UNPKG

@pulumi/scm

Version:

A Pulumi package for managing resources on Strata Cloud Manager.. Based on terraform-provider-scm: version v0.2.1

254 lines (253 loc) 8.34 kB
import * as pulumi from "@pulumi/pulumi"; import * as inputs from "./types/input"; import * as outputs from "./types/output"; /** * DnsSecurityProfile resource * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as scm from "@pulumi/scm"; * * const scmDnsSecurityProfileBase = new scm.DnsSecurityProfile("scm_dns_security_profile_base", { * folder: "All", * name: "dns_base", * }); * const scmDnsSecurityCategories = new scm.DnsSecurityProfile("scm_dns_security_categories", { * folder: "All", * name: "test_dns_sec_categories", * description: "dns security profile w/ dns security categories", * botnetDomains: { * dnsSecurityCategories: [ * { * name: "pan-dns-sec-recent", * }, * { * name: "pan-dns-sec-grayware", * action: "allow", * logLevel: "high", * packetCapture: "disable", * }, * { * name: "pan-dns-sec-proxy", * action: "block", * logLevel: "default", * packetCapture: "single-packet", * }, * { * name: "pan-dns-sec-phishing", * action: "sinkhole", * logLevel: "critical", * packetCapture: "extended-capture", * }, * { * name: "pan-dns-sec-malware", * action: "default", * logLevel: "informational", * packetCapture: "disable", * }, * ], * }, * }); * const scmDnsLists = new scm.DnsSecurityProfile("scm_dns_lists", { * folder: "All", * name: "test_dns_lists", * description: "dns security profile w/ dns lists", * botnetDomains: { * dnsLists: [ * { * name: "default-paloalto-dns", * packetCapture: "disable", * action: { * alert: {}, * }, * }, * { * name: "update-edl", * packetCapture: "extended-capture", * action: { * allow: {}, * }, * }, * ], * }, * }); * const scmDnsSinkhole = new scm.DnsSecurityProfile("scm_dns_sinkhole", { * folder: "All", * name: "test_dns_sinkhole", * description: "dns security profile w/ sinkhole", * botnetDomains: { * sinkhole: { * ipv4Address: "127.0.0.1", * ipv6Address: "::1", * }, * }, * }); * const scmDnsWhitelist = new scm.DnsSecurityProfile("scm_dns_whitelist", { * folder: "All", * name: "test_dns_whitelist", * description: "dns security profile w/ whitelist", * botnetDomains: { * whitelists: [ * { * name: "example.com", * }, * { * name: "example2.com", * description: "creating whitelist", * }, * ], * }, * }); * const scmDnsAll = new scm.DnsSecurityProfile("scm_dns_all", { * folder: "All", * name: "test_dns_all_test", * description: "dns security profile w/ all", * botnetDomains: { * dnsSecurityCategories: [{ * name: "pan-dns-sec-ddns", * action: "block", * logLevel: "low", * packetCapture: "disable", * }], * dnsLists: [{ * name: "scm_edl_1", * packetCapture: "single-packet", * action: { * block: {}, * }, * }], * sinkhole: { * ipv4Address: "pan-sinkhole-default-ip", * ipv6Address: "::1", * }, * whitelists: [{ * name: "ebay.com", * description: "creating whitelist", * }], * }, * }); * ``` */ export declare class DnsSecurityProfile extends pulumi.CustomResource { /** * Get an existing DnsSecurityProfile resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input<pulumi.ID>, state?: DnsSecurityProfileState, opts?: pulumi.CustomResourceOptions): DnsSecurityProfile; /** * Returns true if the given object is an instance of DnsSecurityProfile. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is DnsSecurityProfile; /** * Botnet domains */ readonly botnetDomains: pulumi.Output<outputs.DnsSecurityProfileBotnetDomains | undefined>; /** * The description of the DNS security profile */ readonly description: pulumi.Output<string | undefined>; /** * The device in which the resource is defined */ readonly device: pulumi.Output<string | undefined>; /** * The folder in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ readonly folder: pulumi.Output<string | undefined>; /** * The name of the DNS security profile */ readonly name: pulumi.Output<string>; /** * The snippet in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ readonly snippet: pulumi.Output<string | undefined>; readonly tfid: pulumi.Output<string>; /** * Create a DnsSecurityProfile resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args?: DnsSecurityProfileArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering DnsSecurityProfile resources. */ export interface DnsSecurityProfileState { /** * Botnet domains */ botnetDomains?: pulumi.Input<inputs.DnsSecurityProfileBotnetDomains>; /** * The description of the DNS security profile */ description?: pulumi.Input<string>; /** * The device in which the resource is defined */ device?: pulumi.Input<string>; /** * The folder in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ folder?: pulumi.Input<string>; /** * The name of the DNS security profile */ name?: pulumi.Input<string>; /** * The snippet in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ snippet?: pulumi.Input<string>; tfid?: pulumi.Input<string>; } /** * The set of arguments for constructing a DnsSecurityProfile resource. */ export interface DnsSecurityProfileArgs { /** * Botnet domains */ botnetDomains?: pulumi.Input<inputs.DnsSecurityProfileBotnetDomains>; /** * The description of the DNS security profile */ description?: pulumi.Input<string>; /** * The device in which the resource is defined */ device?: pulumi.Input<string>; /** * The folder in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ folder?: pulumi.Input<string>; /** * The name of the DNS security profile */ name?: pulumi.Input<string>; /** * The snippet in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ snippet?: pulumi.Input<string>; }