @@ class _NgfwLogProfileState:
|
|
|
126
176
|
advanced_threat_log: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
127
177
|
cloud_watch_metric_namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
128
178
|
cloudwatch_metric_fields: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
179
|
+
firewall_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
180
|
+
log_config: Optional[pulumi.Input['NgfwLogProfileLogConfigArgs']] = None,
|
|
129
181
|
log_destinations: Optional[pulumi.Input[Sequence[pulumi.Input['NgfwLogProfileLogDestinationArgs']]]] = None,
|
|
130
|
-
ngfw: Optional[pulumi.Input[_builtins.str]] = None
|
|
182
|
+
ngfw: Optional[pulumi.Input[_builtins.str]] = None,
|
|
183
|
+
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
184
|
+
update_token: Optional[pulumi.Input[_builtins.str]] = None):
|
|
131
185
|
"""
|
|
132
186
|
Input properties used for looking up and filtering NgfwLogProfile resources.
|
|
133
187
|
:param pulumi.Input[_builtins.str] account_id: The unique ID of the account.
|
|
134
188
|
:param pulumi.Input[_builtins.bool] advanced_threat_log: Enable advanced threat logging.
|
|
135
189
|
:param pulumi.Input[_builtins.str] cloud_watch_metric_namespace: The CloudWatch metric namespace.
|
|
136
190
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] cloudwatch_metric_fields: Cloudwatch metric fields.
|
|
191
|
+
:param pulumi.Input[_builtins.str] firewall_id: The Firewall Id for the NGFW.
|
|
192
|
+
:param pulumi.Input['NgfwLogProfileLogConfigArgs'] log_config: Log configuration details.
|
|
137
193
|
:param pulumi.Input[Sequence[pulumi.Input['NgfwLogProfileLogDestinationArgs']]] log_destinations: List of log destinations.
|
|
138
194
|
:param pulumi.Input[_builtins.str] ngfw: The name of the NGFW.
|
|
195
|
+
:param pulumi.Input[_builtins.str] region: The region of the NGFW.
|
|
196
|
+
:param pulumi.Input[_builtins.str] update_token: The update token.
|
|
139
197
|
"""
|
|
140
198
|
if account_id is not None:
|
|
141
199
|
pulumi.set(__self__, "account_id", account_id)
|
|
@@ -145,10 +203,18 @@ class _NgfwLogProfileState:
|
|
|
145
203
|
pulumi.set(__self__, "cloud_watch_metric_namespace", cloud_watch_metric_namespace)
|
|
146
204
|
if cloudwatch_metric_fields is not None:
|
|
147
205
|
pulumi.set(__self__, "cloudwatch_metric_fields", cloudwatch_metric_fields)
|
|
206
|
+
if firewall_id is not None:
|
|
207
|
+
pulumi.set(__self__, "firewall_id", firewall_id)
|
|
208
|
+
if log_config is not None:
|
|
209
|
+
pulumi.set(__self__, "log_config", log_config)
|
|
148
210
|
if log_destinations is not None:
|
|
149
211
|
pulumi.set(__self__, "log_destinations", log_destinations)
|
|
150
212
|
if ngfw is not None:
|
|
151
213
|
pulumi.set(__self__, "ngfw", ngfw)
|
|
214
|
+
if region is not None:
|
|
215
|
+
pulumi.set(__self__, "region", region)
|
|
216
|
+
if update_token is not None:
|
|
217
|
+
pulumi.set(__self__, "update_token", update_token)
|
|
152
218
|
|
|
153
219
|
@_builtins.property
|
|
154
220
|
@pulumi.getter(name="accountId")
|
|
@@ -198,6 +264,30 @@ class _NgfwLogProfileState:
|
|
|
198
264
|
def cloudwatch_metric_fields(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
199
265
|
pulumi.set(self, "cloudwatch_metric_fields", value)
|
|
200
266
|
|
|
267
|
+
@_builtins.property
|
|
268
|
+
@pulumi.getter(name="firewallId")
|
|
269
|
+
def firewall_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
270
|
+
"""
|
|
271
|
+
The Firewall Id for the NGFW.
|
|
272
|
+
"""
|
|
273
|
+
return pulumi.get(self, "firewall_id")
|
|
274
|
+
|
|
275
|
+
@firewall_id.setter
|
|
276
|
+
def firewall_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
277
|
+
pulumi.set(self, "firewall_id", value)
|
|
278
|
+
|
|
279
|
+
@_builtins.property
|
|
280
|
+
@pulumi.getter(name="logConfig")
|
|
281
|
+
def log_config(self) -> Optional[pulumi.Input['NgfwLogProfileLogConfigArgs']]:
|
|
282
|
+
"""
|
|
283
|
+
Log configuration details.
|
|
284
|
+
"""
|
|
285
|
+
return pulumi.get(self, "log_config")
|
|
286
|
+
|
|
287
|
+
@log_config.setter
|
|
288
|
+
def log_config(self, value: Optional[pulumi.Input['NgfwLogProfileLogConfigArgs']]):
|
|
289
|
+
pulumi.set(self, "log_config", value)
|
|
290
|
+
|
|
201
291
|
@_builtins.property
|
|
202
292
|
@pulumi.getter(name="logDestinations")
|
|
203
293
|
def log_destinations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NgfwLogProfileLogDestinationArgs']]]]:
|
|
@@ -222,6 +312,30 @@ class _NgfwLogProfileState:
|
|
|
222
312
|
def ngfw(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
223
313
|
pulumi.set(self, "ngfw", value)
|
|
224
314
|
|
|
315
|
+
@_builtins.property
|
|
316
|
+
@pulumi.getter
|
|
317
|
+
def region(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
318
|
+
"""
|
|
319
|
+
The region of the NGFW.
|
|
320
|
+
"""
|
|
321
|
+
return pulumi.get(self, "region")
|
|
322
|
+
|
|
323
|
+
@region.setter
|
|
324
|
+
def region(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
325
|
+
pulumi.set(self, "region", value)
|
|
326
|
+
|
|
327
|
+
@_builtins.property
|
|
328
|
+
@pulumi.getter(name="updateToken")
|
|
329
|
+
def update_token(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
330
|
+
"""
|
|
331
|
+
The update token.
|
|
332
|
+
"""
|
|
333
|
+
return pulumi.get(self, "update_token")
|
|
334
|
+
|
|
335
|
+
@update_token.setter
|
|
336
|
+
def update_token(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
337
|
+
pulumi.set(self, "update_token", value)
|
|
338
|
+
|
|
225
339
|
|
|
226
340
|
@pulumi.type_token("cloudngfwaws:index/ngfwLogProfile:NgfwLogProfile")
|
|
227
341
|
class NgfwLogProfile(pulumi.CustomResource):
|
|
@@ -233,8 +347,11 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
233
347
|
advanced_threat_log: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
234
348
|
cloud_watch_metric_namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
235
349
|
cloudwatch_metric_fields: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
350
|
+
firewall_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
351
|
+
log_config: Optional[pulumi.Input[Union['NgfwLogProfileLogConfigArgs', 'NgfwLogProfileLogConfigArgsDict']]] = None,
|
|
236
352
|
log_destinations: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwLogProfileLogDestinationArgs', 'NgfwLogProfileLogDestinationArgsDict']]]]] = None,
|
|
237
353
|
ngfw: Optional[pulumi.Input[_builtins.str]] = None,
|
|
354
|
+
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
238
355
|
__props__=None):
|
|
239
356
|
"""
|
|
240
357
|
Resource for NGFW log profile manipulation.
|
|
@@ -262,46 +379,44 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
262
379
|
tags={
|
|
263
380
|
name: tf-example,
|
|
264
381
|
})
|
|
265
|
-
subnet2 = aws.index.Subnet("subnet2",
|
|
266
|
-
vpc_id=my_vpc.id,
|
|
267
|
-
cidr_block=172.16.20.0/24,
|
|
268
|
-
availability_zone=us-west-2b,
|
|
269
|
-
tags={
|
|
270
|
-
name: tf-example,
|
|
271
|
-
})
|
|
272
382
|
x = cloudngfwaws.Ngfw("x",
|
|
273
383
|
name="example-instance",
|
|
274
|
-
vpc_id=example_vpc["id"],
|
|
275
|
-
account_id="12345678",
|
|
276
384
|
description="Example description",
|
|
277
|
-
|
|
278
|
-
|
|
279
|
-
|
|
280
|
-
|
|
281
|
-
|
|
282
|
-
|
|
283
|
-
"subnet_id": subnet2["id"],
|
|
284
|
-
},
|
|
285
|
-
],
|
|
385
|
+
endpoints=[{
|
|
386
|
+
"subnet_id": subnet1["id"],
|
|
387
|
+
"mode": "ServiceManaged",
|
|
388
|
+
"vpc_id": example_vpc["id"],
|
|
389
|
+
"account_id": "12345678",
|
|
390
|
+
}],
|
|
286
391
|
rulestack="example-rulestack",
|
|
287
392
|
tags={
|
|
288
393
|
"Foo": "bar",
|
|
289
394
|
})
|
|
290
395
|
example = cloudngfwaws.NgfwLogProfile("example",
|
|
291
|
-
|
|
396
|
+
firewall_id=x.firewall_id,
|
|
292
397
|
account_id=x.account_id,
|
|
293
|
-
|
|
294
|
-
|
|
295
|
-
|
|
296
|
-
|
|
297
|
-
|
|
298
|
-
|
|
299
|
-
|
|
300
|
-
|
|
301
|
-
|
|
302
|
-
|
|
303
|
-
|
|
304
|
-
|
|
398
|
+
advanced_threat_log=True,
|
|
399
|
+
cloudwatch_metric_fields=[
|
|
400
|
+
"Dataplane_CPU_Utilization",
|
|
401
|
+
"Session_Throughput_Kbps",
|
|
402
|
+
"BytesIn",
|
|
403
|
+
"BytesOut",
|
|
404
|
+
],
|
|
405
|
+
cloud_watch_metric_namespace="PaloAltoCloudNGFW",
|
|
406
|
+
log_config={
|
|
407
|
+
"log_destination": "my-s3-bucket",
|
|
408
|
+
"log_destination_type": "S3",
|
|
409
|
+
"log_types": ["TRAFFIC"],
|
|
410
|
+
"account_id": "251583708250",
|
|
411
|
+
"role_type": "IamBased",
|
|
412
|
+
})
|
|
413
|
+
subnet2 = aws.index.Subnet("subnet2",
|
|
414
|
+
vpc_id=my_vpc.id,
|
|
415
|
+
cidr_block=172.16.20.0/24,
|
|
416
|
+
availability_zone=us-west-2b,
|
|
417
|
+
tags={
|
|
418
|
+
name: tf-example,
|
|
419
|
+
})
|
|
305
420
|
```
|
|
306
421
|
|
|
307
422
|
## Import
|
|
@@ -318,8 +433,11 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
318
433
|
:param pulumi.Input[_builtins.bool] advanced_threat_log: Enable advanced threat logging.
|
|
319
434
|
:param pulumi.Input[_builtins.str] cloud_watch_metric_namespace: The CloudWatch metric namespace.
|
|
320
435
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] cloudwatch_metric_fields: Cloudwatch metric fields.
|
|
436
|
+
:param pulumi.Input[_builtins.str] firewall_id: The Firewall Id for the NGFW.
|
|
437
|
+
:param pulumi.Input[Union['NgfwLogProfileLogConfigArgs', 'NgfwLogProfileLogConfigArgsDict']] log_config: Log configuration details.
|
|
321
438
|
:param pulumi.Input[Sequence[pulumi.Input[Union['NgfwLogProfileLogDestinationArgs', 'NgfwLogProfileLogDestinationArgsDict']]]] log_destinations: List of log destinations.
|
|
322
439
|
:param pulumi.Input[_builtins.str] ngfw: The name of the NGFW.
|
|
440
|
+
:param pulumi.Input[_builtins.str] region: The region of the NGFW.
|
|
323
441
|
"""
|
|
324
442
|
...
|
|
325
443
|
@overload
|
|
@@ -353,46 +471,44 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
353
471
|
tags={
|
|
354
472
|
name: tf-example,
|
|
355
473
|
})
|
|
356
|
-
subnet2 = aws.index.Subnet("subnet2",
|
|
357
|
-
vpc_id=my_vpc.id,
|
|
358
|
-
cidr_block=172.16.20.0/24,
|
|
359
|
-
availability_zone=us-west-2b,
|
|
360
|
-
tags={
|
|
361
|
-
name: tf-example,
|
|
362
|
-
})
|
|
363
474
|
x = cloudngfwaws.Ngfw("x",
|
|
364
475
|
name="example-instance",
|
|
365
|
-
vpc_id=example_vpc["id"],
|
|
366
|
-
account_id="12345678",
|
|
367
476
|
description="Example description",
|
|
368
|
-
|
|
369
|
-
|
|
370
|
-
|
|
371
|
-
|
|
372
|
-
|
|
373
|
-
|
|
374
|
-
"subnet_id": subnet2["id"],
|
|
375
|
-
},
|
|
376
|
-
],
|
|
477
|
+
endpoints=[{
|
|
478
|
+
"subnet_id": subnet1["id"],
|
|
479
|
+
"mode": "ServiceManaged",
|
|
480
|
+
"vpc_id": example_vpc["id"],
|
|
481
|
+
"account_id": "12345678",
|
|
482
|
+
}],
|
|
377
483
|
rulestack="example-rulestack",
|
|
378
484
|
tags={
|
|
379
485
|
"Foo": "bar",
|
|
380
486
|
})
|
|
381
487
|
example = cloudngfwaws.NgfwLogProfile("example",
|
|
382
|
-
|
|
488
|
+
firewall_id=x.firewall_id,
|
|
383
489
|
account_id=x.account_id,
|
|
384
|
-
|
|
385
|
-
|
|
386
|
-
|
|
387
|
-
|
|
388
|
-
|
|
389
|
-
|
|
390
|
-
|
|
391
|
-
|
|
392
|
-
|
|
393
|
-
|
|
394
|
-
|
|
395
|
-
|
|
490
|
+
advanced_threat_log=True,
|
|
491
|
+
cloudwatch_metric_fields=[
|
|
492
|
+
"Dataplane_CPU_Utilization",
|
|
493
|
+
"Session_Throughput_Kbps",
|
|
494
|
+
"BytesIn",
|
|
495
|
+
"BytesOut",
|
|
496
|
+
],
|
|
497
|
+
cloud_watch_metric_namespace="PaloAltoCloudNGFW",
|
|
498
|
+
log_config={
|
|
499
|
+
"log_destination": "my-s3-bucket",
|
|
500
|
+
"log_destination_type": "S3",
|
|
501
|
+
"log_types": ["TRAFFIC"],
|
|
502
|
+
"account_id": "251583708250",
|
|
503
|
+
"role_type": "IamBased",
|
|
504
|
+
})
|
|
505
|
+
subnet2 = aws.index.Subnet("subnet2",
|
|
506
|
+
vpc_id=my_vpc.id,
|
|
507
|
+
cidr_block=172.16.20.0/24,
|
|
508
|
+
availability_zone=us-west-2b,
|
|
509
|
+
tags={
|
|
510
|
+
name: tf-example,
|
|
511
|
+
})
|
|
396
512
|
```
|
|
397
513
|
|
|
398
514
|
## Import
|
|
@@ -422,8 +538,11 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
422
538
|
advanced_threat_log: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
423
539
|
cloud_watch_metric_namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
424
540
|
cloudwatch_metric_fields: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
541
|
+
firewall_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
542
|
+
log_config: Optional[pulumi.Input[Union['NgfwLogProfileLogConfigArgs', 'NgfwLogProfileLogConfigArgsDict']]] = None,
|
|
425
543
|
log_destinations: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwLogProfileLogDestinationArgs', 'NgfwLogProfileLogDestinationArgsDict']]]]] = None,
|
|
426
544
|
ngfw: Optional[pulumi.Input[_builtins.str]] = None,
|
|
545
|
+
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
427
546
|
__props__=None):
|
|
428
547
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
429
548
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -433,18 +552,18 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
433
552
|
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
434
553
|
__props__ = NgfwLogProfileArgs.__new__(NgfwLogProfileArgs)
|
|
435
554
|
|
|
436
|
-
if account_id is None and not opts.urn:
|
|
437
|
-
raise TypeError("Missing required property 'account_id'")
|
|
438
555
|
__props__.__dict__["account_id"] = account_id
|
|
439
556
|
__props__.__dict__["advanced_threat_log"] = advanced_threat_log
|
|
440
557
|
__props__.__dict__["cloud_watch_metric_namespace"] = cloud_watch_metric_namespace
|
|
441
558
|
__props__.__dict__["cloudwatch_metric_fields"] = cloudwatch_metric_fields
|
|
442
|
-
if
|
|
443
|
-
raise TypeError("Missing required property '
|
|
559
|
+
if firewall_id is None and not opts.urn:
|
|
560
|
+
raise TypeError("Missing required property 'firewall_id'")
|
|
561
|
+
__props__.__dict__["firewall_id"] = firewall_id
|
|
562
|
+
__props__.__dict__["log_config"] = log_config
|
|
444
563
|
__props__.__dict__["log_destinations"] = log_destinations
|
|
445
|
-
if ngfw is None and not opts.urn:
|
|
446
|
-
raise TypeError("Missing required property 'ngfw'")
|
|
447
564
|
__props__.__dict__["ngfw"] = ngfw
|
|
565
|
+
__props__.__dict__["region"] = region
|
|
566
|
+
__props__.__dict__["update_token"] = None
|
|
448
567
|
super(NgfwLogProfile, __self__).__init__(
|
|
449
568
|
'cloudngfwaws:index/ngfwLogProfile:NgfwLogProfile',
|
|
450
569
|
resource_name,
|
|
@@ -459,8 +578,12 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
459
578
|
advanced_threat_log: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
460
579
|
cloud_watch_metric_namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
461
580
|
cloudwatch_metric_fields: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
581
|
+
firewall_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
582
|
+
log_config: Optional[pulumi.Input[Union['NgfwLogProfileLogConfigArgs', 'NgfwLogProfileLogConfigArgsDict']]] = None,
|
|
462
583
|
log_destinations: Optional[pulumi.Input[Sequence[pulumi.Input[Union['NgfwLogProfileLogDestinationArgs', 'NgfwLogProfileLogDestinationArgsDict']]]]] = None,
|
|
463
|
-
ngfw: Optional[pulumi.Input[_builtins.str]] = None
|
|
584
|
+
ngfw: Optional[pulumi.Input[_builtins.str]] = None,
|
|
585
|
+
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
586
|
+
update_token: Optional[pulumi.Input[_builtins.str]] = None) -> 'NgfwLogProfile':
|
|
464
587
|
"""
|
|
465
588
|
Get an existing NgfwLogProfile resource's state with the given name, id, and optional extra
|
|
466
589
|
properties used to qualify the lookup.
|
|
@@ -472,8 +595,12 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
472
595
|
:param pulumi.Input[_builtins.bool] advanced_threat_log: Enable advanced threat logging.
|
|
473
596
|
:param pulumi.Input[_builtins.str] cloud_watch_metric_namespace: The CloudWatch metric namespace.
|
|
474
597
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] cloudwatch_metric_fields: Cloudwatch metric fields.
|
|
598
|
+
:param pulumi.Input[_builtins.str] firewall_id: The Firewall Id for the NGFW.
|
|
599
|
+
:param pulumi.Input[Union['NgfwLogProfileLogConfigArgs', 'NgfwLogProfileLogConfigArgsDict']] log_config: Log configuration details.
|
|
475
600
|
:param pulumi.Input[Sequence[pulumi.Input[Union['NgfwLogProfileLogDestinationArgs', 'NgfwLogProfileLogDestinationArgsDict']]]] log_destinations: List of log destinations.
|
|
476
601
|
:param pulumi.Input[_builtins.str] ngfw: The name of the NGFW.
|
|
602
|
+
:param pulumi.Input[_builtins.str] region: The region of the NGFW.
|
|
603
|
+
:param pulumi.Input[_builtins.str] update_token: The update token.
|
|
477
604
|
"""
|
|
478
605
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
479
606
|
|
|
@@ -483,13 +610,17 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
483
610
|
__props__.__dict__["advanced_threat_log"] = advanced_threat_log
|
|
484
611
|
__props__.__dict__["cloud_watch_metric_namespace"] = cloud_watch_metric_namespace
|
|
485
612
|
__props__.__dict__["cloudwatch_metric_fields"] = cloudwatch_metric_fields
|
|
613
|
+
__props__.__dict__["firewall_id"] = firewall_id
|
|
614
|
+
__props__.__dict__["log_config"] = log_config
|
|
486
615
|
__props__.__dict__["log_destinations"] = log_destinations
|
|
487
616
|
__props__.__dict__["ngfw"] = ngfw
|
|
617
|
+
__props__.__dict__["region"] = region
|
|
618
|
+
__props__.__dict__["update_token"] = update_token
|
|
488
619
|
return NgfwLogProfile(resource_name, opts=opts, __props__=__props__)
|
|
489
620
|
|
|
490
621
|
@_builtins.property
|
|
491
622
|
@pulumi.getter(name="accountId")
|
|
492
|
-
def account_id(self) -> pulumi.Output[_builtins.str]:
|
|
623
|
+
def account_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
493
624
|
"""
|
|
494
625
|
The unique ID of the account.
|
|
495
626
|
"""
|
|
@@ -519,9 +650,25 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
519
650
|
"""
|
|
520
651
|
return pulumi.get(self, "cloudwatch_metric_fields")
|
|
521
652
|
|
|
653
|
+
@_builtins.property
|
|
654
|
+
@pulumi.getter(name="firewallId")
|
|
655
|
+
def firewall_id(self) -> pulumi.Output[_builtins.str]:
|
|
656
|
+
"""
|
|
657
|
+
The Firewall Id for the NGFW.
|
|
658
|
+
"""
|
|
659
|
+
return pulumi.get(self, "firewall_id")
|
|
660
|
+
|
|
661
|
+
@_builtins.property
|
|
662
|
+
@pulumi.getter(name="logConfig")
|
|
663
|
+
def log_config(self) -> pulumi.Output[Optional['outputs.NgfwLogProfileLogConfig']]:
|
|
664
|
+
"""
|
|
665
|
+
Log configuration details.
|
|
666
|
+
"""
|
|
667
|
+
return pulumi.get(self, "log_config")
|
|
668
|
+
|
|
522
669
|
@_builtins.property
|
|
523
670
|
@pulumi.getter(name="logDestinations")
|
|
524
|
-
def log_destinations(self) -> pulumi.Output[Sequence['outputs.NgfwLogProfileLogDestination']]:
|
|
671
|
+
def log_destinations(self) -> pulumi.Output[Optional[Sequence['outputs.NgfwLogProfileLogDestination']]]:
|
|
525
672
|
"""
|
|
526
673
|
List of log destinations.
|
|
527
674
|
"""
|
|
@@ -529,9 +676,25 @@ class NgfwLogProfile(pulumi.CustomResource):
|
|
|
529
676
|
|
|
530
677
|
@_builtins.property
|
|
531
678
|
@pulumi.getter
|
|
532
|
-
def ngfw(self) -> pulumi.Output[_builtins.str]:
|
|
679
|
+
def ngfw(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
533
680
|
"""
|
|
534
681
|
The name of the NGFW.
|
|
535
682
|
"""
|
|
536
683
|
return pulumi.get(self, "ngfw")
|
|
537
684
|
|
|
685
|
+
@_builtins.property
|
|
686
|
+
@pulumi.getter
|
|
687
|
+
def region(self) -> pulumi.Output[_builtins.str]:
|
|
688
|
+
"""
|
|
689
|
+
The region of the NGFW.
|
|
690
|
+
"""
|
|
691
|
+
return pulumi.get(self, "region")
|
|
692
|
+
|
|
693
|
+
@_builtins.property
|
|
694
|
+
@pulumi.getter(name="updateToken")
|
|
695
|
+
def update_token(self) -> pulumi.Output[_builtins.str]:
|
|
696
|
+
"""
|
|
697
|
+
The update token.
|
|
698
|
+
"""
|
|
699
|
+
return pulumi.get(self, "update_token")
|
|
700
|
+
|