UNPKG

@pulumi/cloudngfwaws

Version:

A Pulumi package for creating and managing Cloud NGFW for AWS resources.

175 lines (174 loc) 4.39 kB
import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; export interface GetAccountsAccountDetail { /** * The account id. */ accountId?: string; /** * External Id of the onboarded account */ externalId?: string; /** * Onboarding status of the account. */ onboardingStatus?: string; } export interface GetAccountsAccountDetailArgs { /** * The account id. */ accountId?: pulumi.Input<string>; /** * External Id of the onboarded account */ externalId?: pulumi.Input<string>; /** * Onboarding status of the account. */ onboardingStatus?: pulumi.Input<string>; } export interface NgfwLogProfileLogDestination { /** * The log destination details. */ destination?: pulumi.Input<string>; /** * The log destination type. Valid values are `S3`, `CloudWatchLogs`, or `KinesisDataFirehose`. */ destinationType?: pulumi.Input<string>; /** * The type of logs. Valid values are `TRAFFIC`, `THREAT`, or `DECRYPTION`. */ logType?: pulumi.Input<string>; } export interface NgfwStatus { /** * The firewall attachments. */ attachments?: pulumi.Input<pulumi.Input<inputs.NgfwStatusAttachment>[]>; /** * The firewall failure reason. */ failureReason?: pulumi.Input<string>; /** * The firewall status. */ firewallStatus?: pulumi.Input<string>; /** * The rulestack status. */ rulestackStatus?: pulumi.Input<string>; } export interface NgfwStatusAttachment { /** * The endpoint id. */ endpointId?: pulumi.Input<string>; /** * The reject reason. */ rejectedReason?: pulumi.Input<string>; /** * The attachment status. */ status?: pulumi.Input<string>; /** * The subnet id. */ subnetId?: pulumi.Input<string>; } export interface NgfwSubnetMapping { /** * The availability zone, for when the endpoint mode is customer managed. */ availabilityZone?: pulumi.Input<string>; /** * The availability zone ID, for when the endpoint mode is customer managed. */ availabilityZoneId?: pulumi.Input<string>; /** * The subnet id, for when the endpoint mode is service managed. */ subnetId?: pulumi.Input<string>; } export interface RulestackProfileConfig { /** * Anti-spyware profile setting. Defaults to `BestPractice`. */ antiSpyware?: pulumi.Input<string>; /** * Anti-virus profile setting. Defaults to `BestPractice`. */ antiVirus?: pulumi.Input<string>; /** * File blocking profile setting. Defaults to `BestPractice`. */ fileBlocking?: pulumi.Input<string>; /** * Outbound trust certificate. */ outboundTrustCertificate?: pulumi.Input<string>; /** * Outbound untrust certificate. */ outboundUntrustCertificate?: pulumi.Input<string>; /** * URL filtering profile setting. Defaults to `None`. */ urlFiltering?: pulumi.Input<string>; /** * Vulnerability profile setting. Defaults to `BestPractice`. */ vulnerability?: pulumi.Input<string>; } export interface SecurityRuleCategory { /** * List of feeds. */ feeds?: pulumi.Input<pulumi.Input<string>[]>; /** * List of URL category names. */ urlCategoryNames?: pulumi.Input<pulumi.Input<string>[]>; } export interface SecurityRuleDestination { /** * List of CIDRs. */ cidrs?: pulumi.Input<pulumi.Input<string>[]>; /** * List of countries. */ countries?: pulumi.Input<pulumi.Input<string>[]>; /** * List of feeds. */ feeds?: pulumi.Input<pulumi.Input<string>[]>; /** * List of FQDN lists. */ fqdnLists?: pulumi.Input<pulumi.Input<string>[]>; /** * List of prefix list. */ prefixLists?: pulumi.Input<pulumi.Input<string>[]>; } export interface SecurityRuleSource { /** * List of CIDRs. */ cidrs?: pulumi.Input<pulumi.Input<string>[]>; /** * List of countries. */ countries?: pulumi.Input<pulumi.Input<string>[]>; /** * List of feeds. */ feeds?: pulumi.Input<pulumi.Input<string>[]>; /** * List of prefix list. */ prefixLists?: pulumi.Input<pulumi.Input<string>[]>; }