import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * This resource provides the Network Firewall Policy Decryption Rule resource in Oracle Cloud Infrastructure Network Firewall service. * Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/network-firewall/latest/NetworkFirewallPolicyDecryptionRule * * Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/network_firewall * * Creates a new Decryption Rule for the Network Firewall Policy. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as oci from "@pulumi/oci"; * * const testNetworkFirewallPolicyDecryptionRule = new oci.networkfirewall.NetworkFirewallPolicyDecryptionRule("test_network_firewall_policy_decryption_rule", { * lifecycle: { * ignoreChanges: [position], * }, * name: networkFirewallPolicyDecryptionRuleName, * action: networkFirewallPolicyDecryptionRuleAction, * condition: { * destinationAddresses: networkFirewallPolicyDecryptionRuleConditionDestinationAddress, * sourceAddresses: networkFirewallPolicyDecryptionRuleConditionSourceAddress, * }, * networkFirewallPolicyId: testNetworkFirewallPolicy.id, * description: networkFirewallPolicyDecryptionRuleDescription, * decryptionProfile: networkFirewallPolicyDecryptionRuleDecryptionProfile, * secret: networkFirewallPolicyDecryptionRuleSecret, * position: { * afterRule: networkFirewallPolicyDecryptionRulePositionAfterRule, * beforeRule: networkFirewallPolicyDecryptionRulePositionBeforeRule, * }, * secrets: networkFirewallPolicyDecryptionRuleSecrets, * }); * ``` * * ## Import * * NetworkFirewallPolicyDecryptionRules can be imported using the `name`, e.g. * * ```sh * $ pulumi import oci:NetworkFirewall/networkFirewallPolicyDecryptionRule:NetworkFirewallPolicyDecryptionRule test_network_firewall_policy_decryption_rule "networkFirewallPolicies/{networkFirewallPolicyId}/decryptionRules/{decryptionRuleName}" * ``` */ export declare class NetworkFirewallPolicyDecryptionRule extends pulumi.CustomResource { /** * Get an existing NetworkFirewallPolicyDecryptionRule resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: NetworkFirewallPolicyDecryptionRuleState, opts?: pulumi.CustomResourceOptions): NetworkFirewallPolicyDecryptionRule; /** * Returns true if the given object is an instance of NetworkFirewallPolicyDecryptionRule. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is NetworkFirewallPolicyDecryptionRule; /** * (Updatable) Action: * * NO_DECRYPT - Matching traffic is not decrypted. * * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`. */ readonly action: pulumi.Output; /** * (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. */ readonly condition: pulumi.Output; /** * (Updatable) The name of the decryption profile to use. */ readonly decryptionProfile: pulumi.Output; /** * (Updatable) The description of the decryption rule. This field can be used to add additional info. */ readonly description: pulumi.Output; /** * Name for the decryption rule, must be unique within the policy. */ readonly name: pulumi.Output; /** * Unique Network Firewall Policy identifier */ readonly networkFirewallPolicyId: pulumi.Output; /** * OCID of the Network Firewall Policy this decryption rule belongs to. */ readonly parentResourceId: pulumi.Output; /** * (Updatable) An object which defines the position of the rule. Only one of `afterRule` or `beforeRule` should be provided. */ readonly position: pulumi.Output; readonly priorityOrder: pulumi.Output; /** * (Updatable) The name of a mapped secret. Its `type` must match that of the specified decryption profile. */ readonly secret: pulumi.Output; /** * (Updatable) An array of mapped secrets. Its `type` must match that of the specified decryption profile. */ readonly secrets: pulumi.Output; /** * Create a NetworkFirewallPolicyDecryptionRule resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: NetworkFirewallPolicyDecryptionRuleArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering NetworkFirewallPolicyDecryptionRule resources. */ export interface NetworkFirewallPolicyDecryptionRuleState { /** * (Updatable) Action: * * NO_DECRYPT - Matching traffic is not decrypted. * * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`. */ action?: pulumi.Input; /** * (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. */ condition?: pulumi.Input; /** * (Updatable) The name of the decryption profile to use. */ decryptionProfile?: pulumi.Input; /** * (Updatable) The description of the decryption rule. This field can be used to add additional info. */ description?: pulumi.Input; /** * Name for the decryption rule, must be unique within the policy. */ name?: pulumi.Input; /** * Unique Network Firewall Policy identifier */ networkFirewallPolicyId?: pulumi.Input; /** * OCID of the Network Firewall Policy this decryption rule belongs to. */ parentResourceId?: pulumi.Input; /** * (Updatable) An object which defines the position of the rule. Only one of `afterRule` or `beforeRule` should be provided. */ position?: pulumi.Input; priorityOrder?: pulumi.Input; /** * (Updatable) The name of a mapped secret. Its `type` must match that of the specified decryption profile. */ secret?: pulumi.Input; /** * (Updatable) An array of mapped secrets. Its `type` must match that of the specified decryption profile. */ secrets?: pulumi.Input[] | undefined>; } /** * The set of arguments for constructing a NetworkFirewallPolicyDecryptionRule resource. */ export interface NetworkFirewallPolicyDecryptionRuleArgs { /** * (Updatable) Action: * * NO_DECRYPT - Matching traffic is not decrypted. * * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`. */ action: pulumi.Input; /** * (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. */ condition: pulumi.Input; /** * (Updatable) The name of the decryption profile to use. */ decryptionProfile?: pulumi.Input; /** * (Updatable) The description of the decryption rule. This field can be used to add additional info. */ description?: pulumi.Input; /** * Name for the decryption rule, must be unique within the policy. */ name?: pulumi.Input; /** * Unique Network Firewall Policy identifier */ networkFirewallPolicyId: pulumi.Input; /** * (Updatable) An object which defines the position of the rule. Only one of `afterRule` or `beforeRule` should be provided. */ position?: pulumi.Input; priorityOrder?: pulumi.Input; /** * (Updatable) The name of a mapped secret. Its `type` must match that of the specified decryption profile. */ secret?: pulumi.Input; /** * (Updatable) An array of mapped secrets. Its `type` must match that of the specified decryption profile. */ secrets?: pulumi.Input[] | undefined>; } //# sourceMappingURL=networkFirewallPolicyDecryptionRule.d.ts.map