import * as pulumi from "@pulumi/pulumi"; /** * This resource provides the Network Firewall Policy Decryption Profile resource in Oracle Cloud Infrastructure Network Firewall service. * Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/network-firewall/latest/NetworkFirewallPolicyDecryptionProfile * * Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/network_firewall * * Creates a new Decryption Profile for the Network Firewall Policy. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as oci from "@pulumi/oci"; * * const testNetworkFirewallPolicyDecryptionProfile = new oci.networkfirewall.NetworkFirewallPolicyDecryptionProfile("test_network_firewall_policy_decryption_profile", { * name: networkFirewallPolicyDecryptionProfileName, * networkFirewallPolicyId: testNetworkFirewallPolicy.id, * type: networkFirewallPolicyDecryptionProfileType, * description: networkFirewallPolicyDecryptionProfileDescription, * areCertificateExtensionsRestricted: networkFirewallPolicyDecryptionProfileAreCertificateExtensionsRestricted === "true", * isAutoIncludeAltName: networkFirewallPolicyDecryptionProfileIsAutoIncludeAltName === "true", * isExpiredCertificateBlocked: networkFirewallPolicyDecryptionProfileIsExpiredCertificateBlocked === "true", * isOutOfCapacityBlocked: networkFirewallPolicyDecryptionProfileIsOutOfCapacityBlocked === "true", * isRevocationStatusTimeoutBlocked: networkFirewallPolicyDecryptionProfileIsRevocationStatusTimeoutBlocked === "true", * isUnknownRevocationStatusBlocked: networkFirewallPolicyDecryptionProfileIsUnknownRevocationStatusBlocked === "true", * isUnsupportedCipherBlocked: networkFirewallPolicyDecryptionProfileIsUnsupportedCipherBlocked === "true", * isUnsupportedVersionBlocked: networkFirewallPolicyDecryptionProfileIsUnsupportedVersionBlocked === "true", * isUntrustedIssuerBlocked: networkFirewallPolicyDecryptionProfileIsUntrustedIssuerBlocked === "true", * }); * ``` * * ## Import * * NetworkFirewallPolicyDecryptionProfiles can be imported using the `name`, e.g. * * ```sh * $ pulumi import oci:NetworkFirewall/networkFirewallPolicyDecryptionProfile:NetworkFirewallPolicyDecryptionProfile test_network_firewall_policy_decryption_profile "networkFirewallPolicies/{networkFirewallPolicyId}/decryptionProfiles/{decryptionProfileName}" * ``` */ export declare class NetworkFirewallPolicyDecryptionProfile extends pulumi.CustomResource { /** * Get an existing NetworkFirewallPolicyDecryptionProfile resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: NetworkFirewallPolicyDecryptionProfileState, opts?: pulumi.CustomResourceOptions): NetworkFirewallPolicyDecryptionProfile; /** * Returns true if the given object is an instance of NetworkFirewallPolicyDecryptionProfile. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is NetworkFirewallPolicyDecryptionProfile; /** * (Updatable) Whether to block sessions if the server's certificate uses extensions other than key usage and/or extended key usage. */ readonly areCertificateExtensionsRestricted: pulumi.Output; /** * (Updatable) The description of the decryption profile. This field can be used to add additional info. */ readonly description: pulumi.Output; /** * (Updatable) Whether to automatically append SAN to impersonating certificate if server certificate is missing SAN. */ readonly isAutoIncludeAltName: pulumi.Output; /** * (Updatable) Whether to block sessions if server's certificate is expired. */ readonly isExpiredCertificateBlocked: pulumi.Output; /** * (Updatable) Whether to block sessions if the firewall is temporarily unable to decrypt their traffic. */ readonly isOutOfCapacityBlocked: pulumi.Output; /** * (Updatable) Whether to block sessions if the revocation status check for server's certificate does not succeed within the maximum allowed time (defaulting to 5 seconds). */ readonly isRevocationStatusTimeoutBlocked: pulumi.Output; /** * (Updatable) Whether to block sessions if the revocation status check for server's certificate results in "unknown". */ readonly isUnknownRevocationStatusBlocked: pulumi.Output; /** * (Updatable) Whether to block sessions if SSL cipher suite is not supported. */ readonly isUnsupportedCipherBlocked: pulumi.Output; /** * (Updatable) Whether to block sessions if SSL version is not supported. */ readonly isUnsupportedVersionBlocked: pulumi.Output; /** * (Updatable) Whether to block sessions if server's certificate is issued by an untrusted certificate authority (CA). */ readonly isUntrustedIssuerBlocked: pulumi.Output; /** * Name of the decryption profile. */ readonly name: pulumi.Output; /** * Unique Network Firewall Policy identifier * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ readonly networkFirewallPolicyId: pulumi.Output; /** * OCID of the Network Firewall Policy this decryption profile belongs to. */ readonly parentResourceId: pulumi.Output; /** * Describes the type of decryption profile. The accepted values are - * SSL_FORWARD_PROXY * SSL_INBOUND_INSPECTION */ readonly type: pulumi.Output; /** * Create a NetworkFirewallPolicyDecryptionProfile resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: NetworkFirewallPolicyDecryptionProfileArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering NetworkFirewallPolicyDecryptionProfile resources. */ export interface NetworkFirewallPolicyDecryptionProfileState { /** * (Updatable) Whether to block sessions if the server's certificate uses extensions other than key usage and/or extended key usage. */ areCertificateExtensionsRestricted?: pulumi.Input; /** * (Updatable) The description of the decryption profile. This field can be used to add additional info. */ description?: pulumi.Input; /** * (Updatable) Whether to automatically append SAN to impersonating certificate if server certificate is missing SAN. */ isAutoIncludeAltName?: pulumi.Input; /** * (Updatable) Whether to block sessions if server's certificate is expired. */ isExpiredCertificateBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if the firewall is temporarily unable to decrypt their traffic. */ isOutOfCapacityBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if the revocation status check for server's certificate does not succeed within the maximum allowed time (defaulting to 5 seconds). */ isRevocationStatusTimeoutBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if the revocation status check for server's certificate results in "unknown". */ isUnknownRevocationStatusBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if SSL cipher suite is not supported. */ isUnsupportedCipherBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if SSL version is not supported. */ isUnsupportedVersionBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if server's certificate is issued by an untrusted certificate authority (CA). */ isUntrustedIssuerBlocked?: pulumi.Input; /** * Name of the decryption profile. */ name?: pulumi.Input; /** * Unique Network Firewall Policy identifier * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ networkFirewallPolicyId?: pulumi.Input; /** * OCID of the Network Firewall Policy this decryption profile belongs to. */ parentResourceId?: pulumi.Input; /** * Describes the type of decryption profile. The accepted values are - * SSL_FORWARD_PROXY * SSL_INBOUND_INSPECTION */ type?: pulumi.Input; } /** * The set of arguments for constructing a NetworkFirewallPolicyDecryptionProfile resource. */ export interface NetworkFirewallPolicyDecryptionProfileArgs { /** * (Updatable) Whether to block sessions if the server's certificate uses extensions other than key usage and/or extended key usage. */ areCertificateExtensionsRestricted?: pulumi.Input; /** * (Updatable) The description of the decryption profile. This field can be used to add additional info. */ description?: pulumi.Input; /** * (Updatable) Whether to automatically append SAN to impersonating certificate if server certificate is missing SAN. */ isAutoIncludeAltName?: pulumi.Input; /** * (Updatable) Whether to block sessions if server's certificate is expired. */ isExpiredCertificateBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if the firewall is temporarily unable to decrypt their traffic. */ isOutOfCapacityBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if the revocation status check for server's certificate does not succeed within the maximum allowed time (defaulting to 5 seconds). */ isRevocationStatusTimeoutBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if the revocation status check for server's certificate results in "unknown". */ isUnknownRevocationStatusBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if SSL cipher suite is not supported. */ isUnsupportedCipherBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if SSL version is not supported. */ isUnsupportedVersionBlocked?: pulumi.Input; /** * (Updatable) Whether to block sessions if server's certificate is issued by an untrusted certificate authority (CA). */ isUntrustedIssuerBlocked?: pulumi.Input; /** * Name of the decryption profile. */ name?: pulumi.Input; /** * Unique Network Firewall Policy identifier * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ networkFirewallPolicyId: pulumi.Input; /** * Describes the type of decryption profile. The accepted values are - * SSL_FORWARD_PROXY * SSL_INBOUND_INSPECTION */ type: pulumi.Input; } //# sourceMappingURL=networkFirewallPolicyDecryptionProfile.d.ts.map