@pulumi/cloudngfwaws
Version:
A Pulumi package for creating and managing Cloud NGFW for AWS resources.
175 lines (174 loc) • 4.39 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
export interface GetAccountsAccountDetail {
/**
* The account id.
*/
accountId?: string;
/**
* External Id of the onboarded account
*/
externalId?: string;
/**
* Onboarding status of the account.
*/
onboardingStatus?: string;
}
export interface GetAccountsAccountDetailArgs {
/**
* The account id.
*/
accountId?: pulumi.Input<string>;
/**
* External Id of the onboarded account
*/
externalId?: pulumi.Input<string>;
/**
* Onboarding status of the account.
*/
onboardingStatus?: pulumi.Input<string>;
}
export interface NgfwLogProfileLogDestination {
/**
* The log destination details.
*/
destination?: pulumi.Input<string>;
/**
* The log destination type. Valid values are `S3`, `CloudWatchLogs`, or `KinesisDataFirehose`.
*/
destinationType?: pulumi.Input<string>;
/**
* The type of logs. Valid values are `TRAFFIC`, `THREAT`, or `DECRYPTION`.
*/
logType?: pulumi.Input<string>;
}
export interface NgfwStatus {
/**
* The firewall attachments.
*/
attachments?: pulumi.Input<pulumi.Input<inputs.NgfwStatusAttachment>[]>;
/**
* The firewall failure reason.
*/
failureReason?: pulumi.Input<string>;
/**
* The firewall status.
*/
firewallStatus?: pulumi.Input<string>;
/**
* The rulestack status.
*/
rulestackStatus?: pulumi.Input<string>;
}
export interface NgfwStatusAttachment {
/**
* The endpoint id.
*/
endpointId?: pulumi.Input<string>;
/**
* The reject reason.
*/
rejectedReason?: pulumi.Input<string>;
/**
* The attachment status.
*/
status?: pulumi.Input<string>;
/**
* The subnet id.
*/
subnetId?: pulumi.Input<string>;
}
export interface NgfwSubnetMapping {
/**
* The availability zone, for when the endpoint mode is customer managed.
*/
availabilityZone?: pulumi.Input<string>;
/**
* The availability zone ID, for when the endpoint mode is customer managed.
*/
availabilityZoneId?: pulumi.Input<string>;
/**
* The subnet id, for when the endpoint mode is service managed.
*/
subnetId?: pulumi.Input<string>;
}
export interface RulestackProfileConfig {
/**
* Anti-spyware profile setting. Defaults to `BestPractice`.
*/
antiSpyware?: pulumi.Input<string>;
/**
* Anti-virus profile setting. Defaults to `BestPractice`.
*/
antiVirus?: pulumi.Input<string>;
/**
* File blocking profile setting. Defaults to `BestPractice`.
*/
fileBlocking?: pulumi.Input<string>;
/**
* Outbound trust certificate.
*/
outboundTrustCertificate?: pulumi.Input<string>;
/**
* Outbound untrust certificate.
*/
outboundUntrustCertificate?: pulumi.Input<string>;
/**
* URL filtering profile setting. Defaults to `None`.
*/
urlFiltering?: pulumi.Input<string>;
/**
* Vulnerability profile setting. Defaults to `BestPractice`.
*/
vulnerability?: pulumi.Input<string>;
}
export interface SecurityRuleCategory {
/**
* List of feeds.
*/
feeds?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of URL category names.
*/
urlCategoryNames?: pulumi.Input<pulumi.Input<string>[]>;
}
export interface SecurityRuleDestination {
/**
* List of CIDRs.
*/
cidrs?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of countries.
*/
countries?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of feeds.
*/
feeds?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of FQDN lists.
*/
fqdnLists?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of prefix list.
*/
prefixLists?: pulumi.Input<pulumi.Input<string>[]>;
}
export interface SecurityRuleSource {
/**
* List of CIDRs.
*/
cidrs?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of countries.
*/
countries?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of feeds.
*/
feeds?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of prefix list.
*/
prefixLists?: pulumi.Input<pulumi.Input<string>[]>;
}