pulumi-sdwan 0.3.0a1736835519__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-sdwan might be problematic. Click here for more details.
- pulumi_sdwan/__init__.py +2284 -0
- pulumi_sdwan/_inputs.py +82362 -0
- pulumi_sdwan/_utilities.py +327 -0
- pulumi_sdwan/activate_centralized_policy.py +162 -0
- pulumi_sdwan/advanced_inspection_profile_policy_definition.py +687 -0
- pulumi_sdwan/advanced_malware_protection_policy_definition.py +744 -0
- pulumi_sdwan/allow_url_list_policy_object.py +266 -0
- pulumi_sdwan/app_probe_class_policy_object.py +318 -0
- pulumi_sdwan/application_aware_routing_policy_definition.py +316 -0
- pulumi_sdwan/application_list_policy_object.py +266 -0
- pulumi_sdwan/application_priority_feature_profile.py +234 -0
- pulumi_sdwan/application_priority_qos_policy.py +434 -0
- pulumi_sdwan/application_priority_traffic_policy_policy.py +471 -0
- pulumi_sdwan/as_path_list_policy_object.py +240 -0
- pulumi_sdwan/attach_feature_device_template.py +216 -0
- pulumi_sdwan/block_url_list_policy_object.py +266 -0
- pulumi_sdwan/cedge_aaa_feature_template.py +1554 -0
- pulumi_sdwan/cedge_global_feature_template.py +2562 -0
- pulumi_sdwan/cedge_igmp_feature_template.py +379 -0
- pulumi_sdwan/cedge_multicast_feature_template.py +642 -0
- pulumi_sdwan/cedge_pim_feature_template.py +1460 -0
- pulumi_sdwan/cellular_cedge_profile_feature_template.py +1026 -0
- pulumi_sdwan/cellular_controller_feature_template.py +849 -0
- pulumi_sdwan/cellular_profile_feature_template.py +1410 -0
- pulumi_sdwan/centralized_policy.py +327 -0
- pulumi_sdwan/cflowd_policy_definition.py +645 -0
- pulumi_sdwan/cisco_banner_feature_template.py +546 -0
- pulumi_sdwan/cisco_bfd_feature_template.py +668 -0
- pulumi_sdwan/cisco_bgp_feature_template.py +2024 -0
- pulumi_sdwan/cisco_dhcp_server_feature_template.py +1178 -0
- pulumi_sdwan/cisco_logging_feature_template.py +755 -0
- pulumi_sdwan/cisco_ntp_feature_template.py +802 -0
- pulumi_sdwan/cisco_omp_feature_template.py +1648 -0
- pulumi_sdwan/cisco_ospf_feature_template.py +1695 -0
- pulumi_sdwan/cisco_ospfv3_feature_template.py +3528 -0
- pulumi_sdwan/cisco_secure_internet_gateway_feature_template.py +614 -0
- pulumi_sdwan/cisco_security_feature_template.py +997 -0
- pulumi_sdwan/cisco_sig_credentials_feature_template.py +1410 -0
- pulumi_sdwan/cisco_snmp_feature_template.py +849 -0
- pulumi_sdwan/cisco_system_feature_template.py +4093 -0
- pulumi_sdwan/cisco_thousandeyes_feature_template.py +379 -0
- pulumi_sdwan/cisco_trustsec_feature_template.py +1803 -0
- pulumi_sdwan/cisco_vpn_feature_template.py +1742 -0
- pulumi_sdwan/cisco_vpn_interface_feature_template.py +9868 -0
- pulumi_sdwan/cisco_vpn_interface_gre_feature_template.py +1702 -0
- pulumi_sdwan/cisco_vpn_interface_ipsec_feature_template.py +2927 -0
- pulumi_sdwan/cisco_wireless_lan_feature_template.py +1166 -0
- pulumi_sdwan/class_map_policy_object.py +260 -0
- pulumi_sdwan/cli_config_feature.py +366 -0
- pulumi_sdwan/cli_device_template.py +412 -0
- pulumi_sdwan/cli_feature_profile.py +234 -0
- pulumi_sdwan/cli_template_feature_template.py +407 -0
- pulumi_sdwan/color_list_policy_object.py +266 -0
- pulumi_sdwan/config/__init__.py +8 -0
- pulumi_sdwan/config/__init__.pyi +41 -0
- pulumi_sdwan/config/vars.py +57 -0
- pulumi_sdwan/configuration_group.py +541 -0
- pulumi_sdwan/custom_control_topology_policy_definition.py +362 -0
- pulumi_sdwan/data_fqdn_prefix_list_policy_object.py +266 -0
- pulumi_sdwan/data_ipv4_prefix_list_policy_object.py +266 -0
- pulumi_sdwan/data_ipv6_prefix_list_policy_object.py +266 -0
- pulumi_sdwan/dns_security_feature_profile.py +234 -0
- pulumi_sdwan/dns_security_policy_definition.py +747 -0
- pulumi_sdwan/domain_list_policy_object.py +266 -0
- pulumi_sdwan/eigrp_feature_template.py +1131 -0
- pulumi_sdwan/embedded_security_feature_profile.py +234 -0
- pulumi_sdwan/expanded_community_list_policy_object.py +266 -0
- pulumi_sdwan/extended_community_list_policy_object.py +266 -0
- pulumi_sdwan/feature_device_template.py +602 -0
- pulumi_sdwan/geo_location_list_policy_object.py +268 -0
- pulumi_sdwan/get_advanced_inspection_profile_policy_definition.py +266 -0
- pulumi_sdwan/get_advanced_malware_protection_policy_definition.py +280 -0
- pulumi_sdwan/get_allow_url_list_policy_object.py +141 -0
- pulumi_sdwan/get_app_probe_class_policy_object.py +155 -0
- pulumi_sdwan/get_application_aware_routing_policy_definition.py +169 -0
- pulumi_sdwan/get_application_list_policy_object.py +141 -0
- pulumi_sdwan/get_application_priority_feature_profile.py +126 -0
- pulumi_sdwan/get_application_priority_qos_policy.py +205 -0
- pulumi_sdwan/get_application_priority_traffic_policy_policy.py +210 -0
- pulumi_sdwan/get_as_path_list_policy_object.py +141 -0
- pulumi_sdwan/get_block_url_list_policy_object.py +141 -0
- pulumi_sdwan/get_cedge_aaa_feature_template.py +539 -0
- pulumi_sdwan/get_cedge_global_feature_template.py +818 -0
- pulumi_sdwan/get_cedge_igmp_feature_template.py +189 -0
- pulumi_sdwan/get_cedge_multicast_feature_template.py +258 -0
- pulumi_sdwan/get_cedge_pim_feature_template.py +511 -0
- pulumi_sdwan/get_cellular_cedge_profile_feature_template.py +370 -0
- pulumi_sdwan/get_cellular_controller_feature_template.py +329 -0
- pulumi_sdwan/get_cellular_profile_feature_template.py +482 -0
- pulumi_sdwan/get_centralized_policy.py +155 -0
- pulumi_sdwan/get_cflowd_policy_definition.py +267 -0
- pulumi_sdwan/get_cisco_banner_feature_template.py +230 -0
- pulumi_sdwan/get_cisco_bfd_feature_template.py +273 -0
- pulumi_sdwan/get_cisco_bgp_feature_template.py +679 -0
- pulumi_sdwan/get_cisco_dhcp_server_feature_template.py +427 -0
- pulumi_sdwan/get_cisco_logging_feature_template.py +301 -0
- pulumi_sdwan/get_cisco_ntp_feature_template.py +315 -0
- pulumi_sdwan/get_cisco_omp_feature_template.py +567 -0
- pulumi_sdwan/get_cisco_ospf_feature_template.py +581 -0
- pulumi_sdwan/get_cisco_ospfv3_feature_template.py +1127 -0
- pulumi_sdwan/get_cisco_secure_internet_gateway_feature_template.py +259 -0
- pulumi_sdwan/get_cisco_security_feature_template.py +371 -0
- pulumi_sdwan/get_cisco_sig_credentials_feature_template.py +482 -0
- pulumi_sdwan/get_cisco_snmp_feature_template.py +329 -0
- pulumi_sdwan/get_cisco_system_feature_template.py +1141 -0
- pulumi_sdwan/get_cisco_thousandeyes_feature_template.py +189 -0
- pulumi_sdwan/get_cisco_trustsec_feature_template.py +609 -0
- pulumi_sdwan/get_cisco_vpn_feature_template.py +595 -0
- pulumi_sdwan/get_cisco_vpn_interface_feature_template.py +3003 -0
- pulumi_sdwan/get_cisco_vpn_interface_gre_feature_template.py +581 -0
- pulumi_sdwan/get_cisco_vpn_interface_ipsec_feature_template.py +916 -0
- pulumi_sdwan/get_cisco_wireless_lan_feature_template.py +413 -0
- pulumi_sdwan/get_class_map_policy_object.py +140 -0
- pulumi_sdwan/get_cli_config_feature.py +176 -0
- pulumi_sdwan/get_cli_device_template.py +182 -0
- pulumi_sdwan/get_cli_feature_profile.py +126 -0
- pulumi_sdwan/get_cli_template_feature_template.py +188 -0
- pulumi_sdwan/get_color_list_policy_object.py +141 -0
- pulumi_sdwan/get_configuration_group.py +211 -0
- pulumi_sdwan/get_custom_control_topology_policy_definition.py +183 -0
- pulumi_sdwan/get_data_fqdn_prefix_list_policy_object.py +141 -0
- pulumi_sdwan/get_data_ipv4_prefix_list_policy_object.py +141 -0
- pulumi_sdwan/get_data_ipv6_prefix_list_policy_object.py +141 -0
- pulumi_sdwan/get_device.py +149 -0
- pulumi_sdwan/get_dns_security_feature_profile.py +126 -0
- pulumi_sdwan/get_dns_security_policy_definition.py +281 -0
- pulumi_sdwan/get_domain_list_policy_object.py +141 -0
- pulumi_sdwan/get_eigrp_feature_template.py +413 -0
- pulumi_sdwan/get_embedded_security_feature_profile.py +126 -0
- pulumi_sdwan/get_expanded_community_list_policy_object.py +141 -0
- pulumi_sdwan/get_extended_community_list_policy_object.py +141 -0
- pulumi_sdwan/get_feature_device_template.py +239 -0
- pulumi_sdwan/get_geo_location_list_policy_object.py +141 -0
- pulumi_sdwan/get_gps_feature_template.py +342 -0
- pulumi_sdwan/get_hub_and_spoke_topology_policy_definition.py +197 -0
- pulumi_sdwan/get_intrusion_prevention_policy_definition.py +238 -0
- pulumi_sdwan/get_ips_signature_list_policy_object.py +141 -0
- pulumi_sdwan/get_ipv4_acl_policy_definition.py +183 -0
- pulumi_sdwan/get_ipv4_device_acl_policy_definition.py +183 -0
- pulumi_sdwan/get_ipv4_prefix_list_policy_object.py +141 -0
- pulumi_sdwan/get_ipv6_acl_policy_definition.py +183 -0
- pulumi_sdwan/get_ipv6_device_acl_policy_definition.py +183 -0
- pulumi_sdwan/get_ipv6_prefix_list_policy_object.py +141 -0
- pulumi_sdwan/get_local_application_list_policy_object.py +141 -0
- pulumi_sdwan/get_localized_policy.py +295 -0
- pulumi_sdwan/get_mesh_topology_policy_definition.py +197 -0
- pulumi_sdwan/get_mirror_policy_object.py +154 -0
- pulumi_sdwan/get_object_group_policy_definition.py +322 -0
- pulumi_sdwan/get_other_feature_profile.py +126 -0
- pulumi_sdwan/get_other_thousandeyes_feature.py +177 -0
- pulumi_sdwan/get_other_ucse_feature.py +353 -0
- pulumi_sdwan/get_policer_policy_object.py +168 -0
- pulumi_sdwan/get_policy_object_app_probe_class.py +177 -0
- pulumi_sdwan/get_policy_object_application_list.py +177 -0
- pulumi_sdwan/get_policy_object_as_path_list.py +191 -0
- pulumi_sdwan/get_policy_object_class_map.py +177 -0
- pulumi_sdwan/get_policy_object_color_list.py +177 -0
- pulumi_sdwan/get_policy_object_data_ipv4_prefix_list.py +177 -0
- pulumi_sdwan/get_policy_object_data_ipv6_prefix_list.py +177 -0
- pulumi_sdwan/get_policy_object_expanded_community_list.py +190 -0
- pulumi_sdwan/get_policy_object_extended_community_list.py +177 -0
- pulumi_sdwan/get_policy_object_feature_profile.py +126 -0
- pulumi_sdwan/get_policy_object_ipv4_prefix_list.py +177 -0
- pulumi_sdwan/get_policy_object_ipv6_prefix_list.py +177 -0
- pulumi_sdwan/get_policy_object_mirror.py +177 -0
- pulumi_sdwan/get_policy_object_policer.py +177 -0
- pulumi_sdwan/get_policy_object_preferred_color_group.py +177 -0
- pulumi_sdwan/get_policy_object_security_data_ipv4_prefix_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_fqdn_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_geolocation_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_identity_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_ips_signature.py +177 -0
- pulumi_sdwan/get_policy_object_security_local_application_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_local_domain_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_port_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_scalable_group_tag_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_url_allow_list.py +177 -0
- pulumi_sdwan/get_policy_object_security_url_block_list.py +177 -0
- pulumi_sdwan/get_policy_object_sla_class_list.py +177 -0
- pulumi_sdwan/get_policy_object_standard_community_list.py +177 -0
- pulumi_sdwan/get_policy_object_tloc_list.py +177 -0
- pulumi_sdwan/get_policy_object_vpn_group.py +177 -0
- pulumi_sdwan/get_port_list_policy_object.py +141 -0
- pulumi_sdwan/get_preferred_color_group_policy_object.py +210 -0
- pulumi_sdwan/get_protocol_list_policy_object.py +141 -0
- pulumi_sdwan/get_qos_map_policy_definition.py +169 -0
- pulumi_sdwan/get_region_list_policy_object.py +141 -0
- pulumi_sdwan/get_rewrite_rule_policy_definition.py +169 -0
- pulumi_sdwan/get_route_policy_definition.py +183 -0
- pulumi_sdwan/get_rule_set_policy_definition.py +155 -0
- pulumi_sdwan/get_security_app_hosting_feature_template.py +189 -0
- pulumi_sdwan/get_security_policy.py +306 -0
- pulumi_sdwan/get_service_dhcp_server_feature.py +443 -0
- pulumi_sdwan/get_service_feature_profile.py +126 -0
- pulumi_sdwan/get_service_ipv4_acl_feature.py +191 -0
- pulumi_sdwan/get_service_ipv6_acl_feature.py +191 -0
- pulumi_sdwan/get_service_lan_vpn_feature.py +666 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_multicast_feature.py +156 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_bgp_feature.py +156 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_eigrp_feature.py +156 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospf_feature.py +156 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +156 -0
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +156 -0
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature.py +1354 -0
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +178 -0
- pulumi_sdwan/get_service_lan_vpn_interface_gre_feature.py +570 -0
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature.py +992 -0
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +178 -0
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature.py +705 -0
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +178 -0
- pulumi_sdwan/get_service_multicast_feature.py +513 -0
- pulumi_sdwan/get_service_object_tracker_feature.py +316 -0
- pulumi_sdwan/get_service_object_tracker_group_feature.py +233 -0
- pulumi_sdwan/get_service_route_policy_feature.py +191 -0
- pulumi_sdwan/get_service_routing_bgp_feature.py +857 -0
- pulumi_sdwan/get_service_routing_eigrp_feature.py +398 -0
- pulumi_sdwan/get_service_routing_ospf_feature.py +566 -0
- pulumi_sdwan/get_service_routing_ospfv3_ipv4_feature.py +650 -0
- pulumi_sdwan/get_service_routing_ospfv3_ipv6_feature.py +650 -0
- pulumi_sdwan/get_service_switchport_feature.py +219 -0
- pulumi_sdwan/get_service_tracker_feature.py +464 -0
- pulumi_sdwan/get_service_tracker_group_feature.py +205 -0
- pulumi_sdwan/get_service_wireless_lan_feature.py +415 -0
- pulumi_sdwan/get_sig_security_feature_profile.py +126 -0
- pulumi_sdwan/get_site_list_policy_object.py +141 -0
- pulumi_sdwan/get_sla_class_policy_object.py +249 -0
- pulumi_sdwan/get_standard_community_list_policy_object.py +141 -0
- pulumi_sdwan/get_switchport_feature_template.py +273 -0
- pulumi_sdwan/get_system_aaa_feature.py +359 -0
- pulumi_sdwan/get_system_banner_feature.py +212 -0
- pulumi_sdwan/get_system_basic_feature.py +1003 -0
- pulumi_sdwan/get_system_bfd_feature.py +252 -0
- pulumi_sdwan/get_system_feature_profile.py +126 -0
- pulumi_sdwan/get_system_flexible_port_speed_feature.py +190 -0
- pulumi_sdwan/get_system_global_feature.py +806 -0
- pulumi_sdwan/get_system_ipv4_device_access_feature.py +191 -0
- pulumi_sdwan/get_system_ipv6_device_access_feature.py +191 -0
- pulumi_sdwan/get_system_logging_feature.py +289 -0
- pulumi_sdwan/get_system_mrf_feature.py +260 -0
- pulumi_sdwan/get_system_ntp_feature.py +303 -0
- pulumi_sdwan/get_system_omp_feature.py +974 -0
- pulumi_sdwan/get_system_performance_monitoring_feature.py +246 -0
- pulumi_sdwan/get_system_remote_access_feature.py +695 -0
- pulumi_sdwan/get_system_security_feature.py +331 -0
- pulumi_sdwan/get_system_snmp_feature.py +317 -0
- pulumi_sdwan/get_tloc_list_policy_object.py +141 -0
- pulumi_sdwan/get_tls_ssl_decryption_policy_definition.py +379 -0
- pulumi_sdwan/get_tls_ssl_profile_policy_definition.py +294 -0
- pulumi_sdwan/get_traffic_data_policy_definition.py +183 -0
- pulumi_sdwan/get_transport_cellular_controller_feature.py +302 -0
- pulumi_sdwan/get_transport_cellular_profile_feature.py +372 -0
- pulumi_sdwan/get_transport_feature_profile.py +126 -0
- pulumi_sdwan/get_transport_gps_feature.py +330 -0
- pulumi_sdwan/get_transport_ipv4_acl_feature.py +191 -0
- pulumi_sdwan/get_transport_ipv6_acl_feature.py +191 -0
- pulumi_sdwan/get_transport_ipv6_tracker_feature.py +414 -0
- pulumi_sdwan/get_transport_ipv6_tracker_group_feature.py +233 -0
- pulumi_sdwan/get_transport_management_vpn_feature.py +342 -0
- pulumi_sdwan/get_transport_management_vpn_interface_ethernet_feature.py +862 -0
- pulumi_sdwan/get_transport_route_policy_feature.py +191 -0
- pulumi_sdwan/get_transport_routing_bgp_feature.py +871 -0
- pulumi_sdwan/get_transport_routing_ospf_feature.py +566 -0
- pulumi_sdwan/get_transport_routing_ospfv3_ipv4_feature.py +650 -0
- pulumi_sdwan/get_transport_routing_ospfv3_ipv6_feature.py +650 -0
- pulumi_sdwan/get_transport_t1_e1_controller_feature.py +219 -0
- pulumi_sdwan/get_transport_tracker_feature.py +414 -0
- pulumi_sdwan/get_transport_tracker_group_feature.py +205 -0
- pulumi_sdwan/get_transport_wan_vpn_feature.py +384 -0
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_bgp_feature.py +156 -0
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospf_feature.py +156 -0
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +156 -0
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +156 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature.py +1956 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature.py +2824 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +178 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +178 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +178 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +178 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature.py +570 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature.py +992 -0
- pulumi_sdwan/get_transport_wan_vpn_interface_t1_e1_serial_feature.py +1623 -0
- pulumi_sdwan/get_url_filtering_policy_definition.py +308 -0
- pulumi_sdwan/get_vedge_inventory.py +103 -0
- pulumi_sdwan/get_vpn_interface_cellular_feature_template.py +2205 -0
- pulumi_sdwan/get_vpn_interface_dsl_ipoe_feature_template.py +2387 -0
- pulumi_sdwan/get_vpn_interface_dsl_pppoa_feature_template.py +2233 -0
- pulumi_sdwan/get_vpn_interface_dsl_pppoe_feature_template.py +2345 -0
- pulumi_sdwan/get_vpn_interface_ethernet_pppoe_feature_template.py +2331 -0
- pulumi_sdwan/get_vpn_interface_multilink_feature_template.py +2051 -0
- pulumi_sdwan/get_vpn_interface_svi_feature_template.py +693 -0
- pulumi_sdwan/get_vpn_interface_t1_e1_serial_feature_template.py +1813 -0
- pulumi_sdwan/get_vpn_list_policy_object.py +141 -0
- pulumi_sdwan/get_vpn_membership_policy_definition.py +169 -0
- pulumi_sdwan/get_zone_based_firewall_policy_definition.py +191 -0
- pulumi_sdwan/get_zone_list_policy_object.py +141 -0
- pulumi_sdwan/gps_feature_template.py +930 -0
- pulumi_sdwan/hub_and_spoke_topology_policy_definition.py +410 -0
- pulumi_sdwan/intrusion_prevention_policy_definition.py +599 -0
- pulumi_sdwan/ips_signature_list_policy_object.py +240 -0
- pulumi_sdwan/ipv4_acl_policy_definition.py +363 -0
- pulumi_sdwan/ipv4_device_acl_policy_definition.py +363 -0
- pulumi_sdwan/ipv4_prefix_list_policy_object.py +270 -0
- pulumi_sdwan/ipv6_acl_policy_definition.py +363 -0
- pulumi_sdwan/ipv6_device_acl_policy_definition.py +363 -0
- pulumi_sdwan/ipv6_prefix_list_policy_object.py +270 -0
- pulumi_sdwan/local_application_list_policy_object.py +266 -0
- pulumi_sdwan/localized_policy.py +807 -0
- pulumi_sdwan/mesh_topology_policy_definition.py +410 -0
- pulumi_sdwan/mirror_policy_object.py +310 -0
- pulumi_sdwan/object_group_policy_definition.py +879 -0
- pulumi_sdwan/other_feature_profile.py +234 -0
- pulumi_sdwan/other_thousandeyes_feature.py +340 -0
- pulumi_sdwan/other_ucse_feature.py +960 -0
- pulumi_sdwan/outputs.py +105049 -0
- pulumi_sdwan/policer_policy_object.py +360 -0
- pulumi_sdwan/policy_object_app_probe_class.py +341 -0
- pulumi_sdwan/policy_object_application_list.py +371 -0
- pulumi_sdwan/policy_object_as_path_list.py +389 -0
- pulumi_sdwan/policy_object_class_map.py +371 -0
- pulumi_sdwan/policy_object_color_list.py +371 -0
- pulumi_sdwan/policy_object_data_ipv4_prefix_list.py +341 -0
- pulumi_sdwan/policy_object_data_ipv6_prefix_list.py +341 -0
- pulumi_sdwan/policy_object_expanded_community_list.py +412 -0
- pulumi_sdwan/policy_object_extended_community_list.py +341 -0
- pulumi_sdwan/policy_object_feature_profile.py +234 -0
- pulumi_sdwan/policy_object_ipv4_prefix_list.py +341 -0
- pulumi_sdwan/policy_object_ipv6_prefix_list.py +341 -0
- pulumi_sdwan/policy_object_mirror.py +341 -0
- pulumi_sdwan/policy_object_policer.py +341 -0
- pulumi_sdwan/policy_object_preferred_color_group.py +341 -0
- pulumi_sdwan/policy_object_security_data_ipv4_prefix_list.py +328 -0
- pulumi_sdwan/policy_object_security_fqdn_list.py +358 -0
- pulumi_sdwan/policy_object_security_geolocation_list.py +371 -0
- pulumi_sdwan/policy_object_security_identity_list.py +370 -0
- pulumi_sdwan/policy_object_security_ips_signature.py +341 -0
- pulumi_sdwan/policy_object_security_local_application_list.py +370 -0
- pulumi_sdwan/policy_object_security_local_domain_list.py +328 -0
- pulumi_sdwan/policy_object_security_port_list.py +371 -0
- pulumi_sdwan/policy_object_security_scalable_group_tag_list.py +328 -0
- pulumi_sdwan/policy_object_security_url_allow_list.py +371 -0
- pulumi_sdwan/policy_object_security_url_block_list.py +371 -0
- pulumi_sdwan/policy_object_sla_class_list.py +341 -0
- pulumi_sdwan/policy_object_standard_community_list.py +341 -0
- pulumi_sdwan/policy_object_tloc_list.py +341 -0
- pulumi_sdwan/policy_object_vpn_group.py +371 -0
- pulumi_sdwan/port_list_policy_object.py +266 -0
- pulumi_sdwan/preferred_color_group_policy_object.py +505 -0
- pulumi_sdwan/protocol_list_policy_object.py +266 -0
- pulumi_sdwan/provider.py +209 -0
- pulumi_sdwan/pulumi-plugin.json +5 -0
- pulumi_sdwan/py.typed +0 -0
- pulumi_sdwan/qos_map_policy_definition.py +316 -0
- pulumi_sdwan/region_list_policy_object.py +240 -0
- pulumi_sdwan/rewrite_rule_policy_definition.py +316 -0
- pulumi_sdwan/route_policy_definition.py +362 -0
- pulumi_sdwan/rule_set_policy_definition.py +288 -0
- pulumi_sdwan/security_app_hosting_feature_template.py +379 -0
- pulumi_sdwan/security_policy.py +799 -0
- pulumi_sdwan/service_dhcp_server_feature.py +1261 -0
- pulumi_sdwan/service_feature_profile.py +234 -0
- pulumi_sdwan/service_ipv4_acl_feature.py +386 -0
- pulumi_sdwan/service_ipv6_acl_feature.py +386 -0
- pulumi_sdwan/service_lan_vpn_feature.py +1967 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_multicast_feature.py +285 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_bgp_feature.py +285 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_eigrp_feature.py +285 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospf_feature.py +285 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +285 -0
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +285 -0
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature.py +4292 -0
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +335 -0
- pulumi_sdwan/service_lan_vpn_interface_gre_feature.py +1717 -0
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature.py +3269 -0
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +335 -0
- pulumi_sdwan/service_lan_vpn_interface_svi_feature.py +2102 -0
- pulumi_sdwan/service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +335 -0
- pulumi_sdwan/service_multicast_feature.py +1468 -0
- pulumi_sdwan/service_object_tracker_feature.py +867 -0
- pulumi_sdwan/service_object_tracker_group_feature.py +528 -0
- pulumi_sdwan/service_route_policy_feature.py +387 -0
- pulumi_sdwan/service_routing_bgp_feature.py +2623 -0
- pulumi_sdwan/service_routing_eigrp_feature.py +1080 -0
- pulumi_sdwan/service_routing_ospf_feature.py +1643 -0
- pulumi_sdwan/service_routing_ospfv3_ipv4_feature.py +1925 -0
- pulumi_sdwan/service_routing_ospfv3_ipv6_feature.py +1925 -0
- pulumi_sdwan/service_switchport_feature.py +481 -0
- pulumi_sdwan/service_tracker_feature.py +1371 -0
- pulumi_sdwan/service_tracker_group_feature.py +434 -0
- pulumi_sdwan/service_wireless_lan_feature.py +1232 -0
- pulumi_sdwan/sig_security_feature_profile.py +234 -0
- pulumi_sdwan/site_list_policy_object.py +240 -0
- pulumi_sdwan/sla_class_policy_object.py +661 -0
- pulumi_sdwan/standard_community_list_policy_object.py +266 -0
- pulumi_sdwan/switchport_feature_template.py +661 -0
- pulumi_sdwan/system_aaa_feature.py +952 -0
- pulumi_sdwan/system_banner_feature.py +481 -0
- pulumi_sdwan/system_basic_feature.py +3637 -0
- pulumi_sdwan/system_bfd_feature.py +622 -0
- pulumi_sdwan/system_feature_profile.py +234 -0
- pulumi_sdwan/system_flexible_port_speed_feature.py +425 -0
- pulumi_sdwan/system_global_feature.py +2523 -0
- pulumi_sdwan/system_ipv4_device_access_feature.py +387 -0
- pulumi_sdwan/system_ipv6_device_access_feature.py +387 -0
- pulumi_sdwan/system_logging_feature.py +715 -0
- pulumi_sdwan/system_mrf_feature.py +653 -0
- pulumi_sdwan/system_ntp_feature.py +762 -0
- pulumi_sdwan/system_omp_feature.py +3099 -0
- pulumi_sdwan/system_performance_monitoring_feature.py +608 -0
- pulumi_sdwan/system_remote_access_feature.py +2230 -0
- pulumi_sdwan/system_security_feature.py +863 -0
- pulumi_sdwan/system_snmp_feature.py +809 -0
- pulumi_sdwan/tloc_list_policy_object.py +240 -0
- pulumi_sdwan/tls_ssl_decryption_policy_definition.py +1039 -0
- pulumi_sdwan/tls_ssl_profile_policy_definition.py +791 -0
- pulumi_sdwan/traffic_data_policy_definition.py +363 -0
- pulumi_sdwan/transport_cellular_controller_feature.py +796 -0
- pulumi_sdwan/transport_cellular_profile_feature.py +1036 -0
- pulumi_sdwan/transport_feature_profile.py +234 -0
- pulumi_sdwan/transport_gps_feature.py +891 -0
- pulumi_sdwan/transport_ipv4_acl_feature.py +386 -0
- pulumi_sdwan/transport_ipv6_acl_feature.py +386 -0
- pulumi_sdwan/transport_ipv6_tracker_feature.py +1179 -0
- pulumi_sdwan/transport_ipv6_tracker_group_feature.py +529 -0
- pulumi_sdwan/transport_management_vpn_feature.py +890 -0
- pulumi_sdwan/transport_management_vpn_interface_ethernet_feature.py +2665 -0
- pulumi_sdwan/transport_route_policy_feature.py +387 -0
- pulumi_sdwan/transport_routing_bgp_feature.py +2670 -0
- pulumi_sdwan/transport_routing_ospf_feature.py +1643 -0
- pulumi_sdwan/transport_routing_ospfv3_ipv4_feature.py +1925 -0
- pulumi_sdwan/transport_routing_ospfv3_ipv6_feature.py +1925 -0
- pulumi_sdwan/transport_t1_e1_controller_feature.py +483 -0
- pulumi_sdwan/transport_tracker_feature.py +1179 -0
- pulumi_sdwan/transport_tracker_group_feature.py +434 -0
- pulumi_sdwan/transport_wan_vpn_feature.py +1031 -0
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_bgp_feature.py +285 -0
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospf_feature.py +285 -0
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +285 -0
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +285 -0
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature.py +6313 -0
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature.py +9269 -0
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +335 -0
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +335 -0
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +335 -0
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +335 -0
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature.py +1717 -0
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature.py +3268 -0
- pulumi_sdwan/transport_wan_vpn_interface_t1_e1_serial_feature.py +5364 -0
- pulumi_sdwan/url_filtering_policy_definition.py +847 -0
- pulumi_sdwan/vpn_interface_cellular_feature_template.py +7168 -0
- pulumi_sdwan/vpn_interface_dsl_ipoe_feature_template.py +7779 -0
- pulumi_sdwan/vpn_interface_dsl_pppoa_feature_template.py +7262 -0
- pulumi_sdwan/vpn_interface_dsl_pppoe_feature_template.py +7638 -0
- pulumi_sdwan/vpn_interface_ethernet_pppoe_feature_template.py +7591 -0
- pulumi_sdwan/vpn_interface_multilink_feature_template.py +6651 -0
- pulumi_sdwan/vpn_interface_svi_feature_template.py +2071 -0
- pulumi_sdwan/vpn_interface_t1_e1_serial_feature_template.py +5866 -0
- pulumi_sdwan/vpn_list_policy_object.py +240 -0
- pulumi_sdwan/vpn_membership_policy_definition.py +316 -0
- pulumi_sdwan/zone_based_firewall_policy_definition.py +406 -0
- pulumi_sdwan/zone_list_policy_object.py +266 -0
- pulumi_sdwan-0.3.0a1736835519.dist-info/METADATA +64 -0
- pulumi_sdwan-0.3.0a1736835519.dist-info/RECORD +464 -0
- pulumi_sdwan-0.3.0a1736835519.dist-info/WHEEL +5 -0
- pulumi_sdwan-0.3.0a1736835519.dist-info/top_level.txt +1 -0
|
@@ -0,0 +1,1039 @@
|
|
|
1
|
+
# coding=utf-8
|
|
2
|
+
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
+
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
|
|
5
|
+
import copy
|
|
6
|
+
import warnings
|
|
7
|
+
import sys
|
|
8
|
+
import pulumi
|
|
9
|
+
import pulumi.runtime
|
|
10
|
+
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
15
|
+
from . import _utilities
|
|
16
|
+
from . import outputs
|
|
17
|
+
from ._inputs import *
|
|
18
|
+
|
|
19
|
+
__all__ = ['TlsSslDecryptionPolicyDefinitionArgs', 'TlsSslDecryptionPolicyDefinition']
|
|
20
|
+
|
|
21
|
+
@pulumi.input_type
|
|
22
|
+
class TlsSslDecryptionPolicyDefinitionArgs:
|
|
23
|
+
def __init__(__self__, *,
|
|
24
|
+
description: pulumi.Input[str],
|
|
25
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
26
|
+
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
27
|
+
default_action: Optional[pulumi.Input[str]] = None,
|
|
28
|
+
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
29
|
+
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
30
|
+
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
31
|
+
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
32
|
+
mode: Optional[pulumi.Input[str]] = None,
|
|
33
|
+
name: Optional[pulumi.Input[str]] = None,
|
|
34
|
+
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]] = None,
|
|
35
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
36
|
+
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
37
|
+
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
38
|
+
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
39
|
+
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
40
|
+
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
41
|
+
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]] = None,
|
|
42
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None):
|
|
43
|
+
"""
|
|
44
|
+
The set of arguments for constructing a TlsSslDecryptionPolicyDefinition resource.
|
|
45
|
+
:param pulumi.Input[str] description: The description of the policy definition.
|
|
46
|
+
:param pulumi.Input[int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
47
|
+
:param pulumi.Input[str] certificate_revocation_status: Certificate revocation status - Choices: `ocsp`, `none`
|
|
48
|
+
:param pulumi.Input[str] default_action: Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
49
|
+
:param pulumi.Input[str] ec_key_type: EC Key Type - Choices: `P256`, `P384`, `P521`
|
|
50
|
+
:param pulumi.Input[str] expired_certificate: Expired certificate action - Choices: `drop`, `decrypt`
|
|
51
|
+
:param pulumi.Input[str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
52
|
+
:param pulumi.Input[str] minimal_tls_version: Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
53
|
+
:param pulumi.Input[str] mode: The policy mode - Choices: `security`, `unified`
|
|
54
|
+
:param pulumi.Input[str] name: The name of the policy definition.
|
|
55
|
+
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
56
|
+
:param pulumi.Input[str] rsa_key_pair_modulus: RSA key pair modules - Choices: `1024`, `2048`, `4096`
|
|
57
|
+
:param pulumi.Input[str] ssl_decryption_enabled: SSL decryption enabled
|
|
58
|
+
:param pulumi.Input[str] unknown_revocation_status: Unknown revocation status action - Choices: `drop`, `decrypt`
|
|
59
|
+
:param pulumi.Input[str] unsupported_cipher_suites: Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
|
|
60
|
+
:param pulumi.Input[str] unsupported_protocol_versions: Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
|
|
61
|
+
:param pulumi.Input[str] untrusted_certificate: Untrusted certificate action - Choices: `drop`, `decrypt`
|
|
62
|
+
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
63
|
+
:param pulumi.Input[bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
64
|
+
"""
|
|
65
|
+
pulumi.set(__self__, "description", description)
|
|
66
|
+
if certificate_lifetime_in_days is not None:
|
|
67
|
+
pulumi.set(__self__, "certificate_lifetime_in_days", certificate_lifetime_in_days)
|
|
68
|
+
if certificate_revocation_status is not None:
|
|
69
|
+
pulumi.set(__self__, "certificate_revocation_status", certificate_revocation_status)
|
|
70
|
+
if default_action is not None:
|
|
71
|
+
pulumi.set(__self__, "default_action", default_action)
|
|
72
|
+
if ec_key_type is not None:
|
|
73
|
+
pulumi.set(__self__, "ec_key_type", ec_key_type)
|
|
74
|
+
if expired_certificate is not None:
|
|
75
|
+
pulumi.set(__self__, "expired_certificate", expired_certificate)
|
|
76
|
+
if failure_mode is not None:
|
|
77
|
+
pulumi.set(__self__, "failure_mode", failure_mode)
|
|
78
|
+
if minimal_tls_version is not None:
|
|
79
|
+
pulumi.set(__self__, "minimal_tls_version", minimal_tls_version)
|
|
80
|
+
if mode is not None:
|
|
81
|
+
pulumi.set(__self__, "mode", mode)
|
|
82
|
+
if name is not None:
|
|
83
|
+
pulumi.set(__self__, "name", name)
|
|
84
|
+
if network_rules is not None:
|
|
85
|
+
pulumi.set(__self__, "network_rules", network_rules)
|
|
86
|
+
if rsa_key_pair_modulus is not None:
|
|
87
|
+
pulumi.set(__self__, "rsa_key_pair_modulus", rsa_key_pair_modulus)
|
|
88
|
+
if ssl_decryption_enabled is not None:
|
|
89
|
+
pulumi.set(__self__, "ssl_decryption_enabled", ssl_decryption_enabled)
|
|
90
|
+
if unknown_revocation_status is not None:
|
|
91
|
+
pulumi.set(__self__, "unknown_revocation_status", unknown_revocation_status)
|
|
92
|
+
if unsupported_cipher_suites is not None:
|
|
93
|
+
pulumi.set(__self__, "unsupported_cipher_suites", unsupported_cipher_suites)
|
|
94
|
+
if unsupported_protocol_versions is not None:
|
|
95
|
+
pulumi.set(__self__, "unsupported_protocol_versions", unsupported_protocol_versions)
|
|
96
|
+
if untrusted_certificate is not None:
|
|
97
|
+
pulumi.set(__self__, "untrusted_certificate", untrusted_certificate)
|
|
98
|
+
if url_rules is not None:
|
|
99
|
+
pulumi.set(__self__, "url_rules", url_rules)
|
|
100
|
+
if use_default_ca_cert_bundle is not None:
|
|
101
|
+
pulumi.set(__self__, "use_default_ca_cert_bundle", use_default_ca_cert_bundle)
|
|
102
|
+
|
|
103
|
+
@property
|
|
104
|
+
@pulumi.getter
|
|
105
|
+
def description(self) -> pulumi.Input[str]:
|
|
106
|
+
"""
|
|
107
|
+
The description of the policy definition.
|
|
108
|
+
"""
|
|
109
|
+
return pulumi.get(self, "description")
|
|
110
|
+
|
|
111
|
+
@description.setter
|
|
112
|
+
def description(self, value: pulumi.Input[str]):
|
|
113
|
+
pulumi.set(self, "description", value)
|
|
114
|
+
|
|
115
|
+
@property
|
|
116
|
+
@pulumi.getter(name="certificateLifetimeInDays")
|
|
117
|
+
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[int]]:
|
|
118
|
+
"""
|
|
119
|
+
Certificate Lifetime(in Days)
|
|
120
|
+
"""
|
|
121
|
+
return pulumi.get(self, "certificate_lifetime_in_days")
|
|
122
|
+
|
|
123
|
+
@certificate_lifetime_in_days.setter
|
|
124
|
+
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[int]]):
|
|
125
|
+
pulumi.set(self, "certificate_lifetime_in_days", value)
|
|
126
|
+
|
|
127
|
+
@property
|
|
128
|
+
@pulumi.getter(name="certificateRevocationStatus")
|
|
129
|
+
def certificate_revocation_status(self) -> Optional[pulumi.Input[str]]:
|
|
130
|
+
"""
|
|
131
|
+
Certificate revocation status - Choices: `ocsp`, `none`
|
|
132
|
+
"""
|
|
133
|
+
return pulumi.get(self, "certificate_revocation_status")
|
|
134
|
+
|
|
135
|
+
@certificate_revocation_status.setter
|
|
136
|
+
def certificate_revocation_status(self, value: Optional[pulumi.Input[str]]):
|
|
137
|
+
pulumi.set(self, "certificate_revocation_status", value)
|
|
138
|
+
|
|
139
|
+
@property
|
|
140
|
+
@pulumi.getter(name="defaultAction")
|
|
141
|
+
def default_action(self) -> Optional[pulumi.Input[str]]:
|
|
142
|
+
"""
|
|
143
|
+
Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
144
|
+
"""
|
|
145
|
+
return pulumi.get(self, "default_action")
|
|
146
|
+
|
|
147
|
+
@default_action.setter
|
|
148
|
+
def default_action(self, value: Optional[pulumi.Input[str]]):
|
|
149
|
+
pulumi.set(self, "default_action", value)
|
|
150
|
+
|
|
151
|
+
@property
|
|
152
|
+
@pulumi.getter(name="ecKeyType")
|
|
153
|
+
def ec_key_type(self) -> Optional[pulumi.Input[str]]:
|
|
154
|
+
"""
|
|
155
|
+
EC Key Type - Choices: `P256`, `P384`, `P521`
|
|
156
|
+
"""
|
|
157
|
+
return pulumi.get(self, "ec_key_type")
|
|
158
|
+
|
|
159
|
+
@ec_key_type.setter
|
|
160
|
+
def ec_key_type(self, value: Optional[pulumi.Input[str]]):
|
|
161
|
+
pulumi.set(self, "ec_key_type", value)
|
|
162
|
+
|
|
163
|
+
@property
|
|
164
|
+
@pulumi.getter(name="expiredCertificate")
|
|
165
|
+
def expired_certificate(self) -> Optional[pulumi.Input[str]]:
|
|
166
|
+
"""
|
|
167
|
+
Expired certificate action - Choices: `drop`, `decrypt`
|
|
168
|
+
"""
|
|
169
|
+
return pulumi.get(self, "expired_certificate")
|
|
170
|
+
|
|
171
|
+
@expired_certificate.setter
|
|
172
|
+
def expired_certificate(self, value: Optional[pulumi.Input[str]]):
|
|
173
|
+
pulumi.set(self, "expired_certificate", value)
|
|
174
|
+
|
|
175
|
+
@property
|
|
176
|
+
@pulumi.getter(name="failureMode")
|
|
177
|
+
def failure_mode(self) -> Optional[pulumi.Input[str]]:
|
|
178
|
+
"""
|
|
179
|
+
Failure mode - Choices: `open`, `close`
|
|
180
|
+
"""
|
|
181
|
+
return pulumi.get(self, "failure_mode")
|
|
182
|
+
|
|
183
|
+
@failure_mode.setter
|
|
184
|
+
def failure_mode(self, value: Optional[pulumi.Input[str]]):
|
|
185
|
+
pulumi.set(self, "failure_mode", value)
|
|
186
|
+
|
|
187
|
+
@property
|
|
188
|
+
@pulumi.getter(name="minimalTlsVersion")
|
|
189
|
+
def minimal_tls_version(self) -> Optional[pulumi.Input[str]]:
|
|
190
|
+
"""
|
|
191
|
+
Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
192
|
+
"""
|
|
193
|
+
return pulumi.get(self, "minimal_tls_version")
|
|
194
|
+
|
|
195
|
+
@minimal_tls_version.setter
|
|
196
|
+
def minimal_tls_version(self, value: Optional[pulumi.Input[str]]):
|
|
197
|
+
pulumi.set(self, "minimal_tls_version", value)
|
|
198
|
+
|
|
199
|
+
@property
|
|
200
|
+
@pulumi.getter
|
|
201
|
+
def mode(self) -> Optional[pulumi.Input[str]]:
|
|
202
|
+
"""
|
|
203
|
+
The policy mode - Choices: `security`, `unified`
|
|
204
|
+
"""
|
|
205
|
+
return pulumi.get(self, "mode")
|
|
206
|
+
|
|
207
|
+
@mode.setter
|
|
208
|
+
def mode(self, value: Optional[pulumi.Input[str]]):
|
|
209
|
+
pulumi.set(self, "mode", value)
|
|
210
|
+
|
|
211
|
+
@property
|
|
212
|
+
@pulumi.getter
|
|
213
|
+
def name(self) -> Optional[pulumi.Input[str]]:
|
|
214
|
+
"""
|
|
215
|
+
The name of the policy definition.
|
|
216
|
+
"""
|
|
217
|
+
return pulumi.get(self, "name")
|
|
218
|
+
|
|
219
|
+
@name.setter
|
|
220
|
+
def name(self, value: Optional[pulumi.Input[str]]):
|
|
221
|
+
pulumi.set(self, "name", value)
|
|
222
|
+
|
|
223
|
+
@property
|
|
224
|
+
@pulumi.getter(name="networkRules")
|
|
225
|
+
def network_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]:
|
|
226
|
+
"""
|
|
227
|
+
List of network rules (applies when `mode` set to `security`)
|
|
228
|
+
"""
|
|
229
|
+
return pulumi.get(self, "network_rules")
|
|
230
|
+
|
|
231
|
+
@network_rules.setter
|
|
232
|
+
def network_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]):
|
|
233
|
+
pulumi.set(self, "network_rules", value)
|
|
234
|
+
|
|
235
|
+
@property
|
|
236
|
+
@pulumi.getter(name="rsaKeyPairModulus")
|
|
237
|
+
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[str]]:
|
|
238
|
+
"""
|
|
239
|
+
RSA key pair modules - Choices: `1024`, `2048`, `4096`
|
|
240
|
+
"""
|
|
241
|
+
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
242
|
+
|
|
243
|
+
@rsa_key_pair_modulus.setter
|
|
244
|
+
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[str]]):
|
|
245
|
+
pulumi.set(self, "rsa_key_pair_modulus", value)
|
|
246
|
+
|
|
247
|
+
@property
|
|
248
|
+
@pulumi.getter(name="sslDecryptionEnabled")
|
|
249
|
+
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[str]]:
|
|
250
|
+
"""
|
|
251
|
+
SSL decryption enabled
|
|
252
|
+
"""
|
|
253
|
+
return pulumi.get(self, "ssl_decryption_enabled")
|
|
254
|
+
|
|
255
|
+
@ssl_decryption_enabled.setter
|
|
256
|
+
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[str]]):
|
|
257
|
+
pulumi.set(self, "ssl_decryption_enabled", value)
|
|
258
|
+
|
|
259
|
+
@property
|
|
260
|
+
@pulumi.getter(name="unknownRevocationStatus")
|
|
261
|
+
def unknown_revocation_status(self) -> Optional[pulumi.Input[str]]:
|
|
262
|
+
"""
|
|
263
|
+
Unknown revocation status action - Choices: `drop`, `decrypt`
|
|
264
|
+
"""
|
|
265
|
+
return pulumi.get(self, "unknown_revocation_status")
|
|
266
|
+
|
|
267
|
+
@unknown_revocation_status.setter
|
|
268
|
+
def unknown_revocation_status(self, value: Optional[pulumi.Input[str]]):
|
|
269
|
+
pulumi.set(self, "unknown_revocation_status", value)
|
|
270
|
+
|
|
271
|
+
@property
|
|
272
|
+
@pulumi.getter(name="unsupportedCipherSuites")
|
|
273
|
+
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[str]]:
|
|
274
|
+
"""
|
|
275
|
+
Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
|
|
276
|
+
"""
|
|
277
|
+
return pulumi.get(self, "unsupported_cipher_suites")
|
|
278
|
+
|
|
279
|
+
@unsupported_cipher_suites.setter
|
|
280
|
+
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[str]]):
|
|
281
|
+
pulumi.set(self, "unsupported_cipher_suites", value)
|
|
282
|
+
|
|
283
|
+
@property
|
|
284
|
+
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
285
|
+
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[str]]:
|
|
286
|
+
"""
|
|
287
|
+
Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
|
|
288
|
+
"""
|
|
289
|
+
return pulumi.get(self, "unsupported_protocol_versions")
|
|
290
|
+
|
|
291
|
+
@unsupported_protocol_versions.setter
|
|
292
|
+
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[str]]):
|
|
293
|
+
pulumi.set(self, "unsupported_protocol_versions", value)
|
|
294
|
+
|
|
295
|
+
@property
|
|
296
|
+
@pulumi.getter(name="untrustedCertificate")
|
|
297
|
+
def untrusted_certificate(self) -> Optional[pulumi.Input[str]]:
|
|
298
|
+
"""
|
|
299
|
+
Untrusted certificate action - Choices: `drop`, `decrypt`
|
|
300
|
+
"""
|
|
301
|
+
return pulumi.get(self, "untrusted_certificate")
|
|
302
|
+
|
|
303
|
+
@untrusted_certificate.setter
|
|
304
|
+
def untrusted_certificate(self, value: Optional[pulumi.Input[str]]):
|
|
305
|
+
pulumi.set(self, "untrusted_certificate", value)
|
|
306
|
+
|
|
307
|
+
@property
|
|
308
|
+
@pulumi.getter(name="urlRules")
|
|
309
|
+
def url_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]:
|
|
310
|
+
"""
|
|
311
|
+
List of url rules (applies when `mode` set to `security`)
|
|
312
|
+
"""
|
|
313
|
+
return pulumi.get(self, "url_rules")
|
|
314
|
+
|
|
315
|
+
@url_rules.setter
|
|
316
|
+
def url_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]):
|
|
317
|
+
pulumi.set(self, "url_rules", value)
|
|
318
|
+
|
|
319
|
+
@property
|
|
320
|
+
@pulumi.getter(name="useDefaultCaCertBundle")
|
|
321
|
+
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[bool]]:
|
|
322
|
+
"""
|
|
323
|
+
Use default CA certificate bundle
|
|
324
|
+
"""
|
|
325
|
+
return pulumi.get(self, "use_default_ca_cert_bundle")
|
|
326
|
+
|
|
327
|
+
@use_default_ca_cert_bundle.setter
|
|
328
|
+
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[bool]]):
|
|
329
|
+
pulumi.set(self, "use_default_ca_cert_bundle", value)
|
|
330
|
+
|
|
331
|
+
|
|
332
|
+
@pulumi.input_type
|
|
333
|
+
class _TlsSslDecryptionPolicyDefinitionState:
|
|
334
|
+
def __init__(__self__, *,
|
|
335
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
336
|
+
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
337
|
+
default_action: Optional[pulumi.Input[str]] = None,
|
|
338
|
+
description: Optional[pulumi.Input[str]] = None,
|
|
339
|
+
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
340
|
+
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
341
|
+
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
342
|
+
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
343
|
+
mode: Optional[pulumi.Input[str]] = None,
|
|
344
|
+
name: Optional[pulumi.Input[str]] = None,
|
|
345
|
+
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]] = None,
|
|
346
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
347
|
+
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
348
|
+
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
349
|
+
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
350
|
+
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
351
|
+
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
352
|
+
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]] = None,
|
|
353
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None,
|
|
354
|
+
version: Optional[pulumi.Input[int]] = None):
|
|
355
|
+
"""
|
|
356
|
+
Input properties used for looking up and filtering TlsSslDecryptionPolicyDefinition resources.
|
|
357
|
+
:param pulumi.Input[int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
358
|
+
:param pulumi.Input[str] certificate_revocation_status: Certificate revocation status - Choices: `ocsp`, `none`
|
|
359
|
+
:param pulumi.Input[str] default_action: Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
360
|
+
:param pulumi.Input[str] description: The description of the policy definition.
|
|
361
|
+
:param pulumi.Input[str] ec_key_type: EC Key Type - Choices: `P256`, `P384`, `P521`
|
|
362
|
+
:param pulumi.Input[str] expired_certificate: Expired certificate action - Choices: `drop`, `decrypt`
|
|
363
|
+
:param pulumi.Input[str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
364
|
+
:param pulumi.Input[str] minimal_tls_version: Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
365
|
+
:param pulumi.Input[str] mode: The policy mode - Choices: `security`, `unified`
|
|
366
|
+
:param pulumi.Input[str] name: The name of the policy definition.
|
|
367
|
+
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
368
|
+
:param pulumi.Input[str] rsa_key_pair_modulus: RSA key pair modules - Choices: `1024`, `2048`, `4096`
|
|
369
|
+
:param pulumi.Input[str] ssl_decryption_enabled: SSL decryption enabled
|
|
370
|
+
:param pulumi.Input[str] unknown_revocation_status: Unknown revocation status action - Choices: `drop`, `decrypt`
|
|
371
|
+
:param pulumi.Input[str] unsupported_cipher_suites: Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
|
|
372
|
+
:param pulumi.Input[str] unsupported_protocol_versions: Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
|
|
373
|
+
:param pulumi.Input[str] untrusted_certificate: Untrusted certificate action - Choices: `drop`, `decrypt`
|
|
374
|
+
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
375
|
+
:param pulumi.Input[bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
376
|
+
:param pulumi.Input[int] version: The version of the object
|
|
377
|
+
"""
|
|
378
|
+
if certificate_lifetime_in_days is not None:
|
|
379
|
+
pulumi.set(__self__, "certificate_lifetime_in_days", certificate_lifetime_in_days)
|
|
380
|
+
if certificate_revocation_status is not None:
|
|
381
|
+
pulumi.set(__self__, "certificate_revocation_status", certificate_revocation_status)
|
|
382
|
+
if default_action is not None:
|
|
383
|
+
pulumi.set(__self__, "default_action", default_action)
|
|
384
|
+
if description is not None:
|
|
385
|
+
pulumi.set(__self__, "description", description)
|
|
386
|
+
if ec_key_type is not None:
|
|
387
|
+
pulumi.set(__self__, "ec_key_type", ec_key_type)
|
|
388
|
+
if expired_certificate is not None:
|
|
389
|
+
pulumi.set(__self__, "expired_certificate", expired_certificate)
|
|
390
|
+
if failure_mode is not None:
|
|
391
|
+
pulumi.set(__self__, "failure_mode", failure_mode)
|
|
392
|
+
if minimal_tls_version is not None:
|
|
393
|
+
pulumi.set(__self__, "minimal_tls_version", minimal_tls_version)
|
|
394
|
+
if mode is not None:
|
|
395
|
+
pulumi.set(__self__, "mode", mode)
|
|
396
|
+
if name is not None:
|
|
397
|
+
pulumi.set(__self__, "name", name)
|
|
398
|
+
if network_rules is not None:
|
|
399
|
+
pulumi.set(__self__, "network_rules", network_rules)
|
|
400
|
+
if rsa_key_pair_modulus is not None:
|
|
401
|
+
pulumi.set(__self__, "rsa_key_pair_modulus", rsa_key_pair_modulus)
|
|
402
|
+
if ssl_decryption_enabled is not None:
|
|
403
|
+
pulumi.set(__self__, "ssl_decryption_enabled", ssl_decryption_enabled)
|
|
404
|
+
if unknown_revocation_status is not None:
|
|
405
|
+
pulumi.set(__self__, "unknown_revocation_status", unknown_revocation_status)
|
|
406
|
+
if unsupported_cipher_suites is not None:
|
|
407
|
+
pulumi.set(__self__, "unsupported_cipher_suites", unsupported_cipher_suites)
|
|
408
|
+
if unsupported_protocol_versions is not None:
|
|
409
|
+
pulumi.set(__self__, "unsupported_protocol_versions", unsupported_protocol_versions)
|
|
410
|
+
if untrusted_certificate is not None:
|
|
411
|
+
pulumi.set(__self__, "untrusted_certificate", untrusted_certificate)
|
|
412
|
+
if url_rules is not None:
|
|
413
|
+
pulumi.set(__self__, "url_rules", url_rules)
|
|
414
|
+
if use_default_ca_cert_bundle is not None:
|
|
415
|
+
pulumi.set(__self__, "use_default_ca_cert_bundle", use_default_ca_cert_bundle)
|
|
416
|
+
if version is not None:
|
|
417
|
+
pulumi.set(__self__, "version", version)
|
|
418
|
+
|
|
419
|
+
@property
|
|
420
|
+
@pulumi.getter(name="certificateLifetimeInDays")
|
|
421
|
+
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[int]]:
|
|
422
|
+
"""
|
|
423
|
+
Certificate Lifetime(in Days)
|
|
424
|
+
"""
|
|
425
|
+
return pulumi.get(self, "certificate_lifetime_in_days")
|
|
426
|
+
|
|
427
|
+
@certificate_lifetime_in_days.setter
|
|
428
|
+
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[int]]):
|
|
429
|
+
pulumi.set(self, "certificate_lifetime_in_days", value)
|
|
430
|
+
|
|
431
|
+
@property
|
|
432
|
+
@pulumi.getter(name="certificateRevocationStatus")
|
|
433
|
+
def certificate_revocation_status(self) -> Optional[pulumi.Input[str]]:
|
|
434
|
+
"""
|
|
435
|
+
Certificate revocation status - Choices: `ocsp`, `none`
|
|
436
|
+
"""
|
|
437
|
+
return pulumi.get(self, "certificate_revocation_status")
|
|
438
|
+
|
|
439
|
+
@certificate_revocation_status.setter
|
|
440
|
+
def certificate_revocation_status(self, value: Optional[pulumi.Input[str]]):
|
|
441
|
+
pulumi.set(self, "certificate_revocation_status", value)
|
|
442
|
+
|
|
443
|
+
@property
|
|
444
|
+
@pulumi.getter(name="defaultAction")
|
|
445
|
+
def default_action(self) -> Optional[pulumi.Input[str]]:
|
|
446
|
+
"""
|
|
447
|
+
Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
448
|
+
"""
|
|
449
|
+
return pulumi.get(self, "default_action")
|
|
450
|
+
|
|
451
|
+
@default_action.setter
|
|
452
|
+
def default_action(self, value: Optional[pulumi.Input[str]]):
|
|
453
|
+
pulumi.set(self, "default_action", value)
|
|
454
|
+
|
|
455
|
+
@property
|
|
456
|
+
@pulumi.getter
|
|
457
|
+
def description(self) -> Optional[pulumi.Input[str]]:
|
|
458
|
+
"""
|
|
459
|
+
The description of the policy definition.
|
|
460
|
+
"""
|
|
461
|
+
return pulumi.get(self, "description")
|
|
462
|
+
|
|
463
|
+
@description.setter
|
|
464
|
+
def description(self, value: Optional[pulumi.Input[str]]):
|
|
465
|
+
pulumi.set(self, "description", value)
|
|
466
|
+
|
|
467
|
+
@property
|
|
468
|
+
@pulumi.getter(name="ecKeyType")
|
|
469
|
+
def ec_key_type(self) -> Optional[pulumi.Input[str]]:
|
|
470
|
+
"""
|
|
471
|
+
EC Key Type - Choices: `P256`, `P384`, `P521`
|
|
472
|
+
"""
|
|
473
|
+
return pulumi.get(self, "ec_key_type")
|
|
474
|
+
|
|
475
|
+
@ec_key_type.setter
|
|
476
|
+
def ec_key_type(self, value: Optional[pulumi.Input[str]]):
|
|
477
|
+
pulumi.set(self, "ec_key_type", value)
|
|
478
|
+
|
|
479
|
+
@property
|
|
480
|
+
@pulumi.getter(name="expiredCertificate")
|
|
481
|
+
def expired_certificate(self) -> Optional[pulumi.Input[str]]:
|
|
482
|
+
"""
|
|
483
|
+
Expired certificate action - Choices: `drop`, `decrypt`
|
|
484
|
+
"""
|
|
485
|
+
return pulumi.get(self, "expired_certificate")
|
|
486
|
+
|
|
487
|
+
@expired_certificate.setter
|
|
488
|
+
def expired_certificate(self, value: Optional[pulumi.Input[str]]):
|
|
489
|
+
pulumi.set(self, "expired_certificate", value)
|
|
490
|
+
|
|
491
|
+
@property
|
|
492
|
+
@pulumi.getter(name="failureMode")
|
|
493
|
+
def failure_mode(self) -> Optional[pulumi.Input[str]]:
|
|
494
|
+
"""
|
|
495
|
+
Failure mode - Choices: `open`, `close`
|
|
496
|
+
"""
|
|
497
|
+
return pulumi.get(self, "failure_mode")
|
|
498
|
+
|
|
499
|
+
@failure_mode.setter
|
|
500
|
+
def failure_mode(self, value: Optional[pulumi.Input[str]]):
|
|
501
|
+
pulumi.set(self, "failure_mode", value)
|
|
502
|
+
|
|
503
|
+
@property
|
|
504
|
+
@pulumi.getter(name="minimalTlsVersion")
|
|
505
|
+
def minimal_tls_version(self) -> Optional[pulumi.Input[str]]:
|
|
506
|
+
"""
|
|
507
|
+
Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
508
|
+
"""
|
|
509
|
+
return pulumi.get(self, "minimal_tls_version")
|
|
510
|
+
|
|
511
|
+
@minimal_tls_version.setter
|
|
512
|
+
def minimal_tls_version(self, value: Optional[pulumi.Input[str]]):
|
|
513
|
+
pulumi.set(self, "minimal_tls_version", value)
|
|
514
|
+
|
|
515
|
+
@property
|
|
516
|
+
@pulumi.getter
|
|
517
|
+
def mode(self) -> Optional[pulumi.Input[str]]:
|
|
518
|
+
"""
|
|
519
|
+
The policy mode - Choices: `security`, `unified`
|
|
520
|
+
"""
|
|
521
|
+
return pulumi.get(self, "mode")
|
|
522
|
+
|
|
523
|
+
@mode.setter
|
|
524
|
+
def mode(self, value: Optional[pulumi.Input[str]]):
|
|
525
|
+
pulumi.set(self, "mode", value)
|
|
526
|
+
|
|
527
|
+
@property
|
|
528
|
+
@pulumi.getter
|
|
529
|
+
def name(self) -> Optional[pulumi.Input[str]]:
|
|
530
|
+
"""
|
|
531
|
+
The name of the policy definition.
|
|
532
|
+
"""
|
|
533
|
+
return pulumi.get(self, "name")
|
|
534
|
+
|
|
535
|
+
@name.setter
|
|
536
|
+
def name(self, value: Optional[pulumi.Input[str]]):
|
|
537
|
+
pulumi.set(self, "name", value)
|
|
538
|
+
|
|
539
|
+
@property
|
|
540
|
+
@pulumi.getter(name="networkRules")
|
|
541
|
+
def network_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]:
|
|
542
|
+
"""
|
|
543
|
+
List of network rules (applies when `mode` set to `security`)
|
|
544
|
+
"""
|
|
545
|
+
return pulumi.get(self, "network_rules")
|
|
546
|
+
|
|
547
|
+
@network_rules.setter
|
|
548
|
+
def network_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]):
|
|
549
|
+
pulumi.set(self, "network_rules", value)
|
|
550
|
+
|
|
551
|
+
@property
|
|
552
|
+
@pulumi.getter(name="rsaKeyPairModulus")
|
|
553
|
+
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[str]]:
|
|
554
|
+
"""
|
|
555
|
+
RSA key pair modules - Choices: `1024`, `2048`, `4096`
|
|
556
|
+
"""
|
|
557
|
+
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
558
|
+
|
|
559
|
+
@rsa_key_pair_modulus.setter
|
|
560
|
+
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[str]]):
|
|
561
|
+
pulumi.set(self, "rsa_key_pair_modulus", value)
|
|
562
|
+
|
|
563
|
+
@property
|
|
564
|
+
@pulumi.getter(name="sslDecryptionEnabled")
|
|
565
|
+
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[str]]:
|
|
566
|
+
"""
|
|
567
|
+
SSL decryption enabled
|
|
568
|
+
"""
|
|
569
|
+
return pulumi.get(self, "ssl_decryption_enabled")
|
|
570
|
+
|
|
571
|
+
@ssl_decryption_enabled.setter
|
|
572
|
+
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[str]]):
|
|
573
|
+
pulumi.set(self, "ssl_decryption_enabled", value)
|
|
574
|
+
|
|
575
|
+
@property
|
|
576
|
+
@pulumi.getter(name="unknownRevocationStatus")
|
|
577
|
+
def unknown_revocation_status(self) -> Optional[pulumi.Input[str]]:
|
|
578
|
+
"""
|
|
579
|
+
Unknown revocation status action - Choices: `drop`, `decrypt`
|
|
580
|
+
"""
|
|
581
|
+
return pulumi.get(self, "unknown_revocation_status")
|
|
582
|
+
|
|
583
|
+
@unknown_revocation_status.setter
|
|
584
|
+
def unknown_revocation_status(self, value: Optional[pulumi.Input[str]]):
|
|
585
|
+
pulumi.set(self, "unknown_revocation_status", value)
|
|
586
|
+
|
|
587
|
+
@property
|
|
588
|
+
@pulumi.getter(name="unsupportedCipherSuites")
|
|
589
|
+
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[str]]:
|
|
590
|
+
"""
|
|
591
|
+
Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
|
|
592
|
+
"""
|
|
593
|
+
return pulumi.get(self, "unsupported_cipher_suites")
|
|
594
|
+
|
|
595
|
+
@unsupported_cipher_suites.setter
|
|
596
|
+
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[str]]):
|
|
597
|
+
pulumi.set(self, "unsupported_cipher_suites", value)
|
|
598
|
+
|
|
599
|
+
@property
|
|
600
|
+
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
601
|
+
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[str]]:
|
|
602
|
+
"""
|
|
603
|
+
Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
|
|
604
|
+
"""
|
|
605
|
+
return pulumi.get(self, "unsupported_protocol_versions")
|
|
606
|
+
|
|
607
|
+
@unsupported_protocol_versions.setter
|
|
608
|
+
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[str]]):
|
|
609
|
+
pulumi.set(self, "unsupported_protocol_versions", value)
|
|
610
|
+
|
|
611
|
+
@property
|
|
612
|
+
@pulumi.getter(name="untrustedCertificate")
|
|
613
|
+
def untrusted_certificate(self) -> Optional[pulumi.Input[str]]:
|
|
614
|
+
"""
|
|
615
|
+
Untrusted certificate action - Choices: `drop`, `decrypt`
|
|
616
|
+
"""
|
|
617
|
+
return pulumi.get(self, "untrusted_certificate")
|
|
618
|
+
|
|
619
|
+
@untrusted_certificate.setter
|
|
620
|
+
def untrusted_certificate(self, value: Optional[pulumi.Input[str]]):
|
|
621
|
+
pulumi.set(self, "untrusted_certificate", value)
|
|
622
|
+
|
|
623
|
+
@property
|
|
624
|
+
@pulumi.getter(name="urlRules")
|
|
625
|
+
def url_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]:
|
|
626
|
+
"""
|
|
627
|
+
List of url rules (applies when `mode` set to `security`)
|
|
628
|
+
"""
|
|
629
|
+
return pulumi.get(self, "url_rules")
|
|
630
|
+
|
|
631
|
+
@url_rules.setter
|
|
632
|
+
def url_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]):
|
|
633
|
+
pulumi.set(self, "url_rules", value)
|
|
634
|
+
|
|
635
|
+
@property
|
|
636
|
+
@pulumi.getter(name="useDefaultCaCertBundle")
|
|
637
|
+
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[bool]]:
|
|
638
|
+
"""
|
|
639
|
+
Use default CA certificate bundle
|
|
640
|
+
"""
|
|
641
|
+
return pulumi.get(self, "use_default_ca_cert_bundle")
|
|
642
|
+
|
|
643
|
+
@use_default_ca_cert_bundle.setter
|
|
644
|
+
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[bool]]):
|
|
645
|
+
pulumi.set(self, "use_default_ca_cert_bundle", value)
|
|
646
|
+
|
|
647
|
+
@property
|
|
648
|
+
@pulumi.getter
|
|
649
|
+
def version(self) -> Optional[pulumi.Input[int]]:
|
|
650
|
+
"""
|
|
651
|
+
The version of the object
|
|
652
|
+
"""
|
|
653
|
+
return pulumi.get(self, "version")
|
|
654
|
+
|
|
655
|
+
@version.setter
|
|
656
|
+
def version(self, value: Optional[pulumi.Input[int]]):
|
|
657
|
+
pulumi.set(self, "version", value)
|
|
658
|
+
|
|
659
|
+
|
|
660
|
+
class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
661
|
+
@overload
|
|
662
|
+
def __init__(__self__,
|
|
663
|
+
resource_name: str,
|
|
664
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
665
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
666
|
+
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
667
|
+
default_action: Optional[pulumi.Input[str]] = None,
|
|
668
|
+
description: Optional[pulumi.Input[str]] = None,
|
|
669
|
+
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
670
|
+
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
671
|
+
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
672
|
+
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
673
|
+
mode: Optional[pulumi.Input[str]] = None,
|
|
674
|
+
name: Optional[pulumi.Input[str]] = None,
|
|
675
|
+
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]]] = None,
|
|
676
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
677
|
+
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
678
|
+
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
679
|
+
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
680
|
+
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
681
|
+
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
682
|
+
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]]] = None,
|
|
683
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None,
|
|
684
|
+
__props__=None):
|
|
685
|
+
"""
|
|
686
|
+
This resource can manage a TLS SSL Decryption Policy Definition .
|
|
687
|
+
|
|
688
|
+
## Import
|
|
689
|
+
|
|
690
|
+
```sh
|
|
691
|
+
$ pulumi import sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
692
|
+
```
|
|
693
|
+
|
|
694
|
+
:param str resource_name: The name of the resource.
|
|
695
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
696
|
+
:param pulumi.Input[int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
697
|
+
:param pulumi.Input[str] certificate_revocation_status: Certificate revocation status - Choices: `ocsp`, `none`
|
|
698
|
+
:param pulumi.Input[str] default_action: Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
699
|
+
:param pulumi.Input[str] description: The description of the policy definition.
|
|
700
|
+
:param pulumi.Input[str] ec_key_type: EC Key Type - Choices: `P256`, `P384`, `P521`
|
|
701
|
+
:param pulumi.Input[str] expired_certificate: Expired certificate action - Choices: `drop`, `decrypt`
|
|
702
|
+
:param pulumi.Input[str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
703
|
+
:param pulumi.Input[str] minimal_tls_version: Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
704
|
+
:param pulumi.Input[str] mode: The policy mode - Choices: `security`, `unified`
|
|
705
|
+
:param pulumi.Input[str] name: The name of the policy definition.
|
|
706
|
+
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
707
|
+
:param pulumi.Input[str] rsa_key_pair_modulus: RSA key pair modules - Choices: `1024`, `2048`, `4096`
|
|
708
|
+
:param pulumi.Input[str] ssl_decryption_enabled: SSL decryption enabled
|
|
709
|
+
:param pulumi.Input[str] unknown_revocation_status: Unknown revocation status action - Choices: `drop`, `decrypt`
|
|
710
|
+
:param pulumi.Input[str] unsupported_cipher_suites: Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
|
|
711
|
+
:param pulumi.Input[str] unsupported_protocol_versions: Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
|
|
712
|
+
:param pulumi.Input[str] untrusted_certificate: Untrusted certificate action - Choices: `drop`, `decrypt`
|
|
713
|
+
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
714
|
+
:param pulumi.Input[bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
715
|
+
"""
|
|
716
|
+
...
|
|
717
|
+
@overload
|
|
718
|
+
def __init__(__self__,
|
|
719
|
+
resource_name: str,
|
|
720
|
+
args: TlsSslDecryptionPolicyDefinitionArgs,
|
|
721
|
+
opts: Optional[pulumi.ResourceOptions] = None):
|
|
722
|
+
"""
|
|
723
|
+
This resource can manage a TLS SSL Decryption Policy Definition .
|
|
724
|
+
|
|
725
|
+
## Import
|
|
726
|
+
|
|
727
|
+
```sh
|
|
728
|
+
$ pulumi import sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
729
|
+
```
|
|
730
|
+
|
|
731
|
+
:param str resource_name: The name of the resource.
|
|
732
|
+
:param TlsSslDecryptionPolicyDefinitionArgs args: The arguments to use to populate this resource's properties.
|
|
733
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
734
|
+
"""
|
|
735
|
+
...
|
|
736
|
+
def __init__(__self__, resource_name: str, *args, **kwargs):
|
|
737
|
+
resource_args, opts = _utilities.get_resource_args_opts(TlsSslDecryptionPolicyDefinitionArgs, pulumi.ResourceOptions, *args, **kwargs)
|
|
738
|
+
if resource_args is not None:
|
|
739
|
+
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
|
|
740
|
+
else:
|
|
741
|
+
__self__._internal_init(resource_name, *args, **kwargs)
|
|
742
|
+
|
|
743
|
+
def _internal_init(__self__,
|
|
744
|
+
resource_name: str,
|
|
745
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
746
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
747
|
+
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
748
|
+
default_action: Optional[pulumi.Input[str]] = None,
|
|
749
|
+
description: Optional[pulumi.Input[str]] = None,
|
|
750
|
+
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
751
|
+
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
752
|
+
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
753
|
+
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
754
|
+
mode: Optional[pulumi.Input[str]] = None,
|
|
755
|
+
name: Optional[pulumi.Input[str]] = None,
|
|
756
|
+
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]]] = None,
|
|
757
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
758
|
+
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
759
|
+
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
760
|
+
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
761
|
+
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
762
|
+
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
763
|
+
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]]] = None,
|
|
764
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None,
|
|
765
|
+
__props__=None):
|
|
766
|
+
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
767
|
+
if not isinstance(opts, pulumi.ResourceOptions):
|
|
768
|
+
raise TypeError('Expected resource options to be a ResourceOptions instance')
|
|
769
|
+
if opts.id is None:
|
|
770
|
+
if __props__ is not None:
|
|
771
|
+
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
772
|
+
__props__ = TlsSslDecryptionPolicyDefinitionArgs.__new__(TlsSslDecryptionPolicyDefinitionArgs)
|
|
773
|
+
|
|
774
|
+
__props__.__dict__["certificate_lifetime_in_days"] = certificate_lifetime_in_days
|
|
775
|
+
__props__.__dict__["certificate_revocation_status"] = certificate_revocation_status
|
|
776
|
+
__props__.__dict__["default_action"] = default_action
|
|
777
|
+
if description is None and not opts.urn:
|
|
778
|
+
raise TypeError("Missing required property 'description'")
|
|
779
|
+
__props__.__dict__["description"] = description
|
|
780
|
+
__props__.__dict__["ec_key_type"] = ec_key_type
|
|
781
|
+
__props__.__dict__["expired_certificate"] = expired_certificate
|
|
782
|
+
__props__.__dict__["failure_mode"] = failure_mode
|
|
783
|
+
__props__.__dict__["minimal_tls_version"] = minimal_tls_version
|
|
784
|
+
__props__.__dict__["mode"] = mode
|
|
785
|
+
__props__.__dict__["name"] = name
|
|
786
|
+
__props__.__dict__["network_rules"] = network_rules
|
|
787
|
+
__props__.__dict__["rsa_key_pair_modulus"] = rsa_key_pair_modulus
|
|
788
|
+
__props__.__dict__["ssl_decryption_enabled"] = ssl_decryption_enabled
|
|
789
|
+
__props__.__dict__["unknown_revocation_status"] = unknown_revocation_status
|
|
790
|
+
__props__.__dict__["unsupported_cipher_suites"] = unsupported_cipher_suites
|
|
791
|
+
__props__.__dict__["unsupported_protocol_versions"] = unsupported_protocol_versions
|
|
792
|
+
__props__.__dict__["untrusted_certificate"] = untrusted_certificate
|
|
793
|
+
__props__.__dict__["url_rules"] = url_rules
|
|
794
|
+
__props__.__dict__["use_default_ca_cert_bundle"] = use_default_ca_cert_bundle
|
|
795
|
+
__props__.__dict__["version"] = None
|
|
796
|
+
super(TlsSslDecryptionPolicyDefinition, __self__).__init__(
|
|
797
|
+
'sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition',
|
|
798
|
+
resource_name,
|
|
799
|
+
__props__,
|
|
800
|
+
opts)
|
|
801
|
+
|
|
802
|
+
@staticmethod
|
|
803
|
+
def get(resource_name: str,
|
|
804
|
+
id: pulumi.Input[str],
|
|
805
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
806
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[int]] = None,
|
|
807
|
+
certificate_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
808
|
+
default_action: Optional[pulumi.Input[str]] = None,
|
|
809
|
+
description: Optional[pulumi.Input[str]] = None,
|
|
810
|
+
ec_key_type: Optional[pulumi.Input[str]] = None,
|
|
811
|
+
expired_certificate: Optional[pulumi.Input[str]] = None,
|
|
812
|
+
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
813
|
+
minimal_tls_version: Optional[pulumi.Input[str]] = None,
|
|
814
|
+
mode: Optional[pulumi.Input[str]] = None,
|
|
815
|
+
name: Optional[pulumi.Input[str]] = None,
|
|
816
|
+
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]]] = None,
|
|
817
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[str]] = None,
|
|
818
|
+
ssl_decryption_enabled: Optional[pulumi.Input[str]] = None,
|
|
819
|
+
unknown_revocation_status: Optional[pulumi.Input[str]] = None,
|
|
820
|
+
unsupported_cipher_suites: Optional[pulumi.Input[str]] = None,
|
|
821
|
+
unsupported_protocol_versions: Optional[pulumi.Input[str]] = None,
|
|
822
|
+
untrusted_certificate: Optional[pulumi.Input[str]] = None,
|
|
823
|
+
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]]] = None,
|
|
824
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[bool]] = None,
|
|
825
|
+
version: Optional[pulumi.Input[int]] = None) -> 'TlsSslDecryptionPolicyDefinition':
|
|
826
|
+
"""
|
|
827
|
+
Get an existing TlsSslDecryptionPolicyDefinition resource's state with the given name, id, and optional extra
|
|
828
|
+
properties used to qualify the lookup.
|
|
829
|
+
|
|
830
|
+
:param str resource_name: The unique name of the resulting resource.
|
|
831
|
+
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
832
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
833
|
+
:param pulumi.Input[int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
834
|
+
:param pulumi.Input[str] certificate_revocation_status: Certificate revocation status - Choices: `ocsp`, `none`
|
|
835
|
+
:param pulumi.Input[str] default_action: Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
836
|
+
:param pulumi.Input[str] description: The description of the policy definition.
|
|
837
|
+
:param pulumi.Input[str] ec_key_type: EC Key Type - Choices: `P256`, `P384`, `P521`
|
|
838
|
+
:param pulumi.Input[str] expired_certificate: Expired certificate action - Choices: `drop`, `decrypt`
|
|
839
|
+
:param pulumi.Input[str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
840
|
+
:param pulumi.Input[str] minimal_tls_version: Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
841
|
+
:param pulumi.Input[str] mode: The policy mode - Choices: `security`, `unified`
|
|
842
|
+
:param pulumi.Input[str] name: The name of the policy definition.
|
|
843
|
+
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
844
|
+
:param pulumi.Input[str] rsa_key_pair_modulus: RSA key pair modules - Choices: `1024`, `2048`, `4096`
|
|
845
|
+
:param pulumi.Input[str] ssl_decryption_enabled: SSL decryption enabled
|
|
846
|
+
:param pulumi.Input[str] unknown_revocation_status: Unknown revocation status action - Choices: `drop`, `decrypt`
|
|
847
|
+
:param pulumi.Input[str] unsupported_cipher_suites: Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
|
|
848
|
+
:param pulumi.Input[str] unsupported_protocol_versions: Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
|
|
849
|
+
:param pulumi.Input[str] untrusted_certificate: Untrusted certificate action - Choices: `drop`, `decrypt`
|
|
850
|
+
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
851
|
+
:param pulumi.Input[bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
852
|
+
:param pulumi.Input[int] version: The version of the object
|
|
853
|
+
"""
|
|
854
|
+
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
855
|
+
|
|
856
|
+
__props__ = _TlsSslDecryptionPolicyDefinitionState.__new__(_TlsSslDecryptionPolicyDefinitionState)
|
|
857
|
+
|
|
858
|
+
__props__.__dict__["certificate_lifetime_in_days"] = certificate_lifetime_in_days
|
|
859
|
+
__props__.__dict__["certificate_revocation_status"] = certificate_revocation_status
|
|
860
|
+
__props__.__dict__["default_action"] = default_action
|
|
861
|
+
__props__.__dict__["description"] = description
|
|
862
|
+
__props__.__dict__["ec_key_type"] = ec_key_type
|
|
863
|
+
__props__.__dict__["expired_certificate"] = expired_certificate
|
|
864
|
+
__props__.__dict__["failure_mode"] = failure_mode
|
|
865
|
+
__props__.__dict__["minimal_tls_version"] = minimal_tls_version
|
|
866
|
+
__props__.__dict__["mode"] = mode
|
|
867
|
+
__props__.__dict__["name"] = name
|
|
868
|
+
__props__.__dict__["network_rules"] = network_rules
|
|
869
|
+
__props__.__dict__["rsa_key_pair_modulus"] = rsa_key_pair_modulus
|
|
870
|
+
__props__.__dict__["ssl_decryption_enabled"] = ssl_decryption_enabled
|
|
871
|
+
__props__.__dict__["unknown_revocation_status"] = unknown_revocation_status
|
|
872
|
+
__props__.__dict__["unsupported_cipher_suites"] = unsupported_cipher_suites
|
|
873
|
+
__props__.__dict__["unsupported_protocol_versions"] = unsupported_protocol_versions
|
|
874
|
+
__props__.__dict__["untrusted_certificate"] = untrusted_certificate
|
|
875
|
+
__props__.__dict__["url_rules"] = url_rules
|
|
876
|
+
__props__.__dict__["use_default_ca_cert_bundle"] = use_default_ca_cert_bundle
|
|
877
|
+
__props__.__dict__["version"] = version
|
|
878
|
+
return TlsSslDecryptionPolicyDefinition(resource_name, opts=opts, __props__=__props__)
|
|
879
|
+
|
|
880
|
+
@property
|
|
881
|
+
@pulumi.getter(name="certificateLifetimeInDays")
|
|
882
|
+
def certificate_lifetime_in_days(self) -> pulumi.Output[Optional[int]]:
|
|
883
|
+
"""
|
|
884
|
+
Certificate Lifetime(in Days)
|
|
885
|
+
"""
|
|
886
|
+
return pulumi.get(self, "certificate_lifetime_in_days")
|
|
887
|
+
|
|
888
|
+
@property
|
|
889
|
+
@pulumi.getter(name="certificateRevocationStatus")
|
|
890
|
+
def certificate_revocation_status(self) -> pulumi.Output[Optional[str]]:
|
|
891
|
+
"""
|
|
892
|
+
Certificate revocation status - Choices: `ocsp`, `none`
|
|
893
|
+
"""
|
|
894
|
+
return pulumi.get(self, "certificate_revocation_status")
|
|
895
|
+
|
|
896
|
+
@property
|
|
897
|
+
@pulumi.getter(name="defaultAction")
|
|
898
|
+
def default_action(self) -> pulumi.Output[Optional[str]]:
|
|
899
|
+
"""
|
|
900
|
+
Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
901
|
+
"""
|
|
902
|
+
return pulumi.get(self, "default_action")
|
|
903
|
+
|
|
904
|
+
@property
|
|
905
|
+
@pulumi.getter
|
|
906
|
+
def description(self) -> pulumi.Output[str]:
|
|
907
|
+
"""
|
|
908
|
+
The description of the policy definition.
|
|
909
|
+
"""
|
|
910
|
+
return pulumi.get(self, "description")
|
|
911
|
+
|
|
912
|
+
@property
|
|
913
|
+
@pulumi.getter(name="ecKeyType")
|
|
914
|
+
def ec_key_type(self) -> pulumi.Output[Optional[str]]:
|
|
915
|
+
"""
|
|
916
|
+
EC Key Type - Choices: `P256`, `P384`, `P521`
|
|
917
|
+
"""
|
|
918
|
+
return pulumi.get(self, "ec_key_type")
|
|
919
|
+
|
|
920
|
+
@property
|
|
921
|
+
@pulumi.getter(name="expiredCertificate")
|
|
922
|
+
def expired_certificate(self) -> pulumi.Output[Optional[str]]:
|
|
923
|
+
"""
|
|
924
|
+
Expired certificate action - Choices: `drop`, `decrypt`
|
|
925
|
+
"""
|
|
926
|
+
return pulumi.get(self, "expired_certificate")
|
|
927
|
+
|
|
928
|
+
@property
|
|
929
|
+
@pulumi.getter(name="failureMode")
|
|
930
|
+
def failure_mode(self) -> pulumi.Output[Optional[str]]:
|
|
931
|
+
"""
|
|
932
|
+
Failure mode - Choices: `open`, `close`
|
|
933
|
+
"""
|
|
934
|
+
return pulumi.get(self, "failure_mode")
|
|
935
|
+
|
|
936
|
+
@property
|
|
937
|
+
@pulumi.getter(name="minimalTlsVersion")
|
|
938
|
+
def minimal_tls_version(self) -> pulumi.Output[Optional[str]]:
|
|
939
|
+
"""
|
|
940
|
+
Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
941
|
+
"""
|
|
942
|
+
return pulumi.get(self, "minimal_tls_version")
|
|
943
|
+
|
|
944
|
+
@property
|
|
945
|
+
@pulumi.getter
|
|
946
|
+
def mode(self) -> pulumi.Output[Optional[str]]:
|
|
947
|
+
"""
|
|
948
|
+
The policy mode - Choices: `security`, `unified`
|
|
949
|
+
"""
|
|
950
|
+
return pulumi.get(self, "mode")
|
|
951
|
+
|
|
952
|
+
@property
|
|
953
|
+
@pulumi.getter
|
|
954
|
+
def name(self) -> pulumi.Output[str]:
|
|
955
|
+
"""
|
|
956
|
+
The name of the policy definition.
|
|
957
|
+
"""
|
|
958
|
+
return pulumi.get(self, "name")
|
|
959
|
+
|
|
960
|
+
@property
|
|
961
|
+
@pulumi.getter(name="networkRules")
|
|
962
|
+
def network_rules(self) -> pulumi.Output[Optional[Sequence['outputs.TlsSslDecryptionPolicyDefinitionNetworkRule']]]:
|
|
963
|
+
"""
|
|
964
|
+
List of network rules (applies when `mode` set to `security`)
|
|
965
|
+
"""
|
|
966
|
+
return pulumi.get(self, "network_rules")
|
|
967
|
+
|
|
968
|
+
@property
|
|
969
|
+
@pulumi.getter(name="rsaKeyPairModulus")
|
|
970
|
+
def rsa_key_pair_modulus(self) -> pulumi.Output[Optional[str]]:
|
|
971
|
+
"""
|
|
972
|
+
RSA key pair modules - Choices: `1024`, `2048`, `4096`
|
|
973
|
+
"""
|
|
974
|
+
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
975
|
+
|
|
976
|
+
@property
|
|
977
|
+
@pulumi.getter(name="sslDecryptionEnabled")
|
|
978
|
+
def ssl_decryption_enabled(self) -> pulumi.Output[Optional[str]]:
|
|
979
|
+
"""
|
|
980
|
+
SSL decryption enabled
|
|
981
|
+
"""
|
|
982
|
+
return pulumi.get(self, "ssl_decryption_enabled")
|
|
983
|
+
|
|
984
|
+
@property
|
|
985
|
+
@pulumi.getter(name="unknownRevocationStatus")
|
|
986
|
+
def unknown_revocation_status(self) -> pulumi.Output[Optional[str]]:
|
|
987
|
+
"""
|
|
988
|
+
Unknown revocation status action - Choices: `drop`, `decrypt`
|
|
989
|
+
"""
|
|
990
|
+
return pulumi.get(self, "unknown_revocation_status")
|
|
991
|
+
|
|
992
|
+
@property
|
|
993
|
+
@pulumi.getter(name="unsupportedCipherSuites")
|
|
994
|
+
def unsupported_cipher_suites(self) -> pulumi.Output[Optional[str]]:
|
|
995
|
+
"""
|
|
996
|
+
Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
|
|
997
|
+
"""
|
|
998
|
+
return pulumi.get(self, "unsupported_cipher_suites")
|
|
999
|
+
|
|
1000
|
+
@property
|
|
1001
|
+
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
1002
|
+
def unsupported_protocol_versions(self) -> pulumi.Output[Optional[str]]:
|
|
1003
|
+
"""
|
|
1004
|
+
Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
|
|
1005
|
+
"""
|
|
1006
|
+
return pulumi.get(self, "unsupported_protocol_versions")
|
|
1007
|
+
|
|
1008
|
+
@property
|
|
1009
|
+
@pulumi.getter(name="untrustedCertificate")
|
|
1010
|
+
def untrusted_certificate(self) -> pulumi.Output[Optional[str]]:
|
|
1011
|
+
"""
|
|
1012
|
+
Untrusted certificate action - Choices: `drop`, `decrypt`
|
|
1013
|
+
"""
|
|
1014
|
+
return pulumi.get(self, "untrusted_certificate")
|
|
1015
|
+
|
|
1016
|
+
@property
|
|
1017
|
+
@pulumi.getter(name="urlRules")
|
|
1018
|
+
def url_rules(self) -> pulumi.Output[Optional[Sequence['outputs.TlsSslDecryptionPolicyDefinitionUrlRule']]]:
|
|
1019
|
+
"""
|
|
1020
|
+
List of url rules (applies when `mode` set to `security`)
|
|
1021
|
+
"""
|
|
1022
|
+
return pulumi.get(self, "url_rules")
|
|
1023
|
+
|
|
1024
|
+
@property
|
|
1025
|
+
@pulumi.getter(name="useDefaultCaCertBundle")
|
|
1026
|
+
def use_default_ca_cert_bundle(self) -> pulumi.Output[Optional[bool]]:
|
|
1027
|
+
"""
|
|
1028
|
+
Use default CA certificate bundle
|
|
1029
|
+
"""
|
|
1030
|
+
return pulumi.get(self, "use_default_ca_cert_bundle")
|
|
1031
|
+
|
|
1032
|
+
@property
|
|
1033
|
+
@pulumi.getter
|
|
1034
|
+
def version(self) -> pulumi.Output[int]:
|
|
1035
|
+
"""
|
|
1036
|
+
The version of the object
|
|
1037
|
+
"""
|
|
1038
|
+
return pulumi.get(self, "version")
|
|
1039
|
+
|