pulumi-sdwan 0.2.0a1730181615__py3-none-any.whl → 0.6.0a1764803684__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_sdwan/__init__.py +662 -1
- pulumi_sdwan/_inputs.py +48339 -38595
- pulumi_sdwan/_utilities.py +9 -5
- pulumi_sdwan/activate_centralized_policy.py +54 -19
- pulumi_sdwan/advanced_inspection_profile_policy_definition.py +213 -201
- pulumi_sdwan/advanced_malware_protection_policy_definition.py +287 -233
- pulumi_sdwan/allow_url_list_policy_object.py +36 -31
- pulumi_sdwan/app_probe_class_policy_object.py +53 -48
- pulumi_sdwan/application_aware_routing_policy_definition.py +259 -58
- pulumi_sdwan/application_list_policy_object.py +36 -31
- pulumi_sdwan/application_priority_feature_profile.py +43 -36
- pulumi_sdwan/application_priority_qos_policy.py +178 -131
- pulumi_sdwan/application_priority_traffic_policy_policy.py +530 -0
- pulumi_sdwan/as_path_list_policy_object.py +62 -31
- pulumi_sdwan/attach_feature_device_template.py +81 -22
- pulumi_sdwan/block_url_list_policy_object.py +36 -31
- pulumi_sdwan/cedge_aaa_feature_template.py +711 -470
- pulumi_sdwan/cedge_global_feature_template.py +1102 -936
- pulumi_sdwan/cedge_igmp_feature_template.py +127 -91
- pulumi_sdwan/cedge_multicast_feature_template.py +218 -199
- pulumi_sdwan/cedge_pim_feature_template.py +572 -455
- pulumi_sdwan/cellular_cedge_profile_feature_template.py +368 -335
- pulumi_sdwan/cellular_controller_feature_template.py +343 -273
- pulumi_sdwan/cellular_profile_feature_template.py +497 -471
- pulumi_sdwan/centralized_policy.py +53 -48
- pulumi_sdwan/cflowd_policy_definition.py +287 -191
- pulumi_sdwan/cisco_banner_feature_template.py +154 -156
- pulumi_sdwan/cisco_bfd_feature_template.py +286 -209
- pulumi_sdwan/cisco_bgp_feature_template.py +1029 -655
- pulumi_sdwan/cisco_dhcp_server_feature_template.py +455 -372
- pulumi_sdwan/cisco_logging_feature_template.py +319 -208
- pulumi_sdwan/cisco_ntp_feature_template.py +304 -236
- pulumi_sdwan/cisco_omp_feature_template.py +763 -575
- pulumi_sdwan/cisco_ospf_feature_template.py +818 -561
- pulumi_sdwan/cisco_ospfv3_feature_template.py +1776 -1244
- pulumi_sdwan/cisco_secure_internet_gateway_feature_template.py +333 -151
- pulumi_sdwan/cisco_security_feature_template.py +445 -317
- pulumi_sdwan/cisco_sig_credentials_feature_template.py +470 -465
- pulumi_sdwan/cisco_snmp_feature_template.py +309 -208
- pulumi_sdwan/cisco_system_feature_template.py +1768 -1824
- pulumi_sdwan/cisco_thousandeyes_feature_template.py +139 -91
- pulumi_sdwan/cisco_trustsec_feature_template.py +820 -648
- pulumi_sdwan/cisco_vpn_feature_template.py +722 -347
- pulumi_sdwan/cisco_vpn_interface_feature_template.py +4615 -3627
- pulumi_sdwan/cisco_vpn_interface_gre_feature_template.py +692 -592
- pulumi_sdwan/cisco_vpn_interface_ipsec_feature_template.py +1238 -1065
- pulumi_sdwan/cisco_wireless_lan_feature_template.py +487 -416
- pulumi_sdwan/class_map_policy_object.py +60 -48
- pulumi_sdwan/cli_config_feature.py +90 -81
- pulumi_sdwan/cli_device_template.py +111 -99
- pulumi_sdwan/cli_feature_profile.py +43 -36
- pulumi_sdwan/cli_template_feature_template.py +103 -105
- pulumi_sdwan/color_list_policy_object.py +36 -31
- pulumi_sdwan/config/__init__.py +2 -1
- pulumi_sdwan/config/__init__.pyi +12 -7
- pulumi_sdwan/config/vars.py +19 -12
- pulumi_sdwan/configuration_group.py +242 -119
- pulumi_sdwan/custom_control_topology_policy_definition.py +149 -77
- pulumi_sdwan/data_fqdn_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/data_ipv4_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/data_ipv6_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/dns_security_feature_profile.py +239 -0
- pulumi_sdwan/dns_security_policy.py +706 -0
- pulumi_sdwan/dns_security_policy_definition.py +206 -201
- pulumi_sdwan/domain_list_policy_object.py +36 -31
- pulumi_sdwan/eigrp_feature_template.py +469 -350
- pulumi_sdwan/embedded_security_feature_profile.py +239 -0
- pulumi_sdwan/expanded_community_list_policy_object.py +36 -31
- pulumi_sdwan/extended_community_list_policy_object.py +36 -31
- pulumi_sdwan/feature_device_template.py +165 -153
- pulumi_sdwan/geo_location_list_policy_object.py +36 -31
- pulumi_sdwan/get_advanced_inspection_profile_policy_definition.py +34 -34
- pulumi_sdwan/get_advanced_malware_protection_policy_definition.py +36 -36
- pulumi_sdwan/get_allow_url_list_policy_object.py +15 -15
- pulumi_sdwan/get_app_probe_class_policy_object.py +17 -17
- pulumi_sdwan/get_application_aware_routing_policy_definition.py +62 -20
- pulumi_sdwan/get_application_list_policy_object.py +15 -15
- pulumi_sdwan/get_application_priority_feature_profile.py +14 -14
- pulumi_sdwan/get_application_priority_qos_policy.py +40 -40
- pulumi_sdwan/get_application_priority_traffic_policy_policy.py +210 -0
- pulumi_sdwan/get_as_path_list_policy_object.py +15 -15
- pulumi_sdwan/get_block_url_list_policy_object.py +15 -15
- pulumi_sdwan/get_cedge_aaa_feature_template.py +70 -70
- pulumi_sdwan/get_cedge_global_feature_template.py +116 -116
- pulumi_sdwan/get_cedge_igmp_feature_template.py +25 -25
- pulumi_sdwan/get_cedge_multicast_feature_template.py +36 -36
- pulumi_sdwan/get_cedge_pim_feature_template.py +68 -68
- pulumi_sdwan/get_cellular_cedge_profile_feature_template.py +52 -52
- pulumi_sdwan/get_cellular_controller_feature_template.py +45 -45
- pulumi_sdwan/get_cellular_profile_feature_template.py +68 -68
- pulumi_sdwan/get_centralized_policy.py +17 -17
- pulumi_sdwan/get_cflowd_policy_definition.py +33 -33
- pulumi_sdwan/get_cisco_banner_feature_template.py +32 -32
- pulumi_sdwan/get_cisco_bfd_feature_template.py +37 -37
- pulumi_sdwan/get_cisco_bgp_feature_template.py +90 -90
- pulumi_sdwan/get_cisco_dhcp_server_feature_template.py +58 -58
- pulumi_sdwan/get_cisco_logging_feature_template.py +39 -39
- pulumi_sdwan/get_cisco_ntp_feature_template.py +42 -42
- pulumi_sdwan/get_cisco_omp_feature_template.py +78 -78
- pulumi_sdwan/get_cisco_ospf_feature_template.py +78 -78
- pulumi_sdwan/get_cisco_ospfv3_feature_template.py +154 -154
- pulumi_sdwan/get_cisco_secure_internet_gateway_feature_template.py +33 -33
- pulumi_sdwan/get_cisco_security_feature_template.py +50 -50
- pulumi_sdwan/get_cisco_sig_credentials_feature_template.py +68 -68
- pulumi_sdwan/get_cisco_snmp_feature_template.py +41 -41
- pulumi_sdwan/get_cisco_system_feature_template.py +188 -160
- pulumi_sdwan/get_cisco_thousandeyes_feature_template.py +25 -25
- pulumi_sdwan/get_cisco_trustsec_feature_template.py +85 -85
- pulumi_sdwan/get_cisco_vpn_feature_template.py +65 -65
- pulumi_sdwan/get_cisco_vpn_interface_feature_template.py +416 -416
- pulumi_sdwan/get_cisco_vpn_interface_gre_feature_template.py +81 -81
- pulumi_sdwan/get_cisco_vpn_interface_ipsec_feature_template.py +130 -130
- pulumi_sdwan/get_cisco_wireless_lan_feature_template.py +57 -57
- pulumi_sdwan/get_class_map_policy_object.py +16 -16
- pulumi_sdwan/get_cli_config_feature.py +24 -24
- pulumi_sdwan/get_cli_device_template.py +22 -22
- pulumi_sdwan/get_cli_feature_profile.py +14 -14
- pulumi_sdwan/get_cli_template_feature_template.py +26 -26
- pulumi_sdwan/get_color_list_policy_object.py +15 -15
- pulumi_sdwan/get_configuration_group.py +59 -31
- pulumi_sdwan/get_custom_control_topology_policy_definition.py +21 -21
- pulumi_sdwan/get_data_fqdn_prefix_list_policy_object.py +15 -15
- pulumi_sdwan/get_data_ipv4_prefix_list_policy_object.py +15 -15
- pulumi_sdwan/get_data_ipv6_prefix_list_policy_object.py +15 -15
- pulumi_sdwan/get_device.py +19 -19
- pulumi_sdwan/get_dns_security_feature_profile.py +126 -0
- pulumi_sdwan/get_dns_security_policy.py +272 -0
- pulumi_sdwan/get_dns_security_policy_definition.py +35 -35
- pulumi_sdwan/get_domain_list_policy_object.py +15 -15
- pulumi_sdwan/get_eigrp_feature_template.py +55 -55
- pulumi_sdwan/get_embedded_security_feature_profile.py +126 -0
- pulumi_sdwan/get_expanded_community_list_policy_object.py +15 -15
- pulumi_sdwan/get_extended_community_list_policy_object.py +15 -15
- pulumi_sdwan/get_feature_device_template.py +29 -29
- pulumi_sdwan/get_geo_location_list_policy_object.py +15 -15
- pulumi_sdwan/get_gps_feature_template.py +48 -48
- pulumi_sdwan/get_hub_and_spoke_topology_policy_definition.py +23 -23
- pulumi_sdwan/get_intrusion_prevention_policy_definition.py +57 -31
- pulumi_sdwan/get_ips_signature_list_policy_object.py +15 -15
- pulumi_sdwan/get_ipv4_acl_policy_definition.py +21 -21
- pulumi_sdwan/get_ipv4_device_acl_policy_definition.py +21 -21
- pulumi_sdwan/get_ipv4_prefix_list_policy_object.py +15 -15
- pulumi_sdwan/get_ipv6_acl_policy_definition.py +21 -21
- pulumi_sdwan/get_ipv6_device_acl_policy_definition.py +21 -21
- pulumi_sdwan/get_ipv6_prefix_list_policy_object.py +15 -15
- pulumi_sdwan/get_local_application_list_policy_object.py +15 -15
- pulumi_sdwan/get_localized_policy.py +37 -37
- pulumi_sdwan/get_mesh_topology_policy_definition.py +23 -23
- pulumi_sdwan/get_mirror_policy_object.py +18 -18
- pulumi_sdwan/get_object_group_policy_definition.py +42 -42
- pulumi_sdwan/get_other_feature_profile.py +14 -14
- pulumi_sdwan/get_other_thousandeyes_feature.py +23 -23
- pulumi_sdwan/get_other_ucse_feature.py +49 -49
- pulumi_sdwan/get_policer_policy_object.py +20 -20
- pulumi_sdwan/get_policy_group.py +183 -0
- pulumi_sdwan/get_policy_object_app_probe_class.py +177 -0
- pulumi_sdwan/get_policy_object_application_list.py +177 -0
- pulumi_sdwan/get_policy_object_as_path_list.py +191 -0
- pulumi_sdwan/get_policy_object_class_map.py +23 -23
- pulumi_sdwan/get_policy_object_color_list.py +23 -23
- pulumi_sdwan/get_policy_object_data_ipv4_prefix_list.py +23 -23
- pulumi_sdwan/get_policy_object_data_ipv6_prefix_list.py +23 -23
- pulumi_sdwan/get_policy_object_expanded_community_list.py +26 -26
- pulumi_sdwan/get_policy_object_extended_community_list.py +23 -23
- pulumi_sdwan/get_policy_object_feature_profile.py +39 -11
- pulumi_sdwan/get_policy_object_ipv4_prefix_list.py +23 -23
- pulumi_sdwan/get_policy_object_ipv6_prefix_list.py +23 -23
- pulumi_sdwan/get_policy_object_mirror.py +23 -23
- pulumi_sdwan/get_policy_object_policer.py +23 -23
- pulumi_sdwan/get_policy_object_preferred_color_group.py +177 -0
- pulumi_sdwan/get_policy_object_security_data_ipv4_prefix_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_fqdn_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_geolocation_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_identity_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_ips_signature.py +177 -0
- pulumi_sdwan/get_policy_object_security_local_application_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_local_domain_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_port_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_protocol_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_scalable_group_tag_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_url_allow_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_url_block_list.py +177 -0
- pulumi_sdwan/get_policy_object_sla_class_list.py +177 -0
- pulumi_sdwan/get_policy_object_standard_community_list.py +177 -0
- pulumi_sdwan/get_policy_object_tloc_list.py +23 -23
- pulumi_sdwan/get_policy_object_unified_advanced_inspection_profile.py +217 -0
- pulumi_sdwan/get_policy_object_unified_advanced_malware_protection.py +239 -0
- pulumi_sdwan/get_policy_object_unified_intrusion_prevention.py +229 -0
- pulumi_sdwan/get_policy_object_unified_tls_ssl_decryption.py +325 -0
- pulumi_sdwan/get_policy_object_unified_tls_ssl_profile.py +261 -0
- pulumi_sdwan/get_policy_object_unified_url_filtering.py +272 -0
- pulumi_sdwan/get_policy_object_vpn_group.py +177 -0
- pulumi_sdwan/get_port_list_policy_object.py +15 -15
- pulumi_sdwan/get_preferred_color_group_policy_object.py +26 -26
- pulumi_sdwan/get_protocol_list_policy_object.py +15 -15
- pulumi_sdwan/get_qos_map_policy_definition.py +19 -19
- pulumi_sdwan/get_region_list_policy_object.py +15 -15
- pulumi_sdwan/get_rewrite_rule_policy_definition.py +19 -19
- pulumi_sdwan/get_route_policy_definition.py +21 -21
- pulumi_sdwan/get_rule_set_policy_definition.py +17 -17
- pulumi_sdwan/get_security_app_hosting_feature_template.py +25 -25
- pulumi_sdwan/get_security_policy.py +137 -39
- pulumi_sdwan/get_service_dhcp_server_feature.py +443 -0
- pulumi_sdwan/get_service_feature_profile.py +14 -14
- pulumi_sdwan/get_service_ipv4_acl_feature.py +191 -0
- pulumi_sdwan/get_service_ipv6_acl_feature.py +191 -0
- pulumi_sdwan/get_service_lan_vpn_feature.py +76 -76
- pulumi_sdwan/get_service_lan_vpn_feature_associate_multicast_feature.py +170 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_bgp_feature.py +170 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_eigrp_feature.py +170 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospf_feature.py +170 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +170 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +170 -0
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature.py +215 -215
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +192 -0
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +192 -0
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +192 -0
- pulumi_sdwan/get_service_lan_vpn_interface_gre_feature.py +84 -84
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature.py +146 -146
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +192 -0
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature.py +135 -91
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +192 -0
- pulumi_sdwan/get_service_multicast_feature.py +513 -0
- pulumi_sdwan/get_service_object_tracker_feature.py +44 -44
- pulumi_sdwan/get_service_object_tracker_group_feature.py +31 -31
- pulumi_sdwan/get_service_route_policy_feature.py +25 -25
- pulumi_sdwan/get_service_routing_bgp_feature.py +114 -114
- pulumi_sdwan/get_service_routing_eigrp_feature.py +398 -0
- pulumi_sdwan/get_service_routing_ospf_feature.py +77 -77
- pulumi_sdwan/get_service_routing_ospfv3_ipv4_feature.py +90 -90
- pulumi_sdwan/get_service_routing_ospfv3_ipv6_feature.py +90 -90
- pulumi_sdwan/get_service_switchport_feature.py +28 -28
- pulumi_sdwan/get_service_tracker_feature.py +66 -66
- pulumi_sdwan/get_service_tracker_group_feature.py +27 -27
- pulumi_sdwan/get_service_wireless_lan_feature.py +415 -0
- pulumi_sdwan/get_sig_security_feature_profile.py +126 -0
- pulumi_sdwan/get_site_list_policy_object.py +15 -15
- pulumi_sdwan/get_sla_class_policy_object.py +32 -32
- pulumi_sdwan/get_standard_community_list_policy_object.py +15 -15
- pulumi_sdwan/get_switchport_feature_template.py +36 -36
- pulumi_sdwan/get_system_aaa_feature.py +45 -45
- pulumi_sdwan/get_system_banner_feature.py +30 -30
- pulumi_sdwan/get_system_basic_feature.py +140 -140
- pulumi_sdwan/get_system_bfd_feature.py +35 -35
- pulumi_sdwan/get_system_feature_profile.py +14 -14
- pulumi_sdwan/get_system_flexible_port_speed_feature.py +26 -26
- pulumi_sdwan/get_system_global_feature.py +114 -114
- pulumi_sdwan/get_system_ipv4_device_access_feature.py +25 -25
- pulumi_sdwan/get_system_ipv6_device_access_feature.py +25 -25
- pulumi_sdwan/get_system_logging_feature.py +37 -37
- pulumi_sdwan/get_system_mrf_feature.py +36 -36
- pulumi_sdwan/get_system_ntp_feature.py +40 -40
- pulumi_sdwan/get_system_omp_feature.py +138 -138
- pulumi_sdwan/get_system_performance_monitoring_feature.py +34 -34
- pulumi_sdwan/get_system_remote_access_feature.py +102 -102
- pulumi_sdwan/get_system_security_feature.py +44 -44
- pulumi_sdwan/get_system_snmp_feature.py +39 -39
- pulumi_sdwan/get_tag.py +140 -0
- pulumi_sdwan/get_tloc_list_policy_object.py +15 -15
- pulumi_sdwan/get_tls_ssl_decryption_policy_definition.py +48 -48
- pulumi_sdwan/get_tls_ssl_profile_policy_definition.py +38 -38
- pulumi_sdwan/get_traffic_data_policy_definition.py +21 -21
- pulumi_sdwan/get_transport_cellular_controller_feature.py +302 -0
- pulumi_sdwan/get_transport_cellular_profile_feature.py +372 -0
- pulumi_sdwan/get_transport_feature_profile.py +14 -14
- pulumi_sdwan/get_transport_gps_feature.py +46 -46
- pulumi_sdwan/get_transport_ipv4_acl_feature.py +191 -0
- pulumi_sdwan/get_transport_ipv6_acl_feature.py +191 -0
- pulumi_sdwan/get_transport_ipv6_tracker_feature.py +58 -58
- pulumi_sdwan/get_transport_ipv6_tracker_group_feature.py +31 -31
- pulumi_sdwan/get_transport_management_vpn_feature.py +45 -45
- pulumi_sdwan/get_transport_management_vpn_interface_ethernet_feature.py +149 -121
- pulumi_sdwan/get_transport_route_policy_feature.py +25 -25
- pulumi_sdwan/get_transport_routing_bgp_feature.py +115 -115
- pulumi_sdwan/get_transport_routing_ospf_feature.py +77 -77
- pulumi_sdwan/get_transport_routing_ospfv3_ipv4_feature.py +90 -90
- pulumi_sdwan/get_transport_routing_ospfv3_ipv6_feature.py +90 -90
- pulumi_sdwan/get_transport_t1_e1_controller_feature.py +219 -0
- pulumi_sdwan/get_transport_tracker_feature.py +58 -58
- pulumi_sdwan/get_transport_tracker_group_feature.py +27 -27
- pulumi_sdwan/get_transport_wan_vpn_feature.py +49 -49
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_bgp_feature.py +170 -0
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospf_feature.py +170 -0
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +170 -0
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +170 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature.py +319 -275
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +192 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +192 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature.py +462 -390
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +192 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +192 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +192 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +192 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature.py +84 -84
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +192 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature.py +146 -146
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +192 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_t1_e1_serial_feature.py +272 -228
- pulumi_sdwan/get_url_filtering_policy_definition.py +53 -41
- pulumi_sdwan/get_vedge_inventory.py +7 -7
- pulumi_sdwan/get_vpn_interface_cellular_feature_template.py +308 -308
- pulumi_sdwan/get_vpn_interface_dsl_ipoe_feature_template.py +335 -335
- pulumi_sdwan/get_vpn_interface_dsl_pppoa_feature_template.py +312 -312
- pulumi_sdwan/get_vpn_interface_dsl_pppoe_feature_template.py +329 -329
- pulumi_sdwan/get_vpn_interface_ethernet_pppoe_feature_template.py +328 -328
- pulumi_sdwan/get_vpn_interface_multilink_feature_template.py +287 -287
- pulumi_sdwan/get_vpn_interface_svi_feature_template.py +89 -89
- pulumi_sdwan/get_vpn_interface_t1_e1_serial_feature_template.py +255 -255
- pulumi_sdwan/get_vpn_list_policy_object.py +15 -15
- pulumi_sdwan/get_vpn_membership_policy_definition.py +19 -19
- pulumi_sdwan/get_zone_based_firewall_policy_definition.py +22 -22
- pulumi_sdwan/get_zone_list_policy_object.py +15 -15
- pulumi_sdwan/gps_feature_template.py +337 -304
- pulumi_sdwan/hub_and_spoke_topology_policy_definition.py +146 -91
- pulumi_sdwan/intrusion_prevention_policy_definition.py +305 -179
- pulumi_sdwan/ips_signature_list_policy_object.py +64 -31
- pulumi_sdwan/ipv4_acl_policy_definition.py +145 -77
- pulumi_sdwan/ipv4_device_acl_policy_definition.py +139 -77
- pulumi_sdwan/ipv4_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/ipv6_acl_policy_definition.py +145 -77
- pulumi_sdwan/ipv6_device_acl_policy_definition.py +139 -77
- pulumi_sdwan/ipv6_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/local_application_list_policy_object.py +36 -31
- pulumi_sdwan/localized_policy.py +309 -248
- pulumi_sdwan/mesh_topology_policy_definition.py +128 -91
- pulumi_sdwan/mirror_policy_object.py +67 -62
- pulumi_sdwan/object_group_policy_definition.py +271 -266
- pulumi_sdwan/other_feature_profile.py +43 -36
- pulumi_sdwan/other_thousandeyes_feature.py +124 -67
- pulumi_sdwan/other_ucse_feature.py +461 -355
- pulumi_sdwan/outputs.py +55155 -42638
- pulumi_sdwan/policer_policy_object.py +114 -88
- pulumi_sdwan/policy_group.py +447 -0
- pulumi_sdwan/policy_object_app_probe_class.py +384 -0
- pulumi_sdwan/policy_object_application_list.py +376 -0
- pulumi_sdwan/policy_object_as_path_list.py +433 -0
- pulumi_sdwan/policy_object_class_map.py +76 -67
- pulumi_sdwan/policy_object_color_list.py +76 -67
- pulumi_sdwan/policy_object_data_ipv4_prefix_list.py +108 -67
- pulumi_sdwan/policy_object_data_ipv6_prefix_list.py +108 -67
- pulumi_sdwan/policy_object_expanded_community_list.py +107 -98
- pulumi_sdwan/policy_object_extended_community_list.py +106 -67
- pulumi_sdwan/policy_object_feature_profile.py +43 -36
- pulumi_sdwan/policy_object_ipv4_prefix_list.py +112 -67
- pulumi_sdwan/policy_object_ipv6_prefix_list.py +112 -67
- pulumi_sdwan/policy_object_mirror.py +108 -67
- pulumi_sdwan/policy_object_policer.py +110 -67
- pulumi_sdwan/policy_object_preferred_color_group.py +386 -0
- pulumi_sdwan/policy_object_security_data_ipv4_prefix_list.py +363 -0
- pulumi_sdwan/policy_object_security_fqdn_list.py +363 -0
- pulumi_sdwan/policy_object_security_geolocation_list.py +376 -0
- pulumi_sdwan/policy_object_security_identity_list.py +375 -0
- pulumi_sdwan/policy_object_security_ips_signature.py +378 -0
- pulumi_sdwan/policy_object_security_local_application_list.py +375 -0
- pulumi_sdwan/policy_object_security_local_domain_list.py +363 -0
- pulumi_sdwan/policy_object_security_port_list.py +376 -0
- pulumi_sdwan/policy_object_security_protocol_list.py +363 -0
- pulumi_sdwan/policy_object_security_scalable_group_tag_list.py +365 -0
- pulumi_sdwan/policy_object_security_url_allow_list.py +376 -0
- pulumi_sdwan/policy_object_security_url_block_list.py +376 -0
- pulumi_sdwan/policy_object_sla_class_list.py +384 -0
- pulumi_sdwan/policy_object_standard_community_list.py +376 -0
- pulumi_sdwan/policy_object_tloc_list.py +112 -67
- pulumi_sdwan/policy_object_unified_advanced_inspection_profile.py +514 -0
- pulumi_sdwan/policy_object_unified_advanced_malware_protection.py +668 -0
- pulumi_sdwan/policy_object_unified_intrusion_prevention.py +576 -0
- pulumi_sdwan/policy_object_unified_tls_ssl_decryption.py +985 -0
- pulumi_sdwan/policy_object_unified_tls_ssl_profile.py +689 -0
- pulumi_sdwan/policy_object_unified_url_filtering.py +761 -0
- pulumi_sdwan/policy_object_vpn_group.py +376 -0
- pulumi_sdwan/port_list_policy_object.py +38 -33
- pulumi_sdwan/preferred_color_group_policy_object.py +165 -139
- pulumi_sdwan/protocol_list_policy_object.py +36 -31
- pulumi_sdwan/provider.py +97 -56
- pulumi_sdwan/pulumi-plugin.json +1 -1
- pulumi_sdwan/qos_map_policy_definition.py +102 -57
- pulumi_sdwan/region_list_policy_object.py +62 -31
- pulumi_sdwan/rewrite_rule_policy_definition.py +96 -57
- pulumi_sdwan/route_policy_definition.py +143 -77
- pulumi_sdwan/rule_set_policy_definition.py +101 -48
- pulumi_sdwan/security_app_hosting_feature_template.py +135 -91
- pulumi_sdwan/security_policy.py +694 -246
- pulumi_sdwan/service_dhcp_server_feature.py +1324 -0
- pulumi_sdwan/service_feature_profile.py +43 -36
- pulumi_sdwan/service_ipv4_acl_feature.py +470 -0
- pulumi_sdwan/service_ipv6_acl_feature.py +470 -0
- pulumi_sdwan/service_lan_vpn_feature.py +677 -425
- pulumi_sdwan/service_lan_vpn_feature_associate_multicast_feature.py +322 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_bgp_feature.py +322 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_eigrp_feature.py +322 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospf_feature.py +322 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +322 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +322 -0
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature.py +2011 -1617
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +372 -0
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +372 -0
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +372 -0
- pulumi_sdwan/service_lan_vpn_interface_gre_feature.py +670 -650
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature.py +1426 -1341
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +372 -0
- pulumi_sdwan/service_lan_vpn_interface_svi_feature.py +1020 -669
- pulumi_sdwan/service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +372 -0
- pulumi_sdwan/service_multicast_feature.py +1651 -0
- pulumi_sdwan/service_object_tracker_feature.py +307 -291
- pulumi_sdwan/service_object_tracker_group_feature.py +205 -141
- pulumi_sdwan/service_route_policy_feature.py +174 -87
- pulumi_sdwan/service_routing_bgp_feature.py +1230 -868
- pulumi_sdwan/service_routing_eigrp_feature.py +1200 -0
- pulumi_sdwan/service_routing_ospf_feature.py +803 -547
- pulumi_sdwan/service_routing_ospfv3_ipv4_feature.py +928 -666
- pulumi_sdwan/service_routing_ospfv3_ipv6_feature.py +924 -666
- pulumi_sdwan/service_switchport_feature.py +212 -107
- pulumi_sdwan/service_tracker_feature.py +532 -453
- pulumi_sdwan/service_tracker_group_feature.py +159 -104
- pulumi_sdwan/service_wireless_lan_feature.py +1230 -0
- pulumi_sdwan/sig_security_feature_profile.py +239 -0
- pulumi_sdwan/site_list_policy_object.py +62 -31
- pulumi_sdwan/sla_class_policy_object.py +249 -216
- pulumi_sdwan/standard_community_list_policy_object.py +36 -31
- pulumi_sdwan/switchport_feature_template.py +330 -191
- pulumi_sdwan/system_aaa_feature.py +419 -244
- pulumi_sdwan/system_banner_feature.py +133 -124
- pulumi_sdwan/system_basic_feature.py +1476 -1669
- pulumi_sdwan/system_bfd_feature.py +252 -178
- pulumi_sdwan/system_feature_profile.py +43 -36
- pulumi_sdwan/system_flexible_port_speed_feature.py +124 -115
- pulumi_sdwan/system_global_feature.py +1089 -912
- pulumi_sdwan/system_ipv4_device_access_feature.py +148 -87
- pulumi_sdwan/system_ipv6_device_access_feature.py +148 -87
- pulumi_sdwan/system_logging_feature.py +317 -196
- pulumi_sdwan/system_mrf_feature.py +256 -211
- pulumi_sdwan/system_ntp_feature.py +305 -225
- pulumi_sdwan/system_omp_feature.py +1388 -1134
- pulumi_sdwan/system_performance_monitoring_feature.py +229 -191
- pulumi_sdwan/system_remote_access_feature.py +947 -868
- pulumi_sdwan/system_security_feature.py +397 -271
- pulumi_sdwan/system_snmp_feature.py +311 -196
- pulumi_sdwan/tag.py +288 -0
- pulumi_sdwan/tloc_list_policy_object.py +68 -31
- pulumi_sdwan/tls_ssl_decryption_policy_definition.py +503 -342
- pulumi_sdwan/tls_ssl_profile_policy_definition.py +257 -238
- pulumi_sdwan/traffic_data_policy_definition.py +143 -77
- pulumi_sdwan/transport_cellular_controller_feature.py +829 -0
- pulumi_sdwan/transport_cellular_profile_feature.py +1076 -0
- pulumi_sdwan/transport_feature_profile.py +43 -36
- pulumi_sdwan/transport_gps_feature.py +324 -280
- pulumi_sdwan/transport_ipv4_acl_feature.py +470 -0
- pulumi_sdwan/transport_ipv6_acl_feature.py +470 -0
- pulumi_sdwan/transport_ipv6_tracker_feature.py +464 -385
- pulumi_sdwan/transport_ipv6_tracker_group_feature.py +195 -138
- pulumi_sdwan/transport_management_vpn_feature.py +342 -256
- pulumi_sdwan/transport_management_vpn_interface_ethernet_feature.py +1282 -970
- pulumi_sdwan/transport_route_policy_feature.py +174 -87
- pulumi_sdwan/transport_routing_bgp_feature.py +1241 -871
- pulumi_sdwan/transport_routing_ospf_feature.py +803 -547
- pulumi_sdwan/transport_routing_ospfv3_ipv4_feature.py +928 -666
- pulumi_sdwan/transport_routing_ospfv3_ipv6_feature.py +924 -666
- pulumi_sdwan/transport_t1_e1_controller_feature.py +551 -0
- pulumi_sdwan/transport_tracker_feature.py +464 -385
- pulumi_sdwan/transport_tracker_group_feature.py +159 -104
- pulumi_sdwan/transport_wan_vpn_feature.py +404 -284
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_bgp_feature.py +322 -0
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospf_feature.py +322 -0
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +322 -0
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +322 -0
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature.py +3091 -2362
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +372 -0
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +372 -0
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature.py +4607 -3561
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +372 -0
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +372 -0
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +372 -0
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +372 -0
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature.py +634 -610
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +372 -0
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature.py +1346 -1252
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +372 -0
- pulumi_sdwan/transport_wan_vpn_interface_t1_e1_serial_feature.py +2414 -1970
- pulumi_sdwan/url_filtering_policy_definition.py +340 -270
- pulumi_sdwan/vpn_interface_cellular_feature_template.py +3368 -2667
- pulumi_sdwan/vpn_interface_dsl_ipoe_feature_template.py +3645 -2908
- pulumi_sdwan/vpn_interface_dsl_pppoa_feature_template.py +3435 -2698
- pulumi_sdwan/vpn_interface_dsl_pppoe_feature_template.py +3609 -2860
- pulumi_sdwan/vpn_interface_ethernet_pppoe_feature_template.py +3586 -2857
- pulumi_sdwan/vpn_interface_multilink_feature_template.py +3116 -2473
- pulumi_sdwan/vpn_interface_svi_feature_template.py +875 -618
- pulumi_sdwan/vpn_interface_t1_e1_serial_feature_template.py +2720 -2208
- pulumi_sdwan/vpn_list_policy_object.py +62 -31
- pulumi_sdwan/vpn_membership_policy_definition.py +92 -57
- pulumi_sdwan/zone_based_firewall_policy_definition.py +195 -104
- pulumi_sdwan/zone_list_policy_object.py +36 -31
- {pulumi_sdwan-0.2.0a1730181615.dist-info → pulumi_sdwan-0.6.0a1764803684.dist-info}/METADATA +7 -7
- pulumi_sdwan-0.6.0a1764803684.dist-info/RECORD +496 -0
- {pulumi_sdwan-0.2.0a1730181615.dist-info → pulumi_sdwan-0.6.0a1764803684.dist-info}/WHEEL +1 -1
- pulumi_sdwan-0.2.0a1730181615.dist-info/RECORD +0 -364
- {pulumi_sdwan-0.2.0a1730181615.dist-info → pulumi_sdwan-0.6.0a1764803684.dist-info}/top_level.txt +0 -0
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import
|
|
5
|
+
import builtins as _builtins
|
|
6
6
|
import warnings
|
|
7
7
|
import sys
|
|
8
8
|
import pulumi
|
|
@@ -21,46 +21,58 @@ __all__ = ['TlsSslDecryptionPolicyDefinitionArgs', 'TlsSslDecryptionPolicyDefini
|
|
|
21
21
|
@pulumi.input_type
|
|
22
22
|
class TlsSslDecryptionPolicyDefinitionArgs:
|
|
23
23
|
def __init__(__self__, *,
|
|
24
|
-
description: pulumi.Input[str],
|
|
25
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
26
|
-
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
27
|
-
default_action: Optional[pulumi.Input[str]] = None,
|
|
28
|
-
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
29
|
-
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
30
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
31
|
-
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
32
|
-
mode: Optional[pulumi.Input[str]] = None,
|
|
33
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
24
|
+
description: pulumi.Input[_builtins.str],
|
|
25
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
26
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
34
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]] = None,
|
|
35
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
36
|
-
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
37
|
-
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
38
|
-
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
39
|
-
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
40
|
-
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
35
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
39
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
40
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
41
41
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]] = None,
|
|
42
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None):
|
|
42
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
43
43
|
"""
|
|
44
44
|
The set of arguments for constructing a TlsSslDecryptionPolicyDefinition resource.
|
|
45
|
-
:param pulumi.Input[str] description: The description of the policy definition.
|
|
46
|
-
:param pulumi.Input[int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
47
|
-
:param pulumi.Input[str] certificate_revocation_status: Certificate revocation status
|
|
48
|
-
|
|
49
|
-
:param pulumi.Input[str]
|
|
50
|
-
|
|
51
|
-
:param pulumi.Input[str]
|
|
52
|
-
|
|
53
|
-
:param pulumi.Input[str]
|
|
54
|
-
|
|
45
|
+
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
46
|
+
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
47
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
48
|
+
- Choices: `ocsp`, `none`
|
|
49
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
50
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
51
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
52
|
+
- Choices: `P256`, `P384`, `P521`
|
|
53
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
54
|
+
- Choices: `drop`, `decrypt`
|
|
55
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
56
|
+
- Choices: `open`, `close`
|
|
57
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
58
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
59
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
60
|
+
- Choices: `security`, `unified`
|
|
61
|
+
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
55
62
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
56
|
-
:param pulumi.Input[str] rsa_key_pair_modulus: RSA key pair modules
|
|
57
|
-
|
|
58
|
-
:param pulumi.Input[str]
|
|
59
|
-
:param pulumi.Input[str]
|
|
60
|
-
|
|
61
|
-
:param pulumi.Input[str]
|
|
63
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
64
|
+
- Choices: `1024`, `2048`, `4096`
|
|
65
|
+
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
66
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
67
|
+
- Choices: `drop`, `decrypt`
|
|
68
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
69
|
+
- Choices: `drop`, `no-decrypt`
|
|
70
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
71
|
+
- Choices: `drop`, `no-decrypt`
|
|
72
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
73
|
+
- Choices: `drop`, `decrypt`
|
|
62
74
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
63
|
-
:param pulumi.Input[bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
75
|
+
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
64
76
|
"""
|
|
65
77
|
pulumi.set(__self__, "description", description)
|
|
66
78
|
if certificate_lifetime_in_days is not None:
|
|
@@ -100,127 +112,134 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
100
112
|
if use_default_ca_cert_bundle is not None:
|
|
101
113
|
pulumi.set(__self__, "use_default_ca_cert_bundle", use_default_ca_cert_bundle)
|
|
102
114
|
|
|
103
|
-
@property
|
|
115
|
+
@_builtins.property
|
|
104
116
|
@pulumi.getter
|
|
105
|
-
def description(self) -> pulumi.Input[str]:
|
|
117
|
+
def description(self) -> pulumi.Input[_builtins.str]:
|
|
106
118
|
"""
|
|
107
119
|
The description of the policy definition.
|
|
108
120
|
"""
|
|
109
121
|
return pulumi.get(self, "description")
|
|
110
122
|
|
|
111
123
|
@description.setter
|
|
112
|
-
def description(self, value: pulumi.Input[str]):
|
|
124
|
+
def description(self, value: pulumi.Input[_builtins.str]):
|
|
113
125
|
pulumi.set(self, "description", value)
|
|
114
126
|
|
|
115
|
-
@property
|
|
127
|
+
@_builtins.property
|
|
116
128
|
@pulumi.getter(name="certificateLifetimeInDays")
|
|
117
|
-
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[int]]:
|
|
129
|
+
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
118
130
|
"""
|
|
119
131
|
Certificate Lifetime(in Days)
|
|
120
132
|
"""
|
|
121
133
|
return pulumi.get(self, "certificate_lifetime_in_days")
|
|
122
134
|
|
|
123
135
|
@certificate_lifetime_in_days.setter
|
|
124
|
-
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[int]]):
|
|
136
|
+
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
125
137
|
pulumi.set(self, "certificate_lifetime_in_days", value)
|
|
126
138
|
|
|
127
|
-
@property
|
|
139
|
+
@_builtins.property
|
|
128
140
|
@pulumi.getter(name="certificateRevocationStatus")
|
|
129
|
-
def certificate_revocation_status(self) -> Optional[pulumi.Input[str]]:
|
|
141
|
+
def certificate_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
130
142
|
"""
|
|
131
|
-
Certificate revocation status
|
|
143
|
+
Certificate revocation status
|
|
144
|
+
- Choices: `ocsp`, `none`
|
|
132
145
|
"""
|
|
133
146
|
return pulumi.get(self, "certificate_revocation_status")
|
|
134
147
|
|
|
135
148
|
@certificate_revocation_status.setter
|
|
136
|
-
def certificate_revocation_status(self, value: Optional[pulumi.Input[str]]):
|
|
149
|
+
def certificate_revocation_status(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
137
150
|
pulumi.set(self, "certificate_revocation_status", value)
|
|
138
151
|
|
|
139
|
-
@property
|
|
152
|
+
@_builtins.property
|
|
140
153
|
@pulumi.getter(name="defaultAction")
|
|
141
|
-
def default_action(self) -> Optional[pulumi.Input[str]]:
|
|
154
|
+
def default_action(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
142
155
|
"""
|
|
143
|
-
Default action (applies when `mode` set to `security`)
|
|
156
|
+
Default action (applies when `mode` set to `security`)
|
|
157
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
144
158
|
"""
|
|
145
159
|
return pulumi.get(self, "default_action")
|
|
146
160
|
|
|
147
161
|
@default_action.setter
|
|
148
|
-
def default_action(self, value: Optional[pulumi.Input[str]]):
|
|
162
|
+
def default_action(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
149
163
|
pulumi.set(self, "default_action", value)
|
|
150
164
|
|
|
151
|
-
@property
|
|
165
|
+
@_builtins.property
|
|
152
166
|
@pulumi.getter(name="ecKeyType")
|
|
153
|
-
def ec_key_type(self) -> Optional[pulumi.Input[str]]:
|
|
167
|
+
def ec_key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
154
168
|
"""
|
|
155
|
-
EC Key Type
|
|
169
|
+
EC Key Type
|
|
170
|
+
- Choices: `P256`, `P384`, `P521`
|
|
156
171
|
"""
|
|
157
172
|
return pulumi.get(self, "ec_key_type")
|
|
158
173
|
|
|
159
174
|
@ec_key_type.setter
|
|
160
|
-
def ec_key_type(self, value: Optional[pulumi.Input[str]]):
|
|
175
|
+
def ec_key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
161
176
|
pulumi.set(self, "ec_key_type", value)
|
|
162
177
|
|
|
163
|
-
@property
|
|
178
|
+
@_builtins.property
|
|
164
179
|
@pulumi.getter(name="expiredCertificate")
|
|
165
|
-
def expired_certificate(self) -> Optional[pulumi.Input[str]]:
|
|
180
|
+
def expired_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
166
181
|
"""
|
|
167
|
-
Expired certificate action
|
|
182
|
+
Expired certificate action
|
|
183
|
+
- Choices: `drop`, `decrypt`
|
|
168
184
|
"""
|
|
169
185
|
return pulumi.get(self, "expired_certificate")
|
|
170
186
|
|
|
171
187
|
@expired_certificate.setter
|
|
172
|
-
def expired_certificate(self, value: Optional[pulumi.Input[str]]):
|
|
188
|
+
def expired_certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
173
189
|
pulumi.set(self, "expired_certificate", value)
|
|
174
190
|
|
|
175
|
-
@property
|
|
191
|
+
@_builtins.property
|
|
176
192
|
@pulumi.getter(name="failureMode")
|
|
177
|
-
def failure_mode(self) -> Optional[pulumi.Input[str]]:
|
|
193
|
+
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
178
194
|
"""
|
|
179
|
-
Failure mode
|
|
195
|
+
Failure mode
|
|
196
|
+
- Choices: `open`, `close`
|
|
180
197
|
"""
|
|
181
198
|
return pulumi.get(self, "failure_mode")
|
|
182
199
|
|
|
183
200
|
@failure_mode.setter
|
|
184
|
-
def failure_mode(self, value: Optional[pulumi.Input[str]]):
|
|
201
|
+
def failure_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
185
202
|
pulumi.set(self, "failure_mode", value)
|
|
186
203
|
|
|
187
|
-
@property
|
|
204
|
+
@_builtins.property
|
|
188
205
|
@pulumi.getter(name="minimalTlsVersion")
|
|
189
|
-
def minimal_tls_version(self) -> Optional[pulumi.Input[str]]:
|
|
206
|
+
def minimal_tls_version(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
190
207
|
"""
|
|
191
|
-
Minimal TLS Version
|
|
208
|
+
Minimal TLS Version
|
|
209
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
192
210
|
"""
|
|
193
211
|
return pulumi.get(self, "minimal_tls_version")
|
|
194
212
|
|
|
195
213
|
@minimal_tls_version.setter
|
|
196
|
-
def minimal_tls_version(self, value: Optional[pulumi.Input[str]]):
|
|
214
|
+
def minimal_tls_version(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
197
215
|
pulumi.set(self, "minimal_tls_version", value)
|
|
198
216
|
|
|
199
|
-
@property
|
|
217
|
+
@_builtins.property
|
|
200
218
|
@pulumi.getter
|
|
201
|
-
def mode(self) -> Optional[pulumi.Input[str]]:
|
|
219
|
+
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
202
220
|
"""
|
|
203
|
-
The policy mode
|
|
221
|
+
The policy mode
|
|
222
|
+
- Choices: `security`, `unified`
|
|
204
223
|
"""
|
|
205
224
|
return pulumi.get(self, "mode")
|
|
206
225
|
|
|
207
226
|
@mode.setter
|
|
208
|
-
def mode(self, value: Optional[pulumi.Input[str]]):
|
|
227
|
+
def mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
209
228
|
pulumi.set(self, "mode", value)
|
|
210
229
|
|
|
211
|
-
@property
|
|
230
|
+
@_builtins.property
|
|
212
231
|
@pulumi.getter
|
|
213
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
232
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
214
233
|
"""
|
|
215
234
|
The name of the policy definition.
|
|
216
235
|
"""
|
|
217
236
|
return pulumi.get(self, "name")
|
|
218
237
|
|
|
219
238
|
@name.setter
|
|
220
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
239
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
221
240
|
pulumi.set(self, "name", value)
|
|
222
241
|
|
|
223
|
-
@property
|
|
242
|
+
@_builtins.property
|
|
224
243
|
@pulumi.getter(name="networkRules")
|
|
225
244
|
def network_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]:
|
|
226
245
|
"""
|
|
@@ -232,79 +251,84 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
232
251
|
def network_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]):
|
|
233
252
|
pulumi.set(self, "network_rules", value)
|
|
234
253
|
|
|
235
|
-
@property
|
|
254
|
+
@_builtins.property
|
|
236
255
|
@pulumi.getter(name="rsaKeyPairModulus")
|
|
237
|
-
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[str]]:
|
|
256
|
+
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
238
257
|
"""
|
|
239
|
-
RSA key pair modules
|
|
258
|
+
RSA key pair modules
|
|
259
|
+
- Choices: `1024`, `2048`, `4096`
|
|
240
260
|
"""
|
|
241
261
|
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
242
262
|
|
|
243
263
|
@rsa_key_pair_modulus.setter
|
|
244
|
-
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[str]]):
|
|
264
|
+
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
245
265
|
pulumi.set(self, "rsa_key_pair_modulus", value)
|
|
246
266
|
|
|
247
|
-
@property
|
|
267
|
+
@_builtins.property
|
|
248
268
|
@pulumi.getter(name="sslDecryptionEnabled")
|
|
249
|
-
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[str]]:
|
|
269
|
+
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
250
270
|
"""
|
|
251
271
|
SSL decryption enabled
|
|
252
272
|
"""
|
|
253
273
|
return pulumi.get(self, "ssl_decryption_enabled")
|
|
254
274
|
|
|
255
275
|
@ssl_decryption_enabled.setter
|
|
256
|
-
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[str]]):
|
|
276
|
+
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
257
277
|
pulumi.set(self, "ssl_decryption_enabled", value)
|
|
258
278
|
|
|
259
|
-
@property
|
|
279
|
+
@_builtins.property
|
|
260
280
|
@pulumi.getter(name="unknownRevocationStatus")
|
|
261
|
-
def unknown_revocation_status(self) -> Optional[pulumi.Input[str]]:
|
|
281
|
+
def unknown_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
262
282
|
"""
|
|
263
|
-
Unknown revocation status action
|
|
283
|
+
Unknown revocation status action
|
|
284
|
+
- Choices: `drop`, `decrypt`
|
|
264
285
|
"""
|
|
265
286
|
return pulumi.get(self, "unknown_revocation_status")
|
|
266
287
|
|
|
267
288
|
@unknown_revocation_status.setter
|
|
268
|
-
def unknown_revocation_status(self, value: Optional[pulumi.Input[str]]):
|
|
289
|
+
def unknown_revocation_status(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
269
290
|
pulumi.set(self, "unknown_revocation_status", value)
|
|
270
291
|
|
|
271
|
-
@property
|
|
292
|
+
@_builtins.property
|
|
272
293
|
@pulumi.getter(name="unsupportedCipherSuites")
|
|
273
|
-
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[str]]:
|
|
294
|
+
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
274
295
|
"""
|
|
275
|
-
Unsupported cipher suites action
|
|
296
|
+
Unsupported cipher suites action
|
|
297
|
+
- Choices: `drop`, `no-decrypt`
|
|
276
298
|
"""
|
|
277
299
|
return pulumi.get(self, "unsupported_cipher_suites")
|
|
278
300
|
|
|
279
301
|
@unsupported_cipher_suites.setter
|
|
280
|
-
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[str]]):
|
|
302
|
+
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
281
303
|
pulumi.set(self, "unsupported_cipher_suites", value)
|
|
282
304
|
|
|
283
|
-
@property
|
|
305
|
+
@_builtins.property
|
|
284
306
|
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
285
|
-
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[str]]:
|
|
307
|
+
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
286
308
|
"""
|
|
287
|
-
Unsupported protocol versions action
|
|
309
|
+
Unsupported protocol versions action
|
|
310
|
+
- Choices: `drop`, `no-decrypt`
|
|
288
311
|
"""
|
|
289
312
|
return pulumi.get(self, "unsupported_protocol_versions")
|
|
290
313
|
|
|
291
314
|
@unsupported_protocol_versions.setter
|
|
292
|
-
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[str]]):
|
|
315
|
+
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
293
316
|
pulumi.set(self, "unsupported_protocol_versions", value)
|
|
294
317
|
|
|
295
|
-
@property
|
|
318
|
+
@_builtins.property
|
|
296
319
|
@pulumi.getter(name="untrustedCertificate")
|
|
297
|
-
def untrusted_certificate(self) -> Optional[pulumi.Input[str]]:
|
|
320
|
+
def untrusted_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
298
321
|
"""
|
|
299
|
-
Untrusted certificate action
|
|
322
|
+
Untrusted certificate action
|
|
323
|
+
- Choices: `drop`, `decrypt`
|
|
300
324
|
"""
|
|
301
325
|
return pulumi.get(self, "untrusted_certificate")
|
|
302
326
|
|
|
303
327
|
@untrusted_certificate.setter
|
|
304
|
-
def untrusted_certificate(self, value: Optional[pulumi.Input[str]]):
|
|
328
|
+
def untrusted_certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
305
329
|
pulumi.set(self, "untrusted_certificate", value)
|
|
306
330
|
|
|
307
|
-
@property
|
|
331
|
+
@_builtins.property
|
|
308
332
|
@pulumi.getter(name="urlRules")
|
|
309
333
|
def url_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]:
|
|
310
334
|
"""
|
|
@@ -316,64 +340,76 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
316
340
|
def url_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]):
|
|
317
341
|
pulumi.set(self, "url_rules", value)
|
|
318
342
|
|
|
319
|
-
@property
|
|
343
|
+
@_builtins.property
|
|
320
344
|
@pulumi.getter(name="useDefaultCaCertBundle")
|
|
321
|
-
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[bool]]:
|
|
345
|
+
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
322
346
|
"""
|
|
323
347
|
Use default CA certificate bundle
|
|
324
348
|
"""
|
|
325
349
|
return pulumi.get(self, "use_default_ca_cert_bundle")
|
|
326
350
|
|
|
327
351
|
@use_default_ca_cert_bundle.setter
|
|
328
|
-
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[bool]]):
|
|
352
|
+
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
329
353
|
pulumi.set(self, "use_default_ca_cert_bundle", value)
|
|
330
354
|
|
|
331
355
|
|
|
332
356
|
@pulumi.input_type
|
|
333
357
|
class _TlsSslDecryptionPolicyDefinitionState:
|
|
334
358
|
def __init__(__self__, *,
|
|
335
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
336
|
-
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
337
|
-
default_action: Optional[pulumi.Input[str]] = None,
|
|
338
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
339
|
-
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
340
|
-
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
341
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
342
|
-
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
343
|
-
mode: Optional[pulumi.Input[str]] = None,
|
|
344
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
359
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
360
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
361
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
362
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
363
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
364
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
365
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
366
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
367
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
368
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
345
369
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]] = None,
|
|
346
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
347
|
-
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
348
|
-
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
349
|
-
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
350
|
-
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
351
|
-
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
370
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
371
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
372
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
373
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
374
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
375
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
352
376
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]] = None,
|
|
353
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None,
|
|
354
|
-
version: Optional[pulumi.Input[int]] = None):
|
|
377
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
378
|
+
version: Optional[pulumi.Input[_builtins.int]] = None):
|
|
355
379
|
"""
|
|
356
380
|
Input properties used for looking up and filtering TlsSslDecryptionPolicyDefinition resources.
|
|
357
|
-
:param pulumi.Input[int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
358
|
-
:param pulumi.Input[str] certificate_revocation_status: Certificate revocation status
|
|
359
|
-
|
|
360
|
-
:param pulumi.Input[str]
|
|
361
|
-
|
|
362
|
-
:param pulumi.Input[str]
|
|
363
|
-
:param pulumi.Input[str]
|
|
364
|
-
|
|
365
|
-
:param pulumi.Input[str]
|
|
366
|
-
|
|
381
|
+
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
382
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
383
|
+
- Choices: `ocsp`, `none`
|
|
384
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
385
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
386
|
+
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
387
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
388
|
+
- Choices: `P256`, `P384`, `P521`
|
|
389
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
390
|
+
- Choices: `drop`, `decrypt`
|
|
391
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
392
|
+
- Choices: `open`, `close`
|
|
393
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
394
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
395
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
396
|
+
- Choices: `security`, `unified`
|
|
397
|
+
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
367
398
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
368
|
-
:param pulumi.Input[str] rsa_key_pair_modulus: RSA key pair modules
|
|
369
|
-
|
|
370
|
-
:param pulumi.Input[str]
|
|
371
|
-
:param pulumi.Input[str]
|
|
372
|
-
|
|
373
|
-
:param pulumi.Input[str]
|
|
399
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
400
|
+
- Choices: `1024`, `2048`, `4096`
|
|
401
|
+
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
402
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
403
|
+
- Choices: `drop`, `decrypt`
|
|
404
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
405
|
+
- Choices: `drop`, `no-decrypt`
|
|
406
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
407
|
+
- Choices: `drop`, `no-decrypt`
|
|
408
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
409
|
+
- Choices: `drop`, `decrypt`
|
|
374
410
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
375
|
-
:param pulumi.Input[bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
376
|
-
:param pulumi.Input[int] version: The version of the object
|
|
411
|
+
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
412
|
+
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
377
413
|
"""
|
|
378
414
|
if certificate_lifetime_in_days is not None:
|
|
379
415
|
pulumi.set(__self__, "certificate_lifetime_in_days", certificate_lifetime_in_days)
|
|
@@ -416,127 +452,134 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
416
452
|
if version is not None:
|
|
417
453
|
pulumi.set(__self__, "version", version)
|
|
418
454
|
|
|
419
|
-
@property
|
|
455
|
+
@_builtins.property
|
|
420
456
|
@pulumi.getter(name="certificateLifetimeInDays")
|
|
421
|
-
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[int]]:
|
|
457
|
+
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
422
458
|
"""
|
|
423
459
|
Certificate Lifetime(in Days)
|
|
424
460
|
"""
|
|
425
461
|
return pulumi.get(self, "certificate_lifetime_in_days")
|
|
426
462
|
|
|
427
463
|
@certificate_lifetime_in_days.setter
|
|
428
|
-
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[int]]):
|
|
464
|
+
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
429
465
|
pulumi.set(self, "certificate_lifetime_in_days", value)
|
|
430
466
|
|
|
431
|
-
@property
|
|
467
|
+
@_builtins.property
|
|
432
468
|
@pulumi.getter(name="certificateRevocationStatus")
|
|
433
|
-
def certificate_revocation_status(self) -> Optional[pulumi.Input[str]]:
|
|
469
|
+
def certificate_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
434
470
|
"""
|
|
435
|
-
Certificate revocation status
|
|
471
|
+
Certificate revocation status
|
|
472
|
+
- Choices: `ocsp`, `none`
|
|
436
473
|
"""
|
|
437
474
|
return pulumi.get(self, "certificate_revocation_status")
|
|
438
475
|
|
|
439
476
|
@certificate_revocation_status.setter
|
|
440
|
-
def certificate_revocation_status(self, value: Optional[pulumi.Input[str]]):
|
|
477
|
+
def certificate_revocation_status(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
441
478
|
pulumi.set(self, "certificate_revocation_status", value)
|
|
442
479
|
|
|
443
|
-
@property
|
|
480
|
+
@_builtins.property
|
|
444
481
|
@pulumi.getter(name="defaultAction")
|
|
445
|
-
def default_action(self) -> Optional[pulumi.Input[str]]:
|
|
482
|
+
def default_action(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
446
483
|
"""
|
|
447
|
-
Default action (applies when `mode` set to `security`)
|
|
484
|
+
Default action (applies when `mode` set to `security`)
|
|
485
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
448
486
|
"""
|
|
449
487
|
return pulumi.get(self, "default_action")
|
|
450
488
|
|
|
451
489
|
@default_action.setter
|
|
452
|
-
def default_action(self, value: Optional[pulumi.Input[str]]):
|
|
490
|
+
def default_action(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
453
491
|
pulumi.set(self, "default_action", value)
|
|
454
492
|
|
|
455
|
-
@property
|
|
493
|
+
@_builtins.property
|
|
456
494
|
@pulumi.getter
|
|
457
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
|
495
|
+
def description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
458
496
|
"""
|
|
459
497
|
The description of the policy definition.
|
|
460
498
|
"""
|
|
461
499
|
return pulumi.get(self, "description")
|
|
462
500
|
|
|
463
501
|
@description.setter
|
|
464
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
|
502
|
+
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
465
503
|
pulumi.set(self, "description", value)
|
|
466
504
|
|
|
467
|
-
@property
|
|
505
|
+
@_builtins.property
|
|
468
506
|
@pulumi.getter(name="ecKeyType")
|
|
469
|
-
def ec_key_type(self) -> Optional[pulumi.Input[str]]:
|
|
507
|
+
def ec_key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
470
508
|
"""
|
|
471
|
-
EC Key Type
|
|
509
|
+
EC Key Type
|
|
510
|
+
- Choices: `P256`, `P384`, `P521`
|
|
472
511
|
"""
|
|
473
512
|
return pulumi.get(self, "ec_key_type")
|
|
474
513
|
|
|
475
514
|
@ec_key_type.setter
|
|
476
|
-
def ec_key_type(self, value: Optional[pulumi.Input[str]]):
|
|
515
|
+
def ec_key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
477
516
|
pulumi.set(self, "ec_key_type", value)
|
|
478
517
|
|
|
479
|
-
@property
|
|
518
|
+
@_builtins.property
|
|
480
519
|
@pulumi.getter(name="expiredCertificate")
|
|
481
|
-
def expired_certificate(self) -> Optional[pulumi.Input[str]]:
|
|
520
|
+
def expired_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
482
521
|
"""
|
|
483
|
-
Expired certificate action
|
|
522
|
+
Expired certificate action
|
|
523
|
+
- Choices: `drop`, `decrypt`
|
|
484
524
|
"""
|
|
485
525
|
return pulumi.get(self, "expired_certificate")
|
|
486
526
|
|
|
487
527
|
@expired_certificate.setter
|
|
488
|
-
def expired_certificate(self, value: Optional[pulumi.Input[str]]):
|
|
528
|
+
def expired_certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
489
529
|
pulumi.set(self, "expired_certificate", value)
|
|
490
530
|
|
|
491
|
-
@property
|
|
531
|
+
@_builtins.property
|
|
492
532
|
@pulumi.getter(name="failureMode")
|
|
493
|
-
def failure_mode(self) -> Optional[pulumi.Input[str]]:
|
|
533
|
+
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
494
534
|
"""
|
|
495
|
-
Failure mode
|
|
535
|
+
Failure mode
|
|
536
|
+
- Choices: `open`, `close`
|
|
496
537
|
"""
|
|
497
538
|
return pulumi.get(self, "failure_mode")
|
|
498
539
|
|
|
499
540
|
@failure_mode.setter
|
|
500
|
-
def failure_mode(self, value: Optional[pulumi.Input[str]]):
|
|
541
|
+
def failure_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
501
542
|
pulumi.set(self, "failure_mode", value)
|
|
502
543
|
|
|
503
|
-
@property
|
|
544
|
+
@_builtins.property
|
|
504
545
|
@pulumi.getter(name="minimalTlsVersion")
|
|
505
|
-
def minimal_tls_version(self) -> Optional[pulumi.Input[str]]:
|
|
546
|
+
def minimal_tls_version(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
506
547
|
"""
|
|
507
|
-
Minimal TLS Version
|
|
548
|
+
Minimal TLS Version
|
|
549
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
508
550
|
"""
|
|
509
551
|
return pulumi.get(self, "minimal_tls_version")
|
|
510
552
|
|
|
511
553
|
@minimal_tls_version.setter
|
|
512
|
-
def minimal_tls_version(self, value: Optional[pulumi.Input[str]]):
|
|
554
|
+
def minimal_tls_version(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
513
555
|
pulumi.set(self, "minimal_tls_version", value)
|
|
514
556
|
|
|
515
|
-
@property
|
|
557
|
+
@_builtins.property
|
|
516
558
|
@pulumi.getter
|
|
517
|
-
def mode(self) -> Optional[pulumi.Input[str]]:
|
|
559
|
+
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
518
560
|
"""
|
|
519
|
-
The policy mode
|
|
561
|
+
The policy mode
|
|
562
|
+
- Choices: `security`, `unified`
|
|
520
563
|
"""
|
|
521
564
|
return pulumi.get(self, "mode")
|
|
522
565
|
|
|
523
566
|
@mode.setter
|
|
524
|
-
def mode(self, value: Optional[pulumi.Input[str]]):
|
|
567
|
+
def mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
525
568
|
pulumi.set(self, "mode", value)
|
|
526
569
|
|
|
527
|
-
@property
|
|
570
|
+
@_builtins.property
|
|
528
571
|
@pulumi.getter
|
|
529
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
572
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
530
573
|
"""
|
|
531
574
|
The name of the policy definition.
|
|
532
575
|
"""
|
|
533
576
|
return pulumi.get(self, "name")
|
|
534
577
|
|
|
535
578
|
@name.setter
|
|
536
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
579
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
537
580
|
pulumi.set(self, "name", value)
|
|
538
581
|
|
|
539
|
-
@property
|
|
582
|
+
@_builtins.property
|
|
540
583
|
@pulumi.getter(name="networkRules")
|
|
541
584
|
def network_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]:
|
|
542
585
|
"""
|
|
@@ -548,79 +591,84 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
548
591
|
def network_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]):
|
|
549
592
|
pulumi.set(self, "network_rules", value)
|
|
550
593
|
|
|
551
|
-
@property
|
|
594
|
+
@_builtins.property
|
|
552
595
|
@pulumi.getter(name="rsaKeyPairModulus")
|
|
553
|
-
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[str]]:
|
|
596
|
+
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
554
597
|
"""
|
|
555
|
-
RSA key pair modules
|
|
598
|
+
RSA key pair modules
|
|
599
|
+
- Choices: `1024`, `2048`, `4096`
|
|
556
600
|
"""
|
|
557
601
|
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
558
602
|
|
|
559
603
|
@rsa_key_pair_modulus.setter
|
|
560
|
-
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[str]]):
|
|
604
|
+
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
561
605
|
pulumi.set(self, "rsa_key_pair_modulus", value)
|
|
562
606
|
|
|
563
|
-
@property
|
|
607
|
+
@_builtins.property
|
|
564
608
|
@pulumi.getter(name="sslDecryptionEnabled")
|
|
565
|
-
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[str]]:
|
|
609
|
+
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
566
610
|
"""
|
|
567
611
|
SSL decryption enabled
|
|
568
612
|
"""
|
|
569
613
|
return pulumi.get(self, "ssl_decryption_enabled")
|
|
570
614
|
|
|
571
615
|
@ssl_decryption_enabled.setter
|
|
572
|
-
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[str]]):
|
|
616
|
+
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
573
617
|
pulumi.set(self, "ssl_decryption_enabled", value)
|
|
574
618
|
|
|
575
|
-
@property
|
|
619
|
+
@_builtins.property
|
|
576
620
|
@pulumi.getter(name="unknownRevocationStatus")
|
|
577
|
-
def unknown_revocation_status(self) -> Optional[pulumi.Input[str]]:
|
|
621
|
+
def unknown_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
578
622
|
"""
|
|
579
|
-
Unknown revocation status action
|
|
623
|
+
Unknown revocation status action
|
|
624
|
+
- Choices: `drop`, `decrypt`
|
|
580
625
|
"""
|
|
581
626
|
return pulumi.get(self, "unknown_revocation_status")
|
|
582
627
|
|
|
583
628
|
@unknown_revocation_status.setter
|
|
584
|
-
def unknown_revocation_status(self, value: Optional[pulumi.Input[str]]):
|
|
629
|
+
def unknown_revocation_status(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
585
630
|
pulumi.set(self, "unknown_revocation_status", value)
|
|
586
631
|
|
|
587
|
-
@property
|
|
632
|
+
@_builtins.property
|
|
588
633
|
@pulumi.getter(name="unsupportedCipherSuites")
|
|
589
|
-
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[str]]:
|
|
634
|
+
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
590
635
|
"""
|
|
591
|
-
Unsupported cipher suites action
|
|
636
|
+
Unsupported cipher suites action
|
|
637
|
+
- Choices: `drop`, `no-decrypt`
|
|
592
638
|
"""
|
|
593
639
|
return pulumi.get(self, "unsupported_cipher_suites")
|
|
594
640
|
|
|
595
641
|
@unsupported_cipher_suites.setter
|
|
596
|
-
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[str]]):
|
|
642
|
+
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
597
643
|
pulumi.set(self, "unsupported_cipher_suites", value)
|
|
598
644
|
|
|
599
|
-
@property
|
|
645
|
+
@_builtins.property
|
|
600
646
|
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
601
|
-
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[str]]:
|
|
647
|
+
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
602
648
|
"""
|
|
603
|
-
Unsupported protocol versions action
|
|
649
|
+
Unsupported protocol versions action
|
|
650
|
+
- Choices: `drop`, `no-decrypt`
|
|
604
651
|
"""
|
|
605
652
|
return pulumi.get(self, "unsupported_protocol_versions")
|
|
606
653
|
|
|
607
654
|
@unsupported_protocol_versions.setter
|
|
608
|
-
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[str]]):
|
|
655
|
+
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
609
656
|
pulumi.set(self, "unsupported_protocol_versions", value)
|
|
610
657
|
|
|
611
|
-
@property
|
|
658
|
+
@_builtins.property
|
|
612
659
|
@pulumi.getter(name="untrustedCertificate")
|
|
613
|
-
def untrusted_certificate(self) -> Optional[pulumi.Input[str]]:
|
|
660
|
+
def untrusted_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
614
661
|
"""
|
|
615
|
-
Untrusted certificate action
|
|
662
|
+
Untrusted certificate action
|
|
663
|
+
- Choices: `drop`, `decrypt`
|
|
616
664
|
"""
|
|
617
665
|
return pulumi.get(self, "untrusted_certificate")
|
|
618
666
|
|
|
619
667
|
@untrusted_certificate.setter
|
|
620
|
-
def untrusted_certificate(self, value: Optional[pulumi.Input[str]]):
|
|
668
|
+
def untrusted_certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
621
669
|
pulumi.set(self, "untrusted_certificate", value)
|
|
622
670
|
|
|
623
|
-
@property
|
|
671
|
+
@_builtins.property
|
|
624
672
|
@pulumi.getter(name="urlRules")
|
|
625
673
|
def url_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]:
|
|
626
674
|
"""
|
|
@@ -632,86 +680,137 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
632
680
|
def url_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]):
|
|
633
681
|
pulumi.set(self, "url_rules", value)
|
|
634
682
|
|
|
635
|
-
@property
|
|
683
|
+
@_builtins.property
|
|
636
684
|
@pulumi.getter(name="useDefaultCaCertBundle")
|
|
637
|
-
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[bool]]:
|
|
685
|
+
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
638
686
|
"""
|
|
639
687
|
Use default CA certificate bundle
|
|
640
688
|
"""
|
|
641
689
|
return pulumi.get(self, "use_default_ca_cert_bundle")
|
|
642
690
|
|
|
643
691
|
@use_default_ca_cert_bundle.setter
|
|
644
|
-
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[bool]]):
|
|
692
|
+
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
645
693
|
pulumi.set(self, "use_default_ca_cert_bundle", value)
|
|
646
694
|
|
|
647
|
-
@property
|
|
695
|
+
@_builtins.property
|
|
648
696
|
@pulumi.getter
|
|
649
|
-
def version(self) -> Optional[pulumi.Input[int]]:
|
|
697
|
+
def version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
650
698
|
"""
|
|
651
699
|
The version of the object
|
|
652
700
|
"""
|
|
653
701
|
return pulumi.get(self, "version")
|
|
654
702
|
|
|
655
703
|
@version.setter
|
|
656
|
-
def version(self, value: Optional[pulumi.Input[int]]):
|
|
704
|
+
def version(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
657
705
|
pulumi.set(self, "version", value)
|
|
658
706
|
|
|
659
707
|
|
|
708
|
+
@pulumi.type_token("sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition")
|
|
660
709
|
class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
661
710
|
@overload
|
|
662
711
|
def __init__(__self__,
|
|
663
712
|
resource_name: str,
|
|
664
713
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
665
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
666
|
-
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
667
|
-
default_action: Optional[pulumi.Input[str]] = None,
|
|
668
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
669
|
-
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
670
|
-
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
671
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
672
|
-
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
673
|
-
mode: Optional[pulumi.Input[str]] = None,
|
|
674
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
714
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
715
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
716
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
717
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
718
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
719
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
720
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
721
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
722
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
723
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
675
724
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]]] = None,
|
|
676
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
677
|
-
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
678
|
-
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
679
|
-
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
680
|
-
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
681
|
-
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
725
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
726
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
727
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
728
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
729
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
730
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
682
731
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]]] = None,
|
|
683
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None,
|
|
732
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
684
733
|
__props__=None):
|
|
685
734
|
"""
|
|
686
735
|
This resource can manage a TLS SSL Decryption Policy Definition .
|
|
687
736
|
|
|
737
|
+
## Example Usage
|
|
738
|
+
|
|
739
|
+
```python
|
|
740
|
+
import pulumi
|
|
741
|
+
import pulumi_sdwan as sdwan
|
|
742
|
+
|
|
743
|
+
example = sdwan.TlsSslDecryptionPolicyDefinition("example",
|
|
744
|
+
name="Example",
|
|
745
|
+
description="My description",
|
|
746
|
+
mode="security",
|
|
747
|
+
default_action="noIntent",
|
|
748
|
+
network_rules=[{
|
|
749
|
+
"base_action": "doNotDecrypt",
|
|
750
|
+
"rule_id": 4,
|
|
751
|
+
"rule_name": "Example",
|
|
752
|
+
"rule_type": "sslDecryption",
|
|
753
|
+
"source_and_destination_configuration": [{
|
|
754
|
+
"option": "destinationIp",
|
|
755
|
+
"value": "10.0.0.0/12",
|
|
756
|
+
}],
|
|
757
|
+
}],
|
|
758
|
+
ssl_decryption_enabled="true",
|
|
759
|
+
expired_certificate="drop",
|
|
760
|
+
untrusted_certificate="drop",
|
|
761
|
+
certificate_revocation_status="none",
|
|
762
|
+
unknown_revocation_status="drop",
|
|
763
|
+
unsupported_protocol_versions="drop",
|
|
764
|
+
unsupported_cipher_suites="drop",
|
|
765
|
+
failure_mode="close",
|
|
766
|
+
rsa_key_pair_modulus="2048",
|
|
767
|
+
ec_key_type="P384",
|
|
768
|
+
certificate_lifetime_in_days=1,
|
|
769
|
+
minimal_tls_version="TLSv1.2",
|
|
770
|
+
use_default_ca_cert_bundle=True)
|
|
771
|
+
```
|
|
772
|
+
|
|
688
773
|
## Import
|
|
689
774
|
|
|
775
|
+
The `pulumi import` command can be used, for example:
|
|
776
|
+
|
|
690
777
|
```sh
|
|
691
778
|
$ pulumi import sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
692
779
|
```
|
|
693
780
|
|
|
694
781
|
:param str resource_name: The name of the resource.
|
|
695
782
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
696
|
-
:param pulumi.Input[int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
697
|
-
:param pulumi.Input[str] certificate_revocation_status: Certificate revocation status
|
|
698
|
-
|
|
699
|
-
:param pulumi.Input[str]
|
|
700
|
-
|
|
701
|
-
:param pulumi.Input[str]
|
|
702
|
-
:param pulumi.Input[str]
|
|
703
|
-
|
|
704
|
-
:param pulumi.Input[str]
|
|
705
|
-
|
|
783
|
+
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
784
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
785
|
+
- Choices: `ocsp`, `none`
|
|
786
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
787
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
788
|
+
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
789
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
790
|
+
- Choices: `P256`, `P384`, `P521`
|
|
791
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
792
|
+
- Choices: `drop`, `decrypt`
|
|
793
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
794
|
+
- Choices: `open`, `close`
|
|
795
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
796
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
797
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
798
|
+
- Choices: `security`, `unified`
|
|
799
|
+
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
706
800
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
707
|
-
:param pulumi.Input[str] rsa_key_pair_modulus: RSA key pair modules
|
|
708
|
-
|
|
709
|
-
:param pulumi.Input[str]
|
|
710
|
-
:param pulumi.Input[str]
|
|
711
|
-
|
|
712
|
-
:param pulumi.Input[str]
|
|
801
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
802
|
+
- Choices: `1024`, `2048`, `4096`
|
|
803
|
+
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
804
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
805
|
+
- Choices: `drop`, `decrypt`
|
|
806
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
807
|
+
- Choices: `drop`, `no-decrypt`
|
|
808
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
809
|
+
- Choices: `drop`, `no-decrypt`
|
|
810
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
811
|
+
- Choices: `drop`, `decrypt`
|
|
713
812
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
714
|
-
:param pulumi.Input[bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
813
|
+
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
715
814
|
"""
|
|
716
815
|
...
|
|
717
816
|
@overload
|
|
@@ -722,8 +821,46 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
722
821
|
"""
|
|
723
822
|
This resource can manage a TLS SSL Decryption Policy Definition .
|
|
724
823
|
|
|
824
|
+
## Example Usage
|
|
825
|
+
|
|
826
|
+
```python
|
|
827
|
+
import pulumi
|
|
828
|
+
import pulumi_sdwan as sdwan
|
|
829
|
+
|
|
830
|
+
example = sdwan.TlsSslDecryptionPolicyDefinition("example",
|
|
831
|
+
name="Example",
|
|
832
|
+
description="My description",
|
|
833
|
+
mode="security",
|
|
834
|
+
default_action="noIntent",
|
|
835
|
+
network_rules=[{
|
|
836
|
+
"base_action": "doNotDecrypt",
|
|
837
|
+
"rule_id": 4,
|
|
838
|
+
"rule_name": "Example",
|
|
839
|
+
"rule_type": "sslDecryption",
|
|
840
|
+
"source_and_destination_configuration": [{
|
|
841
|
+
"option": "destinationIp",
|
|
842
|
+
"value": "10.0.0.0/12",
|
|
843
|
+
}],
|
|
844
|
+
}],
|
|
845
|
+
ssl_decryption_enabled="true",
|
|
846
|
+
expired_certificate="drop",
|
|
847
|
+
untrusted_certificate="drop",
|
|
848
|
+
certificate_revocation_status="none",
|
|
849
|
+
unknown_revocation_status="drop",
|
|
850
|
+
unsupported_protocol_versions="drop",
|
|
851
|
+
unsupported_cipher_suites="drop",
|
|
852
|
+
failure_mode="close",
|
|
853
|
+
rsa_key_pair_modulus="2048",
|
|
854
|
+
ec_key_type="P384",
|
|
855
|
+
certificate_lifetime_in_days=1,
|
|
856
|
+
minimal_tls_version="TLSv1.2",
|
|
857
|
+
use_default_ca_cert_bundle=True)
|
|
858
|
+
```
|
|
859
|
+
|
|
725
860
|
## Import
|
|
726
861
|
|
|
862
|
+
The `pulumi import` command can be used, for example:
|
|
863
|
+
|
|
727
864
|
```sh
|
|
728
865
|
$ pulumi import sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
729
866
|
```
|
|
@@ -743,25 +880,25 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
743
880
|
def _internal_init(__self__,
|
|
744
881
|
resource_name: str,
|
|
745
882
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
746
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
747
|
-
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
748
|
-
default_action: Optional[pulumi.Input[str]] = None,
|
|
749
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
750
|
-
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
751
|
-
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
752
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
753
|
-
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
754
|
-
mode: Optional[pulumi.Input[str]] = None,
|
|
755
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
883
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
884
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
885
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
886
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
887
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
888
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
889
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
890
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
891
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
892
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
756
893
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]]] = None,
|
|
757
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
758
|
-
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
759
|
-
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
760
|
-
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
761
|
-
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
762
|
-
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
894
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
895
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
896
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
897
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
898
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
899
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
763
900
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]]] = None,
|
|
764
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None,
|
|
901
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
765
902
|
__props__=None):
|
|
766
903
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
767
904
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -803,26 +940,26 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
803
940
|
def get(resource_name: str,
|
|
804
941
|
id: pulumi.Input[str],
|
|
805
942
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
806
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
807
|
-
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
808
|
-
default_action: Optional[pulumi.Input[str]] = None,
|
|
809
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
810
|
-
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
811
|
-
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
812
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
813
|
-
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
814
|
-
mode: Optional[pulumi.Input[str]] = None,
|
|
815
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
943
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
944
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
945
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
946
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
947
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
948
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
949
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
950
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
951
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
952
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
816
953
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]]] = None,
|
|
817
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
818
|
-
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
819
|
-
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
820
|
-
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
821
|
-
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
822
|
-
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
954
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
955
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
956
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
957
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
958
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
959
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
823
960
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]]] = None,
|
|
824
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None,
|
|
825
|
-
version: Optional[pulumi.Input[int]] = None) -> 'TlsSslDecryptionPolicyDefinition':
|
|
961
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
962
|
+
version: Optional[pulumi.Input[_builtins.int]] = None) -> 'TlsSslDecryptionPolicyDefinition':
|
|
826
963
|
"""
|
|
827
964
|
Get an existing TlsSslDecryptionPolicyDefinition resource's state with the given name, id, and optional extra
|
|
828
965
|
properties used to qualify the lookup.
|
|
@@ -830,26 +967,38 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
830
967
|
:param str resource_name: The unique name of the resulting resource.
|
|
831
968
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
832
969
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
833
|
-
:param pulumi.Input[int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
834
|
-
:param pulumi.Input[str] certificate_revocation_status: Certificate revocation status
|
|
835
|
-
|
|
836
|
-
:param pulumi.Input[str]
|
|
837
|
-
|
|
838
|
-
:param pulumi.Input[str]
|
|
839
|
-
:param pulumi.Input[str]
|
|
840
|
-
|
|
841
|
-
:param pulumi.Input[str]
|
|
842
|
-
|
|
970
|
+
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
971
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
972
|
+
- Choices: `ocsp`, `none`
|
|
973
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
974
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
975
|
+
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
976
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
977
|
+
- Choices: `P256`, `P384`, `P521`
|
|
978
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
979
|
+
- Choices: `drop`, `decrypt`
|
|
980
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
981
|
+
- Choices: `open`, `close`
|
|
982
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
983
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
984
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
985
|
+
- Choices: `security`, `unified`
|
|
986
|
+
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
843
987
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
844
|
-
:param pulumi.Input[str] rsa_key_pair_modulus: RSA key pair modules
|
|
845
|
-
|
|
846
|
-
:param pulumi.Input[str]
|
|
847
|
-
:param pulumi.Input[str]
|
|
848
|
-
|
|
849
|
-
:param pulumi.Input[str]
|
|
988
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
989
|
+
- Choices: `1024`, `2048`, `4096`
|
|
990
|
+
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
991
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
992
|
+
- Choices: `drop`, `decrypt`
|
|
993
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
994
|
+
- Choices: `drop`, `no-decrypt`
|
|
995
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
996
|
+
- Choices: `drop`, `no-decrypt`
|
|
997
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
998
|
+
- Choices: `drop`, `decrypt`
|
|
850
999
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
851
|
-
:param pulumi.Input[bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
852
|
-
:param pulumi.Input[int] version: The version of the object
|
|
1000
|
+
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
1001
|
+
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
853
1002
|
"""
|
|
854
1003
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
855
1004
|
|
|
@@ -877,87 +1026,94 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
877
1026
|
__props__.__dict__["version"] = version
|
|
878
1027
|
return TlsSslDecryptionPolicyDefinition(resource_name, opts=opts, __props__=__props__)
|
|
879
1028
|
|
|
880
|
-
@property
|
|
1029
|
+
@_builtins.property
|
|
881
1030
|
@pulumi.getter(name="certificateLifetimeInDays")
|
|
882
|
-
def certificate_lifetime_in_days(self) -> pulumi.Output[Optional[int]]:
|
|
1031
|
+
def certificate_lifetime_in_days(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
883
1032
|
"""
|
|
884
1033
|
Certificate Lifetime(in Days)
|
|
885
1034
|
"""
|
|
886
1035
|
return pulumi.get(self, "certificate_lifetime_in_days")
|
|
887
1036
|
|
|
888
|
-
@property
|
|
1037
|
+
@_builtins.property
|
|
889
1038
|
@pulumi.getter(name="certificateRevocationStatus")
|
|
890
|
-
def certificate_revocation_status(self) -> pulumi.Output[Optional[str]]:
|
|
1039
|
+
def certificate_revocation_status(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
891
1040
|
"""
|
|
892
|
-
Certificate revocation status
|
|
1041
|
+
Certificate revocation status
|
|
1042
|
+
- Choices: `ocsp`, `none`
|
|
893
1043
|
"""
|
|
894
1044
|
return pulumi.get(self, "certificate_revocation_status")
|
|
895
1045
|
|
|
896
|
-
@property
|
|
1046
|
+
@_builtins.property
|
|
897
1047
|
@pulumi.getter(name="defaultAction")
|
|
898
|
-
def default_action(self) -> pulumi.Output[Optional[str]]:
|
|
1048
|
+
def default_action(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
899
1049
|
"""
|
|
900
|
-
Default action (applies when `mode` set to `security`)
|
|
1050
|
+
Default action (applies when `mode` set to `security`)
|
|
1051
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
901
1052
|
"""
|
|
902
1053
|
return pulumi.get(self, "default_action")
|
|
903
1054
|
|
|
904
|
-
@property
|
|
1055
|
+
@_builtins.property
|
|
905
1056
|
@pulumi.getter
|
|
906
|
-
def description(self) -> pulumi.Output[str]:
|
|
1057
|
+
def description(self) -> pulumi.Output[_builtins.str]:
|
|
907
1058
|
"""
|
|
908
1059
|
The description of the policy definition.
|
|
909
1060
|
"""
|
|
910
1061
|
return pulumi.get(self, "description")
|
|
911
1062
|
|
|
912
|
-
@property
|
|
1063
|
+
@_builtins.property
|
|
913
1064
|
@pulumi.getter(name="ecKeyType")
|
|
914
|
-
def ec_key_type(self) -> pulumi.Output[Optional[str]]:
|
|
1065
|
+
def ec_key_type(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
915
1066
|
"""
|
|
916
|
-
EC Key Type
|
|
1067
|
+
EC Key Type
|
|
1068
|
+
- Choices: `P256`, `P384`, `P521`
|
|
917
1069
|
"""
|
|
918
1070
|
return pulumi.get(self, "ec_key_type")
|
|
919
1071
|
|
|
920
|
-
@property
|
|
1072
|
+
@_builtins.property
|
|
921
1073
|
@pulumi.getter(name="expiredCertificate")
|
|
922
|
-
def expired_certificate(self) -> pulumi.Output[Optional[str]]:
|
|
1074
|
+
def expired_certificate(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
923
1075
|
"""
|
|
924
|
-
Expired certificate action
|
|
1076
|
+
Expired certificate action
|
|
1077
|
+
- Choices: `drop`, `decrypt`
|
|
925
1078
|
"""
|
|
926
1079
|
return pulumi.get(self, "expired_certificate")
|
|
927
1080
|
|
|
928
|
-
@property
|
|
1081
|
+
@_builtins.property
|
|
929
1082
|
@pulumi.getter(name="failureMode")
|
|
930
|
-
def failure_mode(self) -> pulumi.Output[Optional[str]]:
|
|
1083
|
+
def failure_mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
931
1084
|
"""
|
|
932
|
-
Failure mode
|
|
1085
|
+
Failure mode
|
|
1086
|
+
- Choices: `open`, `close`
|
|
933
1087
|
"""
|
|
934
1088
|
return pulumi.get(self, "failure_mode")
|
|
935
1089
|
|
|
936
|
-
@property
|
|
1090
|
+
@_builtins.property
|
|
937
1091
|
@pulumi.getter(name="minimalTlsVersion")
|
|
938
|
-
def minimal_tls_version(self) -> pulumi.Output[Optional[str]]:
|
|
1092
|
+
def minimal_tls_version(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
939
1093
|
"""
|
|
940
|
-
Minimal TLS Version
|
|
1094
|
+
Minimal TLS Version
|
|
1095
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
941
1096
|
"""
|
|
942
1097
|
return pulumi.get(self, "minimal_tls_version")
|
|
943
1098
|
|
|
944
|
-
@property
|
|
1099
|
+
@_builtins.property
|
|
945
1100
|
@pulumi.getter
|
|
946
|
-
def mode(self) -> pulumi.Output[Optional[str]]:
|
|
1101
|
+
def mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
947
1102
|
"""
|
|
948
|
-
The policy mode
|
|
1103
|
+
The policy mode
|
|
1104
|
+
- Choices: `security`, `unified`
|
|
949
1105
|
"""
|
|
950
1106
|
return pulumi.get(self, "mode")
|
|
951
1107
|
|
|
952
|
-
@property
|
|
1108
|
+
@_builtins.property
|
|
953
1109
|
@pulumi.getter
|
|
954
|
-
def name(self) -> pulumi.Output[str]:
|
|
1110
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
955
1111
|
"""
|
|
956
1112
|
The name of the policy definition.
|
|
957
1113
|
"""
|
|
958
1114
|
return pulumi.get(self, "name")
|
|
959
1115
|
|
|
960
|
-
@property
|
|
1116
|
+
@_builtins.property
|
|
961
1117
|
@pulumi.getter(name="networkRules")
|
|
962
1118
|
def network_rules(self) -> pulumi.Output[Optional[Sequence['outputs.TlsSslDecryptionPolicyDefinitionNetworkRule']]]:
|
|
963
1119
|
"""
|
|
@@ -965,55 +1121,60 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
965
1121
|
"""
|
|
966
1122
|
return pulumi.get(self, "network_rules")
|
|
967
1123
|
|
|
968
|
-
@property
|
|
1124
|
+
@_builtins.property
|
|
969
1125
|
@pulumi.getter(name="rsaKeyPairModulus")
|
|
970
|
-
def rsa_key_pair_modulus(self) -> pulumi.Output[Optional[str]]:
|
|
1126
|
+
def rsa_key_pair_modulus(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
971
1127
|
"""
|
|
972
|
-
RSA key pair modules
|
|
1128
|
+
RSA key pair modules
|
|
1129
|
+
- Choices: `1024`, `2048`, `4096`
|
|
973
1130
|
"""
|
|
974
1131
|
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
975
1132
|
|
|
976
|
-
@property
|
|
1133
|
+
@_builtins.property
|
|
977
1134
|
@pulumi.getter(name="sslDecryptionEnabled")
|
|
978
|
-
def ssl_decryption_enabled(self) -> pulumi.Output[Optional[str]]:
|
|
1135
|
+
def ssl_decryption_enabled(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
979
1136
|
"""
|
|
980
1137
|
SSL decryption enabled
|
|
981
1138
|
"""
|
|
982
1139
|
return pulumi.get(self, "ssl_decryption_enabled")
|
|
983
1140
|
|
|
984
|
-
@property
|
|
1141
|
+
@_builtins.property
|
|
985
1142
|
@pulumi.getter(name="unknownRevocationStatus")
|
|
986
|
-
def unknown_revocation_status(self) -> pulumi.Output[Optional[str]]:
|
|
1143
|
+
def unknown_revocation_status(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
987
1144
|
"""
|
|
988
|
-
Unknown revocation status action
|
|
1145
|
+
Unknown revocation status action
|
|
1146
|
+
- Choices: `drop`, `decrypt`
|
|
989
1147
|
"""
|
|
990
1148
|
return pulumi.get(self, "unknown_revocation_status")
|
|
991
1149
|
|
|
992
|
-
@property
|
|
1150
|
+
@_builtins.property
|
|
993
1151
|
@pulumi.getter(name="unsupportedCipherSuites")
|
|
994
|
-
def unsupported_cipher_suites(self) -> pulumi.Output[Optional[str]]:
|
|
1152
|
+
def unsupported_cipher_suites(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
995
1153
|
"""
|
|
996
|
-
Unsupported cipher suites action
|
|
1154
|
+
Unsupported cipher suites action
|
|
1155
|
+
- Choices: `drop`, `no-decrypt`
|
|
997
1156
|
"""
|
|
998
1157
|
return pulumi.get(self, "unsupported_cipher_suites")
|
|
999
1158
|
|
|
1000
|
-
@property
|
|
1159
|
+
@_builtins.property
|
|
1001
1160
|
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
1002
|
-
def unsupported_protocol_versions(self) -> pulumi.Output[Optional[str]]:
|
|
1161
|
+
def unsupported_protocol_versions(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1003
1162
|
"""
|
|
1004
|
-
Unsupported protocol versions action
|
|
1163
|
+
Unsupported protocol versions action
|
|
1164
|
+
- Choices: `drop`, `no-decrypt`
|
|
1005
1165
|
"""
|
|
1006
1166
|
return pulumi.get(self, "unsupported_protocol_versions")
|
|
1007
1167
|
|
|
1008
|
-
@property
|
|
1168
|
+
@_builtins.property
|
|
1009
1169
|
@pulumi.getter(name="untrustedCertificate")
|
|
1010
|
-
def untrusted_certificate(self) -> pulumi.Output[Optional[str]]:
|
|
1170
|
+
def untrusted_certificate(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1011
1171
|
"""
|
|
1012
|
-
Untrusted certificate action
|
|
1172
|
+
Untrusted certificate action
|
|
1173
|
+
- Choices: `drop`, `decrypt`
|
|
1013
1174
|
"""
|
|
1014
1175
|
return pulumi.get(self, "untrusted_certificate")
|
|
1015
1176
|
|
|
1016
|
-
@property
|
|
1177
|
+
@_builtins.property
|
|
1017
1178
|
@pulumi.getter(name="urlRules")
|
|
1018
1179
|
def url_rules(self) -> pulumi.Output[Optional[Sequence['outputs.TlsSslDecryptionPolicyDefinitionUrlRule']]]:
|
|
1019
1180
|
"""
|
|
@@ -1021,17 +1182,17 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
1021
1182
|
"""
|
|
1022
1183
|
return pulumi.get(self, "url_rules")
|
|
1023
1184
|
|
|
1024
|
-
@property
|
|
1185
|
+
@_builtins.property
|
|
1025
1186
|
@pulumi.getter(name="useDefaultCaCertBundle")
|
|
1026
|
-
def use_default_ca_cert_bundle(self) -> pulumi.Output[Optional[bool]]:
|
|
1187
|
+
def use_default_ca_cert_bundle(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1027
1188
|
"""
|
|
1028
1189
|
Use default CA certificate bundle
|
|
1029
1190
|
"""
|
|
1030
1191
|
return pulumi.get(self, "use_default_ca_cert_bundle")
|
|
1031
1192
|
|
|
1032
|
-
@property
|
|
1193
|
+
@_builtins.property
|
|
1033
1194
|
@pulumi.getter
|
|
1034
|
-
def version(self) -> pulumi.Output[int]:
|
|
1195
|
+
def version(self) -> pulumi.Output[_builtins.int]:
|
|
1035
1196
|
"""
|
|
1036
1197
|
The version of the object
|
|
1037
1198
|
"""
|