@pulumi/sdwan
Version:
A Pulumi package for managing resources on Cisco Catalyst SD-WAN.. Based on terraform-provider-sdwan: version v0.4.1
304 lines (303 loc) • 9.67 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
* This resource can manage a Security Policy .
*
* ## Import
*
* The `pulumi import` command can be used, for example:
*
* ```sh
* $ pulumi import sdwan:index/securityPolicy:SecurityPolicy example "f6b2c44c-693c-4763-b010-895aa3d236bd"
* ```
*/
export declare class SecurityPolicy extends pulumi.CustomResource {
/**
* Get an existing SecurityPolicy resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SecurityPolicyState, opts?: pulumi.CustomResourceOptions): SecurityPolicy;
/**
* Returns true if the given object is an instance of SecurityPolicy. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is SecurityPolicy;
/**
* Audit trail - Choices: `on`, `off`
*/
readonly auditTrail: pulumi.Output<string | undefined>;
/**
* List of policy definitions
*/
readonly definitions: pulumi.Output<outputs.SecurityPolicyDefinition[]>;
/**
* The description of the security policy
*/
readonly description: pulumi.Output<string>;
/**
* Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
*/
readonly directInternetApplications: pulumi.Output<string | undefined>;
/**
* Failure mode - Choices: `open`, `close`
*/
readonly failureMode: pulumi.Output<string | undefined>;
/**
* High Speed Logging Server IP
*/
readonly highSpeedLoggingServerIp: pulumi.Output<string | undefined>;
/**
* High Speed Logging Port
*/
readonly highSpeedLoggingServerPort: pulumi.Output<string | undefined>;
/**
* High Speed Logging Source Interface
*/
readonly highSpeedLoggingServerSourceInterface: pulumi.Output<string | undefined>;
/**
* High Speed Logging VPN
*/
readonly highSpeedLoggingVpn: pulumi.Output<string | undefined>;
/**
* ICMP Unreachable Allow
*/
readonly imcpUnreachableAllow: pulumi.Output<boolean | undefined>;
readonly loggings: pulumi.Output<outputs.SecurityPolicyLogging[] | undefined>;
/**
* Match Statistics per-filter - Choices: `on`, `off`
*/
readonly matchStatisticsPerFilter: pulumi.Output<string | undefined>;
/**
* Max Incomplete ICMP Limit
*/
readonly maxIncompleteIcmpLimit: pulumi.Output<number | undefined>;
/**
* Max Incomplete TCP Limit
*/
readonly maxIncompleteTcpLimit: pulumi.Output<number | undefined>;
/**
* Max Incomplete UDP Limit
*/
readonly maxIncompleteUdpLimit: pulumi.Output<number | undefined>;
/**
* The policy mode - Choices: `security`, `unified` - Default value: `security`
*/
readonly mode: pulumi.Output<string>;
/**
* The name of the security policy
*/
readonly name: pulumi.Output<string>;
/**
* Session Reclassify Allow
*/
readonly sessionReclassifyAllow: pulumi.Output<boolean | undefined>;
/**
* TCP SYN Flood Limit, value from 1 to 4294967295
*/
readonly tcpSynFloodLimit: pulumi.Output<string | undefined>;
/**
* Unified Logging
*/
readonly unifiedLogging: pulumi.Output<boolean | undefined>;
/**
* The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
* `directInternetAccess`, `directCloudAccess` - Default value: `custom`
*/
readonly useCase: pulumi.Output<string>;
/**
* The version of the object
*/
readonly version: pulumi.Output<number>;
/**
* Create a SecurityPolicy resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: SecurityPolicyArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering SecurityPolicy resources.
*/
export interface SecurityPolicyState {
/**
* Audit trail - Choices: `on`, `off`
*/
auditTrail?: pulumi.Input<string>;
/**
* List of policy definitions
*/
definitions?: pulumi.Input<pulumi.Input<inputs.SecurityPolicyDefinition>[]>;
/**
* The description of the security policy
*/
description?: pulumi.Input<string>;
/**
* Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
*/
directInternetApplications?: pulumi.Input<string>;
/**
* Failure mode - Choices: `open`, `close`
*/
failureMode?: pulumi.Input<string>;
/**
* High Speed Logging Server IP
*/
highSpeedLoggingServerIp?: pulumi.Input<string>;
/**
* High Speed Logging Port
*/
highSpeedLoggingServerPort?: pulumi.Input<string>;
/**
* High Speed Logging Source Interface
*/
highSpeedLoggingServerSourceInterface?: pulumi.Input<string>;
/**
* High Speed Logging VPN
*/
highSpeedLoggingVpn?: pulumi.Input<string>;
/**
* ICMP Unreachable Allow
*/
imcpUnreachableAllow?: pulumi.Input<boolean>;
loggings?: pulumi.Input<pulumi.Input<inputs.SecurityPolicyLogging>[]>;
/**
* Match Statistics per-filter - Choices: `on`, `off`
*/
matchStatisticsPerFilter?: pulumi.Input<string>;
/**
* Max Incomplete ICMP Limit
*/
maxIncompleteIcmpLimit?: pulumi.Input<number>;
/**
* Max Incomplete TCP Limit
*/
maxIncompleteTcpLimit?: pulumi.Input<number>;
/**
* Max Incomplete UDP Limit
*/
maxIncompleteUdpLimit?: pulumi.Input<number>;
/**
* The policy mode - Choices: `security`, `unified` - Default value: `security`
*/
mode?: pulumi.Input<string>;
/**
* The name of the security policy
*/
name?: pulumi.Input<string>;
/**
* Session Reclassify Allow
*/
sessionReclassifyAllow?: pulumi.Input<boolean>;
/**
* TCP SYN Flood Limit, value from 1 to 4294967295
*/
tcpSynFloodLimit?: pulumi.Input<string>;
/**
* Unified Logging
*/
unifiedLogging?: pulumi.Input<boolean>;
/**
* The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
* `directInternetAccess`, `directCloudAccess` - Default value: `custom`
*/
useCase?: pulumi.Input<string>;
/**
* The version of the object
*/
version?: pulumi.Input<number>;
}
/**
* The set of arguments for constructing a SecurityPolicy resource.
*/
export interface SecurityPolicyArgs {
/**
* Audit trail - Choices: `on`, `off`
*/
auditTrail?: pulumi.Input<string>;
/**
* List of policy definitions
*/
definitions: pulumi.Input<pulumi.Input<inputs.SecurityPolicyDefinition>[]>;
/**
* The description of the security policy
*/
description: pulumi.Input<string>;
/**
* Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
*/
directInternetApplications?: pulumi.Input<string>;
/**
* Failure mode - Choices: `open`, `close`
*/
failureMode?: pulumi.Input<string>;
/**
* High Speed Logging Server IP
*/
highSpeedLoggingServerIp?: pulumi.Input<string>;
/**
* High Speed Logging Port
*/
highSpeedLoggingServerPort?: pulumi.Input<string>;
/**
* High Speed Logging Source Interface
*/
highSpeedLoggingServerSourceInterface?: pulumi.Input<string>;
/**
* High Speed Logging VPN
*/
highSpeedLoggingVpn?: pulumi.Input<string>;
/**
* ICMP Unreachable Allow
*/
imcpUnreachableAllow?: pulumi.Input<boolean>;
loggings?: pulumi.Input<pulumi.Input<inputs.SecurityPolicyLogging>[]>;
/**
* Match Statistics per-filter - Choices: `on`, `off`
*/
matchStatisticsPerFilter?: pulumi.Input<string>;
/**
* Max Incomplete ICMP Limit
*/
maxIncompleteIcmpLimit?: pulumi.Input<number>;
/**
* Max Incomplete TCP Limit
*/
maxIncompleteTcpLimit?: pulumi.Input<number>;
/**
* Max Incomplete UDP Limit
*/
maxIncompleteUdpLimit?: pulumi.Input<number>;
/**
* The policy mode - Choices: `security`, `unified` - Default value: `security`
*/
mode?: pulumi.Input<string>;
/**
* The name of the security policy
*/
name?: pulumi.Input<string>;
/**
* Session Reclassify Allow
*/
sessionReclassifyAllow?: pulumi.Input<boolean>;
/**
* TCP SYN Flood Limit, value from 1 to 4294967295
*/
tcpSynFloodLimit?: pulumi.Input<string>;
/**
* Unified Logging
*/
unifiedLogging?: pulumi.Input<boolean>;
/**
* The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
* `directInternetAccess`, `directCloudAccess` - Default value: `custom`
*/
useCase?: pulumi.Input<string>;
}