@pulumi/scm
Version:
A Pulumi package for managing resources on Strata Cloud Manager.. Based on terraform-provider-scm: version v0.2.1
291 lines (290 loc) • 10 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
* DecryptionProfile resource
*
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as scm from "@pulumi/scm";
*
* const scmDecryptionProfileBase = new scm.DecryptionProfile("scm_decryption_profile_base", {
* folder: "ngfw-shared",
* name: "dp_base",
* });
* const scmDecryptionProfileForwardProxy = new scm.DecryptionProfile("scm_decryption_profile_forward_proxy", {
* folder: "ngfw-shared",
* name: "dp_forward_proxy",
* sslForwardProxy: {
* autoIncludeAltname: false,
* blockClientCert: true,
* blockExpiredCertificate: true,
* blockTimeoutCert: true,
* blockTls13DowngradeNoResource: false,
* blockUnknownCert: false,
* blockUnsupportedCipher: true,
* blockUnsupportedVersion: true,
* blockUntrustedIssuer: true,
* restrictCertExts: false,
* stripAlpn: true,
* },
* });
* const scmDecryptionProfileInboundProxy = new scm.DecryptionProfile("scm_decryption_profile_inbound_proxy", {
* folder: "ngfw-shared",
* name: "dp_inbound_proxy",
* sslInboundProxy: {
* blockIfHsmUnavailable: true,
* blockIfNoResource: true,
* blockUnsupportedCipher: false,
* blockUnsupportedVersion: true,
* },
* });
* const scmDecryptionProfileNoProxy = new scm.DecryptionProfile("scm_decryption_profile_no_proxy", {
* folder: "ngfw-shared",
* name: "dp_no_proxy",
* sslNoProxy: {
* blockExpiredCertificate: true,
* blockUntrustedIssuer: false,
* },
* });
* const scmDecryptionProfileProtocolSettings = new scm.DecryptionProfile("scm_decryption_profile_protocol_settings", {
* folder: "ngfw-shared",
* name: "dp_protocol_settings",
* sslProtocolSettings: {
* authAlgoMd5: true,
* authAlgoSha1: true,
* authAlgoSha256: true,
* authAlgoSha384: false,
* encAlgo3des: false,
* encAlgoAes128Cbc: false,
* encAlgoAes128Gcm: true,
* encAlgoAes256Cbc: false,
* encAlgoAes256Gcm: true,
* encAlgoChacha20Poly1305: false,
* encAlgoRc4: false,
* keyxchgAlgoDhe: true,
* keyxchgAlgoEcdhe: true,
* keyxchgAlgoRsa: false,
* maxVersion: "max",
* minVersion: "tls1-2",
* },
* });
* const mixedDecryptionProfile = new scm.DecryptionProfile("mixed_decryption_profile", {
* folder: "ngfw-shared",
* name: "mixed_dp",
* sslForwardProxy: {
* autoIncludeAltname: true,
* blockClientCert: true,
* blockExpiredCertificate: false,
* restrictCertExts: false,
* stripAlpn: true,
* },
* sslInboundProxy: {
* blockIfHsmUnavailable: true,
* blockIfNoResource: true,
* blockUnsupportedCipher: true,
* blockUnsupportedVersion: true,
* },
* sslProtocolSettings: {
* authAlgoMd5: true,
* authAlgoSha1: true,
* authAlgoSha256: false,
* authAlgoSha384: true,
* encAlgo3des: true,
* encAlgoRc4: true,
* keyxchgAlgoDhe: false,
* keyxchgAlgoEcdhe: false,
* maxVersion: "tls1-3",
* minVersion: "tls1-1",
* },
* });
* const fullMixedDecryptionProfile = new scm.DecryptionProfile("full_mixed_decryption_profile", {
* folder: "ngfw-shared",
* name: "full_mixed_dp",
* sslForwardProxy: {
* autoIncludeAltname: true,
* blockClientCert: true,
* blockExpiredCertificate: false,
* blockTimeoutCert: true,
* blockUnknownCert: false,
* blockUnsupportedCipher: true,
* blockUntrustedIssuer: false,
* restrictCertExts: false,
* stripAlpn: true,
* },
* sslInboundProxy: {
* blockIfHsmUnavailable: true,
* blockIfNoResource: false,
* blockUnsupportedCipher: true,
* blockUnsupportedVersion: false,
* },
* sslNoProxy: {
* blockExpiredCertificate: false,
* blockUntrustedIssuer: true,
* },
* sslProtocolSettings: {
* authAlgoMd5: false,
* authAlgoSha1: true,
* authAlgoSha256: false,
* authAlgoSha384: true,
* encAlgo3des: false,
* encAlgoAes128Gcm: true,
* encAlgoAes256Cbc: false,
* encAlgoAes256Gcm: true,
* encAlgoRc4: true,
* keyxchgAlgoDhe: false,
* keyxchgAlgoEcdhe: true,
* keyxchgAlgoRsa: false,
* maxVersion: "tls1-0",
* minVersion: "sslv3",
* },
* });
* ```
*/
export declare class DecryptionProfile extends pulumi.CustomResource {
/**
* Get an existing DecryptionProfile resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: DecryptionProfileState, opts?: pulumi.CustomResourceOptions): DecryptionProfile;
/**
* Returns true if the given object is an instance of DecryptionProfile. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is DecryptionProfile;
/**
* The device in which the resource is defined
*/
readonly device: pulumi.Output<string | undefined>;
/**
* The folder in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
readonly folder: pulumi.Output<string | undefined>;
/**
* Must start with alphanumeric char and should contain only alphanemeric, underscore, hyphen, dot or space
*/
readonly name: pulumi.Output<string>;
/**
* The snippet in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
readonly snippet: pulumi.Output<string | undefined>;
/**
* Ssl forward proxy
*/
readonly sslForwardProxy: pulumi.Output<outputs.DecryptionProfileSslForwardProxy>;
/**
* Ssl inbound proxy
*/
readonly sslInboundProxy: pulumi.Output<outputs.DecryptionProfileSslInboundProxy>;
/**
* Ssl no proxy
*/
readonly sslNoProxy: pulumi.Output<outputs.DecryptionProfileSslNoProxy>;
/**
* Ssl protocol settings
*/
readonly sslProtocolSettings: pulumi.Output<outputs.DecryptionProfileSslProtocolSettings>;
readonly tfid: pulumi.Output<string>;
/**
* Create a DecryptionProfile resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args?: DecryptionProfileArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering DecryptionProfile resources.
*/
export interface DecryptionProfileState {
/**
* The device in which the resource is defined
*/
device?: pulumi.Input<string>;
/**
* The folder in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
folder?: pulumi.Input<string>;
/**
* Must start with alphanumeric char and should contain only alphanemeric, underscore, hyphen, dot or space
*/
name?: pulumi.Input<string>;
/**
* The snippet in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
snippet?: pulumi.Input<string>;
/**
* Ssl forward proxy
*/
sslForwardProxy?: pulumi.Input<inputs.DecryptionProfileSslForwardProxy>;
/**
* Ssl inbound proxy
*/
sslInboundProxy?: pulumi.Input<inputs.DecryptionProfileSslInboundProxy>;
/**
* Ssl no proxy
*/
sslNoProxy?: pulumi.Input<inputs.DecryptionProfileSslNoProxy>;
/**
* Ssl protocol settings
*/
sslProtocolSettings?: pulumi.Input<inputs.DecryptionProfileSslProtocolSettings>;
tfid?: pulumi.Input<string>;
}
/**
* The set of arguments for constructing a DecryptionProfile resource.
*/
export interface DecryptionProfileArgs {
/**
* The device in which the resource is defined
*/
device?: pulumi.Input<string>;
/**
* The folder in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
folder?: pulumi.Input<string>;
/**
* Must start with alphanumeric char and should contain only alphanemeric, underscore, hyphen, dot or space
*/
name?: pulumi.Input<string>;
/**
* The snippet in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
snippet?: pulumi.Input<string>;
/**
* Ssl forward proxy
*/
sslForwardProxy?: pulumi.Input<inputs.DecryptionProfileSslForwardProxy>;
/**
* Ssl inbound proxy
*/
sslInboundProxy?: pulumi.Input<inputs.DecryptionProfileSslInboundProxy>;
/**
* Ssl no proxy
*/
sslNoProxy?: pulumi.Input<inputs.DecryptionProfileSslNoProxy>;
/**
* Ssl protocol settings
*/
sslProtocolSettings?: pulumi.Input<inputs.DecryptionProfileSslProtocolSettings>;
}