pulumi-sdwan 0.4.1a1756438344__py3-none-any.whl → 0.5.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-sdwan might be problematic. Click here for more details.

Files changed (177) hide show
  1. pulumi_sdwan/_inputs.py +125 -45
  2. pulumi_sdwan/activate_centralized_policy.py +4 -0
  3. pulumi_sdwan/advanced_inspection_profile_policy_definition.py +14 -7
  4. pulumi_sdwan/advanced_malware_protection_policy_definition.py +91 -42
  5. pulumi_sdwan/application_aware_routing_policy_definition.py +4 -0
  6. pulumi_sdwan/application_priority_qos_policy.py +52 -48
  7. pulumi_sdwan/application_priority_traffic_policy_policy.py +4 -0
  8. pulumi_sdwan/as_path_list_policy_object.py +4 -0
  9. pulumi_sdwan/attach_feature_device_template.py +4 -0
  10. pulumi_sdwan/cedge_aaa_feature_template.py +151 -77
  11. pulumi_sdwan/cedge_global_feature_template.py +336 -175
  12. pulumi_sdwan/cedge_igmp_feature_template.py +18 -21
  13. pulumi_sdwan/cedge_multicast_feature_template.py +56 -42
  14. pulumi_sdwan/cedge_pim_feature_template.py +88 -56
  15. pulumi_sdwan/cellular_cedge_profile_feature_template.py +70 -42
  16. pulumi_sdwan/cellular_controller_feature_template.py +74 -49
  17. pulumi_sdwan/cellular_profile_feature_template.py +63 -42
  18. pulumi_sdwan/cflowd_policy_definition.py +74 -35
  19. pulumi_sdwan/cisco_banner_feature_template.py +14 -21
  20. pulumi_sdwan/cisco_bfd_feature_template.py +81 -49
  21. pulumi_sdwan/cisco_bgp_feature_template.py +235 -112
  22. pulumi_sdwan/cisco_dhcp_server_feature_template.py +53 -35
  23. pulumi_sdwan/cisco_logging_feature_template.py +74 -42
  24. pulumi_sdwan/cisco_ntp_feature_template.py +46 -35
  25. pulumi_sdwan/cisco_omp_feature_template.py +235 -112
  26. pulumi_sdwan/cisco_ospf_feature_template.py +235 -105
  27. pulumi_sdwan/cisco_ospfv3_feature_template.py +522 -217
  28. pulumi_sdwan/cisco_secure_internet_gateway_feature_template.py +39 -28
  29. pulumi_sdwan/cisco_security_feature_template.py +95 -56
  30. pulumi_sdwan/cisco_sig_credentials_feature_template.py +28 -28
  31. pulumi_sdwan/cisco_snmp_feature_template.py +32 -28
  32. pulumi_sdwan/cisco_system_feature_template.py +473 -742
  33. pulumi_sdwan/cisco_thousandeyes_feature_template.py +18 -21
  34. pulumi_sdwan/cisco_trustsec_feature_template.py +207 -112
  35. pulumi_sdwan/cisco_vpn_feature_template.py +102 -56
  36. pulumi_sdwan/cisco_vpn_interface_feature_template.py +1215 -602
  37. pulumi_sdwan/cisco_vpn_interface_gre_feature_template.py +109 -70
  38. pulumi_sdwan/cisco_vpn_interface_ipsec_feature_template.py +329 -161
  39. pulumi_sdwan/cisco_wireless_lan_feature_template.py +102 -98
  40. pulumi_sdwan/class_map_policy_object.py +14 -7
  41. pulumi_sdwan/cli_device_template.py +14 -7
  42. pulumi_sdwan/cli_template_feature_template.py +14 -21
  43. pulumi_sdwan/config/__init__.pyi +5 -0
  44. pulumi_sdwan/config/vars.py +7 -0
  45. pulumi_sdwan/configuration_group.py +28 -14
  46. pulumi_sdwan/custom_control_topology_policy_definition.py +18 -7
  47. pulumi_sdwan/eigrp_feature_template.py +102 -56
  48. pulumi_sdwan/feature_device_template.py +14 -7
  49. pulumi_sdwan/get_application_priority_qos_policy.py +15 -15
  50. pulumi_sdwan/get_security_policy.py +18 -18
  51. pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature.py +29 -29
  52. pulumi_sdwan/gps_feature_template.py +77 -49
  53. pulumi_sdwan/hub_and_spoke_topology_policy_definition.py +4 -0
  54. pulumi_sdwan/intrusion_prevention_policy_definition.py +60 -28
  55. pulumi_sdwan/ips_signature_list_policy_object.py +4 -0
  56. pulumi_sdwan/ipv4_acl_policy_definition.py +18 -7
  57. pulumi_sdwan/ipv4_device_acl_policy_definition.py +18 -7
  58. pulumi_sdwan/ipv6_acl_policy_definition.py +18 -7
  59. pulumi_sdwan/ipv6_device_acl_policy_definition.py +18 -7
  60. pulumi_sdwan/localized_policy.py +112 -56
  61. pulumi_sdwan/mesh_topology_policy_definition.py +4 -0
  62. pulumi_sdwan/other_thousandeyes_feature.py +4 -0
  63. pulumi_sdwan/other_ucse_feature.py +102 -56
  64. pulumi_sdwan/outputs.py +162 -69
  65. pulumi_sdwan/policer_policy_object.py +42 -21
  66. pulumi_sdwan/policy_group.py +14 -7
  67. pulumi_sdwan/policy_object_app_probe_class.py +4 -0
  68. pulumi_sdwan/policy_object_as_path_list.py +18 -7
  69. pulumi_sdwan/policy_object_data_ipv4_prefix_list.py +4 -0
  70. pulumi_sdwan/policy_object_data_ipv6_prefix_list.py +4 -0
  71. pulumi_sdwan/policy_object_extended_community_list.py +4 -0
  72. pulumi_sdwan/policy_object_ipv4_prefix_list.py +4 -0
  73. pulumi_sdwan/policy_object_ipv6_prefix_list.py +4 -0
  74. pulumi_sdwan/policy_object_mirror.py +4 -0
  75. pulumi_sdwan/policy_object_policer.py +4 -0
  76. pulumi_sdwan/policy_object_preferred_color_group.py +4 -0
  77. pulumi_sdwan/policy_object_security_data_ipv4_prefix_list.py +4 -0
  78. pulumi_sdwan/policy_object_security_geolocation_list.py +7 -7
  79. pulumi_sdwan/policy_object_security_ips_signature.py +4 -0
  80. pulumi_sdwan/policy_object_security_local_domain_list.py +4 -0
  81. pulumi_sdwan/policy_object_security_scalable_group_tag_list.py +4 -0
  82. pulumi_sdwan/policy_object_sla_class_list.py +4 -0
  83. pulumi_sdwan/policy_object_standard_community_list.py +4 -0
  84. pulumi_sdwan/policy_object_tloc_list.py +4 -0
  85. pulumi_sdwan/port_list_policy_object.py +2 -2
  86. pulumi_sdwan/preferred_color_group_policy_object.py +42 -21
  87. pulumi_sdwan/provider.py +20 -0
  88. pulumi_sdwan/pulumi-plugin.json +1 -1
  89. pulumi_sdwan/qos_map_policy_definition.py +4 -0
  90. pulumi_sdwan/region_list_policy_object.py +4 -0
  91. pulumi_sdwan/rewrite_rule_policy_definition.py +4 -0
  92. pulumi_sdwan/route_policy_definition.py +18 -7
  93. pulumi_sdwan/rule_set_policy_definition.py +4 -0
  94. pulumi_sdwan/security_app_hosting_feature_template.py +18 -21
  95. pulumi_sdwan/security_policy.py +207 -133
  96. pulumi_sdwan/service_dhcp_server_feature.py +53 -49
  97. pulumi_sdwan/service_ipv4_acl_feature.py +25 -7
  98. pulumi_sdwan/service_ipv6_acl_feature.py +25 -7
  99. pulumi_sdwan/service_lan_vpn_feature.py +67 -28
  100. pulumi_sdwan/service_lan_vpn_interface_ethernet_feature.py +588 -374
  101. pulumi_sdwan/service_lan_vpn_interface_gre_feature.py +84 -70
  102. pulumi_sdwan/service_lan_vpn_interface_ipsec_feature.py +329 -245
  103. pulumi_sdwan/service_lan_vpn_interface_svi_feature.py +151 -91
  104. pulumi_sdwan/service_multicast_feature.py +95 -42
  105. pulumi_sdwan/service_object_tracker_feature.py +63 -56
  106. pulumi_sdwan/service_object_tracker_group_feature.py +39 -14
  107. pulumi_sdwan/service_route_policy_feature.py +25 -7
  108. pulumi_sdwan/service_routing_bgp_feature.py +291 -133
  109. pulumi_sdwan/service_routing_eigrp_feature.py +88 -35
  110. pulumi_sdwan/service_routing_ospf_feature.py +221 -84
  111. pulumi_sdwan/service_routing_ospfv3_ipv4_feature.py +242 -91
  112. pulumi_sdwan/service_routing_ospfv3_ipv6_feature.py +242 -91
  113. pulumi_sdwan/service_switchport_feature.py +25 -7
  114. pulumi_sdwan/service_tracker_feature.py +105 -35
  115. pulumi_sdwan/service_tracker_group_feature.py +25 -7
  116. pulumi_sdwan/service_wireless_lan_feature.py +67 -126
  117. pulumi_sdwan/site_list_policy_object.py +4 -0
  118. pulumi_sdwan/sla_class_policy_object.py +91 -63
  119. pulumi_sdwan/switchport_feature_template.py +95 -49
  120. pulumi_sdwan/system_aaa_feature.py +60 -28
  121. pulumi_sdwan/system_basic_feature.py +396 -693
  122. pulumi_sdwan/system_bfd_feature.py +46 -21
  123. pulumi_sdwan/system_flexible_port_speed_feature.py +21 -21
  124. pulumi_sdwan/system_global_feature.py +322 -154
  125. pulumi_sdwan/system_ipv4_device_access_feature.py +25 -7
  126. pulumi_sdwan/system_ipv6_device_access_feature.py +25 -7
  127. pulumi_sdwan/system_logging_feature.py +60 -21
  128. pulumi_sdwan/system_mrf_feature.py +70 -35
  129. pulumi_sdwan/system_ntp_feature.py +32 -14
  130. pulumi_sdwan/system_omp_feature.py +441 -196
  131. pulumi_sdwan/system_performance_monitoring_feature.py +56 -28
  132. pulumi_sdwan/system_remote_access_feature.py +203 -133
  133. pulumi_sdwan/system_security_feature.py +81 -35
  134. pulumi_sdwan/system_snmp_feature.py +18 -7
  135. pulumi_sdwan/tloc_list_policy_object.py +4 -0
  136. pulumi_sdwan/tls_ssl_decryption_policy_definition.py +172 -84
  137. pulumi_sdwan/tls_ssl_profile_policy_definition.py +28 -14
  138. pulumi_sdwan/traffic_data_policy_definition.py +18 -7
  139. pulumi_sdwan/transport_cellular_controller_feature.py +56 -28
  140. pulumi_sdwan/transport_cellular_profile_feature.py +63 -35
  141. pulumi_sdwan/transport_gps_feature.py +63 -28
  142. pulumi_sdwan/transport_ipv4_acl_feature.py +25 -7
  143. pulumi_sdwan/transport_ipv6_acl_feature.py +25 -7
  144. pulumi_sdwan/transport_ipv6_tracker_feature.py +105 -35
  145. pulumi_sdwan/transport_ipv6_tracker_group_feature.py +25 -7
  146. pulumi_sdwan/transport_management_vpn_feature.py +4 -0
  147. pulumi_sdwan/transport_management_vpn_interface_ethernet_feature.py +263 -154
  148. pulumi_sdwan/transport_route_policy_feature.py +25 -7
  149. pulumi_sdwan/transport_routing_bgp_feature.py +291 -133
  150. pulumi_sdwan/transport_routing_ospf_feature.py +221 -84
  151. pulumi_sdwan/transport_routing_ospfv3_ipv4_feature.py +242 -91
  152. pulumi_sdwan/transport_routing_ospfv3_ipv6_feature.py +242 -91
  153. pulumi_sdwan/transport_t1_e1_controller_feature.py +18 -7
  154. pulumi_sdwan/transport_tracker_feature.py +105 -35
  155. pulumi_sdwan/transport_tracker_group_feature.py +25 -7
  156. pulumi_sdwan/transport_wan_vpn_feature.py +32 -14
  157. pulumi_sdwan/transport_wan_vpn_interface_cellular_feature.py +844 -413
  158. pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature.py +1166 -735
  159. pulumi_sdwan/transport_wan_vpn_interface_gre_feature.py +84 -70
  160. pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature.py +329 -245
  161. pulumi_sdwan/transport_wan_vpn_interface_t1_e1_serial_feature.py +665 -371
  162. pulumi_sdwan/url_filtering_policy_definition.py +60 -35
  163. pulumi_sdwan/vpn_interface_cellular_feature_template.py +935 -455
  164. pulumi_sdwan/vpn_interface_dsl_ipoe_feature_template.py +963 -469
  165. pulumi_sdwan/vpn_interface_dsl_pppoa_feature_template.py +928 -448
  166. pulumi_sdwan/vpn_interface_dsl_pppoe_feature_template.py +984 -476
  167. pulumi_sdwan/vpn_interface_ethernet_pppoe_feature_template.py +984 -476
  168. pulumi_sdwan/vpn_interface_multilink_feature_template.py +816 -406
  169. pulumi_sdwan/vpn_interface_svi_feature_template.py +172 -84
  170. pulumi_sdwan/vpn_interface_t1_e1_serial_feature_template.py +725 -378
  171. pulumi_sdwan/vpn_list_policy_object.py +4 -0
  172. pulumi_sdwan/vpn_membership_policy_definition.py +4 -0
  173. pulumi_sdwan/zone_based_firewall_policy_definition.py +32 -14
  174. {pulumi_sdwan-0.4.1a1756438344.dist-info → pulumi_sdwan-0.5.0.dist-info}/METADATA +1 -1
  175. {pulumi_sdwan-0.4.1a1756438344.dist-info → pulumi_sdwan-0.5.0.dist-info}/RECORD +177 -177
  176. {pulumi_sdwan-0.4.1a1756438344.dist-info → pulumi_sdwan-0.5.0.dist-info}/WHEEL +0 -0
  177. {pulumi_sdwan-0.4.1a1756438344.dist-info → pulumi_sdwan-0.5.0.dist-info}/top_level.txt +0 -0
pulumi_sdwan/security_policy.py CHANGED
@@ -30,41 +30,51 @@ class SecurityPolicyArgs:
30
30
  high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
31
31
  high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
32
32
  high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
33
- imcp_unreachable_allow: Optional[pulumi.Input[_builtins.bool]] = None,
33
+ imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
34
34
  loggings: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]] = None,
35
35
  match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
36
- max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.int]] = None,
37
- max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.int]] = None,
38
- max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.int]] = None,
36
+ max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
37
+ max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
38
+ max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
39
39
  mode: Optional[pulumi.Input[_builtins.str]] = None,
40
40
  name: Optional[pulumi.Input[_builtins.str]] = None,
41
- session_reclassify_allow: Optional[pulumi.Input[_builtins.bool]] = None,
41
+ session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
42
42
  tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
43
- unified_logging: Optional[pulumi.Input[_builtins.bool]] = None,
43
+ unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
44
44
  use_case: Optional[pulumi.Input[_builtins.str]] = None):
45
45
  """
46
46
  The set of arguments for constructing a SecurityPolicy resource.
47
47
  :param pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]] definitions: List of policy definitions
48
48
  :param pulumi.Input[_builtins.str] description: The description of the security policy
49
- :param pulumi.Input[_builtins.str] audit_trail: Audit trail - Choices: `on`, `off`
50
- :param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
51
- :param pulumi.Input[_builtins.str] failure_mode: Failure mode - Choices: `open`, `close`
49
+ :param pulumi.Input[_builtins.str] audit_trail: Audit trail
50
+ - Choices: `on`, `off`
51
+ :param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
52
+ - Choices: `allow`, `deny`
53
+ :param pulumi.Input[_builtins.str] failure_mode: Failure mode
54
+ - Choices: `open`, `close`
52
55
  :param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
53
56
  :param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
54
57
  :param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
55
58
  :param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
56
- :param pulumi.Input[_builtins.bool] imcp_unreachable_allow: ICMP Unreachable Allow
57
- :param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter - Choices: `on`, `off`
58
- :param pulumi.Input[_builtins.int] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
59
- :param pulumi.Input[_builtins.int] max_incomplete_tcp_limit: Max Incomplete TCP Limit
60
- :param pulumi.Input[_builtins.int] max_incomplete_udp_limit: Max Incomplete UDP Limit
61
- :param pulumi.Input[_builtins.str] mode: The policy mode - Choices: `security`, `unified` - Default value: `security`
59
+ :param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
60
+ - Choices: `on`, `off`
61
+ :param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
62
+ - Choices: `on`, `off`
63
+ :param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
64
+ :param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
65
+ :param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
66
+ :param pulumi.Input[_builtins.str] mode: The policy mode
67
+ - Choices: `security`, `unified`
68
+ - Default value: `security`
62
69
  :param pulumi.Input[_builtins.str] name: The name of the security policy
63
- :param pulumi.Input[_builtins.bool] session_reclassify_allow: Session Reclassify Allow
70
+ :param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
71
+ - Choices: `on`, `off`
64
72
  :param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
65
- :param pulumi.Input[_builtins.bool] unified_logging: Unified Logging
66
- :param pulumi.Input[_builtins.str] use_case: The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
67
- `directInternetAccess`, `directCloudAccess` - Default value: `custom`
73
+ :param pulumi.Input[_builtins.str] unified_logging: Unified Logging
74
+ - Choices: `on`, `off`
75
+ :param pulumi.Input[_builtins.str] use_case: The use case of the security policy
76
+ - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
77
+ - Default value: `custom`
68
78
  """
69
79
  pulumi.set(__self__, "definitions", definitions)
70
80
  pulumi.set(__self__, "description", description)
@@ -135,7 +145,8 @@ class SecurityPolicyArgs:
135
145
  @pulumi.getter(name="auditTrail")
136
146
  def audit_trail(self) -> Optional[pulumi.Input[_builtins.str]]:
137
147
  """
138
- Audit trail - Choices: `on`, `off`
148
+ Audit trail
149
+ - Choices: `on`, `off`
139
150
  """
140
151
  return pulumi.get(self, "audit_trail")
141
152
 
@@ -147,7 +158,8 @@ class SecurityPolicyArgs:
147
158
  @pulumi.getter(name="directInternetApplications")
148
159
  def direct_internet_applications(self) -> Optional[pulumi.Input[_builtins.str]]:
149
160
  """
150
- Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
161
+ Bypass firewall policy and allow all Internet traffic to/from VPN 0
162
+ - Choices: `allow`, `deny`
151
163
  """
152
164
  return pulumi.get(self, "direct_internet_applications")
153
165
 
@@ -159,7 +171,8 @@ class SecurityPolicyArgs:
159
171
  @pulumi.getter(name="failureMode")
160
172
  def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
161
173
  """
162
- Failure mode - Choices: `open`, `close`
174
+ Failure mode
175
+ - Choices: `open`, `close`
163
176
  """
164
177
  return pulumi.get(self, "failure_mode")
165
178
 
@@ -217,14 +230,15 @@ class SecurityPolicyArgs:
217
230
 
218
231
  @_builtins.property
219
232
  @pulumi.getter(name="imcpUnreachableAllow")
220
- def imcp_unreachable_allow(self) -> Optional[pulumi.Input[_builtins.bool]]:
233
+ def imcp_unreachable_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
221
234
  """
222
235
  ICMP Unreachable Allow
236
+ - Choices: `on`, `off`
223
237
  """
224
238
  return pulumi.get(self, "imcp_unreachable_allow")
225
239
 
226
240
  @imcp_unreachable_allow.setter
227
- def imcp_unreachable_allow(self, value: Optional[pulumi.Input[_builtins.bool]]):
241
+ def imcp_unreachable_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
228
242
  pulumi.set(self, "imcp_unreachable_allow", value)
229
243
 
230
244
  @_builtins.property
@@ -240,7 +254,8 @@ class SecurityPolicyArgs:
240
254
  @pulumi.getter(name="matchStatisticsPerFilter")
241
255
  def match_statistics_per_filter(self) -> Optional[pulumi.Input[_builtins.str]]:
242
256
  """
243
- Match Statistics per-filter - Choices: `on`, `off`
257
+ Match Statistics per-filter
258
+ - Choices: `on`, `off`
244
259
  """
245
260
  return pulumi.get(self, "match_statistics_per_filter")
246
261
 
@@ -250,45 +265,47 @@ class SecurityPolicyArgs:
250
265
 
251
266
  @_builtins.property
252
267
  @pulumi.getter(name="maxIncompleteIcmpLimit")
253
- def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[_builtins.int]]:
268
+ def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
254
269
  """
255
270
  Max Incomplete ICMP Limit
256
271
  """
257
272
  return pulumi.get(self, "max_incomplete_icmp_limit")
258
273
 
259
274
  @max_incomplete_icmp_limit.setter
260
- def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[_builtins.int]]):
275
+ def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
261
276
  pulumi.set(self, "max_incomplete_icmp_limit", value)
262
277
 
263
278
  @_builtins.property
264
279
  @pulumi.getter(name="maxIncompleteTcpLimit")
265
- def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[_builtins.int]]:
280
+ def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
266
281
  """
267
282
  Max Incomplete TCP Limit
268
283
  """
269
284
  return pulumi.get(self, "max_incomplete_tcp_limit")
270
285
 
271
286
  @max_incomplete_tcp_limit.setter
272
- def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[_builtins.int]]):
287
+ def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
273
288
  pulumi.set(self, "max_incomplete_tcp_limit", value)
274
289
 
275
290
  @_builtins.property
276
291
  @pulumi.getter(name="maxIncompleteUdpLimit")
277
- def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[_builtins.int]]:
292
+ def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
278
293
  """
279
294
  Max Incomplete UDP Limit
280
295
  """
281
296
  return pulumi.get(self, "max_incomplete_udp_limit")
282
297
 
283
298
  @max_incomplete_udp_limit.setter
284
- def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[_builtins.int]]):
299
+ def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
285
300
  pulumi.set(self, "max_incomplete_udp_limit", value)
286
301
 
287
302
  @_builtins.property
288
303
  @pulumi.getter
289
304
  def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
290
305
  """
291
- The policy mode - Choices: `security`, `unified` - Default value: `security`
306
+ The policy mode
307
+ - Choices: `security`, `unified`
308
+ - Default value: `security`
292
309
  """
293
310
  return pulumi.get(self, "mode")
294
311
 
@@ -310,14 +327,15 @@ class SecurityPolicyArgs:
310
327
 
311
328
  @_builtins.property
312
329
  @pulumi.getter(name="sessionReclassifyAllow")
313
- def session_reclassify_allow(self) -> Optional[pulumi.Input[_builtins.bool]]:
330
+ def session_reclassify_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
314
331
  """
315
332
  Session Reclassify Allow
333
+ - Choices: `on`, `off`
316
334
  """
317
335
  return pulumi.get(self, "session_reclassify_allow")
318
336
 
319
337
  @session_reclassify_allow.setter
320
- def session_reclassify_allow(self, value: Optional[pulumi.Input[_builtins.bool]]):
338
+ def session_reclassify_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
321
339
  pulumi.set(self, "session_reclassify_allow", value)
322
340
 
323
341
  @_builtins.property
@@ -334,22 +352,24 @@ class SecurityPolicyArgs:
334
352
 
335
353
  @_builtins.property
336
354
  @pulumi.getter(name="unifiedLogging")
337
- def unified_logging(self) -> Optional[pulumi.Input[_builtins.bool]]:
355
+ def unified_logging(self) -> Optional[pulumi.Input[_builtins.str]]:
338
356
  """
339
357
  Unified Logging
358
+ - Choices: `on`, `off`
340
359
  """
341
360
  return pulumi.get(self, "unified_logging")
342
361
 
343
362
  @unified_logging.setter
344
- def unified_logging(self, value: Optional[pulumi.Input[_builtins.bool]]):
363
+ def unified_logging(self, value: Optional[pulumi.Input[_builtins.str]]):
345
364
  pulumi.set(self, "unified_logging", value)
346
365
 
347
366
  @_builtins.property
348
367
  @pulumi.getter(name="useCase")
349
368
  def use_case(self) -> Optional[pulumi.Input[_builtins.str]]:
350
369
  """
351
- The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
352
- `directInternetAccess`, `directCloudAccess` - Default value: `custom`
370
+ The use case of the security policy
371
+ - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
372
+ - Default value: `custom`
353
373
  """
354
374
  return pulumi.get(self, "use_case")
355
375
 
@@ -370,42 +390,52 @@ class _SecurityPolicyState:
370
390
  high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
371
391
  high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
372
392
  high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
373
- imcp_unreachable_allow: Optional[pulumi.Input[_builtins.bool]] = None,
393
+ imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
374
394
  loggings: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]] = None,
375
395
  match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
376
- max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.int]] = None,
377
- max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.int]] = None,
378
- max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.int]] = None,
396
+ max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
397
+ max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
398
+ max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
379
399
  mode: Optional[pulumi.Input[_builtins.str]] = None,
380
400
  name: Optional[pulumi.Input[_builtins.str]] = None,
381
- session_reclassify_allow: Optional[pulumi.Input[_builtins.bool]] = None,
401
+ session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
382
402
  tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
383
- unified_logging: Optional[pulumi.Input[_builtins.bool]] = None,
403
+ unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
384
404
  use_case: Optional[pulumi.Input[_builtins.str]] = None,
385
405
  version: Optional[pulumi.Input[_builtins.int]] = None):
386
406
  """
387
407
  Input properties used for looking up and filtering SecurityPolicy resources.
388
- :param pulumi.Input[_builtins.str] audit_trail: Audit trail - Choices: `on`, `off`
408
+ :param pulumi.Input[_builtins.str] audit_trail: Audit trail
409
+ - Choices: `on`, `off`
389
410
  :param pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]] definitions: List of policy definitions
390
411
  :param pulumi.Input[_builtins.str] description: The description of the security policy
391
- :param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
392
- :param pulumi.Input[_builtins.str] failure_mode: Failure mode - Choices: `open`, `close`
412
+ :param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
413
+ - Choices: `allow`, `deny`
414
+ :param pulumi.Input[_builtins.str] failure_mode: Failure mode
415
+ - Choices: `open`, `close`
393
416
  :param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
394
417
  :param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
395
418
  :param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
396
419
  :param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
397
- :param pulumi.Input[_builtins.bool] imcp_unreachable_allow: ICMP Unreachable Allow
398
- :param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter - Choices: `on`, `off`
399
- :param pulumi.Input[_builtins.int] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
400
- :param pulumi.Input[_builtins.int] max_incomplete_tcp_limit: Max Incomplete TCP Limit
401
- :param pulumi.Input[_builtins.int] max_incomplete_udp_limit: Max Incomplete UDP Limit
402
- :param pulumi.Input[_builtins.str] mode: The policy mode - Choices: `security`, `unified` - Default value: `security`
420
+ :param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
421
+ - Choices: `on`, `off`
422
+ :param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
423
+ - Choices: `on`, `off`
424
+ :param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
425
+ :param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
426
+ :param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
427
+ :param pulumi.Input[_builtins.str] mode: The policy mode
428
+ - Choices: `security`, `unified`
429
+ - Default value: `security`
403
430
  :param pulumi.Input[_builtins.str] name: The name of the security policy
404
- :param pulumi.Input[_builtins.bool] session_reclassify_allow: Session Reclassify Allow
431
+ :param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
432
+ - Choices: `on`, `off`
405
433
  :param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
406
- :param pulumi.Input[_builtins.bool] unified_logging: Unified Logging
407
- :param pulumi.Input[_builtins.str] use_case: The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
408
- `directInternetAccess`, `directCloudAccess` - Default value: `custom`
434
+ :param pulumi.Input[_builtins.str] unified_logging: Unified Logging
435
+ - Choices: `on`, `off`
436
+ :param pulumi.Input[_builtins.str] use_case: The use case of the security policy
437
+ - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
438
+ - Default value: `custom`
409
439
  :param pulumi.Input[_builtins.int] version: The version of the object
410
440
  """
411
441
  if audit_trail is not None:
@@ -457,7 +487,8 @@ class _SecurityPolicyState:
457
487
  @pulumi.getter(name="auditTrail")
458
488
  def audit_trail(self) -> Optional[pulumi.Input[_builtins.str]]:
459
489
  """
460
- Audit trail - Choices: `on`, `off`
490
+ Audit trail
491
+ - Choices: `on`, `off`
461
492
  """
462
493
  return pulumi.get(self, "audit_trail")
463
494
 
@@ -493,7 +524,8 @@ class _SecurityPolicyState:
493
524
  @pulumi.getter(name="directInternetApplications")
494
525
  def direct_internet_applications(self) -> Optional[pulumi.Input[_builtins.str]]:
495
526
  """
496
- Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
527
+ Bypass firewall policy and allow all Internet traffic to/from VPN 0
528
+ - Choices: `allow`, `deny`
497
529
  """
498
530
  return pulumi.get(self, "direct_internet_applications")
499
531
 
@@ -505,7 +537,8 @@ class _SecurityPolicyState:
505
537
  @pulumi.getter(name="failureMode")
506
538
  def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
507
539
  """
508
- Failure mode - Choices: `open`, `close`
540
+ Failure mode
541
+ - Choices: `open`, `close`
509
542
  """
510
543
  return pulumi.get(self, "failure_mode")
511
544
 
@@ -563,14 +596,15 @@ class _SecurityPolicyState:
563
596
 
564
597
  @_builtins.property
565
598
  @pulumi.getter(name="imcpUnreachableAllow")
566
- def imcp_unreachable_allow(self) -> Optional[pulumi.Input[_builtins.bool]]:
599
+ def imcp_unreachable_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
567
600
  """
568
601
  ICMP Unreachable Allow
602
+ - Choices: `on`, `off`
569
603
  """
570
604
  return pulumi.get(self, "imcp_unreachable_allow")
571
605
 
572
606
  @imcp_unreachable_allow.setter
573
- def imcp_unreachable_allow(self, value: Optional[pulumi.Input[_builtins.bool]]):
607
+ def imcp_unreachable_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
574
608
  pulumi.set(self, "imcp_unreachable_allow", value)
575
609
 
576
610
  @_builtins.property
@@ -586,7 +620,8 @@ class _SecurityPolicyState:
586
620
  @pulumi.getter(name="matchStatisticsPerFilter")
587
621
  def match_statistics_per_filter(self) -> Optional[pulumi.Input[_builtins.str]]:
588
622
  """
589
- Match Statistics per-filter - Choices: `on`, `off`
623
+ Match Statistics per-filter
624
+ - Choices: `on`, `off`
590
625
  """
591
626
  return pulumi.get(self, "match_statistics_per_filter")
592
627
 
@@ -596,45 +631,47 @@ class _SecurityPolicyState:
596
631
 
597
632
  @_builtins.property
598
633
  @pulumi.getter(name="maxIncompleteIcmpLimit")
599
- def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[_builtins.int]]:
634
+ def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
600
635
  """
601
636
  Max Incomplete ICMP Limit
602
637
  """
603
638
  return pulumi.get(self, "max_incomplete_icmp_limit")
604
639
 
605
640
  @max_incomplete_icmp_limit.setter
606
- def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[_builtins.int]]):
641
+ def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
607
642
  pulumi.set(self, "max_incomplete_icmp_limit", value)
608
643
 
609
644
  @_builtins.property
610
645
  @pulumi.getter(name="maxIncompleteTcpLimit")
611
- def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[_builtins.int]]:
646
+ def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
612
647
  """
613
648
  Max Incomplete TCP Limit
614
649
  """
615
650
  return pulumi.get(self, "max_incomplete_tcp_limit")
616
651
 
617
652
  @max_incomplete_tcp_limit.setter
618
- def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[_builtins.int]]):
653
+ def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
619
654
  pulumi.set(self, "max_incomplete_tcp_limit", value)
620
655
 
621
656
  @_builtins.property
622
657
  @pulumi.getter(name="maxIncompleteUdpLimit")
623
- def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[_builtins.int]]:
658
+ def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[_builtins.str]]:
624
659
  """
625
660
  Max Incomplete UDP Limit
626
661
  """
627
662
  return pulumi.get(self, "max_incomplete_udp_limit")
628
663
 
629
664
  @max_incomplete_udp_limit.setter
630
- def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[_builtins.int]]):
665
+ def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[_builtins.str]]):
631
666
  pulumi.set(self, "max_incomplete_udp_limit", value)
632
667
 
633
668
  @_builtins.property
634
669
  @pulumi.getter
635
670
  def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
636
671
  """
637
- The policy mode - Choices: `security`, `unified` - Default value: `security`
672
+ The policy mode
673
+ - Choices: `security`, `unified`
674
+ - Default value: `security`
638
675
  """
639
676
  return pulumi.get(self, "mode")
640
677
 
@@ -656,14 +693,15 @@ class _SecurityPolicyState:
656
693
 
657
694
  @_builtins.property
658
695
  @pulumi.getter(name="sessionReclassifyAllow")
659
- def session_reclassify_allow(self) -> Optional[pulumi.Input[_builtins.bool]]:
696
+ def session_reclassify_allow(self) -> Optional[pulumi.Input[_builtins.str]]:
660
697
  """
661
698
  Session Reclassify Allow
699
+ - Choices: `on`, `off`
662
700
  """
663
701
  return pulumi.get(self, "session_reclassify_allow")
664
702
 
665
703
  @session_reclassify_allow.setter
666
- def session_reclassify_allow(self, value: Optional[pulumi.Input[_builtins.bool]]):
704
+ def session_reclassify_allow(self, value: Optional[pulumi.Input[_builtins.str]]):
667
705
  pulumi.set(self, "session_reclassify_allow", value)
668
706
 
669
707
  @_builtins.property
@@ -680,22 +718,24 @@ class _SecurityPolicyState:
680
718
 
681
719
  @_builtins.property
682
720
  @pulumi.getter(name="unifiedLogging")
683
- def unified_logging(self) -> Optional[pulumi.Input[_builtins.bool]]:
721
+ def unified_logging(self) -> Optional[pulumi.Input[_builtins.str]]:
684
722
  """
685
723
  Unified Logging
724
+ - Choices: `on`, `off`
686
725
  """
687
726
  return pulumi.get(self, "unified_logging")
688
727
 
689
728
  @unified_logging.setter
690
- def unified_logging(self, value: Optional[pulumi.Input[_builtins.bool]]):
729
+ def unified_logging(self, value: Optional[pulumi.Input[_builtins.str]]):
691
730
  pulumi.set(self, "unified_logging", value)
692
731
 
693
732
  @_builtins.property
694
733
  @pulumi.getter(name="useCase")
695
734
  def use_case(self) -> Optional[pulumi.Input[_builtins.str]]:
696
735
  """
697
- The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
698
- `directInternetAccess`, `directCloudAccess` - Default value: `custom`
736
+ The use case of the security policy
737
+ - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
738
+ - Default value: `custom`
699
739
  """
700
740
  return pulumi.get(self, "use_case")
701
741
 
@@ -731,22 +771,24 @@ class SecurityPolicy(pulumi.CustomResource):
731
771
  high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
732
772
  high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
733
773
  high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
734
- imcp_unreachable_allow: Optional[pulumi.Input[_builtins.bool]] = None,
774
+ imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
735
775
  loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
736
776
  match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
737
- max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.int]] = None,
738
- max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.int]] = None,
739
- max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.int]] = None,
777
+ max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
778
+ max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
779
+ max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
740
780
  mode: Optional[pulumi.Input[_builtins.str]] = None,
741
781
  name: Optional[pulumi.Input[_builtins.str]] = None,
742
- session_reclassify_allow: Optional[pulumi.Input[_builtins.bool]] = None,
782
+ session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
743
783
  tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
744
- unified_logging: Optional[pulumi.Input[_builtins.bool]] = None,
784
+ unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
745
785
  use_case: Optional[pulumi.Input[_builtins.str]] = None,
746
786
  __props__=None):
747
787
  """
748
788
  This resource can manage a Security Policy .
749
789
 
790
+ ## Example Usage
791
+
750
792
  ## Import
751
793
 
752
794
  The `pulumi import` command can be used, for example:
@@ -757,27 +799,37 @@ class SecurityPolicy(pulumi.CustomResource):
757
799
 
758
800
  :param str resource_name: The name of the resource.
759
801
  :param pulumi.ResourceOptions opts: Options for the resource.
760
- :param pulumi.Input[_builtins.str] audit_trail: Audit trail - Choices: `on`, `off`
802
+ :param pulumi.Input[_builtins.str] audit_trail: Audit trail
803
+ - Choices: `on`, `off`
761
804
  :param pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]] definitions: List of policy definitions
762
805
  :param pulumi.Input[_builtins.str] description: The description of the security policy
763
- :param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
764
- :param pulumi.Input[_builtins.str] failure_mode: Failure mode - Choices: `open`, `close`
806
+ :param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
807
+ - Choices: `allow`, `deny`
808
+ :param pulumi.Input[_builtins.str] failure_mode: Failure mode
809
+ - Choices: `open`, `close`
765
810
  :param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
766
811
  :param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
767
812
  :param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
768
813
  :param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
769
- :param pulumi.Input[_builtins.bool] imcp_unreachable_allow: ICMP Unreachable Allow
770
- :param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter - Choices: `on`, `off`
771
- :param pulumi.Input[_builtins.int] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
772
- :param pulumi.Input[_builtins.int] max_incomplete_tcp_limit: Max Incomplete TCP Limit
773
- :param pulumi.Input[_builtins.int] max_incomplete_udp_limit: Max Incomplete UDP Limit
774
- :param pulumi.Input[_builtins.str] mode: The policy mode - Choices: `security`, `unified` - Default value: `security`
814
+ :param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
815
+ - Choices: `on`, `off`
816
+ :param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
817
+ - Choices: `on`, `off`
818
+ :param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
819
+ :param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
820
+ :param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
821
+ :param pulumi.Input[_builtins.str] mode: The policy mode
822
+ - Choices: `security`, `unified`
823
+ - Default value: `security`
775
824
  :param pulumi.Input[_builtins.str] name: The name of the security policy
776
- :param pulumi.Input[_builtins.bool] session_reclassify_allow: Session Reclassify Allow
825
+ :param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
826
+ - Choices: `on`, `off`
777
827
  :param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
778
- :param pulumi.Input[_builtins.bool] unified_logging: Unified Logging
779
- :param pulumi.Input[_builtins.str] use_case: The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
780
- `directInternetAccess`, `directCloudAccess` - Default value: `custom`
828
+ :param pulumi.Input[_builtins.str] unified_logging: Unified Logging
829
+ - Choices: `on`, `off`
830
+ :param pulumi.Input[_builtins.str] use_case: The use case of the security policy
831
+ - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
832
+ - Default value: `custom`
781
833
  """
782
834
  ...
783
835
  @overload
@@ -788,6 +840,8 @@ class SecurityPolicy(pulumi.CustomResource):
788
840
  """
789
841
  This resource can manage a Security Policy .
790
842
 
843
+ ## Example Usage
844
+
791
845
  ## Import
792
846
 
793
847
  The `pulumi import` command can be used, for example:
@@ -820,17 +874,17 @@ class SecurityPolicy(pulumi.CustomResource):
820
874
  high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
821
875
  high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
822
876
  high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
823
- imcp_unreachable_allow: Optional[pulumi.Input[_builtins.bool]] = None,
877
+ imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
824
878
  loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
825
879
  match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
826
- max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.int]] = None,
827
- max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.int]] = None,
828
- max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.int]] = None,
880
+ max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
881
+ max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
882
+ max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
829
883
  mode: Optional[pulumi.Input[_builtins.str]] = None,
830
884
  name: Optional[pulumi.Input[_builtins.str]] = None,
831
- session_reclassify_allow: Optional[pulumi.Input[_builtins.bool]] = None,
885
+ session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
832
886
  tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
833
- unified_logging: Optional[pulumi.Input[_builtins.bool]] = None,
887
+ unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
834
888
  use_case: Optional[pulumi.Input[_builtins.str]] = None,
835
889
  __props__=None):
836
890
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -886,17 +940,17 @@ class SecurityPolicy(pulumi.CustomResource):
886
940
  high_speed_logging_server_port: Optional[pulumi.Input[_builtins.str]] = None,
887
941
  high_speed_logging_server_source_interface: Optional[pulumi.Input[_builtins.str]] = None,
888
942
  high_speed_logging_vpn: Optional[pulumi.Input[_builtins.str]] = None,
889
- imcp_unreachable_allow: Optional[pulumi.Input[_builtins.bool]] = None,
943
+ imcp_unreachable_allow: Optional[pulumi.Input[_builtins.str]] = None,
890
944
  loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
891
945
  match_statistics_per_filter: Optional[pulumi.Input[_builtins.str]] = None,
892
- max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.int]] = None,
893
- max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.int]] = None,
894
- max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.int]] = None,
946
+ max_incomplete_icmp_limit: Optional[pulumi.Input[_builtins.str]] = None,
947
+ max_incomplete_tcp_limit: Optional[pulumi.Input[_builtins.str]] = None,
948
+ max_incomplete_udp_limit: Optional[pulumi.Input[_builtins.str]] = None,
895
949
  mode: Optional[pulumi.Input[_builtins.str]] = None,
896
950
  name: Optional[pulumi.Input[_builtins.str]] = None,
897
- session_reclassify_allow: Optional[pulumi.Input[_builtins.bool]] = None,
951
+ session_reclassify_allow: Optional[pulumi.Input[_builtins.str]] = None,
898
952
  tcp_syn_flood_limit: Optional[pulumi.Input[_builtins.str]] = None,
899
- unified_logging: Optional[pulumi.Input[_builtins.bool]] = None,
953
+ unified_logging: Optional[pulumi.Input[_builtins.str]] = None,
900
954
  use_case: Optional[pulumi.Input[_builtins.str]] = None,
901
955
  version: Optional[pulumi.Input[_builtins.int]] = None) -> 'SecurityPolicy':
902
956
  """
@@ -906,27 +960,37 @@ class SecurityPolicy(pulumi.CustomResource):
906
960
  :param str resource_name: The unique name of the resulting resource.
907
961
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
908
962
  :param pulumi.ResourceOptions opts: Options for the resource.
909
- :param pulumi.Input[_builtins.str] audit_trail: Audit trail - Choices: `on`, `off`
963
+ :param pulumi.Input[_builtins.str] audit_trail: Audit trail
964
+ - Choices: `on`, `off`
910
965
  :param pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]] definitions: List of policy definitions
911
966
  :param pulumi.Input[_builtins.str] description: The description of the security policy
912
- :param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
913
- :param pulumi.Input[_builtins.str] failure_mode: Failure mode - Choices: `open`, `close`
967
+ :param pulumi.Input[_builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0
968
+ - Choices: `allow`, `deny`
969
+ :param pulumi.Input[_builtins.str] failure_mode: Failure mode
970
+ - Choices: `open`, `close`
914
971
  :param pulumi.Input[_builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
915
972
  :param pulumi.Input[_builtins.str] high_speed_logging_server_port: High Speed Logging Port
916
973
  :param pulumi.Input[_builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
917
974
  :param pulumi.Input[_builtins.str] high_speed_logging_vpn: High Speed Logging VPN
918
- :param pulumi.Input[_builtins.bool] imcp_unreachable_allow: ICMP Unreachable Allow
919
- :param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter - Choices: `on`, `off`
920
- :param pulumi.Input[_builtins.int] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
921
- :param pulumi.Input[_builtins.int] max_incomplete_tcp_limit: Max Incomplete TCP Limit
922
- :param pulumi.Input[_builtins.int] max_incomplete_udp_limit: Max Incomplete UDP Limit
923
- :param pulumi.Input[_builtins.str] mode: The policy mode - Choices: `security`, `unified` - Default value: `security`
975
+ :param pulumi.Input[_builtins.str] imcp_unreachable_allow: ICMP Unreachable Allow
976
+ - Choices: `on`, `off`
977
+ :param pulumi.Input[_builtins.str] match_statistics_per_filter: Match Statistics per-filter
978
+ - Choices: `on`, `off`
979
+ :param pulumi.Input[_builtins.str] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
980
+ :param pulumi.Input[_builtins.str] max_incomplete_tcp_limit: Max Incomplete TCP Limit
981
+ :param pulumi.Input[_builtins.str] max_incomplete_udp_limit: Max Incomplete UDP Limit
982
+ :param pulumi.Input[_builtins.str] mode: The policy mode
983
+ - Choices: `security`, `unified`
984
+ - Default value: `security`
924
985
  :param pulumi.Input[_builtins.str] name: The name of the security policy
925
- :param pulumi.Input[_builtins.bool] session_reclassify_allow: Session Reclassify Allow
986
+ :param pulumi.Input[_builtins.str] session_reclassify_allow: Session Reclassify Allow
987
+ - Choices: `on`, `off`
926
988
  :param pulumi.Input[_builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
927
- :param pulumi.Input[_builtins.bool] unified_logging: Unified Logging
928
- :param pulumi.Input[_builtins.str] use_case: The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
929
- `directInternetAccess`, `directCloudAccess` - Default value: `custom`
989
+ :param pulumi.Input[_builtins.str] unified_logging: Unified Logging
990
+ - Choices: `on`, `off`
991
+ :param pulumi.Input[_builtins.str] use_case: The use case of the security policy
992
+ - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
993
+ - Default value: `custom`
930
994
  :param pulumi.Input[_builtins.int] version: The version of the object
931
995
  """
932
996
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -961,7 +1025,8 @@ class SecurityPolicy(pulumi.CustomResource):
961
1025
  @pulumi.getter(name="auditTrail")
962
1026
  def audit_trail(self) -> pulumi.Output[Optional[_builtins.str]]:
963
1027
  """
964
- Audit trail - Choices: `on`, `off`
1028
+ Audit trail
1029
+ - Choices: `on`, `off`
965
1030
  """
966
1031
  return pulumi.get(self, "audit_trail")
967
1032
 
@@ -985,7 +1050,8 @@ class SecurityPolicy(pulumi.CustomResource):
985
1050
  @pulumi.getter(name="directInternetApplications")
986
1051
  def direct_internet_applications(self) -> pulumi.Output[Optional[_builtins.str]]:
987
1052
  """
988
- Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
1053
+ Bypass firewall policy and allow all Internet traffic to/from VPN 0
1054
+ - Choices: `allow`, `deny`
989
1055
  """
990
1056
  return pulumi.get(self, "direct_internet_applications")
991
1057
 
@@ -993,7 +1059,8 @@ class SecurityPolicy(pulumi.CustomResource):
993
1059
  @pulumi.getter(name="failureMode")
994
1060
  def failure_mode(self) -> pulumi.Output[Optional[_builtins.str]]:
995
1061
  """
996
- Failure mode - Choices: `open`, `close`
1062
+ Failure mode
1063
+ - Choices: `open`, `close`
997
1064
  """
998
1065
  return pulumi.get(self, "failure_mode")
999
1066
 
@@ -1031,9 +1098,10 @@ class SecurityPolicy(pulumi.CustomResource):
1031
1098
 
1032
1099
  @_builtins.property
1033
1100
  @pulumi.getter(name="imcpUnreachableAllow")
1034
- def imcp_unreachable_allow(self) -> pulumi.Output[Optional[_builtins.bool]]:
1101
+ def imcp_unreachable_allow(self) -> pulumi.Output[Optional[_builtins.str]]:
1035
1102
  """
1036
1103
  ICMP Unreachable Allow
1104
+ - Choices: `on`, `off`
1037
1105
  """
1038
1106
  return pulumi.get(self, "imcp_unreachable_allow")
1039
1107
 
@@ -1046,13 +1114,14 @@ class SecurityPolicy(pulumi.CustomResource):
1046
1114
  @pulumi.getter(name="matchStatisticsPerFilter")
1047
1115
  def match_statistics_per_filter(self) -> pulumi.Output[Optional[_builtins.str]]:
1048
1116
  """
1049
- Match Statistics per-filter - Choices: `on`, `off`
1117
+ Match Statistics per-filter
1118
+ - Choices: `on`, `off`
1050
1119
  """
1051
1120
  return pulumi.get(self, "match_statistics_per_filter")
1052
1121
 
1053
1122
  @_builtins.property
1054
1123
  @pulumi.getter(name="maxIncompleteIcmpLimit")
1055
- def max_incomplete_icmp_limit(self) -> pulumi.Output[Optional[_builtins.int]]:
1124
+ def max_incomplete_icmp_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
1056
1125
  """
1057
1126
  Max Incomplete ICMP Limit
1058
1127
  """
@@ -1060,7 +1129,7 @@ class SecurityPolicy(pulumi.CustomResource):
1060
1129
 
1061
1130
  @_builtins.property
1062
1131
  @pulumi.getter(name="maxIncompleteTcpLimit")
1063
- def max_incomplete_tcp_limit(self) -> pulumi.Output[Optional[_builtins.int]]:
1132
+ def max_incomplete_tcp_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
1064
1133
  """
1065
1134
  Max Incomplete TCP Limit
1066
1135
  """
@@ -1068,7 +1137,7 @@ class SecurityPolicy(pulumi.CustomResource):
1068
1137
 
1069
1138
  @_builtins.property
1070
1139
  @pulumi.getter(name="maxIncompleteUdpLimit")
1071
- def max_incomplete_udp_limit(self) -> pulumi.Output[Optional[_builtins.int]]:
1140
+ def max_incomplete_udp_limit(self) -> pulumi.Output[Optional[_builtins.str]]:
1072
1141
  """
1073
1142
  Max Incomplete UDP Limit
1074
1143
  """
@@ -1078,7 +1147,9 @@ class SecurityPolicy(pulumi.CustomResource):
1078
1147
  @pulumi.getter
1079
1148
  def mode(self) -> pulumi.Output[_builtins.str]:
1080
1149
  """
1081
- The policy mode - Choices: `security`, `unified` - Default value: `security`
1150
+ The policy mode
1151
+ - Choices: `security`, `unified`
1152
+ - Default value: `security`
1082
1153
  """
1083
1154
  return pulumi.get(self, "mode")
1084
1155
 
@@ -1092,9 +1163,10 @@ class SecurityPolicy(pulumi.CustomResource):
1092
1163
 
1093
1164
  @_builtins.property
1094
1165
  @pulumi.getter(name="sessionReclassifyAllow")
1095
- def session_reclassify_allow(self) -> pulumi.Output[Optional[_builtins.bool]]:
1166
+ def session_reclassify_allow(self) -> pulumi.Output[Optional[_builtins.str]]:
1096
1167
  """
1097
1168
  Session Reclassify Allow
1169
+ - Choices: `on`, `off`
1098
1170
  """
1099
1171
  return pulumi.get(self, "session_reclassify_allow")
1100
1172
 
@@ -1108,9 +1180,10 @@ class SecurityPolicy(pulumi.CustomResource):
1108
1180
 
1109
1181
  @_builtins.property
1110
1182
  @pulumi.getter(name="unifiedLogging")
1111
- def unified_logging(self) -> pulumi.Output[Optional[_builtins.bool]]:
1183
+ def unified_logging(self) -> pulumi.Output[Optional[_builtins.str]]:
1112
1184
  """
1113
1185
  Unified Logging
1186
+ - Choices: `on`, `off`
1114
1187
  """
1115
1188
  return pulumi.get(self, "unified_logging")
1116
1189
 
@@ -1118,8 +1191,9 @@ class SecurityPolicy(pulumi.CustomResource):
1118
1191
  @pulumi.getter(name="useCase")
1119
1192
  def use_case(self) -> pulumi.Output[_builtins.str]:
1120
1193
  """
1121
- The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
1122
- `directInternetAccess`, `directCloudAccess` - Default value: `custom`
1194
+ The use case of the security policy
1195
+ - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess`
1196
+ - Default value: `custom`
1123
1197
  """
1124
1198
  return pulumi.get(self, "use_case")
1125
1199