Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cisco Catalyst SD-WAN Provider
  3. API Docs
  4. DnsSecurityPolicyDefinition
Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi
pulumi/pulumi-sdwan

sdwan.DnsSecurityPolicyDefinition

Explore with Pulumi AI

sdwan logo
Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi
pulumi/pulumi-sdwan

    This resource can manage a DNS Security Policy Definition .

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as sdwan from "@pulumi/sdwan";

const example = new sdwan.DnsSecurityPolicyDefinition("example", {
    name: "Example",
    description: "Example",
    domainListId: "84f10c9d-def7-45a3-8c64-6df26163c861",
    localDomainBypassEnabled: false,
    matchAllVpn: true,
    dnscrypt: true,
    umbrellaDnsDefault: true,
    ciscoSigCredentialsFeatureTemplateId: "3ac6eef9-bd8f-458d-96a7-a932c90b1e75",
});

    import pulumi
import pulumi_sdwan as sdwan

example = sdwan.DnsSecurityPolicyDefinition("example",
    name="Example",
    description="Example",
    domain_list_id="84f10c9d-def7-45a3-8c64-6df26163c861",
    local_domain_bypass_enabled=False,
    match_all_vpn=True,
    dnscrypt=True,
    umbrella_dns_default=True,
    cisco_sig_credentials_feature_template_id="3ac6eef9-bd8f-458d-96a7-a932c90b1e75")

    package main

import (
	"github.com/pulumi/pulumi-sdwan/sdk/go/sdwan"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdwan.NewDnsSecurityPolicyDefinition(ctx, "example", &sdwan.DnsSecurityPolicyDefinitionArgs{
			Name:                                 pulumi.String("Example"),
			Description:                          pulumi.String("Example"),
			DomainListId:                         pulumi.String("84f10c9d-def7-45a3-8c64-6df26163c861"),
			LocalDomainBypassEnabled:             pulumi.Bool(false),
			MatchAllVpn:                          pulumi.Bool(true),
			Dnscrypt:                             pulumi.Bool(true),
			UmbrellaDnsDefault:                   pulumi.Bool(true),
			CiscoSigCredentialsFeatureTemplateId: pulumi.String("3ac6eef9-bd8f-458d-96a7-a932c90b1e75"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdwan = Pulumi.Sdwan;

return await Deployment.RunAsync(() => 
{
    var example = new Sdwan.DnsSecurityPolicyDefinition("example", new()
    {
        Name = "Example",
        Description = "Example",
        DomainListId = "84f10c9d-def7-45a3-8c64-6df26163c861",
        LocalDomainBypassEnabled = false,
        MatchAllVpn = true,
        Dnscrypt = true,
        UmbrellaDnsDefault = true,
        CiscoSigCredentialsFeatureTemplateId = "3ac6eef9-bd8f-458d-96a7-a932c90b1e75",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.DnsSecurityPolicyDefinition;
import com.pulumi.sdwan.DnsSecurityPolicyDefinitionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new DnsSecurityPolicyDefinition("example", DnsSecurityPolicyDefinitionArgs.builder()
            .name("Example")
            .description("Example")
            .domainListId("84f10c9d-def7-45a3-8c64-6df26163c861")
            .localDomainBypassEnabled(false)
            .matchAllVpn(true)
            .dnscrypt(true)
            .umbrellaDnsDefault(true)
            .ciscoSigCredentialsFeatureTemplateId("3ac6eef9-bd8f-458d-96a7-a932c90b1e75")
            .build());

    }
}

    resources:
  example:
    type: sdwan:DnsSecurityPolicyDefinition
    properties:
      name: Example
      description: Example
      domainListId: 84f10c9d-def7-45a3-8c64-6df26163c861
      localDomainBypassEnabled: false
      matchAllVpn: true
      dnscrypt: true
      umbrellaDnsDefault: true
      ciscoSigCredentialsFeatureTemplateId: 3ac6eef9-bd8f-458d-96a7-a932c90b1e75

    Create DnsSecurityPolicyDefinition Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DnsSecurityPolicyDefinition(name: string, args: DnsSecurityPolicyDefinitionArgs, opts?: CustomResourceOptions);
    @overload
def DnsSecurityPolicyDefinition(resource_name: str,
                                args: DnsSecurityPolicyDefinitionArgs,
                                opts: Optional[ResourceOptions] = None)

@overload
def DnsSecurityPolicyDefinition(resource_name: str,
                                opts: Optional[ResourceOptions] = None,
                                cisco_sig_credentials_feature_template_id: Optional[str] = None,
                                description: Optional[str] = None,
                                match_all_vpn: Optional[bool] = None,
                                umbrella_dns_default: Optional[bool] = None,
                                cisco_sig_credentials_feature_template_version: Optional[int] = None,
                                custom_dns_server_ip: Optional[str] = None,
                                dnscrypt: Optional[bool] = None,
                                domain_list_id: Optional[str] = None,
                                domain_list_version: Optional[int] = None,
                                local_domain_bypass_enabled: Optional[bool] = None,
                                name: Optional[str] = None,
                                target_vpns: Optional[Sequence[DnsSecurityPolicyDefinitionTargetVpnArgs]] = None)
    func NewDnsSecurityPolicyDefinition(ctx *Context, name string, args DnsSecurityPolicyDefinitionArgs, opts ...ResourceOption) (*DnsSecurityPolicyDefinition, error)
    public DnsSecurityPolicyDefinition(string name, DnsSecurityPolicyDefinitionArgs args, CustomResourceOptions? opts = null)
    public DnsSecurityPolicyDefinition(String name, DnsSecurityPolicyDefinitionArgs args)
public DnsSecurityPolicyDefinition(String name, DnsSecurityPolicyDefinitionArgs args, CustomResourceOptions options)

    type: sdwan:DnsSecurityPolicyDefinition
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args DnsSecurityPolicyDefinitionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DnsSecurityPolicyDefinitionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DnsSecurityPolicyDefinitionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DnsSecurityPolicyDefinitionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DnsSecurityPolicyDefinitionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var dnsSecurityPolicyDefinitionResource = new Sdwan.DnsSecurityPolicyDefinition("dnsSecurityPolicyDefinitionResource", new()
{
    CiscoSigCredentialsFeatureTemplateId = "string",
    Description = "string",
    MatchAllVpn = false,
    UmbrellaDnsDefault = false,
    CiscoSigCredentialsFeatureTemplateVersion = 0,
    CustomDnsServerIp = "string",
    Dnscrypt = false,
    DomainListId = "string",
    DomainListVersion = 0,
    LocalDomainBypassEnabled = false,
    Name = "string",
    TargetVpns = new[]
    {
        new Sdwan.Inputs.DnsSecurityPolicyDefinitionTargetVpnArgs
        {
            CustomDnsServerIp = "string",
            LocalDomainBypassEnabled = false,
            UmbrellaDnsDefault = false,
            VpnIds = new[]
            {
                "string",
            },
        },
    },
});

    example, err := sdwan.NewDnsSecurityPolicyDefinition(ctx, "dnsSecurityPolicyDefinitionResource", &sdwan.DnsSecurityPolicyDefinitionArgs{
	CiscoSigCredentialsFeatureTemplateId:      pulumi.String("string"),
	Description:                               pulumi.String("string"),
	MatchAllVpn:                               pulumi.Bool(false),
	UmbrellaDnsDefault:                        pulumi.Bool(false),
	CiscoSigCredentialsFeatureTemplateVersion: pulumi.Int(0),
	CustomDnsServerIp:                         pulumi.String("string"),
	Dnscrypt:                                  pulumi.Bool(false),
	DomainListId:                              pulumi.String("string"),
	DomainListVersion:                         pulumi.Int(0),
	LocalDomainBypassEnabled:                  pulumi.Bool(false),
	Name:                                      pulumi.String("string"),
	TargetVpns: sdwan.DnsSecurityPolicyDefinitionTargetVpnArray{
		&sdwan.DnsSecurityPolicyDefinitionTargetVpnArgs{
			CustomDnsServerIp:        pulumi.String("string"),
			LocalDomainBypassEnabled: pulumi.Bool(false),
			UmbrellaDnsDefault:       pulumi.Bool(false),
			VpnIds: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
})

    var dnsSecurityPolicyDefinitionResource = new DnsSecurityPolicyDefinition("dnsSecurityPolicyDefinitionResource", DnsSecurityPolicyDefinitionArgs.builder()
    .ciscoSigCredentialsFeatureTemplateId("string")
    .description("string")
    .matchAllVpn(false)
    .umbrellaDnsDefault(false)
    .ciscoSigCredentialsFeatureTemplateVersion(0)
    .customDnsServerIp("string")
    .dnscrypt(false)
    .domainListId("string")
    .domainListVersion(0)
    .localDomainBypassEnabled(false)
    .name("string")
    .targetVpns(DnsSecurityPolicyDefinitionTargetVpnArgs.builder()
        .customDnsServerIp("string")
        .localDomainBypassEnabled(false)
        .umbrellaDnsDefault(false)
        .vpnIds("string")
        .build())
    .build());

    dns_security_policy_definition_resource = sdwan.DnsSecurityPolicyDefinition("dnsSecurityPolicyDefinitionResource",
    cisco_sig_credentials_feature_template_id="string",
    description="string",
    match_all_vpn=False,
    umbrella_dns_default=False,
    cisco_sig_credentials_feature_template_version=0,
    custom_dns_server_ip="string",
    dnscrypt=False,
    domain_list_id="string",
    domain_list_version=0,
    local_domain_bypass_enabled=False,
    name="string",
    target_vpns=[{
        "custom_dns_server_ip": "string",
        "local_domain_bypass_enabled": False,
        "umbrella_dns_default": False,
        "vpn_ids": ["string"],
    }])

    const dnsSecurityPolicyDefinitionResource = new sdwan.DnsSecurityPolicyDefinition("dnsSecurityPolicyDefinitionResource", {
    ciscoSigCredentialsFeatureTemplateId: "string",
    description: "string",
    matchAllVpn: false,
    umbrellaDnsDefault: false,
    ciscoSigCredentialsFeatureTemplateVersion: 0,
    customDnsServerIp: "string",
    dnscrypt: false,
    domainListId: "string",
    domainListVersion: 0,
    localDomainBypassEnabled: false,
    name: "string",
    targetVpns: [{
        customDnsServerIp: "string",
        localDomainBypassEnabled: false,
        umbrellaDnsDefault: false,
        vpnIds: ["string"],
    }],
});

    type: sdwan:DnsSecurityPolicyDefinition
properties:
    ciscoSigCredentialsFeatureTemplateId: string
    ciscoSigCredentialsFeatureTemplateVersion: 0
    customDnsServerIp: string
    description: string
    dnscrypt: false
    domainListId: string
    domainListVersion: 0
    localDomainBypassEnabled: false
    matchAllVpn: false
    name: string
    targetVpns:
        - customDnsServerIp: string
          localDomainBypassEnabled: false
          umbrellaDnsDefault: false
          vpnIds:
            - string
    umbrellaDnsDefault: false

    DnsSecurityPolicyDefinition Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DnsSecurityPolicyDefinition resource accepts the following input properties:

    CiscoSigCredentialsFeatureTemplateId string
    Credentials feature template ID
    Description string
    The description of the policy definition.
    MatchAllVpn bool
    Should use match all VPN
    UmbrellaDnsDefault bool
    Should use umbrella as DNS Server
    CiscoSigCredentialsFeatureTemplateVersion int
    Credentials feature template version
    CustomDnsServerIp string
    Only relevant when umbrella_dns_default is false
    Dnscrypt bool
    Should DNSCrypt be enabled
    DomainListId string
    Local domain bypass list ID
    DomainListVersion int
    Local domain bypass list version
    LocalDomainBypassEnabled bool
    Should the local domain bypass list be enabled
    Name string
    The name of the policy definition.
    TargetVpns List<DnsSecurityPolicyDefinitionTargetVpn>
    Only relevant when match_all_vpn is false
    CiscoSigCredentialsFeatureTemplateId string
    Credentials feature template ID
    Description string
    The description of the policy definition.
    MatchAllVpn bool
    Should use match all VPN
    UmbrellaDnsDefault bool
    Should use umbrella as DNS Server
    CiscoSigCredentialsFeatureTemplateVersion int
    Credentials feature template version
    CustomDnsServerIp string
    Only relevant when umbrella_dns_default is false
    Dnscrypt bool
    Should DNSCrypt be enabled
    DomainListId string
    Local domain bypass list ID
    DomainListVersion int
    Local domain bypass list version
    LocalDomainBypassEnabled bool
    Should the local domain bypass list be enabled
    Name string
    The name of the policy definition.
    TargetVpns []DnsSecurityPolicyDefinitionTargetVpnArgs
    Only relevant when match_all_vpn is false
    ciscoSigCredentialsFeatureTemplateId String
    Credentials feature template ID
    description String
    The description of the policy definition.
    matchAllVpn Boolean
    Should use match all VPN
    umbrellaDnsDefault Boolean
    Should use umbrella as DNS Server
    ciscoSigCredentialsFeatureTemplateVersion Integer
    Credentials feature template version
    customDnsServerIp String
    Only relevant when umbrella_dns_default is false
    dnscrypt Boolean
    Should DNSCrypt be enabled
    domainListId String
    Local domain bypass list ID
    domainListVersion Integer
    Local domain bypass list version
    localDomainBypassEnabled Boolean
    Should the local domain bypass list be enabled
    name String
    The name of the policy definition.
    targetVpns List<DnsSecurityPolicyDefinitionTargetVpn>
    Only relevant when match_all_vpn is false
    ciscoSigCredentialsFeatureTemplateId string
    Credentials feature template ID
    description string
    The description of the policy definition.
    matchAllVpn boolean
    Should use match all VPN
    umbrellaDnsDefault boolean
    Should use umbrella as DNS Server
    ciscoSigCredentialsFeatureTemplateVersion number
    Credentials feature template version
    customDnsServerIp string
    Only relevant when umbrella_dns_default is false
    dnscrypt boolean
    Should DNSCrypt be enabled
    domainListId string
    Local domain bypass list ID
    domainListVersion number
    Local domain bypass list version
    localDomainBypassEnabled boolean
    Should the local domain bypass list be enabled
    name string
    The name of the policy definition.
    targetVpns DnsSecurityPolicyDefinitionTargetVpn[]
    Only relevant when match_all_vpn is false
    cisco_sig_credentials_feature_template_id str
    Credentials feature template ID
    description str
    The description of the policy definition.
    match_all_vpn bool
    Should use match all VPN
    umbrella_dns_default bool
    Should use umbrella as DNS Server
    cisco_sig_credentials_feature_template_version int
    Credentials feature template version
    custom_dns_server_ip str
    Only relevant when umbrella_dns_default is false
    dnscrypt bool
    Should DNSCrypt be enabled
    domain_list_id str
    Local domain bypass list ID
    domain_list_version int
    Local domain bypass list version
    local_domain_bypass_enabled bool
    Should the local domain bypass list be enabled
    name str
    The name of the policy definition.
    target_vpns Sequence[DnsSecurityPolicyDefinitionTargetVpnArgs]
    Only relevant when match_all_vpn is false
    ciscoSigCredentialsFeatureTemplateId String
    Credentials feature template ID
    description String
    The description of the policy definition.
    matchAllVpn Boolean
    Should use match all VPN
    umbrellaDnsDefault Boolean
    Should use umbrella as DNS Server
    ciscoSigCredentialsFeatureTemplateVersion Number
    Credentials feature template version
    customDnsServerIp String
    Only relevant when umbrella_dns_default is false
    dnscrypt Boolean
    Should DNSCrypt be enabled
    domainListId String
    Local domain bypass list ID
    domainListVersion Number
    Local domain bypass list version
    localDomainBypassEnabled Boolean
    Should the local domain bypass list be enabled
    name String
    The name of the policy definition.
    targetVpns List<Property Map>
    Only relevant when match_all_vpn is false

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DnsSecurityPolicyDefinition resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the object
    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the object
    id String
    The provider-assigned unique ID for this managed resource.
    version Integer
    The version of the object
    id string
    The provider-assigned unique ID for this managed resource.
    version number
    The version of the object
    id str
    The provider-assigned unique ID for this managed resource.
    version int
    The version of the object
    id String
    The provider-assigned unique ID for this managed resource.
    version Number
    The version of the object

    Look up Existing DnsSecurityPolicyDefinition Resource

    Get an existing DnsSecurityPolicyDefinition resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DnsSecurityPolicyDefinitionState, opts?: CustomResourceOptions): DnsSecurityPolicyDefinition
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        cisco_sig_credentials_feature_template_id: Optional[str] = None,
        cisco_sig_credentials_feature_template_version: Optional[int] = None,
        custom_dns_server_ip: Optional[str] = None,
        description: Optional[str] = None,
        dnscrypt: Optional[bool] = None,
        domain_list_id: Optional[str] = None,
        domain_list_version: Optional[int] = None,
        local_domain_bypass_enabled: Optional[bool] = None,
        match_all_vpn: Optional[bool] = None,
        name: Optional[str] = None,
        target_vpns: Optional[Sequence[DnsSecurityPolicyDefinitionTargetVpnArgs]] = None,
        umbrella_dns_default: Optional[bool] = None,
        version: Optional[int] = None) -> DnsSecurityPolicyDefinition
    func GetDnsSecurityPolicyDefinition(ctx *Context, name string, id IDInput, state *DnsSecurityPolicyDefinitionState, opts ...ResourceOption) (*DnsSecurityPolicyDefinition, error)
    public static DnsSecurityPolicyDefinition Get(string name, Input<string> id, DnsSecurityPolicyDefinitionState? state, CustomResourceOptions? opts = null)
    public static DnsSecurityPolicyDefinition get(String name, Output<String> id, DnsSecurityPolicyDefinitionState state, CustomResourceOptions options)
    resources:  _:    type: sdwan:DnsSecurityPolicyDefinition    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CiscoSigCredentialsFeatureTemplateId string
    Credentials feature template ID
    CiscoSigCredentialsFeatureTemplateVersion int
    Credentials feature template version
    CustomDnsServerIp string
    Only relevant when umbrella_dns_default is false
    Description string
    The description of the policy definition.
    Dnscrypt bool
    Should DNSCrypt be enabled
    DomainListId string
    Local domain bypass list ID
    DomainListVersion int
    Local domain bypass list version
    LocalDomainBypassEnabled bool
    Should the local domain bypass list be enabled
    MatchAllVpn bool
    Should use match all VPN
    Name string
    The name of the policy definition.
    TargetVpns List<DnsSecurityPolicyDefinitionTargetVpn>
    Only relevant when match_all_vpn is false
    UmbrellaDnsDefault bool
    Should use umbrella as DNS Server
    Version int
    The version of the object
    CiscoSigCredentialsFeatureTemplateId string
    Credentials feature template ID
    CiscoSigCredentialsFeatureTemplateVersion int
    Credentials feature template version
    CustomDnsServerIp string
    Only relevant when umbrella_dns_default is false
    Description string
    The description of the policy definition.
    Dnscrypt bool
    Should DNSCrypt be enabled
    DomainListId string
    Local domain bypass list ID
    DomainListVersion int
    Local domain bypass list version
    LocalDomainBypassEnabled bool
    Should the local domain bypass list be enabled
    MatchAllVpn bool
    Should use match all VPN
    Name string
    The name of the policy definition.
    TargetVpns []DnsSecurityPolicyDefinitionTargetVpnArgs
    Only relevant when match_all_vpn is false
    UmbrellaDnsDefault bool
    Should use umbrella as DNS Server
    Version int
    The version of the object
    ciscoSigCredentialsFeatureTemplateId String
    Credentials feature template ID
    ciscoSigCredentialsFeatureTemplateVersion Integer
    Credentials feature template version
    customDnsServerIp String
    Only relevant when umbrella_dns_default is false
    description String
    The description of the policy definition.
    dnscrypt Boolean
    Should DNSCrypt be enabled
    domainListId String
    Local domain bypass list ID
    domainListVersion Integer
    Local domain bypass list version
    localDomainBypassEnabled Boolean
    Should the local domain bypass list be enabled
    matchAllVpn Boolean
    Should use match all VPN
    name String
    The name of the policy definition.
    targetVpns List<DnsSecurityPolicyDefinitionTargetVpn>
    Only relevant when match_all_vpn is false
    umbrellaDnsDefault Boolean
    Should use umbrella as DNS Server
    version Integer
    The version of the object
    ciscoSigCredentialsFeatureTemplateId string
    Credentials feature template ID
    ciscoSigCredentialsFeatureTemplateVersion number
    Credentials feature template version
    customDnsServerIp string
    Only relevant when umbrella_dns_default is false
    description string
    The description of the policy definition.
    dnscrypt boolean
    Should DNSCrypt be enabled
    domainListId string
    Local domain bypass list ID
    domainListVersion number
    Local domain bypass list version
    localDomainBypassEnabled boolean
    Should the local domain bypass list be enabled
    matchAllVpn boolean
    Should use match all VPN
    name string
    The name of the policy definition.
    targetVpns DnsSecurityPolicyDefinitionTargetVpn[]
    Only relevant when match_all_vpn is false
    umbrellaDnsDefault boolean
    Should use umbrella as DNS Server
    version number
    The version of the object
    cisco_sig_credentials_feature_template_id str
    Credentials feature template ID
    cisco_sig_credentials_feature_template_version int
    Credentials feature template version
    custom_dns_server_ip str
    Only relevant when umbrella_dns_default is false
    description str
    The description of the policy definition.
    dnscrypt bool
    Should DNSCrypt be enabled
    domain_list_id str
    Local domain bypass list ID
    domain_list_version int
    Local domain bypass list version
    local_domain_bypass_enabled bool
    Should the local domain bypass list be enabled
    match_all_vpn bool
    Should use match all VPN
    name str
    The name of the policy definition.
    target_vpns Sequence[DnsSecurityPolicyDefinitionTargetVpnArgs]
    Only relevant when match_all_vpn is false
    umbrella_dns_default bool
    Should use umbrella as DNS Server
    version int
    The version of the object
    ciscoSigCredentialsFeatureTemplateId String
    Credentials feature template ID
    ciscoSigCredentialsFeatureTemplateVersion Number
    Credentials feature template version
    customDnsServerIp String
    Only relevant when umbrella_dns_default is false
    description String
    The description of the policy definition.
    dnscrypt Boolean
    Should DNSCrypt be enabled
    domainListId String
    Local domain bypass list ID
    domainListVersion Number
    Local domain bypass list version
    localDomainBypassEnabled Boolean
    Should the local domain bypass list be enabled
    matchAllVpn Boolean
    Should use match all VPN
    name String
    The name of the policy definition.
    targetVpns List<Property Map>
    Only relevant when match_all_vpn is false
    umbrellaDnsDefault Boolean
    Should use umbrella as DNS Server
    version Number
    The version of the object

    Supporting Types

    DnsSecurityPolicyDefinitionTargetVpn, DnsSecurityPolicyDefinitionTargetVpnArgs

    CustomDnsServerIp string
    Only relevant when umbrella_dns_default is false
    LocalDomainBypassEnabled bool
    Should the local domain bypass list be enabled
    UmbrellaDnsDefault bool
    Should use umbrella as DNS Server
    VpnIds List<string>
    VPN ID's separated by Comma
    CustomDnsServerIp string
    Only relevant when umbrella_dns_default is false
    LocalDomainBypassEnabled bool
    Should the local domain bypass list be enabled
    UmbrellaDnsDefault bool
    Should use umbrella as DNS Server
    VpnIds []string
    VPN ID's separated by Comma
    customDnsServerIp String
    Only relevant when umbrella_dns_default is false
    localDomainBypassEnabled Boolean
    Should the local domain bypass list be enabled
    umbrellaDnsDefault Boolean
    Should use umbrella as DNS Server
    vpnIds List<String>
    VPN ID's separated by Comma
    customDnsServerIp string
    Only relevant when umbrella_dns_default is false
    localDomainBypassEnabled boolean
    Should the local domain bypass list be enabled
    umbrellaDnsDefault boolean
    Should use umbrella as DNS Server
    vpnIds string[]
    VPN ID's separated by Comma
    custom_dns_server_ip str
    Only relevant when umbrella_dns_default is false
    local_domain_bypass_enabled bool
    Should the local domain bypass list be enabled
    umbrella_dns_default bool
    Should use umbrella as DNS Server
    vpn_ids Sequence[str]
    VPN ID's separated by Comma
    customDnsServerIp String
    Only relevant when umbrella_dns_default is false
    localDomainBypassEnabled Boolean
    Should the local domain bypass list be enabled
    umbrellaDnsDefault Boolean
    Should use umbrella as DNS Server
    vpnIds List<String>
    VPN ID's separated by Comma

    Import

    $ pulumi import sdwan:index/dnsSecurityPolicyDefinition:DnsSecurityPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    sdwan pulumi/pulumi-sdwan
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the sdwan Terraform Provider.
    sdwan logo
    Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi
    pulumi/pulumi-sdwan