pulumi-sdwan 0.3.0a1738730086__py3-none-any.whl → 0.5.1a1762228200__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-sdwan might be problematic. Click here for more details.
- pulumi_sdwan/__init__.py +102 -1
- pulumi_sdwan/_inputs.py +23045 -21816
- pulumi_sdwan/_utilities.py +9 -5
- pulumi_sdwan/activate_centralized_policy.py +28 -19
- pulumi_sdwan/advanced_inspection_profile_policy_definition.py +213 -201
- pulumi_sdwan/advanced_malware_protection_policy_definition.py +287 -233
- pulumi_sdwan/allow_url_list_policy_object.py +36 -31
- pulumi_sdwan/app_probe_class_policy_object.py +53 -48
- pulumi_sdwan/application_aware_routing_policy_definition.py +259 -58
- pulumi_sdwan/application_list_policy_object.py +36 -31
- pulumi_sdwan/application_priority_feature_profile.py +41 -36
- pulumi_sdwan/application_priority_qos_policy.py +172 -129
- pulumi_sdwan/application_priority_traffic_policy_policy.py +171 -112
- pulumi_sdwan/as_path_list_policy_object.py +62 -31
- pulumi_sdwan/attach_feature_device_template.py +31 -22
- pulumi_sdwan/block_url_list_policy_object.py +36 -31
- pulumi_sdwan/cedge_aaa_feature_template.py +711 -470
- pulumi_sdwan/cedge_global_feature_template.py +1102 -936
- pulumi_sdwan/cedge_igmp_feature_template.py +127 -91
- pulumi_sdwan/cedge_multicast_feature_template.py +218 -199
- pulumi_sdwan/cedge_pim_feature_template.py +572 -455
- pulumi_sdwan/cellular_cedge_profile_feature_template.py +368 -335
- pulumi_sdwan/cellular_controller_feature_template.py +343 -273
- pulumi_sdwan/cellular_profile_feature_template.py +497 -471
- pulumi_sdwan/centralized_policy.py +53 -48
- pulumi_sdwan/cflowd_policy_definition.py +287 -191
- pulumi_sdwan/cisco_banner_feature_template.py +154 -156
- pulumi_sdwan/cisco_bfd_feature_template.py +286 -209
- pulumi_sdwan/cisco_bgp_feature_template.py +783 -655
- pulumi_sdwan/cisco_dhcp_server_feature_template.py +455 -372
- pulumi_sdwan/cisco_logging_feature_template.py +245 -208
- pulumi_sdwan/cisco_ntp_feature_template.py +304 -236
- pulumi_sdwan/cisco_omp_feature_template.py +763 -575
- pulumi_sdwan/cisco_ospf_feature_template.py +818 -561
- pulumi_sdwan/cisco_ospfv3_feature_template.py +1776 -1244
- pulumi_sdwan/cisco_secure_internet_gateway_feature_template.py +333 -151
- pulumi_sdwan/cisco_security_feature_template.py +445 -317
- pulumi_sdwan/cisco_sig_credentials_feature_template.py +470 -465
- pulumi_sdwan/cisco_snmp_feature_template.py +309 -208
- pulumi_sdwan/cisco_system_feature_template.py +1768 -1824
- pulumi_sdwan/cisco_thousandeyes_feature_template.py +139 -91
- pulumi_sdwan/cisco_trustsec_feature_template.py +820 -648
- pulumi_sdwan/cisco_vpn_feature_template.py +398 -347
- pulumi_sdwan/cisco_vpn_interface_feature_template.py +4615 -3627
- pulumi_sdwan/cisco_vpn_interface_gre_feature_template.py +692 -592
- pulumi_sdwan/cisco_vpn_interface_ipsec_feature_template.py +1238 -1065
- pulumi_sdwan/cisco_wireless_lan_feature_template.py +487 -416
- pulumi_sdwan/class_map_policy_object.py +60 -48
- pulumi_sdwan/cli_config_feature.py +90 -81
- pulumi_sdwan/cli_device_template.py +111 -99
- pulumi_sdwan/cli_feature_profile.py +41 -36
- pulumi_sdwan/cli_template_feature_template.py +103 -105
- pulumi_sdwan/color_list_policy_object.py +36 -31
- pulumi_sdwan/config/__init__.py +2 -1
- pulumi_sdwan/config/__init__.pyi +7 -2
- pulumi_sdwan/config/vars.py +14 -7
- pulumi_sdwan/configuration_group.py +156 -141
- pulumi_sdwan/custom_control_topology_policy_definition.py +149 -77
- pulumi_sdwan/data_fqdn_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/data_ipv4_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/data_ipv6_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/dns_security_feature_profile.py +41 -36
- pulumi_sdwan/dns_security_policy.py +706 -0
- pulumi_sdwan/dns_security_policy_definition.py +206 -201
- pulumi_sdwan/domain_list_policy_object.py +36 -31
- pulumi_sdwan/eigrp_feature_template.py +469 -350
- pulumi_sdwan/embedded_security_feature_profile.py +41 -36
- pulumi_sdwan/expanded_community_list_policy_object.py +36 -31
- pulumi_sdwan/extended_community_list_policy_object.py +36 -31
- pulumi_sdwan/feature_device_template.py +165 -153
- pulumi_sdwan/geo_location_list_policy_object.py +36 -31
- pulumi_sdwan/get_advanced_inspection_profile_policy_definition.py +32 -32
- pulumi_sdwan/get_advanced_malware_protection_policy_definition.py +34 -34
- pulumi_sdwan/get_allow_url_list_policy_object.py +13 -13
- pulumi_sdwan/get_app_probe_class_policy_object.py +15 -15
- pulumi_sdwan/get_application_aware_routing_policy_definition.py +60 -18
- pulumi_sdwan/get_application_list_policy_object.py +13 -13
- pulumi_sdwan/get_application_priority_feature_profile.py +12 -12
- pulumi_sdwan/get_application_priority_qos_policy.py +38 -38
- pulumi_sdwan/get_application_priority_traffic_policy_policy.py +27 -27
- pulumi_sdwan/get_as_path_list_policy_object.py +13 -13
- pulumi_sdwan/get_block_url_list_policy_object.py +13 -13
- pulumi_sdwan/get_cedge_aaa_feature_template.py +68 -68
- pulumi_sdwan/get_cedge_global_feature_template.py +114 -114
- pulumi_sdwan/get_cedge_igmp_feature_template.py +23 -23
- pulumi_sdwan/get_cedge_multicast_feature_template.py +34 -34
- pulumi_sdwan/get_cedge_pim_feature_template.py +66 -66
- pulumi_sdwan/get_cellular_cedge_profile_feature_template.py +50 -50
- pulumi_sdwan/get_cellular_controller_feature_template.py +43 -43
- pulumi_sdwan/get_cellular_profile_feature_template.py +66 -66
- pulumi_sdwan/get_centralized_policy.py +15 -15
- pulumi_sdwan/get_cflowd_policy_definition.py +31 -31
- pulumi_sdwan/get_cisco_banner_feature_template.py +30 -30
- pulumi_sdwan/get_cisco_bfd_feature_template.py +35 -35
- pulumi_sdwan/get_cisco_bgp_feature_template.py +88 -88
- pulumi_sdwan/get_cisco_dhcp_server_feature_template.py +56 -56
- pulumi_sdwan/get_cisco_logging_feature_template.py +37 -37
- pulumi_sdwan/get_cisco_ntp_feature_template.py +40 -40
- pulumi_sdwan/get_cisco_omp_feature_template.py +76 -76
- pulumi_sdwan/get_cisco_ospf_feature_template.py +76 -76
- pulumi_sdwan/get_cisco_ospfv3_feature_template.py +152 -152
- pulumi_sdwan/get_cisco_secure_internet_gateway_feature_template.py +31 -31
- pulumi_sdwan/get_cisco_security_feature_template.py +48 -48
- pulumi_sdwan/get_cisco_sig_credentials_feature_template.py +66 -66
- pulumi_sdwan/get_cisco_snmp_feature_template.py +39 -39
- pulumi_sdwan/get_cisco_system_feature_template.py +186 -158
- pulumi_sdwan/get_cisco_thousandeyes_feature_template.py +23 -23
- pulumi_sdwan/get_cisco_trustsec_feature_template.py +83 -83
- pulumi_sdwan/get_cisco_vpn_feature_template.py +63 -63
- pulumi_sdwan/get_cisco_vpn_interface_feature_template.py +414 -414
- pulumi_sdwan/get_cisco_vpn_interface_gre_feature_template.py +79 -79
- pulumi_sdwan/get_cisco_vpn_interface_ipsec_feature_template.py +128 -128
- pulumi_sdwan/get_cisco_wireless_lan_feature_template.py +55 -55
- pulumi_sdwan/get_class_map_policy_object.py +14 -14
- pulumi_sdwan/get_cli_config_feature.py +22 -22
- pulumi_sdwan/get_cli_device_template.py +20 -20
- pulumi_sdwan/get_cli_feature_profile.py +12 -12
- pulumi_sdwan/get_cli_template_feature_template.py +24 -24
- pulumi_sdwan/get_color_list_policy_object.py +13 -13
- pulumi_sdwan/get_configuration_group.py +32 -32
- pulumi_sdwan/get_custom_control_topology_policy_definition.py +19 -19
- pulumi_sdwan/get_data_fqdn_prefix_list_policy_object.py +13 -13
- pulumi_sdwan/get_data_ipv4_prefix_list_policy_object.py +13 -13
- pulumi_sdwan/get_data_ipv6_prefix_list_policy_object.py +13 -13
- pulumi_sdwan/get_device.py +17 -17
- pulumi_sdwan/get_dns_security_feature_profile.py +12 -12
- pulumi_sdwan/get_dns_security_policy.py +272 -0
- pulumi_sdwan/get_dns_security_policy_definition.py +33 -33
- pulumi_sdwan/get_domain_list_policy_object.py +13 -13
- pulumi_sdwan/get_eigrp_feature_template.py +53 -53
- pulumi_sdwan/get_embedded_security_feature_profile.py +12 -12
- pulumi_sdwan/get_expanded_community_list_policy_object.py +13 -13
- pulumi_sdwan/get_extended_community_list_policy_object.py +13 -13
- pulumi_sdwan/get_feature_device_template.py +27 -27
- pulumi_sdwan/get_geo_location_list_policy_object.py +13 -13
- pulumi_sdwan/get_gps_feature_template.py +46 -46
- pulumi_sdwan/get_hub_and_spoke_topology_policy_definition.py +21 -21
- pulumi_sdwan/get_intrusion_prevention_policy_definition.py +55 -29
- pulumi_sdwan/get_ips_signature_list_policy_object.py +13 -13
- pulumi_sdwan/get_ipv4_acl_policy_definition.py +19 -19
- pulumi_sdwan/get_ipv4_device_acl_policy_definition.py +19 -19
- pulumi_sdwan/get_ipv4_prefix_list_policy_object.py +13 -13
- pulumi_sdwan/get_ipv6_acl_policy_definition.py +19 -19
- pulumi_sdwan/get_ipv6_device_acl_policy_definition.py +19 -19
- pulumi_sdwan/get_ipv6_prefix_list_policy_object.py +13 -13
- pulumi_sdwan/get_local_application_list_policy_object.py +13 -13
- pulumi_sdwan/get_localized_policy.py +35 -35
- pulumi_sdwan/get_mesh_topology_policy_definition.py +21 -21
- pulumi_sdwan/get_mirror_policy_object.py +16 -16
- pulumi_sdwan/get_object_group_policy_definition.py +40 -40
- pulumi_sdwan/get_other_feature_profile.py +12 -12
- pulumi_sdwan/get_other_thousandeyes_feature.py +21 -21
- pulumi_sdwan/get_other_ucse_feature.py +47 -47
- pulumi_sdwan/get_policer_policy_object.py +18 -18
- pulumi_sdwan/get_policy_group.py +183 -0
- pulumi_sdwan/get_policy_object_app_probe_class.py +21 -21
- pulumi_sdwan/get_policy_object_application_list.py +21 -21
- pulumi_sdwan/get_policy_object_as_path_list.py +23 -23
- pulumi_sdwan/get_policy_object_class_map.py +21 -21
- pulumi_sdwan/get_policy_object_color_list.py +21 -21
- pulumi_sdwan/get_policy_object_data_ipv4_prefix_list.py +21 -21
- pulumi_sdwan/get_policy_object_data_ipv6_prefix_list.py +21 -21
- pulumi_sdwan/get_policy_object_expanded_community_list.py +24 -24
- pulumi_sdwan/get_policy_object_extended_community_list.py +21 -21
- pulumi_sdwan/get_policy_object_feature_profile.py +12 -12
- pulumi_sdwan/get_policy_object_ipv4_prefix_list.py +21 -21
- pulumi_sdwan/get_policy_object_ipv6_prefix_list.py +21 -21
- pulumi_sdwan/get_policy_object_mirror.py +21 -21
- pulumi_sdwan/get_policy_object_policer.py +21 -21
- pulumi_sdwan/get_policy_object_preferred_color_group.py +21 -21
- pulumi_sdwan/get_policy_object_security_data_ipv4_prefix_list.py +21 -21
- pulumi_sdwan/get_policy_object_security_fqdn_list.py +21 -21
- pulumi_sdwan/get_policy_object_security_geolocation_list.py +21 -21
- pulumi_sdwan/get_policy_object_security_identity_list.py +21 -21
- pulumi_sdwan/get_policy_object_security_ips_signature.py +21 -21
- pulumi_sdwan/get_policy_object_security_local_application_list.py +21 -21
- pulumi_sdwan/get_policy_object_security_local_domain_list.py +21 -21
- pulumi_sdwan/get_policy_object_security_port_list.py +21 -21
- pulumi_sdwan/get_policy_object_security_protocol_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_scalable_group_tag_list.py +21 -21
- pulumi_sdwan/get_policy_object_security_url_allow_list.py +21 -21
- pulumi_sdwan/get_policy_object_security_url_block_list.py +21 -21
- pulumi_sdwan/get_policy_object_sla_class_list.py +21 -21
- pulumi_sdwan/get_policy_object_standard_community_list.py +21 -21
- pulumi_sdwan/get_policy_object_tloc_list.py +21 -21
- pulumi_sdwan/get_policy_object_unified_advanced_inspection_profile.py +217 -0
- pulumi_sdwan/get_policy_object_unified_advanced_malware_protection.py +239 -0
- pulumi_sdwan/get_policy_object_unified_intrusion_prevention.py +229 -0
- pulumi_sdwan/get_policy_object_unified_tls_ssl_decryption.py +325 -0
- pulumi_sdwan/get_policy_object_unified_tls_ssl_profile.py +261 -0
- pulumi_sdwan/get_policy_object_unified_url_filtering.py +272 -0
- pulumi_sdwan/get_policy_object_vpn_group.py +21 -21
- pulumi_sdwan/get_port_list_policy_object.py +13 -13
- pulumi_sdwan/get_preferred_color_group_policy_object.py +24 -24
- pulumi_sdwan/get_protocol_list_policy_object.py +13 -13
- pulumi_sdwan/get_qos_map_policy_definition.py +17 -17
- pulumi_sdwan/get_region_list_policy_object.py +13 -13
- pulumi_sdwan/get_rewrite_rule_policy_definition.py +17 -17
- pulumi_sdwan/get_route_policy_definition.py +19 -19
- pulumi_sdwan/get_rule_set_policy_definition.py +15 -15
- pulumi_sdwan/get_security_app_hosting_feature_template.py +23 -23
- pulumi_sdwan/get_security_policy.py +135 -37
- pulumi_sdwan/get_service_dhcp_server_feature.py +58 -58
- pulumi_sdwan/get_service_feature_profile.py +12 -12
- pulumi_sdwan/get_service_ipv4_acl_feature.py +23 -23
- pulumi_sdwan/get_service_ipv6_acl_feature.py +23 -23
- pulumi_sdwan/get_service_lan_vpn_feature.py +74 -74
- pulumi_sdwan/get_service_lan_vpn_feature_associate_multicast_feature.py +40 -26
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_bgp_feature.py +40 -26
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_eigrp_feature.py +40 -26
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospf_feature.py +40 -26
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +40 -26
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +40 -26
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature.py +213 -213
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +46 -32
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +46 -32
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +46 -32
- pulumi_sdwan/get_service_lan_vpn_interface_gre_feature.py +82 -82
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature.py +144 -144
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +46 -32
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature.py +96 -96
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +46 -32
- pulumi_sdwan/get_service_multicast_feature.py +62 -62
- pulumi_sdwan/get_service_object_tracker_feature.py +42 -42
- pulumi_sdwan/get_service_object_tracker_group_feature.py +29 -29
- pulumi_sdwan/get_service_route_policy_feature.py +23 -23
- pulumi_sdwan/get_service_routing_bgp_feature.py +112 -112
- pulumi_sdwan/get_service_routing_eigrp_feature.py +50 -50
- pulumi_sdwan/get_service_routing_ospf_feature.py +75 -75
- pulumi_sdwan/get_service_routing_ospfv3_ipv4_feature.py +88 -88
- pulumi_sdwan/get_service_routing_ospfv3_ipv6_feature.py +88 -88
- pulumi_sdwan/get_service_switchport_feature.py +26 -26
- pulumi_sdwan/get_service_tracker_feature.py +64 -64
- pulumi_sdwan/get_service_tracker_group_feature.py +25 -25
- pulumi_sdwan/get_service_wireless_lan_feature.py +55 -55
- pulumi_sdwan/get_sig_security_feature_profile.py +12 -12
- pulumi_sdwan/get_site_list_policy_object.py +13 -13
- pulumi_sdwan/get_sla_class_policy_object.py +30 -30
- pulumi_sdwan/get_standard_community_list_policy_object.py +13 -13
- pulumi_sdwan/get_switchport_feature_template.py +34 -34
- pulumi_sdwan/get_system_aaa_feature.py +43 -43
- pulumi_sdwan/get_system_banner_feature.py +28 -28
- pulumi_sdwan/get_system_basic_feature.py +138 -138
- pulumi_sdwan/get_system_bfd_feature.py +33 -33
- pulumi_sdwan/get_system_feature_profile.py +12 -12
- pulumi_sdwan/get_system_flexible_port_speed_feature.py +24 -24
- pulumi_sdwan/get_system_global_feature.py +112 -112
- pulumi_sdwan/get_system_ipv4_device_access_feature.py +23 -23
- pulumi_sdwan/get_system_ipv6_device_access_feature.py +23 -23
- pulumi_sdwan/get_system_logging_feature.py +35 -35
- pulumi_sdwan/get_system_mrf_feature.py +34 -34
- pulumi_sdwan/get_system_ntp_feature.py +38 -38
- pulumi_sdwan/get_system_omp_feature.py +136 -136
- pulumi_sdwan/get_system_performance_monitoring_feature.py +32 -32
- pulumi_sdwan/get_system_remote_access_feature.py +100 -100
- pulumi_sdwan/get_system_security_feature.py +42 -42
- pulumi_sdwan/get_system_snmp_feature.py +37 -37
- pulumi_sdwan/get_tag.py +140 -0
- pulumi_sdwan/get_tloc_list_policy_object.py +13 -13
- pulumi_sdwan/get_tls_ssl_decryption_policy_definition.py +46 -46
- pulumi_sdwan/get_tls_ssl_profile_policy_definition.py +36 -36
- pulumi_sdwan/get_traffic_data_policy_definition.py +19 -19
- pulumi_sdwan/get_transport_cellular_controller_feature.py +40 -40
- pulumi_sdwan/get_transport_cellular_profile_feature.py +63 -63
- pulumi_sdwan/get_transport_feature_profile.py +12 -12
- pulumi_sdwan/get_transport_gps_feature.py +44 -44
- pulumi_sdwan/get_transport_ipv4_acl_feature.py +23 -23
- pulumi_sdwan/get_transport_ipv6_acl_feature.py +23 -23
- pulumi_sdwan/get_transport_ipv6_tracker_feature.py +56 -56
- pulumi_sdwan/get_transport_ipv6_tracker_group_feature.py +29 -29
- pulumi_sdwan/get_transport_management_vpn_feature.py +43 -43
- pulumi_sdwan/get_transport_management_vpn_interface_ethernet_feature.py +122 -122
- pulumi_sdwan/get_transport_route_policy_feature.py +23 -23
- pulumi_sdwan/get_transport_routing_bgp_feature.py +113 -113
- pulumi_sdwan/get_transport_routing_ospf_feature.py +75 -75
- pulumi_sdwan/get_transport_routing_ospfv3_ipv4_feature.py +88 -88
- pulumi_sdwan/get_transport_routing_ospfv3_ipv6_feature.py +88 -88
- pulumi_sdwan/get_transport_t1_e1_controller_feature.py +27 -27
- pulumi_sdwan/get_transport_tracker_feature.py +56 -56
- pulumi_sdwan/get_transport_tracker_group_feature.py +25 -25
- pulumi_sdwan/get_transport_wan_vpn_feature.py +47 -47
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_bgp_feature.py +40 -26
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospf_feature.py +40 -26
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +40 -26
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +40 -26
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature.py +280 -280
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +46 -32
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +46 -32
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature.py +399 -399
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +46 -32
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +46 -32
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +46 -32
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +46 -32
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature.py +82 -82
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +46 -32
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature.py +144 -144
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +46 -32
- pulumi_sdwan/get_transport_wan_vpn_interface_t1_e1_serial_feature.py +233 -233
- pulumi_sdwan/get_url_filtering_policy_definition.py +51 -39
- pulumi_sdwan/get_vedge_inventory.py +5 -5
- pulumi_sdwan/get_vpn_interface_cellular_feature_template.py +306 -306
- pulumi_sdwan/get_vpn_interface_dsl_ipoe_feature_template.py +333 -333
- pulumi_sdwan/get_vpn_interface_dsl_pppoa_feature_template.py +310 -310
- pulumi_sdwan/get_vpn_interface_dsl_pppoe_feature_template.py +327 -327
- pulumi_sdwan/get_vpn_interface_ethernet_pppoe_feature_template.py +326 -326
- pulumi_sdwan/get_vpn_interface_multilink_feature_template.py +285 -285
- pulumi_sdwan/get_vpn_interface_svi_feature_template.py +87 -87
- pulumi_sdwan/get_vpn_interface_t1_e1_serial_feature_template.py +253 -253
- pulumi_sdwan/get_vpn_list_policy_object.py +13 -13
- pulumi_sdwan/get_vpn_membership_policy_definition.py +17 -17
- pulumi_sdwan/get_zone_based_firewall_policy_definition.py +20 -20
- pulumi_sdwan/get_zone_list_policy_object.py +13 -13
- pulumi_sdwan/gps_feature_template.py +337 -304
- pulumi_sdwan/hub_and_spoke_topology_policy_definition.py +146 -91
- pulumi_sdwan/intrusion_prevention_policy_definition.py +305 -179
- pulumi_sdwan/ips_signature_list_policy_object.py +64 -31
- pulumi_sdwan/ipv4_acl_policy_definition.py +145 -77
- pulumi_sdwan/ipv4_device_acl_policy_definition.py +139 -77
- pulumi_sdwan/ipv4_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/ipv6_acl_policy_definition.py +145 -77
- pulumi_sdwan/ipv6_device_acl_policy_definition.py +139 -77
- pulumi_sdwan/ipv6_prefix_list_policy_object.py +36 -31
- pulumi_sdwan/local_application_list_policy_object.py +36 -31
- pulumi_sdwan/localized_policy.py +309 -248
- pulumi_sdwan/mesh_topology_policy_definition.py +128 -91
- pulumi_sdwan/mirror_policy_object.py +67 -62
- pulumi_sdwan/object_group_policy_definition.py +271 -266
- pulumi_sdwan/other_feature_profile.py +41 -36
- pulumi_sdwan/other_thousandeyes_feature.py +118 -65
- pulumi_sdwan/other_ucse_feature.py +413 -314
- pulumi_sdwan/outputs.py +30406 -28854
- pulumi_sdwan/policer_policy_object.py +114 -88
- pulumi_sdwan/policy_group.py +447 -0
- pulumi_sdwan/policy_object_app_probe_class.py +74 -65
- pulumi_sdwan/policy_object_application_list.py +70 -65
- pulumi_sdwan/policy_object_as_path_list.py +129 -85
- pulumi_sdwan/policy_object_class_map.py +70 -65
- pulumi_sdwan/policy_object_color_list.py +70 -65
- pulumi_sdwan/policy_object_data_ipv4_prefix_list.py +102 -65
- pulumi_sdwan/policy_object_data_ipv6_prefix_list.py +102 -65
- pulumi_sdwan/policy_object_expanded_community_list.py +101 -96
- pulumi_sdwan/policy_object_extended_community_list.py +100 -65
- pulumi_sdwan/policy_object_feature_profile.py +41 -36
- pulumi_sdwan/policy_object_ipv4_prefix_list.py +106 -65
- pulumi_sdwan/policy_object_ipv6_prefix_list.py +106 -65
- pulumi_sdwan/policy_object_mirror.py +102 -65
- pulumi_sdwan/policy_object_policer.py +104 -65
- pulumi_sdwan/policy_object_preferred_color_group.py +74 -65
- pulumi_sdwan/policy_object_security_data_ipv4_prefix_list.py +100 -65
- pulumi_sdwan/policy_object_security_fqdn_list.py +70 -65
- pulumi_sdwan/policy_object_security_geolocation_list.py +77 -72
- pulumi_sdwan/policy_object_security_identity_list.py +70 -65
- pulumi_sdwan/policy_object_security_ips_signature.py +102 -65
- pulumi_sdwan/policy_object_security_local_application_list.py +70 -65
- pulumi_sdwan/policy_object_security_local_domain_list.py +100 -65
- pulumi_sdwan/policy_object_security_port_list.py +70 -65
- pulumi_sdwan/policy_object_security_protocol_list.py +363 -0
- pulumi_sdwan/policy_object_security_scalable_group_tag_list.py +102 -65
- pulumi_sdwan/policy_object_security_url_allow_list.py +70 -65
- pulumi_sdwan/policy_object_security_url_block_list.py +70 -65
- pulumi_sdwan/policy_object_sla_class_list.py +108 -65
- pulumi_sdwan/policy_object_standard_community_list.py +100 -65
- pulumi_sdwan/policy_object_tloc_list.py +106 -65
- pulumi_sdwan/policy_object_unified_advanced_inspection_profile.py +514 -0
- pulumi_sdwan/policy_object_unified_advanced_malware_protection.py +668 -0
- pulumi_sdwan/policy_object_unified_intrusion_prevention.py +576 -0
- pulumi_sdwan/policy_object_unified_tls_ssl_decryption.py +985 -0
- pulumi_sdwan/policy_object_unified_tls_ssl_profile.py +689 -0
- pulumi_sdwan/policy_object_unified_url_filtering.py +761 -0
- pulumi_sdwan/policy_object_vpn_group.py +70 -65
- pulumi_sdwan/port_list_policy_object.py +38 -33
- pulumi_sdwan/preferred_color_group_policy_object.py +165 -139
- pulumi_sdwan/protocol_list_policy_object.py +36 -31
- pulumi_sdwan/provider.py +89 -48
- pulumi_sdwan/pulumi-plugin.json +1 -1
- pulumi_sdwan/qos_map_policy_definition.py +102 -57
- pulumi_sdwan/region_list_policy_object.py +62 -31
- pulumi_sdwan/rewrite_rule_policy_definition.py +96 -57
- pulumi_sdwan/route_policy_definition.py +143 -77
- pulumi_sdwan/rule_set_policy_definition.py +101 -48
- pulumi_sdwan/security_app_hosting_feature_template.py +135 -91
- pulumi_sdwan/security_policy.py +694 -246
- pulumi_sdwan/service_dhcp_server_feature.py +474 -411
- pulumi_sdwan/service_feature_profile.py +41 -36
- pulumi_sdwan/service_ipv4_acl_feature.py +181 -97
- pulumi_sdwan/service_ipv6_acl_feature.py +121 -97
- pulumi_sdwan/service_lan_vpn_feature.py +467 -423
- pulumi_sdwan/service_lan_vpn_feature_associate_multicast_feature.py +92 -55
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_bgp_feature.py +92 -55
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_eigrp_feature.py +92 -55
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospf_feature.py +92 -55
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +92 -55
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +92 -55
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature.py +2005 -1615
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +109 -72
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +109 -72
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +109 -72
- pulumi_sdwan/service_lan_vpn_interface_gre_feature.py +628 -608
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature.py +1340 -1250
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +109 -72
- pulumi_sdwan/service_lan_vpn_interface_svi_feature.py +905 -691
- pulumi_sdwan/service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +109 -72
- pulumi_sdwan/service_multicast_feature.py +587 -404
- pulumi_sdwan/service_object_tracker_feature.py +301 -289
- pulumi_sdwan/service_object_tracker_group_feature.py +199 -139
- pulumi_sdwan/service_route_policy_feature.py +108 -85
- pulumi_sdwan/service_routing_bgp_feature.py +1224 -866
- pulumi_sdwan/service_routing_eigrp_feature.py +429 -309
- pulumi_sdwan/service_routing_ospf_feature.py +797 -545
- pulumi_sdwan/service_routing_ospfv3_ipv4_feature.py +922 -664
- pulumi_sdwan/service_routing_ospfv3_ipv6_feature.py +918 -664
- pulumi_sdwan/service_switchport_feature.py +206 -105
- pulumi_sdwan/service_tracker_feature.py +526 -451
- pulumi_sdwan/service_tracker_group_feature.py +153 -102
- pulumi_sdwan/service_wireless_lan_feature.py +458 -460
- pulumi_sdwan/sig_security_feature_profile.py +41 -36
- pulumi_sdwan/site_list_policy_object.py +62 -31
- pulumi_sdwan/sla_class_policy_object.py +249 -216
- pulumi_sdwan/standard_community_list_policy_object.py +36 -31
- pulumi_sdwan/switchport_feature_template.py +242 -191
- pulumi_sdwan/system_aaa_feature.py +279 -242
- pulumi_sdwan/system_banner_feature.py +127 -122
- pulumi_sdwan/system_basic_feature.py +1470 -1667
- pulumi_sdwan/system_bfd_feature.py +246 -176
- pulumi_sdwan/system_feature_profile.py +41 -36
- pulumi_sdwan/system_flexible_port_speed_feature.py +118 -113
- pulumi_sdwan/system_global_feature.py +1083 -910
- pulumi_sdwan/system_ipv4_device_access_feature.py +142 -85
- pulumi_sdwan/system_ipv6_device_access_feature.py +142 -85
- pulumi_sdwan/system_logging_feature.py +311 -194
- pulumi_sdwan/system_mrf_feature.py +250 -209
- pulumi_sdwan/system_ntp_feature.py +299 -223
- pulumi_sdwan/system_omp_feature.py +1382 -1132
- pulumi_sdwan/system_performance_monitoring_feature.py +223 -189
- pulumi_sdwan/system_remote_access_feature.py +935 -859
- pulumi_sdwan/system_security_feature.py +391 -269
- pulumi_sdwan/system_snmp_feature.py +305 -194
- pulumi_sdwan/tag.py +288 -0
- pulumi_sdwan/tloc_list_policy_object.py +68 -31
- pulumi_sdwan/tls_ssl_decryption_policy_definition.py +435 -342
- pulumi_sdwan/tls_ssl_profile_policy_definition.py +257 -238
- pulumi_sdwan/traffic_data_policy_definition.py +143 -77
- pulumi_sdwan/transport_cellular_controller_feature.py +277 -244
- pulumi_sdwan/transport_cellular_profile_feature.py +431 -391
- pulumi_sdwan/transport_feature_profile.py +41 -36
- pulumi_sdwan/transport_gps_feature.py +318 -278
- pulumi_sdwan/transport_ipv4_acl_feature.py +181 -97
- pulumi_sdwan/transport_ipv6_acl_feature.py +121 -97
- pulumi_sdwan/transport_ipv6_tracker_feature.py +458 -383
- pulumi_sdwan/transport_ipv6_tracker_group_feature.py +189 -136
- pulumi_sdwan/transport_management_vpn_feature.py +336 -254
- pulumi_sdwan/transport_management_vpn_interface_ethernet_feature.py +1206 -1006
- pulumi_sdwan/transport_route_policy_feature.py +108 -85
- pulumi_sdwan/transport_routing_bgp_feature.py +1235 -869
- pulumi_sdwan/transport_routing_ospf_feature.py +797 -545
- pulumi_sdwan/transport_routing_ospfv3_ipv4_feature.py +922 -664
- pulumi_sdwan/transport_routing_ospfv3_ipv6_feature.py +918 -664
- pulumi_sdwan/transport_t1_e1_controller_feature.py +187 -119
- pulumi_sdwan/transport_tracker_feature.py +458 -383
- pulumi_sdwan/transport_tracker_group_feature.py +153 -102
- pulumi_sdwan/transport_wan_vpn_feature.py +398 -282
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_bgp_feature.py +92 -55
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospf_feature.py +92 -55
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +92 -55
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +92 -55
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature.py +3000 -2411
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +109 -72
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +109 -72
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature.py +4432 -3634
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +109 -72
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +109 -72
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +109 -72
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +109 -72
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature.py +628 -608
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +109 -72
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature.py +1340 -1250
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +109 -72
- pulumi_sdwan/transport_wan_vpn_interface_t1_e1_serial_feature.py +2319 -2019
- pulumi_sdwan/url_filtering_policy_definition.py +340 -270
- pulumi_sdwan/vpn_interface_cellular_feature_template.py +3368 -2667
- pulumi_sdwan/vpn_interface_dsl_ipoe_feature_template.py +3645 -2908
- pulumi_sdwan/vpn_interface_dsl_pppoa_feature_template.py +3435 -2698
- pulumi_sdwan/vpn_interface_dsl_pppoe_feature_template.py +3609 -2860
- pulumi_sdwan/vpn_interface_ethernet_pppoe_feature_template.py +3586 -2857
- pulumi_sdwan/vpn_interface_multilink_feature_template.py +2888 -2473
- pulumi_sdwan/vpn_interface_svi_feature_template.py +875 -618
- pulumi_sdwan/vpn_interface_t1_e1_serial_feature_template.py +2720 -2208
- pulumi_sdwan/vpn_list_policy_object.py +62 -31
- pulumi_sdwan/vpn_membership_policy_definition.py +92 -57
- pulumi_sdwan/zone_based_firewall_policy_definition.py +195 -104
- pulumi_sdwan/zone_list_policy_object.py +36 -31
- {pulumi_sdwan-0.3.0a1738730086.dist-info → pulumi_sdwan-0.5.1a1762228200.dist-info}/METADATA +4 -4
- pulumi_sdwan-0.5.1a1762228200.dist-info/RECORD +496 -0
- {pulumi_sdwan-0.3.0a1738730086.dist-info → pulumi_sdwan-0.5.1a1762228200.dist-info}/WHEEL +1 -1
- pulumi_sdwan-0.3.0a1738730086.dist-info/RECORD +0 -476
- {pulumi_sdwan-0.3.0a1738730086.dist-info → pulumi_sdwan-0.5.1a1762228200.dist-info}/top_level.txt +0 -0
pulumi_sdwan/security_policy.py
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import
|
|
5
|
+
import builtins as _builtins
|
|
6
6
|
import warnings
|
|
7
7
|
import sys
|
|
8
8
|
import pulumi
|
|
@@ -22,35 +22,59 @@ __all__ = ['SecurityPolicyArgs', 'SecurityPolicy']
|
|
|
22
22
|
class SecurityPolicyArgs:
|
|
23
23
|
def __init__(__self__, *,
|
|
24
24
|
definitions: pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]],
|
|
25
|
-
description: pulumi.Input[str],
|
|
26
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
27
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
28
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
29
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
30
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
31
|
-
|
|
25
|
+
description: pulumi.Input[_builtins.str],
|
|
26
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
34
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]] = None,
|
|
33
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
35
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
39
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
40
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
41
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
42
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
43
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
44
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None):
|
|
38
45
|
"""
|
|
39
46
|
The set of arguments for constructing a SecurityPolicy resource.
|
|
40
47
|
:param pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]] definitions: List of policy definitions
|
|
41
|
-
:param pulumi.Input[str] description: The description of the security policy
|
|
42
|
-
:param pulumi.Input[str] audit_trail: Audit trail
|
|
43
|
-
|
|
44
|
-
:param pulumi.Input[str]
|
|
45
|
-
|
|
46
|
-
:param pulumi.Input[str]
|
|
47
|
-
|
|
48
|
-
:param pulumi.Input[str]
|
|
49
|
-
:param pulumi.Input[str]
|
|
50
|
-
:param pulumi.Input[str]
|
|
51
|
-
:param pulumi.Input[str]
|
|
52
|
-
:param pulumi.Input[str]
|
|
53
|
-
|
|
48
|
+
:param pulumi.Input[_builtins.str] description: The description of the security policy
|
|
49
|
+
:param pulumi.Input[_builtins.str] audit_trail: Audit trail
|
|
50
|
+
- Choices: `on`, `off`
|
|
51
|
+
:param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
52
|
+
- Choices: `allow`, `deny`
|
|
53
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
54
|
+
- Choices: `open`, `close`
|
|
55
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
56
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
57
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
58
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
59
|
+
:param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
60
|
+
- Choices: `on`, `off`
|
|
61
|
+
:param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
|
|
62
|
+
- Choices: `on`, `off`
|
|
63
|
+
:param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
64
|
+
:param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
65
|
+
:param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
66
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
67
|
+
- Choices: `security`, `unified`
|
|
68
|
+
- Default value: `security`
|
|
69
|
+
:param pulumi.Input[_builtins.str] name: The name of the security policy
|
|
70
|
+
:param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
|
|
71
|
+
- Choices: `on`, `off`
|
|
72
|
+
:param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
73
|
+
:param pulumi.Input[_builtins.str] unified_logging: Unified Logging
|
|
74
|
+
- Choices: `on`, `off`
|
|
75
|
+
:param pulumi.Input[_builtins.str] use_case: The use case of the security policy
|
|
76
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
77
|
+
- Default value: `custom`
|
|
54
78
|
"""
|
|
55
79
|
pulumi.set(__self__, "definitions", definitions)
|
|
56
80
|
pulumi.set(__self__, "description", description)
|
|
@@ -64,22 +88,36 @@ class SecurityPolicyArgs:
|
|
|
64
88
|
pulumi.set(__self__, "high_speed_logging_server_ip", high_speed_logging_server_ip)
|
|
65
89
|
if high_speed_logging_server_port is not None:
|
|
66
90
|
pulumi.set(__self__, "high_speed_logging_server_port", high_speed_logging_server_port)
|
|
91
|
+
if high_speed_logging_server_source_interface is not None:
|
|
92
|
+
pulumi.set(__self__, "high_speed_logging_server_source_interface", high_speed_logging_server_source_interface)
|
|
67
93
|
if high_speed_logging_vpn is not None:
|
|
68
94
|
pulumi.set(__self__, "high_speed_logging_vpn", high_speed_logging_vpn)
|
|
95
|
+
if imcp_unreachable_allow is not None:
|
|
96
|
+
pulumi.set(__self__, "imcp_unreachable_allow", imcp_unreachable_allow)
|
|
69
97
|
if loggings is not None:
|
|
70
98
|
pulumi.set(__self__, "loggings", loggings)
|
|
71
99
|
if match_statistics_per_filter is not None:
|
|
72
100
|
pulumi.set(__self__, "match_statistics_per_filter", match_statistics_per_filter)
|
|
101
|
+
if max_incomplete_icmp_limit is not None:
|
|
102
|
+
pulumi.set(__self__, "max_incomplete_icmp_limit", max_incomplete_icmp_limit)
|
|
103
|
+
if max_incomplete_tcp_limit is not None:
|
|
104
|
+
pulumi.set(__self__, "max_incomplete_tcp_limit", max_incomplete_tcp_limit)
|
|
105
|
+
if max_incomplete_udp_limit is not None:
|
|
106
|
+
pulumi.set(__self__, "max_incomplete_udp_limit", max_incomplete_udp_limit)
|
|
73
107
|
if mode is not None:
|
|
74
108
|
pulumi.set(__self__, "mode", mode)
|
|
75
109
|
if name is not None:
|
|
76
110
|
pulumi.set(__self__, "name", name)
|
|
111
|
+
if session_reclassify_allow is not None:
|
|
112
|
+
pulumi.set(__self__, "session_reclassify_allow", session_reclassify_allow)
|
|
77
113
|
if tcp_syn_flood_limit is not None:
|
|
78
114
|
pulumi.set(__self__, "tcp_syn_flood_limit", tcp_syn_flood_limit)
|
|
115
|
+
if unified_logging is not None:
|
|
116
|
+
pulumi.set(__self__, "unified_logging", unified_logging)
|
|
79
117
|
if use_case is not None:
|
|
80
118
|
pulumi.set(__self__, "use_case", use_case)
|
|
81
119
|
|
|
82
|
-
@property
|
|
120
|
+
@_builtins.property
|
|
83
121
|
@pulumi.getter
|
|
84
122
|
def definitions(self) -> pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]:
|
|
85
123
|
"""
|
|
@@ -91,91 +129,119 @@ class SecurityPolicyArgs:
|
|
|
91
129
|
def definitions(self, value: pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]):
|
|
92
130
|
pulumi.set(self, "definitions", value)
|
|
93
131
|
|
|
94
|
-
@property
|
|
132
|
+
@_builtins.property
|
|
95
133
|
@pulumi.getter
|
|
96
|
-
def description(self) -> pulumi.Input[str]:
|
|
134
|
+
def description(self) -> pulumi.Input[_builtins.str]:
|
|
97
135
|
"""
|
|
98
136
|
The description of the security policy
|
|
99
137
|
"""
|
|
100
138
|
return pulumi.get(self, "description")
|
|
101
139
|
|
|
102
140
|
@description.setter
|
|
103
|
-
def description(self, value: pulumi.Input[str]):
|
|
141
|
+
def description(self, value: pulumi.Input[_builtins.str]):
|
|
104
142
|
pulumi.set(self, "description", value)
|
|
105
143
|
|
|
106
|
-
@property
|
|
144
|
+
@_builtins.property
|
|
107
145
|
@pulumi.getter(name="auditTrail")
|
|
108
|
-
def audit_trail(self) -> Optional[pulumi.Input[str]]:
|
|
146
|
+
def audit_trail(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
109
147
|
"""
|
|
110
|
-
Audit trail
|
|
148
|
+
Audit trail
|
|
149
|
+
- Choices: `on`, `off`
|
|
111
150
|
"""
|
|
112
151
|
return pulumi.get(self, "audit_trail")
|
|
113
152
|
|
|
114
153
|
@audit_trail.setter
|
|
115
|
-
def audit_trail(self, value: Optional[pulumi.Input[str]]):
|
|
154
|
+
def audit_trail(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
116
155
|
pulumi.set(self, "audit_trail", value)
|
|
117
156
|
|
|
118
|
-
@property
|
|
157
|
+
@_builtins.property
|
|
119
158
|
@pulumi.getter(name="directInternetApplications")
|
|
120
|
-
def direct_internet_applications(self) -> Optional[pulumi.Input[str]]:
|
|
159
|
+
def direct_internet_applications(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
121
160
|
"""
|
|
122
|
-
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
161
|
+
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
162
|
+
- Choices: `allow`, `deny`
|
|
123
163
|
"""
|
|
124
164
|
return pulumi.get(self, "direct_internet_applications")
|
|
125
165
|
|
|
126
166
|
@direct_internet_applications.setter
|
|
127
|
-
def direct_internet_applications(self, value: Optional[pulumi.Input[str]]):
|
|
167
|
+
def direct_internet_applications(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
128
168
|
pulumi.set(self, "direct_internet_applications", value)
|
|
129
169
|
|
|
130
|
-
@property
|
|
170
|
+
@_builtins.property
|
|
131
171
|
@pulumi.getter(name="failureMode")
|
|
132
|
-
def failure_mode(self) -> Optional[pulumi.Input[str]]:
|
|
172
|
+
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
133
173
|
"""
|
|
134
|
-
Failure mode
|
|
174
|
+
Failure mode
|
|
175
|
+
- Choices: `open`, `close`
|
|
135
176
|
"""
|
|
136
177
|
return pulumi.get(self, "failure_mode")
|
|
137
178
|
|
|
138
179
|
@failure_mode.setter
|
|
139
|
-
def failure_mode(self, value: Optional[pulumi.Input[str]]):
|
|
180
|
+
def failure_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
140
181
|
pulumi.set(self, "failure_mode", value)
|
|
141
182
|
|
|
142
|
-
@property
|
|
183
|
+
@_builtins.property
|
|
143
184
|
@pulumi.getter(name="highSpeedLoggingServerIp")
|
|
144
|
-
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[str]]:
|
|
185
|
+
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
145
186
|
"""
|
|
146
187
|
High Speed Logging Server IP
|
|
147
188
|
"""
|
|
148
189
|
return pulumi.get(self, "high_speed_logging_server_ip")
|
|
149
190
|
|
|
150
191
|
@high_speed_logging_server_ip.setter
|
|
151
|
-
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[str]]):
|
|
192
|
+
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
152
193
|
pulumi.set(self, "high_speed_logging_server_ip", value)
|
|
153
194
|
|
|
154
|
-
@property
|
|
195
|
+
@_builtins.property
|
|
155
196
|
@pulumi.getter(name="highSpeedLoggingServerPort")
|
|
156
|
-
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[str]]:
|
|
197
|
+
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
157
198
|
"""
|
|
158
199
|
High Speed Logging Port
|
|
159
200
|
"""
|
|
160
201
|
return pulumi.get(self, "high_speed_logging_server_port")
|
|
161
202
|
|
|
162
203
|
@high_speed_logging_server_port.setter
|
|
163
|
-
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[str]]):
|
|
204
|
+
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
164
205
|
pulumi.set(self, "high_speed_logging_server_port", value)
|
|
165
206
|
|
|
166
|
-
@property
|
|
207
|
+
@_builtins.property
|
|
208
|
+
@pulumi.getter(name="highSpeedLoggingServerSourceInterface")
|
|
209
|
+
def high_speed_logging_server_source_interface(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
210
|
+
"""
|
|
211
|
+
High Speed Logging Source Interface
|
|
212
|
+
"""
|
|
213
|
+
return pulumi.get(self, "high_speed_logging_server_source_interface")
|
|
214
|
+
|
|
215
|
+
@high_speed_logging_server_source_interface.setter
|
|
216
|
+
def high_speed_logging_server_source_interface(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
217
|
+
pulumi.set(self, "high_speed_logging_server_source_interface", value)
|
|
218
|
+
|
|
219
|
+
@_builtins.property
|
|
167
220
|
@pulumi.getter(name="highSpeedLoggingVpn")
|
|
168
|
-
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[str]]:
|
|
221
|
+
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
169
222
|
"""
|
|
170
223
|
High Speed Logging VPN
|
|
171
224
|
"""
|
|
172
225
|
return pulumi.get(self, "high_speed_logging_vpn")
|
|
173
226
|
|
|
174
227
|
@high_speed_logging_vpn.setter
|
|
175
|
-
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[str]]):
|
|
228
|
+
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
176
229
|
pulumi.set(self, "high_speed_logging_vpn", value)
|
|
177
230
|
|
|
178
|
-
@property
|
|
231
|
+
@_builtins.property
|
|
232
|
+
@pulumi.getter(name="imcpUnreachableAllow")
|
|
233
|
+
def imcp_unreachable_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
234
|
+
"""
|
|
235
|
+
ICMP Unreachable Allow
|
|
236
|
+
- Choices: `on`, `off`
|
|
237
|
+
"""
|
|
238
|
+
return pulumi.get(self, "imcp_unreachable_allow")
|
|
239
|
+
|
|
240
|
+
@imcp_unreachable_allow.setter
|
|
241
|
+
def imcp_unreachable_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
242
|
+
pulumi.set(self, "imcp_unreachable_allow", value)
|
|
243
|
+
|
|
244
|
+
@_builtins.property
|
|
179
245
|
@pulumi.getter
|
|
180
246
|
def loggings(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]:
|
|
181
247
|
return pulumi.get(self, "loggings")
|
|
@@ -184,103 +250,193 @@ class SecurityPolicyArgs:
|
|
|
184
250
|
def loggings(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]):
|
|
185
251
|
pulumi.set(self, "loggings", value)
|
|
186
252
|
|
|
187
|
-
@property
|
|
253
|
+
@_builtins.property
|
|
188
254
|
@pulumi.getter(name="matchStatisticsPerFilter")
|
|
189
|
-
def match_statistics_per_filter(self) -> Optional[pulumi.Input[str]]:
|
|
255
|
+
def match_statistics_per_filter(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
190
256
|
"""
|
|
191
|
-
Match Statistics per-filter
|
|
257
|
+
Match Statistics per-filter
|
|
258
|
+
- Choices: `on`, `off`
|
|
192
259
|
"""
|
|
193
260
|
return pulumi.get(self, "match_statistics_per_filter")
|
|
194
261
|
|
|
195
262
|
@match_statistics_per_filter.setter
|
|
196
|
-
def match_statistics_per_filter(self, value: Optional[pulumi.Input[str]]):
|
|
263
|
+
def match_statistics_per_filter(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
197
264
|
pulumi.set(self, "match_statistics_per_filter", value)
|
|
198
265
|
|
|
199
|
-
@property
|
|
266
|
+
@_builtins.property
|
|
267
|
+
@pulumi.getter(name="maxIncompleteIcmpLimit")
|
|
268
|
+
def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
269
|
+
"""
|
|
270
|
+
Max Incomplete ICMP Limit
|
|
271
|
+
"""
|
|
272
|
+
return pulumi.get(self, "max_incomplete_icmp_limit")
|
|
273
|
+
|
|
274
|
+
@max_incomplete_icmp_limit.setter
|
|
275
|
+
def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
276
|
+
pulumi.set(self, "max_incomplete_icmp_limit", value)
|
|
277
|
+
|
|
278
|
+
@_builtins.property
|
|
279
|
+
@pulumi.getter(name="maxIncompleteTcpLimit")
|
|
280
|
+
def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
281
|
+
"""
|
|
282
|
+
Max Incomplete TCP Limit
|
|
283
|
+
"""
|
|
284
|
+
return pulumi.get(self, "max_incomplete_tcp_limit")
|
|
285
|
+
|
|
286
|
+
@max_incomplete_tcp_limit.setter
|
|
287
|
+
def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
288
|
+
pulumi.set(self, "max_incomplete_tcp_limit", value)
|
|
289
|
+
|
|
290
|
+
@_builtins.property
|
|
291
|
+
@pulumi.getter(name="maxIncompleteUdpLimit")
|
|
292
|
+
def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
293
|
+
"""
|
|
294
|
+
Max Incomplete UDP Limit
|
|
295
|
+
"""
|
|
296
|
+
return pulumi.get(self, "max_incomplete_udp_limit")
|
|
297
|
+
|
|
298
|
+
@max_incomplete_udp_limit.setter
|
|
299
|
+
def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
300
|
+
pulumi.set(self, "max_incomplete_udp_limit", value)
|
|
301
|
+
|
|
302
|
+
@_builtins.property
|
|
200
303
|
@pulumi.getter
|
|
201
|
-
def mode(self) -> Optional[pulumi.Input[str]]:
|
|
304
|
+
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
202
305
|
"""
|
|
203
|
-
The policy mode
|
|
306
|
+
The policy mode
|
|
307
|
+
- Choices: `security`, `unified`
|
|
308
|
+
- Default value: `security`
|
|
204
309
|
"""
|
|
205
310
|
return pulumi.get(self, "mode")
|
|
206
311
|
|
|
207
312
|
@mode.setter
|
|
208
|
-
def mode(self, value: Optional[pulumi.Input[str]]):
|
|
313
|
+
def mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
209
314
|
pulumi.set(self, "mode", value)
|
|
210
315
|
|
|
211
|
-
@property
|
|
316
|
+
@_builtins.property
|
|
212
317
|
@pulumi.getter
|
|
213
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
318
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
214
319
|
"""
|
|
215
320
|
The name of the security policy
|
|
216
321
|
"""
|
|
217
322
|
return pulumi.get(self, "name")
|
|
218
323
|
|
|
219
324
|
@name.setter
|
|
220
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
325
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
221
326
|
pulumi.set(self, "name", value)
|
|
222
327
|
|
|
223
|
-
@property
|
|
328
|
+
@_builtins.property
|
|
329
|
+
@pulumi.getter(name="sessionReclassifyAllow")
|
|
330
|
+
def session_reclassify_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
331
|
+
"""
|
|
332
|
+
Session Reclassify Allow
|
|
333
|
+
- Choices: `on`, `off`
|
|
334
|
+
"""
|
|
335
|
+
return pulumi.get(self, "session_reclassify_allow")
|
|
336
|
+
|
|
337
|
+
@session_reclassify_allow.setter
|
|
338
|
+
def session_reclassify_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
339
|
+
pulumi.set(self, "session_reclassify_allow", value)
|
|
340
|
+
|
|
341
|
+
@_builtins.property
|
|
224
342
|
@pulumi.getter(name="tcpSynFloodLimit")
|
|
225
|
-
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[str]]:
|
|
343
|
+
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
226
344
|
"""
|
|
227
345
|
TCP SYN Flood Limit, value from 1 to 4294967295
|
|
228
346
|
"""
|
|
229
347
|
return pulumi.get(self, "tcp_syn_flood_limit")
|
|
230
348
|
|
|
231
349
|
@tcp_syn_flood_limit.setter
|
|
232
|
-
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[str]]):
|
|
350
|
+
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
233
351
|
pulumi.set(self, "tcp_syn_flood_limit", value)
|
|
234
352
|
|
|
235
|
-
@property
|
|
353
|
+
@_builtins.property
|
|
354
|
+
@pulumi.getter(name="unifiedLogging")
|
|
355
|
+
def unified_logging(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
356
|
+
"""
|
|
357
|
+
Unified Logging
|
|
358
|
+
- Choices: `on`, `off`
|
|
359
|
+
"""
|
|
360
|
+
return pulumi.get(self, "unified_logging")
|
|
361
|
+
|
|
362
|
+
@unified_logging.setter
|
|
363
|
+
def unified_logging(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
364
|
+
pulumi.set(self, "unified_logging", value)
|
|
365
|
+
|
|
366
|
+
@_builtins.property
|
|
236
367
|
@pulumi.getter(name="useCase")
|
|
237
|
-
def use_case(self) -> Optional[pulumi.Input[str]]:
|
|
368
|
+
def use_case(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
238
369
|
"""
|
|
239
|
-
The use case of the security policy
|
|
240
|
-
|
|
370
|
+
The use case of the security policy
|
|
371
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
372
|
+
- Default value: `custom`
|
|
241
373
|
"""
|
|
242
374
|
return pulumi.get(self, "use_case")
|
|
243
375
|
|
|
244
376
|
@use_case.setter
|
|
245
|
-
def use_case(self, value: Optional[pulumi.Input[str]]):
|
|
377
|
+
def use_case(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
246
378
|
pulumi.set(self, "use_case", value)
|
|
247
379
|
|
|
248
380
|
|
|
249
381
|
@pulumi.input_type
|
|
250
382
|
class _SecurityPolicyState:
|
|
251
383
|
def __init__(__self__, *,
|
|
252
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
384
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
253
385
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]] = None,
|
|
254
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
255
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
256
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
257
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
258
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
259
|
-
|
|
386
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
387
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
388
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
389
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
390
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
391
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
392
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
393
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
260
394
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]] = None,
|
|
261
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
262
|
-
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
|
|
266
|
-
|
|
395
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
396
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
397
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
398
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
399
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
400
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
401
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
402
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
403
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
404
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None,
|
|
405
|
+
version: Optional[pulumi.Input[_builtins.int]] = None):
|
|
267
406
|
"""
|
|
268
407
|
Input properties used for looking up and filtering SecurityPolicy resources.
|
|
269
|
-
:param pulumi.Input[str] audit_trail: Audit trail
|
|
408
|
+
:param pulumi.Input[_builtins.str] audit_trail: Audit trail
|
|
409
|
+
- Choices: `on`, `off`
|
|
270
410
|
:param pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]] definitions: List of policy definitions
|
|
271
|
-
:param pulumi.Input[str] description: The description of the security policy
|
|
272
|
-
:param pulumi.Input[str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
273
|
-
|
|
274
|
-
:param pulumi.Input[str]
|
|
275
|
-
|
|
276
|
-
:param pulumi.Input[str]
|
|
277
|
-
:param pulumi.Input[str]
|
|
278
|
-
:param pulumi.Input[str]
|
|
279
|
-
:param pulumi.Input[str]
|
|
280
|
-
:param pulumi.Input[str]
|
|
281
|
-
|
|
282
|
-
|
|
283
|
-
|
|
411
|
+
:param pulumi.Input[_builtins.str] description: The description of the security policy
|
|
412
|
+
:param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
413
|
+
- Choices: `allow`, `deny`
|
|
414
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
415
|
+
- Choices: `open`, `close`
|
|
416
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
417
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
418
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
419
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
420
|
+
:param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
421
|
+
- Choices: `on`, `off`
|
|
422
|
+
:param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
|
|
423
|
+
- Choices: `on`, `off`
|
|
424
|
+
:param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
425
|
+
:param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
426
|
+
:param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
427
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
428
|
+
- Choices: `security`, `unified`
|
|
429
|
+
- Default value: `security`
|
|
430
|
+
:param pulumi.Input[_builtins.str] name: The name of the security policy
|
|
431
|
+
:param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
|
|
432
|
+
- Choices: `on`, `off`
|
|
433
|
+
:param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
434
|
+
:param pulumi.Input[_builtins.str] unified_logging: Unified Logging
|
|
435
|
+
- Choices: `on`, `off`
|
|
436
|
+
:param pulumi.Input[_builtins.str] use_case: The use case of the security policy
|
|
437
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
438
|
+
- Default value: `custom`
|
|
439
|
+
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
284
440
|
"""
|
|
285
441
|
if audit_trail is not None:
|
|
286
442
|
pulumi.set(__self__, "audit_trail", audit_trail)
|
|
@@ -296,36 +452,51 @@ class _SecurityPolicyState:
|
|
|
296
452
|
pulumi.set(__self__, "high_speed_logging_server_ip", high_speed_logging_server_ip)
|
|
297
453
|
if high_speed_logging_server_port is not None:
|
|
298
454
|
pulumi.set(__self__, "high_speed_logging_server_port", high_speed_logging_server_port)
|
|
455
|
+
if high_speed_logging_server_source_interface is not None:
|
|
456
|
+
pulumi.set(__self__, "high_speed_logging_server_source_interface", high_speed_logging_server_source_interface)
|
|
299
457
|
if high_speed_logging_vpn is not None:
|
|
300
458
|
pulumi.set(__self__, "high_speed_logging_vpn", high_speed_logging_vpn)
|
|
459
|
+
if imcp_unreachable_allow is not None:
|
|
460
|
+
pulumi.set(__self__, "imcp_unreachable_allow", imcp_unreachable_allow)
|
|
301
461
|
if loggings is not None:
|
|
302
462
|
pulumi.set(__self__, "loggings", loggings)
|
|
303
463
|
if match_statistics_per_filter is not None:
|
|
304
464
|
pulumi.set(__self__, "match_statistics_per_filter", match_statistics_per_filter)
|
|
465
|
+
if max_incomplete_icmp_limit is not None:
|
|
466
|
+
pulumi.set(__self__, "max_incomplete_icmp_limit", max_incomplete_icmp_limit)
|
|
467
|
+
if max_incomplete_tcp_limit is not None:
|
|
468
|
+
pulumi.set(__self__, "max_incomplete_tcp_limit", max_incomplete_tcp_limit)
|
|
469
|
+
if max_incomplete_udp_limit is not None:
|
|
470
|
+
pulumi.set(__self__, "max_incomplete_udp_limit", max_incomplete_udp_limit)
|
|
305
471
|
if mode is not None:
|
|
306
472
|
pulumi.set(__self__, "mode", mode)
|
|
307
473
|
if name is not None:
|
|
308
474
|
pulumi.set(__self__, "name", name)
|
|
475
|
+
if session_reclassify_allow is not None:
|
|
476
|
+
pulumi.set(__self__, "session_reclassify_allow", session_reclassify_allow)
|
|
309
477
|
if tcp_syn_flood_limit is not None:
|
|
310
478
|
pulumi.set(__self__, "tcp_syn_flood_limit", tcp_syn_flood_limit)
|
|
479
|
+
if unified_logging is not None:
|
|
480
|
+
pulumi.set(__self__, "unified_logging", unified_logging)
|
|
311
481
|
if use_case is not None:
|
|
312
482
|
pulumi.set(__self__, "use_case", use_case)
|
|
313
483
|
if version is not None:
|
|
314
484
|
pulumi.set(__self__, "version", version)
|
|
315
485
|
|
|
316
|
-
@property
|
|
486
|
+
@_builtins.property
|
|
317
487
|
@pulumi.getter(name="auditTrail")
|
|
318
|
-
def audit_trail(self) -> Optional[pulumi.Input[str]]:
|
|
488
|
+
def audit_trail(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
319
489
|
"""
|
|
320
|
-
Audit trail
|
|
490
|
+
Audit trail
|
|
491
|
+
- Choices: `on`, `off`
|
|
321
492
|
"""
|
|
322
493
|
return pulumi.get(self, "audit_trail")
|
|
323
494
|
|
|
324
495
|
@audit_trail.setter
|
|
325
|
-
def audit_trail(self, value: Optional[pulumi.Input[str]]):
|
|
496
|
+
def audit_trail(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
326
497
|
pulumi.set(self, "audit_trail", value)
|
|
327
498
|
|
|
328
|
-
@property
|
|
499
|
+
@_builtins.property
|
|
329
500
|
@pulumi.getter
|
|
330
501
|
def definitions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]]:
|
|
331
502
|
"""
|
|
@@ -337,79 +508,106 @@ class _SecurityPolicyState:
|
|
|
337
508
|
def definitions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]]):
|
|
338
509
|
pulumi.set(self, "definitions", value)
|
|
339
510
|
|
|
340
|
-
@property
|
|
511
|
+
@_builtins.property
|
|
341
512
|
@pulumi.getter
|
|
342
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
|
513
|
+
def description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
343
514
|
"""
|
|
344
515
|
The description of the security policy
|
|
345
516
|
"""
|
|
346
517
|
return pulumi.get(self, "description")
|
|
347
518
|
|
|
348
519
|
@description.setter
|
|
349
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
|
520
|
+
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
350
521
|
pulumi.set(self, "description", value)
|
|
351
522
|
|
|
352
|
-
@property
|
|
523
|
+
@_builtins.property
|
|
353
524
|
@pulumi.getter(name="directInternetApplications")
|
|
354
|
-
def direct_internet_applications(self) -> Optional[pulumi.Input[str]]:
|
|
525
|
+
def direct_internet_applications(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
355
526
|
"""
|
|
356
|
-
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
527
|
+
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
528
|
+
- Choices: `allow`, `deny`
|
|
357
529
|
"""
|
|
358
530
|
return pulumi.get(self, "direct_internet_applications")
|
|
359
531
|
|
|
360
532
|
@direct_internet_applications.setter
|
|
361
|
-
def direct_internet_applications(self, value: Optional[pulumi.Input[str]]):
|
|
533
|
+
def direct_internet_applications(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
362
534
|
pulumi.set(self, "direct_internet_applications", value)
|
|
363
535
|
|
|
364
|
-
@property
|
|
536
|
+
@_builtins.property
|
|
365
537
|
@pulumi.getter(name="failureMode")
|
|
366
|
-
def failure_mode(self) -> Optional[pulumi.Input[str]]:
|
|
538
|
+
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
367
539
|
"""
|
|
368
|
-
Failure mode
|
|
540
|
+
Failure mode
|
|
541
|
+
- Choices: `open`, `close`
|
|
369
542
|
"""
|
|
370
543
|
return pulumi.get(self, "failure_mode")
|
|
371
544
|
|
|
372
545
|
@failure_mode.setter
|
|
373
|
-
def failure_mode(self, value: Optional[pulumi.Input[str]]):
|
|
546
|
+
def failure_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
374
547
|
pulumi.set(self, "failure_mode", value)
|
|
375
548
|
|
|
376
|
-
@property
|
|
549
|
+
@_builtins.property
|
|
377
550
|
@pulumi.getter(name="highSpeedLoggingServerIp")
|
|
378
|
-
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[str]]:
|
|
551
|
+
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
379
552
|
"""
|
|
380
553
|
High Speed Logging Server IP
|
|
381
554
|
"""
|
|
382
555
|
return pulumi.get(self, "high_speed_logging_server_ip")
|
|
383
556
|
|
|
384
557
|
@high_speed_logging_server_ip.setter
|
|
385
|
-
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[str]]):
|
|
558
|
+
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
386
559
|
pulumi.set(self, "high_speed_logging_server_ip", value)
|
|
387
560
|
|
|
388
|
-
@property
|
|
561
|
+
@_builtins.property
|
|
389
562
|
@pulumi.getter(name="highSpeedLoggingServerPort")
|
|
390
|
-
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[str]]:
|
|
563
|
+
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
391
564
|
"""
|
|
392
565
|
High Speed Logging Port
|
|
393
566
|
"""
|
|
394
567
|
return pulumi.get(self, "high_speed_logging_server_port")
|
|
395
568
|
|
|
396
569
|
@high_speed_logging_server_port.setter
|
|
397
|
-
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[str]]):
|
|
570
|
+
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
398
571
|
pulumi.set(self, "high_speed_logging_server_port", value)
|
|
399
572
|
|
|
400
|
-
@property
|
|
573
|
+
@_builtins.property
|
|
574
|
+
@pulumi.getter(name="highSpeedLoggingServerSourceInterface")
|
|
575
|
+
def high_speed_logging_server_source_interface(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
576
|
+
"""
|
|
577
|
+
High Speed Logging Source Interface
|
|
578
|
+
"""
|
|
579
|
+
return pulumi.get(self, "high_speed_logging_server_source_interface")
|
|
580
|
+
|
|
581
|
+
@high_speed_logging_server_source_interface.setter
|
|
582
|
+
def high_speed_logging_server_source_interface(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
583
|
+
pulumi.set(self, "high_speed_logging_server_source_interface", value)
|
|
584
|
+
|
|
585
|
+
@_builtins.property
|
|
401
586
|
@pulumi.getter(name="highSpeedLoggingVpn")
|
|
402
|
-
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[str]]:
|
|
587
|
+
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
403
588
|
"""
|
|
404
589
|
High Speed Logging VPN
|
|
405
590
|
"""
|
|
406
591
|
return pulumi.get(self, "high_speed_logging_vpn")
|
|
407
592
|
|
|
408
593
|
@high_speed_logging_vpn.setter
|
|
409
|
-
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[str]]):
|
|
594
|
+
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
410
595
|
pulumi.set(self, "high_speed_logging_vpn", value)
|
|
411
596
|
|
|
412
|
-
@property
|
|
597
|
+
@_builtins.property
|
|
598
|
+
@pulumi.getter(name="imcpUnreachableAllow")
|
|
599
|
+
def imcp_unreachable_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
600
|
+
"""
|
|
601
|
+
ICMP Unreachable Allow
|
|
602
|
+
- Choices: `on`, `off`
|
|
603
|
+
"""
|
|
604
|
+
return pulumi.get(self, "imcp_unreachable_allow")
|
|
605
|
+
|
|
606
|
+
@imcp_unreachable_allow.setter
|
|
607
|
+
def imcp_unreachable_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
608
|
+
pulumi.set(self, "imcp_unreachable_allow", value)
|
|
609
|
+
|
|
610
|
+
@_builtins.property
|
|
413
611
|
@pulumi.getter
|
|
414
612
|
def loggings(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]:
|
|
415
613
|
return pulumi.get(self, "loggings")
|
|
@@ -418,125 +616,240 @@ class _SecurityPolicyState:
|
|
|
418
616
|
def loggings(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]):
|
|
419
617
|
pulumi.set(self, "loggings", value)
|
|
420
618
|
|
|
421
|
-
@property
|
|
619
|
+
@_builtins.property
|
|
422
620
|
@pulumi.getter(name="matchStatisticsPerFilter")
|
|
423
|
-
def match_statistics_per_filter(self) -> Optional[pulumi.Input[str]]:
|
|
621
|
+
def match_statistics_per_filter(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
424
622
|
"""
|
|
425
|
-
Match Statistics per-filter
|
|
623
|
+
Match Statistics per-filter
|
|
624
|
+
- Choices: `on`, `off`
|
|
426
625
|
"""
|
|
427
626
|
return pulumi.get(self, "match_statistics_per_filter")
|
|
428
627
|
|
|
429
628
|
@match_statistics_per_filter.setter
|
|
430
|
-
def match_statistics_per_filter(self, value: Optional[pulumi.Input[str]]):
|
|
629
|
+
def match_statistics_per_filter(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
431
630
|
pulumi.set(self, "match_statistics_per_filter", value)
|
|
432
631
|
|
|
433
|
-
@property
|
|
632
|
+
@_builtins.property
|
|
633
|
+
@pulumi.getter(name="maxIncompleteIcmpLimit")
|
|
634
|
+
def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
635
|
+
"""
|
|
636
|
+
Max Incomplete ICMP Limit
|
|
637
|
+
"""
|
|
638
|
+
return pulumi.get(self, "max_incomplete_icmp_limit")
|
|
639
|
+
|
|
640
|
+
@max_incomplete_icmp_limit.setter
|
|
641
|
+
def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
642
|
+
pulumi.set(self, "max_incomplete_icmp_limit", value)
|
|
643
|
+
|
|
644
|
+
@_builtins.property
|
|
645
|
+
@pulumi.getter(name="maxIncompleteTcpLimit")
|
|
646
|
+
def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
647
|
+
"""
|
|
648
|
+
Max Incomplete TCP Limit
|
|
649
|
+
"""
|
|
650
|
+
return pulumi.get(self, "max_incomplete_tcp_limit")
|
|
651
|
+
|
|
652
|
+
@max_incomplete_tcp_limit.setter
|
|
653
|
+
def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
654
|
+
pulumi.set(self, "max_incomplete_tcp_limit", value)
|
|
655
|
+
|
|
656
|
+
@_builtins.property
|
|
657
|
+
@pulumi.getter(name="maxIncompleteUdpLimit")
|
|
658
|
+
def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
659
|
+
"""
|
|
660
|
+
Max Incomplete UDP Limit
|
|
661
|
+
"""
|
|
662
|
+
return pulumi.get(self, "max_incomplete_udp_limit")
|
|
663
|
+
|
|
664
|
+
@max_incomplete_udp_limit.setter
|
|
665
|
+
def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
666
|
+
pulumi.set(self, "max_incomplete_udp_limit", value)
|
|
667
|
+
|
|
668
|
+
@_builtins.property
|
|
434
669
|
@pulumi.getter
|
|
435
|
-
def mode(self) -> Optional[pulumi.Input[str]]:
|
|
670
|
+
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
436
671
|
"""
|
|
437
|
-
The policy mode
|
|
672
|
+
The policy mode
|
|
673
|
+
- Choices: `security`, `unified`
|
|
674
|
+
- Default value: `security`
|
|
438
675
|
"""
|
|
439
676
|
return pulumi.get(self, "mode")
|
|
440
677
|
|
|
441
678
|
@mode.setter
|
|
442
|
-
def mode(self, value: Optional[pulumi.Input[str]]):
|
|
679
|
+
def mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
443
680
|
pulumi.set(self, "mode", value)
|
|
444
681
|
|
|
445
|
-
@property
|
|
682
|
+
@_builtins.property
|
|
446
683
|
@pulumi.getter
|
|
447
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
684
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
448
685
|
"""
|
|
449
686
|
The name of the security policy
|
|
450
687
|
"""
|
|
451
688
|
return pulumi.get(self, "name")
|
|
452
689
|
|
|
453
690
|
@name.setter
|
|
454
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
691
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
455
692
|
pulumi.set(self, "name", value)
|
|
456
693
|
|
|
457
|
-
@property
|
|
694
|
+
@_builtins.property
|
|
695
|
+
@pulumi.getter(name="sessionReclassifyAllow")
|
|
696
|
+
def session_reclassify_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
697
|
+
"""
|
|
698
|
+
Session Reclassify Allow
|
|
699
|
+
- Choices: `on`, `off`
|
|
700
|
+
"""
|
|
701
|
+
return pulumi.get(self, "session_reclassify_allow")
|
|
702
|
+
|
|
703
|
+
@session_reclassify_allow.setter
|
|
704
|
+
def session_reclassify_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
705
|
+
pulumi.set(self, "session_reclassify_allow", value)
|
|
706
|
+
|
|
707
|
+
@_builtins.property
|
|
458
708
|
@pulumi.getter(name="tcpSynFloodLimit")
|
|
459
|
-
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[str]]:
|
|
709
|
+
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
460
710
|
"""
|
|
461
711
|
TCP SYN Flood Limit, value from 1 to 4294967295
|
|
462
712
|
"""
|
|
463
713
|
return pulumi.get(self, "tcp_syn_flood_limit")
|
|
464
714
|
|
|
465
715
|
@tcp_syn_flood_limit.setter
|
|
466
|
-
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[str]]):
|
|
716
|
+
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
467
717
|
pulumi.set(self, "tcp_syn_flood_limit", value)
|
|
468
718
|
|
|
469
|
-
@property
|
|
719
|
+
@_builtins.property
|
|
720
|
+
@pulumi.getter(name="unifiedLogging")
|
|
721
|
+
def unified_logging(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
722
|
+
"""
|
|
723
|
+
Unified Logging
|
|
724
|
+
- Choices: `on`, `off`
|
|
725
|
+
"""
|
|
726
|
+
return pulumi.get(self, "unified_logging")
|
|
727
|
+
|
|
728
|
+
@unified_logging.setter
|
|
729
|
+
def unified_logging(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
730
|
+
pulumi.set(self, "unified_logging", value)
|
|
731
|
+
|
|
732
|
+
@_builtins.property
|
|
470
733
|
@pulumi.getter(name="useCase")
|
|
471
|
-
def use_case(self) -> Optional[pulumi.Input[str]]:
|
|
734
|
+
def use_case(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
472
735
|
"""
|
|
473
|
-
The use case of the security policy
|
|
474
|
-
|
|
736
|
+
The use case of the security policy
|
|
737
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
738
|
+
- Default value: `custom`
|
|
475
739
|
"""
|
|
476
740
|
return pulumi.get(self, "use_case")
|
|
477
741
|
|
|
478
742
|
@use_case.setter
|
|
479
|
-
def use_case(self, value: Optional[pulumi.Input[str]]):
|
|
743
|
+
def use_case(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
480
744
|
pulumi.set(self, "use_case", value)
|
|
481
745
|
|
|
482
|
-
@property
|
|
746
|
+
@_builtins.property
|
|
483
747
|
@pulumi.getter
|
|
484
|
-
def version(self) -> Optional[pulumi.Input[int]]:
|
|
748
|
+
def version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
485
749
|
"""
|
|
486
750
|
The version of the object
|
|
487
751
|
"""
|
|
488
752
|
return pulumi.get(self, "version")
|
|
489
753
|
|
|
490
754
|
@version.setter
|
|
491
|
-
def version(self, value: Optional[pulumi.Input[int]]):
|
|
755
|
+
def version(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
492
756
|
pulumi.set(self, "version", value)
|
|
493
757
|
|
|
494
758
|
|
|
759
|
+
@pulumi.type_token("sdwan:index/securityPolicy:SecurityPolicy")
|
|
495
760
|
class SecurityPolicy(pulumi.CustomResource):
|
|
496
761
|
@overload
|
|
497
762
|
def __init__(__self__,
|
|
498
763
|
resource_name: str,
|
|
499
764
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
500
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
765
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
501
766
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]]] = None,
|
|
502
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
503
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
504
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
505
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
506
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
507
|
-
|
|
767
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
768
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
769
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
770
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
771
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
772
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
773
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
774
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
508
775
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
|
|
509
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
510
|
-
|
|
511
|
-
|
|
512
|
-
|
|
513
|
-
|
|
776
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
777
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
778
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
779
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
780
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
781
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
782
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
783
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
784
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
785
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None,
|
|
514
786
|
__props__=None):
|
|
515
787
|
"""
|
|
516
788
|
This resource can manage a Security Policy .
|
|
517
789
|
|
|
790
|
+
## Example Usage
|
|
791
|
+
|
|
792
|
+
```python
|
|
793
|
+
import pulumi
|
|
794
|
+
import pulumi_sdwan as sdwan
|
|
795
|
+
|
|
796
|
+
example = sdwan.SecurityPolicy("example",
|
|
797
|
+
name="Example",
|
|
798
|
+
description="Example",
|
|
799
|
+
mode="security",
|
|
800
|
+
use_case="custom",
|
|
801
|
+
definitions=[{
|
|
802
|
+
"id": "7d299c34-981c-4fb3-9167-6be44ab1691f",
|
|
803
|
+
"type": "urlFiltering",
|
|
804
|
+
}],
|
|
805
|
+
failure_mode="close",
|
|
806
|
+
loggings=[{
|
|
807
|
+
"external_syslog_server_ip": "10.0.0.1",
|
|
808
|
+
"external_syslog_server_vpn": "123",
|
|
809
|
+
}])
|
|
810
|
+
```
|
|
811
|
+
|
|
518
812
|
## Import
|
|
519
813
|
|
|
814
|
+
The `pulumi import` command can be used, for example:
|
|
815
|
+
|
|
520
816
|
```sh
|
|
521
817
|
$ pulumi import sdwan:index/securityPolicy:SecurityPolicy example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
522
818
|
```
|
|
523
819
|
|
|
524
820
|
:param str resource_name: The name of the resource.
|
|
525
821
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
526
|
-
:param pulumi.Input[str] audit_trail: Audit trail
|
|
822
|
+
:param pulumi.Input[_builtins.str] audit_trail: Audit trail
|
|
823
|
+
- Choices: `on`, `off`
|
|
527
824
|
:param pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]] definitions: List of policy definitions
|
|
528
|
-
:param pulumi.Input[str] description: The description of the security policy
|
|
529
|
-
:param pulumi.Input[str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
530
|
-
|
|
531
|
-
:param pulumi.Input[str]
|
|
532
|
-
|
|
533
|
-
:param pulumi.Input[str]
|
|
534
|
-
:param pulumi.Input[str]
|
|
535
|
-
:param pulumi.Input[str]
|
|
536
|
-
:param pulumi.Input[str]
|
|
537
|
-
:param pulumi.Input[str]
|
|
538
|
-
|
|
539
|
-
|
|
825
|
+
:param pulumi.Input[_builtins.str] description: The description of the security policy
|
|
826
|
+
:param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
827
|
+
- Choices: `allow`, `deny`
|
|
828
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
829
|
+
- Choices: `open`, `close`
|
|
830
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
831
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
832
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
833
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
834
|
+
:param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
835
|
+
- Choices: `on`, `off`
|
|
836
|
+
:param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
|
|
837
|
+
- Choices: `on`, `off`
|
|
838
|
+
:param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
839
|
+
:param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
840
|
+
:param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
841
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
842
|
+
- Choices: `security`, `unified`
|
|
843
|
+
- Default value: `security`
|
|
844
|
+
:param pulumi.Input[_builtins.str] name: The name of the security policy
|
|
845
|
+
:param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
|
|
846
|
+
- Choices: `on`, `off`
|
|
847
|
+
:param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
848
|
+
:param pulumi.Input[_builtins.str] unified_logging: Unified Logging
|
|
849
|
+
- Choices: `on`, `off`
|
|
850
|
+
:param pulumi.Input[_builtins.str] use_case: The use case of the security policy
|
|
851
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
852
|
+
- Default value: `custom`
|
|
540
853
|
"""
|
|
541
854
|
...
|
|
542
855
|
@overload
|
|
@@ -547,8 +860,32 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
547
860
|
"""
|
|
548
861
|
This resource can manage a Security Policy .
|
|
549
862
|
|
|
863
|
+
## Example Usage
|
|
864
|
+
|
|
865
|
+
```python
|
|
866
|
+
import pulumi
|
|
867
|
+
import pulumi_sdwan as sdwan
|
|
868
|
+
|
|
869
|
+
example = sdwan.SecurityPolicy("example",
|
|
870
|
+
name="Example",
|
|
871
|
+
description="Example",
|
|
872
|
+
mode="security",
|
|
873
|
+
use_case="custom",
|
|
874
|
+
definitions=[{
|
|
875
|
+
"id": "7d299c34-981c-4fb3-9167-6be44ab1691f",
|
|
876
|
+
"type": "urlFiltering",
|
|
877
|
+
}],
|
|
878
|
+
failure_mode="close",
|
|
879
|
+
loggings=[{
|
|
880
|
+
"external_syslog_server_ip": "10.0.0.1",
|
|
881
|
+
"external_syslog_server_vpn": "123",
|
|
882
|
+
}])
|
|
883
|
+
```
|
|
884
|
+
|
|
550
885
|
## Import
|
|
551
886
|
|
|
887
|
+
The `pulumi import` command can be used, for example:
|
|
888
|
+
|
|
552
889
|
```sh
|
|
553
890
|
$ pulumi import sdwan:index/securityPolicy:SecurityPolicy example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
554
891
|
```
|
|
@@ -568,20 +905,27 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
568
905
|
def _internal_init(__self__,
|
|
569
906
|
resource_name: str,
|
|
570
907
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
571
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
908
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
572
909
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]]] = None,
|
|
573
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
574
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
575
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
576
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
577
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
578
|
-
|
|
910
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
911
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
912
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
913
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
914
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
915
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
916
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
917
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
579
918
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
|
|
580
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
581
|
-
|
|
582
|
-
|
|
583
|
-
|
|
584
|
-
|
|
919
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
920
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
921
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
922
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
923
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
924
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
925
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
926
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
927
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
928
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None,
|
|
585
929
|
__props__=None):
|
|
586
930
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
587
931
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -602,12 +946,19 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
602
946
|
__props__.__dict__["failure_mode"] = failure_mode
|
|
603
947
|
__props__.__dict__["high_speed_logging_server_ip"] = high_speed_logging_server_ip
|
|
604
948
|
__props__.__dict__["high_speed_logging_server_port"] = high_speed_logging_server_port
|
|
949
|
+
__props__.__dict__["high_speed_logging_server_source_interface"] = high_speed_logging_server_source_interface
|
|
605
950
|
__props__.__dict__["high_speed_logging_vpn"] = high_speed_logging_vpn
|
|
951
|
+
__props__.__dict__["imcp_unreachable_allow"] = imcp_unreachable_allow
|
|
606
952
|
__props__.__dict__["loggings"] = loggings
|
|
607
953
|
__props__.__dict__["match_statistics_per_filter"] = match_statistics_per_filter
|
|
954
|
+
__props__.__dict__["max_incomplete_icmp_limit"] = max_incomplete_icmp_limit
|
|
955
|
+
__props__.__dict__["max_incomplete_tcp_limit"] = max_incomplete_tcp_limit
|
|
956
|
+
__props__.__dict__["max_incomplete_udp_limit"] = max_incomplete_udp_limit
|
|
608
957
|
__props__.__dict__["mode"] = mode
|
|
609
958
|
__props__.__dict__["name"] = name
|
|
959
|
+
__props__.__dict__["session_reclassify_allow"] = session_reclassify_allow
|
|
610
960
|
__props__.__dict__["tcp_syn_flood_limit"] = tcp_syn_flood_limit
|
|
961
|
+
__props__.__dict__["unified_logging"] = unified_logging
|
|
611
962
|
__props__.__dict__["use_case"] = use_case
|
|
612
963
|
__props__.__dict__["version"] = None
|
|
613
964
|
super(SecurityPolicy, __self__).__init__(
|
|
@@ -620,21 +971,28 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
620
971
|
def get(resource_name: str,
|
|
621
972
|
id: pulumi.Input[str],
|
|
622
973
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
623
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
974
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
624
975
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]]] = None,
|
|
625
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
626
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
627
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
628
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
629
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
630
|
-
|
|
976
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
977
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
978
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
979
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
980
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
981
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
982
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
983
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
631
984
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
|
|
632
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
633
|
-
|
|
634
|
-
|
|
635
|
-
|
|
636
|
-
|
|
637
|
-
|
|
985
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
986
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
987
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
988
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
989
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
990
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
991
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
992
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
993
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
994
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None,
|
|
995
|
+
version: Optional[pulumi.Input[_builtins.int]] = None) -> 'SecurityPolicy':
|
|
638
996
|
"""
|
|
639
997
|
Get an existing SecurityPolicy resource's state with the given name, id, and optional extra
|
|
640
998
|
properties used to qualify the lookup.
|
|
@@ -642,21 +1000,38 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
642
1000
|
:param str resource_name: The unique name of the resulting resource.
|
|
643
1001
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
644
1002
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
645
|
-
:param pulumi.Input[str] audit_trail: Audit trail
|
|
1003
|
+
:param pulumi.Input[_builtins.str] audit_trail: Audit trail
|
|
1004
|
+
- Choices: `on`, `off`
|
|
646
1005
|
:param pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]] definitions: List of policy definitions
|
|
647
|
-
:param pulumi.Input[str] description: The description of the security policy
|
|
648
|
-
:param pulumi.Input[str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
649
|
-
|
|
650
|
-
:param pulumi.Input[str]
|
|
651
|
-
|
|
652
|
-
:param pulumi.Input[str]
|
|
653
|
-
:param pulumi.Input[str]
|
|
654
|
-
:param pulumi.Input[str]
|
|
655
|
-
:param pulumi.Input[str]
|
|
656
|
-
:param pulumi.Input[str]
|
|
657
|
-
|
|
658
|
-
|
|
659
|
-
|
|
1006
|
+
:param pulumi.Input[_builtins.str] description: The description of the security policy
|
|
1007
|
+
:param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
1008
|
+
- Choices: `allow`, `deny`
|
|
1009
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
1010
|
+
- Choices: `open`, `close`
|
|
1011
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
1012
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
1013
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
1014
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
1015
|
+
:param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
1016
|
+
- Choices: `on`, `off`
|
|
1017
|
+
:param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
|
|
1018
|
+
- Choices: `on`, `off`
|
|
1019
|
+
:param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
1020
|
+
:param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
1021
|
+
:param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
1022
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
1023
|
+
- Choices: `security`, `unified`
|
|
1024
|
+
- Default value: `security`
|
|
1025
|
+
:param pulumi.Input[_builtins.str] name: The name of the security policy
|
|
1026
|
+
:param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
|
|
1027
|
+
- Choices: `on`, `off`
|
|
1028
|
+
:param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
1029
|
+
:param pulumi.Input[_builtins.str] unified_logging: Unified Logging
|
|
1030
|
+
- Choices: `on`, `off`
|
|
1031
|
+
:param pulumi.Input[_builtins.str] use_case: The use case of the security policy
|
|
1032
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
1033
|
+
- Default value: `custom`
|
|
1034
|
+
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
660
1035
|
"""
|
|
661
1036
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
662
1037
|
|
|
@@ -669,25 +1044,33 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
669
1044
|
__props__.__dict__["failure_mode"] = failure_mode
|
|
670
1045
|
__props__.__dict__["high_speed_logging_server_ip"] = high_speed_logging_server_ip
|
|
671
1046
|
__props__.__dict__["high_speed_logging_server_port"] = high_speed_logging_server_port
|
|
1047
|
+
__props__.__dict__["high_speed_logging_server_source_interface"] = high_speed_logging_server_source_interface
|
|
672
1048
|
__props__.__dict__["high_speed_logging_vpn"] = high_speed_logging_vpn
|
|
1049
|
+
__props__.__dict__["imcp_unreachable_allow"] = imcp_unreachable_allow
|
|
673
1050
|
__props__.__dict__["loggings"] = loggings
|
|
674
1051
|
__props__.__dict__["match_statistics_per_filter"] = match_statistics_per_filter
|
|
1052
|
+
__props__.__dict__["max_incomplete_icmp_limit"] = max_incomplete_icmp_limit
|
|
1053
|
+
__props__.__dict__["max_incomplete_tcp_limit"] = max_incomplete_tcp_limit
|
|
1054
|
+
__props__.__dict__["max_incomplete_udp_limit"] = max_incomplete_udp_limit
|
|
675
1055
|
__props__.__dict__["mode"] = mode
|
|
676
1056
|
__props__.__dict__["name"] = name
|
|
1057
|
+
__props__.__dict__["session_reclassify_allow"] = session_reclassify_allow
|
|
677
1058
|
__props__.__dict__["tcp_syn_flood_limit"] = tcp_syn_flood_limit
|
|
1059
|
+
__props__.__dict__["unified_logging"] = unified_logging
|
|
678
1060
|
__props__.__dict__["use_case"] = use_case
|
|
679
1061
|
__props__.__dict__["version"] = version
|
|
680
1062
|
return SecurityPolicy(resource_name, opts=opts, __props__=__props__)
|
|
681
1063
|
|
|
682
|
-
@property
|
|
1064
|
+
@_builtins.property
|
|
683
1065
|
@pulumi.getter(name="auditTrail")
|
|
684
|
-
def audit_trail(self) -> pulumi.Output[Optional[str]]:
|
|
1066
|
+
def audit_trail(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
685
1067
|
"""
|
|
686
|
-
Audit trail
|
|
1068
|
+
Audit trail
|
|
1069
|
+
- Choices: `on`, `off`
|
|
687
1070
|
"""
|
|
688
1071
|
return pulumi.get(self, "audit_trail")
|
|
689
1072
|
|
|
690
|
-
@property
|
|
1073
|
+
@_builtins.property
|
|
691
1074
|
@pulumi.getter
|
|
692
1075
|
def definitions(self) -> pulumi.Output[Sequence['outputs.SecurityPolicyDefinition']]:
|
|
693
1076
|
"""
|
|
@@ -695,103 +1078,168 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
695
1078
|
"""
|
|
696
1079
|
return pulumi.get(self, "definitions")
|
|
697
1080
|
|
|
698
|
-
@property
|
|
1081
|
+
@_builtins.property
|
|
699
1082
|
@pulumi.getter
|
|
700
|
-
def description(self) -> pulumi.Output[str]:
|
|
1083
|
+
def description(self) -> pulumi.Output[_builtins.str]:
|
|
701
1084
|
"""
|
|
702
1085
|
The description of the security policy
|
|
703
1086
|
"""
|
|
704
1087
|
return pulumi.get(self, "description")
|
|
705
1088
|
|
|
706
|
-
@property
|
|
1089
|
+
@_builtins.property
|
|
707
1090
|
@pulumi.getter(name="directInternetApplications")
|
|
708
|
-
def direct_internet_applications(self) -> pulumi.Output[Optional[str]]:
|
|
1091
|
+
def direct_internet_applications(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
709
1092
|
"""
|
|
710
|
-
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
1093
|
+
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
1094
|
+
- Choices: `allow`, `deny`
|
|
711
1095
|
"""
|
|
712
1096
|
return pulumi.get(self, "direct_internet_applications")
|
|
713
1097
|
|
|
714
|
-
@property
|
|
1098
|
+
@_builtins.property
|
|
715
1099
|
@pulumi.getter(name="failureMode")
|
|
716
|
-
def failure_mode(self) -> pulumi.Output[Optional[str]]:
|
|
1100
|
+
def failure_mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
717
1101
|
"""
|
|
718
|
-
Failure mode
|
|
1102
|
+
Failure mode
|
|
1103
|
+
- Choices: `open`, `close`
|
|
719
1104
|
"""
|
|
720
1105
|
return pulumi.get(self, "failure_mode")
|
|
721
1106
|
|
|
722
|
-
@property
|
|
1107
|
+
@_builtins.property
|
|
723
1108
|
@pulumi.getter(name="highSpeedLoggingServerIp")
|
|
724
|
-
def high_speed_logging_server_ip(self) -> pulumi.Output[Optional[str]]:
|
|
1109
|
+
def high_speed_logging_server_ip(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
725
1110
|
"""
|
|
726
1111
|
High Speed Logging Server IP
|
|
727
1112
|
"""
|
|
728
1113
|
return pulumi.get(self, "high_speed_logging_server_ip")
|
|
729
1114
|
|
|
730
|
-
@property
|
|
1115
|
+
@_builtins.property
|
|
731
1116
|
@pulumi.getter(name="highSpeedLoggingServerPort")
|
|
732
|
-
def high_speed_logging_server_port(self) -> pulumi.Output[Optional[str]]:
|
|
1117
|
+
def high_speed_logging_server_port(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
733
1118
|
"""
|
|
734
1119
|
High Speed Logging Port
|
|
735
1120
|
"""
|
|
736
1121
|
return pulumi.get(self, "high_speed_logging_server_port")
|
|
737
1122
|
|
|
738
|
-
@property
|
|
1123
|
+
@_builtins.property
|
|
1124
|
+
@pulumi.getter(name="highSpeedLoggingServerSourceInterface")
|
|
1125
|
+
def high_speed_logging_server_source_interface(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1126
|
+
"""
|
|
1127
|
+
High Speed Logging Source Interface
|
|
1128
|
+
"""
|
|
1129
|
+
return pulumi.get(self, "high_speed_logging_server_source_interface")
|
|
1130
|
+
|
|
1131
|
+
@_builtins.property
|
|
739
1132
|
@pulumi.getter(name="highSpeedLoggingVpn")
|
|
740
|
-
def high_speed_logging_vpn(self) -> pulumi.Output[Optional[str]]:
|
|
1133
|
+
def high_speed_logging_vpn(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
741
1134
|
"""
|
|
742
1135
|
High Speed Logging VPN
|
|
743
1136
|
"""
|
|
744
1137
|
return pulumi.get(self, "high_speed_logging_vpn")
|
|
745
1138
|
|
|
746
|
-
@property
|
|
1139
|
+
@_builtins.property
|
|
1140
|
+
@pulumi.getter(name="imcpUnreachableAllow")
|
|
1141
|
+
def imcp_unreachable_allow(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1142
|
+
"""
|
|
1143
|
+
ICMP Unreachable Allow
|
|
1144
|
+
- Choices: `on`, `off`
|
|
1145
|
+
"""
|
|
1146
|
+
return pulumi.get(self, "imcp_unreachable_allow")
|
|
1147
|
+
|
|
1148
|
+
@_builtins.property
|
|
747
1149
|
@pulumi.getter
|
|
748
1150
|
def loggings(self) -> pulumi.Output[Optional[Sequence['outputs.SecurityPolicyLogging']]]:
|
|
749
1151
|
return pulumi.get(self, "loggings")
|
|
750
1152
|
|
|
751
|
-
@property
|
|
1153
|
+
@_builtins.property
|
|
752
1154
|
@pulumi.getter(name="matchStatisticsPerFilter")
|
|
753
|
-
def match_statistics_per_filter(self) -> pulumi.Output[Optional[str]]:
|
|
1155
|
+
def match_statistics_per_filter(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
754
1156
|
"""
|
|
755
|
-
Match Statistics per-filter
|
|
1157
|
+
Match Statistics per-filter
|
|
1158
|
+
- Choices: `on`, `off`
|
|
756
1159
|
"""
|
|
757
1160
|
return pulumi.get(self, "match_statistics_per_filter")
|
|
758
1161
|
|
|
759
|
-
@property
|
|
1162
|
+
@_builtins.property
|
|
1163
|
+
@pulumi.getter(name="maxIncompleteIcmpLimit")
|
|
1164
|
+
def max_incomplete_icmp_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1165
|
+
"""
|
|
1166
|
+
Max Incomplete ICMP Limit
|
|
1167
|
+
"""
|
|
1168
|
+
return pulumi.get(self, "max_incomplete_icmp_limit")
|
|
1169
|
+
|
|
1170
|
+
@_builtins.property
|
|
1171
|
+
@pulumi.getter(name="maxIncompleteTcpLimit")
|
|
1172
|
+
def max_incomplete_tcp_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1173
|
+
"""
|
|
1174
|
+
Max Incomplete TCP Limit
|
|
1175
|
+
"""
|
|
1176
|
+
return pulumi.get(self, "max_incomplete_tcp_limit")
|
|
1177
|
+
|
|
1178
|
+
@_builtins.property
|
|
1179
|
+
@pulumi.getter(name="maxIncompleteUdpLimit")
|
|
1180
|
+
def max_incomplete_udp_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1181
|
+
"""
|
|
1182
|
+
Max Incomplete UDP Limit
|
|
1183
|
+
"""
|
|
1184
|
+
return pulumi.get(self, "max_incomplete_udp_limit")
|
|
1185
|
+
|
|
1186
|
+
@_builtins.property
|
|
760
1187
|
@pulumi.getter
|
|
761
|
-
def mode(self) -> pulumi.Output[str]:
|
|
1188
|
+
def mode(self) -> pulumi.Output[_builtins.str]:
|
|
762
1189
|
"""
|
|
763
|
-
The policy mode
|
|
1190
|
+
The policy mode
|
|
1191
|
+
- Choices: `security`, `unified`
|
|
1192
|
+
- Default value: `security`
|
|
764
1193
|
"""
|
|
765
1194
|
return pulumi.get(self, "mode")
|
|
766
1195
|
|
|
767
|
-
@property
|
|
1196
|
+
@_builtins.property
|
|
768
1197
|
@pulumi.getter
|
|
769
|
-
def name(self) -> pulumi.Output[str]:
|
|
1198
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
770
1199
|
"""
|
|
771
1200
|
The name of the security policy
|
|
772
1201
|
"""
|
|
773
1202
|
return pulumi.get(self, "name")
|
|
774
1203
|
|
|
775
|
-
@property
|
|
1204
|
+
@_builtins.property
|
|
1205
|
+
@pulumi.getter(name="sessionReclassifyAllow")
|
|
1206
|
+
def session_reclassify_allow(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1207
|
+
"""
|
|
1208
|
+
Session Reclassify Allow
|
|
1209
|
+
- Choices: `on`, `off`
|
|
1210
|
+
"""
|
|
1211
|
+
return pulumi.get(self, "session_reclassify_allow")
|
|
1212
|
+
|
|
1213
|
+
@_builtins.property
|
|
776
1214
|
@pulumi.getter(name="tcpSynFloodLimit")
|
|
777
|
-
def tcp_syn_flood_limit(self) -> pulumi.Output[Optional[str]]:
|
|
1215
|
+
def tcp_syn_flood_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
778
1216
|
"""
|
|
779
1217
|
TCP SYN Flood Limit, value from 1 to 4294967295
|
|
780
1218
|
"""
|
|
781
1219
|
return pulumi.get(self, "tcp_syn_flood_limit")
|
|
782
1220
|
|
|
783
|
-
@property
|
|
1221
|
+
@_builtins.property
|
|
1222
|
+
@pulumi.getter(name="unifiedLogging")
|
|
1223
|
+
def unified_logging(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1224
|
+
"""
|
|
1225
|
+
Unified Logging
|
|
1226
|
+
- Choices: `on`, `off`
|
|
1227
|
+
"""
|
|
1228
|
+
return pulumi.get(self, "unified_logging")
|
|
1229
|
+
|
|
1230
|
+
@_builtins.property
|
|
784
1231
|
@pulumi.getter(name="useCase")
|
|
785
|
-
def use_case(self) -> pulumi.Output[str]:
|
|
1232
|
+
def use_case(self) -> pulumi.Output[_builtins.str]:
|
|
786
1233
|
"""
|
|
787
|
-
The use case of the security policy
|
|
788
|
-
|
|
1234
|
+
The use case of the security policy
|
|
1235
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
1236
|
+
- Default value: `custom`
|
|
789
1237
|
"""
|
|
790
1238
|
return pulumi.get(self, "use_case")
|
|
791
1239
|
|
|
792
|
-
@property
|
|
1240
|
+
@_builtins.property
|
|
793
1241
|
@pulumi.getter
|
|
794
|
-
def version(self) -> pulumi.Output[int]:
|
|
1242
|
+
def version(self) -> pulumi.Output[_builtins.int]:
|
|
795
1243
|
"""
|
|
796
1244
|
The version of the object
|
|
797
1245
|
"""
|