UNPKG

@pulumi/scm

Version:

A Pulumi package for managing resources on Strata Cloud Manager.. Based on terraform-provider-scm: version v0.2.1

1,351 lines 157 kB
import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; export interface AddressGroupDynamicValue { /** * Tag based filter defining group membership e.g. `tag1 AND tag2 OR tag3`. String length must not exceed 2047 characters. */ filter: pulumi.Input<string>; } export interface AntiSpywareProfileMicaEngineSpywareEnabledList { /** * The InlinePolicyAction param. String must be one of these: `"alert"`, `"allow"`, `"drop"`, `"reset-both"`, `"reset-client"`, `"reset-server"`. Default: `"alert"`. */ inlinePolicyAction?: pulumi.Input<string>; /** * The Name param. */ name?: pulumi.Input<string>; } export interface AntiSpywareProfileRule { /** * The Action param. */ action?: pulumi.Input<inputs.AntiSpywareProfileRuleAction>; /** * The Category param. String must be one of these: `"dns-proxy"`, `"backdoor"`, `"data-theft"`, `"autogen"`, `"spyware"`, `"dns-security"`, `"downloader"`, `"dns-phishing"`, `"phishing-kit"`, `"cryptominer"`, `"hacktool"`, `"dns-benign"`, `"dns-wildfire"`, `"botnet"`, `"dns-grayware"`, `"inline-cloud-c2"`, `"keylogger"`, `"p2p-communication"`, `"domain-edl"`, `"webshell"`, `"command-and-control"`, `"dns-ddns"`, `"net-worm"`, `"any"`, `"tls-fingerprint"`, `"dns-new-domain"`, `"dns"`, `"fraud"`, `"dns-c2"`, `"adware"`, `"post-exploitation"`, `"dns-malware"`, `"browser-hijack"`, `"dns-parked"`. */ category?: pulumi.Input<string>; /** * The Name param. */ name?: pulumi.Input<string>; /** * The PacketCapture param. String must be one of these: `"disable"`, `"single-packet"`, `"extended-capture"`. */ packetCapture?: pulumi.Input<string>; /** * The Severities param. */ severities?: pulumi.Input<pulumi.Input<string>[]>; /** * The ThreatName param. String length must exceed 4 characters. */ threatName?: pulumi.Input<string>; } export interface AntiSpywareProfileRuleAction { /** * The Alert param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ alert?: pulumi.Input<boolean>; /** * The Allow param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ allow?: pulumi.Input<boolean>; /** * The BlockIp param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ blockIp?: pulumi.Input<inputs.AntiSpywareProfileRuleActionBlockIp>; /** * The Drop param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ drop?: pulumi.Input<boolean>; /** * The ResetBoth param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ resetBoth?: pulumi.Input<boolean>; /** * The ResetClient param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ resetClient?: pulumi.Input<boolean>; /** * The ResetServer param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ resetServer?: pulumi.Input<boolean>; } export interface AntiSpywareProfileRuleActionBlockIp { /** * The Duration param. Value must be between 1 and 3600. */ duration?: pulumi.Input<number>; /** * The TrackBy param. String must be one of these: `"source-and-destination"`, `"source"`. */ trackBy?: pulumi.Input<string>; } export interface AntiSpywareProfileThreatException { /** * The Action param. */ action?: pulumi.Input<inputs.AntiSpywareProfileThreatExceptionAction>; /** * The ExemptIps param. */ exemptIps?: pulumi.Input<pulumi.Input<inputs.AntiSpywareProfileThreatExceptionExemptIp>[]>; /** * The Name param. */ name?: pulumi.Input<string>; /** * The Notes param. */ notes?: pulumi.Input<string>; /** * The PacketCapture param. String must be one of these: `"disable"`, `"single-packet"`, `"extended-capture"`. */ packetCapture?: pulumi.Input<string>; } export interface AntiSpywareProfileThreatExceptionAction { /** * The Alert param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `default`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ alert?: pulumi.Input<boolean>; /** * The Allow param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `default`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ allow?: pulumi.Input<boolean>; /** * The BlockIp param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `default`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ blockIp?: pulumi.Input<inputs.AntiSpywareProfileThreatExceptionActionBlockIp>; /** * The Default param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `default`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ default?: pulumi.Input<boolean>; /** * The Drop param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `default`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ drop?: pulumi.Input<boolean>; /** * The ResetBoth param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `default`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ resetBoth?: pulumi.Input<boolean>; /** * The ResetClient param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `default`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ resetClient?: pulumi.Input<boolean>; /** * The ResetServer param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `default`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ resetServer?: pulumi.Input<boolean>; } export interface AntiSpywareProfileThreatExceptionActionBlockIp { /** * The Duration param. Value must be between 1 and 3600. */ duration?: pulumi.Input<number>; /** * The TrackBy param. String must be one of these: `"source-and-destination"`, `"source"`. */ trackBy?: pulumi.Input<string>; } export interface AntiSpywareProfileThreatExceptionExemptIp { /** * The Name param. */ name: pulumi.Input<string>; } export interface AntiSpywareSignatureDefaultAction { /** * The Alert param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ alert?: pulumi.Input<boolean>; /** * The Allow param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ allow?: pulumi.Input<boolean>; /** * The BlockIp param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ blockIp?: pulumi.Input<inputs.AntiSpywareSignatureDefaultActionBlockIp>; /** * The Drop param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ drop?: pulumi.Input<boolean>; /** * The ResetBoth param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ resetBoth?: pulumi.Input<boolean>; /** * The ResetClient param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ resetClient?: pulumi.Input<boolean>; /** * The ResetServer param. Ensure that only one of the following is specified: `alert`, `allow`, `blockIp`, `drop`, `resetBoth`, `resetClient`, `resetServer` */ resetServer?: pulumi.Input<boolean>; } export interface AntiSpywareSignatureDefaultActionBlockIp { /** * The Duration param. Value must be between 1 and 3600. */ duration?: pulumi.Input<number>; /** * The TrackBy param. String must be one of these: `"source-and-destination"`, `"source"`. */ trackBy?: pulumi.Input<string>; } export interface AntiSpywareSignatureSignature { /** * The Combination param. Ensure that only one of the following is specified: `combination`, `standard` */ combination?: pulumi.Input<inputs.AntiSpywareSignatureSignatureCombination>; /** * The Standards param. Ensure that only one of the following is specified: `combination`, `standard` */ standards?: pulumi.Input<pulumi.Input<inputs.AntiSpywareSignatureSignatureStandard>[]>; } export interface AntiSpywareSignatureSignatureCombination { /** * The AndConditions param. */ andConditions?: pulumi.Input<pulumi.Input<inputs.AntiSpywareSignatureSignatureCombinationAndCondition>[]>; /** * The OrderFree param. Default: `false`. */ orderFree?: pulumi.Input<boolean>; /** * The TimeAttribute param. */ timeAttribute?: pulumi.Input<inputs.AntiSpywareSignatureSignatureCombinationTimeAttribute>; } export interface AntiSpywareSignatureSignatureCombinationAndCondition { /** * The Name param. */ name?: pulumi.Input<string>; /** * The OrConditions param. */ orConditions?: pulumi.Input<pulumi.Input<inputs.AntiSpywareSignatureSignatureCombinationAndConditionOrCondition>[]>; } export interface AntiSpywareSignatureSignatureCombinationAndConditionOrCondition { /** * The Name param. */ name?: pulumi.Input<string>; /** * The ThreatId param. */ threatId?: pulumi.Input<string>; } export interface AntiSpywareSignatureSignatureCombinationTimeAttribute { /** * The Interval param. Value must be between 1 and 3600. */ interval?: pulumi.Input<number>; /** * The Threshold param. Value must be between 1 and 255. */ threshold?: pulumi.Input<number>; /** * The TrackBy param. String must be one of these: `"source-and-destination"`, `"source"`, `"destination"`. */ trackBy?: pulumi.Input<string>; } export interface AntiSpywareSignatureSignatureStandard { /** * The AndConditions param. */ andConditions?: pulumi.Input<pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndCondition>[]>; /** * The Comment param. String length must not exceed 256 characters. */ comment?: pulumi.Input<string>; /** * The Name param. */ name: pulumi.Input<string>; /** * The OrderFree param. Default: `false`. */ orderFree?: pulumi.Input<boolean>; /** * The Scope param. String must be one of these: `"protocol-data-unit"`, `"session"`. */ scope?: pulumi.Input<string>; } export interface AntiSpywareSignatureSignatureStandardAndCondition { /** * The Name param. */ name?: pulumi.Input<string>; /** * The OrConditions param. */ orConditions?: pulumi.Input<pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrCondition>[]>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrCondition { /** * The Name param. */ name?: pulumi.Input<string>; /** * The Operator param. */ operator?: pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperator>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperator { /** * The EqualTo param. */ equalTo?: pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorEqualTo>; /** * The GreaterThan param. */ greaterThan?: pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorGreaterThan>; /** * The LessThan param. */ lessThan?: pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorLessThan>; /** * The PatternMatch param. */ patternMatch?: pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorPatternMatch>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorEqualTo { /** * The Context param. */ context?: pulumi.Input<string>; /** * The Negate param. Default: `false`. */ negate?: pulumi.Input<boolean>; /** * The Qualifiers param. */ qualifiers?: pulumi.Input<pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorEqualToQualifier>[]>; /** * The Value param. Value must be between 0 and 4294967295. */ value?: pulumi.Input<number>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorEqualToQualifier { /** * The Name param. */ name?: pulumi.Input<string>; /** * The Value param. */ value?: pulumi.Input<string>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorGreaterThan { /** * The Context param. */ context?: pulumi.Input<string>; /** * The Qualifiers param. */ qualifiers?: pulumi.Input<pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorGreaterThanQualifier>[]>; /** * The Value param. Value must be between 0 and 4294967295. */ value?: pulumi.Input<number>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorGreaterThanQualifier { /** * The Name param. */ name?: pulumi.Input<string>; /** * The Value param. */ value?: pulumi.Input<string>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorLessThan { /** * The Context param. */ context?: pulumi.Input<string>; /** * The Qualifiers param. */ qualifiers?: pulumi.Input<pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorLessThanQualifier>[]>; /** * The Value param. Value must be between 0 and 4294967295. */ value?: pulumi.Input<number>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorLessThanQualifier { /** * The Name param. */ name?: pulumi.Input<string>; /** * The Value param. */ value?: pulumi.Input<string>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorPatternMatch { /** * The Context param. */ context?: pulumi.Input<string>; /** * The Negate param. Default: `false`. */ negate?: pulumi.Input<boolean>; /** * The Pattern param. */ pattern?: pulumi.Input<string>; /** * The Qualifiers param. */ qualifiers?: pulumi.Input<pulumi.Input<inputs.AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorPatternMatchQualifier>[]>; } export interface AntiSpywareSignatureSignatureStandardAndConditionOrConditionOperatorPatternMatchQualifier { /** * The Name param. */ name?: pulumi.Input<string>; /** * The Value param. */ value?: pulumi.Input<string>; } export interface ApplicationDefault { /** * The IdentByIcmp6Type param. Ensure that only one of the following is specified: `identByIcmp6Type`, `identByIcmpType`, `identByIpProtocol`, `port` */ identByIcmp6Type?: pulumi.Input<inputs.ApplicationDefaultIdentByIcmp6Type>; /** * The IdentByIcmpType param. Ensure that only one of the following is specified: `identByIcmp6Type`, `identByIcmpType`, `identByIpProtocol`, `port` */ identByIcmpType?: pulumi.Input<inputs.ApplicationDefaultIdentByIcmpType>; /** * The IdentByIpProtocol param. Ensure that only one of the following is specified: `identByIcmp6Type`, `identByIcmpType`, `identByIpProtocol`, `port` */ identByIpProtocol?: pulumi.Input<string>; /** * The Ports param. Individual elements in this list are subject to additional validation. String length must not exceed 63 characters. Ensure that only one of the following is specified: `identByIcmp6Type`, `identByIcmpType`, `identByIpProtocol`, `port` */ ports?: pulumi.Input<pulumi.Input<string>[]>; } export interface ApplicationDefaultIdentByIcmp6Type { /** * The Code param. */ code?: pulumi.Input<string>; /** * The Type param. */ type: pulumi.Input<string>; } export interface ApplicationDefaultIdentByIcmpType { /** * The Code param. */ code?: pulumi.Input<string>; /** * The Type param. */ type: pulumi.Input<string>; } export interface ApplicationFilterTagging { /** * The NoTag param. Ensure that only one of the following is specified: `noTag`, `tag` */ noTag?: pulumi.Input<boolean>; /** * The Tags param. Individual elements in this list are subject to additional validation. String length must not exceed 127 characters. Ensure that only one of the following is specified: `noTag`, `tag` */ tags?: pulumi.Input<pulumi.Input<string>[]>; } export interface ApplicationSignature { /** * The AndConditions param. */ andConditions?: pulumi.Input<pulumi.Input<inputs.ApplicationSignatureAndCondition>[]>; /** * The Comment param. String length must not exceed 256 characters. */ comment?: pulumi.Input<string>; /** * Alphanumeric string [ 0-9a-zA-Z._-]. String length must not exceed 31 characters. */ name: pulumi.Input<string>; /** * The OrderFree param. Default: `false`. */ orderFree?: pulumi.Input<boolean>; /** * The Scope param. String must be one of these: `"protocol-data-unit"`, `"session"`. Default: `"protocol-data-unit"`. */ scope?: pulumi.Input<string>; } export interface ApplicationSignatureAndCondition { /** * Alphanumeric string [ 0-9a-zA-Z._-]. String length must not exceed 31 characters. */ name: pulumi.Input<string>; /** * The OrConditions param. */ orConditions?: pulumi.Input<pulumi.Input<inputs.ApplicationSignatureAndConditionOrCondition>[]>; } export interface ApplicationSignatureAndConditionOrCondition { /** * Alphanumeric string [ 0-9a-zA-Z._-]. String length must not exceed 31 characters. */ name: pulumi.Input<string>; /** * The Operator param. */ operator: pulumi.Input<inputs.ApplicationSignatureAndConditionOrConditionOperator>; } export interface ApplicationSignatureAndConditionOrConditionOperator { /** * The EqualTo param. Ensure that only one of the following is specified: `equalTo`, `greaterThan`, `lessThan`, `patternMatch` */ equalTo?: pulumi.Input<inputs.ApplicationSignatureAndConditionOrConditionOperatorEqualTo>; /** * The GreaterThan param. Ensure that only one of the following is specified: `equalTo`, `greaterThan`, `lessThan`, `patternMatch` */ greaterThan?: pulumi.Input<inputs.ApplicationSignatureAndConditionOrConditionOperatorGreaterThan>; /** * The LessThan param. Ensure that only one of the following is specified: `equalTo`, `greaterThan`, `lessThan`, `patternMatch` */ lessThan?: pulumi.Input<inputs.ApplicationSignatureAndConditionOrConditionOperatorLessThan>; /** * The PatternMatch param. Ensure that only one of the following is specified: `equalTo`, `greaterThan`, `lessThan`, `patternMatch` */ patternMatch?: pulumi.Input<inputs.ApplicationSignatureAndConditionOrConditionOperatorPatternMatch>; } export interface ApplicationSignatureAndConditionOrConditionOperatorEqualTo { /** * The Context param. */ context: pulumi.Input<string>; /** * 4-byte hex value. String length must not exceed 10 characters. String validation regex: `^[0][xX][0-9A-Fa-f]{8}$`. */ mask?: pulumi.Input<string>; /** * The Position param. String length must not exceed 127 characters. */ position?: pulumi.Input<string>; /** * The Value param. String length must not exceed 10 characters. */ value: pulumi.Input<string>; } export interface ApplicationSignatureAndConditionOrConditionOperatorGreaterThan { /** * The Context param. String length must not exceed 127 characters. */ context: pulumi.Input<string>; /** * The Qualifiers param. */ qualifiers?: pulumi.Input<pulumi.Input<inputs.ApplicationSignatureAndConditionOrConditionOperatorGreaterThanQualifier>[]>; /** * The Value param. Value must be between 0 and 4294967295. */ value: pulumi.Input<number>; } export interface ApplicationSignatureAndConditionOrConditionOperatorGreaterThanQualifier { /** * Alphanumeric string [ 0-9a-zA-Z._-]. String length must not exceed 31 characters. */ name: pulumi.Input<string>; /** * The Value param. */ value: pulumi.Input<string>; } export interface ApplicationSignatureAndConditionOrConditionOperatorLessThan { /** * The Context param. String length must not exceed 127 characters. */ context: pulumi.Input<string>; /** * The Qualifiers param. */ qualifiers?: pulumi.Input<pulumi.Input<inputs.ApplicationSignatureAndConditionOrConditionOperatorLessThanQualifier>[]>; /** * The Value param. Value must be between 0 and 4294967295. */ value: pulumi.Input<number>; } export interface ApplicationSignatureAndConditionOrConditionOperatorLessThanQualifier { /** * Alphanumeric string [ 0-9a-zA-Z._-]. String length must not exceed 31 characters. */ name: pulumi.Input<string>; /** * The Value param. */ value: pulumi.Input<string>; } export interface ApplicationSignatureAndConditionOrConditionOperatorPatternMatch { /** * The Context param. String length must not exceed 127 characters. */ context: pulumi.Input<string>; /** * The Pattern param. String length must not exceed 127 characters. */ pattern: pulumi.Input<string>; /** * The Qualifiers param. */ qualifiers?: pulumi.Input<pulumi.Input<inputs.ApplicationSignatureAndConditionOrConditionOperatorPatternMatchQualifier>[]>; } export interface ApplicationSignatureAndConditionOrConditionOperatorPatternMatchQualifier { /** * Alphanumeric string [ 0-9a-zA-Z._-]. String length must not exceed 31 characters. */ name: pulumi.Input<string>; /** * The Value param. */ value: pulumi.Input<string>; } export interface AuthenticationProfileLockout { /** * The FailedAttempts param. Value must be between 0 and 10. */ failedAttempts?: pulumi.Input<number>; /** * The LockoutTime param. Value must be between 0 and 60. */ lockoutTime?: pulumi.Input<number>; } export interface AuthenticationProfileMethod { /** * The Cloud param. Ensure that only one of the following is specified: `cloud`, `kerberos`, `ldap`, `localDatabase`, `radius`, `samlIdp`, `tacplus` */ cloud?: pulumi.Input<inputs.AuthenticationProfileMethodCloud>; /** * The Kerberos param. Ensure that only one of the following is specified: `cloud`, `kerberos`, `ldap`, `localDatabase`, `radius`, `samlIdp`, `tacplus` */ kerberos?: pulumi.Input<inputs.AuthenticationProfileMethodKerberos>; /** * The Ldap param. Ensure that only one of the following is specified: `cloud`, `kerberos`, `ldap`, `localDatabase`, `radius`, `samlIdp`, `tacplus` */ ldap?: pulumi.Input<inputs.AuthenticationProfileMethodLdap>; /** * The LocalDatabase param. Ensure that only one of the following is specified: `cloud`, `kerberos`, `ldap`, `localDatabase`, `radius`, `samlIdp`, `tacplus` */ localDatabase?: pulumi.Input<boolean>; /** * The Radius param. Ensure that only one of the following is specified: `cloud`, `kerberos`, `ldap`, `localDatabase`, `radius`, `samlIdp`, `tacplus` */ radius?: pulumi.Input<inputs.AuthenticationProfileMethodRadius>; /** * The SamlIdp param. Ensure that only one of the following is specified: `cloud`, `kerberos`, `ldap`, `localDatabase`, `radius`, `samlIdp`, `tacplus` */ samlIdp?: pulumi.Input<inputs.AuthenticationProfileMethodSamlIdp>; /** * The Tacplus param. Ensure that only one of the following is specified: `cloud`, `kerberos`, `ldap`, `localDatabase`, `radius`, `samlIdp`, `tacplus` */ tacplus?: pulumi.Input<inputs.AuthenticationProfileMethodTacplus>; } export interface AuthenticationProfileMethodCloud { /** * The tenant profile name. */ profileName?: pulumi.Input<string>; } export interface AuthenticationProfileMethodKerberos { /** * The Realm param. */ realm?: pulumi.Input<string>; /** * The ServerProfile param. */ serverProfile?: pulumi.Input<string>; } export interface AuthenticationProfileMethodLdap { /** * The LoginAttribute param. */ loginAttribute?: pulumi.Input<string>; /** * The PasswdExpDays param. */ passwdExpDays?: pulumi.Input<number>; /** * The ServerProfile param. */ serverProfile?: pulumi.Input<string>; } export interface AuthenticationProfileMethodRadius { /** * The Checkgroup param. */ checkgroup?: pulumi.Input<boolean>; /** * The ServerProfile param. */ serverProfile?: pulumi.Input<string>; } export interface AuthenticationProfileMethodSamlIdp { /** * The AttributeNameUsergroup param. String length must be between 1 and 63 characters. */ attributeNameUsergroup?: pulumi.Input<string>; /** * The AttributeNameUsername param. String length must be between 1 and 63 characters. */ attributeNameUsername?: pulumi.Input<string>; /** * The CertificateProfile param. String length must not exceed 31 characters. */ certificateProfile?: pulumi.Input<string>; /** * The EnableSingleLogout param. */ enableSingleLogout?: pulumi.Input<boolean>; /** * The RequestSigningCertificate param. String length must not exceed 64 characters. */ requestSigningCertificate?: pulumi.Input<string>; /** * The ServerProfile param. String length must not exceed 63 characters. */ serverProfile?: pulumi.Input<string>; } export interface AuthenticationProfileMethodTacplus { /** * The Checkgroup param. */ checkgroup?: pulumi.Input<boolean>; /** * The ServerProfile param. */ serverProfile?: pulumi.Input<string>; } export interface AuthenticationProfileMultiFactorAuth { /** * The Factors param. */ factors?: pulumi.Input<pulumi.Input<string>[]>; /** * The MfaEnable param. */ mfaEnable?: pulumi.Input<boolean>; } export interface AuthenticationProfileSingleSignOn { /** * The KerberosKeytab param. String length must not exceed 8192 characters. */ kerberosKeytab?: pulumi.Input<string>; /** * The Realm param. String length must not exceed 127 characters. */ realm?: pulumi.Input<string>; } export interface CertificateProfileCaCertificate { /** * The DefaultOcspUrl param. */ defaultOcspUrl?: pulumi.Input<string>; /** * The Name param. */ name?: pulumi.Input<string>; /** * The OcspVerifyCert param. */ ocspVerifyCert?: pulumi.Input<string>; /** * The TemplateName param. */ templateName?: pulumi.Input<string>; } export interface CertificateProfileUsernameField { /** * The Subject param. String must be one of these: `"common-name"`. */ subject?: pulumi.Input<string>; /** * The SubjectAlt param. String must be one of these: `"email"`. */ subjectAlt?: pulumi.Input<string>; } export interface DecryptionProfileSslForwardProxy { /** * The AutoIncludeAltname param. Default: `false`. */ autoIncludeAltname?: pulumi.Input<boolean>; /** * The BlockClientCert param. Default: `false`. */ blockClientCert?: pulumi.Input<boolean>; /** * The BlockExpiredCertificate param. Default: `false`. */ blockExpiredCertificate?: pulumi.Input<boolean>; /** * The BlockTimeoutCert param. Default: `false`. */ blockTimeoutCert?: pulumi.Input<boolean>; /** * The BlockTls13DowngradeNoResource param. Default: `false`. */ blockTls13DowngradeNoResource?: pulumi.Input<boolean>; /** * The BlockUnknownCert param. Default: `false`. */ blockUnknownCert?: pulumi.Input<boolean>; /** * The BlockUnsupportedCipher param. Default: `false`. */ blockUnsupportedCipher?: pulumi.Input<boolean>; /** * The BlockUnsupportedVersion param. Default: `false`. */ blockUnsupportedVersion?: pulumi.Input<boolean>; /** * The BlockUntrustedIssuer param. Default: `false`. */ blockUntrustedIssuer?: pulumi.Input<boolean>; /** * The RestrictCertExts param. Default: `false`. */ restrictCertExts?: pulumi.Input<boolean>; /** * The StripAlpn param. Default: `false`. */ stripAlpn?: pulumi.Input<boolean>; } export interface DecryptionProfileSslInboundProxy { /** * The BlockIfHsmUnavailable param. Default: `false`. */ blockIfHsmUnavailable?: pulumi.Input<boolean>; /** * The BlockIfNoResource param. Default: `false`. */ blockIfNoResource?: pulumi.Input<boolean>; /** * The BlockUnsupportedCipher param. Default: `false`. */ blockUnsupportedCipher?: pulumi.Input<boolean>; /** * The BlockUnsupportedVersion param. Default: `false`. */ blockUnsupportedVersion?: pulumi.Input<boolean>; } export interface DecryptionProfileSslNoProxy { /** * The BlockExpiredCertificate param. Default: `false`. */ blockExpiredCertificate?: pulumi.Input<boolean>; /** * The BlockUntrustedIssuer param. Default: `false`. */ blockUntrustedIssuer?: pulumi.Input<boolean>; } export interface DecryptionProfileSslProtocolSettings { /** * The AuthAlgoMd5 param. Default: `true`. */ authAlgoMd5?: pulumi.Input<boolean>; /** * The AuthAlgoSha1 param. Default: `true`. */ authAlgoSha1?: pulumi.Input<boolean>; /** * The AuthAlgoSha256 param. Default: `true`. */ authAlgoSha256?: pulumi.Input<boolean>; /** * The AuthAlgoSha384 param. Default: `true`. */ authAlgoSha384?: pulumi.Input<boolean>; /** * The EncAlgo3des param. Default: `true`. */ encAlgo3des?: pulumi.Input<boolean>; /** * The EncAlgoAes128Cbc param. Default: `true`. */ encAlgoAes128Cbc?: pulumi.Input<boolean>; /** * The EncAlgoAes128Gcm param. Default: `true`. */ encAlgoAes128Gcm?: pulumi.Input<boolean>; /** * The EncAlgoAes256Cbc param. Default: `true`. */ encAlgoAes256Cbc?: pulumi.Input<boolean>; /** * The EncAlgoAes256Gcm param. Default: `true`. */ encAlgoAes256Gcm?: pulumi.Input<boolean>; /** * The EncAlgoChacha20Poly1305 param. Default: `true`. */ encAlgoChacha20Poly1305?: pulumi.Input<boolean>; /** * The EncAlgoRc4 param. Default: `true`. */ encAlgoRc4?: pulumi.Input<boolean>; /** * The KeyxchgAlgoDhe param. Default: `true`. */ keyxchgAlgoDhe?: pulumi.Input<boolean>; /** * The KeyxchgAlgoEcdhe param. Default: `true`. */ keyxchgAlgoEcdhe?: pulumi.Input<boolean>; /** * The KeyxchgAlgoRsa param. Default: `true`. */ keyxchgAlgoRsa?: pulumi.Input<boolean>; /** * The MaxVersion param. String must be one of these: `"sslv3"`, `"tls1-0"`, `"tls1-1"`, `"tls1-2"`, `"tls1-3"`, `"max"`. Default: `"tls1-2"`. */ maxVersion?: pulumi.Input<string>; /** * The MinVersion param. String must be one of these: `"sslv3"`, `"tls1-0"`, `"tls1-1"`, `"tls1-2"`, `"tls1-3"`. Default: `"tls1-0"`. */ minVersion?: pulumi.Input<string>; } export interface DecryptionRuleType { /** * The SslForwardProxy param. Ensure that only one of the following is specified: `sslForwardProxy`, `sslInboundInspection` */ sslForwardProxy?: pulumi.Input<boolean>; /** * add the certificate name for SSL inbound inspection. Ensure that only one of the following is specified: `sslForwardProxy`, `sslInboundInspection` */ sslInboundInspection?: pulumi.Input<string>; } export interface DnsSecurityProfileBotnetDomains { /** * The DnsSecurityCategories param. */ dnsSecurityCategories?: pulumi.Input<pulumi.Input<inputs.DnsSecurityProfileBotnetDomainsDnsSecurityCategory>[]>; /** * The Lists param. */ lists?: pulumi.Input<pulumi.Input<inputs.DnsSecurityProfileBotnetDomainsList>[]>; /** * The Sinkhole param. */ sinkhole?: pulumi.Input<inputs.DnsSecurityProfileBotnetDomainsSinkhole>; /** * The Whitelists param. */ whitelists?: pulumi.Input<pulumi.Input<inputs.DnsSecurityProfileBotnetDomainsWhitelist>[]>; } export interface DnsSecurityProfileBotnetDomainsDnsSecurityCategory { /** * The Action param. String must be one of these: `"default"`, `"allow"`, `"block"`, `"sinkhole"`. Default: `"default"`. */ action?: pulumi.Input<string>; /** * The LogLevel param. String must be one of these: `"default"`, `"none"`, `"low"`, `"informational"`, `"medium"`, `"high"`, `"critical"`. Default: `"default"`. */ logLevel?: pulumi.Input<string>; /** * The Name param. */ name?: pulumi.Input<string>; /** * The PacketCapture param. String must be one of these: `"disable"`, `"single-packet"`, `"extended-capture"`. */ packetCapture?: pulumi.Input<string>; } export interface DnsSecurityProfileBotnetDomainsList { /** * The Action param. */ action?: pulumi.Input<inputs.DnsSecurityProfileBotnetDomainsListAction>; /** * The Name param. */ name: pulumi.Input<string>; /** * The PacketCapture param. String must be one of these: `"disable"`, `"single-packet"`, `"extended-capture"`. */ packetCapture?: pulumi.Input<string>; } export interface DnsSecurityProfileBotnetDomainsListAction { /** * The Alert param. Ensure that only one of the following is specified: `alert`, `allow`, `block`, `sinkhole` */ alert?: pulumi.Input<boolean>; /** * The Allow param. Ensure that only one of the following is specified: `alert`, `allow`, `block`, `sinkhole` */ allow?: pulumi.Input<boolean>; /** * The Block param. Ensure that only one of the following is specified: `alert`, `allow`, `block`, `sinkhole` */ block?: pulumi.Input<boolean>; /** * The Sinkhole param. Ensure that only one of the following is specified: `alert`, `allow`, `block`, `sinkhole` */ sinkhole?: pulumi.Input<boolean>; } export interface DnsSecurityProfileBotnetDomainsSinkhole { /** * The Ipv4Address param. String must be one of these: `"127.0.0.1"`, `"pan-sinkhole-default-ip"`. */ ipv4Address?: pulumi.Input<string>; /** * The Ipv6Address param. String must be one of these: `"::1"`. */ ipv6Address?: pulumi.Input<string>; } export interface DnsSecurityProfileBotnetDomainsWhitelist { /** * The Description param. */ description?: pulumi.Input<string>; /** * The Name param. */ name: pulumi.Input<string>; } export interface ExternalDynamicListType { /** * The Domain param. Ensure that only one of the following is specified: `domain`, `imei`, `imsi`, `ip`, `predefinedIp`, `predefinedUrl`, `url` */ domain?: pulumi.Input<inputs.ExternalDynamicListTypeDomain>; /** * The Imei param. Ensure that only one of the following is specified: `domain`, `imei`, `imsi`, `ip`, `predefinedIp`, `predefinedUrl`, `url` */ imei?: pulumi.Input<inputs.ExternalDynamicListTypeImei>; /** * The Imsi param. Ensure that only one of the following is specified: `domain`, `imei`, `imsi`, `ip`, `predefinedIp`, `predefinedUrl`, `url` */ imsi?: pulumi.Input<inputs.ExternalDynamicListTypeImsi>; /** * The Ip param. Ensure that only one of the following is specified: `domain`, `imei`, `imsi`, `ip`, `predefinedIp`, `predefinedUrl`, `url` */ ip?: pulumi.Input<inputs.ExternalDynamicListTypeIp>; /** * The PredefinedIp param. Ensure that only one of the following is specified: `domain`, `imei`, `imsi`, `ip`, `predefinedIp`, `predefinedUrl`, `url` */ predefinedIp?: pulumi.Input<inputs.ExternalDynamicListTypePredefinedIp>; /** * The PredefinedUrl param. Ensure that only one of the following is specified: `domain`, `imei`, `imsi`, `ip`, `predefinedIp`, `predefinedUrl`, `url` */ predefinedUrl?: pulumi.Input<inputs.ExternalDynamicListTypePredefinedUrl>; /** * The Url param. Ensure that only one of the following is specified: `domain`, `imei`, `imsi`, `ip`, `predefinedIp`, `predefinedUrl`, `url` */ url?: pulumi.Input<inputs.ExternalDynamicListTypeUrl>; } export interface ExternalDynamicListTypeDomain { /** * Profile for authenticating client certificates. Default: `"None"`. */ certificateProfile?: pulumi.Input<string>; /** * The Description param. String length must not exceed 255 characters. */ description?: pulumi.Input<string>; /** * The DomainAuth param. */ domainAuth?: pulumi.Input<inputs.ExternalDynamicListTypeDomainDomainAuth>; /** * The ExceptionList param. Individual elements in this list are subject to additional validation. String length must not exceed 255 characters. */ exceptionLists?: pulumi.Input<pulumi.Input<string>[]>; /** * Enable/Disable expand domain. Default: `false`. */ expandDomain?: pulumi.Input<boolean>; /** * The Recurring param. */ recurring: pulumi.Input<inputs.ExternalDynamicListTypeDomainRecurring>; /** * The Url param. String length must not exceed 255 characters. Default: `"http://"`. */ url?: pulumi.Input<string>; } export interface ExternalDynamicListTypeDomainDomainAuth { /** * The Password param. String length must not exceed 255 characters. */ password: pulumi.Input<string>; /** * The Username param. String length must be between 1 and 255 characters. */ username: pulumi.Input<string>; } export interface ExternalDynamicListTypeDomainRecurring { /** * The Daily param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ daily?: pulumi.Input<inputs.ExternalDynamicListTypeDomainRecurringDaily>; /** * The FiveMinute param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ fiveMinute?: pulumi.Input<boolean>; /** * The Hourly param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ hourly?: pulumi.Input<boolean>; /** * The Monthly param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ monthly?: pulumi.Input<inputs.ExternalDynamicListTypeDomainRecurringMonthly>; /** * The Weekly param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ weekly?: pulumi.Input<inputs.ExternalDynamicListTypeDomainRecurringWeekly>; } export interface ExternalDynamicListTypeDomainRecurringDaily { /** * Time specification hh (e.g. 20). String length must be between 2 and 2 characters. String validation regex: `([01][0-9]|[2][0-3])`. Default: `"00"`. */ at?: pulumi.Input<string>; } export interface ExternalDynamicListTypeDomainRecurringMonthly { /** * Time specification hh (e.g. 20). String length must be between 2 and 2 characters. String validation regex: `([01][0-9]|[2][0-3])`. Default: `"00"`. */ at?: pulumi.Input<string>; /** * The DayOfMonth param. Value must be between 1 and 31. */ dayOfMonth: pulumi.Input<number>; } export interface ExternalDynamicListTypeDomainRecurringWeekly { /** * Time specification hh (e.g. 20). String length must be between 2 and 2 characters. String validation regex: `([01][0-9]|[2][0-3])`. Default: `"00"`. */ at?: pulumi.Input<string>; /** * The DayOfWeek param. String must be one of these: `"sunday"`, `"monday"`, `"tuesday"`, `"wednesday"`, `"thursday"`, `"friday"`, `"saturday"`. */ dayOfWeek: pulumi.Input<string>; } export interface ExternalDynamicListTypeImei { /** * Profile for authenticating client certificates. Default: `"None"`. */ certificateProfile?: pulumi.Input<string>; /** * The Description param. String length must not exceed 255 characters. */ description?: pulumi.Input<string>; /** * The ExceptionList param. Individual elements in this list are subject to additional validation. String length must not exceed 32 characters. */ exceptionLists?: pulumi.Input<pulumi.Input<string>[]>; /** * The ImeiAuth param. */ imeiAuth?: pulumi.Input<inputs.ExternalDynamicListTypeImeiImeiAuth>; /** * The Recurring param. */ recurring: pulumi.Input<inputs.ExternalDynamicListTypeImeiRecurring>; /** * The Url param. String length must not exceed 255 characters. Default: `"http://"`. */ url?: pulumi.Input<string>; } export interface ExternalDynamicListTypeImeiImeiAuth { /** * The Password param. String length must not exceed 255 characters. */ password: pulumi.Input<string>; /** * The Username param. String length must be between 1 and 255 characters. */ username: pulumi.Input<string>; } export interface ExternalDynamicListTypeImeiRecurring { /** * The Daily param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ daily?: pulumi.Input<inputs.ExternalDynamicListTypeImeiRecurringDaily>; /** * The FiveMinute param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ fiveMinute?: pulumi.Input<boolean>; /** * The Hourly param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ hourly?: pulumi.Input<boolean>; /** * The Monthly param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ monthly?: pulumi.Input<inputs.ExternalDynamicListTypeImeiRecurringMonthly>; /** * The Weekly param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ weekly?: pulumi.Input<inputs.ExternalDynamicListTypeImeiRecurringWeekly>; } export interface ExternalDynamicListTypeImeiRecurringDaily { /** * Time specification hh (e.g. 20). String length must be between 2 and 2 characters. String validation regex: `([01][0-9]|[2][0-3])`. Default: `"00"`. */ at?: pulumi.Input<string>; } export interface ExternalDynamicListTypeImeiRecurringMonthly { /** * Time specification hh (e.g. 20). String length must be between 2 and 2 characters. String validation regex: `([01][0-9]|[2][0-3])`. Default: `"00"`. */ at?: pulumi.Input<string>; /** * The DayOfMonth param. Value must be between 1 and 31. */ dayOfMonth: pulumi.Input<number>; } export interface ExternalDynamicListTypeImeiRecurringWeekly { /** * Time specification hh (e.g. 20). String length must be between 2 and 2 characters. String validation regex: `([01][0-9]|[2][0-3])`. Default: `"00"`. */ at?: pulumi.Input<string>; /** * The DayOfWeek param. String must be one of these: `"sunday"`, `"monday"`, `"tuesday"`, `"wednesday"`, `"thursday"`, `"friday"`, `"saturday"`. */ dayOfWeek: pulumi.Input<string>; } export interface ExternalDynamicListTypeImsi { /** * Profile for authenticating client certificates. Default: `"None"`. */ certificateProfile?: pulumi.Input<string>; /** * The Description param. String length must not exceed 255 characters. */ description?: pulumi.Input<string>; /** * The ExceptionList param. Individual elements in this list are subject to additional validation. String length must not exceed 34 characters. */ exceptionLists?: pulumi.Input<pulumi.Input<string>[]>; /** * The ImsiAuth param. */ imsiAuth?: pulumi.Input<inputs.ExternalDynamicListTypeImsiImsiAuth>; /** * The Recurring param. */ recurring: pulumi.Input<inputs.ExternalDynamicListTypeImsiRecurring>; /** * The Url param. String length must not exceed 255 characters. Default: `"http://"`. */ url?: pulumi.Input<string>; } export interface ExternalDynamicListTypeImsiImsiAuth { /** * The Password param. String length must not exceed 255 characters. */ password: pulumi.Input<string>; /** * The Username param. String length must be between 1 and 255 characters. */ username: pulumi.Input<string>; } export interface ExternalDynamicListTypeImsiRecurring { /** * The Daily param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ daily?: pulumi.Input<inputs.ExternalDynamicListTypeImsiRecurringDaily>; /** * The FiveMinute param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ fiveMinute?: pulumi.Input<boolean>; /** * The Hourly param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ hourly?: pulumi.Input<boolean>; /** * The Monthly param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ monthly?: pulumi.Input<inputs.ExternalDynamicListTypeImsiRecurringMonthly>; /** * The Weekly param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ weekly?: pulumi.Input<inputs.ExternalDynamicListTypeImsiRecurringWeekly>; } export interface ExternalDynamicListTypeImsiRecurringDaily { /** * Time specification hh (e.g. 20). String length must be between 2 and 2 characters. String validation regex: `([01][0-9]|[2][0-3])`. Default: `"00"`. */ at?: pulumi.Input<string>; } export interface ExternalDynamicListTypeImsiRecurringMonthly { /** * Time specification hh (e.g. 20). String length must be between 2 and 2 characters. String validation regex: `([01][0-9]|[2][0-3])`. Default: `"00"`. */ at?: pulumi.Input<string>; /** * The DayOfMonth param. Value must be between 1 and 31. */ dayOfMonth: pulumi.Input<number>; } export interface ExternalDynamicListTypeImsiRecurringWeekly { /** * Time specification hh (e.g. 20). String length must be between 2 and 2 characters. String validation regex: `([01][0-9]|[2][0-3])`. Default: `"00"`. */ at?: pulumi.Input<string>; /** * The DayOfWeek param. String must be one of these: `"sunday"`, `"monday"`, `"tuesday"`, `"wednesday"`, `"thursday"`, `"friday"`, `"saturday"`. */ dayOfWeek: pulumi.Input<string>; } export interface ExternalDynamicListTypeIp { /** * Profile for authenticating client certificates. Default: `"None"`. */ certificateProfile?: pulumi.Input<string>; /** * The Description param. String length must not exceed 255 characters. */ description?: pulumi.Input<string>; /** * The ExceptionList param. Individual elements in this list are subject to additional validation. String length must not exceed 255 characters. */ exceptionLists?: pulumi.Input<pulumi.Input<string>[]>; /** * The IpAuth param. */ ipAuth?: pulumi.Input<inputs.ExternalDynamicListTypeIpIpAuth>; /** * The Recurring param. */ recurring: pulumi.Input<inputs.ExternalDynamicListTypeIpRecurring>; /** * The Url param. String length must not exceed 255 characters. Default: `"http://"`. */ url?: pulumi.Input<string>; } export interface ExternalDynamicListTypeIpIpAuth { /** * The Password param. String length must not exceed 255 characters. */ password: pulumi.Input<string>; /** * The Username param. String length must be between 1 and 255 characters. */ username: pulumi.Input<string>; } export interface ExternalDynamicListTypeIpRecurring { /** * The Daily param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ daily?: pulumi.Input<inputs.ExternalDynamicListTypeIpRecurringDaily>; /** * The FiveMinute param. Ensure that only one of the following is specified: `daily`, `fiveMinute`, `hourly`, `monthly`, `weekly` */ fiveMinute?: pulumi.Input<boolean>; /** * The Hourly param. Ensure that only one of the