pulumi-sdwan 0.4.0a1746772400__py3-none-any.whl → 0.6.0a1765953124__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_sdwan/__init__.py +82 -2
- pulumi_sdwan/_inputs.py +22428 -21441
- pulumi_sdwan/_utilities.py +1 -1
- pulumi_sdwan/activate_centralized_policy.py +41 -20
- pulumi_sdwan/advanced_inspection_profile_policy_definition.py +212 -202
- pulumi_sdwan/advanced_malware_protection_policy_definition.py +286 -234
- pulumi_sdwan/allow_url_list_policy_object.py +35 -32
- pulumi_sdwan/app_probe_class_policy_object.py +52 -49
- pulumi_sdwan/application_aware_routing_policy_definition.py +258 -59
- pulumi_sdwan/application_list_policy_object.py +35 -32
- pulumi_sdwan/application_priority_feature_profile.py +40 -37
- pulumi_sdwan/application_priority_qos_policy.py +171 -130
- pulumi_sdwan/application_priority_traffic_policy_policy.py +170 -113
- pulumi_sdwan/as_path_list_policy_object.py +61 -32
- pulumi_sdwan/attach_feature_device_template.py +64 -23
- pulumi_sdwan/block_url_list_policy_object.py +35 -32
- pulumi_sdwan/cedge_aaa_feature_template.py +710 -471
- pulumi_sdwan/cedge_global_feature_template.py +1101 -937
- pulumi_sdwan/cedge_igmp_feature_template.py +126 -92
- pulumi_sdwan/cedge_multicast_feature_template.py +217 -200
- pulumi_sdwan/cedge_pim_feature_template.py +571 -456
- pulumi_sdwan/cellular_cedge_profile_feature_template.py +367 -336
- pulumi_sdwan/cellular_controller_feature_template.py +342 -274
- pulumi_sdwan/cellular_profile_feature_template.py +496 -472
- pulumi_sdwan/centralized_policy.py +52 -49
- pulumi_sdwan/cflowd_policy_definition.py +286 -192
- pulumi_sdwan/cisco_banner_feature_template.py +153 -157
- pulumi_sdwan/cisco_bfd_feature_template.py +285 -210
- pulumi_sdwan/cisco_bgp_feature_template.py +1028 -656
- pulumi_sdwan/cisco_dhcp_server_feature_template.py +454 -373
- pulumi_sdwan/cisco_logging_feature_template.py +318 -209
- pulumi_sdwan/cisco_ntp_feature_template.py +303 -237
- pulumi_sdwan/cisco_omp_feature_template.py +762 -576
- pulumi_sdwan/cisco_ospf_feature_template.py +817 -562
- pulumi_sdwan/cisco_ospfv3_feature_template.py +1775 -1245
- pulumi_sdwan/cisco_secure_internet_gateway_feature_template.py +332 -152
- pulumi_sdwan/cisco_security_feature_template.py +444 -318
- pulumi_sdwan/cisco_sig_credentials_feature_template.py +469 -466
- pulumi_sdwan/cisco_snmp_feature_template.py +308 -209
- pulumi_sdwan/cisco_system_feature_template.py +1767 -1825
- pulumi_sdwan/cisco_thousandeyes_feature_template.py +138 -92
- pulumi_sdwan/cisco_trustsec_feature_template.py +819 -649
- pulumi_sdwan/cisco_vpn_feature_template.py +721 -348
- pulumi_sdwan/cisco_vpn_interface_feature_template.py +4614 -3628
- pulumi_sdwan/cisco_vpn_interface_gre_feature_template.py +691 -593
- pulumi_sdwan/cisco_vpn_interface_ipsec_feature_template.py +1237 -1066
- pulumi_sdwan/cisco_wireless_lan_feature_template.py +486 -417
- pulumi_sdwan/class_map_policy_object.py +59 -49
- pulumi_sdwan/cli_config_feature.py +83 -80
- pulumi_sdwan/cli_device_template.py +110 -100
- pulumi_sdwan/cli_feature_profile.py +40 -37
- pulumi_sdwan/cli_template_feature_template.py +102 -106
- pulumi_sdwan/color_list_policy_object.py +35 -32
- pulumi_sdwan/config/__init__.py +2 -2
- pulumi_sdwan/config/__init__.pyi +7 -3
- pulumi_sdwan/config/vars.py +14 -8
- pulumi_sdwan/configuration_group.py +134 -117
- pulumi_sdwan/custom_control_topology_policy_definition.py +148 -78
- pulumi_sdwan/data_fqdn_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/data_ipv4_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/data_ipv6_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/dns_security_feature_profile.py +40 -37
- pulumi_sdwan/dns_security_policy.py +184 -181
- pulumi_sdwan/dns_security_policy_definition.py +205 -202
- pulumi_sdwan/domain_list_policy_object.py +35 -32
- pulumi_sdwan/eigrp_feature_template.py +468 -351
- pulumi_sdwan/embedded_security_feature_profile.py +40 -37
- pulumi_sdwan/expanded_community_list_policy_object.py +35 -32
- pulumi_sdwan/extended_community_list_policy_object.py +35 -32
- pulumi_sdwan/feature_device_template.py +164 -154
- pulumi_sdwan/geo_location_list_policy_object.py +35 -32
- pulumi_sdwan/get_advanced_inspection_profile_policy_definition.py +32 -33
- pulumi_sdwan/get_advanced_malware_protection_policy_definition.py +34 -35
- pulumi_sdwan/get_allow_url_list_policy_object.py +13 -14
- pulumi_sdwan/get_app_probe_class_policy_object.py +15 -16
- pulumi_sdwan/get_application_aware_routing_policy_definition.py +60 -19
- pulumi_sdwan/get_application_list_policy_object.py +13 -14
- pulumi_sdwan/get_application_priority_feature_profile.py +12 -13
- pulumi_sdwan/get_application_priority_qos_policy.py +38 -39
- pulumi_sdwan/get_application_priority_traffic_policy_policy.py +27 -28
- pulumi_sdwan/get_as_path_list_policy_object.py +13 -14
- pulumi_sdwan/get_block_url_list_policy_object.py +13 -14
- pulumi_sdwan/get_cedge_aaa_feature_template.py +68 -69
- pulumi_sdwan/get_cedge_global_feature_template.py +114 -115
- pulumi_sdwan/get_cedge_igmp_feature_template.py +23 -24
- pulumi_sdwan/get_cedge_multicast_feature_template.py +34 -35
- pulumi_sdwan/get_cedge_pim_feature_template.py +66 -67
- pulumi_sdwan/get_cellular_cedge_profile_feature_template.py +50 -51
- pulumi_sdwan/get_cellular_controller_feature_template.py +43 -44
- pulumi_sdwan/get_cellular_profile_feature_template.py +66 -67
- pulumi_sdwan/get_centralized_policy.py +15 -16
- pulumi_sdwan/get_cflowd_policy_definition.py +31 -32
- pulumi_sdwan/get_cisco_banner_feature_template.py +30 -31
- pulumi_sdwan/get_cisco_bfd_feature_template.py +35 -36
- pulumi_sdwan/get_cisco_bgp_feature_template.py +88 -89
- pulumi_sdwan/get_cisco_dhcp_server_feature_template.py +56 -57
- pulumi_sdwan/get_cisco_logging_feature_template.py +37 -38
- pulumi_sdwan/get_cisco_ntp_feature_template.py +40 -41
- pulumi_sdwan/get_cisco_omp_feature_template.py +76 -77
- pulumi_sdwan/get_cisco_ospf_feature_template.py +76 -77
- pulumi_sdwan/get_cisco_ospfv3_feature_template.py +152 -153
- pulumi_sdwan/get_cisco_secure_internet_gateway_feature_template.py +31 -32
- pulumi_sdwan/get_cisco_security_feature_template.py +48 -49
- pulumi_sdwan/get_cisco_sig_credentials_feature_template.py +66 -67
- pulumi_sdwan/get_cisco_snmp_feature_template.py +39 -40
- pulumi_sdwan/get_cisco_system_feature_template.py +186 -159
- pulumi_sdwan/get_cisco_thousandeyes_feature_template.py +23 -24
- pulumi_sdwan/get_cisco_trustsec_feature_template.py +83 -84
- pulumi_sdwan/get_cisco_vpn_feature_template.py +63 -64
- pulumi_sdwan/get_cisco_vpn_interface_feature_template.py +414 -415
- pulumi_sdwan/get_cisco_vpn_interface_gre_feature_template.py +79 -80
- pulumi_sdwan/get_cisco_vpn_interface_ipsec_feature_template.py +128 -129
- pulumi_sdwan/get_cisco_wireless_lan_feature_template.py +55 -56
- pulumi_sdwan/get_class_map_policy_object.py +14 -15
- pulumi_sdwan/get_cli_config_feature.py +22 -23
- pulumi_sdwan/get_cli_device_template.py +20 -21
- pulumi_sdwan/get_cli_feature_profile.py +12 -13
- pulumi_sdwan/get_cli_template_feature_template.py +24 -25
- pulumi_sdwan/get_color_list_policy_object.py +13 -14
- pulumi_sdwan/get_configuration_group.py +22 -23
- pulumi_sdwan/get_custom_control_topology_policy_definition.py +19 -20
- pulumi_sdwan/get_data_fqdn_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_data_ipv4_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_data_ipv6_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_device.py +17 -18
- pulumi_sdwan/get_dns_security_feature_profile.py +12 -13
- pulumi_sdwan/get_dns_security_policy.py +35 -36
- pulumi_sdwan/get_dns_security_policy_definition.py +33 -34
- pulumi_sdwan/get_domain_list_policy_object.py +13 -14
- pulumi_sdwan/get_eigrp_feature_template.py +53 -54
- pulumi_sdwan/get_embedded_security_feature_profile.py +12 -13
- pulumi_sdwan/get_expanded_community_list_policy_object.py +13 -14
- pulumi_sdwan/get_extended_community_list_policy_object.py +13 -14
- pulumi_sdwan/get_feature_device_template.py +27 -28
- pulumi_sdwan/get_geo_location_list_policy_object.py +13 -14
- pulumi_sdwan/get_gps_feature_template.py +46 -47
- pulumi_sdwan/get_hub_and_spoke_topology_policy_definition.py +21 -22
- pulumi_sdwan/get_intrusion_prevention_policy_definition.py +31 -32
- pulumi_sdwan/get_ips_signature_list_policy_object.py +13 -14
- pulumi_sdwan/get_ipv4_acl_policy_definition.py +19 -20
- pulumi_sdwan/get_ipv4_device_acl_policy_definition.py +19 -20
- pulumi_sdwan/get_ipv4_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_ipv6_acl_policy_definition.py +19 -20
- pulumi_sdwan/get_ipv6_device_acl_policy_definition.py +19 -20
- pulumi_sdwan/get_ipv6_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_local_application_list_policy_object.py +13 -14
- pulumi_sdwan/get_localized_policy.py +35 -36
- pulumi_sdwan/get_mesh_topology_policy_definition.py +21 -22
- pulumi_sdwan/get_mirror_policy_object.py +16 -17
- pulumi_sdwan/get_object_group_policy_definition.py +40 -41
- pulumi_sdwan/get_other_feature_profile.py +12 -13
- pulumi_sdwan/get_other_thousandeyes_feature.py +21 -22
- pulumi_sdwan/get_other_ucse_feature.py +47 -48
- pulumi_sdwan/get_policer_policy_object.py +18 -19
- pulumi_sdwan/get_policy_group.py +183 -0
- pulumi_sdwan/get_policy_object_app_probe_class.py +21 -22
- pulumi_sdwan/get_policy_object_application_list.py +21 -22
- pulumi_sdwan/get_policy_object_as_path_list.py +23 -24
- pulumi_sdwan/get_policy_object_class_map.py +21 -22
- pulumi_sdwan/get_policy_object_color_list.py +21 -22
- pulumi_sdwan/get_policy_object_data_ipv4_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_data_ipv6_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_expanded_community_list.py +24 -25
- pulumi_sdwan/get_policy_object_extended_community_list.py +21 -22
- pulumi_sdwan/get_policy_object_feature_profile.py +12 -13
- pulumi_sdwan/get_policy_object_ipv4_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_ipv6_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_mirror.py +21 -22
- pulumi_sdwan/get_policy_object_policer.py +21 -22
- pulumi_sdwan/get_policy_object_preferred_color_group.py +21 -22
- pulumi_sdwan/get_policy_object_security_data_ipv4_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_fqdn_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_geolocation_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_identity_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_ips_signature.py +21 -22
- pulumi_sdwan/get_policy_object_security_local_application_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_local_domain_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_port_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_protocol_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_scalable_group_tag_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_url_allow_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_url_block_list.py +21 -22
- pulumi_sdwan/get_policy_object_sla_class_list.py +21 -22
- pulumi_sdwan/get_policy_object_standard_community_list.py +21 -22
- pulumi_sdwan/get_policy_object_tloc_list.py +21 -22
- pulumi_sdwan/get_policy_object_unified_advanced_inspection_profile.py +217 -0
- pulumi_sdwan/get_policy_object_unified_advanced_malware_protection.py +239 -0
- pulumi_sdwan/get_policy_object_unified_intrusion_prevention.py +229 -0
- pulumi_sdwan/get_policy_object_unified_tls_ssl_decryption.py +325 -0
- pulumi_sdwan/get_policy_object_unified_tls_ssl_profile.py +261 -0
- pulumi_sdwan/get_policy_object_unified_url_filtering.py +272 -0
- pulumi_sdwan/get_policy_object_vpn_group.py +21 -22
- pulumi_sdwan/get_port_list_policy_object.py +13 -14
- pulumi_sdwan/get_preferred_color_group_policy_object.py +24 -25
- pulumi_sdwan/get_protocol_list_policy_object.py +13 -14
- pulumi_sdwan/get_qos_map_policy_definition.py +17 -18
- pulumi_sdwan/get_region_list_policy_object.py +13 -14
- pulumi_sdwan/get_rewrite_rule_policy_definition.py +17 -18
- pulumi_sdwan/get_route_policy_definition.py +19 -20
- pulumi_sdwan/get_rule_set_policy_definition.py +15 -16
- pulumi_sdwan/get_security_app_hosting_feature_template.py +23 -24
- pulumi_sdwan/get_security_policy.py +62 -63
- pulumi_sdwan/get_service_dhcp_server_feature.py +58 -59
- pulumi_sdwan/get_service_feature_profile.py +12 -13
- pulumi_sdwan/get_service_ipv4_acl_feature.py +23 -24
- pulumi_sdwan/get_service_ipv6_acl_feature.py +23 -24
- pulumi_sdwan/get_service_lan_vpn_feature.py +74 -75
- pulumi_sdwan/get_service_lan_vpn_feature_associate_multicast_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_bgp_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_eigrp_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospf_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature.py +213 -214
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +30 -31
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +30 -31
- pulumi_sdwan/get_service_lan_vpn_interface_gre_feature.py +82 -83
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature.py +144 -145
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +30 -31
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature.py +96 -97
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +30 -31
- pulumi_sdwan/get_service_multicast_feature.py +62 -63
- pulumi_sdwan/get_service_object_tracker_feature.py +42 -43
- pulumi_sdwan/get_service_object_tracker_group_feature.py +29 -30
- pulumi_sdwan/get_service_route_policy_feature.py +23 -24
- pulumi_sdwan/get_service_routing_bgp_feature.py +112 -113
- pulumi_sdwan/get_service_routing_eigrp_feature.py +50 -51
- pulumi_sdwan/get_service_routing_ospf_feature.py +75 -76
- pulumi_sdwan/get_service_routing_ospfv3_ipv4_feature.py +88 -89
- pulumi_sdwan/get_service_routing_ospfv3_ipv6_feature.py +88 -89
- pulumi_sdwan/get_service_switchport_feature.py +26 -27
- pulumi_sdwan/get_service_tracker_feature.py +64 -65
- pulumi_sdwan/get_service_tracker_group_feature.py +25 -26
- pulumi_sdwan/get_service_wireless_lan_feature.py +55 -56
- pulumi_sdwan/get_sig_security_feature_profile.py +12 -13
- pulumi_sdwan/get_site_list_policy_object.py +13 -14
- pulumi_sdwan/get_sla_class_policy_object.py +30 -31
- pulumi_sdwan/get_standard_community_list_policy_object.py +13 -14
- pulumi_sdwan/get_switchport_feature_template.py +34 -35
- pulumi_sdwan/get_system_aaa_feature.py +43 -44
- pulumi_sdwan/get_system_banner_feature.py +28 -29
- pulumi_sdwan/get_system_basic_feature.py +138 -139
- pulumi_sdwan/get_system_bfd_feature.py +33 -34
- pulumi_sdwan/get_system_feature_profile.py +12 -13
- pulumi_sdwan/get_system_flexible_port_speed_feature.py +24 -25
- pulumi_sdwan/get_system_global_feature.py +112 -113
- pulumi_sdwan/get_system_ipv4_device_access_feature.py +23 -24
- pulumi_sdwan/get_system_ipv6_device_access_feature.py +23 -24
- pulumi_sdwan/get_system_logging_feature.py +35 -36
- pulumi_sdwan/get_system_mrf_feature.py +34 -35
- pulumi_sdwan/get_system_ntp_feature.py +38 -39
- pulumi_sdwan/get_system_omp_feature.py +136 -137
- pulumi_sdwan/get_system_performance_monitoring_feature.py +32 -33
- pulumi_sdwan/get_system_remote_access_feature.py +100 -101
- pulumi_sdwan/get_system_security_feature.py +42 -43
- pulumi_sdwan/get_system_snmp_feature.py +37 -38
- pulumi_sdwan/get_tag.py +14 -15
- pulumi_sdwan/get_tloc_list_policy_object.py +13 -14
- pulumi_sdwan/get_tls_ssl_decryption_policy_definition.py +46 -47
- pulumi_sdwan/get_tls_ssl_profile_policy_definition.py +36 -37
- pulumi_sdwan/get_traffic_data_policy_definition.py +19 -20
- pulumi_sdwan/get_transport_cellular_controller_feature.py +40 -41
- pulumi_sdwan/get_transport_cellular_profile_feature.py +50 -51
- pulumi_sdwan/get_transport_feature_profile.py +12 -13
- pulumi_sdwan/get_transport_gps_feature.py +44 -45
- pulumi_sdwan/get_transport_ipv4_acl_feature.py +23 -24
- pulumi_sdwan/get_transport_ipv6_acl_feature.py +23 -24
- pulumi_sdwan/get_transport_ipv6_tracker_feature.py +56 -57
- pulumi_sdwan/get_transport_ipv6_tracker_group_feature.py +29 -30
- pulumi_sdwan/get_transport_management_vpn_feature.py +43 -44
- pulumi_sdwan/get_transport_management_vpn_interface_ethernet_feature.py +122 -123
- pulumi_sdwan/get_transport_route_policy_feature.py +23 -24
- pulumi_sdwan/get_transport_routing_bgp_feature.py +113 -114
- pulumi_sdwan/get_transport_routing_ospf_feature.py +75 -76
- pulumi_sdwan/get_transport_routing_ospfv3_ipv4_feature.py +88 -89
- pulumi_sdwan/get_transport_routing_ospfv3_ipv6_feature.py +88 -89
- pulumi_sdwan/get_transport_t1_e1_controller_feature.py +27 -28
- pulumi_sdwan/get_transport_tracker_feature.py +56 -57
- pulumi_sdwan/get_transport_tracker_group_feature.py +25 -26
- pulumi_sdwan/get_transport_wan_vpn_feature.py +47 -48
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_bgp_feature.py +24 -25
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospf_feature.py +24 -25
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +24 -25
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +24 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature.py +280 -281
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature.py +399 -400
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature.py +82 -83
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature.py +144 -145
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_t1_e1_serial_feature.py +233 -234
- pulumi_sdwan/get_url_filtering_policy_definition.py +39 -40
- pulumi_sdwan/get_vedge_inventory.py +5 -6
- pulumi_sdwan/get_vpn_interface_cellular_feature_template.py +306 -307
- pulumi_sdwan/get_vpn_interface_dsl_ipoe_feature_template.py +333 -334
- pulumi_sdwan/get_vpn_interface_dsl_pppoa_feature_template.py +310 -311
- pulumi_sdwan/get_vpn_interface_dsl_pppoe_feature_template.py +327 -328
- pulumi_sdwan/get_vpn_interface_ethernet_pppoe_feature_template.py +326 -327
- pulumi_sdwan/get_vpn_interface_multilink_feature_template.py +285 -286
- pulumi_sdwan/get_vpn_interface_svi_feature_template.py +87 -88
- pulumi_sdwan/get_vpn_interface_t1_e1_serial_feature_template.py +253 -254
- pulumi_sdwan/get_vpn_list_policy_object.py +13 -14
- pulumi_sdwan/get_vpn_membership_policy_definition.py +17 -18
- pulumi_sdwan/get_zone_based_firewall_policy_definition.py +20 -21
- pulumi_sdwan/get_zone_list_policy_object.py +13 -14
- pulumi_sdwan/gps_feature_template.py +336 -305
- pulumi_sdwan/hub_and_spoke_topology_policy_definition.py +145 -92
- pulumi_sdwan/intrusion_prevention_policy_definition.py +270 -197
- pulumi_sdwan/ips_signature_list_policy_object.py +63 -32
- pulumi_sdwan/ipv4_acl_policy_definition.py +144 -78
- pulumi_sdwan/ipv4_device_acl_policy_definition.py +138 -78
- pulumi_sdwan/ipv4_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/ipv6_acl_policy_definition.py +144 -78
- pulumi_sdwan/ipv6_device_acl_policy_definition.py +138 -78
- pulumi_sdwan/ipv6_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/local_application_list_policy_object.py +35 -32
- pulumi_sdwan/localized_policy.py +308 -249
- pulumi_sdwan/mesh_topology_policy_definition.py +127 -92
- pulumi_sdwan/mirror_policy_object.py +66 -63
- pulumi_sdwan/object_group_policy_definition.py +270 -267
- pulumi_sdwan/other_feature_profile.py +40 -37
- pulumi_sdwan/other_thousandeyes_feature.py +117 -66
- pulumi_sdwan/other_ucse_feature.py +412 -315
- pulumi_sdwan/outputs.py +29677 -28483
- pulumi_sdwan/policer_policy_object.py +113 -89
- pulumi_sdwan/policy_group.py +447 -0
- pulumi_sdwan/policy_object_app_probe_class.py +107 -66
- pulumi_sdwan/policy_object_application_list.py +69 -66
- pulumi_sdwan/policy_object_as_path_list.py +128 -86
- pulumi_sdwan/policy_object_class_map.py +69 -66
- pulumi_sdwan/policy_object_color_list.py +69 -66
- pulumi_sdwan/policy_object_data_ipv4_prefix_list.py +101 -66
- pulumi_sdwan/policy_object_data_ipv6_prefix_list.py +101 -66
- pulumi_sdwan/policy_object_expanded_community_list.py +100 -97
- pulumi_sdwan/policy_object_extended_community_list.py +99 -66
- pulumi_sdwan/policy_object_feature_profile.py +40 -37
- pulumi_sdwan/policy_object_ipv4_prefix_list.py +105 -66
- pulumi_sdwan/policy_object_ipv6_prefix_list.py +105 -66
- pulumi_sdwan/policy_object_mirror.py +101 -66
- pulumi_sdwan/policy_object_policer.py +103 -66
- pulumi_sdwan/policy_object_preferred_color_group.py +109 -66
- pulumi_sdwan/policy_object_security_data_ipv4_prefix_list.py +99 -66
- pulumi_sdwan/policy_object_security_fqdn_list.py +69 -66
- pulumi_sdwan/policy_object_security_geolocation_list.py +76 -73
- pulumi_sdwan/policy_object_security_identity_list.py +69 -66
- pulumi_sdwan/policy_object_security_ips_signature.py +101 -66
- pulumi_sdwan/policy_object_security_local_application_list.py +69 -66
- pulumi_sdwan/policy_object_security_local_domain_list.py +99 -66
- pulumi_sdwan/policy_object_security_port_list.py +69 -66
- pulumi_sdwan/policy_object_security_protocol_list.py +363 -0
- pulumi_sdwan/policy_object_security_scalable_group_tag_list.py +101 -66
- pulumi_sdwan/policy_object_security_url_allow_list.py +69 -66
- pulumi_sdwan/policy_object_security_url_block_list.py +69 -66
- pulumi_sdwan/policy_object_sla_class_list.py +107 -66
- pulumi_sdwan/policy_object_standard_community_list.py +99 -66
- pulumi_sdwan/policy_object_tloc_list.py +105 -66
- pulumi_sdwan/policy_object_unified_advanced_inspection_profile.py +514 -0
- pulumi_sdwan/policy_object_unified_advanced_malware_protection.py +668 -0
- pulumi_sdwan/policy_object_unified_intrusion_prevention.py +576 -0
- pulumi_sdwan/policy_object_unified_tls_ssl_decryption.py +985 -0
- pulumi_sdwan/policy_object_unified_tls_ssl_profile.py +689 -0
- pulumi_sdwan/policy_object_unified_url_filtering.py +761 -0
- pulumi_sdwan/policy_object_vpn_group.py +69 -66
- pulumi_sdwan/port_list_policy_object.py +37 -34
- pulumi_sdwan/preferred_color_group_policy_object.py +164 -140
- pulumi_sdwan/protocol_list_policy_object.py +35 -32
- pulumi_sdwan/provider.py +69 -50
- pulumi_sdwan/pulumi-plugin.json +1 -1
- pulumi_sdwan/qos_map_policy_definition.py +101 -58
- pulumi_sdwan/region_list_policy_object.py +61 -32
- pulumi_sdwan/rewrite_rule_policy_definition.py +95 -58
- pulumi_sdwan/route_policy_definition.py +142 -78
- pulumi_sdwan/rule_set_policy_definition.py +100 -49
- pulumi_sdwan/security_app_hosting_feature_template.py +134 -92
- pulumi_sdwan/security_policy.py +483 -366
- pulumi_sdwan/service_dhcp_server_feature.py +473 -412
- pulumi_sdwan/service_feature_profile.py +40 -37
- pulumi_sdwan/service_ipv4_acl_feature.py +180 -98
- pulumi_sdwan/service_ipv6_acl_feature.py +180 -98
- pulumi_sdwan/service_lan_vpn_feature.py +670 -424
- pulumi_sdwan/service_lan_vpn_feature_associate_multicast_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_bgp_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_eigrp_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospf_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature.py +2004 -1616
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +83 -80
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +83 -80
- pulumi_sdwan/service_lan_vpn_interface_gre_feature.py +627 -609
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature.py +1339 -1251
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +83 -80
- pulumi_sdwan/service_lan_vpn_interface_svi_feature.py +904 -692
- pulumi_sdwan/service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +83 -80
- pulumi_sdwan/service_multicast_feature.py +586 -405
- pulumi_sdwan/service_object_tracker_feature.py +300 -290
- pulumi_sdwan/service_object_tracker_group_feature.py +198 -140
- pulumi_sdwan/service_route_policy_feature.py +167 -86
- pulumi_sdwan/service_routing_bgp_feature.py +1223 -867
- pulumi_sdwan/service_routing_eigrp_feature.py +425 -307
- pulumi_sdwan/service_routing_ospf_feature.py +796 -546
- pulumi_sdwan/service_routing_ospfv3_ipv4_feature.py +921 -665
- pulumi_sdwan/service_routing_ospfv3_ipv6_feature.py +917 -665
- pulumi_sdwan/service_switchport_feature.py +205 -106
- pulumi_sdwan/service_tracker_feature.py +525 -452
- pulumi_sdwan/service_tracker_group_feature.py +152 -103
- pulumi_sdwan/service_wireless_lan_feature.py +457 -461
- pulumi_sdwan/sig_security_feature_profile.py +40 -37
- pulumi_sdwan/site_list_policy_object.py +61 -32
- pulumi_sdwan/sla_class_policy_object.py +248 -217
- pulumi_sdwan/standard_community_list_policy_object.py +35 -32
- pulumi_sdwan/switchport_feature_template.py +329 -192
- pulumi_sdwan/system_aaa_feature.py +412 -243
- pulumi_sdwan/system_banner_feature.py +126 -123
- pulumi_sdwan/system_basic_feature.py +1469 -1668
- pulumi_sdwan/system_bfd_feature.py +245 -177
- pulumi_sdwan/system_feature_profile.py +40 -37
- pulumi_sdwan/system_flexible_port_speed_feature.py +117 -114
- pulumi_sdwan/system_global_feature.py +1082 -911
- pulumi_sdwan/system_ipv4_device_access_feature.py +141 -86
- pulumi_sdwan/system_ipv6_device_access_feature.py +141 -86
- pulumi_sdwan/system_logging_feature.py +310 -195
- pulumi_sdwan/system_mrf_feature.py +249 -210
- pulumi_sdwan/system_ntp_feature.py +298 -224
- pulumi_sdwan/system_omp_feature.py +1381 -1133
- pulumi_sdwan/system_performance_monitoring_feature.py +222 -190
- pulumi_sdwan/system_remote_access_feature.py +898 -824
- pulumi_sdwan/system_security_feature.py +390 -270
- pulumi_sdwan/system_snmp_feature.py +304 -195
- pulumi_sdwan/tag.py +57 -54
- pulumi_sdwan/tloc_list_policy_object.py +67 -32
- pulumi_sdwan/tls_ssl_decryption_policy_definition.py +502 -343
- pulumi_sdwan/tls_ssl_profile_policy_definition.py +256 -239
- pulumi_sdwan/traffic_data_policy_definition.py +142 -78
- pulumi_sdwan/transport_cellular_controller_feature.py +276 -245
- pulumi_sdwan/transport_cellular_profile_feature.py +368 -337
- pulumi_sdwan/transport_feature_profile.py +40 -37
- pulumi_sdwan/transport_gps_feature.py +317 -279
- pulumi_sdwan/transport_ipv4_acl_feature.py +180 -98
- pulumi_sdwan/transport_ipv6_acl_feature.py +180 -98
- pulumi_sdwan/transport_ipv6_tracker_feature.py +457 -384
- pulumi_sdwan/transport_ipv6_tracker_group_feature.py +188 -137
- pulumi_sdwan/transport_management_vpn_feature.py +335 -255
- pulumi_sdwan/transport_management_vpn_interface_ethernet_feature.py +1193 -995
- pulumi_sdwan/transport_route_policy_feature.py +167 -86
- pulumi_sdwan/transport_routing_bgp_feature.py +1234 -870
- pulumi_sdwan/transport_routing_ospf_feature.py +796 -546
- pulumi_sdwan/transport_routing_ospfv3_ipv4_feature.py +921 -665
- pulumi_sdwan/transport_routing_ospfv3_ipv6_feature.py +917 -665
- pulumi_sdwan/transport_t1_e1_controller_feature.py +186 -120
- pulumi_sdwan/transport_tracker_feature.py +457 -384
- pulumi_sdwan/transport_tracker_group_feature.py +152 -103
- pulumi_sdwan/transport_wan_vpn_feature.py +397 -283
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_bgp_feature.py +66 -63
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospf_feature.py +66 -63
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +66 -63
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +66 -63
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature.py +2999 -2412
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature.py +4419 -3623
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature.py +627 -609
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature.py +1339 -1251
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_t1_e1_serial_feature.py +2318 -2020
- pulumi_sdwan/url_filtering_policy_definition.py +342 -272
- pulumi_sdwan/vpn_interface_cellular_feature_template.py +3367 -2668
- pulumi_sdwan/vpn_interface_dsl_ipoe_feature_template.py +3644 -2909
- pulumi_sdwan/vpn_interface_dsl_pppoa_feature_template.py +3434 -2699
- pulumi_sdwan/vpn_interface_dsl_pppoe_feature_template.py +3608 -2861
- pulumi_sdwan/vpn_interface_ethernet_pppoe_feature_template.py +3585 -2858
- pulumi_sdwan/vpn_interface_multilink_feature_template.py +3115 -2474
- pulumi_sdwan/vpn_interface_svi_feature_template.py +874 -619
- pulumi_sdwan/vpn_interface_t1_e1_serial_feature_template.py +2719 -2209
- pulumi_sdwan/vpn_list_policy_object.py +61 -32
- pulumi_sdwan/vpn_membership_policy_definition.py +91 -58
- pulumi_sdwan/zone_based_firewall_policy_definition.py +169 -92
- pulumi_sdwan/zone_list_policy_object.py +35 -32
- {pulumi_sdwan-0.4.0a1746772400.dist-info → pulumi_sdwan-0.6.0a1765953124.dist-info}/METADATA +1 -1
- pulumi_sdwan-0.6.0a1765953124.dist-info/RECORD +496 -0
- {pulumi_sdwan-0.4.0a1746772400.dist-info → pulumi_sdwan-0.6.0a1765953124.dist-info}/WHEEL +1 -1
- pulumi_sdwan-0.4.0a1746772400.dist-info/RECORD +0 -480
- {pulumi_sdwan-0.4.0a1746772400.dist-info → pulumi_sdwan-0.6.0a1765953124.dist-info}/top_level.txt +0 -0
pulumi_sdwan/security_policy.py
CHANGED
|
@@ -1,9 +1,8 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -23,49 +22,59 @@ __all__ = ['SecurityPolicyArgs', 'SecurityPolicy']
|
|
|
23
22
|
class SecurityPolicyArgs:
|
|
24
23
|
def __init__(__self__, *,
|
|
25
24
|
definitions: pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]],
|
|
26
|
-
description: pulumi.Input[
|
|
27
|
-
audit_trail: Optional[pulumi.Input[
|
|
28
|
-
direct_internet_applications: Optional[pulumi.Input[
|
|
29
|
-
failure_mode: Optional[pulumi.Input[
|
|
30
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[
|
|
31
|
-
high_speed_logging_server_port: Optional[pulumi.Input[
|
|
32
|
-
high_speed_logging_server_source_interface: Optional[pulumi.Input[
|
|
33
|
-
high_speed_logging_vpn: Optional[pulumi.Input[
|
|
34
|
-
imcp_unreachable_allow: Optional[pulumi.Input[
|
|
25
|
+
description: pulumi.Input[_builtins.str],
|
|
26
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
34
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]] = None,
|
|
36
|
-
match_statistics_per_filter: Optional[pulumi.Input[
|
|
37
|
-
max_incomplete_icmp_limit: Optional[pulumi.Input[
|
|
38
|
-
max_incomplete_tcp_limit: Optional[pulumi.Input[
|
|
39
|
-
max_incomplete_udp_limit: Optional[pulumi.Input[
|
|
40
|
-
mode: Optional[pulumi.Input[
|
|
41
|
-
name: Optional[pulumi.Input[
|
|
42
|
-
session_reclassify_allow: Optional[pulumi.Input[
|
|
43
|
-
tcp_syn_flood_limit: Optional[pulumi.Input[
|
|
44
|
-
unified_logging: Optional[pulumi.Input[
|
|
45
|
-
use_case: Optional[pulumi.Input[
|
|
35
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
39
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
40
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
41
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
42
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
43
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
44
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None):
|
|
46
45
|
"""
|
|
47
46
|
The set of arguments for constructing a SecurityPolicy resource.
|
|
48
47
|
:param pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]] definitions: List of policy definitions
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
|
|
52
|
-
:param pulumi.Input[
|
|
53
|
-
|
|
54
|
-
:param pulumi.Input[
|
|
55
|
-
|
|
56
|
-
:param pulumi.Input[
|
|
57
|
-
:param pulumi.Input[
|
|
58
|
-
:param pulumi.Input[
|
|
59
|
-
:param pulumi.Input[
|
|
60
|
-
:param pulumi.Input[
|
|
61
|
-
|
|
62
|
-
:param pulumi.Input[
|
|
63
|
-
|
|
64
|
-
:param pulumi.Input[
|
|
65
|
-
:param pulumi.Input[
|
|
66
|
-
:param pulumi.Input[
|
|
67
|
-
:param pulumi.Input[
|
|
68
|
-
|
|
48
|
+
:param pulumi.Input[_builtins.str] description: The description of the security policy
|
|
49
|
+
:param pulumi.Input[_builtins.str] audit_trail: Audit trail
|
|
50
|
+
- Choices: `on`, `off`
|
|
51
|
+
:param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
52
|
+
- Choices: `allow`, `deny`
|
|
53
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
54
|
+
- Choices: `open`, `close`
|
|
55
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
56
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
57
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
58
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
59
|
+
:param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
60
|
+
- Choices: `on`, `off`
|
|
61
|
+
:param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
|
|
62
|
+
- Choices: `on`, `off`
|
|
63
|
+
:param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
64
|
+
:param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
65
|
+
:param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
66
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
67
|
+
- Choices: `security`, `unified`
|
|
68
|
+
- Default value: `security`
|
|
69
|
+
:param pulumi.Input[_builtins.str] name: The name of the security policy
|
|
70
|
+
:param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
|
|
71
|
+
- Choices: `on`, `off`
|
|
72
|
+
:param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
73
|
+
:param pulumi.Input[_builtins.str] unified_logging: Unified Logging
|
|
74
|
+
- Choices: `on`, `off`
|
|
75
|
+
:param pulumi.Input[_builtins.str] use_case: The use case of the security policy
|
|
76
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
77
|
+
- Default value: `custom`
|
|
69
78
|
"""
|
|
70
79
|
pulumi.set(__self__, "definitions", definitions)
|
|
71
80
|
pulumi.set(__self__, "description", description)
|
|
@@ -108,7 +117,7 @@ class SecurityPolicyArgs:
|
|
|
108
117
|
if use_case is not None:
|
|
109
118
|
pulumi.set(__self__, "use_case", use_case)
|
|
110
119
|
|
|
111
|
-
@property
|
|
120
|
+
@_builtins.property
|
|
112
121
|
@pulumi.getter
|
|
113
122
|
def definitions(self) -> pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]:
|
|
114
123
|
"""
|
|
@@ -120,115 +129,119 @@ class SecurityPolicyArgs:
|
|
|
120
129
|
def definitions(self, value: pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]):
|
|
121
130
|
pulumi.set(self, "definitions", value)
|
|
122
131
|
|
|
123
|
-
@property
|
|
132
|
+
@_builtins.property
|
|
124
133
|
@pulumi.getter
|
|
125
|
-
def description(self) -> pulumi.Input[
|
|
134
|
+
def description(self) -> pulumi.Input[_builtins.str]:
|
|
126
135
|
"""
|
|
127
136
|
The description of the security policy
|
|
128
137
|
"""
|
|
129
138
|
return pulumi.get(self, "description")
|
|
130
139
|
|
|
131
140
|
@description.setter
|
|
132
|
-
def description(self, value: pulumi.Input[
|
|
141
|
+
def description(self, value: pulumi.Input[_builtins.str]):
|
|
133
142
|
pulumi.set(self, "description", value)
|
|
134
143
|
|
|
135
|
-
@property
|
|
144
|
+
@_builtins.property
|
|
136
145
|
@pulumi.getter(name="auditTrail")
|
|
137
|
-
def audit_trail(self) -> Optional[pulumi.Input[
|
|
146
|
+
def audit_trail(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
138
147
|
"""
|
|
139
|
-
Audit trail
|
|
148
|
+
Audit trail
|
|
149
|
+
- Choices: `on`, `off`
|
|
140
150
|
"""
|
|
141
151
|
return pulumi.get(self, "audit_trail")
|
|
142
152
|
|
|
143
153
|
@audit_trail.setter
|
|
144
|
-
def audit_trail(self, value: Optional[pulumi.Input[
|
|
154
|
+
def audit_trail(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
145
155
|
pulumi.set(self, "audit_trail", value)
|
|
146
156
|
|
|
147
|
-
@property
|
|
157
|
+
@_builtins.property
|
|
148
158
|
@pulumi.getter(name="directInternetApplications")
|
|
149
|
-
def direct_internet_applications(self) -> Optional[pulumi.Input[
|
|
159
|
+
def direct_internet_applications(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
150
160
|
"""
|
|
151
|
-
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
161
|
+
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
162
|
+
- Choices: `allow`, `deny`
|
|
152
163
|
"""
|
|
153
164
|
return pulumi.get(self, "direct_internet_applications")
|
|
154
165
|
|
|
155
166
|
@direct_internet_applications.setter
|
|
156
|
-
def direct_internet_applications(self, value: Optional[pulumi.Input[
|
|
167
|
+
def direct_internet_applications(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
157
168
|
pulumi.set(self, "direct_internet_applications", value)
|
|
158
169
|
|
|
159
|
-
@property
|
|
170
|
+
@_builtins.property
|
|
160
171
|
@pulumi.getter(name="failureMode")
|
|
161
|
-
def failure_mode(self) -> Optional[pulumi.Input[
|
|
172
|
+
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
162
173
|
"""
|
|
163
|
-
Failure mode
|
|
174
|
+
Failure mode
|
|
175
|
+
- Choices: `open`, `close`
|
|
164
176
|
"""
|
|
165
177
|
return pulumi.get(self, "failure_mode")
|
|
166
178
|
|
|
167
179
|
@failure_mode.setter
|
|
168
|
-
def failure_mode(self, value: Optional[pulumi.Input[
|
|
180
|
+
def failure_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
169
181
|
pulumi.set(self, "failure_mode", value)
|
|
170
182
|
|
|
171
|
-
@property
|
|
183
|
+
@_builtins.property
|
|
172
184
|
@pulumi.getter(name="highSpeedLoggingServerIp")
|
|
173
|
-
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[
|
|
185
|
+
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
174
186
|
"""
|
|
175
187
|
High Speed Logging Server IP
|
|
176
188
|
"""
|
|
177
189
|
return pulumi.get(self, "high_speed_logging_server_ip")
|
|
178
190
|
|
|
179
191
|
@high_speed_logging_server_ip.setter
|
|
180
|
-
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[
|
|
192
|
+
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
181
193
|
pulumi.set(self, "high_speed_logging_server_ip", value)
|
|
182
194
|
|
|
183
|
-
@property
|
|
195
|
+
@_builtins.property
|
|
184
196
|
@pulumi.getter(name="highSpeedLoggingServerPort")
|
|
185
|
-
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[
|
|
197
|
+
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
186
198
|
"""
|
|
187
199
|
High Speed Logging Port
|
|
188
200
|
"""
|
|
189
201
|
return pulumi.get(self, "high_speed_logging_server_port")
|
|
190
202
|
|
|
191
203
|
@high_speed_logging_server_port.setter
|
|
192
|
-
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[
|
|
204
|
+
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
193
205
|
pulumi.set(self, "high_speed_logging_server_port", value)
|
|
194
206
|
|
|
195
|
-
@property
|
|
207
|
+
@_builtins.property
|
|
196
208
|
@pulumi.getter(name="highSpeedLoggingServerSourceInterface")
|
|
197
|
-
def high_speed_logging_server_source_interface(self) -> Optional[pulumi.Input[
|
|
209
|
+
def high_speed_logging_server_source_interface(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
198
210
|
"""
|
|
199
211
|
High Speed Logging Source Interface
|
|
200
212
|
"""
|
|
201
213
|
return pulumi.get(self, "high_speed_logging_server_source_interface")
|
|
202
214
|
|
|
203
215
|
@high_speed_logging_server_source_interface.setter
|
|
204
|
-
def high_speed_logging_server_source_interface(self, value: Optional[pulumi.Input[
|
|
216
|
+
def high_speed_logging_server_source_interface(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
205
217
|
pulumi.set(self, "high_speed_logging_server_source_interface", value)
|
|
206
218
|
|
|
207
|
-
@property
|
|
219
|
+
@_builtins.property
|
|
208
220
|
@pulumi.getter(name="highSpeedLoggingVpn")
|
|
209
|
-
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[
|
|
221
|
+
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
210
222
|
"""
|
|
211
223
|
High Speed Logging VPN
|
|
212
224
|
"""
|
|
213
225
|
return pulumi.get(self, "high_speed_logging_vpn")
|
|
214
226
|
|
|
215
227
|
@high_speed_logging_vpn.setter
|
|
216
|
-
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[
|
|
228
|
+
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
217
229
|
pulumi.set(self, "high_speed_logging_vpn", value)
|
|
218
230
|
|
|
219
|
-
@property
|
|
231
|
+
@_builtins.property
|
|
220
232
|
@pulumi.getter(name="imcpUnreachableAllow")
|
|
221
|
-
def imcp_unreachable_allow(self) -> Optional[pulumi.Input[
|
|
233
|
+
def imcp_unreachable_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
222
234
|
"""
|
|
223
235
|
ICMP Unreachable Allow
|
|
236
|
+
- Choices: `on`, `off`
|
|
224
237
|
"""
|
|
225
238
|
return pulumi.get(self, "imcp_unreachable_allow")
|
|
226
239
|
|
|
227
240
|
@imcp_unreachable_allow.setter
|
|
228
|
-
def imcp_unreachable_allow(self, value: Optional[pulumi.Input[
|
|
241
|
+
def imcp_unreachable_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
229
242
|
pulumi.set(self, "imcp_unreachable_allow", value)
|
|
230
243
|
|
|
231
|
-
@property
|
|
244
|
+
@_builtins.property
|
|
232
245
|
@pulumi.getter
|
|
233
246
|
def loggings(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]:
|
|
234
247
|
return pulumi.get(self, "loggings")
|
|
@@ -237,177 +250,193 @@ class SecurityPolicyArgs:
|
|
|
237
250
|
def loggings(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]):
|
|
238
251
|
pulumi.set(self, "loggings", value)
|
|
239
252
|
|
|
240
|
-
@property
|
|
253
|
+
@_builtins.property
|
|
241
254
|
@pulumi.getter(name="matchStatisticsPerFilter")
|
|
242
|
-
def match_statistics_per_filter(self) -> Optional[pulumi.Input[
|
|
255
|
+
def match_statistics_per_filter(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
243
256
|
"""
|
|
244
|
-
Match Statistics per-filter
|
|
257
|
+
Match Statistics per-filter
|
|
258
|
+
- Choices: `on`, `off`
|
|
245
259
|
"""
|
|
246
260
|
return pulumi.get(self, "match_statistics_per_filter")
|
|
247
261
|
|
|
248
262
|
@match_statistics_per_filter.setter
|
|
249
|
-
def match_statistics_per_filter(self, value: Optional[pulumi.Input[
|
|
263
|
+
def match_statistics_per_filter(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
250
264
|
pulumi.set(self, "match_statistics_per_filter", value)
|
|
251
265
|
|
|
252
|
-
@property
|
|
266
|
+
@_builtins.property
|
|
253
267
|
@pulumi.getter(name="maxIncompleteIcmpLimit")
|
|
254
|
-
def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[
|
|
268
|
+
def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
255
269
|
"""
|
|
256
270
|
Max Incomplete ICMP Limit
|
|
257
271
|
"""
|
|
258
272
|
return pulumi.get(self, "max_incomplete_icmp_limit")
|
|
259
273
|
|
|
260
274
|
@max_incomplete_icmp_limit.setter
|
|
261
|
-
def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[
|
|
275
|
+
def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
262
276
|
pulumi.set(self, "max_incomplete_icmp_limit", value)
|
|
263
277
|
|
|
264
|
-
@property
|
|
278
|
+
@_builtins.property
|
|
265
279
|
@pulumi.getter(name="maxIncompleteTcpLimit")
|
|
266
|
-
def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[
|
|
280
|
+
def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
267
281
|
"""
|
|
268
282
|
Max Incomplete TCP Limit
|
|
269
283
|
"""
|
|
270
284
|
return pulumi.get(self, "max_incomplete_tcp_limit")
|
|
271
285
|
|
|
272
286
|
@max_incomplete_tcp_limit.setter
|
|
273
|
-
def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[
|
|
287
|
+
def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
274
288
|
pulumi.set(self, "max_incomplete_tcp_limit", value)
|
|
275
289
|
|
|
276
|
-
@property
|
|
290
|
+
@_builtins.property
|
|
277
291
|
@pulumi.getter(name="maxIncompleteUdpLimit")
|
|
278
|
-
def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[
|
|
292
|
+
def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
279
293
|
"""
|
|
280
294
|
Max Incomplete UDP Limit
|
|
281
295
|
"""
|
|
282
296
|
return pulumi.get(self, "max_incomplete_udp_limit")
|
|
283
297
|
|
|
284
298
|
@max_incomplete_udp_limit.setter
|
|
285
|
-
def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[
|
|
299
|
+
def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
286
300
|
pulumi.set(self, "max_incomplete_udp_limit", value)
|
|
287
301
|
|
|
288
|
-
@property
|
|
302
|
+
@_builtins.property
|
|
289
303
|
@pulumi.getter
|
|
290
|
-
def mode(self) -> Optional[pulumi.Input[
|
|
304
|
+
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
291
305
|
"""
|
|
292
|
-
The policy mode
|
|
306
|
+
The policy mode
|
|
307
|
+
- Choices: `security`, `unified`
|
|
308
|
+
- Default value: `security`
|
|
293
309
|
"""
|
|
294
310
|
return pulumi.get(self, "mode")
|
|
295
311
|
|
|
296
312
|
@mode.setter
|
|
297
|
-
def mode(self, value: Optional[pulumi.Input[
|
|
313
|
+
def mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
298
314
|
pulumi.set(self, "mode", value)
|
|
299
315
|
|
|
300
|
-
@property
|
|
316
|
+
@_builtins.property
|
|
301
317
|
@pulumi.getter
|
|
302
|
-
def name(self) -> Optional[pulumi.Input[
|
|
318
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
303
319
|
"""
|
|
304
320
|
The name of the security policy
|
|
305
321
|
"""
|
|
306
322
|
return pulumi.get(self, "name")
|
|
307
323
|
|
|
308
324
|
@name.setter
|
|
309
|
-
def name(self, value: Optional[pulumi.Input[
|
|
325
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
310
326
|
pulumi.set(self, "name", value)
|
|
311
327
|
|
|
312
|
-
@property
|
|
328
|
+
@_builtins.property
|
|
313
329
|
@pulumi.getter(name="sessionReclassifyAllow")
|
|
314
|
-
def session_reclassify_allow(self) -> Optional[pulumi.Input[
|
|
330
|
+
def session_reclassify_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
315
331
|
"""
|
|
316
332
|
Session Reclassify Allow
|
|
333
|
+
- Choices: `on`, `off`
|
|
317
334
|
"""
|
|
318
335
|
return pulumi.get(self, "session_reclassify_allow")
|
|
319
336
|
|
|
320
337
|
@session_reclassify_allow.setter
|
|
321
|
-
def session_reclassify_allow(self, value: Optional[pulumi.Input[
|
|
338
|
+
def session_reclassify_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
322
339
|
pulumi.set(self, "session_reclassify_allow", value)
|
|
323
340
|
|
|
324
|
-
@property
|
|
341
|
+
@_builtins.property
|
|
325
342
|
@pulumi.getter(name="tcpSynFloodLimit")
|
|
326
|
-
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[
|
|
343
|
+
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
327
344
|
"""
|
|
328
345
|
TCP SYN Flood Limit, value from 1 to 4294967295
|
|
329
346
|
"""
|
|
330
347
|
return pulumi.get(self, "tcp_syn_flood_limit")
|
|
331
348
|
|
|
332
349
|
@tcp_syn_flood_limit.setter
|
|
333
|
-
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[
|
|
350
|
+
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
334
351
|
pulumi.set(self, "tcp_syn_flood_limit", value)
|
|
335
352
|
|
|
336
|
-
@property
|
|
353
|
+
@_builtins.property
|
|
337
354
|
@pulumi.getter(name="unifiedLogging")
|
|
338
|
-
def unified_logging(self) -> Optional[pulumi.Input[
|
|
355
|
+
def unified_logging(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
339
356
|
"""
|
|
340
357
|
Unified Logging
|
|
358
|
+
- Choices: `on`, `off`
|
|
341
359
|
"""
|
|
342
360
|
return pulumi.get(self, "unified_logging")
|
|
343
361
|
|
|
344
362
|
@unified_logging.setter
|
|
345
|
-
def unified_logging(self, value: Optional[pulumi.Input[
|
|
363
|
+
def unified_logging(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
346
364
|
pulumi.set(self, "unified_logging", value)
|
|
347
365
|
|
|
348
|
-
@property
|
|
366
|
+
@_builtins.property
|
|
349
367
|
@pulumi.getter(name="useCase")
|
|
350
|
-
def use_case(self) -> Optional[pulumi.Input[
|
|
368
|
+
def use_case(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
351
369
|
"""
|
|
352
|
-
The use case of the security policy
|
|
353
|
-
|
|
370
|
+
The use case of the security policy
|
|
371
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
372
|
+
- Default value: `custom`
|
|
354
373
|
"""
|
|
355
374
|
return pulumi.get(self, "use_case")
|
|
356
375
|
|
|
357
376
|
@use_case.setter
|
|
358
|
-
def use_case(self, value: Optional[pulumi.Input[
|
|
377
|
+
def use_case(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
359
378
|
pulumi.set(self, "use_case", value)
|
|
360
379
|
|
|
361
380
|
|
|
362
381
|
@pulumi.input_type
|
|
363
382
|
class _SecurityPolicyState:
|
|
364
383
|
def __init__(__self__, *,
|
|
365
|
-
audit_trail: Optional[pulumi.Input[
|
|
384
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
366
385
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]] = None,
|
|
367
|
-
description: Optional[pulumi.Input[
|
|
368
|
-
direct_internet_applications: Optional[pulumi.Input[
|
|
369
|
-
failure_mode: Optional[pulumi.Input[
|
|
370
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[
|
|
371
|
-
high_speed_logging_server_port: Optional[pulumi.Input[
|
|
372
|
-
high_speed_logging_server_source_interface: Optional[pulumi.Input[
|
|
373
|
-
high_speed_logging_vpn: Optional[pulumi.Input[
|
|
374
|
-
imcp_unreachable_allow: Optional[pulumi.Input[
|
|
386
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
387
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
388
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
389
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
390
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
391
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
392
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
393
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
375
394
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]] = None,
|
|
376
|
-
match_statistics_per_filter: Optional[pulumi.Input[
|
|
377
|
-
max_incomplete_icmp_limit: Optional[pulumi.Input[
|
|
378
|
-
max_incomplete_tcp_limit: Optional[pulumi.Input[
|
|
379
|
-
max_incomplete_udp_limit: Optional[pulumi.Input[
|
|
380
|
-
mode: Optional[pulumi.Input[
|
|
381
|
-
name: Optional[pulumi.Input[
|
|
382
|
-
session_reclassify_allow: Optional[pulumi.Input[
|
|
383
|
-
tcp_syn_flood_limit: Optional[pulumi.Input[
|
|
384
|
-
unified_logging: Optional[pulumi.Input[
|
|
385
|
-
use_case: Optional[pulumi.Input[
|
|
386
|
-
version: Optional[pulumi.Input[
|
|
395
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
396
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
397
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
398
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
399
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
400
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
401
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
402
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
403
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
404
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None,
|
|
405
|
+
version: Optional[pulumi.Input[_builtins.int]] = None):
|
|
387
406
|
"""
|
|
388
407
|
Input properties used for looking up and filtering SecurityPolicy resources.
|
|
389
|
-
:param pulumi.Input[
|
|
408
|
+
:param pulumi.Input[_builtins.str] audit_trail: Audit trail
|
|
409
|
+
- Choices: `on`, `off`
|
|
390
410
|
:param pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]] definitions: List of policy definitions
|
|
391
|
-
:param pulumi.Input[
|
|
392
|
-
:param pulumi.Input[
|
|
393
|
-
|
|
394
|
-
:param pulumi.Input[
|
|
395
|
-
|
|
396
|
-
:param pulumi.Input[
|
|
397
|
-
:param pulumi.Input[
|
|
398
|
-
:param pulumi.Input[
|
|
399
|
-
:param pulumi.Input[
|
|
400
|
-
:param pulumi.Input[
|
|
401
|
-
|
|
402
|
-
:param pulumi.Input[
|
|
403
|
-
|
|
404
|
-
:param pulumi.Input[
|
|
405
|
-
:param pulumi.Input[
|
|
406
|
-
:param pulumi.Input[
|
|
407
|
-
:param pulumi.Input[
|
|
408
|
-
|
|
409
|
-
|
|
410
|
-
:param pulumi.Input[
|
|
411
|
+
:param pulumi.Input[_builtins.str] description: The description of the security policy
|
|
412
|
+
:param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
413
|
+
- Choices: `allow`, `deny`
|
|
414
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
415
|
+
- Choices: `open`, `close`
|
|
416
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
417
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
418
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
419
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
420
|
+
:param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
421
|
+
- Choices: `on`, `off`
|
|
422
|
+
:param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
|
|
423
|
+
- Choices: `on`, `off`
|
|
424
|
+
:param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
425
|
+
:param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
426
|
+
:param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
427
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
428
|
+
- Choices: `security`, `unified`
|
|
429
|
+
- Default value: `security`
|
|
430
|
+
:param pulumi.Input[_builtins.str] name: The name of the security policy
|
|
431
|
+
:param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
|
|
432
|
+
- Choices: `on`, `off`
|
|
433
|
+
:param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
434
|
+
:param pulumi.Input[_builtins.str] unified_logging: Unified Logging
|
|
435
|
+
- Choices: `on`, `off`
|
|
436
|
+
:param pulumi.Input[_builtins.str] use_case: The use case of the security policy
|
|
437
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
438
|
+
- Default value: `custom`
|
|
439
|
+
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
411
440
|
"""
|
|
412
441
|
if audit_trail is not None:
|
|
413
442
|
pulumi.set(__self__, "audit_trail", audit_trail)
|
|
@@ -454,19 +483,20 @@ class _SecurityPolicyState:
|
|
|
454
483
|
if version is not None:
|
|
455
484
|
pulumi.set(__self__, "version", version)
|
|
456
485
|
|
|
457
|
-
@property
|
|
486
|
+
@_builtins.property
|
|
458
487
|
@pulumi.getter(name="auditTrail")
|
|
459
|
-
def audit_trail(self) -> Optional[pulumi.Input[
|
|
488
|
+
def audit_trail(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
460
489
|
"""
|
|
461
|
-
Audit trail
|
|
490
|
+
Audit trail
|
|
491
|
+
- Choices: `on`, `off`
|
|
462
492
|
"""
|
|
463
493
|
return pulumi.get(self, "audit_trail")
|
|
464
494
|
|
|
465
495
|
@audit_trail.setter
|
|
466
|
-
def audit_trail(self, value: Optional[pulumi.Input[
|
|
496
|
+
def audit_trail(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
467
497
|
pulumi.set(self, "audit_trail", value)
|
|
468
498
|
|
|
469
|
-
@property
|
|
499
|
+
@_builtins.property
|
|
470
500
|
@pulumi.getter
|
|
471
501
|
def definitions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]]:
|
|
472
502
|
"""
|
|
@@ -478,103 +508,106 @@ class _SecurityPolicyState:
|
|
|
478
508
|
def definitions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]]):
|
|
479
509
|
pulumi.set(self, "definitions", value)
|
|
480
510
|
|
|
481
|
-
@property
|
|
511
|
+
@_builtins.property
|
|
482
512
|
@pulumi.getter
|
|
483
|
-
def description(self) -> Optional[pulumi.Input[
|
|
513
|
+
def description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
484
514
|
"""
|
|
485
515
|
The description of the security policy
|
|
486
516
|
"""
|
|
487
517
|
return pulumi.get(self, "description")
|
|
488
518
|
|
|
489
519
|
@description.setter
|
|
490
|
-
def description(self, value: Optional[pulumi.Input[
|
|
520
|
+
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
491
521
|
pulumi.set(self, "description", value)
|
|
492
522
|
|
|
493
|
-
@property
|
|
523
|
+
@_builtins.property
|
|
494
524
|
@pulumi.getter(name="directInternetApplications")
|
|
495
|
-
def direct_internet_applications(self) -> Optional[pulumi.Input[
|
|
525
|
+
def direct_internet_applications(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
496
526
|
"""
|
|
497
|
-
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
527
|
+
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
528
|
+
- Choices: `allow`, `deny`
|
|
498
529
|
"""
|
|
499
530
|
return pulumi.get(self, "direct_internet_applications")
|
|
500
531
|
|
|
501
532
|
@direct_internet_applications.setter
|
|
502
|
-
def direct_internet_applications(self, value: Optional[pulumi.Input[
|
|
533
|
+
def direct_internet_applications(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
503
534
|
pulumi.set(self, "direct_internet_applications", value)
|
|
504
535
|
|
|
505
|
-
@property
|
|
536
|
+
@_builtins.property
|
|
506
537
|
@pulumi.getter(name="failureMode")
|
|
507
|
-
def failure_mode(self) -> Optional[pulumi.Input[
|
|
538
|
+
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
508
539
|
"""
|
|
509
|
-
Failure mode
|
|
540
|
+
Failure mode
|
|
541
|
+
- Choices: `open`, `close`
|
|
510
542
|
"""
|
|
511
543
|
return pulumi.get(self, "failure_mode")
|
|
512
544
|
|
|
513
545
|
@failure_mode.setter
|
|
514
|
-
def failure_mode(self, value: Optional[pulumi.Input[
|
|
546
|
+
def failure_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
515
547
|
pulumi.set(self, "failure_mode", value)
|
|
516
548
|
|
|
517
|
-
@property
|
|
549
|
+
@_builtins.property
|
|
518
550
|
@pulumi.getter(name="highSpeedLoggingServerIp")
|
|
519
|
-
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[
|
|
551
|
+
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
520
552
|
"""
|
|
521
553
|
High Speed Logging Server IP
|
|
522
554
|
"""
|
|
523
555
|
return pulumi.get(self, "high_speed_logging_server_ip")
|
|
524
556
|
|
|
525
557
|
@high_speed_logging_server_ip.setter
|
|
526
|
-
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[
|
|
558
|
+
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
527
559
|
pulumi.set(self, "high_speed_logging_server_ip", value)
|
|
528
560
|
|
|
529
|
-
@property
|
|
561
|
+
@_builtins.property
|
|
530
562
|
@pulumi.getter(name="highSpeedLoggingServerPort")
|
|
531
|
-
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[
|
|
563
|
+
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
532
564
|
"""
|
|
533
565
|
High Speed Logging Port
|
|
534
566
|
"""
|
|
535
567
|
return pulumi.get(self, "high_speed_logging_server_port")
|
|
536
568
|
|
|
537
569
|
@high_speed_logging_server_port.setter
|
|
538
|
-
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[
|
|
570
|
+
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
539
571
|
pulumi.set(self, "high_speed_logging_server_port", value)
|
|
540
572
|
|
|
541
|
-
@property
|
|
573
|
+
@_builtins.property
|
|
542
574
|
@pulumi.getter(name="highSpeedLoggingServerSourceInterface")
|
|
543
|
-
def high_speed_logging_server_source_interface(self) -> Optional[pulumi.Input[
|
|
575
|
+
def high_speed_logging_server_source_interface(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
544
576
|
"""
|
|
545
577
|
High Speed Logging Source Interface
|
|
546
578
|
"""
|
|
547
579
|
return pulumi.get(self, "high_speed_logging_server_source_interface")
|
|
548
580
|
|
|
549
581
|
@high_speed_logging_server_source_interface.setter
|
|
550
|
-
def high_speed_logging_server_source_interface(self, value: Optional[pulumi.Input[
|
|
582
|
+
def high_speed_logging_server_source_interface(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
551
583
|
pulumi.set(self, "high_speed_logging_server_source_interface", value)
|
|
552
584
|
|
|
553
|
-
@property
|
|
585
|
+
@_builtins.property
|
|
554
586
|
@pulumi.getter(name="highSpeedLoggingVpn")
|
|
555
|
-
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[
|
|
587
|
+
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
556
588
|
"""
|
|
557
589
|
High Speed Logging VPN
|
|
558
590
|
"""
|
|
559
591
|
return pulumi.get(self, "high_speed_logging_vpn")
|
|
560
592
|
|
|
561
593
|
@high_speed_logging_vpn.setter
|
|
562
|
-
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[
|
|
594
|
+
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
563
595
|
pulumi.set(self, "high_speed_logging_vpn", value)
|
|
564
596
|
|
|
565
|
-
@property
|
|
597
|
+
@_builtins.property
|
|
566
598
|
@pulumi.getter(name="imcpUnreachableAllow")
|
|
567
|
-
def imcp_unreachable_allow(self) -> Optional[pulumi.Input[
|
|
599
|
+
def imcp_unreachable_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
568
600
|
"""
|
|
569
601
|
ICMP Unreachable Allow
|
|
602
|
+
- Choices: `on`, `off`
|
|
570
603
|
"""
|
|
571
604
|
return pulumi.get(self, "imcp_unreachable_allow")
|
|
572
605
|
|
|
573
606
|
@imcp_unreachable_allow.setter
|
|
574
|
-
def imcp_unreachable_allow(self, value: Optional[pulumi.Input[
|
|
607
|
+
def imcp_unreachable_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
575
608
|
pulumi.set(self, "imcp_unreachable_allow", value)
|
|
576
609
|
|
|
577
|
-
@property
|
|
610
|
+
@_builtins.property
|
|
578
611
|
@pulumi.getter
|
|
579
612
|
def loggings(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]:
|
|
580
613
|
return pulumi.get(self, "loggings")
|
|
@@ -583,137 +616,143 @@ class _SecurityPolicyState:
|
|
|
583
616
|
def loggings(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]):
|
|
584
617
|
pulumi.set(self, "loggings", value)
|
|
585
618
|
|
|
586
|
-
@property
|
|
619
|
+
@_builtins.property
|
|
587
620
|
@pulumi.getter(name="matchStatisticsPerFilter")
|
|
588
|
-
def match_statistics_per_filter(self) -> Optional[pulumi.Input[
|
|
621
|
+
def match_statistics_per_filter(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
589
622
|
"""
|
|
590
|
-
Match Statistics per-filter
|
|
623
|
+
Match Statistics per-filter
|
|
624
|
+
- Choices: `on`, `off`
|
|
591
625
|
"""
|
|
592
626
|
return pulumi.get(self, "match_statistics_per_filter")
|
|
593
627
|
|
|
594
628
|
@match_statistics_per_filter.setter
|
|
595
|
-
def match_statistics_per_filter(self, value: Optional[pulumi.Input[
|
|
629
|
+
def match_statistics_per_filter(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
596
630
|
pulumi.set(self, "match_statistics_per_filter", value)
|
|
597
631
|
|
|
598
|
-
@property
|
|
632
|
+
@_builtins.property
|
|
599
633
|
@pulumi.getter(name="maxIncompleteIcmpLimit")
|
|
600
|
-
def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[
|
|
634
|
+
def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
601
635
|
"""
|
|
602
636
|
Max Incomplete ICMP Limit
|
|
603
637
|
"""
|
|
604
638
|
return pulumi.get(self, "max_incomplete_icmp_limit")
|
|
605
639
|
|
|
606
640
|
@max_incomplete_icmp_limit.setter
|
|
607
|
-
def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[
|
|
641
|
+
def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
608
642
|
pulumi.set(self, "max_incomplete_icmp_limit", value)
|
|
609
643
|
|
|
610
|
-
@property
|
|
644
|
+
@_builtins.property
|
|
611
645
|
@pulumi.getter(name="maxIncompleteTcpLimit")
|
|
612
|
-
def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[
|
|
646
|
+
def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
613
647
|
"""
|
|
614
648
|
Max Incomplete TCP Limit
|
|
615
649
|
"""
|
|
616
650
|
return pulumi.get(self, "max_incomplete_tcp_limit")
|
|
617
651
|
|
|
618
652
|
@max_incomplete_tcp_limit.setter
|
|
619
|
-
def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[
|
|
653
|
+
def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
620
654
|
pulumi.set(self, "max_incomplete_tcp_limit", value)
|
|
621
655
|
|
|
622
|
-
@property
|
|
656
|
+
@_builtins.property
|
|
623
657
|
@pulumi.getter(name="maxIncompleteUdpLimit")
|
|
624
|
-
def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[
|
|
658
|
+
def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
625
659
|
"""
|
|
626
660
|
Max Incomplete UDP Limit
|
|
627
661
|
"""
|
|
628
662
|
return pulumi.get(self, "max_incomplete_udp_limit")
|
|
629
663
|
|
|
630
664
|
@max_incomplete_udp_limit.setter
|
|
631
|
-
def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[
|
|
665
|
+
def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
632
666
|
pulumi.set(self, "max_incomplete_udp_limit", value)
|
|
633
667
|
|
|
634
|
-
@property
|
|
668
|
+
@_builtins.property
|
|
635
669
|
@pulumi.getter
|
|
636
|
-
def mode(self) -> Optional[pulumi.Input[
|
|
670
|
+
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
637
671
|
"""
|
|
638
|
-
The policy mode
|
|
672
|
+
The policy mode
|
|
673
|
+
- Choices: `security`, `unified`
|
|
674
|
+
- Default value: `security`
|
|
639
675
|
"""
|
|
640
676
|
return pulumi.get(self, "mode")
|
|
641
677
|
|
|
642
678
|
@mode.setter
|
|
643
|
-
def mode(self, value: Optional[pulumi.Input[
|
|
679
|
+
def mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
644
680
|
pulumi.set(self, "mode", value)
|
|
645
681
|
|
|
646
|
-
@property
|
|
682
|
+
@_builtins.property
|
|
647
683
|
@pulumi.getter
|
|
648
|
-
def name(self) -> Optional[pulumi.Input[
|
|
684
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
649
685
|
"""
|
|
650
686
|
The name of the security policy
|
|
651
687
|
"""
|
|
652
688
|
return pulumi.get(self, "name")
|
|
653
689
|
|
|
654
690
|
@name.setter
|
|
655
|
-
def name(self, value: Optional[pulumi.Input[
|
|
691
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
656
692
|
pulumi.set(self, "name", value)
|
|
657
693
|
|
|
658
|
-
@property
|
|
694
|
+
@_builtins.property
|
|
659
695
|
@pulumi.getter(name="sessionReclassifyAllow")
|
|
660
|
-
def session_reclassify_allow(self) -> Optional[pulumi.Input[
|
|
696
|
+
def session_reclassify_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
661
697
|
"""
|
|
662
698
|
Session Reclassify Allow
|
|
699
|
+
- Choices: `on`, `off`
|
|
663
700
|
"""
|
|
664
701
|
return pulumi.get(self, "session_reclassify_allow")
|
|
665
702
|
|
|
666
703
|
@session_reclassify_allow.setter
|
|
667
|
-
def session_reclassify_allow(self, value: Optional[pulumi.Input[
|
|
704
|
+
def session_reclassify_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
668
705
|
pulumi.set(self, "session_reclassify_allow", value)
|
|
669
706
|
|
|
670
|
-
@property
|
|
707
|
+
@_builtins.property
|
|
671
708
|
@pulumi.getter(name="tcpSynFloodLimit")
|
|
672
|
-
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[
|
|
709
|
+
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
673
710
|
"""
|
|
674
711
|
TCP SYN Flood Limit, value from 1 to 4294967295
|
|
675
712
|
"""
|
|
676
713
|
return pulumi.get(self, "tcp_syn_flood_limit")
|
|
677
714
|
|
|
678
715
|
@tcp_syn_flood_limit.setter
|
|
679
|
-
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[
|
|
716
|
+
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
680
717
|
pulumi.set(self, "tcp_syn_flood_limit", value)
|
|
681
718
|
|
|
682
|
-
@property
|
|
719
|
+
@_builtins.property
|
|
683
720
|
@pulumi.getter(name="unifiedLogging")
|
|
684
|
-
def unified_logging(self) -> Optional[pulumi.Input[
|
|
721
|
+
def unified_logging(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
685
722
|
"""
|
|
686
723
|
Unified Logging
|
|
724
|
+
- Choices: `on`, `off`
|
|
687
725
|
"""
|
|
688
726
|
return pulumi.get(self, "unified_logging")
|
|
689
727
|
|
|
690
728
|
@unified_logging.setter
|
|
691
|
-
def unified_logging(self, value: Optional[pulumi.Input[
|
|
729
|
+
def unified_logging(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
692
730
|
pulumi.set(self, "unified_logging", value)
|
|
693
731
|
|
|
694
|
-
@property
|
|
732
|
+
@_builtins.property
|
|
695
733
|
@pulumi.getter(name="useCase")
|
|
696
|
-
def use_case(self) -> Optional[pulumi.Input[
|
|
734
|
+
def use_case(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
697
735
|
"""
|
|
698
|
-
The use case of the security policy
|
|
699
|
-
|
|
736
|
+
The use case of the security policy
|
|
737
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
738
|
+
- Default value: `custom`
|
|
700
739
|
"""
|
|
701
740
|
return pulumi.get(self, "use_case")
|
|
702
741
|
|
|
703
742
|
@use_case.setter
|
|
704
|
-
def use_case(self, value: Optional[pulumi.Input[
|
|
743
|
+
def use_case(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
705
744
|
pulumi.set(self, "use_case", value)
|
|
706
745
|
|
|
707
|
-
@property
|
|
746
|
+
@_builtins.property
|
|
708
747
|
@pulumi.getter
|
|
709
|
-
def version(self) -> Optional[pulumi.Input[
|
|
748
|
+
def version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
710
749
|
"""
|
|
711
750
|
The version of the object
|
|
712
751
|
"""
|
|
713
752
|
return pulumi.get(self, "version")
|
|
714
753
|
|
|
715
754
|
@version.setter
|
|
716
|
-
def version(self, value: Optional[pulumi.Input[
|
|
755
|
+
def version(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
717
756
|
pulumi.set(self, "version", value)
|
|
718
757
|
|
|
719
758
|
|
|
@@ -723,60 +762,94 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
723
762
|
def __init__(__self__,
|
|
724
763
|
resource_name: str,
|
|
725
764
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
726
|
-
audit_trail: Optional[pulumi.Input[
|
|
765
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
727
766
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]]] = None,
|
|
728
|
-
description: Optional[pulumi.Input[
|
|
729
|
-
direct_internet_applications: Optional[pulumi.Input[
|
|
730
|
-
failure_mode: Optional[pulumi.Input[
|
|
731
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[
|
|
732
|
-
high_speed_logging_server_port: Optional[pulumi.Input[
|
|
733
|
-
high_speed_logging_server_source_interface: Optional[pulumi.Input[
|
|
734
|
-
high_speed_logging_vpn: Optional[pulumi.Input[
|
|
735
|
-
imcp_unreachable_allow: Optional[pulumi.Input[
|
|
767
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
768
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
769
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
770
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
771
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
772
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
773
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
774
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
736
775
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
|
|
737
|
-
match_statistics_per_filter: Optional[pulumi.Input[
|
|
738
|
-
max_incomplete_icmp_limit: Optional[pulumi.Input[
|
|
739
|
-
max_incomplete_tcp_limit: Optional[pulumi.Input[
|
|
740
|
-
max_incomplete_udp_limit: Optional[pulumi.Input[
|
|
741
|
-
mode: Optional[pulumi.Input[
|
|
742
|
-
name: Optional[pulumi.Input[
|
|
743
|
-
session_reclassify_allow: Optional[pulumi.Input[
|
|
744
|
-
tcp_syn_flood_limit: Optional[pulumi.Input[
|
|
745
|
-
unified_logging: Optional[pulumi.Input[
|
|
746
|
-
use_case: Optional[pulumi.Input[
|
|
776
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
777
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
778
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
779
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
780
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
781
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
782
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
783
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
784
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
785
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None,
|
|
747
786
|
__props__=None):
|
|
748
787
|
"""
|
|
749
788
|
This resource can manage a Security Policy .
|
|
750
789
|
|
|
790
|
+
## Example Usage
|
|
791
|
+
|
|
792
|
+
```python
|
|
793
|
+
import pulumi
|
|
794
|
+
import pulumi_sdwan as sdwan
|
|
795
|
+
|
|
796
|
+
example = sdwan.SecurityPolicy("example",
|
|
797
|
+
name="Example",
|
|
798
|
+
description="Example",
|
|
799
|
+
mode="security",
|
|
800
|
+
use_case="custom",
|
|
801
|
+
definitions=[{
|
|
802
|
+
"id": "7d299c34-981c-4fb3-9167-6be44ab1691f",
|
|
803
|
+
"type": "urlFiltering",
|
|
804
|
+
}],
|
|
805
|
+
failure_mode="close",
|
|
806
|
+
loggings=[{
|
|
807
|
+
"external_syslog_server_ip": "10.0.0.1",
|
|
808
|
+
"external_syslog_server_vpn": "123",
|
|
809
|
+
}])
|
|
810
|
+
```
|
|
811
|
+
|
|
751
812
|
## Import
|
|
752
813
|
|
|
814
|
+
The `pulumi import` command can be used, for example:
|
|
815
|
+
|
|
753
816
|
```sh
|
|
754
817
|
$ pulumi import sdwan:index/securityPolicy:SecurityPolicy example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
755
818
|
```
|
|
756
819
|
|
|
757
820
|
:param str resource_name: The name of the resource.
|
|
758
821
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
759
|
-
:param pulumi.Input[
|
|
822
|
+
:param pulumi.Input[_builtins.str] audit_trail: Audit trail
|
|
823
|
+
- Choices: `on`, `off`
|
|
760
824
|
:param pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]] definitions: List of policy definitions
|
|
761
|
-
:param pulumi.Input[
|
|
762
|
-
:param pulumi.Input[
|
|
763
|
-
|
|
764
|
-
:param pulumi.Input[
|
|
765
|
-
|
|
766
|
-
:param pulumi.Input[
|
|
767
|
-
:param pulumi.Input[
|
|
768
|
-
:param pulumi.Input[
|
|
769
|
-
:param pulumi.Input[
|
|
770
|
-
:param pulumi.Input[
|
|
771
|
-
|
|
772
|
-
:param pulumi.Input[
|
|
773
|
-
|
|
774
|
-
:param pulumi.Input[
|
|
775
|
-
:param pulumi.Input[
|
|
776
|
-
:param pulumi.Input[
|
|
777
|
-
:param pulumi.Input[
|
|
778
|
-
|
|
779
|
-
|
|
825
|
+
:param pulumi.Input[_builtins.str] description: The description of the security policy
|
|
826
|
+
:param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
827
|
+
- Choices: `allow`, `deny`
|
|
828
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
829
|
+
- Choices: `open`, `close`
|
|
830
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
831
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
832
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
833
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
834
|
+
:param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
835
|
+
- Choices: `on`, `off`
|
|
836
|
+
:param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
|
|
837
|
+
- Choices: `on`, `off`
|
|
838
|
+
:param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
839
|
+
:param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
840
|
+
:param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
841
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
842
|
+
- Choices: `security`, `unified`
|
|
843
|
+
- Default value: `security`
|
|
844
|
+
:param pulumi.Input[_builtins.str] name: The name of the security policy
|
|
845
|
+
:param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
|
|
846
|
+
- Choices: `on`, `off`
|
|
847
|
+
:param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
848
|
+
:param pulumi.Input[_builtins.str] unified_logging: Unified Logging
|
|
849
|
+
- Choices: `on`, `off`
|
|
850
|
+
:param pulumi.Input[_builtins.str] use_case: The use case of the security policy
|
|
851
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
852
|
+
- Default value: `custom`
|
|
780
853
|
"""
|
|
781
854
|
...
|
|
782
855
|
@overload
|
|
@@ -787,8 +860,32 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
787
860
|
"""
|
|
788
861
|
This resource can manage a Security Policy .
|
|
789
862
|
|
|
863
|
+
## Example Usage
|
|
864
|
+
|
|
865
|
+
```python
|
|
866
|
+
import pulumi
|
|
867
|
+
import pulumi_sdwan as sdwan
|
|
868
|
+
|
|
869
|
+
example = sdwan.SecurityPolicy("example",
|
|
870
|
+
name="Example",
|
|
871
|
+
description="Example",
|
|
872
|
+
mode="security",
|
|
873
|
+
use_case="custom",
|
|
874
|
+
definitions=[{
|
|
875
|
+
"id": "7d299c34-981c-4fb3-9167-6be44ab1691f",
|
|
876
|
+
"type": "urlFiltering",
|
|
877
|
+
}],
|
|
878
|
+
failure_mode="close",
|
|
879
|
+
loggings=[{
|
|
880
|
+
"external_syslog_server_ip": "10.0.0.1",
|
|
881
|
+
"external_syslog_server_vpn": "123",
|
|
882
|
+
}])
|
|
883
|
+
```
|
|
884
|
+
|
|
790
885
|
## Import
|
|
791
886
|
|
|
887
|
+
The `pulumi import` command can be used, for example:
|
|
888
|
+
|
|
792
889
|
```sh
|
|
793
890
|
$ pulumi import sdwan:index/securityPolicy:SecurityPolicy example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
794
891
|
```
|
|
@@ -808,27 +905,27 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
808
905
|
def _internal_init(__self__,
|
|
809
906
|
resource_name: str,
|
|
810
907
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
811
|
-
audit_trail: Optional[pulumi.Input[
|
|
908
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
812
909
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]]] = None,
|
|
813
|
-
description: Optional[pulumi.Input[
|
|
814
|
-
direct_internet_applications: Optional[pulumi.Input[
|
|
815
|
-
failure_mode: Optional[pulumi.Input[
|
|
816
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[
|
|
817
|
-
high_speed_logging_server_port: Optional[pulumi.Input[
|
|
818
|
-
high_speed_logging_server_source_interface: Optional[pulumi.Input[
|
|
819
|
-
high_speed_logging_vpn: Optional[pulumi.Input[
|
|
820
|
-
imcp_unreachable_allow: Optional[pulumi.Input[
|
|
910
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
911
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
912
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
913
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
914
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
915
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
916
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
917
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
821
918
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
|
|
822
|
-
match_statistics_per_filter: Optional[pulumi.Input[
|
|
823
|
-
max_incomplete_icmp_limit: Optional[pulumi.Input[
|
|
824
|
-
max_incomplete_tcp_limit: Optional[pulumi.Input[
|
|
825
|
-
max_incomplete_udp_limit: Optional[pulumi.Input[
|
|
826
|
-
mode: Optional[pulumi.Input[
|
|
827
|
-
name: Optional[pulumi.Input[
|
|
828
|
-
session_reclassify_allow: Optional[pulumi.Input[
|
|
829
|
-
tcp_syn_flood_limit: Optional[pulumi.Input[
|
|
830
|
-
unified_logging: Optional[pulumi.Input[
|
|
831
|
-
use_case: Optional[pulumi.Input[
|
|
919
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
920
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
921
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
922
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
923
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
924
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
925
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
926
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
927
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
928
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None,
|
|
832
929
|
__props__=None):
|
|
833
930
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
834
931
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -874,28 +971,28 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
874
971
|
def get(resource_name: str,
|
|
875
972
|
id: pulumi.Input[str],
|
|
876
973
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
877
|
-
audit_trail: Optional[pulumi.Input[
|
|
974
|
+
audit_trail: Optional[pulumi.Input[_builtins.str]] = None,
|
|
878
975
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]]] = None,
|
|
879
|
-
description: Optional[pulumi.Input[
|
|
880
|
-
direct_internet_applications: Optional[pulumi.Input[
|
|
881
|
-
failure_mode: Optional[pulumi.Input[
|
|
882
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[
|
|
883
|
-
high_speed_logging_server_port: Optional[pulumi.Input[
|
|
884
|
-
high_speed_logging_server_source_interface: Optional[pulumi.Input[
|
|
885
|
-
high_speed_logging_vpn: Optional[pulumi.Input[
|
|
886
|
-
imcp_unreachable_allow: Optional[pulumi.Input[
|
|
976
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
977
|
+
direct_internet_applications: Optional[pulumi.Input[_builtins.str]] = None,
|
|
978
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
979
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[_builtins.str]] = None,
|
|
980
|
+
high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
|
|
981
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
|
|
982
|
+
high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
983
|
+
imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
887
984
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
|
|
888
|
-
match_statistics_per_filter: Optional[pulumi.Input[
|
|
889
|
-
max_incomplete_icmp_limit: Optional[pulumi.Input[
|
|
890
|
-
max_incomplete_tcp_limit: Optional[pulumi.Input[
|
|
891
|
-
max_incomplete_udp_limit: Optional[pulumi.Input[
|
|
892
|
-
mode: Optional[pulumi.Input[
|
|
893
|
-
name: Optional[pulumi.Input[
|
|
894
|
-
session_reclassify_allow: Optional[pulumi.Input[
|
|
895
|
-
tcp_syn_flood_limit: Optional[pulumi.Input[
|
|
896
|
-
unified_logging: Optional[pulumi.Input[
|
|
897
|
-
use_case: Optional[pulumi.Input[
|
|
898
|
-
version: Optional[pulumi.Input[
|
|
985
|
+
match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
986
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
987
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
988
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
989
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
990
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
991
|
+
session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
|
|
992
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
|
|
993
|
+
unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
|
|
994
|
+
use_case: Optional[pulumi.Input[_builtins.str]] = None,
|
|
995
|
+
version: Optional[pulumi.Input[_builtins.int]] = None) -> 'SecurityPolicy':
|
|
899
996
|
"""
|
|
900
997
|
Get an existing SecurityPolicy resource's state with the given name, id, and optional extra
|
|
901
998
|
properties used to qualify the lookup.
|
|
@@ -903,28 +1000,38 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
903
1000
|
:param str resource_name: The unique name of the resulting resource.
|
|
904
1001
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
905
1002
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
906
|
-
:param pulumi.Input[
|
|
1003
|
+
:param pulumi.Input[_builtins.str] audit_trail: Audit trail
|
|
1004
|
+
- Choices: `on`, `off`
|
|
907
1005
|
:param pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]] definitions: List of policy definitions
|
|
908
|
-
:param pulumi.Input[
|
|
909
|
-
:param pulumi.Input[
|
|
910
|
-
|
|
911
|
-
:param pulumi.Input[
|
|
912
|
-
|
|
913
|
-
:param pulumi.Input[
|
|
914
|
-
:param pulumi.Input[
|
|
915
|
-
:param pulumi.Input[
|
|
916
|
-
:param pulumi.Input[
|
|
917
|
-
:param pulumi.Input[
|
|
918
|
-
|
|
919
|
-
:param pulumi.Input[
|
|
920
|
-
|
|
921
|
-
:param pulumi.Input[
|
|
922
|
-
:param pulumi.Input[
|
|
923
|
-
:param pulumi.Input[
|
|
924
|
-
:param pulumi.Input[
|
|
925
|
-
|
|
926
|
-
|
|
927
|
-
:param pulumi.Input[
|
|
1006
|
+
:param pulumi.Input[_builtins.str] description: The description of the security policy
|
|
1007
|
+
:param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
1008
|
+
- Choices: `allow`, `deny`
|
|
1009
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
1010
|
+
- Choices: `open`, `close`
|
|
1011
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
1012
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
1013
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
1014
|
+
:param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
1015
|
+
:param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
1016
|
+
- Choices: `on`, `off`
|
|
1017
|
+
:param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
|
|
1018
|
+
- Choices: `on`, `off`
|
|
1019
|
+
:param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
1020
|
+
:param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
1021
|
+
:param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
1022
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
1023
|
+
- Choices: `security`, `unified`
|
|
1024
|
+
- Default value: `security`
|
|
1025
|
+
:param pulumi.Input[_builtins.str] name: The name of the security policy
|
|
1026
|
+
:param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
|
|
1027
|
+
- Choices: `on`, `off`
|
|
1028
|
+
:param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
1029
|
+
:param pulumi.Input[_builtins.str] unified_logging: Unified Logging
|
|
1030
|
+
- Choices: `on`, `off`
|
|
1031
|
+
:param pulumi.Input[_builtins.str] use_case: The use case of the security policy
|
|
1032
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
1033
|
+
- Default value: `custom`
|
|
1034
|
+
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
928
1035
|
"""
|
|
929
1036
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
930
1037
|
|
|
@@ -954,15 +1061,16 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
954
1061
|
__props__.__dict__["version"] = version
|
|
955
1062
|
return SecurityPolicy(resource_name, opts=opts, __props__=__props__)
|
|
956
1063
|
|
|
957
|
-
@property
|
|
1064
|
+
@_builtins.property
|
|
958
1065
|
@pulumi.getter(name="auditTrail")
|
|
959
|
-
def audit_trail(self) -> pulumi.Output[Optional[
|
|
1066
|
+
def audit_trail(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
960
1067
|
"""
|
|
961
|
-
Audit trail
|
|
1068
|
+
Audit trail
|
|
1069
|
+
- Choices: `on`, `off`
|
|
962
1070
|
"""
|
|
963
1071
|
return pulumi.get(self, "audit_trail")
|
|
964
1072
|
|
|
965
|
-
@property
|
|
1073
|
+
@_builtins.property
|
|
966
1074
|
@pulumi.getter
|
|
967
1075
|
def definitions(self) -> pulumi.Output[Sequence['outputs.SecurityPolicyDefinition']]:
|
|
968
1076
|
"""
|
|
@@ -970,159 +1078,168 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
970
1078
|
"""
|
|
971
1079
|
return pulumi.get(self, "definitions")
|
|
972
1080
|
|
|
973
|
-
@property
|
|
1081
|
+
@_builtins.property
|
|
974
1082
|
@pulumi.getter
|
|
975
|
-
def description(self) -> pulumi.Output[
|
|
1083
|
+
def description(self) -> pulumi.Output[_builtins.str]:
|
|
976
1084
|
"""
|
|
977
1085
|
The description of the security policy
|
|
978
1086
|
"""
|
|
979
1087
|
return pulumi.get(self, "description")
|
|
980
1088
|
|
|
981
|
-
@property
|
|
1089
|
+
@_builtins.property
|
|
982
1090
|
@pulumi.getter(name="directInternetApplications")
|
|
983
|
-
def direct_internet_applications(self) -> pulumi.Output[Optional[
|
|
1091
|
+
def direct_internet_applications(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
984
1092
|
"""
|
|
985
|
-
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
1093
|
+
Bypass firewall policy and allow all Internet traffic to/from VPN 0
|
|
1094
|
+
- Choices: `allow`, `deny`
|
|
986
1095
|
"""
|
|
987
1096
|
return pulumi.get(self, "direct_internet_applications")
|
|
988
1097
|
|
|
989
|
-
@property
|
|
1098
|
+
@_builtins.property
|
|
990
1099
|
@pulumi.getter(name="failureMode")
|
|
991
|
-
def failure_mode(self) -> pulumi.Output[Optional[
|
|
1100
|
+
def failure_mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
992
1101
|
"""
|
|
993
|
-
Failure mode
|
|
1102
|
+
Failure mode
|
|
1103
|
+
- Choices: `open`, `close`
|
|
994
1104
|
"""
|
|
995
1105
|
return pulumi.get(self, "failure_mode")
|
|
996
1106
|
|
|
997
|
-
@property
|
|
1107
|
+
@_builtins.property
|
|
998
1108
|
@pulumi.getter(name="highSpeedLoggingServerIp")
|
|
999
|
-
def high_speed_logging_server_ip(self) -> pulumi.Output[Optional[
|
|
1109
|
+
def high_speed_logging_server_ip(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1000
1110
|
"""
|
|
1001
1111
|
High Speed Logging Server IP
|
|
1002
1112
|
"""
|
|
1003
1113
|
return pulumi.get(self, "high_speed_logging_server_ip")
|
|
1004
1114
|
|
|
1005
|
-
@property
|
|
1115
|
+
@_builtins.property
|
|
1006
1116
|
@pulumi.getter(name="highSpeedLoggingServerPort")
|
|
1007
|
-
def high_speed_logging_server_port(self) -> pulumi.Output[Optional[
|
|
1117
|
+
def high_speed_logging_server_port(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1008
1118
|
"""
|
|
1009
1119
|
High Speed Logging Port
|
|
1010
1120
|
"""
|
|
1011
1121
|
return pulumi.get(self, "high_speed_logging_server_port")
|
|
1012
1122
|
|
|
1013
|
-
@property
|
|
1123
|
+
@_builtins.property
|
|
1014
1124
|
@pulumi.getter(name="highSpeedLoggingServerSourceInterface")
|
|
1015
|
-
def high_speed_logging_server_source_interface(self) -> pulumi.Output[Optional[
|
|
1125
|
+
def high_speed_logging_server_source_interface(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1016
1126
|
"""
|
|
1017
1127
|
High Speed Logging Source Interface
|
|
1018
1128
|
"""
|
|
1019
1129
|
return pulumi.get(self, "high_speed_logging_server_source_interface")
|
|
1020
1130
|
|
|
1021
|
-
@property
|
|
1131
|
+
@_builtins.property
|
|
1022
1132
|
@pulumi.getter(name="highSpeedLoggingVpn")
|
|
1023
|
-
def high_speed_logging_vpn(self) -> pulumi.Output[Optional[
|
|
1133
|
+
def high_speed_logging_vpn(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1024
1134
|
"""
|
|
1025
1135
|
High Speed Logging VPN
|
|
1026
1136
|
"""
|
|
1027
1137
|
return pulumi.get(self, "high_speed_logging_vpn")
|
|
1028
1138
|
|
|
1029
|
-
@property
|
|
1139
|
+
@_builtins.property
|
|
1030
1140
|
@pulumi.getter(name="imcpUnreachableAllow")
|
|
1031
|
-
def imcp_unreachable_allow(self) -> pulumi.Output[Optional[
|
|
1141
|
+
def imcp_unreachable_allow(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1032
1142
|
"""
|
|
1033
1143
|
ICMP Unreachable Allow
|
|
1144
|
+
- Choices: `on`, `off`
|
|
1034
1145
|
"""
|
|
1035
1146
|
return pulumi.get(self, "imcp_unreachable_allow")
|
|
1036
1147
|
|
|
1037
|
-
@property
|
|
1148
|
+
@_builtins.property
|
|
1038
1149
|
@pulumi.getter
|
|
1039
1150
|
def loggings(self) -> pulumi.Output[Optional[Sequence['outputs.SecurityPolicyLogging']]]:
|
|
1040
1151
|
return pulumi.get(self, "loggings")
|
|
1041
1152
|
|
|
1042
|
-
@property
|
|
1153
|
+
@_builtins.property
|
|
1043
1154
|
@pulumi.getter(name="matchStatisticsPerFilter")
|
|
1044
|
-
def match_statistics_per_filter(self) -> pulumi.Output[Optional[
|
|
1155
|
+
def match_statistics_per_filter(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1045
1156
|
"""
|
|
1046
|
-
Match Statistics per-filter
|
|
1157
|
+
Match Statistics per-filter
|
|
1158
|
+
- Choices: `on`, `off`
|
|
1047
1159
|
"""
|
|
1048
1160
|
return pulumi.get(self, "match_statistics_per_filter")
|
|
1049
1161
|
|
|
1050
|
-
@property
|
|
1162
|
+
@_builtins.property
|
|
1051
1163
|
@pulumi.getter(name="maxIncompleteIcmpLimit")
|
|
1052
|
-
def max_incomplete_icmp_limit(self) -> pulumi.Output[Optional[
|
|
1164
|
+
def max_incomplete_icmp_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1053
1165
|
"""
|
|
1054
1166
|
Max Incomplete ICMP Limit
|
|
1055
1167
|
"""
|
|
1056
1168
|
return pulumi.get(self, "max_incomplete_icmp_limit")
|
|
1057
1169
|
|
|
1058
|
-
@property
|
|
1170
|
+
@_builtins.property
|
|
1059
1171
|
@pulumi.getter(name="maxIncompleteTcpLimit")
|
|
1060
|
-
def max_incomplete_tcp_limit(self) -> pulumi.Output[Optional[
|
|
1172
|
+
def max_incomplete_tcp_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1061
1173
|
"""
|
|
1062
1174
|
Max Incomplete TCP Limit
|
|
1063
1175
|
"""
|
|
1064
1176
|
return pulumi.get(self, "max_incomplete_tcp_limit")
|
|
1065
1177
|
|
|
1066
|
-
@property
|
|
1178
|
+
@_builtins.property
|
|
1067
1179
|
@pulumi.getter(name="maxIncompleteUdpLimit")
|
|
1068
|
-
def max_incomplete_udp_limit(self) -> pulumi.Output[Optional[
|
|
1180
|
+
def max_incomplete_udp_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1069
1181
|
"""
|
|
1070
1182
|
Max Incomplete UDP Limit
|
|
1071
1183
|
"""
|
|
1072
1184
|
return pulumi.get(self, "max_incomplete_udp_limit")
|
|
1073
1185
|
|
|
1074
|
-
@property
|
|
1186
|
+
@_builtins.property
|
|
1075
1187
|
@pulumi.getter
|
|
1076
|
-
def mode(self) -> pulumi.Output[
|
|
1188
|
+
def mode(self) -> pulumi.Output[_builtins.str]:
|
|
1077
1189
|
"""
|
|
1078
|
-
The policy mode
|
|
1190
|
+
The policy mode
|
|
1191
|
+
- Choices: `security`, `unified`
|
|
1192
|
+
- Default value: `security`
|
|
1079
1193
|
"""
|
|
1080
1194
|
return pulumi.get(self, "mode")
|
|
1081
1195
|
|
|
1082
|
-
@property
|
|
1196
|
+
@_builtins.property
|
|
1083
1197
|
@pulumi.getter
|
|
1084
|
-
def name(self) -> pulumi.Output[
|
|
1198
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
1085
1199
|
"""
|
|
1086
1200
|
The name of the security policy
|
|
1087
1201
|
"""
|
|
1088
1202
|
return pulumi.get(self, "name")
|
|
1089
1203
|
|
|
1090
|
-
@property
|
|
1204
|
+
@_builtins.property
|
|
1091
1205
|
@pulumi.getter(name="sessionReclassifyAllow")
|
|
1092
|
-
def session_reclassify_allow(self) -> pulumi.Output[Optional[
|
|
1206
|
+
def session_reclassify_allow(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1093
1207
|
"""
|
|
1094
1208
|
Session Reclassify Allow
|
|
1209
|
+
- Choices: `on`, `off`
|
|
1095
1210
|
"""
|
|
1096
1211
|
return pulumi.get(self, "session_reclassify_allow")
|
|
1097
1212
|
|
|
1098
|
-
@property
|
|
1213
|
+
@_builtins.property
|
|
1099
1214
|
@pulumi.getter(name="tcpSynFloodLimit")
|
|
1100
|
-
def tcp_syn_flood_limit(self) -> pulumi.Output[Optional[
|
|
1215
|
+
def tcp_syn_flood_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1101
1216
|
"""
|
|
1102
1217
|
TCP SYN Flood Limit, value from 1 to 4294967295
|
|
1103
1218
|
"""
|
|
1104
1219
|
return pulumi.get(self, "tcp_syn_flood_limit")
|
|
1105
1220
|
|
|
1106
|
-
@property
|
|
1221
|
+
@_builtins.property
|
|
1107
1222
|
@pulumi.getter(name="unifiedLogging")
|
|
1108
|
-
def unified_logging(self) -> pulumi.Output[Optional[
|
|
1223
|
+
def unified_logging(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1109
1224
|
"""
|
|
1110
1225
|
Unified Logging
|
|
1226
|
+
- Choices: `on`, `off`
|
|
1111
1227
|
"""
|
|
1112
1228
|
return pulumi.get(self, "unified_logging")
|
|
1113
1229
|
|
|
1114
|
-
@property
|
|
1230
|
+
@_builtins.property
|
|
1115
1231
|
@pulumi.getter(name="useCase")
|
|
1116
|
-
def use_case(self) -> pulumi.Output[
|
|
1232
|
+
def use_case(self) -> pulumi.Output[_builtins.str]:
|
|
1117
1233
|
"""
|
|
1118
|
-
The use case of the security policy
|
|
1119
|
-
|
|
1234
|
+
The use case of the security policy
|
|
1235
|
+
- Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
|
|
1236
|
+
- Default value: `custom`
|
|
1120
1237
|
"""
|
|
1121
1238
|
return pulumi.get(self, "use_case")
|
|
1122
1239
|
|
|
1123
|
-
@property
|
|
1240
|
+
@_builtins.property
|
|
1124
1241
|
@pulumi.getter
|
|
1125
|
-
def version(self) -> pulumi.Output[
|
|
1242
|
+
def version(self) -> pulumi.Output[_builtins.int]:
|
|
1126
1243
|
"""
|
|
1127
1244
|
The version of the object
|
|
1128
1245
|
"""
|