@pulumiverse/fortios
Version:
A Pulumi package for creating and managing Fortios resources. Based on terraform-provider-fortios: version v1.16.0
506 lines (505 loc) • 18.3 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
/**
* Configure IPv6 interface policies.
*
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as fortios from "@pulumiverse/fortios";
*
* const trname = new fortios.firewall.Interfacepolicy6("trname", {
* addressType: "ipv6",
* applicationListStatus: "disable",
* avProfileStatus: "disable",
* dlpSensorStatus: "disable",
* dsri: "disable",
* dstaddr6s: [{
* name: "all",
* }],
* "interface": "port4",
* ipsSensorStatus: "disable",
* logtraffic: "all",
* policyid: 1,
* scanBotnetConnections: "block",
* service6s: [{
* name: "ALL",
* }],
* spamfilterProfileStatus: "disable",
* srcaddr6s: [{
* name: "all",
* }],
* status: "enable",
* webfilterProfileStatus: "disable",
* });
* ```
*
* ## Import
*
* Firewall InterfacePolicy6 can be imported using any of these accepted formats:
*
* ```sh
* $ pulumi import fortios:firewall/interfacepolicy6:Interfacepolicy6 labelname {{policyid}}
* ```
*
* If you do not want to import arguments of block:
*
* $ export "FORTIOS_IMPORT_TABLE"="false"
*
* ```sh
* $ pulumi import fortios:firewall/interfacepolicy6:Interfacepolicy6 labelname {{policyid}}
* ```
*
* $ unset "FORTIOS_IMPORT_TABLE"
*/
export declare class Interfacepolicy6 extends pulumi.CustomResource {
/**
* Get an existing Interfacepolicy6 resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: Interfacepolicy6State, opts?: pulumi.CustomResourceOptions): Interfacepolicy6;
/**
* Returns true if the given object is an instance of Interfacepolicy6. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is Interfacepolicy6;
/**
* Policy address type (IPv4 or IPv6). Valid values: `ipv4`, `ipv6`.
*/
readonly addressType: pulumi.Output<string>;
/**
* Application list name.
*/
readonly applicationList: pulumi.Output<string>;
/**
* Enable/disable application control. Valid values: `enable`, `disable`.
*/
readonly applicationListStatus: pulumi.Output<string>;
/**
* Antivirus profile.
*/
readonly avProfile: pulumi.Output<string>;
/**
* Enable/disable antivirus. Valid values: `enable`, `disable`.
*/
readonly avProfileStatus: pulumi.Output<string>;
/**
* CASB profile.
*/
readonly casbProfile: pulumi.Output<string>;
/**
* Enable/disable CASB. Valid values: `enable`, `disable`.
*/
readonly casbProfileStatus: pulumi.Output<string>;
/**
* Comments.
*/
readonly comments: pulumi.Output<string | undefined>;
/**
* DLP profile name.
*/
readonly dlpProfile: pulumi.Output<string>;
/**
* Enable/disable DLP. Valid values: `enable`, `disable`.
*/
readonly dlpProfileStatus: pulumi.Output<string>;
/**
* DLP sensor name.
*/
readonly dlpSensor: pulumi.Output<string>;
/**
* Enable/disable DLP. Valid values: `enable`, `disable`.
*/
readonly dlpSensorStatus: pulumi.Output<string>;
/**
* Enable/disable DSRI. Valid values: `enable`, `disable`.
*/
readonly dsri: pulumi.Output<string>;
/**
* IPv6 address object to limit traffic monitoring to network traffic sent to the specified address or range. The structure of `dstaddr6` block is documented below.
*/
readonly dstaddr6s: pulumi.Output<outputs.firewall.Interfacepolicy6Dstaddr6[]>;
/**
* Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
*/
readonly dynamicSortSubtable: pulumi.Output<string | undefined>;
/**
* Email filter profile.
*/
readonly emailfilterProfile: pulumi.Output<string>;
/**
* Enable/disable email filter. Valid values: `enable`, `disable`.
*/
readonly emailfilterProfileStatus: pulumi.Output<string>;
/**
* Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
*/
readonly getAllTables: pulumi.Output<string | undefined>;
/**
* Monitored interface name from available interfaces.
*/
readonly interface: pulumi.Output<string>;
/**
* IPS sensor name.
*/
readonly ipsSensor: pulumi.Output<string>;
/**
* Enable/disable IPS. Valid values: `enable`, `disable`.
*/
readonly ipsSensorStatus: pulumi.Output<string>;
/**
* Label.
*/
readonly label: pulumi.Output<string>;
/**
* Logging type to be used in this policy (Options: all | utm | disable, Default: utm). Valid values: `all`, `utm`, `disable`.
*/
readonly logtraffic: pulumi.Output<string>;
/**
* Policy ID.
*/
readonly policyid: pulumi.Output<number>;
/**
* Enable/disable scanning for connections to Botnet servers. Valid values: `disable`, `block`, `monitor`.
*/
readonly scanBotnetConnections: pulumi.Output<string>;
/**
* Service name. The structure of `service6` block is documented below.
*/
readonly service6s: pulumi.Output<outputs.firewall.Interfacepolicy6Service6[] | undefined>;
/**
* Antispam profile.
*/
readonly spamfilterProfile: pulumi.Output<string>;
/**
* Enable/disable antispam. Valid values: `enable`, `disable`.
*/
readonly spamfilterProfileStatus: pulumi.Output<string>;
/**
* IPv6 address object to limit traffic monitoring to network traffic sent from the specified address or range. The structure of `srcaddr6` block is documented below.
*/
readonly srcaddr6s: pulumi.Output<outputs.firewall.Interfacepolicy6Srcaddr6[]>;
/**
* Enable/disable this policy. Valid values: `enable`, `disable`.
*/
readonly status: pulumi.Output<string>;
/**
* Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
*/
readonly uuid: pulumi.Output<string>;
/**
* Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
*
* The `srcaddr6` block supports:
*/
readonly vdomparam: pulumi.Output<string>;
/**
* Web filter profile.
*/
readonly webfilterProfile: pulumi.Output<string>;
/**
* Enable/disable web filtering. Valid values: `enable`, `disable`.
*/
readonly webfilterProfileStatus: pulumi.Output<string>;
/**
* Create a Interfacepolicy6 resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: Interfacepolicy6Args, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering Interfacepolicy6 resources.
*/
export interface Interfacepolicy6State {
/**
* Policy address type (IPv4 or IPv6). Valid values: `ipv4`, `ipv6`.
*/
addressType?: pulumi.Input<string>;
/**
* Application list name.
*/
applicationList?: pulumi.Input<string>;
/**
* Enable/disable application control. Valid values: `enable`, `disable`.
*/
applicationListStatus?: pulumi.Input<string>;
/**
* Antivirus profile.
*/
avProfile?: pulumi.Input<string>;
/**
* Enable/disable antivirus. Valid values: `enable`, `disable`.
*/
avProfileStatus?: pulumi.Input<string>;
/**
* CASB profile.
*/
casbProfile?: pulumi.Input<string>;
/**
* Enable/disable CASB. Valid values: `enable`, `disable`.
*/
casbProfileStatus?: pulumi.Input<string>;
/**
* Comments.
*/
comments?: pulumi.Input<string>;
/**
* DLP profile name.
*/
dlpProfile?: pulumi.Input<string>;
/**
* Enable/disable DLP. Valid values: `enable`, `disable`.
*/
dlpProfileStatus?: pulumi.Input<string>;
/**
* DLP sensor name.
*/
dlpSensor?: pulumi.Input<string>;
/**
* Enable/disable DLP. Valid values: `enable`, `disable`.
*/
dlpSensorStatus?: pulumi.Input<string>;
/**
* Enable/disable DSRI. Valid values: `enable`, `disable`.
*/
dsri?: pulumi.Input<string>;
/**
* IPv6 address object to limit traffic monitoring to network traffic sent to the specified address or range. The structure of `dstaddr6` block is documented below.
*/
dstaddr6s?: pulumi.Input<pulumi.Input<inputs.firewall.Interfacepolicy6Dstaddr6>[]>;
/**
* Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
*/
dynamicSortSubtable?: pulumi.Input<string>;
/**
* Email filter profile.
*/
emailfilterProfile?: pulumi.Input<string>;
/**
* Enable/disable email filter. Valid values: `enable`, `disable`.
*/
emailfilterProfileStatus?: pulumi.Input<string>;
/**
* Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
*/
getAllTables?: pulumi.Input<string>;
/**
* Monitored interface name from available interfaces.
*/
interface?: pulumi.Input<string>;
/**
* IPS sensor name.
*/
ipsSensor?: pulumi.Input<string>;
/**
* Enable/disable IPS. Valid values: `enable`, `disable`.
*/
ipsSensorStatus?: pulumi.Input<string>;
/**
* Label.
*/
label?: pulumi.Input<string>;
/**
* Logging type to be used in this policy (Options: all | utm | disable, Default: utm). Valid values: `all`, `utm`, `disable`.
*/
logtraffic?: pulumi.Input<string>;
/**
* Policy ID.
*/
policyid?: pulumi.Input<number>;
/**
* Enable/disable scanning for connections to Botnet servers. Valid values: `disable`, `block`, `monitor`.
*/
scanBotnetConnections?: pulumi.Input<string>;
/**
* Service name. The structure of `service6` block is documented below.
*/
service6s?: pulumi.Input<pulumi.Input<inputs.firewall.Interfacepolicy6Service6>[]>;
/**
* Antispam profile.
*/
spamfilterProfile?: pulumi.Input<string>;
/**
* Enable/disable antispam. Valid values: `enable`, `disable`.
*/
spamfilterProfileStatus?: pulumi.Input<string>;
/**
* IPv6 address object to limit traffic monitoring to network traffic sent from the specified address or range. The structure of `srcaddr6` block is documented below.
*/
srcaddr6s?: pulumi.Input<pulumi.Input<inputs.firewall.Interfacepolicy6Srcaddr6>[]>;
/**
* Enable/disable this policy. Valid values: `enable`, `disable`.
*/
status?: pulumi.Input<string>;
/**
* Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
*/
uuid?: pulumi.Input<string>;
/**
* Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
*
* The `srcaddr6` block supports:
*/
vdomparam?: pulumi.Input<string>;
/**
* Web filter profile.
*/
webfilterProfile?: pulumi.Input<string>;
/**
* Enable/disable web filtering. Valid values: `enable`, `disable`.
*/
webfilterProfileStatus?: pulumi.Input<string>;
}
/**
* The set of arguments for constructing a Interfacepolicy6 resource.
*/
export interface Interfacepolicy6Args {
/**
* Policy address type (IPv4 or IPv6). Valid values: `ipv4`, `ipv6`.
*/
addressType?: pulumi.Input<string>;
/**
* Application list name.
*/
applicationList?: pulumi.Input<string>;
/**
* Enable/disable application control. Valid values: `enable`, `disable`.
*/
applicationListStatus?: pulumi.Input<string>;
/**
* Antivirus profile.
*/
avProfile?: pulumi.Input<string>;
/**
* Enable/disable antivirus. Valid values: `enable`, `disable`.
*/
avProfileStatus?: pulumi.Input<string>;
/**
* CASB profile.
*/
casbProfile?: pulumi.Input<string>;
/**
* Enable/disable CASB. Valid values: `enable`, `disable`.
*/
casbProfileStatus?: pulumi.Input<string>;
/**
* Comments.
*/
comments?: pulumi.Input<string>;
/**
* DLP profile name.
*/
dlpProfile?: pulumi.Input<string>;
/**
* Enable/disable DLP. Valid values: `enable`, `disable`.
*/
dlpProfileStatus?: pulumi.Input<string>;
/**
* DLP sensor name.
*/
dlpSensor?: pulumi.Input<string>;
/**
* Enable/disable DLP. Valid values: `enable`, `disable`.
*/
dlpSensorStatus?: pulumi.Input<string>;
/**
* Enable/disable DSRI. Valid values: `enable`, `disable`.
*/
dsri?: pulumi.Input<string>;
/**
* IPv6 address object to limit traffic monitoring to network traffic sent to the specified address or range. The structure of `dstaddr6` block is documented below.
*/
dstaddr6s: pulumi.Input<pulumi.Input<inputs.firewall.Interfacepolicy6Dstaddr6>[]>;
/**
* Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
*/
dynamicSortSubtable?: pulumi.Input<string>;
/**
* Email filter profile.
*/
emailfilterProfile?: pulumi.Input<string>;
/**
* Enable/disable email filter. Valid values: `enable`, `disable`.
*/
emailfilterProfileStatus?: pulumi.Input<string>;
/**
* Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
*/
getAllTables?: pulumi.Input<string>;
/**
* Monitored interface name from available interfaces.
*/
interface: pulumi.Input<string>;
/**
* IPS sensor name.
*/
ipsSensor?: pulumi.Input<string>;
/**
* Enable/disable IPS. Valid values: `enable`, `disable`.
*/
ipsSensorStatus?: pulumi.Input<string>;
/**
* Label.
*/
label?: pulumi.Input<string>;
/**
* Logging type to be used in this policy (Options: all | utm | disable, Default: utm). Valid values: `all`, `utm`, `disable`.
*/
logtraffic?: pulumi.Input<string>;
/**
* Policy ID.
*/
policyid?: pulumi.Input<number>;
/**
* Enable/disable scanning for connections to Botnet servers. Valid values: `disable`, `block`, `monitor`.
*/
scanBotnetConnections?: pulumi.Input<string>;
/**
* Service name. The structure of `service6` block is documented below.
*/
service6s?: pulumi.Input<pulumi.Input<inputs.firewall.Interfacepolicy6Service6>[]>;
/**
* Antispam profile.
*/
spamfilterProfile?: pulumi.Input<string>;
/**
* Enable/disable antispam. Valid values: `enable`, `disable`.
*/
spamfilterProfileStatus?: pulumi.Input<string>;
/**
* IPv6 address object to limit traffic monitoring to network traffic sent from the specified address or range. The structure of `srcaddr6` block is documented below.
*/
srcaddr6s: pulumi.Input<pulumi.Input<inputs.firewall.Interfacepolicy6Srcaddr6>[]>;
/**
* Enable/disable this policy. Valid values: `enable`, `disable`.
*/
status?: pulumi.Input<string>;
/**
* Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
*/
uuid?: pulumi.Input<string>;
/**
* Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
*
* The `srcaddr6` block supports:
*/
vdomparam?: pulumi.Input<string>;
/**
* Web filter profile.
*/
webfilterProfile?: pulumi.Input<string>;
/**
* Enable/disable web filtering. Valid values: `enable`, `disable`.
*/
webfilterProfileStatus?: pulumi.Input<string>;
}