import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * This resource provides the Security List resource in Oracle Cloud Infrastructure Core service. * Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/iaas/latest/SecurityList * * Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/ * * Creates a new security list for the specified VCN. For more information * about security lists, see [Security Lists](https://docs.cloud.oracle.com/iaas/Content/Network/Concepts/securitylists.htm). * For information on the number of rules you can have in a security list, see * [Service Limits](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/servicelimits.htm). * * For the purposes of access control, you must provide the [OCID](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the compartment where you want the security * list to reside. Notice that the security list doesn't have to be in the same compartment as the VCN, subnets, * or other Networking Service components. If you're not sure which compartment to use, put the security * list in the same compartment as the VCN. For more information about compartments and access control, see * [Overview of the IAM Service](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/overview.htm). For information about OCIDs, see * [Resource Identifiers](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/identifiers.htm). * * You may optionally specify a *display name* for the security list, otherwise a default is provided. * It does not have to be unique, and you can change it. Avoid entering confidential information. * * For more information on configuring a VCN's default security list, see [Managing Default VCN Resources](https://www.terraform.io/docs/providers/oci/guides/managing_default_resources.html) * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as oci from "@pulumi/oci"; * * const testSecurityList = new oci.core.SecurityList("test_security_list", { * compartmentId: compartmentId, * vcnId: testVcn.id, * definedTags: { * "Operations.CostCenter": "42", * }, * displayName: securityListDisplayName, * egressSecurityRules: [{ * destination: securityListEgressSecurityRulesDestination, * protocol: securityListEgressSecurityRulesProtocol, * description: securityListEgressSecurityRulesDescription, * destinationType: securityListEgressSecurityRulesDestinationType, * icmpOptions: { * type: Number(securityListEgressSecurityRulesIcmpOptionsType), * code: Number(securityListEgressSecurityRulesIcmpOptionsCode), * }, * stateless: securityListEgressSecurityRulesStateless === "true", * tcpOptions: { * max: Number(securityListEgressSecurityRulesTcpOptionsDestinationPortRangeMax), * min: Number(securityListEgressSecurityRulesTcpOptionsDestinationPortRangeMin), * sourcePortRange: { * max: Number(securityListEgressSecurityRulesTcpOptionsSourcePortRangeMax), * min: Number(securityListEgressSecurityRulesTcpOptionsSourcePortRangeMin), * }, * }, * udpOptions: { * max: Number(securityListEgressSecurityRulesUdpOptionsDestinationPortRangeMax), * min: Number(securityListEgressSecurityRulesUdpOptionsDestinationPortRangeMin), * sourcePortRange: { * max: Number(securityListEgressSecurityRulesUdpOptionsSourcePortRangeMax), * min: Number(securityListEgressSecurityRulesUdpOptionsSourcePortRangeMin), * }, * }, * }], * freeformTags: { * Department: "Finance", * }, * ingressSecurityRules: [{ * protocol: securityListIngressSecurityRulesProtocol, * source: securityListIngressSecurityRulesSource, * description: securityListIngressSecurityRulesDescription, * icmpOptions: { * type: Number(securityListIngressSecurityRulesIcmpOptionsType), * code: Number(securityListIngressSecurityRulesIcmpOptionsCode), * }, * sourceType: securityListIngressSecurityRulesSourceType, * stateless: securityListIngressSecurityRulesStateless === "true", * tcpOptions: { * max: Number(securityListIngressSecurityRulesTcpOptionsDestinationPortRangeMax), * min: Number(securityListIngressSecurityRulesTcpOptionsDestinationPortRangeMin), * sourcePortRange: { * max: Number(securityListIngressSecurityRulesTcpOptionsSourcePortRangeMax), * min: Number(securityListIngressSecurityRulesTcpOptionsSourcePortRangeMin), * }, * }, * udpOptions: { * max: Number(securityListIngressSecurityRulesUdpOptionsDestinationPortRangeMax), * min: Number(securityListIngressSecurityRulesUdpOptionsDestinationPortRangeMin), * sourcePortRange: { * max: Number(securityListIngressSecurityRulesUdpOptionsSourcePortRangeMax), * min: Number(securityListIngressSecurityRulesUdpOptionsSourcePortRangeMin), * }, * }, * }], * }); * ``` * * ## Import * * SecurityLists can be imported using the `id`, e.g. * * ```sh * $ pulumi import oci:Core/securityList:SecurityList test_security_list "id" * ``` */ export declare class SecurityList extends pulumi.CustomResource { /** * Get an existing SecurityList resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: SecurityListState, opts?: pulumi.CustomResourceOptions): SecurityList; /** * Returns true if the given object is an instance of SecurityList. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is SecurityList; /** * (Updatable) The [OCID](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the compartment to contain the security list. */ readonly compartmentId: pulumi.Output; /** * (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Operations.CostCenter": "42"}` */ readonly definedTags: pulumi.Output<{ [key: string]: string; }>; /** * (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information. */ readonly displayName: pulumi.Output; /** * (Updatable) Rules for allowing egress IP packets. */ readonly egressSecurityRules: pulumi.Output; /** * (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Department": "Finance"}` */ readonly freeformTags: pulumi.Output<{ [key: string]: string; }>; /** * (Updatable) Rules for allowing ingress IP packets. */ readonly ingressSecurityRules: pulumi.Output; /** * The security list's current state. */ readonly state: pulumi.Output; /** * The date and time the security list was created, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2016-08-25T21:10:29.600Z` */ readonly timeCreated: pulumi.Output; /** * The [OCID](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the VCN the security list belongs to. * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ readonly vcnId: pulumi.Output; /** * Create a SecurityList resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: SecurityListArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering SecurityList resources. */ export interface SecurityListState { /** * (Updatable) The [OCID](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the compartment to contain the security list. */ compartmentId?: pulumi.Input; /** * (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Operations.CostCenter": "42"}` */ definedTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information. */ displayName?: pulumi.Input; /** * (Updatable) Rules for allowing egress IP packets. */ egressSecurityRules?: pulumi.Input[] | undefined>; /** * (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Department": "Finance"}` */ freeformTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * (Updatable) Rules for allowing ingress IP packets. */ ingressSecurityRules?: pulumi.Input[] | undefined>; /** * The security list's current state. */ state?: pulumi.Input; /** * The date and time the security list was created, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2016-08-25T21:10:29.600Z` */ timeCreated?: pulumi.Input; /** * The [OCID](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the VCN the security list belongs to. * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ vcnId?: pulumi.Input; } /** * The set of arguments for constructing a SecurityList resource. */ export interface SecurityListArgs { /** * (Updatable) The [OCID](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the compartment to contain the security list. */ compartmentId: pulumi.Input; /** * (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Operations.CostCenter": "42"}` */ definedTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information. */ displayName?: pulumi.Input; /** * (Updatable) Rules for allowing egress IP packets. */ egressSecurityRules?: pulumi.Input[] | undefined>; /** * (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Department": "Finance"}` */ freeformTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * (Updatable) Rules for allowing ingress IP packets. */ ingressSecurityRules?: pulumi.Input[] | undefined>; /** * The [OCID](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the VCN the security list belongs to. * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ vcnId: pulumi.Input; } //# sourceMappingURL=securityList.d.ts.map