pulumi-sdwan 0.4.1a1756438344__py3-none-any.whl → 0.5.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-sdwan might be problematic. Click here for more details.
- pulumi_sdwan/_inputs.py +125 -45
- pulumi_sdwan/activate_centralized_policy.py +4 -0
- pulumi_sdwan/advanced_inspection_profile_policy_definition.py +14 -7
- pulumi_sdwan/advanced_malware_protection_policy_definition.py +91 -42
- pulumi_sdwan/application_aware_routing_policy_definition.py +4 -0
- pulumi_sdwan/application_priority_qos_policy.py +52 -48
- pulumi_sdwan/application_priority_traffic_policy_policy.py +4 -0
- pulumi_sdwan/as_path_list_policy_object.py +4 -0
- pulumi_sdwan/attach_feature_device_template.py +4 -0
- pulumi_sdwan/cedge_aaa_feature_template.py +151 -77
- pulumi_sdwan/cedge_global_feature_template.py +336 -175
- pulumi_sdwan/cedge_igmp_feature_template.py +18 -21
- pulumi_sdwan/cedge_multicast_feature_template.py +56 -42
- pulumi_sdwan/cedge_pim_feature_template.py +88 -56
- pulumi_sdwan/cellular_cedge_profile_feature_template.py +70 -42
- pulumi_sdwan/cellular_controller_feature_template.py +74 -49
- pulumi_sdwan/cellular_profile_feature_template.py +63 -42
- pulumi_sdwan/cflowd_policy_definition.py +74 -35
- pulumi_sdwan/cisco_banner_feature_template.py +14 -21
- pulumi_sdwan/cisco_bfd_feature_template.py +81 -49
- pulumi_sdwan/cisco_bgp_feature_template.py +235 -112
- pulumi_sdwan/cisco_dhcp_server_feature_template.py +53 -35
- pulumi_sdwan/cisco_logging_feature_template.py +74 -42
- pulumi_sdwan/cisco_ntp_feature_template.py +46 -35
- pulumi_sdwan/cisco_omp_feature_template.py +235 -112
- pulumi_sdwan/cisco_ospf_feature_template.py +235 -105
- pulumi_sdwan/cisco_ospfv3_feature_template.py +522 -217
- pulumi_sdwan/cisco_secure_internet_gateway_feature_template.py +39 -28
- pulumi_sdwan/cisco_security_feature_template.py +95 -56
- pulumi_sdwan/cisco_sig_credentials_feature_template.py +28 -28
- pulumi_sdwan/cisco_snmp_feature_template.py +32 -28
- pulumi_sdwan/cisco_system_feature_template.py +473 -742
- pulumi_sdwan/cisco_thousandeyes_feature_template.py +18 -21
- pulumi_sdwan/cisco_trustsec_feature_template.py +207 -112
- pulumi_sdwan/cisco_vpn_feature_template.py +102 -56
- pulumi_sdwan/cisco_vpn_interface_feature_template.py +1215 -602
- pulumi_sdwan/cisco_vpn_interface_gre_feature_template.py +109 -70
- pulumi_sdwan/cisco_vpn_interface_ipsec_feature_template.py +329 -161
- pulumi_sdwan/cisco_wireless_lan_feature_template.py +102 -98
- pulumi_sdwan/class_map_policy_object.py +14 -7
- pulumi_sdwan/cli_device_template.py +14 -7
- pulumi_sdwan/cli_template_feature_template.py +14 -21
- pulumi_sdwan/config/__init__.pyi +5 -0
- pulumi_sdwan/config/vars.py +7 -0
- pulumi_sdwan/configuration_group.py +28 -14
- pulumi_sdwan/custom_control_topology_policy_definition.py +18 -7
- pulumi_sdwan/eigrp_feature_template.py +102 -56
- pulumi_sdwan/feature_device_template.py +14 -7
- pulumi_sdwan/get_application_priority_qos_policy.py +15 -15
- pulumi_sdwan/get_security_policy.py +18 -18
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature.py +29 -29
- pulumi_sdwan/gps_feature_template.py +77 -49
- pulumi_sdwan/hub_and_spoke_topology_policy_definition.py +4 -0
- pulumi_sdwan/intrusion_prevention_policy_definition.py +60 -28
- pulumi_sdwan/ips_signature_list_policy_object.py +4 -0
- pulumi_sdwan/ipv4_acl_policy_definition.py +18 -7
- pulumi_sdwan/ipv4_device_acl_policy_definition.py +18 -7
- pulumi_sdwan/ipv6_acl_policy_definition.py +18 -7
- pulumi_sdwan/ipv6_device_acl_policy_definition.py +18 -7
- pulumi_sdwan/localized_policy.py +112 -56
- pulumi_sdwan/mesh_topology_policy_definition.py +4 -0
- pulumi_sdwan/other_thousandeyes_feature.py +4 -0
- pulumi_sdwan/other_ucse_feature.py +102 -56
- pulumi_sdwan/outputs.py +162 -69
- pulumi_sdwan/policer_policy_object.py +42 -21
- pulumi_sdwan/policy_group.py +14 -7
- pulumi_sdwan/policy_object_app_probe_class.py +4 -0
- pulumi_sdwan/policy_object_as_path_list.py +18 -7
- pulumi_sdwan/policy_object_data_ipv4_prefix_list.py +4 -0
- pulumi_sdwan/policy_object_data_ipv6_prefix_list.py +4 -0
- pulumi_sdwan/policy_object_extended_community_list.py +4 -0
- pulumi_sdwan/policy_object_ipv4_prefix_list.py +4 -0
- pulumi_sdwan/policy_object_ipv6_prefix_list.py +4 -0
- pulumi_sdwan/policy_object_mirror.py +4 -0
- pulumi_sdwan/policy_object_policer.py +4 -0
- pulumi_sdwan/policy_object_preferred_color_group.py +4 -0
- pulumi_sdwan/policy_object_security_data_ipv4_prefix_list.py +4 -0
- pulumi_sdwan/policy_object_security_geolocation_list.py +7 -7
- pulumi_sdwan/policy_object_security_ips_signature.py +4 -0
- pulumi_sdwan/policy_object_security_local_domain_list.py +4 -0
- pulumi_sdwan/policy_object_security_scalable_group_tag_list.py +4 -0
- pulumi_sdwan/policy_object_sla_class_list.py +4 -0
- pulumi_sdwan/policy_object_standard_community_list.py +4 -0
- pulumi_sdwan/policy_object_tloc_list.py +4 -0
- pulumi_sdwan/port_list_policy_object.py +2 -2
- pulumi_sdwan/preferred_color_group_policy_object.py +42 -21
- pulumi_sdwan/provider.py +20 -0
- pulumi_sdwan/pulumi-plugin.json +1 -1
- pulumi_sdwan/qos_map_policy_definition.py +4 -0
- pulumi_sdwan/region_list_policy_object.py +4 -0
- pulumi_sdwan/rewrite_rule_policy_definition.py +4 -0
- pulumi_sdwan/route_policy_definition.py +18 -7
- pulumi_sdwan/rule_set_policy_definition.py +4 -0
- pulumi_sdwan/security_app_hosting_feature_template.py +18 -21
- pulumi_sdwan/security_policy.py +207 -133
- pulumi_sdwan/service_dhcp_server_feature.py +53 -49
- pulumi_sdwan/service_ipv4_acl_feature.py +25 -7
- pulumi_sdwan/service_ipv6_acl_feature.py +25 -7
- pulumi_sdwan/service_lan_vpn_feature.py +67 -28
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature.py +588 -374
- pulumi_sdwan/service_lan_vpn_interface_gre_feature.py +84 -70
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature.py +329 -245
- pulumi_sdwan/service_lan_vpn_interface_svi_feature.py +151 -91
- pulumi_sdwan/service_multicast_feature.py +95 -42
- pulumi_sdwan/service_object_tracker_feature.py +63 -56
- pulumi_sdwan/service_object_tracker_group_feature.py +39 -14
- pulumi_sdwan/service_route_policy_feature.py +25 -7
- pulumi_sdwan/service_routing_bgp_feature.py +291 -133
- pulumi_sdwan/service_routing_eigrp_feature.py +88 -35
- pulumi_sdwan/service_routing_ospf_feature.py +221 -84
- pulumi_sdwan/service_routing_ospfv3_ipv4_feature.py +242 -91
- pulumi_sdwan/service_routing_ospfv3_ipv6_feature.py +242 -91
- pulumi_sdwan/service_switchport_feature.py +25 -7
- pulumi_sdwan/service_tracker_feature.py +105 -35
- pulumi_sdwan/service_tracker_group_feature.py +25 -7
- pulumi_sdwan/service_wireless_lan_feature.py +67 -126
- pulumi_sdwan/site_list_policy_object.py +4 -0
- pulumi_sdwan/sla_class_policy_object.py +91 -63
- pulumi_sdwan/switchport_feature_template.py +95 -49
- pulumi_sdwan/system_aaa_feature.py +60 -28
- pulumi_sdwan/system_basic_feature.py +396 -693
- pulumi_sdwan/system_bfd_feature.py +46 -21
- pulumi_sdwan/system_flexible_port_speed_feature.py +21 -21
- pulumi_sdwan/system_global_feature.py +322 -154
- pulumi_sdwan/system_ipv4_device_access_feature.py +25 -7
- pulumi_sdwan/system_ipv6_device_access_feature.py +25 -7
- pulumi_sdwan/system_logging_feature.py +60 -21
- pulumi_sdwan/system_mrf_feature.py +70 -35
- pulumi_sdwan/system_ntp_feature.py +32 -14
- pulumi_sdwan/system_omp_feature.py +441 -196
- pulumi_sdwan/system_performance_monitoring_feature.py +56 -28
- pulumi_sdwan/system_remote_access_feature.py +203 -133
- pulumi_sdwan/system_security_feature.py +81 -35
- pulumi_sdwan/system_snmp_feature.py +18 -7
- pulumi_sdwan/tloc_list_policy_object.py +4 -0
- pulumi_sdwan/tls_ssl_decryption_policy_definition.py +172 -84
- pulumi_sdwan/tls_ssl_profile_policy_definition.py +28 -14
- pulumi_sdwan/traffic_data_policy_definition.py +18 -7
- pulumi_sdwan/transport_cellular_controller_feature.py +56 -28
- pulumi_sdwan/transport_cellular_profile_feature.py +63 -35
- pulumi_sdwan/transport_gps_feature.py +63 -28
- pulumi_sdwan/transport_ipv4_acl_feature.py +25 -7
- pulumi_sdwan/transport_ipv6_acl_feature.py +25 -7
- pulumi_sdwan/transport_ipv6_tracker_feature.py +105 -35
- pulumi_sdwan/transport_ipv6_tracker_group_feature.py +25 -7
- pulumi_sdwan/transport_management_vpn_feature.py +4 -0
- pulumi_sdwan/transport_management_vpn_interface_ethernet_feature.py +263 -154
- pulumi_sdwan/transport_route_policy_feature.py +25 -7
- pulumi_sdwan/transport_routing_bgp_feature.py +291 -133
- pulumi_sdwan/transport_routing_ospf_feature.py +221 -84
- pulumi_sdwan/transport_routing_ospfv3_ipv4_feature.py +242 -91
- pulumi_sdwan/transport_routing_ospfv3_ipv6_feature.py +242 -91
- pulumi_sdwan/transport_t1_e1_controller_feature.py +18 -7
- pulumi_sdwan/transport_tracker_feature.py +105 -35
- pulumi_sdwan/transport_tracker_group_feature.py +25 -7
- pulumi_sdwan/transport_wan_vpn_feature.py +32 -14
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature.py +844 -413
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature.py +1166 -735
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature.py +84 -70
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature.py +329 -245
- pulumi_sdwan/transport_wan_vpn_interface_t1_e1_serial_feature.py +665 -371
- pulumi_sdwan/url_filtering_policy_definition.py +60 -35
- pulumi_sdwan/vpn_interface_cellular_feature_template.py +935 -455
- pulumi_sdwan/vpn_interface_dsl_ipoe_feature_template.py +963 -469
- pulumi_sdwan/vpn_interface_dsl_pppoa_feature_template.py +928 -448
- pulumi_sdwan/vpn_interface_dsl_pppoe_feature_template.py +984 -476
- pulumi_sdwan/vpn_interface_ethernet_pppoe_feature_template.py +984 -476
- pulumi_sdwan/vpn_interface_multilink_feature_template.py +816 -406
- pulumi_sdwan/vpn_interface_svi_feature_template.py +172 -84
- pulumi_sdwan/vpn_interface_t1_e1_serial_feature_template.py +725 -378
- pulumi_sdwan/vpn_list_policy_object.py +4 -0
- pulumi_sdwan/vpn_membership_policy_definition.py +4 -0
- pulumi_sdwan/zone_based_firewall_policy_definition.py +32 -14
- {pulumi_sdwan-0.4.1a1756438344.dist-info → pulumi_sdwan-0.5.0.dist-info}/METADATA +1 -1
- {pulumi_sdwan-0.4.1a1756438344.dist-info → pulumi_sdwan-0.5.0.dist-info}/RECORD +177 -177
- {pulumi_sdwan-0.4.1a1756438344.dist-info → pulumi_sdwan-0.5.0.dist-info}/WHEEL +0 -0
- {pulumi_sdwan-0.4.1a1756438344.dist-info → pulumi_sdwan-0.5.0.dist-info}/top_level.txt +0 -0
|
@@ -44,21 +44,33 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
44
44
|
The set of arguments for constructing a TlsSslDecryptionPolicyDefinition resource.
|
|
45
45
|
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
46
46
|
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
47
|
-
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
48
|
-
|
|
49
|
-
:param pulumi.Input[_builtins.str]
|
|
50
|
-
|
|
51
|
-
:param pulumi.Input[_builtins.str]
|
|
52
|
-
|
|
53
|
-
:param pulumi.Input[_builtins.str]
|
|
47
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
48
|
+
- Choices: `ocsp`, `none`
|
|
49
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
50
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
51
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
52
|
+
- Choices: `P256`, `P384`, `P521`
|
|
53
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
54
|
+
- Choices: `drop`, `decrypt`
|
|
55
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
56
|
+
- Choices: `open`, `close`
|
|
57
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
58
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
59
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
60
|
+
- Choices: `security`, `unified`
|
|
54
61
|
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
55
62
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
56
|
-
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
63
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
64
|
+
- Choices: `1024`, `2048`, `4096`
|
|
57
65
|
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
58
|
-
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
59
|
-
|
|
60
|
-
:param pulumi.Input[_builtins.str]
|
|
61
|
-
|
|
66
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
67
|
+
- Choices: `drop`, `decrypt`
|
|
68
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
69
|
+
- Choices: `drop`, `no-decrypt`
|
|
70
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
71
|
+
- Choices: `drop`, `no-decrypt`
|
|
72
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
73
|
+
- Choices: `drop`, `decrypt`
|
|
62
74
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
63
75
|
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
64
76
|
"""
|
|
@@ -128,7 +140,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
128
140
|
@pulumi.getter(name="certificateRevocationStatus")
|
|
129
141
|
def certificate_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
130
142
|
"""
|
|
131
|
-
Certificate revocation status
|
|
143
|
+
Certificate revocation status
|
|
144
|
+
- Choices: `ocsp`, `none`
|
|
132
145
|
"""
|
|
133
146
|
return pulumi.get(self, "certificate_revocation_status")
|
|
134
147
|
|
|
@@ -140,7 +153,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
140
153
|
@pulumi.getter(name="defaultAction")
|
|
141
154
|
def default_action(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
142
155
|
"""
|
|
143
|
-
Default action (applies when `mode` set to `security`)
|
|
156
|
+
Default action (applies when `mode` set to `security`)
|
|
157
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
144
158
|
"""
|
|
145
159
|
return pulumi.get(self, "default_action")
|
|
146
160
|
|
|
@@ -152,7 +166,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
152
166
|
@pulumi.getter(name="ecKeyType")
|
|
153
167
|
def ec_key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
154
168
|
"""
|
|
155
|
-
EC Key Type
|
|
169
|
+
EC Key Type
|
|
170
|
+
- Choices: `P256`, `P384`, `P521`
|
|
156
171
|
"""
|
|
157
172
|
return pulumi.get(self, "ec_key_type")
|
|
158
173
|
|
|
@@ -164,7 +179,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
164
179
|
@pulumi.getter(name="expiredCertificate")
|
|
165
180
|
def expired_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
166
181
|
"""
|
|
167
|
-
Expired certificate action
|
|
182
|
+
Expired certificate action
|
|
183
|
+
- Choices: `drop`, `decrypt`
|
|
168
184
|
"""
|
|
169
185
|
return pulumi.get(self, "expired_certificate")
|
|
170
186
|
|
|
@@ -176,7 +192,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
176
192
|
@pulumi.getter(name="failureMode")
|
|
177
193
|
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
178
194
|
"""
|
|
179
|
-
Failure mode
|
|
195
|
+
Failure mode
|
|
196
|
+
- Choices: `open`, `close`
|
|
180
197
|
"""
|
|
181
198
|
return pulumi.get(self, "failure_mode")
|
|
182
199
|
|
|
@@ -188,7 +205,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
188
205
|
@pulumi.getter(name="minimalTlsVersion")
|
|
189
206
|
def minimal_tls_version(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
190
207
|
"""
|
|
191
|
-
Minimal TLS Version
|
|
208
|
+
Minimal TLS Version
|
|
209
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
192
210
|
"""
|
|
193
211
|
return pulumi.get(self, "minimal_tls_version")
|
|
194
212
|
|
|
@@ -200,7 +218,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
200
218
|
@pulumi.getter
|
|
201
219
|
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
202
220
|
"""
|
|
203
|
-
The policy mode
|
|
221
|
+
The policy mode
|
|
222
|
+
- Choices: `security`, `unified`
|
|
204
223
|
"""
|
|
205
224
|
return pulumi.get(self, "mode")
|
|
206
225
|
|
|
@@ -236,7 +255,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
236
255
|
@pulumi.getter(name="rsaKeyPairModulus")
|
|
237
256
|
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
238
257
|
"""
|
|
239
|
-
RSA key pair modules
|
|
258
|
+
RSA key pair modules
|
|
259
|
+
- Choices: `1024`, `2048`, `4096`
|
|
240
260
|
"""
|
|
241
261
|
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
242
262
|
|
|
@@ -260,7 +280,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
260
280
|
@pulumi.getter(name="unknownRevocationStatus")
|
|
261
281
|
def unknown_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
262
282
|
"""
|
|
263
|
-
Unknown revocation status action
|
|
283
|
+
Unknown revocation status action
|
|
284
|
+
- Choices: `drop`, `decrypt`
|
|
264
285
|
"""
|
|
265
286
|
return pulumi.get(self, "unknown_revocation_status")
|
|
266
287
|
|
|
@@ -272,7 +293,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
272
293
|
@pulumi.getter(name="unsupportedCipherSuites")
|
|
273
294
|
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
274
295
|
"""
|
|
275
|
-
Unsupported cipher suites action
|
|
296
|
+
Unsupported cipher suites action
|
|
297
|
+
- Choices: `drop`, `no-decrypt`
|
|
276
298
|
"""
|
|
277
299
|
return pulumi.get(self, "unsupported_cipher_suites")
|
|
278
300
|
|
|
@@ -284,7 +306,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
284
306
|
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
285
307
|
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
286
308
|
"""
|
|
287
|
-
Unsupported protocol versions action
|
|
309
|
+
Unsupported protocol versions action
|
|
310
|
+
- Choices: `drop`, `no-decrypt`
|
|
288
311
|
"""
|
|
289
312
|
return pulumi.get(self, "unsupported_protocol_versions")
|
|
290
313
|
|
|
@@ -296,7 +319,8 @@ class TlsSslDecryptionPolicyDefinitionArgs:
|
|
|
296
319
|
@pulumi.getter(name="untrustedCertificate")
|
|
297
320
|
def untrusted_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
298
321
|
"""
|
|
299
|
-
Untrusted certificate action
|
|
322
|
+
Untrusted certificate action
|
|
323
|
+
- Choices: `drop`, `decrypt`
|
|
300
324
|
"""
|
|
301
325
|
return pulumi.get(self, "untrusted_certificate")
|
|
302
326
|
|
|
@@ -355,22 +379,34 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
355
379
|
"""
|
|
356
380
|
Input properties used for looking up and filtering TlsSslDecryptionPolicyDefinition resources.
|
|
357
381
|
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
358
|
-
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
359
|
-
|
|
382
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
383
|
+
- Choices: `ocsp`, `none`
|
|
384
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
385
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
360
386
|
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
361
|
-
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
362
|
-
|
|
363
|
-
:param pulumi.Input[_builtins.str]
|
|
364
|
-
|
|
365
|
-
:param pulumi.Input[_builtins.str]
|
|
387
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
388
|
+
- Choices: `P256`, `P384`, `P521`
|
|
389
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
390
|
+
- Choices: `drop`, `decrypt`
|
|
391
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
392
|
+
- Choices: `open`, `close`
|
|
393
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
394
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
395
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
396
|
+
- Choices: `security`, `unified`
|
|
366
397
|
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
367
398
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs']]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
368
|
-
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
399
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
400
|
+
- Choices: `1024`, `2048`, `4096`
|
|
369
401
|
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
370
|
-
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
371
|
-
|
|
372
|
-
:param pulumi.Input[_builtins.str]
|
|
373
|
-
|
|
402
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
403
|
+
- Choices: `drop`, `decrypt`
|
|
404
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
405
|
+
- Choices: `drop`, `no-decrypt`
|
|
406
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
407
|
+
- Choices: `drop`, `no-decrypt`
|
|
408
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
409
|
+
- Choices: `drop`, `decrypt`
|
|
374
410
|
:param pulumi.Input[Sequence[pulumi.Input['TlsSslDecryptionPolicyDefinitionUrlRuleArgs']]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
375
411
|
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
376
412
|
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
@@ -432,7 +468,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
432
468
|
@pulumi.getter(name="certificateRevocationStatus")
|
|
433
469
|
def certificate_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
434
470
|
"""
|
|
435
|
-
Certificate revocation status
|
|
471
|
+
Certificate revocation status
|
|
472
|
+
- Choices: `ocsp`, `none`
|
|
436
473
|
"""
|
|
437
474
|
return pulumi.get(self, "certificate_revocation_status")
|
|
438
475
|
|
|
@@ -444,7 +481,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
444
481
|
@pulumi.getter(name="defaultAction")
|
|
445
482
|
def default_action(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
446
483
|
"""
|
|
447
|
-
Default action (applies when `mode` set to `security`)
|
|
484
|
+
Default action (applies when `mode` set to `security`)
|
|
485
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
448
486
|
"""
|
|
449
487
|
return pulumi.get(self, "default_action")
|
|
450
488
|
|
|
@@ -468,7 +506,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
468
506
|
@pulumi.getter(name="ecKeyType")
|
|
469
507
|
def ec_key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
470
508
|
"""
|
|
471
|
-
EC Key Type
|
|
509
|
+
EC Key Type
|
|
510
|
+
- Choices: `P256`, `P384`, `P521`
|
|
472
511
|
"""
|
|
473
512
|
return pulumi.get(self, "ec_key_type")
|
|
474
513
|
|
|
@@ -480,7 +519,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
480
519
|
@pulumi.getter(name="expiredCertificate")
|
|
481
520
|
def expired_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
482
521
|
"""
|
|
483
|
-
Expired certificate action
|
|
522
|
+
Expired certificate action
|
|
523
|
+
- Choices: `drop`, `decrypt`
|
|
484
524
|
"""
|
|
485
525
|
return pulumi.get(self, "expired_certificate")
|
|
486
526
|
|
|
@@ -492,7 +532,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
492
532
|
@pulumi.getter(name="failureMode")
|
|
493
533
|
def failure_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
494
534
|
"""
|
|
495
|
-
Failure mode
|
|
535
|
+
Failure mode
|
|
536
|
+
- Choices: `open`, `close`
|
|
496
537
|
"""
|
|
497
538
|
return pulumi.get(self, "failure_mode")
|
|
498
539
|
|
|
@@ -504,7 +545,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
504
545
|
@pulumi.getter(name="minimalTlsVersion")
|
|
505
546
|
def minimal_tls_version(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
506
547
|
"""
|
|
507
|
-
Minimal TLS Version
|
|
548
|
+
Minimal TLS Version
|
|
549
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
508
550
|
"""
|
|
509
551
|
return pulumi.get(self, "minimal_tls_version")
|
|
510
552
|
|
|
@@ -516,7 +558,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
516
558
|
@pulumi.getter
|
|
517
559
|
def mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
518
560
|
"""
|
|
519
|
-
The policy mode
|
|
561
|
+
The policy mode
|
|
562
|
+
- Choices: `security`, `unified`
|
|
520
563
|
"""
|
|
521
564
|
return pulumi.get(self, "mode")
|
|
522
565
|
|
|
@@ -552,7 +595,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
552
595
|
@pulumi.getter(name="rsaKeyPairModulus")
|
|
553
596
|
def rsa_key_pair_modulus(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
554
597
|
"""
|
|
555
|
-
RSA key pair modules
|
|
598
|
+
RSA key pair modules
|
|
599
|
+
- Choices: `1024`, `2048`, `4096`
|
|
556
600
|
"""
|
|
557
601
|
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
558
602
|
|
|
@@ -576,7 +620,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
576
620
|
@pulumi.getter(name="unknownRevocationStatus")
|
|
577
621
|
def unknown_revocation_status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
578
622
|
"""
|
|
579
|
-
Unknown revocation status action
|
|
623
|
+
Unknown revocation status action
|
|
624
|
+
- Choices: `drop`, `decrypt`
|
|
580
625
|
"""
|
|
581
626
|
return pulumi.get(self, "unknown_revocation_status")
|
|
582
627
|
|
|
@@ -588,7 +633,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
588
633
|
@pulumi.getter(name="unsupportedCipherSuites")
|
|
589
634
|
def unsupported_cipher_suites(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
590
635
|
"""
|
|
591
|
-
Unsupported cipher suites action
|
|
636
|
+
Unsupported cipher suites action
|
|
637
|
+
- Choices: `drop`, `no-decrypt`
|
|
592
638
|
"""
|
|
593
639
|
return pulumi.get(self, "unsupported_cipher_suites")
|
|
594
640
|
|
|
@@ -600,7 +646,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
600
646
|
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
601
647
|
def unsupported_protocol_versions(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
602
648
|
"""
|
|
603
|
-
Unsupported protocol versions action
|
|
649
|
+
Unsupported protocol versions action
|
|
650
|
+
- Choices: `drop`, `no-decrypt`
|
|
604
651
|
"""
|
|
605
652
|
return pulumi.get(self, "unsupported_protocol_versions")
|
|
606
653
|
|
|
@@ -612,7 +659,8 @@ class _TlsSslDecryptionPolicyDefinitionState:
|
|
|
612
659
|
@pulumi.getter(name="untrustedCertificate")
|
|
613
660
|
def untrusted_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
614
661
|
"""
|
|
615
|
-
Untrusted certificate action
|
|
662
|
+
Untrusted certificate action
|
|
663
|
+
- Choices: `drop`, `decrypt`
|
|
616
664
|
"""
|
|
617
665
|
return pulumi.get(self, "untrusted_certificate")
|
|
618
666
|
|
|
@@ -686,6 +734,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
686
734
|
"""
|
|
687
735
|
This resource can manage a TLS SSL Decryption Policy Definition .
|
|
688
736
|
|
|
737
|
+
## Example Usage
|
|
738
|
+
|
|
689
739
|
## Import
|
|
690
740
|
|
|
691
741
|
The `pulumi import` command can be used, for example:
|
|
@@ -697,22 +747,34 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
697
747
|
:param str resource_name: The name of the resource.
|
|
698
748
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
699
749
|
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
700
|
-
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
701
|
-
|
|
750
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
751
|
+
- Choices: `ocsp`, `none`
|
|
752
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
753
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
702
754
|
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
703
|
-
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
704
|
-
|
|
705
|
-
:param pulumi.Input[_builtins.str]
|
|
706
|
-
|
|
707
|
-
:param pulumi.Input[_builtins.str]
|
|
755
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
756
|
+
- Choices: `P256`, `P384`, `P521`
|
|
757
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
758
|
+
- Choices: `drop`, `decrypt`
|
|
759
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
760
|
+
- Choices: `open`, `close`
|
|
761
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
762
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
763
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
764
|
+
- Choices: `security`, `unified`
|
|
708
765
|
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
709
766
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
710
|
-
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
767
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
768
|
+
- Choices: `1024`, `2048`, `4096`
|
|
711
769
|
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
712
|
-
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
713
|
-
|
|
714
|
-
:param pulumi.Input[_builtins.str]
|
|
715
|
-
|
|
770
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
771
|
+
- Choices: `drop`, `decrypt`
|
|
772
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
773
|
+
- Choices: `drop`, `no-decrypt`
|
|
774
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
775
|
+
- Choices: `drop`, `no-decrypt`
|
|
776
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
777
|
+
- Choices: `drop`, `decrypt`
|
|
716
778
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
717
779
|
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
718
780
|
"""
|
|
@@ -725,6 +787,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
725
787
|
"""
|
|
726
788
|
This resource can manage a TLS SSL Decryption Policy Definition .
|
|
727
789
|
|
|
790
|
+
## Example Usage
|
|
791
|
+
|
|
728
792
|
## Import
|
|
729
793
|
|
|
730
794
|
The `pulumi import` command can be used, for example:
|
|
@@ -836,22 +900,34 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
836
900
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
837
901
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
838
902
|
:param pulumi.Input[_builtins.int] certificate_lifetime_in_days: Certificate Lifetime(in Days)
|
|
839
|
-
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
840
|
-
|
|
903
|
+
:param pulumi.Input[_builtins.str] certificate_revocation_status: Certificate revocation status
|
|
904
|
+
- Choices: `ocsp`, `none`
|
|
905
|
+
:param pulumi.Input[_builtins.str] default_action: Default action (applies when `mode` set to `security`)
|
|
906
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
841
907
|
:param pulumi.Input[_builtins.str] description: The description of the policy definition.
|
|
842
|
-
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
843
|
-
|
|
844
|
-
:param pulumi.Input[_builtins.str]
|
|
845
|
-
|
|
846
|
-
:param pulumi.Input[_builtins.str]
|
|
908
|
+
:param pulumi.Input[_builtins.str] ec_key_type: EC Key Type
|
|
909
|
+
- Choices: `P256`, `P384`, `P521`
|
|
910
|
+
:param pulumi.Input[_builtins.str] expired_certificate: Expired certificate action
|
|
911
|
+
- Choices: `drop`, `decrypt`
|
|
912
|
+
:param pulumi.Input[_builtins.str] failure_mode: Failure mode
|
|
913
|
+
- Choices: `open`, `close`
|
|
914
|
+
:param pulumi.Input[_builtins.str] minimal_tls_version: Minimal TLS Version
|
|
915
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
916
|
+
:param pulumi.Input[_builtins.str] mode: The policy mode
|
|
917
|
+
- Choices: `security`, `unified`
|
|
847
918
|
:param pulumi.Input[_builtins.str] name: The name of the policy definition.
|
|
848
919
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionNetworkRuleArgs', 'TlsSslDecryptionPolicyDefinitionNetworkRuleArgsDict']]]] network_rules: List of network rules (applies when `mode` set to `security`)
|
|
849
|
-
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
920
|
+
:param pulumi.Input[_builtins.str] rsa_key_pair_modulus: RSA key pair modules
|
|
921
|
+
- Choices: `1024`, `2048`, `4096`
|
|
850
922
|
:param pulumi.Input[_builtins.str] ssl_decryption_enabled: SSL decryption enabled
|
|
851
|
-
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
852
|
-
|
|
853
|
-
:param pulumi.Input[_builtins.str]
|
|
854
|
-
|
|
923
|
+
:param pulumi.Input[_builtins.str] unknown_revocation_status: Unknown revocation status action
|
|
924
|
+
- Choices: `drop`, `decrypt`
|
|
925
|
+
:param pulumi.Input[_builtins.str] unsupported_cipher_suites: Unsupported cipher suites action
|
|
926
|
+
- Choices: `drop`, `no-decrypt`
|
|
927
|
+
:param pulumi.Input[_builtins.str] unsupported_protocol_versions: Unsupported protocol versions action
|
|
928
|
+
- Choices: `drop`, `no-decrypt`
|
|
929
|
+
:param pulumi.Input[_builtins.str] untrusted_certificate: Untrusted certificate action
|
|
930
|
+
- Choices: `drop`, `decrypt`
|
|
855
931
|
:param pulumi.Input[Sequence[pulumi.Input[Union['TlsSslDecryptionPolicyDefinitionUrlRuleArgs', 'TlsSslDecryptionPolicyDefinitionUrlRuleArgsDict']]]] url_rules: List of url rules (applies when `mode` set to `security`)
|
|
856
932
|
:param pulumi.Input[_builtins.bool] use_default_ca_cert_bundle: Use default CA certificate bundle
|
|
857
933
|
:param pulumi.Input[_builtins.int] version: The version of the object
|
|
@@ -894,7 +970,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
894
970
|
@pulumi.getter(name="certificateRevocationStatus")
|
|
895
971
|
def certificate_revocation_status(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
896
972
|
"""
|
|
897
|
-
Certificate revocation status
|
|
973
|
+
Certificate revocation status
|
|
974
|
+
- Choices: `ocsp`, `none`
|
|
898
975
|
"""
|
|
899
976
|
return pulumi.get(self, "certificate_revocation_status")
|
|
900
977
|
|
|
@@ -902,7 +979,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
902
979
|
@pulumi.getter(name="defaultAction")
|
|
903
980
|
def default_action(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
904
981
|
"""
|
|
905
|
-
Default action (applies when `mode` set to `security`)
|
|
982
|
+
Default action (applies when `mode` set to `security`)
|
|
983
|
+
- Choices: `noIntent`, `doNotDecrypt`, `decrypt`
|
|
906
984
|
"""
|
|
907
985
|
return pulumi.get(self, "default_action")
|
|
908
986
|
|
|
@@ -918,7 +996,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
918
996
|
@pulumi.getter(name="ecKeyType")
|
|
919
997
|
def ec_key_type(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
920
998
|
"""
|
|
921
|
-
EC Key Type
|
|
999
|
+
EC Key Type
|
|
1000
|
+
- Choices: `P256`, `P384`, `P521`
|
|
922
1001
|
"""
|
|
923
1002
|
return pulumi.get(self, "ec_key_type")
|
|
924
1003
|
|
|
@@ -926,7 +1005,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
926
1005
|
@pulumi.getter(name="expiredCertificate")
|
|
927
1006
|
def expired_certificate(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
928
1007
|
"""
|
|
929
|
-
Expired certificate action
|
|
1008
|
+
Expired certificate action
|
|
1009
|
+
- Choices: `drop`, `decrypt`
|
|
930
1010
|
"""
|
|
931
1011
|
return pulumi.get(self, "expired_certificate")
|
|
932
1012
|
|
|
@@ -934,7 +1014,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
934
1014
|
@pulumi.getter(name="failureMode")
|
|
935
1015
|
def failure_mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
936
1016
|
"""
|
|
937
|
-
Failure mode
|
|
1017
|
+
Failure mode
|
|
1018
|
+
- Choices: `open`, `close`
|
|
938
1019
|
"""
|
|
939
1020
|
return pulumi.get(self, "failure_mode")
|
|
940
1021
|
|
|
@@ -942,7 +1023,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
942
1023
|
@pulumi.getter(name="minimalTlsVersion")
|
|
943
1024
|
def minimal_tls_version(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
944
1025
|
"""
|
|
945
|
-
Minimal TLS Version
|
|
1026
|
+
Minimal TLS Version
|
|
1027
|
+
- Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
|
|
946
1028
|
"""
|
|
947
1029
|
return pulumi.get(self, "minimal_tls_version")
|
|
948
1030
|
|
|
@@ -950,7 +1032,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
950
1032
|
@pulumi.getter
|
|
951
1033
|
def mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
952
1034
|
"""
|
|
953
|
-
The policy mode
|
|
1035
|
+
The policy mode
|
|
1036
|
+
- Choices: `security`, `unified`
|
|
954
1037
|
"""
|
|
955
1038
|
return pulumi.get(self, "mode")
|
|
956
1039
|
|
|
@@ -974,7 +1057,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
974
1057
|
@pulumi.getter(name="rsaKeyPairModulus")
|
|
975
1058
|
def rsa_key_pair_modulus(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
976
1059
|
"""
|
|
977
|
-
RSA key pair modules
|
|
1060
|
+
RSA key pair modules
|
|
1061
|
+
- Choices: `1024`, `2048`, `4096`
|
|
978
1062
|
"""
|
|
979
1063
|
return pulumi.get(self, "rsa_key_pair_modulus")
|
|
980
1064
|
|
|
@@ -990,7 +1074,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
990
1074
|
@pulumi.getter(name="unknownRevocationStatus")
|
|
991
1075
|
def unknown_revocation_status(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
992
1076
|
"""
|
|
993
|
-
Unknown revocation status action
|
|
1077
|
+
Unknown revocation status action
|
|
1078
|
+
- Choices: `drop`, `decrypt`
|
|
994
1079
|
"""
|
|
995
1080
|
return pulumi.get(self, "unknown_revocation_status")
|
|
996
1081
|
|
|
@@ -998,7 +1083,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
998
1083
|
@pulumi.getter(name="unsupportedCipherSuites")
|
|
999
1084
|
def unsupported_cipher_suites(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1000
1085
|
"""
|
|
1001
|
-
Unsupported cipher suites action
|
|
1086
|
+
Unsupported cipher suites action
|
|
1087
|
+
- Choices: `drop`, `no-decrypt`
|
|
1002
1088
|
"""
|
|
1003
1089
|
return pulumi.get(self, "unsupported_cipher_suites")
|
|
1004
1090
|
|
|
@@ -1006,7 +1092,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
1006
1092
|
@pulumi.getter(name="unsupportedProtocolVersions")
|
|
1007
1093
|
def unsupported_protocol_versions(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1008
1094
|
"""
|
|
1009
|
-
Unsupported protocol versions action
|
|
1095
|
+
Unsupported protocol versions action
|
|
1096
|
+
- Choices: `drop`, `no-decrypt`
|
|
1010
1097
|
"""
|
|
1011
1098
|
return pulumi.get(self, "unsupported_protocol_versions")
|
|
1012
1099
|
|
|
@@ -1014,7 +1101,8 @@ class TlsSslDecryptionPolicyDefinition(pulumi.CustomResource):
|
|
|
1014
1101
|
@pulumi.getter(name="untrustedCertificate")
|
|
1015
1102
|
def untrusted_certificate(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1016
1103
|
"""
|
|
1017
|
-
Untrusted certificate action
|
|
1104
|
+
Untrusted certificate action
|
|
1105
|
+
- Choices: `drop`, `decrypt`
|
|
1018
1106
|
"""
|
|
1019
1107
|
return pulumi.get(self, "untrusted_certificate")
|
|
1020
1108
|
|