pulumi-sdwan 0.4.0a1746772400__py3-none-any.whl → 0.6.0a1765953124__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_sdwan/__init__.py +82 -2
- pulumi_sdwan/_inputs.py +22428 -21441
- pulumi_sdwan/_utilities.py +1 -1
- pulumi_sdwan/activate_centralized_policy.py +41 -20
- pulumi_sdwan/advanced_inspection_profile_policy_definition.py +212 -202
- pulumi_sdwan/advanced_malware_protection_policy_definition.py +286 -234
- pulumi_sdwan/allow_url_list_policy_object.py +35 -32
- pulumi_sdwan/app_probe_class_policy_object.py +52 -49
- pulumi_sdwan/application_aware_routing_policy_definition.py +258 -59
- pulumi_sdwan/application_list_policy_object.py +35 -32
- pulumi_sdwan/application_priority_feature_profile.py +40 -37
- pulumi_sdwan/application_priority_qos_policy.py +171 -130
- pulumi_sdwan/application_priority_traffic_policy_policy.py +170 -113
- pulumi_sdwan/as_path_list_policy_object.py +61 -32
- pulumi_sdwan/attach_feature_device_template.py +64 -23
- pulumi_sdwan/block_url_list_policy_object.py +35 -32
- pulumi_sdwan/cedge_aaa_feature_template.py +710 -471
- pulumi_sdwan/cedge_global_feature_template.py +1101 -937
- pulumi_sdwan/cedge_igmp_feature_template.py +126 -92
- pulumi_sdwan/cedge_multicast_feature_template.py +217 -200
- pulumi_sdwan/cedge_pim_feature_template.py +571 -456
- pulumi_sdwan/cellular_cedge_profile_feature_template.py +367 -336
- pulumi_sdwan/cellular_controller_feature_template.py +342 -274
- pulumi_sdwan/cellular_profile_feature_template.py +496 -472
- pulumi_sdwan/centralized_policy.py +52 -49
- pulumi_sdwan/cflowd_policy_definition.py +286 -192
- pulumi_sdwan/cisco_banner_feature_template.py +153 -157
- pulumi_sdwan/cisco_bfd_feature_template.py +285 -210
- pulumi_sdwan/cisco_bgp_feature_template.py +1028 -656
- pulumi_sdwan/cisco_dhcp_server_feature_template.py +454 -373
- pulumi_sdwan/cisco_logging_feature_template.py +318 -209
- pulumi_sdwan/cisco_ntp_feature_template.py +303 -237
- pulumi_sdwan/cisco_omp_feature_template.py +762 -576
- pulumi_sdwan/cisco_ospf_feature_template.py +817 -562
- pulumi_sdwan/cisco_ospfv3_feature_template.py +1775 -1245
- pulumi_sdwan/cisco_secure_internet_gateway_feature_template.py +332 -152
- pulumi_sdwan/cisco_security_feature_template.py +444 -318
- pulumi_sdwan/cisco_sig_credentials_feature_template.py +469 -466
- pulumi_sdwan/cisco_snmp_feature_template.py +308 -209
- pulumi_sdwan/cisco_system_feature_template.py +1767 -1825
- pulumi_sdwan/cisco_thousandeyes_feature_template.py +138 -92
- pulumi_sdwan/cisco_trustsec_feature_template.py +819 -649
- pulumi_sdwan/cisco_vpn_feature_template.py +721 -348
- pulumi_sdwan/cisco_vpn_interface_feature_template.py +4614 -3628
- pulumi_sdwan/cisco_vpn_interface_gre_feature_template.py +691 -593
- pulumi_sdwan/cisco_vpn_interface_ipsec_feature_template.py +1237 -1066
- pulumi_sdwan/cisco_wireless_lan_feature_template.py +486 -417
- pulumi_sdwan/class_map_policy_object.py +59 -49
- pulumi_sdwan/cli_config_feature.py +83 -80
- pulumi_sdwan/cli_device_template.py +110 -100
- pulumi_sdwan/cli_feature_profile.py +40 -37
- pulumi_sdwan/cli_template_feature_template.py +102 -106
- pulumi_sdwan/color_list_policy_object.py +35 -32
- pulumi_sdwan/config/__init__.py +2 -2
- pulumi_sdwan/config/__init__.pyi +7 -3
- pulumi_sdwan/config/vars.py +14 -8
- pulumi_sdwan/configuration_group.py +134 -117
- pulumi_sdwan/custom_control_topology_policy_definition.py +148 -78
- pulumi_sdwan/data_fqdn_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/data_ipv4_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/data_ipv6_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/dns_security_feature_profile.py +40 -37
- pulumi_sdwan/dns_security_policy.py +184 -181
- pulumi_sdwan/dns_security_policy_definition.py +205 -202
- pulumi_sdwan/domain_list_policy_object.py +35 -32
- pulumi_sdwan/eigrp_feature_template.py +468 -351
- pulumi_sdwan/embedded_security_feature_profile.py +40 -37
- pulumi_sdwan/expanded_community_list_policy_object.py +35 -32
- pulumi_sdwan/extended_community_list_policy_object.py +35 -32
- pulumi_sdwan/feature_device_template.py +164 -154
- pulumi_sdwan/geo_location_list_policy_object.py +35 -32
- pulumi_sdwan/get_advanced_inspection_profile_policy_definition.py +32 -33
- pulumi_sdwan/get_advanced_malware_protection_policy_definition.py +34 -35
- pulumi_sdwan/get_allow_url_list_policy_object.py +13 -14
- pulumi_sdwan/get_app_probe_class_policy_object.py +15 -16
- pulumi_sdwan/get_application_aware_routing_policy_definition.py +60 -19
- pulumi_sdwan/get_application_list_policy_object.py +13 -14
- pulumi_sdwan/get_application_priority_feature_profile.py +12 -13
- pulumi_sdwan/get_application_priority_qos_policy.py +38 -39
- pulumi_sdwan/get_application_priority_traffic_policy_policy.py +27 -28
- pulumi_sdwan/get_as_path_list_policy_object.py +13 -14
- pulumi_sdwan/get_block_url_list_policy_object.py +13 -14
- pulumi_sdwan/get_cedge_aaa_feature_template.py +68 -69
- pulumi_sdwan/get_cedge_global_feature_template.py +114 -115
- pulumi_sdwan/get_cedge_igmp_feature_template.py +23 -24
- pulumi_sdwan/get_cedge_multicast_feature_template.py +34 -35
- pulumi_sdwan/get_cedge_pim_feature_template.py +66 -67
- pulumi_sdwan/get_cellular_cedge_profile_feature_template.py +50 -51
- pulumi_sdwan/get_cellular_controller_feature_template.py +43 -44
- pulumi_sdwan/get_cellular_profile_feature_template.py +66 -67
- pulumi_sdwan/get_centralized_policy.py +15 -16
- pulumi_sdwan/get_cflowd_policy_definition.py +31 -32
- pulumi_sdwan/get_cisco_banner_feature_template.py +30 -31
- pulumi_sdwan/get_cisco_bfd_feature_template.py +35 -36
- pulumi_sdwan/get_cisco_bgp_feature_template.py +88 -89
- pulumi_sdwan/get_cisco_dhcp_server_feature_template.py +56 -57
- pulumi_sdwan/get_cisco_logging_feature_template.py +37 -38
- pulumi_sdwan/get_cisco_ntp_feature_template.py +40 -41
- pulumi_sdwan/get_cisco_omp_feature_template.py +76 -77
- pulumi_sdwan/get_cisco_ospf_feature_template.py +76 -77
- pulumi_sdwan/get_cisco_ospfv3_feature_template.py +152 -153
- pulumi_sdwan/get_cisco_secure_internet_gateway_feature_template.py +31 -32
- pulumi_sdwan/get_cisco_security_feature_template.py +48 -49
- pulumi_sdwan/get_cisco_sig_credentials_feature_template.py +66 -67
- pulumi_sdwan/get_cisco_snmp_feature_template.py +39 -40
- pulumi_sdwan/get_cisco_system_feature_template.py +186 -159
- pulumi_sdwan/get_cisco_thousandeyes_feature_template.py +23 -24
- pulumi_sdwan/get_cisco_trustsec_feature_template.py +83 -84
- pulumi_sdwan/get_cisco_vpn_feature_template.py +63 -64
- pulumi_sdwan/get_cisco_vpn_interface_feature_template.py +414 -415
- pulumi_sdwan/get_cisco_vpn_interface_gre_feature_template.py +79 -80
- pulumi_sdwan/get_cisco_vpn_interface_ipsec_feature_template.py +128 -129
- pulumi_sdwan/get_cisco_wireless_lan_feature_template.py +55 -56
- pulumi_sdwan/get_class_map_policy_object.py +14 -15
- pulumi_sdwan/get_cli_config_feature.py +22 -23
- pulumi_sdwan/get_cli_device_template.py +20 -21
- pulumi_sdwan/get_cli_feature_profile.py +12 -13
- pulumi_sdwan/get_cli_template_feature_template.py +24 -25
- pulumi_sdwan/get_color_list_policy_object.py +13 -14
- pulumi_sdwan/get_configuration_group.py +22 -23
- pulumi_sdwan/get_custom_control_topology_policy_definition.py +19 -20
- pulumi_sdwan/get_data_fqdn_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_data_ipv4_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_data_ipv6_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_device.py +17 -18
- pulumi_sdwan/get_dns_security_feature_profile.py +12 -13
- pulumi_sdwan/get_dns_security_policy.py +35 -36
- pulumi_sdwan/get_dns_security_policy_definition.py +33 -34
- pulumi_sdwan/get_domain_list_policy_object.py +13 -14
- pulumi_sdwan/get_eigrp_feature_template.py +53 -54
- pulumi_sdwan/get_embedded_security_feature_profile.py +12 -13
- pulumi_sdwan/get_expanded_community_list_policy_object.py +13 -14
- pulumi_sdwan/get_extended_community_list_policy_object.py +13 -14
- pulumi_sdwan/get_feature_device_template.py +27 -28
- pulumi_sdwan/get_geo_location_list_policy_object.py +13 -14
- pulumi_sdwan/get_gps_feature_template.py +46 -47
- pulumi_sdwan/get_hub_and_spoke_topology_policy_definition.py +21 -22
- pulumi_sdwan/get_intrusion_prevention_policy_definition.py +31 -32
- pulumi_sdwan/get_ips_signature_list_policy_object.py +13 -14
- pulumi_sdwan/get_ipv4_acl_policy_definition.py +19 -20
- pulumi_sdwan/get_ipv4_device_acl_policy_definition.py +19 -20
- pulumi_sdwan/get_ipv4_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_ipv6_acl_policy_definition.py +19 -20
- pulumi_sdwan/get_ipv6_device_acl_policy_definition.py +19 -20
- pulumi_sdwan/get_ipv6_prefix_list_policy_object.py +13 -14
- pulumi_sdwan/get_local_application_list_policy_object.py +13 -14
- pulumi_sdwan/get_localized_policy.py +35 -36
- pulumi_sdwan/get_mesh_topology_policy_definition.py +21 -22
- pulumi_sdwan/get_mirror_policy_object.py +16 -17
- pulumi_sdwan/get_object_group_policy_definition.py +40 -41
- pulumi_sdwan/get_other_feature_profile.py +12 -13
- pulumi_sdwan/get_other_thousandeyes_feature.py +21 -22
- pulumi_sdwan/get_other_ucse_feature.py +47 -48
- pulumi_sdwan/get_policer_policy_object.py +18 -19
- pulumi_sdwan/get_policy_group.py +183 -0
- pulumi_sdwan/get_policy_object_app_probe_class.py +21 -22
- pulumi_sdwan/get_policy_object_application_list.py +21 -22
- pulumi_sdwan/get_policy_object_as_path_list.py +23 -24
- pulumi_sdwan/get_policy_object_class_map.py +21 -22
- pulumi_sdwan/get_policy_object_color_list.py +21 -22
- pulumi_sdwan/get_policy_object_data_ipv4_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_data_ipv6_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_expanded_community_list.py +24 -25
- pulumi_sdwan/get_policy_object_extended_community_list.py +21 -22
- pulumi_sdwan/get_policy_object_feature_profile.py +12 -13
- pulumi_sdwan/get_policy_object_ipv4_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_ipv6_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_mirror.py +21 -22
- pulumi_sdwan/get_policy_object_policer.py +21 -22
- pulumi_sdwan/get_policy_object_preferred_color_group.py +21 -22
- pulumi_sdwan/get_policy_object_security_data_ipv4_prefix_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_fqdn_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_geolocation_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_identity_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_ips_signature.py +21 -22
- pulumi_sdwan/get_policy_object_security_local_application_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_local_domain_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_port_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_protocol_list.py +174 -0
- pulumi_sdwan/get_policy_object_security_scalable_group_tag_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_url_allow_list.py +21 -22
- pulumi_sdwan/get_policy_object_security_url_block_list.py +21 -22
- pulumi_sdwan/get_policy_object_sla_class_list.py +21 -22
- pulumi_sdwan/get_policy_object_standard_community_list.py +21 -22
- pulumi_sdwan/get_policy_object_tloc_list.py +21 -22
- pulumi_sdwan/get_policy_object_unified_advanced_inspection_profile.py +217 -0
- pulumi_sdwan/get_policy_object_unified_advanced_malware_protection.py +239 -0
- pulumi_sdwan/get_policy_object_unified_intrusion_prevention.py +229 -0
- pulumi_sdwan/get_policy_object_unified_tls_ssl_decryption.py +325 -0
- pulumi_sdwan/get_policy_object_unified_tls_ssl_profile.py +261 -0
- pulumi_sdwan/get_policy_object_unified_url_filtering.py +272 -0
- pulumi_sdwan/get_policy_object_vpn_group.py +21 -22
- pulumi_sdwan/get_port_list_policy_object.py +13 -14
- pulumi_sdwan/get_preferred_color_group_policy_object.py +24 -25
- pulumi_sdwan/get_protocol_list_policy_object.py +13 -14
- pulumi_sdwan/get_qos_map_policy_definition.py +17 -18
- pulumi_sdwan/get_region_list_policy_object.py +13 -14
- pulumi_sdwan/get_rewrite_rule_policy_definition.py +17 -18
- pulumi_sdwan/get_route_policy_definition.py +19 -20
- pulumi_sdwan/get_rule_set_policy_definition.py +15 -16
- pulumi_sdwan/get_security_app_hosting_feature_template.py +23 -24
- pulumi_sdwan/get_security_policy.py +62 -63
- pulumi_sdwan/get_service_dhcp_server_feature.py +58 -59
- pulumi_sdwan/get_service_feature_profile.py +12 -13
- pulumi_sdwan/get_service_ipv4_acl_feature.py +23 -24
- pulumi_sdwan/get_service_ipv6_acl_feature.py +23 -24
- pulumi_sdwan/get_service_lan_vpn_feature.py +74 -75
- pulumi_sdwan/get_service_lan_vpn_feature_associate_multicast_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_bgp_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_eigrp_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospf_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +24 -25
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature.py +213 -214
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +30 -31
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +30 -31
- pulumi_sdwan/get_service_lan_vpn_interface_gre_feature.py +82 -83
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature.py +144 -145
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +30 -31
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature.py +96 -97
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +30 -31
- pulumi_sdwan/get_service_multicast_feature.py +62 -63
- pulumi_sdwan/get_service_object_tracker_feature.py +42 -43
- pulumi_sdwan/get_service_object_tracker_group_feature.py +29 -30
- pulumi_sdwan/get_service_route_policy_feature.py +23 -24
- pulumi_sdwan/get_service_routing_bgp_feature.py +112 -113
- pulumi_sdwan/get_service_routing_eigrp_feature.py +50 -51
- pulumi_sdwan/get_service_routing_ospf_feature.py +75 -76
- pulumi_sdwan/get_service_routing_ospfv3_ipv4_feature.py +88 -89
- pulumi_sdwan/get_service_routing_ospfv3_ipv6_feature.py +88 -89
- pulumi_sdwan/get_service_switchport_feature.py +26 -27
- pulumi_sdwan/get_service_tracker_feature.py +64 -65
- pulumi_sdwan/get_service_tracker_group_feature.py +25 -26
- pulumi_sdwan/get_service_wireless_lan_feature.py +55 -56
- pulumi_sdwan/get_sig_security_feature_profile.py +12 -13
- pulumi_sdwan/get_site_list_policy_object.py +13 -14
- pulumi_sdwan/get_sla_class_policy_object.py +30 -31
- pulumi_sdwan/get_standard_community_list_policy_object.py +13 -14
- pulumi_sdwan/get_switchport_feature_template.py +34 -35
- pulumi_sdwan/get_system_aaa_feature.py +43 -44
- pulumi_sdwan/get_system_banner_feature.py +28 -29
- pulumi_sdwan/get_system_basic_feature.py +138 -139
- pulumi_sdwan/get_system_bfd_feature.py +33 -34
- pulumi_sdwan/get_system_feature_profile.py +12 -13
- pulumi_sdwan/get_system_flexible_port_speed_feature.py +24 -25
- pulumi_sdwan/get_system_global_feature.py +112 -113
- pulumi_sdwan/get_system_ipv4_device_access_feature.py +23 -24
- pulumi_sdwan/get_system_ipv6_device_access_feature.py +23 -24
- pulumi_sdwan/get_system_logging_feature.py +35 -36
- pulumi_sdwan/get_system_mrf_feature.py +34 -35
- pulumi_sdwan/get_system_ntp_feature.py +38 -39
- pulumi_sdwan/get_system_omp_feature.py +136 -137
- pulumi_sdwan/get_system_performance_monitoring_feature.py +32 -33
- pulumi_sdwan/get_system_remote_access_feature.py +100 -101
- pulumi_sdwan/get_system_security_feature.py +42 -43
- pulumi_sdwan/get_system_snmp_feature.py +37 -38
- pulumi_sdwan/get_tag.py +14 -15
- pulumi_sdwan/get_tloc_list_policy_object.py +13 -14
- pulumi_sdwan/get_tls_ssl_decryption_policy_definition.py +46 -47
- pulumi_sdwan/get_tls_ssl_profile_policy_definition.py +36 -37
- pulumi_sdwan/get_traffic_data_policy_definition.py +19 -20
- pulumi_sdwan/get_transport_cellular_controller_feature.py +40 -41
- pulumi_sdwan/get_transport_cellular_profile_feature.py +50 -51
- pulumi_sdwan/get_transport_feature_profile.py +12 -13
- pulumi_sdwan/get_transport_gps_feature.py +44 -45
- pulumi_sdwan/get_transport_ipv4_acl_feature.py +23 -24
- pulumi_sdwan/get_transport_ipv6_acl_feature.py +23 -24
- pulumi_sdwan/get_transport_ipv6_tracker_feature.py +56 -57
- pulumi_sdwan/get_transport_ipv6_tracker_group_feature.py +29 -30
- pulumi_sdwan/get_transport_management_vpn_feature.py +43 -44
- pulumi_sdwan/get_transport_management_vpn_interface_ethernet_feature.py +122 -123
- pulumi_sdwan/get_transport_route_policy_feature.py +23 -24
- pulumi_sdwan/get_transport_routing_bgp_feature.py +113 -114
- pulumi_sdwan/get_transport_routing_ospf_feature.py +75 -76
- pulumi_sdwan/get_transport_routing_ospfv3_ipv4_feature.py +88 -89
- pulumi_sdwan/get_transport_routing_ospfv3_ipv6_feature.py +88 -89
- pulumi_sdwan/get_transport_t1_e1_controller_feature.py +27 -28
- pulumi_sdwan/get_transport_tracker_feature.py +56 -57
- pulumi_sdwan/get_transport_tracker_group_feature.py +25 -26
- pulumi_sdwan/get_transport_wan_vpn_feature.py +47 -48
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_bgp_feature.py +24 -25
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospf_feature.py +24 -25
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +24 -25
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +24 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature.py +280 -281
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature.py +399 -400
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature.py +82 -83
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature.py +144 -145
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +30 -31
- pulumi_sdwan/get_transport_wan_vpn_interface_t1_e1_serial_feature.py +233 -234
- pulumi_sdwan/get_url_filtering_policy_definition.py +39 -40
- pulumi_sdwan/get_vedge_inventory.py +5 -6
- pulumi_sdwan/get_vpn_interface_cellular_feature_template.py +306 -307
- pulumi_sdwan/get_vpn_interface_dsl_ipoe_feature_template.py +333 -334
- pulumi_sdwan/get_vpn_interface_dsl_pppoa_feature_template.py +310 -311
- pulumi_sdwan/get_vpn_interface_dsl_pppoe_feature_template.py +327 -328
- pulumi_sdwan/get_vpn_interface_ethernet_pppoe_feature_template.py +326 -327
- pulumi_sdwan/get_vpn_interface_multilink_feature_template.py +285 -286
- pulumi_sdwan/get_vpn_interface_svi_feature_template.py +87 -88
- pulumi_sdwan/get_vpn_interface_t1_e1_serial_feature_template.py +253 -254
- pulumi_sdwan/get_vpn_list_policy_object.py +13 -14
- pulumi_sdwan/get_vpn_membership_policy_definition.py +17 -18
- pulumi_sdwan/get_zone_based_firewall_policy_definition.py +20 -21
- pulumi_sdwan/get_zone_list_policy_object.py +13 -14
- pulumi_sdwan/gps_feature_template.py +336 -305
- pulumi_sdwan/hub_and_spoke_topology_policy_definition.py +145 -92
- pulumi_sdwan/intrusion_prevention_policy_definition.py +270 -197
- pulumi_sdwan/ips_signature_list_policy_object.py +63 -32
- pulumi_sdwan/ipv4_acl_policy_definition.py +144 -78
- pulumi_sdwan/ipv4_device_acl_policy_definition.py +138 -78
- pulumi_sdwan/ipv4_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/ipv6_acl_policy_definition.py +144 -78
- pulumi_sdwan/ipv6_device_acl_policy_definition.py +138 -78
- pulumi_sdwan/ipv6_prefix_list_policy_object.py +35 -32
- pulumi_sdwan/local_application_list_policy_object.py +35 -32
- pulumi_sdwan/localized_policy.py +308 -249
- pulumi_sdwan/mesh_topology_policy_definition.py +127 -92
- pulumi_sdwan/mirror_policy_object.py +66 -63
- pulumi_sdwan/object_group_policy_definition.py +270 -267
- pulumi_sdwan/other_feature_profile.py +40 -37
- pulumi_sdwan/other_thousandeyes_feature.py +117 -66
- pulumi_sdwan/other_ucse_feature.py +412 -315
- pulumi_sdwan/outputs.py +29677 -28483
- pulumi_sdwan/policer_policy_object.py +113 -89
- pulumi_sdwan/policy_group.py +447 -0
- pulumi_sdwan/policy_object_app_probe_class.py +107 -66
- pulumi_sdwan/policy_object_application_list.py +69 -66
- pulumi_sdwan/policy_object_as_path_list.py +128 -86
- pulumi_sdwan/policy_object_class_map.py +69 -66
- pulumi_sdwan/policy_object_color_list.py +69 -66
- pulumi_sdwan/policy_object_data_ipv4_prefix_list.py +101 -66
- pulumi_sdwan/policy_object_data_ipv6_prefix_list.py +101 -66
- pulumi_sdwan/policy_object_expanded_community_list.py +100 -97
- pulumi_sdwan/policy_object_extended_community_list.py +99 -66
- pulumi_sdwan/policy_object_feature_profile.py +40 -37
- pulumi_sdwan/policy_object_ipv4_prefix_list.py +105 -66
- pulumi_sdwan/policy_object_ipv6_prefix_list.py +105 -66
- pulumi_sdwan/policy_object_mirror.py +101 -66
- pulumi_sdwan/policy_object_policer.py +103 -66
- pulumi_sdwan/policy_object_preferred_color_group.py +109 -66
- pulumi_sdwan/policy_object_security_data_ipv4_prefix_list.py +99 -66
- pulumi_sdwan/policy_object_security_fqdn_list.py +69 -66
- pulumi_sdwan/policy_object_security_geolocation_list.py +76 -73
- pulumi_sdwan/policy_object_security_identity_list.py +69 -66
- pulumi_sdwan/policy_object_security_ips_signature.py +101 -66
- pulumi_sdwan/policy_object_security_local_application_list.py +69 -66
- pulumi_sdwan/policy_object_security_local_domain_list.py +99 -66
- pulumi_sdwan/policy_object_security_port_list.py +69 -66
- pulumi_sdwan/policy_object_security_protocol_list.py +363 -0
- pulumi_sdwan/policy_object_security_scalable_group_tag_list.py +101 -66
- pulumi_sdwan/policy_object_security_url_allow_list.py +69 -66
- pulumi_sdwan/policy_object_security_url_block_list.py +69 -66
- pulumi_sdwan/policy_object_sla_class_list.py +107 -66
- pulumi_sdwan/policy_object_standard_community_list.py +99 -66
- pulumi_sdwan/policy_object_tloc_list.py +105 -66
- pulumi_sdwan/policy_object_unified_advanced_inspection_profile.py +514 -0
- pulumi_sdwan/policy_object_unified_advanced_malware_protection.py +668 -0
- pulumi_sdwan/policy_object_unified_intrusion_prevention.py +576 -0
- pulumi_sdwan/policy_object_unified_tls_ssl_decryption.py +985 -0
- pulumi_sdwan/policy_object_unified_tls_ssl_profile.py +689 -0
- pulumi_sdwan/policy_object_unified_url_filtering.py +761 -0
- pulumi_sdwan/policy_object_vpn_group.py +69 -66
- pulumi_sdwan/port_list_policy_object.py +37 -34
- pulumi_sdwan/preferred_color_group_policy_object.py +164 -140
- pulumi_sdwan/protocol_list_policy_object.py +35 -32
- pulumi_sdwan/provider.py +69 -50
- pulumi_sdwan/pulumi-plugin.json +1 -1
- pulumi_sdwan/qos_map_policy_definition.py +101 -58
- pulumi_sdwan/region_list_policy_object.py +61 -32
- pulumi_sdwan/rewrite_rule_policy_definition.py +95 -58
- pulumi_sdwan/route_policy_definition.py +142 -78
- pulumi_sdwan/rule_set_policy_definition.py +100 -49
- pulumi_sdwan/security_app_hosting_feature_template.py +134 -92
- pulumi_sdwan/security_policy.py +483 -366
- pulumi_sdwan/service_dhcp_server_feature.py +473 -412
- pulumi_sdwan/service_feature_profile.py +40 -37
- pulumi_sdwan/service_ipv4_acl_feature.py +180 -98
- pulumi_sdwan/service_ipv6_acl_feature.py +180 -98
- pulumi_sdwan/service_lan_vpn_feature.py +670 -424
- pulumi_sdwan/service_lan_vpn_feature_associate_multicast_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_bgp_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_eigrp_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospf_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +66 -63
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature.py +2004 -1616
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +83 -80
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +83 -80
- pulumi_sdwan/service_lan_vpn_interface_gre_feature.py +627 -609
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature.py +1339 -1251
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +83 -80
- pulumi_sdwan/service_lan_vpn_interface_svi_feature.py +904 -692
- pulumi_sdwan/service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +83 -80
- pulumi_sdwan/service_multicast_feature.py +586 -405
- pulumi_sdwan/service_object_tracker_feature.py +300 -290
- pulumi_sdwan/service_object_tracker_group_feature.py +198 -140
- pulumi_sdwan/service_route_policy_feature.py +167 -86
- pulumi_sdwan/service_routing_bgp_feature.py +1223 -867
- pulumi_sdwan/service_routing_eigrp_feature.py +425 -307
- pulumi_sdwan/service_routing_ospf_feature.py +796 -546
- pulumi_sdwan/service_routing_ospfv3_ipv4_feature.py +921 -665
- pulumi_sdwan/service_routing_ospfv3_ipv6_feature.py +917 -665
- pulumi_sdwan/service_switchport_feature.py +205 -106
- pulumi_sdwan/service_tracker_feature.py +525 -452
- pulumi_sdwan/service_tracker_group_feature.py +152 -103
- pulumi_sdwan/service_wireless_lan_feature.py +457 -461
- pulumi_sdwan/sig_security_feature_profile.py +40 -37
- pulumi_sdwan/site_list_policy_object.py +61 -32
- pulumi_sdwan/sla_class_policy_object.py +248 -217
- pulumi_sdwan/standard_community_list_policy_object.py +35 -32
- pulumi_sdwan/switchport_feature_template.py +329 -192
- pulumi_sdwan/system_aaa_feature.py +412 -243
- pulumi_sdwan/system_banner_feature.py +126 -123
- pulumi_sdwan/system_basic_feature.py +1469 -1668
- pulumi_sdwan/system_bfd_feature.py +245 -177
- pulumi_sdwan/system_feature_profile.py +40 -37
- pulumi_sdwan/system_flexible_port_speed_feature.py +117 -114
- pulumi_sdwan/system_global_feature.py +1082 -911
- pulumi_sdwan/system_ipv4_device_access_feature.py +141 -86
- pulumi_sdwan/system_ipv6_device_access_feature.py +141 -86
- pulumi_sdwan/system_logging_feature.py +310 -195
- pulumi_sdwan/system_mrf_feature.py +249 -210
- pulumi_sdwan/system_ntp_feature.py +298 -224
- pulumi_sdwan/system_omp_feature.py +1381 -1133
- pulumi_sdwan/system_performance_monitoring_feature.py +222 -190
- pulumi_sdwan/system_remote_access_feature.py +898 -824
- pulumi_sdwan/system_security_feature.py +390 -270
- pulumi_sdwan/system_snmp_feature.py +304 -195
- pulumi_sdwan/tag.py +57 -54
- pulumi_sdwan/tloc_list_policy_object.py +67 -32
- pulumi_sdwan/tls_ssl_decryption_policy_definition.py +502 -343
- pulumi_sdwan/tls_ssl_profile_policy_definition.py +256 -239
- pulumi_sdwan/traffic_data_policy_definition.py +142 -78
- pulumi_sdwan/transport_cellular_controller_feature.py +276 -245
- pulumi_sdwan/transport_cellular_profile_feature.py +368 -337
- pulumi_sdwan/transport_feature_profile.py +40 -37
- pulumi_sdwan/transport_gps_feature.py +317 -279
- pulumi_sdwan/transport_ipv4_acl_feature.py +180 -98
- pulumi_sdwan/transport_ipv6_acl_feature.py +180 -98
- pulumi_sdwan/transport_ipv6_tracker_feature.py +457 -384
- pulumi_sdwan/transport_ipv6_tracker_group_feature.py +188 -137
- pulumi_sdwan/transport_management_vpn_feature.py +335 -255
- pulumi_sdwan/transport_management_vpn_interface_ethernet_feature.py +1193 -995
- pulumi_sdwan/transport_route_policy_feature.py +167 -86
- pulumi_sdwan/transport_routing_bgp_feature.py +1234 -870
- pulumi_sdwan/transport_routing_ospf_feature.py +796 -546
- pulumi_sdwan/transport_routing_ospfv3_ipv4_feature.py +921 -665
- pulumi_sdwan/transport_routing_ospfv3_ipv6_feature.py +917 -665
- pulumi_sdwan/transport_t1_e1_controller_feature.py +186 -120
- pulumi_sdwan/transport_tracker_feature.py +457 -384
- pulumi_sdwan/transport_tracker_group_feature.py +152 -103
- pulumi_sdwan/transport_wan_vpn_feature.py +397 -283
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_bgp_feature.py +66 -63
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospf_feature.py +66 -63
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +66 -63
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +66 -63
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature.py +2999 -2412
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature.py +4419 -3623
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature.py +627 -609
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature.py +1339 -1251
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +83 -80
- pulumi_sdwan/transport_wan_vpn_interface_t1_e1_serial_feature.py +2318 -2020
- pulumi_sdwan/url_filtering_policy_definition.py +342 -272
- pulumi_sdwan/vpn_interface_cellular_feature_template.py +3367 -2668
- pulumi_sdwan/vpn_interface_dsl_ipoe_feature_template.py +3644 -2909
- pulumi_sdwan/vpn_interface_dsl_pppoa_feature_template.py +3434 -2699
- pulumi_sdwan/vpn_interface_dsl_pppoe_feature_template.py +3608 -2861
- pulumi_sdwan/vpn_interface_ethernet_pppoe_feature_template.py +3585 -2858
- pulumi_sdwan/vpn_interface_multilink_feature_template.py +3115 -2474
- pulumi_sdwan/vpn_interface_svi_feature_template.py +874 -619
- pulumi_sdwan/vpn_interface_t1_e1_serial_feature_template.py +2719 -2209
- pulumi_sdwan/vpn_list_policy_object.py +61 -32
- pulumi_sdwan/vpn_membership_policy_definition.py +91 -58
- pulumi_sdwan/zone_based_firewall_policy_definition.py +169 -92
- pulumi_sdwan/zone_list_policy_object.py +35 -32
- {pulumi_sdwan-0.4.0a1746772400.dist-info → pulumi_sdwan-0.6.0a1765953124.dist-info}/METADATA +1 -1
- pulumi_sdwan-0.6.0a1765953124.dist-info/RECORD +496 -0
- {pulumi_sdwan-0.4.0a1746772400.dist-info → pulumi_sdwan-0.6.0a1765953124.dist-info}/WHEEL +1 -1
- pulumi_sdwan-0.4.0a1746772400.dist-info/RECORD +0 -480
- {pulumi_sdwan-0.4.0a1746772400.dist-info → pulumi_sdwan-0.6.0a1765953124.dist-info}/top_level.txt +0 -0
|
@@ -1,9 +1,8 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -22,46 +21,58 @@ __all__ = ['TlsSslDecryptionPolicyDefinitionArgs', 'TlsSslDecryptionPolicyDefini
|
|
|
22
21
|
@pulumi.input_type
|
|
23
22
|
class TlsSslDecryptionPolicyDefinitionArgs:
|
|
24
23
|
def __init__(__self__, *,
|
|
25
|
-
description: pulumi.Input[
|
|
26
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[
|
|
27
|
-
certificate_revocation_status: Optional[pulumi.Input[
|
|
28
|
-
default_action: Optional[pulumi.Input[
|
|
29
|
-
ec_key_type: Optional[pulumi.Input[
|
|
30
|
-
expired_certificate: Optional[pulumi.Input[
|
|
31
|
-
failure_mode: Optional[pulumi.Input[
|
|
32
|
-
minimal_tls_version: Optional[pulumi.Input[
|
|
33
|
-
mode: Optional[pulumi.Input[
|
|
34
|
-
name: Optional[pulumi.Input[
|
|
24
|
+
description: pulumi.Input[_builtins.str],
|
|
25
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
26
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
34
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]] = None,
|
|
36
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[
|
|
37
|
-
ssl_decryption_enabled: Optional[pulumi.Input[
|
|
38
|
-
unknown_revocation_status: Optional[pulumi.Input[
|
|
39
|
-
unsupported_cipher_suites: Optional[pulumi.Input[
|
|
40
|
-
unsupported_protocol_versions: Optional[pulumi.Input[
|
|
41
|
-
untrusted_certificate: Optional[pulumi.Input[
|
|
35
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
39
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
40
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
42
41
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]] = None,
|
|
43
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[
|
|
42
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
44
43
|
"""
|
|
45
44
|
The set of arguments for constructing a TlsSslDecryptionPolicyDefinition resource.
|
|
46
|
-
:param pulumi.Input[
|
|
47
|
-
:param pulumi.Input[
|
|
48
|
-
:param pulumi.Input[
|
|
49
|
-
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
|
|
52
|
-
:param pulumi.Input[
|
|
53
|
-
|
|
54
|
-
:param pulumi.Input[
|
|
55
|
-
|
|
45
|
+
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
46
|
+
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
47
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
48
|
+
- Choices: `ocsp`, `none`
|
|
49
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
50
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
51
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
52
|
+
- Choices: `P256`, `P384`, `P521`
|
|
53
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
54
|
+
- Choices: `drop`, `decrypt`
|
|
55
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
56
|
+
- Choices: `open`, `close`
|
|
57
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
58
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
59
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
60
|
+
- Choices: `security`, `unified`
|
|
61
|
+
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
56
62
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
57
|
-
:param pulumi.Input[
|
|
58
|
-
|
|
59
|
-
:param pulumi.Input[
|
|
60
|
-
:param pulumi.Input[
|
|
61
|
-
|
|
62
|
-
:param pulumi.Input[
|
|
63
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
64
|
+
- Choices: `1024`, `2048`, `4096`
|
|
65
|
+
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
66
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
67
|
+
- Choices: `drop`, `decrypt`
|
|
68
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
69
|
+
- Choices: `drop`, `no-decrypt`
|
|
70
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
71
|
+
- Choices: `drop`, `no-decrypt`
|
|
72
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
73
|
+
- Choices: `drop`, `decrypt`
|
|
63
74
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
64
|
-
:param pulumi.Input[
|
|
75
|
+
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
65
76
|
"""
|
|
66
77
|
pulumi.set(__self__, "description", description)
|
|
67
78
|
if certificate_lifetime_in_days is not None:
|
|
@@ -101,127 +112,134 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
101
112
|
if use_default_ca_cert_bundle is not None:
|
|
102
113
|
pulumi.set(__self__, "use_default_ca_cert_bundle", use_default_ca_cert_bundle)
|
|
103
114
|
|
|
104
|
-
@property
|
|
115
|
+
@_builtins.property
|
|
105
116
|
@pulumi.getter
|
|
106
|
-
def description(self) -> pulumi.Input[
|
|
117
|
+
def description(self) -> pulumi.Input[_builtins.str]:
|
|
107
118
|
"""
|
|
108
119
|
The description of the policy definition.
|
|
109
120
|
"""
|
|
110
121
|
return pulumi.get(self, "description")
|
|
111
122
|
|
|
112
123
|
@description.setter
|
|
113
|
-
def description(self, value: pulumi.Input[
|
|
124
|
+
def description(self, value: pulumi.Input[_builtins.str]):
|
|
114
125
|
pulumi.set(self, "description", value)
|
|
115
126
|
|
|
116
|
-
@property
|
|
127
|
+
@_builtins.property
|
|
117
128
|
@pulumi.getter(name="certificateLifetimeInDays")
|
|
118
|
-
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[
|
|
129
|
+
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
119
130
|
"""
|
|
120
131
|
Certificate Lifetime(in Days)
|
|
121
132
|
"""
|
|
122
133
|
return pulumi.get(self, "certificate_lifetime_in_days")
|
|
123
134
|
|
|
124
135
|
@certificate_lifetime_in_days.setter
|
|
125
|
-
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[
|
|
136
|
+
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
126
137
|
pulumi.set(self, "certificate_lifetime_in_days", value)
|
|
127
138
|
|
|
128
|
-
@property
|
|
139
|
+
@_builtins.property
|
|
129
140
|
@pulumi.getter(name="certificateRevocationStatus")
|
|
130
|
-
def certificate_revocation_status(self) -> Optional[pulumi.Input[
|
|
141
|
+
def certificate_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
131
142
|
"""
|
|
132
|
-
Certificate revocation status
|
|
143
|
+
Certificate revocation status
|
|
144
|
+
- Choices: `ocsp`, `none`
|
|
133
145
|
"""
|
|
134
146
|
return pulumi.get(self, "certificate_revocation_status")
|
|
135
147
|
|
|
136
148
|
@certificate_revocation_status.setter
|
|
137
|
-
def certificate_revocation_status(self, value: Optional[pulumi.Input[
|
|
149
|
+
def certificate_revocation_status(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
138
150
|
pulumi.set(self, "certificate_revocation_status", value)
|
|
139
151
|
|
|
140
|
-
@property
|
|
152
|
+
@_builtins.property
|
|
141
153
|
@pulumi.getter(name="defaultAction")
|
|
142
|
-
def default_action(self) -> Optional[pulumi.Input[
|
|
154
|
+
def default_action(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
143
155
|
"""
|
|
144
|
-
Default action (applies when `mode` set to `security`)
|
|
156
|
+
Default action (applies when `mode` set to `security`)
|
|
157
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
145
158
|
"""
|
|
146
159
|
return pulumi.get(self, "default_action")
|
|
147
160
|
|
|
148
161
|
@default_action.setter
|
|
149
|
-
def default_action(self, value: Optional[pulumi.Input[
|
|
162
|
+
def default_action(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
150
163
|
pulumi.set(self, "default_action", value)
|
|
151
164
|
|
|
152
|
-
@property
|
|
165
|
+
@_builtins.property
|
|
153
166
|
@pulumi.getter(name="ecKeyType")
|
|
154
|
-
def ec_key_type(self) -> Optional[pulumi.Input[
|
|
167
|
+
def ec_key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
155
168
|
"""
|
|
156
|
-
EC Key Type
|
|
169
|
+
EC Key Type
|
|
170
|
+
- Choices: `P256`, `P384`, `P521`
|
|
157
171
|
"""
|
|
158
172
|
return pulumi.get(self, "ec_key_type")
|
|
159
173
|
|
|
160
174
|
@ec_key_type.setter
|
|
161
|
-
def ec_key_type(self, value: Optional[pulumi.Input[
|
|
175
|
+
def ec_key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
162
176
|
pulumi.set(self, "ec_key_type", value)
|
|
163
177
|
|
|
164
|
-
@property
|
|
178
|
+
@_builtins.property
|
|
165
179
|
@pulumi.getter(name="expiredCertificate")
|
|
166
|
-
def expired_certificate(self) -> Optional[pulumi.Input[
|
|
180
|
+
def expired_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
167
181
|
"""
|
|
168
|
-
Expired certificate action
|
|
182
|
+
Expired certificate action
|
|
183
|
+
- Choices: `drop`, `decrypt`
|
|
169
184
|
"""
|
|
170
185
|
return pulumi.get(self, "expired_certificate")
|
|
171
186
|
|
|
172
187
|
@expired_certificate.setter
|
|
173
|
-
def expired_certificate(self, value: Optional[pulumi.Input[
|
|
188
|
+
def expired_certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
174
189
|
pulumi.set(self, "expired_certificate", value)
|
|
175
190
|
|
|
176
|
-
@property
|
|
191
|
+
@_builtins.property
|
|
177
192
|
@pulumi.getter(name="failureMode")
|
|
178
|
-
def failure_mode(self) -> Optional[pulumi.Input[
|
|
193
|
+
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
179
194
|
"""
|
|
180
|
-
Failure mode
|
|
195
|
+
Failure mode
|
|
196
|
+
- Choices: `open`, `close`
|
|
181
197
|
"""
|
|
182
198
|
return pulumi.get(self, "failure_mode")
|
|
183
199
|
|
|
184
200
|
@failure_mode.setter
|
|
185
|
-
def failure_mode(self, value: Optional[pulumi.Input[
|
|
201
|
+
def failure_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
186
202
|
pulumi.set(self, "failure_mode", value)
|
|
187
203
|
|
|
188
|
-
@property
|
|
204
|
+
@_builtins.property
|
|
189
205
|
@pulumi.getter(name="minimalTlsVersion")
|
|
190
|
-
def minimal_tls_version(self) -> Optional[pulumi.Input[
|
|
206
|
+
def minimal_tls_version(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
191
207
|
"""
|
|
192
|
-
Minimal TLS Version
|
|
208
|
+
Minimal TLS Version
|
|
209
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
193
210
|
"""
|
|
194
211
|
return pulumi.get(self, "minimal_tls_version")
|
|
195
212
|
|
|
196
213
|
@minimal_tls_version.setter
|
|
197
|
-
def minimal_tls_version(self, value: Optional[pulumi.Input[
|
|
214
|
+
def minimal_tls_version(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
198
215
|
pulumi.set(self, "minimal_tls_version", value)
|
|
199
216
|
|
|
200
|
-
@property
|
|
217
|
+
@_builtins.property
|
|
201
218
|
@pulumi.getter
|
|
202
|
-
def mode(self) -> Optional[pulumi.Input[
|
|
219
|
+
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
203
220
|
"""
|
|
204
|
-
The policy mode
|
|
221
|
+
The policy mode
|
|
222
|
+
- Choices: `security`, `unified`
|
|
205
223
|
"""
|
|
206
224
|
return pulumi.get(self, "mode")
|
|
207
225
|
|
|
208
226
|
@mode.setter
|
|
209
|
-
def mode(self, value: Optional[pulumi.Input[
|
|
227
|
+
def mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
210
228
|
pulumi.set(self, "mode", value)
|
|
211
229
|
|
|
212
|
-
@property
|
|
230
|
+
@_builtins.property
|
|
213
231
|
@pulumi.getter
|
|
214
|
-
def name(self) -> Optional[pulumi.Input[
|
|
232
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
215
233
|
"""
|
|
216
234
|
The name of the policy definition.
|
|
217
235
|
"""
|
|
218
236
|
return pulumi.get(self, "name")
|
|
219
237
|
|
|
220
238
|
@name.setter
|
|
221
|
-
def name(self, value: Optional[pulumi.Input[
|
|
239
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
222
240
|
pulumi.set(self, "name", value)
|
|
223
241
|
|
|
224
|
-
@property
|
|
242
|
+
@_builtins.property
|
|
225
243
|
@pulumi.getter(name="networkRules")
|
|
226
244
|
def network_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]:
|
|
227
245
|
"""
|
|
@@ -233,79 +251,84 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
233
251
|
def network_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]):
|
|
234
252
|
pulumi.set(self, "network_rules", value)
|
|
235
253
|
|
|
236
|
-
@property
|
|
254
|
+
@_builtins.property
|
|
237
255
|
@pulumi.getter(name="rsaKeyPairModulus")
|
|
238
|
-
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[
|
|
256
|
+
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
239
257
|
"""
|
|
240
|
-
RSA key pair modules
|
|
258
|
+
RSA key pair modules
|
|
259
|
+
- Choices: `1024`, `2048`, `4096`
|
|
241
260
|
"""
|
|
242
261
|
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
243
262
|
|
|
244
263
|
@rsa_key_pair_modulus.setter
|
|
245
|
-
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[
|
|
264
|
+
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
246
265
|
pulumi.set(self, "rsa_key_pair_modulus", value)
|
|
247
266
|
|
|
248
|
-
@property
|
|
267
|
+
@_builtins.property
|
|
249
268
|
@pulumi.getter(name="sslDecryptionEnabled")
|
|
250
|
-
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[
|
|
269
|
+
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
251
270
|
"""
|
|
252
271
|
SSL decryption enabled
|
|
253
272
|
"""
|
|
254
273
|
return pulumi.get(self, "ssl_decryption_enabled")
|
|
255
274
|
|
|
256
275
|
@ssl_decryption_enabled.setter
|
|
257
|
-
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[
|
|
276
|
+
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
258
277
|
pulumi.set(self, "ssl_decryption_enabled", value)
|
|
259
278
|
|
|
260
|
-
@property
|
|
279
|
+
@_builtins.property
|
|
261
280
|
@pulumi.getter(name="unknownRevocationStatus")
|
|
262
|
-
def unknown_revocation_status(self) -> Optional[pulumi.Input[
|
|
281
|
+
def unknown_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
263
282
|
"""
|
|
264
|
-
Unknown revocation status action
|
|
283
|
+
Unknown revocation status action
|
|
284
|
+
- Choices: `drop`, `decrypt`
|
|
265
285
|
"""
|
|
266
286
|
return pulumi.get(self, "unknown_revocation_status")
|
|
267
287
|
|
|
268
288
|
@unknown_revocation_status.setter
|
|
269
|
-
def unknown_revocation_status(self, value: Optional[pulumi.Input[
|
|
289
|
+
def unknown_revocation_status(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
270
290
|
pulumi.set(self, "unknown_revocation_status", value)
|
|
271
291
|
|
|
272
|
-
@property
|
|
292
|
+
@_builtins.property
|
|
273
293
|
@pulumi.getter(name="unsupportedCipherSuites")
|
|
274
|
-
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[
|
|
294
|
+
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
275
295
|
"""
|
|
276
|
-
Unsupported cipher suites action
|
|
296
|
+
Unsupported cipher suites action
|
|
297
|
+
- Choices: `drop`, `no-decrypt`
|
|
277
298
|
"""
|
|
278
299
|
return pulumi.get(self, "unsupported_cipher_suites")
|
|
279
300
|
|
|
280
301
|
@unsupported_cipher_suites.setter
|
|
281
|
-
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[
|
|
302
|
+
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
282
303
|
pulumi.set(self, "unsupported_cipher_suites", value)
|
|
283
304
|
|
|
284
|
-
@property
|
|
305
|
+
@_builtins.property
|
|
285
306
|
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
286
|
-
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[
|
|
307
|
+
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
287
308
|
"""
|
|
288
|
-
Unsupported protocol versions action
|
|
309
|
+
Unsupported protocol versions action
|
|
310
|
+
- Choices: `drop`, `no-decrypt`
|
|
289
311
|
"""
|
|
290
312
|
return pulumi.get(self, "unsupported_protocol_versions")
|
|
291
313
|
|
|
292
314
|
@unsupported_protocol_versions.setter
|
|
293
|
-
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[
|
|
315
|
+
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
294
316
|
pulumi.set(self, "unsupported_protocol_versions", value)
|
|
295
317
|
|
|
296
|
-
@property
|
|
318
|
+
@_builtins.property
|
|
297
319
|
@pulumi.getter(name="untrustedCertificate")
|
|
298
|
-
def untrusted_certificate(self) -> Optional[pulumi.Input[
|
|
320
|
+
def untrusted_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
299
321
|
"""
|
|
300
|
-
Untrusted certificate action
|
|
322
|
+
Untrusted certificate action
|
|
323
|
+
- Choices: `drop`, `decrypt`
|
|
301
324
|
"""
|
|
302
325
|
return pulumi.get(self, "untrusted_certificate")
|
|
303
326
|
|
|
304
327
|
@untrusted_certificate.setter
|
|
305
|
-
def untrusted_certificate(self, value: Optional[pulumi.Input[
|
|
328
|
+
def untrusted_certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
306
329
|
pulumi.set(self, "untrusted_certificate", value)
|
|
307
330
|
|
|
308
|
-
@property
|
|
331
|
+
@_builtins.property
|
|
309
332
|
@pulumi.getter(name="urlRules")
|
|
310
333
|
def url_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]:
|
|
311
334
|
"""
|
|
@@ -317,64 +340,76 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
317
340
|
def url_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]):
|
|
318
341
|
pulumi.set(self, "url_rules", value)
|
|
319
342
|
|
|
320
|
-
@property
|
|
343
|
+
@_builtins.property
|
|
321
344
|
@pulumi.getter(name="useDefaultCaCertBundle")
|
|
322
|
-
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[
|
|
345
|
+
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
323
346
|
"""
|
|
324
347
|
Use default CA certificate bundle
|
|
325
348
|
"""
|
|
326
349
|
return pulumi.get(self, "use_default_ca_cert_bundle")
|
|
327
350
|
|
|
328
351
|
@use_default_ca_cert_bundle.setter
|
|
329
|
-
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[
|
|
352
|
+
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
330
353
|
pulumi.set(self, "use_default_ca_cert_bundle", value)
|
|
331
354
|
|
|
332
355
|
|
|
333
356
|
@pulumi.input_type
|
|
334
357
|
class _TlsSslDecryptionPolicyDefinitionState:
|
|
335
358
|
def __init__(__self__, *,
|
|
336
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[
|
|
337
|
-
certificate_revocation_status: Optional[pulumi.Input[
|
|
338
|
-
default_action: Optional[pulumi.Input[
|
|
339
|
-
description: Optional[pulumi.Input[
|
|
340
|
-
ec_key_type: Optional[pulumi.Input[
|
|
341
|
-
expired_certificate: Optional[pulumi.Input[
|
|
342
|
-
failure_mode: Optional[pulumi.Input[
|
|
343
|
-
minimal_tls_version: Optional[pulumi.Input[
|
|
344
|
-
mode: Optional[pulumi.Input[
|
|
345
|
-
name: Optional[pulumi.Input[
|
|
359
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
360
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
361
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
362
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
363
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
364
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
365
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
366
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
367
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
368
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
346
369
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]] = None,
|
|
347
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[
|
|
348
|
-
ssl_decryption_enabled: Optional[pulumi.Input[
|
|
349
|
-
unknown_revocation_status: Optional[pulumi.Input[
|
|
350
|
-
unsupported_cipher_suites: Optional[pulumi.Input[
|
|
351
|
-
unsupported_protocol_versions: Optional[pulumi.Input[
|
|
352
|
-
untrusted_certificate: Optional[pulumi.Input[
|
|
370
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
371
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
372
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
373
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
374
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
375
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
353
376
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]] = None,
|
|
354
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[
|
|
355
|
-
version: Optional[pulumi.Input[
|
|
377
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
378
|
+
version: Optional[pulumi.Input[_builtins.int]] = None):
|
|
356
379
|
"""
|
|
357
380
|
Input properties used for looking up and filtering TlsSslDecryptionPolicyDefinition resources.
|
|
358
|
-
:param pulumi.Input[
|
|
359
|
-
:param pulumi.Input[
|
|
360
|
-
|
|
361
|
-
:param pulumi.Input[
|
|
362
|
-
|
|
363
|
-
:param pulumi.Input[
|
|
364
|
-
:param pulumi.Input[
|
|
365
|
-
|
|
366
|
-
:param pulumi.Input[
|
|
367
|
-
|
|
381
|
+
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
382
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
383
|
+
- Choices: `ocsp`, `none`
|
|
384
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
385
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
386
|
+
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
387
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
388
|
+
- Choices: `P256`, `P384`, `P521`
|
|
389
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
390
|
+
- Choices: `drop`, `decrypt`
|
|
391
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
392
|
+
- Choices: `open`, `close`
|
|
393
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
394
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
395
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
396
|
+
- Choices: `security`, `unified`
|
|
397
|
+
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
368
398
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
369
|
-
:param pulumi.Input[
|
|
370
|
-
|
|
371
|
-
:param pulumi.Input[
|
|
372
|
-
:param pulumi.Input[
|
|
373
|
-
|
|
374
|
-
:param pulumi.Input[
|
|
399
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
400
|
+
- Choices: `1024`, `2048`, `4096`
|
|
401
|
+
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
402
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
403
|
+
- Choices: `drop`, `decrypt`
|
|
404
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
405
|
+
- Choices: `drop`, `no-decrypt`
|
|
406
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
407
|
+
- Choices: `drop`, `no-decrypt`
|
|
408
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
409
|
+
- Choices: `drop`, `decrypt`
|
|
375
410
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
376
|
-
:param pulumi.Input[
|
|
377
|
-
:param pulumi.Input[
|
|
411
|
+
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
412
|
+
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
378
413
|
"""
|
|
379
414
|
if certificate_lifetime_in_days is not None:
|
|
380
415
|
pulumi.set(__self__, "certificate_lifetime_in_days", certificate_lifetime_in_days)
|
|
@@ -417,127 +452,134 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
417
452
|
if version is not None:
|
|
418
453
|
pulumi.set(__self__, "version", version)
|
|
419
454
|
|
|
420
|
-
@property
|
|
455
|
+
@_builtins.property
|
|
421
456
|
@pulumi.getter(name="certificateLifetimeInDays")
|
|
422
|
-
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[
|
|
457
|
+
def certificate_lifetime_in_days(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
423
458
|
"""
|
|
424
459
|
Certificate Lifetime(in Days)
|
|
425
460
|
"""
|
|
426
461
|
return pulumi.get(self, "certificate_lifetime_in_days")
|
|
427
462
|
|
|
428
463
|
@certificate_lifetime_in_days.setter
|
|
429
|
-
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[
|
|
464
|
+
def certificate_lifetime_in_days(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
430
465
|
pulumi.set(self, "certificate_lifetime_in_days", value)
|
|
431
466
|
|
|
432
|
-
@property
|
|
467
|
+
@_builtins.property
|
|
433
468
|
@pulumi.getter(name="certificateRevocationStatus")
|
|
434
|
-
def certificate_revocation_status(self) -> Optional[pulumi.Input[
|
|
469
|
+
def certificate_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
435
470
|
"""
|
|
436
|
-
Certificate revocation status
|
|
471
|
+
Certificate revocation status
|
|
472
|
+
- Choices: `ocsp`, `none`
|
|
437
473
|
"""
|
|
438
474
|
return pulumi.get(self, "certificate_revocation_status")
|
|
439
475
|
|
|
440
476
|
@certificate_revocation_status.setter
|
|
441
|
-
def certificate_revocation_status(self, value: Optional[pulumi.Input[
|
|
477
|
+
def certificate_revocation_status(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
442
478
|
pulumi.set(self, "certificate_revocation_status", value)
|
|
443
479
|
|
|
444
|
-
@property
|
|
480
|
+
@_builtins.property
|
|
445
481
|
@pulumi.getter(name="defaultAction")
|
|
446
|
-
def default_action(self) -> Optional[pulumi.Input[
|
|
482
|
+
def default_action(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
447
483
|
"""
|
|
448
|
-
Default action (applies when `mode` set to `security`)
|
|
484
|
+
Default action (applies when `mode` set to `security`)
|
|
485
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
449
486
|
"""
|
|
450
487
|
return pulumi.get(self, "default_action")
|
|
451
488
|
|
|
452
489
|
@default_action.setter
|
|
453
|
-
def default_action(self, value: Optional[pulumi.Input[
|
|
490
|
+
def default_action(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
454
491
|
pulumi.set(self, "default_action", value)
|
|
455
492
|
|
|
456
|
-
@property
|
|
493
|
+
@_builtins.property
|
|
457
494
|
@pulumi.getter
|
|
458
|
-
def description(self) -> Optional[pulumi.Input[
|
|
495
|
+
def description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
459
496
|
"""
|
|
460
497
|
The description of the policy definition.
|
|
461
498
|
"""
|
|
462
499
|
return pulumi.get(self, "description")
|
|
463
500
|
|
|
464
501
|
@description.setter
|
|
465
|
-
def description(self, value: Optional[pulumi.Input[
|
|
502
|
+
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
466
503
|
pulumi.set(self, "description", value)
|
|
467
504
|
|
|
468
|
-
@property
|
|
505
|
+
@_builtins.property
|
|
469
506
|
@pulumi.getter(name="ecKeyType")
|
|
470
|
-
def ec_key_type(self) -> Optional[pulumi.Input[
|
|
507
|
+
def ec_key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
471
508
|
"""
|
|
472
|
-
EC Key Type
|
|
509
|
+
EC Key Type
|
|
510
|
+
- Choices: `P256`, `P384`, `P521`
|
|
473
511
|
"""
|
|
474
512
|
return pulumi.get(self, "ec_key_type")
|
|
475
513
|
|
|
476
514
|
@ec_key_type.setter
|
|
477
|
-
def ec_key_type(self, value: Optional[pulumi.Input[
|
|
515
|
+
def ec_key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
478
516
|
pulumi.set(self, "ec_key_type", value)
|
|
479
517
|
|
|
480
|
-
@property
|
|
518
|
+
@_builtins.property
|
|
481
519
|
@pulumi.getter(name="expiredCertificate")
|
|
482
|
-
def expired_certificate(self) -> Optional[pulumi.Input[
|
|
520
|
+
def expired_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
483
521
|
"""
|
|
484
|
-
Expired certificate action
|
|
522
|
+
Expired certificate action
|
|
523
|
+
- Choices: `drop`, `decrypt`
|
|
485
524
|
"""
|
|
486
525
|
return pulumi.get(self, "expired_certificate")
|
|
487
526
|
|
|
488
527
|
@expired_certificate.setter
|
|
489
|
-
def expired_certificate(self, value: Optional[pulumi.Input[
|
|
528
|
+
def expired_certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
490
529
|
pulumi.set(self, "expired_certificate", value)
|
|
491
530
|
|
|
492
|
-
@property
|
|
531
|
+
@_builtins.property
|
|
493
532
|
@pulumi.getter(name="failureMode")
|
|
494
|
-
def failure_mode(self) -> Optional[pulumi.Input[
|
|
533
|
+
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
495
534
|
"""
|
|
496
|
-
Failure mode
|
|
535
|
+
Failure mode
|
|
536
|
+
- Choices: `open`, `close`
|
|
497
537
|
"""
|
|
498
538
|
return pulumi.get(self, "failure_mode")
|
|
499
539
|
|
|
500
540
|
@failure_mode.setter
|
|
501
|
-
def failure_mode(self, value: Optional[pulumi.Input[
|
|
541
|
+
def failure_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
502
542
|
pulumi.set(self, "failure_mode", value)
|
|
503
543
|
|
|
504
|
-
@property
|
|
544
|
+
@_builtins.property
|
|
505
545
|
@pulumi.getter(name="minimalTlsVersion")
|
|
506
|
-
def minimal_tls_version(self) -> Optional[pulumi.Input[
|
|
546
|
+
def minimal_tls_version(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
507
547
|
"""
|
|
508
|
-
Minimal TLS Version
|
|
548
|
+
Minimal TLS Version
|
|
549
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
509
550
|
"""
|
|
510
551
|
return pulumi.get(self, "minimal_tls_version")
|
|
511
552
|
|
|
512
553
|
@minimal_tls_version.setter
|
|
513
|
-
def minimal_tls_version(self, value: Optional[pulumi.Input[
|
|
554
|
+
def minimal_tls_version(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
514
555
|
pulumi.set(self, "minimal_tls_version", value)
|
|
515
556
|
|
|
516
|
-
@property
|
|
557
|
+
@_builtins.property
|
|
517
558
|
@pulumi.getter
|
|
518
|
-
def mode(self) -> Optional[pulumi.Input[
|
|
559
|
+
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
519
560
|
"""
|
|
520
|
-
The policy mode
|
|
561
|
+
The policy mode
|
|
562
|
+
- Choices: `security`, `unified`
|
|
521
563
|
"""
|
|
522
564
|
return pulumi.get(self, "mode")
|
|
523
565
|
|
|
524
566
|
@mode.setter
|
|
525
|
-
def mode(self, value: Optional[pulumi.Input[
|
|
567
|
+
def mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
526
568
|
pulumi.set(self, "mode", value)
|
|
527
569
|
|
|
528
|
-
@property
|
|
570
|
+
@_builtins.property
|
|
529
571
|
@pulumi.getter
|
|
530
|
-
def name(self) -> Optional[pulumi.Input[
|
|
572
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
531
573
|
"""
|
|
532
574
|
The name of the policy definition.
|
|
533
575
|
"""
|
|
534
576
|
return pulumi.get(self, "name")
|
|
535
577
|
|
|
536
578
|
@name.setter
|
|
537
|
-
def name(self, value: Optional[pulumi.Input[
|
|
579
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
538
580
|
pulumi.set(self, "name", value)
|
|
539
581
|
|
|
540
|
-
@property
|
|
582
|
+
@_builtins.property
|
|
541
583
|
@pulumi.getter(name="networkRules")
|
|
542
584
|
def network_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]:
|
|
543
585
|
"""
|
|
@@ -549,79 +591,84 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
549
591
|
def network_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]]]):
|
|
550
592
|
pulumi.set(self, "network_rules", value)
|
|
551
593
|
|
|
552
|
-
@property
|
|
594
|
+
@_builtins.property
|
|
553
595
|
@pulumi.getter(name="rsaKeyPairModulus")
|
|
554
|
-
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[
|
|
596
|
+
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
555
597
|
"""
|
|
556
|
-
RSA key pair modules
|
|
598
|
+
RSA key pair modules
|
|
599
|
+
- Choices: `1024`, `2048`, `4096`
|
|
557
600
|
"""
|
|
558
601
|
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
559
602
|
|
|
560
603
|
@rsa_key_pair_modulus.setter
|
|
561
|
-
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[
|
|
604
|
+
def rsa_key_pair_modulus(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
562
605
|
pulumi.set(self, "rsa_key_pair_modulus", value)
|
|
563
606
|
|
|
564
|
-
@property
|
|
607
|
+
@_builtins.property
|
|
565
608
|
@pulumi.getter(name="sslDecryptionEnabled")
|
|
566
|
-
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[
|
|
609
|
+
def ssl_decryption_enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
567
610
|
"""
|
|
568
611
|
SSL decryption enabled
|
|
569
612
|
"""
|
|
570
613
|
return pulumi.get(self, "ssl_decryption_enabled")
|
|
571
614
|
|
|
572
615
|
@ssl_decryption_enabled.setter
|
|
573
|
-
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[
|
|
616
|
+
def ssl_decryption_enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
574
617
|
pulumi.set(self, "ssl_decryption_enabled", value)
|
|
575
618
|
|
|
576
|
-
@property
|
|
619
|
+
@_builtins.property
|
|
577
620
|
@pulumi.getter(name="unknownRevocationStatus")
|
|
578
|
-
def unknown_revocation_status(self) -> Optional[pulumi.Input[
|
|
621
|
+
def unknown_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
579
622
|
"""
|
|
580
|
-
Unknown revocation status action
|
|
623
|
+
Unknown revocation status action
|
|
624
|
+
- Choices: `drop`, `decrypt`
|
|
581
625
|
"""
|
|
582
626
|
return pulumi.get(self, "unknown_revocation_status")
|
|
583
627
|
|
|
584
628
|
@unknown_revocation_status.setter
|
|
585
|
-
def unknown_revocation_status(self, value: Optional[pulumi.Input[
|
|
629
|
+
def unknown_revocation_status(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
586
630
|
pulumi.set(self, "unknown_revocation_status", value)
|
|
587
631
|
|
|
588
|
-
@property
|
|
632
|
+
@_builtins.property
|
|
589
633
|
@pulumi.getter(name="unsupportedCipherSuites")
|
|
590
|
-
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[
|
|
634
|
+
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
591
635
|
"""
|
|
592
|
-
Unsupported cipher suites action
|
|
636
|
+
Unsupported cipher suites action
|
|
637
|
+
- Choices: `drop`, `no-decrypt`
|
|
593
638
|
"""
|
|
594
639
|
return pulumi.get(self, "unsupported_cipher_suites")
|
|
595
640
|
|
|
596
641
|
@unsupported_cipher_suites.setter
|
|
597
|
-
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[
|
|
642
|
+
def unsupported_cipher_suites(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
598
643
|
pulumi.set(self, "unsupported_cipher_suites", value)
|
|
599
644
|
|
|
600
|
-
@property
|
|
645
|
+
@_builtins.property
|
|
601
646
|
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
602
|
-
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[
|
|
647
|
+
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
603
648
|
"""
|
|
604
|
-
Unsupported protocol versions action
|
|
649
|
+
Unsupported protocol versions action
|
|
650
|
+
- Choices: `drop`, `no-decrypt`
|
|
605
651
|
"""
|
|
606
652
|
return pulumi.get(self, "unsupported_protocol_versions")
|
|
607
653
|
|
|
608
654
|
@unsupported_protocol_versions.setter
|
|
609
|
-
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[
|
|
655
|
+
def unsupported_protocol_versions(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
610
656
|
pulumi.set(self, "unsupported_protocol_versions", value)
|
|
611
657
|
|
|
612
|
-
@property
|
|
658
|
+
@_builtins.property
|
|
613
659
|
@pulumi.getter(name="untrustedCertificate")
|
|
614
|
-
def untrusted_certificate(self) -> Optional[pulumi.Input[
|
|
660
|
+
def untrusted_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
615
661
|
"""
|
|
616
|
-
Untrusted certificate action
|
|
662
|
+
Untrusted certificate action
|
|
663
|
+
- Choices: `drop`, `decrypt`
|
|
617
664
|
"""
|
|
618
665
|
return pulumi.get(self, "untrusted_certificate")
|
|
619
666
|
|
|
620
667
|
@untrusted_certificate.setter
|
|
621
|
-
def untrusted_certificate(self, value: Optional[pulumi.Input[
|
|
668
|
+
def untrusted_certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
622
669
|
pulumi.set(self, "untrusted_certificate", value)
|
|
623
670
|
|
|
624
|
-
@property
|
|
671
|
+
@_builtins.property
|
|
625
672
|
@pulumi.getter(name="urlRules")
|
|
626
673
|
def url_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]:
|
|
627
674
|
"""
|
|
@@ -633,28 +680,28 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
633
680
|
def url_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]]]):
|
|
634
681
|
pulumi.set(self, "url_rules", value)
|
|
635
682
|
|
|
636
|
-
@property
|
|
683
|
+
@_builtins.property
|
|
637
684
|
@pulumi.getter(name="useDefaultCaCertBundle")
|
|
638
|
-
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[
|
|
685
|
+
def use_default_ca_cert_bundle(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
639
686
|
"""
|
|
640
687
|
Use default CA certificate bundle
|
|
641
688
|
"""
|
|
642
689
|
return pulumi.get(self, "use_default_ca_cert_bundle")
|
|
643
690
|
|
|
644
691
|
@use_default_ca_cert_bundle.setter
|
|
645
|
-
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[
|
|
692
|
+
def use_default_ca_cert_bundle(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
646
693
|
pulumi.set(self, "use_default_ca_cert_bundle", value)
|
|
647
694
|
|
|
648
|
-
@property
|
|
695
|
+
@_builtins.property
|
|
649
696
|
@pulumi.getter
|
|
650
|
-
def version(self) -> Optional[pulumi.Input[
|
|
697
|
+
def version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
651
698
|
"""
|
|
652
699
|
The version of the object
|
|
653
700
|
"""
|
|
654
701
|
return pulumi.get(self, "version")
|
|
655
702
|
|
|
656
703
|
@version.setter
|
|
657
|
-
def version(self, value: Optional[pulumi.Input[
|
|
704
|
+
def version(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
658
705
|
pulumi.set(self, "version", value)
|
|
659
706
|
|
|
660
707
|
|
|
@@ -664,56 +711,106 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
664
711
|
def __init__(__self__,
|
|
665
712
|
resource_name: str,
|
|
666
713
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
667
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[
|
|
668
|
-
certificate_revocation_status: Optional[pulumi.Input[
|
|
669
|
-
default_action: Optional[pulumi.Input[
|
|
670
|
-
description: Optional[pulumi.Input[
|
|
671
|
-
ec_key_type: Optional[pulumi.Input[
|
|
672
|
-
expired_certificate: Optional[pulumi.Input[
|
|
673
|
-
failure_mode: Optional[pulumi.Input[
|
|
674
|
-
minimal_tls_version: Optional[pulumi.Input[
|
|
675
|
-
mode: Optional[pulumi.Input[
|
|
676
|
-
name: Optional[pulumi.Input[
|
|
714
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
715
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
716
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
717
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
718
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
719
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
720
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
721
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
722
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
723
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
677
724
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]]] = None,
|
|
678
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[
|
|
679
|
-
ssl_decryption_enabled: Optional[pulumi.Input[
|
|
680
|
-
unknown_revocation_status: Optional[pulumi.Input[
|
|
681
|
-
unsupported_cipher_suites: Optional[pulumi.Input[
|
|
682
|
-
unsupported_protocol_versions: Optional[pulumi.Input[
|
|
683
|
-
untrusted_certificate: Optional[pulumi.Input[
|
|
725
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
726
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
727
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
728
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
729
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
730
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
684
731
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]]] = None,
|
|
685
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[
|
|
732
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
686
733
|
__props__=None):
|
|
687
734
|
"""
|
|
688
735
|
This resource can manage a TLS SSL Decryption Policy Definition .
|
|
689
736
|
|
|
737
|
+
## Example Usage
|
|
738
|
+
|
|
739
|
+
```python
|
|
740
|
+
import pulumi
|
|
741
|
+
import pulumi_sdwan as sdwan
|
|
742
|
+
|
|
743
|
+
example = sdwan.TlsSslDecryptionPolicyDefinition("example",
|
|
744
|
+
name="Example",
|
|
745
|
+
description="My description",
|
|
746
|
+
mode="security",
|
|
747
|
+
default_action="noIntent",
|
|
748
|
+
network_rules=[{
|
|
749
|
+
"base_action": "doNotDecrypt",
|
|
750
|
+
"rule_id": 4,
|
|
751
|
+
"rule_name": "Example",
|
|
752
|
+
"rule_type": "sslDecryption",
|
|
753
|
+
"source_and_destination_configuration": [{
|
|
754
|
+
"option": "destinationIp",
|
|
755
|
+
"value": "10.0.0.0/12",
|
|
756
|
+
}],
|
|
757
|
+
}],
|
|
758
|
+
ssl_decryption_enabled="true",
|
|
759
|
+
expired_certificate="drop",
|
|
760
|
+
untrusted_certificate="drop",
|
|
761
|
+
certificate_revocation_status="none",
|
|
762
|
+
unknown_revocation_status="drop",
|
|
763
|
+
unsupported_protocol_versions="drop",
|
|
764
|
+
unsupported_cipher_suites="drop",
|
|
765
|
+
failure_mode="close",
|
|
766
|
+
rsa_key_pair_modulus="2048",
|
|
767
|
+
ec_key_type="P384",
|
|
768
|
+
certificate_lifetime_in_days=1,
|
|
769
|
+
minimal_tls_version="TLSv1.2",
|
|
770
|
+
use_default_ca_cert_bundle=True)
|
|
771
|
+
```
|
|
772
|
+
|
|
690
773
|
## Import
|
|
691
774
|
|
|
775
|
+
The `pulumi import` command can be used, for example:
|
|
776
|
+
|
|
692
777
|
```sh
|
|
693
778
|
$ pulumi import sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
694
779
|
```
|
|
695
780
|
|
|
696
781
|
:param str resource_name: The name of the resource.
|
|
697
782
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
698
|
-
:param pulumi.Input[
|
|
699
|
-
:param pulumi.Input[
|
|
700
|
-
|
|
701
|
-
:param pulumi.Input[
|
|
702
|
-
|
|
703
|
-
:param pulumi.Input[
|
|
704
|
-
:param pulumi.Input[
|
|
705
|
-
|
|
706
|
-
:param pulumi.Input[
|
|
707
|
-
|
|
783
|
+
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
784
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
785
|
+
- Choices: `ocsp`, `none`
|
|
786
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
787
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
788
|
+
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
789
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
790
|
+
- Choices: `P256`, `P384`, `P521`
|
|
791
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
792
|
+
- Choices: `drop`, `decrypt`
|
|
793
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
794
|
+
- Choices: `open`, `close`
|
|
795
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
796
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
797
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
798
|
+
- Choices: `security`, `unified`
|
|
799
|
+
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
708
800
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
709
|
-
:param pulumi.Input[
|
|
710
|
-
|
|
711
|
-
:param pulumi.Input[
|
|
712
|
-
:param pulumi.Input[
|
|
713
|
-
|
|
714
|
-
:param pulumi.Input[
|
|
801
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
802
|
+
- Choices: `1024`, `2048`, `4096`
|
|
803
|
+
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
804
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
805
|
+
- Choices: `drop`, `decrypt`
|
|
806
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
807
|
+
- Choices: `drop`, `no-decrypt`
|
|
808
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
809
|
+
- Choices: `drop`, `no-decrypt`
|
|
810
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
811
|
+
- Choices: `drop`, `decrypt`
|
|
715
812
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
716
|
-
:param pulumi.Input[
|
|
813
|
+
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
717
814
|
"""
|
|
718
815
|
...
|
|
719
816
|
@overload
|
|
@@ -724,8 +821,46 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
724
821
|
"""
|
|
725
822
|
This resource can manage a TLS SSL Decryption Policy Definition .
|
|
726
823
|
|
|
824
|
+
## Example Usage
|
|
825
|
+
|
|
826
|
+
```python
|
|
827
|
+
import pulumi
|
|
828
|
+
import pulumi_sdwan as sdwan
|
|
829
|
+
|
|
830
|
+
example = sdwan.TlsSslDecryptionPolicyDefinition("example",
|
|
831
|
+
name="Example",
|
|
832
|
+
description="My description",
|
|
833
|
+
mode="security",
|
|
834
|
+
default_action="noIntent",
|
|
835
|
+
network_rules=[{
|
|
836
|
+
"base_action": "doNotDecrypt",
|
|
837
|
+
"rule_id": 4,
|
|
838
|
+
"rule_name": "Example",
|
|
839
|
+
"rule_type": "sslDecryption",
|
|
840
|
+
"source_and_destination_configuration": [{
|
|
841
|
+
"option": "destinationIp",
|
|
842
|
+
"value": "10.0.0.0/12",
|
|
843
|
+
}],
|
|
844
|
+
}],
|
|
845
|
+
ssl_decryption_enabled="true",
|
|
846
|
+
expired_certificate="drop",
|
|
847
|
+
untrusted_certificate="drop",
|
|
848
|
+
certificate_revocation_status="none",
|
|
849
|
+
unknown_revocation_status="drop",
|
|
850
|
+
unsupported_protocol_versions="drop",
|
|
851
|
+
unsupported_cipher_suites="drop",
|
|
852
|
+
failure_mode="close",
|
|
853
|
+
rsa_key_pair_modulus="2048",
|
|
854
|
+
ec_key_type="P384",
|
|
855
|
+
certificate_lifetime_in_days=1,
|
|
856
|
+
minimal_tls_version="TLSv1.2",
|
|
857
|
+
use_default_ca_cert_bundle=True)
|
|
858
|
+
```
|
|
859
|
+
|
|
727
860
|
## Import
|
|
728
861
|
|
|
862
|
+
The `pulumi import` command can be used, for example:
|
|
863
|
+
|
|
729
864
|
```sh
|
|
730
865
|
$ pulumi import sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
|
|
731
866
|
```
|
|
@@ -745,25 +880,25 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
745
880
|
def _internal_init(__self__,
|
|
746
881
|
resource_name: str,
|
|
747
882
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
748
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[
|
|
749
|
-
certificate_revocation_status: Optional[pulumi.Input[
|
|
750
|
-
default_action: Optional[pulumi.Input[
|
|
751
|
-
description: Optional[pulumi.Input[
|
|
752
|
-
ec_key_type: Optional[pulumi.Input[
|
|
753
|
-
expired_certificate: Optional[pulumi.Input[
|
|
754
|
-
failure_mode: Optional[pulumi.Input[
|
|
755
|
-
minimal_tls_version: Optional[pulumi.Input[
|
|
756
|
-
mode: Optional[pulumi.Input[
|
|
757
|
-
name: Optional[pulumi.Input[
|
|
883
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
884
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
885
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
886
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
887
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
888
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
889
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
890
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
891
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
892
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
758
893
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]]] = None,
|
|
759
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[
|
|
760
|
-
ssl_decryption_enabled: Optional[pulumi.Input[
|
|
761
|
-
unknown_revocation_status: Optional[pulumi.Input[
|
|
762
|
-
unsupported_cipher_suites: Optional[pulumi.Input[
|
|
763
|
-
unsupported_protocol_versions: Optional[pulumi.Input[
|
|
764
|
-
untrusted_certificate: Optional[pulumi.Input[
|
|
894
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
895
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
896
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
897
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
898
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
899
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
765
900
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]]] = None,
|
|
766
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[
|
|
901
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
767
902
|
__props__=None):
|
|
768
903
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
769
904
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -805,26 +940,26 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
805
940
|
def get(resource_name: str,
|
|
806
941
|
id: pulumi.Input[str],
|
|
807
942
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
808
|
-
certificate_lifetime_in_days: Optional[pulumi.Input[
|
|
809
|
-
certificate_revocation_status: Optional[pulumi.Input[
|
|
810
|
-
default_action: Optional[pulumi.Input[
|
|
811
|
-
description: Optional[pulumi.Input[
|
|
812
|
-
ec_key_type: Optional[pulumi.Input[
|
|
813
|
-
expired_certificate: Optional[pulumi.Input[
|
|
814
|
-
failure_mode: Optional[pulumi.Input[
|
|
815
|
-
minimal_tls_version: Optional[pulumi.Input[
|
|
816
|
-
mode: Optional[pulumi.Input[
|
|
817
|
-
name: Optional[pulumi.Input[
|
|
943
|
+
certificate_lifetime_in_days: Optional[pulumi.Input[_builtins.int]] = None,
|
|
944
|
+
certificate_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
945
|
+
default_action: Optional[pulumi.Input[_builtins.str]] = None,
|
|
946
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
947
|
+
ec_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
948
|
+
expired_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
949
|
+
failure_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
950
|
+
minimal_tls_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
951
|
+
mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
952
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
818
953
|
network_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]]] = None,
|
|
819
|
-
rsa_key_pair_modulus: Optional[pulumi.Input[
|
|
820
|
-
ssl_decryption_enabled: Optional[pulumi.Input[
|
|
821
|
-
unknown_revocation_status: Optional[pulumi.Input[
|
|
822
|
-
unsupported_cipher_suites: Optional[pulumi.Input[
|
|
823
|
-
unsupported_protocol_versions: Optional[pulumi.Input[
|
|
824
|
-
untrusted_certificate: Optional[pulumi.Input[
|
|
954
|
+
rsa_key_pair_modulus: Optional[pulumi.Input[_builtins.str]] = None,
|
|
955
|
+
ssl_decryption_enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
956
|
+
unknown_revocation_status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
957
|
+
unsupported_cipher_suites: Optional[pulumi.Input[_builtins.str]] = None,
|
|
958
|
+
unsupported_protocol_versions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
959
|
+
untrusted_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
825
960
|
url_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]]] = None,
|
|
826
|
-
use_default_ca_cert_bundle: Optional[pulumi.Input[
|
|
827
|
-
version: Optional[pulumi.Input[
|
|
961
|
+
use_default_ca_cert_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
962
|
+
version: Optional[pulumi.Input[_builtins.int]] = None) -> 'TlsSslDecryptionPolicyDefinition':
|
|
828
963
|
"""
|
|
829
964
|
Get an existing TlsSslDecryptionPolicyDefinition resource's state with the given name, id, and optional extra
|
|
830
965
|
properties used to qualify the lookup.
|
|
@@ -832,26 +967,38 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
832
967
|
:param str resource_name: The unique name of the resulting resource.
|
|
833
968
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
834
969
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
835
|
-
:param pulumi.Input[
|
|
836
|
-
:param pulumi.Input[
|
|
837
|
-
|
|
838
|
-
:param pulumi.Input[
|
|
839
|
-
|
|
840
|
-
:param pulumi.Input[
|
|
841
|
-
:param pulumi.Input[
|
|
842
|
-
|
|
843
|
-
:param pulumi.Input[
|
|
844
|
-
|
|
970
|
+
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
971
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
972
|
+
- Choices: `ocsp`, `none`
|
|
973
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
974
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
975
|
+
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
976
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
977
|
+
- Choices: `P256`, `P384`, `P521`
|
|
978
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
979
|
+
- Choices: `drop`, `decrypt`
|
|
980
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
981
|
+
- Choices: `open`, `close`
|
|
982
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
983
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
984
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
985
|
+
- Choices: `security`, `unified`
|
|
986
|
+
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
845
987
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
846
|
-
:param pulumi.Input[
|
|
847
|
-
|
|
848
|
-
:param pulumi.Input[
|
|
849
|
-
:param pulumi.Input[
|
|
850
|
-
|
|
851
|
-
:param pulumi.Input[
|
|
988
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
989
|
+
- Choices: `1024`, `2048`, `4096`
|
|
990
|
+
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
991
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
992
|
+
- Choices: `drop`, `decrypt`
|
|
993
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
994
|
+
- Choices: `drop`, `no-decrypt`
|
|
995
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
996
|
+
- Choices: `drop`, `no-decrypt`
|
|
997
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
998
|
+
- Choices: `drop`, `decrypt`
|
|
852
999
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
853
|
-
:param pulumi.Input[
|
|
854
|
-
:param pulumi.Input[
|
|
1000
|
+
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
1001
|
+
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
855
1002
|
"""
|
|
856
1003
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
857
1004
|
|
|
@@ -879,87 +1026,94 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
879
1026
|
__props__.__dict__["version"] = version
|
|
880
1027
|
return TlsSslDecryptionPolicyDefinition(resource_name, opts=opts, __props__=__props__)
|
|
881
1028
|
|
|
882
|
-
@property
|
|
1029
|
+
@_builtins.property
|
|
883
1030
|
@pulumi.getter(name="certificateLifetimeInDays")
|
|
884
|
-
def certificate_lifetime_in_days(self) -> pulumi.Output[Optional[
|
|
1031
|
+
def certificate_lifetime_in_days(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
885
1032
|
"""
|
|
886
1033
|
Certificate Lifetime(in Days)
|
|
887
1034
|
"""
|
|
888
1035
|
return pulumi.get(self, "certificate_lifetime_in_days")
|
|
889
1036
|
|
|
890
|
-
@property
|
|
1037
|
+
@_builtins.property
|
|
891
1038
|
@pulumi.getter(name="certificateRevocationStatus")
|
|
892
|
-
def certificate_revocation_status(self) -> pulumi.Output[Optional[
|
|
1039
|
+
def certificate_revocation_status(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
893
1040
|
"""
|
|
894
|
-
Certificate revocation status
|
|
1041
|
+
Certificate revocation status
|
|
1042
|
+
- Choices: `ocsp`, `none`
|
|
895
1043
|
"""
|
|
896
1044
|
return pulumi.get(self, "certificate_revocation_status")
|
|
897
1045
|
|
|
898
|
-
@property
|
|
1046
|
+
@_builtins.property
|
|
899
1047
|
@pulumi.getter(name="defaultAction")
|
|
900
|
-
def default_action(self) -> pulumi.Output[Optional[
|
|
1048
|
+
def default_action(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
901
1049
|
"""
|
|
902
|
-
Default action (applies when `mode` set to `security`)
|
|
1050
|
+
Default action (applies when `mode` set to `security`)
|
|
1051
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
903
1052
|
"""
|
|
904
1053
|
return pulumi.get(self, "default_action")
|
|
905
1054
|
|
|
906
|
-
@property
|
|
1055
|
+
@_builtins.property
|
|
907
1056
|
@pulumi.getter
|
|
908
|
-
def description(self) -> pulumi.Output[
|
|
1057
|
+
def description(self) -> pulumi.Output[_builtins.str]:
|
|
909
1058
|
"""
|
|
910
1059
|
The description of the policy definition.
|
|
911
1060
|
"""
|
|
912
1061
|
return pulumi.get(self, "description")
|
|
913
1062
|
|
|
914
|
-
@property
|
|
1063
|
+
@_builtins.property
|
|
915
1064
|
@pulumi.getter(name="ecKeyType")
|
|
916
|
-
def ec_key_type(self) -> pulumi.Output[Optional[
|
|
1065
|
+
def ec_key_type(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
917
1066
|
"""
|
|
918
|
-
EC Key Type
|
|
1067
|
+
EC Key Type
|
|
1068
|
+
- Choices: `P256`, `P384`, `P521`
|
|
919
1069
|
"""
|
|
920
1070
|
return pulumi.get(self, "ec_key_type")
|
|
921
1071
|
|
|
922
|
-
@property
|
|
1072
|
+
@_builtins.property
|
|
923
1073
|
@pulumi.getter(name="expiredCertificate")
|
|
924
|
-
def expired_certificate(self) -> pulumi.Output[Optional[
|
|
1074
|
+
def expired_certificate(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
925
1075
|
"""
|
|
926
|
-
Expired certificate action
|
|
1076
|
+
Expired certificate action
|
|
1077
|
+
- Choices: `drop`, `decrypt`
|
|
927
1078
|
"""
|
|
928
1079
|
return pulumi.get(self, "expired_certificate")
|
|
929
1080
|
|
|
930
|
-
@property
|
|
1081
|
+
@_builtins.property
|
|
931
1082
|
@pulumi.getter(name="failureMode")
|
|
932
|
-
def failure_mode(self) -> pulumi.Output[Optional[
|
|
1083
|
+
def failure_mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
933
1084
|
"""
|
|
934
|
-
Failure mode
|
|
1085
|
+
Failure mode
|
|
1086
|
+
- Choices: `open`, `close`
|
|
935
1087
|
"""
|
|
936
1088
|
return pulumi.get(self, "failure_mode")
|
|
937
1089
|
|
|
938
|
-
@property
|
|
1090
|
+
@_builtins.property
|
|
939
1091
|
@pulumi.getter(name="minimalTlsVersion")
|
|
940
|
-
def minimal_tls_version(self) -> pulumi.Output[Optional[
|
|
1092
|
+
def minimal_tls_version(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
941
1093
|
"""
|
|
942
|
-
Minimal TLS Version
|
|
1094
|
+
Minimal TLS Version
|
|
1095
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
943
1096
|
"""
|
|
944
1097
|
return pulumi.get(self, "minimal_tls_version")
|
|
945
1098
|
|
|
946
|
-
@property
|
|
1099
|
+
@_builtins.property
|
|
947
1100
|
@pulumi.getter
|
|
948
|
-
def mode(self) -> pulumi.Output[Optional[
|
|
1101
|
+
def mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
949
1102
|
"""
|
|
950
|
-
The policy mode
|
|
1103
|
+
The policy mode
|
|
1104
|
+
- Choices: `security`, `unified`
|
|
951
1105
|
"""
|
|
952
1106
|
return pulumi.get(self, "mode")
|
|
953
1107
|
|
|
954
|
-
@property
|
|
1108
|
+
@_builtins.property
|
|
955
1109
|
@pulumi.getter
|
|
956
|
-
def name(self) -> pulumi.Output[
|
|
1110
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
957
1111
|
"""
|
|
958
1112
|
The name of the policy definition.
|
|
959
1113
|
"""
|
|
960
1114
|
return pulumi.get(self, "name")
|
|
961
1115
|
|
|
962
|
-
@property
|
|
1116
|
+
@_builtins.property
|
|
963
1117
|
@pulumi.getter(name="networkRules")
|
|
964
1118
|
def network_rules(self) -> pulumi.Output[Optional[Sequence['outputs.TlsSslDecryptionPolicyDefinitionNetworkRule']]]:
|
|
965
1119
|
"""
|
|
@@ -967,55 +1121,60 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
967
1121
|
"""
|
|
968
1122
|
return pulumi.get(self, "network_rules")
|
|
969
1123
|
|
|
970
|
-
@property
|
|
1124
|
+
@_builtins.property
|
|
971
1125
|
@pulumi.getter(name="rsaKeyPairModulus")
|
|
972
|
-
def rsa_key_pair_modulus(self) -> pulumi.Output[Optional[
|
|
1126
|
+
def rsa_key_pair_modulus(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
973
1127
|
"""
|
|
974
|
-
RSA key pair modules
|
|
1128
|
+
RSA key pair modules
|
|
1129
|
+
- Choices: `1024`, `2048`, `4096`
|
|
975
1130
|
"""
|
|
976
1131
|
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
977
1132
|
|
|
978
|
-
@property
|
|
1133
|
+
@_builtins.property
|
|
979
1134
|
@pulumi.getter(name="sslDecryptionEnabled")
|
|
980
|
-
def ssl_decryption_enabled(self) -> pulumi.Output[Optional[
|
|
1135
|
+
def ssl_decryption_enabled(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
981
1136
|
"""
|
|
982
1137
|
SSL decryption enabled
|
|
983
1138
|
"""
|
|
984
1139
|
return pulumi.get(self, "ssl_decryption_enabled")
|
|
985
1140
|
|
|
986
|
-
@property
|
|
1141
|
+
@_builtins.property
|
|
987
1142
|
@pulumi.getter(name="unknownRevocationStatus")
|
|
988
|
-
def unknown_revocation_status(self) -> pulumi.Output[Optional[
|
|
1143
|
+
def unknown_revocation_status(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
989
1144
|
"""
|
|
990
|
-
Unknown revocation status action
|
|
1145
|
+
Unknown revocation status action
|
|
1146
|
+
- Choices: `drop`, `decrypt`
|
|
991
1147
|
"""
|
|
992
1148
|
return pulumi.get(self, "unknown_revocation_status")
|
|
993
1149
|
|
|
994
|
-
@property
|
|
1150
|
+
@_builtins.property
|
|
995
1151
|
@pulumi.getter(name="unsupportedCipherSuites")
|
|
996
|
-
def unsupported_cipher_suites(self) -> pulumi.Output[Optional[
|
|
1152
|
+
def unsupported_cipher_suites(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
997
1153
|
"""
|
|
998
|
-
Unsupported cipher suites action
|
|
1154
|
+
Unsupported cipher suites action
|
|
1155
|
+
- Choices: `drop`, `no-decrypt`
|
|
999
1156
|
"""
|
|
1000
1157
|
return pulumi.get(self, "unsupported_cipher_suites")
|
|
1001
1158
|
|
|
1002
|
-
@property
|
|
1159
|
+
@_builtins.property
|
|
1003
1160
|
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
1004
|
-
def unsupported_protocol_versions(self) -> pulumi.Output[Optional[
|
|
1161
|
+
def unsupported_protocol_versions(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1005
1162
|
"""
|
|
1006
|
-
Unsupported protocol versions action
|
|
1163
|
+
Unsupported protocol versions action
|
|
1164
|
+
- Choices: `drop`, `no-decrypt`
|
|
1007
1165
|
"""
|
|
1008
1166
|
return pulumi.get(self, "unsupported_protocol_versions")
|
|
1009
1167
|
|
|
1010
|
-
@property
|
|
1168
|
+
@_builtins.property
|
|
1011
1169
|
@pulumi.getter(name="untrustedCertificate")
|
|
1012
|
-
def untrusted_certificate(self) -> pulumi.Output[Optional[
|
|
1170
|
+
def untrusted_certificate(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1013
1171
|
"""
|
|
1014
|
-
Untrusted certificate action
|
|
1172
|
+
Untrusted certificate action
|
|
1173
|
+
- Choices: `drop`, `decrypt`
|
|
1015
1174
|
"""
|
|
1016
1175
|
return pulumi.get(self, "untrusted_certificate")
|
|
1017
1176
|
|
|
1018
|
-
@property
|
|
1177
|
+
@_builtins.property
|
|
1019
1178
|
@pulumi.getter(name="urlRules")
|
|
1020
1179
|
def url_rules(self) -> pulumi.Output[Optional[Sequence['outputs.TlsSslDecryptionPolicyDefinitionUrlRule']]]:
|
|
1021
1180
|
"""
|
|
@@ -1023,17 +1182,17 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
1023
1182
|
"""
|
|
1024
1183
|
return pulumi.get(self, "url_rules")
|
|
1025
1184
|
|
|
1026
|
-
@property
|
|
1185
|
+
@_builtins.property
|
|
1027
1186
|
@pulumi.getter(name="useDefaultCaCertBundle")
|
|
1028
|
-
def use_default_ca_cert_bundle(self) -> pulumi.Output[Optional[
|
|
1187
|
+
def use_default_ca_cert_bundle(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1029
1188
|
"""
|
|
1030
1189
|
Use default CA certificate bundle
|
|
1031
1190
|
"""
|
|
1032
1191
|
return pulumi.get(self, "use_default_ca_cert_bundle")
|
|
1033
1192
|
|
|
1034
|
-
@property
|
|
1193
|
+
@_builtins.property
|
|
1035
1194
|
@pulumi.getter
|
|
1036
|
-
def version(self) -> pulumi.Output[
|
|
1195
|
+
def version(self) -> pulumi.Output[_builtins.int]:
|
|
1037
1196
|
"""
|
|
1038
1197
|
The version of the object
|
|
1039
1198
|
"""
|