Cisco Catalyst SD-WAN v0.3.0, Mar 28 25

Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi

sdwan.TlsSslDecryptionPolicyDefinition

Explore with Pulumi AI

Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi

Example Usage

Coming soon!

Coming soon!

Coming soon!

Coming soon!

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.TlsSslDecryptionPolicyDefinition;
import com.pulumi.sdwan.TlsSslDecryptionPolicyDefinitionArgs;
import com.pulumi.sdwan.inputs.TlsSslDecryptionPolicyDefinitionNetworkRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new TlsSslDecryptionPolicyDefinition("example", TlsSslDecryptionPolicyDefinitionArgs.builder()
            .name("Example")
            .description("My description")
            .mode("security")
            .defaultAction("noIntent")
            .networkRules(TlsSslDecryptionPolicyDefinitionNetworkRuleArgs.builder()
                .base_action("doNotDecrypt")
                .rule_id(4)
                .rule_name("Example")
                .rule_type("sslDecryption")
                .source_and_destination_configuration(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                .build())
            .sslDecryptionEnabled("true")
            .expiredCertificate("drop")
            .untrustedCertificate("drop")
            .certificateRevocationStatus("none")
            .unknownRevocationStatus("drop")
            .unsupportedProtocolVersions("drop")
            .unsupportedCipherSuites("drop")
            .failureMode("close")
            .rsaKeyPairModulus("2048")
            .ecKeyType("P384")
            .certificateLifetimeInDays(1)
            .minimalTlsVersion("TLSv1.2")
            .useDefaultCaCertBundle(true)
            .build());

    }
}

resources:
  example:
    type: sdwan:TlsSslDecryptionPolicyDefinition
    properties:
      name: Example
      description: My description
      mode: security
      defaultAction: noIntent
      networkRules:
        - base_action: doNotDecrypt
          rule_id: 4
          rule_name: Example
          rule_type: sslDecryption
          source_and_destination_configuration:
            - option: destinationIp
              value: 10.0.0.0/12
      sslDecryptionEnabled: 'true'
      expiredCertificate: drop
      untrustedCertificate: drop
      certificateRevocationStatus: none
      unknownRevocationStatus: drop
      unsupportedProtocolVersions: drop
      unsupportedCipherSuites: drop
      failureMode: close
      rsaKeyPairModulus: '2048'
      ecKeyType: P384
      certificateLifetimeInDays: 1
      minimalTlsVersion: TLSv1.2
      useDefaultCaCertBundle: true

Create TlsSslDecryptionPolicyDefinition Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new TlsSslDecryptionPolicyDefinition(name: string, args: TlsSslDecryptionPolicyDefinitionArgs, opts?: CustomResourceOptions);

@overload
def TlsSslDecryptionPolicyDefinition(resource_name: str,
                                     args: TlsSslDecryptionPolicyDefinitionArgs,
                                     opts: Optional[ResourceOptions] = None)

@overload
def TlsSslDecryptionPolicyDefinition(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     description: Optional[str] = None,
                                     mode: Optional[str] = None,
                                     certificate_revocation_status: Optional[str] = None,
                                     network_rules: Optional[Sequence[TlsSslDecryptionPolicyDefinitionNetworkRuleArgs]] = None,
                                     rsa_key_pair_modulus: Optional[str] = None,
                                     expired_certificate: Optional[str] = None,
                                     failure_mode: Optional[str] = None,
                                     minimal_tls_version: Optional[str] = None,
                                     certificate_lifetime_in_days: Optional[int] = None,
                                     use_default_ca_cert_bundle: Optional[bool] = None,
                                     default_action: Optional[str] = None,
                                     ec_key_type: Optional[str] = None,
                                     ssl_decryption_enabled: Optional[str] = None,
                                     unknown_revocation_status: Optional[str] = None,
                                     unsupported_cipher_suites: Optional[str] = None,
                                     unsupported_protocol_versions: Optional[str] = None,
                                     untrusted_certificate: Optional[str] = None,
                                     url_rules: Optional[Sequence[TlsSslDecryptionPolicyDefinitionUrlRuleArgs]] = None,
                                     name: Optional[str] = None)

func NewTlsSslDecryptionPolicyDefinition(ctx *Context, name string, args TlsSslDecryptionPolicyDefinitionArgs, opts ...ResourceOption) (*TlsSslDecryptionPolicyDefinition, error)

public TlsSslDecryptionPolicyDefinition(string name, TlsSslDecryptionPolicyDefinitionArgs args, CustomResourceOptions? opts = null)

public TlsSslDecryptionPolicyDefinition(String name, TlsSslDecryptionPolicyDefinitionArgs args)
public TlsSslDecryptionPolicyDefinition(String name, TlsSslDecryptionPolicyDefinitionArgs args, CustomResourceOptions options)

type: sdwan:TlsSslDecryptionPolicyDefinition
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args TlsSslDecryptionPolicyDefinitionArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args TlsSslDecryptionPolicyDefinitionArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args TlsSslDecryptionPolicyDefinitionArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args TlsSslDecryptionPolicyDefinitionArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args TlsSslDecryptionPolicyDefinitionArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var tlsSslDecryptionPolicyDefinitionResource = new Sdwan.TlsSslDecryptionPolicyDefinition("tlsSslDecryptionPolicyDefinitionResource", new()
{
    Description = "string",
    Mode = "string",
    CertificateRevocationStatus = "string",
    NetworkRules = new[]
    {
        new Sdwan.Inputs.TlsSslDecryptionPolicyDefinitionNetworkRuleArgs
        {
            BaseAction = "string",
            RuleId = 0,
            RuleName = "string",
            RuleType = "string",
            SourceAndDestinationConfigurations = new[]
            {
                new Sdwan.Inputs.TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfigurationArgs
                {
                    Option = "string",
                    Value = "string",
                },
            },
        },
    },
    RsaKeyPairModulus = "string",
    ExpiredCertificate = "string",
    FailureMode = "string",
    MinimalTlsVersion = "string",
    CertificateLifetimeInDays = 0,
    UseDefaultCaCertBundle = false,
    DefaultAction = "string",
    EcKeyType = "string",
    SslDecryptionEnabled = "string",
    UnknownRevocationStatus = "string",
    UnsupportedCipherSuites = "string",
    UnsupportedProtocolVersions = "string",
    UntrustedCertificate = "string",
    UrlRules = new[]
    {
        new Sdwan.Inputs.TlsSslDecryptionPolicyDefinitionUrlRuleArgs
        {
            RuleName = "string",
            TargetVpns = new[]
            {
                "string",
            },
            TlsSslProfilePolicyId = "string",
            TlsSslProfileVersion = 0,
        },
    },
    Name = "string",
});

example, err := sdwan.NewTlsSslDecryptionPolicyDefinition(ctx, "tlsSslDecryptionPolicyDefinitionResource", &sdwan.TlsSslDecryptionPolicyDefinitionArgs{
	Description:                 pulumi.String("string"),
	Mode:                        pulumi.String("string"),
	CertificateRevocationStatus: pulumi.String("string"),
	NetworkRules: sdwan.TlsSslDecryptionPolicyDefinitionNetworkRuleArray{
		&sdwan.TlsSslDecryptionPolicyDefinitionNetworkRuleArgs{
			BaseAction: pulumi.String("string"),
			RuleId:     pulumi.Int(0),
			RuleName:   pulumi.String("string"),
			RuleType:   pulumi.String("string"),
			SourceAndDestinationConfigurations: sdwan.TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfigurationArray{
				&sdwan.TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfigurationArgs{
					Option: pulumi.String("string"),
					Value:  pulumi.String("string"),
				},
			},
		},
	},
	RsaKeyPairModulus:           pulumi.String("string"),
	ExpiredCertificate:          pulumi.String("string"),
	FailureMode:                 pulumi.String("string"),
	MinimalTlsVersion:           pulumi.String("string"),
	CertificateLifetimeInDays:   pulumi.Int(0),
	UseDefaultCaCertBundle:      pulumi.Bool(false),
	DefaultAction:               pulumi.String("string"),
	EcKeyType:                   pulumi.String("string"),
	SslDecryptionEnabled:        pulumi.String("string"),
	UnknownRevocationStatus:     pulumi.String("string"),
	UnsupportedCipherSuites:     pulumi.String("string"),
	UnsupportedProtocolVersions: pulumi.String("string"),
	UntrustedCertificate:        pulumi.String("string"),
	UrlRules: sdwan.TlsSslDecryptionPolicyDefinitionUrlRuleArray{
		&sdwan.TlsSslDecryptionPolicyDefinitionUrlRuleArgs{
			RuleName: pulumi.String("string"),
			TargetVpns: pulumi.StringArray{
				pulumi.String("string"),
			},
			TlsSslProfilePolicyId: pulumi.String("string"),
			TlsSslProfileVersion:  pulumi.Int(0),
		},
	},
	Name: pulumi.String("string"),
})

var tlsSslDecryptionPolicyDefinitionResource = new TlsSslDecryptionPolicyDefinition("tlsSslDecryptionPolicyDefinitionResource", TlsSslDecryptionPolicyDefinitionArgs.builder()
    .description("string")
    .mode("string")
    .certificateRevocationStatus("string")
    .networkRules(TlsSslDecryptionPolicyDefinitionNetworkRuleArgs.builder()
        .baseAction("string")
        .ruleId(0)
        .ruleName("string")
        .ruleType("string")
        .sourceAndDestinationConfigurations(TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfigurationArgs.builder()
            .option("string")
            .value("string")
            .build())
        .build())
    .rsaKeyPairModulus("string")
    .expiredCertificate("string")
    .failureMode("string")
    .minimalTlsVersion("string")
    .certificateLifetimeInDays(0)
    .useDefaultCaCertBundle(false)
    .defaultAction("string")
    .ecKeyType("string")
    .sslDecryptionEnabled("string")
    .unknownRevocationStatus("string")
    .unsupportedCipherSuites("string")
    .unsupportedProtocolVersions("string")
    .untrustedCertificate("string")
    .urlRules(TlsSslDecryptionPolicyDefinitionUrlRuleArgs.builder()
        .ruleName("string")
        .targetVpns("string")
        .tlsSslProfilePolicyId("string")
        .tlsSslProfileVersion(0)
        .build())
    .name("string")
    .build());

tls_ssl_decryption_policy_definition_resource = sdwan.TlsSslDecryptionPolicyDefinition("tlsSslDecryptionPolicyDefinitionResource",
    description="string",
    mode="string",
    certificate_revocation_status="string",
    network_rules=[{
        "base_action": "string",
        "rule_id": 0,
        "rule_name": "string",
        "rule_type": "string",
        "source_and_destination_configurations": [{
            "option": "string",
            "value": "string",
        }],
    }],
    rsa_key_pair_modulus="string",
    expired_certificate="string",
    failure_mode="string",
    minimal_tls_version="string",
    certificate_lifetime_in_days=0,
    use_default_ca_cert_bundle=False,
    default_action="string",
    ec_key_type="string",
    ssl_decryption_enabled="string",
    unknown_revocation_status="string",
    unsupported_cipher_suites="string",
    unsupported_protocol_versions="string",
    untrusted_certificate="string",
    url_rules=[{
        "rule_name": "string",
        "target_vpns": ["string"],
        "tls_ssl_profile_policy_id": "string",
        "tls_ssl_profile_version": 0,
    }],
    name="string")

const tlsSslDecryptionPolicyDefinitionResource = new sdwan.TlsSslDecryptionPolicyDefinition("tlsSslDecryptionPolicyDefinitionResource", {
    description: "string",
    mode: "string",
    certificateRevocationStatus: "string",
    networkRules: [{
        baseAction: "string",
        ruleId: 0,
        ruleName: "string",
        ruleType: "string",
        sourceAndDestinationConfigurations: [{
            option: "string",
            value: "string",
        }],
    }],
    rsaKeyPairModulus: "string",
    expiredCertificate: "string",
    failureMode: "string",
    minimalTlsVersion: "string",
    certificateLifetimeInDays: 0,
    useDefaultCaCertBundle: false,
    defaultAction: "string",
    ecKeyType: "string",
    sslDecryptionEnabled: "string",
    unknownRevocationStatus: "string",
    unsupportedCipherSuites: "string",
    unsupportedProtocolVersions: "string",
    untrustedCertificate: "string",
    urlRules: [{
        ruleName: "string",
        targetVpns: ["string"],
        tlsSslProfilePolicyId: "string",
        tlsSslProfileVersion: 0,
    }],
    name: "string",
});

type: sdwan:TlsSslDecryptionPolicyDefinition
properties:
    certificateLifetimeInDays: 0
    certificateRevocationStatus: string
    defaultAction: string
    description: string
    ecKeyType: string
    expiredCertificate: string
    failureMode: string
    minimalTlsVersion: string
    mode: string
    name: string
    networkRules:
        - baseAction: string
          ruleId: 0
          ruleName: string
          ruleType: string
          sourceAndDestinationConfigurations:
            - option: string
              value: string
    rsaKeyPairModulus: string
    sslDecryptionEnabled: string
    unknownRevocationStatus: string
    unsupportedCipherSuites: string
    unsupportedProtocolVersions: string
    untrustedCertificate: string
    urlRules:
        - ruleName: string
          targetVpns:
            - string
          tlsSslProfilePolicyId: string
          tlsSslProfileVersion: 0
    useDefaultCaCertBundle: false

TlsSslDecryptionPolicyDefinition Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The TlsSslDecryptionPolicyDefinition resource accepts the following input properties:

Description string: The description of the policy definition.
CertificateLifetimeInDays int: Certificate Lifetime(in Days)
CertificateRevocationStatus string: Certificate revocation status - Choices: ocsp, none
DefaultAction string: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
EcKeyType string: EC Key Type - Choices: P256, P384, P521
ExpiredCertificate string: Expired certificate action - Choices: drop, decrypt
FailureMode string: Failure mode - Choices: open, close
MinimalTlsVersion string: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
Mode string: The policy mode - Choices: security, unified
Name string: The name of the policy definition.
NetworkRules List<TlsSslDecryptionPolicyDefinitionNetworkRule>: List of network rules (applies when mode set to security)
RsaKeyPairModulus string: RSA key pair modules - Choices: 1024, 2048, 4096
SslDecryptionEnabled string: SSL decryption enabled
UnknownRevocationStatus string: Unknown revocation status action - Choices: drop, decrypt
UnsupportedCipherSuites string: Unsupported cipher suites action - Choices: drop, no-decrypt
UnsupportedProtocolVersions string: Unsupported protocol versions action - Choices: drop, no-decrypt
UntrustedCertificate string: Untrusted certificate action - Choices: drop, decrypt
UrlRules List<TlsSslDecryptionPolicyDefinitionUrlRule>: List of url rules (applies when mode set to security)
UseDefaultCaCertBundle bool: Use default CA certificate bundle

Description string: The description of the policy definition.
CertificateLifetimeInDays int: Certificate Lifetime(in Days)
CertificateRevocationStatus string: Certificate revocation status - Choices: ocsp, none
DefaultAction string: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
EcKeyType string: EC Key Type - Choices: P256, P384, P521
ExpiredCertificate string: Expired certificate action - Choices: drop, decrypt
FailureMode string: Failure mode - Choices: open, close
MinimalTlsVersion string: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
Mode string: The policy mode - Choices: security, unified
Name string: The name of the policy definition.
NetworkRules []TlsSslDecryptionPolicyDefinitionNetworkRuleArgs: List of network rules (applies when mode set to security)
RsaKeyPairModulus string: RSA key pair modules - Choices: 1024, 2048, 4096
SslDecryptionEnabled string: SSL decryption enabled
UnknownRevocationStatus string: Unknown revocation status action - Choices: drop, decrypt
UnsupportedCipherSuites string: Unsupported cipher suites action - Choices: drop, no-decrypt
UnsupportedProtocolVersions string: Unsupported protocol versions action - Choices: drop, no-decrypt
UntrustedCertificate string: Untrusted certificate action - Choices: drop, decrypt
UrlRules []TlsSslDecryptionPolicyDefinitionUrlRuleArgs: List of url rules (applies when mode set to security)
UseDefaultCaCertBundle bool: Use default CA certificate bundle

description String: The description of the policy definition.
certificateLifetimeInDays Integer: Certificate Lifetime(in Days)
certificateRevocationStatus String: Certificate revocation status - Choices: ocsp, none
defaultAction String: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
ecKeyType String: EC Key Type - Choices: P256, P384, P521
expiredCertificate String: Expired certificate action - Choices: drop, decrypt
failureMode String: Failure mode - Choices: open, close
minimalTlsVersion String: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
mode String: The policy mode - Choices: security, unified
name String: The name of the policy definition.
networkRules List<TlsSslDecryptionPolicyDefinitionNetworkRule>: List of network rules (applies when mode set to security)
rsaKeyPairModulus String: RSA key pair modules - Choices: 1024, 2048, 4096
sslDecryptionEnabled String: SSL decryption enabled
unknownRevocationStatus String: Unknown revocation status action - Choices: drop, decrypt
unsupportedCipherSuites String: Unsupported cipher suites action - Choices: drop, no-decrypt
unsupportedProtocolVersions String: Unsupported protocol versions action - Choices: drop, no-decrypt
untrustedCertificate String: Untrusted certificate action - Choices: drop, decrypt
urlRules List<TlsSslDecryptionPolicyDefinitionUrlRule>: List of url rules (applies when mode set to security)
useDefaultCaCertBundle Boolean: Use default CA certificate bundle

description string: The description of the policy definition.
certificateLifetimeInDays number: Certificate Lifetime(in Days)
certificateRevocationStatus string: Certificate revocation status - Choices: ocsp, none
defaultAction string: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
ecKeyType string: EC Key Type - Choices: P256, P384, P521
expiredCertificate string: Expired certificate action - Choices: drop, decrypt
failureMode string: Failure mode - Choices: open, close
minimalTlsVersion string: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
mode string: The policy mode - Choices: security, unified
name string: The name of the policy definition.
networkRules TlsSslDecryptionPolicyDefinitionNetworkRule[]: List of network rules (applies when mode set to security)
rsaKeyPairModulus string: RSA key pair modules - Choices: 1024, 2048, 4096
sslDecryptionEnabled string: SSL decryption enabled
unknownRevocationStatus string: Unknown revocation status action - Choices: drop, decrypt
unsupportedCipherSuites string: Unsupported cipher suites action - Choices: drop, no-decrypt
unsupportedProtocolVersions string: Unsupported protocol versions action - Choices: drop, no-decrypt
untrustedCertificate string: Untrusted certificate action - Choices: drop, decrypt
urlRules TlsSslDecryptionPolicyDefinitionUrlRule[]: List of url rules (applies when mode set to security)
useDefaultCaCertBundle boolean: Use default CA certificate bundle

description str: The description of the policy definition.
certificate_lifetime_in_days int: Certificate Lifetime(in Days)
certificate_revocation_status str: Certificate revocation status - Choices: ocsp, none
default_action str: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
ec_key_type str: EC Key Type - Choices: P256, P384, P521
expired_certificate str: Expired certificate action - Choices: drop, decrypt
failure_mode str: Failure mode - Choices: open, close
minimal_tls_version str: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
mode str: The policy mode - Choices: security, unified
name str: The name of the policy definition.
network_rules Sequence[TlsSslDecryptionPolicyDefinitionNetworkRuleArgs]: List of network rules (applies when mode set to security)
rsa_key_pair_modulus str: RSA key pair modules - Choices: 1024, 2048, 4096
ssl_decryption_enabled str: SSL decryption enabled
unknown_revocation_status str: Unknown revocation status action - Choices: drop, decrypt
unsupported_cipher_suites str: Unsupported cipher suites action - Choices: drop, no-decrypt
unsupported_protocol_versions str: Unsupported protocol versions action - Choices: drop, no-decrypt
untrusted_certificate str: Untrusted certificate action - Choices: drop, decrypt
url_rules Sequence[TlsSslDecryptionPolicyDefinitionUrlRuleArgs]: List of url rules (applies when mode set to security)
use_default_ca_cert_bundle bool: Use default CA certificate bundle

description String: The description of the policy definition.
certificateLifetimeInDays Number: Certificate Lifetime(in Days)
certificateRevocationStatus String: Certificate revocation status - Choices: ocsp, none
defaultAction String: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
ecKeyType String: EC Key Type - Choices: P256, P384, P521
expiredCertificate String: Expired certificate action - Choices: drop, decrypt
failureMode String: Failure mode - Choices: open, close
minimalTlsVersion String: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
mode String: The policy mode - Choices: security, unified
name String: The name of the policy definition.
networkRules List<Property Map>: List of network rules (applies when mode set to security)
rsaKeyPairModulus String: RSA key pair modules - Choices: 1024, 2048, 4096
sslDecryptionEnabled String: SSL decryption enabled
unknownRevocationStatus String: Unknown revocation status action - Choices: drop, decrypt
unsupportedCipherSuites String: Unsupported cipher suites action - Choices: drop, no-decrypt
unsupportedProtocolVersions String: Unsupported protocol versions action - Choices: drop, no-decrypt
untrustedCertificate String: Untrusted certificate action - Choices: drop, decrypt
urlRules List<Property Map>: List of url rules (applies when mode set to security)
useDefaultCaCertBundle Boolean: Use default CA certificate bundle

Outputs

All input properties are implicitly available as output properties. Additionally, the TlsSslDecryptionPolicyDefinition resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
Version int: The version of the object

Id string: The provider-assigned unique ID for this managed resource.
Version int: The version of the object

id String: The provider-assigned unique ID for this managed resource.
version Integer: The version of the object

id string: The provider-assigned unique ID for this managed resource.
version number: The version of the object

id str: The provider-assigned unique ID for this managed resource.
version int: The version of the object

id String: The provider-assigned unique ID for this managed resource.
version Number: The version of the object

Look up Existing TlsSslDecryptionPolicyDefinition Resource

Get an existing TlsSslDecryptionPolicyDefinition resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: TlsSslDecryptionPolicyDefinitionState, opts?: CustomResourceOptions): TlsSslDecryptionPolicyDefinition

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        certificate_lifetime_in_days: Optional[int] = None,
        certificate_revocation_status: Optional[str] = None,
        default_action: Optional[str] = None,
        description: Optional[str] = None,
        ec_key_type: Optional[str] = None,
        expired_certificate: Optional[str] = None,
        failure_mode: Optional[str] = None,
        minimal_tls_version: Optional[str] = None,
        mode: Optional[str] = None,
        name: Optional[str] = None,
        network_rules: Optional[Sequence[TlsSslDecryptionPolicyDefinitionNetworkRuleArgs]] = None,
        rsa_key_pair_modulus: Optional[str] = None,
        ssl_decryption_enabled: Optional[str] = None,
        unknown_revocation_status: Optional[str] = None,
        unsupported_cipher_suites: Optional[str] = None,
        unsupported_protocol_versions: Optional[str] = None,
        untrusted_certificate: Optional[str] = None,
        url_rules: Optional[Sequence[TlsSslDecryptionPolicyDefinitionUrlRuleArgs]] = None,
        use_default_ca_cert_bundle: Optional[bool] = None,
        version: Optional[int] = None) -> TlsSslDecryptionPolicyDefinition

func GetTlsSslDecryptionPolicyDefinition(ctx *Context, name string, id IDInput, state *TlsSslDecryptionPolicyDefinitionState, opts ...ResourceOption) (*TlsSslDecryptionPolicyDefinition, error)

public static TlsSslDecryptionPolicyDefinition Get(string name, Input<string> id, TlsSslDecryptionPolicyDefinitionState? state, CustomResourceOptions? opts = null)

public static TlsSslDecryptionPolicyDefinition get(String name, Output<String> id, TlsSslDecryptionPolicyDefinitionState state, CustomResourceOptions options)

resources:  _:    type: sdwan:TlsSslDecryptionPolicyDefinition    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

CertificateLifetimeInDays int: Certificate Lifetime(in Days)
CertificateRevocationStatus string: Certificate revocation status - Choices: ocsp, none
DefaultAction string: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
Description string: The description of the policy definition.
EcKeyType string: EC Key Type - Choices: P256, P384, P521
ExpiredCertificate string: Expired certificate action - Choices: drop, decrypt
FailureMode string: Failure mode - Choices: open, close
MinimalTlsVersion string: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
Mode string: The policy mode - Choices: security, unified
Name string: The name of the policy definition.
NetworkRules List<TlsSslDecryptionPolicyDefinitionNetworkRule>: List of network rules (applies when mode set to security)
RsaKeyPairModulus string: RSA key pair modules - Choices: 1024, 2048, 4096
SslDecryptionEnabled string: SSL decryption enabled
UnknownRevocationStatus string: Unknown revocation status action - Choices: drop, decrypt
UnsupportedCipherSuites string: Unsupported cipher suites action - Choices: drop, no-decrypt
UnsupportedProtocolVersions string: Unsupported protocol versions action - Choices: drop, no-decrypt
UntrustedCertificate string: Untrusted certificate action - Choices: drop, decrypt
UrlRules List<TlsSslDecryptionPolicyDefinitionUrlRule>: List of url rules (applies when mode set to security)
UseDefaultCaCertBundle bool: Use default CA certificate bundle
Version int: The version of the object

CertificateLifetimeInDays int: Certificate Lifetime(in Days)
CertificateRevocationStatus string: Certificate revocation status - Choices: ocsp, none
DefaultAction string: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
Description string: The description of the policy definition.
EcKeyType string: EC Key Type - Choices: P256, P384, P521
ExpiredCertificate string: Expired certificate action - Choices: drop, decrypt
FailureMode string: Failure mode - Choices: open, close
MinimalTlsVersion string: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
Mode string: The policy mode - Choices: security, unified
Name string: The name of the policy definition.
NetworkRules []TlsSslDecryptionPolicyDefinitionNetworkRuleArgs: List of network rules (applies when mode set to security)
RsaKeyPairModulus string: RSA key pair modules - Choices: 1024, 2048, 4096
SslDecryptionEnabled string: SSL decryption enabled
UnknownRevocationStatus string: Unknown revocation status action - Choices: drop, decrypt
UnsupportedCipherSuites string: Unsupported cipher suites action - Choices: drop, no-decrypt
UnsupportedProtocolVersions string: Unsupported protocol versions action - Choices: drop, no-decrypt
UntrustedCertificate string: Untrusted certificate action - Choices: drop, decrypt
UrlRules []TlsSslDecryptionPolicyDefinitionUrlRuleArgs: List of url rules (applies when mode set to security)
UseDefaultCaCertBundle bool: Use default CA certificate bundle
Version int: The version of the object

certificateLifetimeInDays Integer: Certificate Lifetime(in Days)
certificateRevocationStatus String: Certificate revocation status - Choices: ocsp, none
defaultAction String: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
description String: The description of the policy definition.
ecKeyType String: EC Key Type - Choices: P256, P384, P521
expiredCertificate String: Expired certificate action - Choices: drop, decrypt
failureMode String: Failure mode - Choices: open, close
minimalTlsVersion String: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
mode String: The policy mode - Choices: security, unified
name String: The name of the policy definition.
networkRules List<TlsSslDecryptionPolicyDefinitionNetworkRule>: List of network rules (applies when mode set to security)
rsaKeyPairModulus String: RSA key pair modules - Choices: 1024, 2048, 4096
sslDecryptionEnabled String: SSL decryption enabled
unknownRevocationStatus String: Unknown revocation status action - Choices: drop, decrypt
unsupportedCipherSuites String: Unsupported cipher suites action - Choices: drop, no-decrypt
unsupportedProtocolVersions String: Unsupported protocol versions action - Choices: drop, no-decrypt
untrustedCertificate String: Untrusted certificate action - Choices: drop, decrypt
urlRules List<TlsSslDecryptionPolicyDefinitionUrlRule>: List of url rules (applies when mode set to security)
useDefaultCaCertBundle Boolean: Use default CA certificate bundle
version Integer: The version of the object

certificateLifetimeInDays number: Certificate Lifetime(in Days)
certificateRevocationStatus string: Certificate revocation status - Choices: ocsp, none
defaultAction string: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
description string: The description of the policy definition.
ecKeyType string: EC Key Type - Choices: P256, P384, P521
expiredCertificate string: Expired certificate action - Choices: drop, decrypt
failureMode string: Failure mode - Choices: open, close
minimalTlsVersion string: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
mode string: The policy mode - Choices: security, unified
name string: The name of the policy definition.
networkRules TlsSslDecryptionPolicyDefinitionNetworkRule[]: List of network rules (applies when mode set to security)
rsaKeyPairModulus string: RSA key pair modules - Choices: 1024, 2048, 4096
sslDecryptionEnabled string: SSL decryption enabled
unknownRevocationStatus string: Unknown revocation status action - Choices: drop, decrypt
unsupportedCipherSuites string: Unsupported cipher suites action - Choices: drop, no-decrypt
unsupportedProtocolVersions string: Unsupported protocol versions action - Choices: drop, no-decrypt
untrustedCertificate string: Untrusted certificate action - Choices: drop, decrypt
urlRules TlsSslDecryptionPolicyDefinitionUrlRule[]: List of url rules (applies when mode set to security)
useDefaultCaCertBundle boolean: Use default CA certificate bundle
version number: The version of the object

certificate_lifetime_in_days int: Certificate Lifetime(in Days)
certificate_revocation_status str: Certificate revocation status - Choices: ocsp, none
default_action str: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
description str: The description of the policy definition.
ec_key_type str: EC Key Type - Choices: P256, P384, P521
expired_certificate str: Expired certificate action - Choices: drop, decrypt
failure_mode str: Failure mode - Choices: open, close
minimal_tls_version str: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
mode str: The policy mode - Choices: security, unified
name str: The name of the policy definition.
network_rules Sequence[TlsSslDecryptionPolicyDefinitionNetworkRuleArgs]: List of network rules (applies when mode set to security)
rsa_key_pair_modulus str: RSA key pair modules - Choices: 1024, 2048, 4096
ssl_decryption_enabled str: SSL decryption enabled
unknown_revocation_status str: Unknown revocation status action - Choices: drop, decrypt
unsupported_cipher_suites str: Unsupported cipher suites action - Choices: drop, no-decrypt
unsupported_protocol_versions str: Unsupported protocol versions action - Choices: drop, no-decrypt
untrusted_certificate str: Untrusted certificate action - Choices: drop, decrypt
url_rules Sequence[TlsSslDecryptionPolicyDefinitionUrlRuleArgs]: List of url rules (applies when mode set to security)
use_default_ca_cert_bundle bool: Use default CA certificate bundle
version int: The version of the object

certificateLifetimeInDays Number: Certificate Lifetime(in Days)
certificateRevocationStatus String: Certificate revocation status - Choices: ocsp, none
defaultAction String: Default action (applies when mode set to security) - Choices: noIntent, doNotDecrypt, decrypt
description String: The description of the policy definition.
ecKeyType String: EC Key Type - Choices: P256, P384, P521
expiredCertificate String: Expired certificate action - Choices: drop, decrypt
failureMode String: Failure mode - Choices: open, close
minimalTlsVersion String: Minimal TLS Version - Choices: TLSv1.0, TLSv1.1, TLSv1.2
mode String: The policy mode - Choices: security, unified
name String: The name of the policy definition.
networkRules List<Property Map>: List of network rules (applies when mode set to security)
rsaKeyPairModulus String: RSA key pair modules - Choices: 1024, 2048, 4096
sslDecryptionEnabled String: SSL decryption enabled
unknownRevocationStatus String: Unknown revocation status action - Choices: drop, decrypt
unsupportedCipherSuites String: Unsupported cipher suites action - Choices: drop, no-decrypt
unsupportedProtocolVersions String: Unsupported protocol versions action - Choices: drop, no-decrypt
untrustedCertificate String: Untrusted certificate action - Choices: drop, decrypt
urlRules List<Property Map>: List of url rules (applies when mode set to security)
useDefaultCaCertBundle Boolean: Use default CA certificate bundle
version Number: The version of the object

Supporting Types

TlsSslDecryptionPolicyDefinitionNetworkRule, TlsSslDecryptionPolicyDefinitionNetworkRuleArgs

BaseAction string

Rule base action

Choices: noIntent, doNotDecrypt, decrypt

RuleId int

Rule ID

RuleName string

Rule name

RuleType string

Rule type

SourceAndDestinationConfigurations List<TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfiguration>

List of network source / destination configuration

BaseAction string

Rule base action

Choices: noIntent, doNotDecrypt, decrypt

RuleId int

Rule ID

RuleName string

Rule name

RuleType string

Rule type

SourceAndDestinationConfigurations []TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfiguration

List of network source / destination configuration

baseAction String

Rule base action

Choices: noIntent, doNotDecrypt, decrypt

ruleId Integer

Rule ID

ruleName String

Rule name

ruleType String

Rule type

sourceAndDestinationConfigurations List<TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfiguration>

List of network source / destination configuration

baseAction string

Rule base action

Choices: noIntent, doNotDecrypt, decrypt

ruleId number

Rule ID

ruleName string

Rule name

ruleType string

Rule type

sourceAndDestinationConfigurations TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfiguration[]

List of network source / destination configuration

base_action str

Rule base action

Choices: noIntent, doNotDecrypt, decrypt

rule_id int

Rule ID

rule_name str

Rule name

rule_type str

Rule type

source_and_destination_configurations Sequence[TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfiguration]

List of network source / destination configuration

baseAction String

Rule base action

Choices: noIntent, doNotDecrypt, decrypt

ruleId Number

Rule ID

ruleName String

Rule name

ruleType String

Rule type

sourceAndDestinationConfigurations List<Property Map>

List of network source / destination configuration

TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfiguration, TlsSslDecryptionPolicyDefinitionNetworkRuleSourceAndDestinationConfigurationArgs

Option string

source / destination option

Choices: sourceIp, sourcePort, destinationVpn, destinationIp, destinationPort

Value string