@pulumi/scm
Version:
A Pulumi package for managing resources on Strata Cloud Manager.. Based on terraform-provider-scm: version v0.2.1
254 lines (253 loc) • 8.34 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
* DnsSecurityProfile resource
*
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as scm from "@pulumi/scm";
*
* const scmDnsSecurityProfileBase = new scm.DnsSecurityProfile("scm_dns_security_profile_base", {
* folder: "All",
* name: "dns_base",
* });
* const scmDnsSecurityCategories = new scm.DnsSecurityProfile("scm_dns_security_categories", {
* folder: "All",
* name: "test_dns_sec_categories",
* description: "dns security profile w/ dns security categories",
* botnetDomains: {
* dnsSecurityCategories: [
* {
* name: "pan-dns-sec-recent",
* },
* {
* name: "pan-dns-sec-grayware",
* action: "allow",
* logLevel: "high",
* packetCapture: "disable",
* },
* {
* name: "pan-dns-sec-proxy",
* action: "block",
* logLevel: "default",
* packetCapture: "single-packet",
* },
* {
* name: "pan-dns-sec-phishing",
* action: "sinkhole",
* logLevel: "critical",
* packetCapture: "extended-capture",
* },
* {
* name: "pan-dns-sec-malware",
* action: "default",
* logLevel: "informational",
* packetCapture: "disable",
* },
* ],
* },
* });
* const scmDnsLists = new scm.DnsSecurityProfile("scm_dns_lists", {
* folder: "All",
* name: "test_dns_lists",
* description: "dns security profile w/ dns lists",
* botnetDomains: {
* dnsLists: [
* {
* name: "default-paloalto-dns",
* packetCapture: "disable",
* action: {
* alert: {},
* },
* },
* {
* name: "update-edl",
* packetCapture: "extended-capture",
* action: {
* allow: {},
* },
* },
* ],
* },
* });
* const scmDnsSinkhole = new scm.DnsSecurityProfile("scm_dns_sinkhole", {
* folder: "All",
* name: "test_dns_sinkhole",
* description: "dns security profile w/ sinkhole",
* botnetDomains: {
* sinkhole: {
* ipv4Address: "127.0.0.1",
* ipv6Address: "::1",
* },
* },
* });
* const scmDnsWhitelist = new scm.DnsSecurityProfile("scm_dns_whitelist", {
* folder: "All",
* name: "test_dns_whitelist",
* description: "dns security profile w/ whitelist",
* botnetDomains: {
* whitelists: [
* {
* name: "example.com",
* },
* {
* name: "example2.com",
* description: "creating whitelist",
* },
* ],
* },
* });
* const scmDnsAll = new scm.DnsSecurityProfile("scm_dns_all", {
* folder: "All",
* name: "test_dns_all_test",
* description: "dns security profile w/ all",
* botnetDomains: {
* dnsSecurityCategories: [{
* name: "pan-dns-sec-ddns",
* action: "block",
* logLevel: "low",
* packetCapture: "disable",
* }],
* dnsLists: [{
* name: "scm_edl_1",
* packetCapture: "single-packet",
* action: {
* block: {},
* },
* }],
* sinkhole: {
* ipv4Address: "pan-sinkhole-default-ip",
* ipv6Address: "::1",
* },
* whitelists: [{
* name: "ebay.com",
* description: "creating whitelist",
* }],
* },
* });
* ```
*/
export declare class DnsSecurityProfile extends pulumi.CustomResource {
/**
* Get an existing DnsSecurityProfile resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: DnsSecurityProfileState, opts?: pulumi.CustomResourceOptions): DnsSecurityProfile;
/**
* Returns true if the given object is an instance of DnsSecurityProfile. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is DnsSecurityProfile;
/**
* Botnet domains
*/
readonly botnetDomains: pulumi.Output<outputs.DnsSecurityProfileBotnetDomains | undefined>;
/**
* The description of the DNS security profile
*/
readonly description: pulumi.Output<string | undefined>;
/**
* The device in which the resource is defined
*/
readonly device: pulumi.Output<string | undefined>;
/**
* The folder in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
readonly folder: pulumi.Output<string | undefined>;
/**
* The name of the DNS security profile
*/
readonly name: pulumi.Output<string>;
/**
* The snippet in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
readonly snippet: pulumi.Output<string | undefined>;
readonly tfid: pulumi.Output<string>;
/**
* Create a DnsSecurityProfile resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args?: DnsSecurityProfileArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering DnsSecurityProfile resources.
*/
export interface DnsSecurityProfileState {
/**
* Botnet domains
*/
botnetDomains?: pulumi.Input<inputs.DnsSecurityProfileBotnetDomains>;
/**
* The description of the DNS security profile
*/
description?: pulumi.Input<string>;
/**
* The device in which the resource is defined
*/
device?: pulumi.Input<string>;
/**
* The folder in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
folder?: pulumi.Input<string>;
/**
* The name of the DNS security profile
*/
name?: pulumi.Input<string>;
/**
* The snippet in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
snippet?: pulumi.Input<string>;
tfid?: pulumi.Input<string>;
}
/**
* The set of arguments for constructing a DnsSecurityProfile resource.
*/
export interface DnsSecurityProfileArgs {
/**
* Botnet domains
*/
botnetDomains?: pulumi.Input<inputs.DnsSecurityProfileBotnetDomains>;
/**
* The description of the DNS security profile
*/
description?: pulumi.Input<string>;
/**
* The device in which the resource is defined
*/
device?: pulumi.Input<string>;
/**
* The folder in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
folder?: pulumi.Input<string>;
/**
* The name of the DNS security profile
*/
name?: pulumi.Input<string>;
/**
* The snippet in which the resource is defined
*
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
*/
snippet?: pulumi.Input<string>;
}