avi 31.1.1 published on Monday, Apr 14, 2025 by vmware
avi.getWafpolicy
Explore with Pulumi AI
<!–
Copyright 2021 VMware, Inc.
SPDX-License-Identifier: Mozilla Public License 2.0
–>
layout: “avi”
page_title: “AVI: avi.Wafpolicy” sidebar_current: “docs-avi-datasource-wafpolicy” description: |- Get information of Avi WafPolicy.
avi.Wafpolicy
This data source is used to to get avi.Wafpolicy objects.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as avi from "@pulumi/avi";
const fooWafpolicy = avi.getWafpolicy({
name: "foo",
uuid: "wafpolicy-f9cf6b3e-a411-436f-95e2-2982ba2b217b",
});
import pulumi
import pulumi_avi as avi
foo_wafpolicy = avi.get_wafpolicy(name="foo",
uuid="wafpolicy-f9cf6b3e-a411-436f-95e2-2982ba2b217b")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/avi/v31/avi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := avi.LookupWafpolicy(ctx, &avi.LookupWafpolicyArgs{
Name: pulumi.StringRef("foo"),
Uuid: pulumi.StringRef("wafpolicy-f9cf6b3e-a411-436f-95e2-2982ba2b217b"),
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Avi = Pulumi.Avi;
return await Deployment.RunAsync(() =>
{
var fooWafpolicy = Avi.GetWafpolicy.Invoke(new()
{
Name = "foo",
Uuid = "wafpolicy-f9cf6b3e-a411-436f-95e2-2982ba2b217b",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.avi.AviFunctions;
import com.pulumi.avi.inputs.GetWafpolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var fooWafpolicy = AviFunctions.getWafpolicy(GetWafpolicyArgs.builder()
.name("foo")
.uuid("wafpolicy-f9cf6b3e-a411-436f-95e2-2982ba2b217b")
.build());
}
}
variables:
fooWafpolicy:
fn::invoke:
function: avi:getWafpolicy
arguments:
name: foo
uuid: wafpolicy-f9cf6b3e-a411-436f-95e2-2982ba2b217b
Using getWafpolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getWafpolicy(args: GetWafpolicyArgs, opts?: InvokeOptions): Promise<GetWafpolicyResult>
function getWafpolicyOutput(args: GetWafpolicyOutputArgs, opts?: InvokeOptions): Output<GetWafpolicyResult>
def get_wafpolicy(id: Optional[str] = None,
name: Optional[str] = None,
tenant_ref: Optional[str] = None,
uuid: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetWafpolicyResult
def get_wafpolicy_output(id: Optional[pulumi.Input[str]] = None,
name: Optional[pulumi.Input[str]] = None,
tenant_ref: Optional[pulumi.Input[str]] = None,
uuid: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetWafpolicyResult]
func LookupWafpolicy(ctx *Context, args *LookupWafpolicyArgs, opts ...InvokeOption) (*LookupWafpolicyResult, error)
func LookupWafpolicyOutput(ctx *Context, args *LookupWafpolicyOutputArgs, opts ...InvokeOption) LookupWafpolicyResultOutput
> Note: This function is named LookupWafpolicy
in the Go SDK.
public static class GetWafpolicy
{
public static Task<GetWafpolicyResult> InvokeAsync(GetWafpolicyArgs args, InvokeOptions? opts = null)
public static Output<GetWafpolicyResult> Invoke(GetWafpolicyInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetWafpolicyResult> getWafpolicy(GetWafpolicyArgs args, InvokeOptions options)
public static Output<GetWafpolicyResult> getWafpolicy(GetWafpolicyArgs args, InvokeOptions options)
fn::invoke:
function: avi:index/getWafpolicy:getWafpolicy
arguments:
# arguments dictionary
The following arguments are supported:
- id str
- name str
- Search WafPolicy by name.
- tenant_
ref str - It is a reference to an object of type tenant. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- uuid str
- Search WafPolicy by uuid.
getWafpolicy Result
The following output properties are available:
- Allow
Mode stringDelegation - Allow rules to overwrite the policy mode. This must be set if the policy mode is set to enforcement. Field introduced in 18.1.5, 18.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Allowlists
List<Get
Wafpolicy Allowlist> - A set of rules which describe conditions under which the request will bypass the waf. This will be processed in the request header phase before any other waf related code. Field introduced in 20.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Application
Signatures List<GetWafpolicy Application Signature> - Application specific signatures. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Auto
Update stringCrs - If this flag is set, the system will try to keep the crs version used in this policy up-to-date. If a newer crs object is available on this controller, the system will issue the crs upgrade process for this waf policy. It will not update polices if the current crs version is crs-version-not-applicable. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Bypass
Static stringExtensions - Enable the functionality to bypass waf for static file extensions. Field introduced in 22.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Confidence
Overrides List<GetWafpolicy Confidence Override> - Configure thresholds for confidence labels. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Configpb
Attributes List<GetWafpolicy Configpb Attribute> - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Created
By string - Creator name. Field introduced in 17.2.4. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Crs
Overrides List<GetWafpolicy Crs Override> - Override attributes for crs rules. Field introduced in 20.1.6. Allowed with any value in enterprise, enterprise with cloud services edition.
- Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Enable
App stringLearning - Enable application learning for this waf policy. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Enable
Auto stringRule Updates - Enable application learning based rule updates on the waf profile. Rules will be programmed in dedicated waf learning group. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Enable
Regex stringLearning - Enable dynamic regex generation for positive security model rules. This is an experimental feature and shouldn't be used in production. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Failure
Mode string - Waf policy failure mode. This can be 'open' or 'closed'. Enum options - WAF_FAILURE_MODE_OPEN, WAF_FAILURE_MODE_CLOSED. Field introduced in 18.1.2. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Geo
Db stringRef - Geo location mapping database used by this wafpolicy. It is a reference to an object of type geodb. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Id string
- Learning
Params List<GetWafpolicy Learning Param> - Parameters for tuning application learning. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Markers
List<Get
Wafpolicy Marker> - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Min
Confidence string - Minimum confidence label required for auto rule updates. Enum options - CONFIDENCE_VERY_HIGH, CONFIDENCE_HIGH, CONFIDENCE_PROBABLE, CONFIDENCE_LOW, CONFIDENCE_NONE. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Positive
Security List<GetModels Wafpolicy Positive Security Model> - The positive security model. This is used to describe how the request or parts of the request should look like. It is executed in the request body phase of avi waf. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Post
Crs List<GetGroups Wafpolicy Post Crs Group> - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced after the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Pre
Crs List<GetGroups Wafpolicy Pre Crs Group> - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced before the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Required
Data List<GetFiles Wafpolicy Required Data File> - The data files and types referred in this waf policy. Field introduced in 22.1.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Tenant
Ref string - It is a reference to an object of type tenant. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Updated
Crs stringRules In Detection Mode - While updating crs, the system will make sure that new rules are added in detection mode. It only has an effect if the policy is in enforcement mode. In this case, the update will set new rules into detection mode by adding crs_overrides for the new rules. If this flag is not set or if the policy mode is detection, rules will be added without new crs_overrides. This option is used for the auto_update_crs workflow as well as for the ui based crs update workflow. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Uuid string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Waf
Crs stringRef - Waf core ruleset used for the crs part of this policy. It is a reference to an object of type wafcrs. Field introduced in 18.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Waf
Profile stringRef - Waf profile for waf policy. It is a reference to an object of type wafprofile. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Allow
Mode stringDelegation - Allow rules to overwrite the policy mode. This must be set if the policy mode is set to enforcement. Field introduced in 18.1.5, 18.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Allowlists
[]Get
Wafpolicy Allowlist - A set of rules which describe conditions under which the request will bypass the waf. This will be processed in the request header phase before any other waf related code. Field introduced in 20.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Application
Signatures []GetWafpolicy Application Signature - Application specific signatures. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Auto
Update stringCrs - If this flag is set, the system will try to keep the crs version used in this policy up-to-date. If a newer crs object is available on this controller, the system will issue the crs upgrade process for this waf policy. It will not update polices if the current crs version is crs-version-not-applicable. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Bypass
Static stringExtensions - Enable the functionality to bypass waf for static file extensions. Field introduced in 22.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Confidence
Overrides []GetWafpolicy Confidence Override - Configure thresholds for confidence labels. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Configpb
Attributes []GetWafpolicy Configpb Attribute - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Created
By string - Creator name. Field introduced in 17.2.4. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Crs
Overrides []GetWafpolicy Crs Override - Override attributes for crs rules. Field introduced in 20.1.6. Allowed with any value in enterprise, enterprise with cloud services edition.
- Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Enable
App stringLearning - Enable application learning for this waf policy. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Enable
Auto stringRule Updates - Enable application learning based rule updates on the waf profile. Rules will be programmed in dedicated waf learning group. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Enable
Regex stringLearning - Enable dynamic regex generation for positive security model rules. This is an experimental feature and shouldn't be used in production. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Failure
Mode string - Waf policy failure mode. This can be 'open' or 'closed'. Enum options - WAF_FAILURE_MODE_OPEN, WAF_FAILURE_MODE_CLOSED. Field introduced in 18.1.2. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Geo
Db stringRef - Geo location mapping database used by this wafpolicy. It is a reference to an object of type geodb. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Id string
- Learning
Params []GetWafpolicy Learning Param - Parameters for tuning application learning. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Markers
[]Get
Wafpolicy Marker - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Min
Confidence string - Minimum confidence label required for auto rule updates. Enum options - CONFIDENCE_VERY_HIGH, CONFIDENCE_HIGH, CONFIDENCE_PROBABLE, CONFIDENCE_LOW, CONFIDENCE_NONE. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Positive
Security []GetModels Wafpolicy Positive Security Model - The positive security model. This is used to describe how the request or parts of the request should look like. It is executed in the request body phase of avi waf. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Post
Crs []GetGroups Wafpolicy Post Crs Group - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced after the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Pre
Crs []GetGroups Wafpolicy Pre Crs Group - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced before the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Required
Data []GetFiles Wafpolicy Required Data File - The data files and types referred in this waf policy. Field introduced in 22.1.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Tenant
Ref string - It is a reference to an object of type tenant. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Updated
Crs stringRules In Detection Mode - While updating crs, the system will make sure that new rules are added in detection mode. It only has an effect if the policy is in enforcement mode. In this case, the update will set new rules into detection mode by adding crs_overrides for the new rules. If this flag is not set or if the policy mode is detection, rules will be added without new crs_overrides. This option is used for the auto_update_crs workflow as well as for the ui based crs update workflow. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Uuid string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Waf
Crs stringRef - Waf core ruleset used for the crs part of this policy. It is a reference to an object of type wafcrs. Field introduced in 18.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Waf
Profile stringRef - Waf profile for waf policy. It is a reference to an object of type wafprofile. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- allow
Mode StringDelegation - Allow rules to overwrite the policy mode. This must be set if the policy mode is set to enforcement. Field introduced in 18.1.5, 18.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- allowlists
List<Get
Wafpolicy Allowlist> - A set of rules which describe conditions under which the request will bypass the waf. This will be processed in the request header phase before any other waf related code. Field introduced in 20.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- application
Signatures List<GetWafpolicy Application Signature> - Application specific signatures. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- auto
Update StringCrs - If this flag is set, the system will try to keep the crs version used in this policy up-to-date. If a newer crs object is available on this controller, the system will issue the crs upgrade process for this waf policy. It will not update polices if the current crs version is crs-version-not-applicable. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- bypass
Static StringExtensions - Enable the functionality to bypass waf for static file extensions. Field introduced in 22.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- confidence
Overrides List<GetWafpolicy Confidence Override> - Configure thresholds for confidence labels. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- configpb
Attributes List<GetWafpolicy Configpb Attribute> - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- created
By String - Creator name. Field introduced in 17.2.4. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- crs
Overrides List<GetWafpolicy Crs Override> - Override attributes for crs rules. Field introduced in 20.1.6. Allowed with any value in enterprise, enterprise with cloud services edition.
- description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable
App StringLearning - Enable application learning for this waf policy. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable
Auto StringRule Updates - Enable application learning based rule updates on the waf profile. Rules will be programmed in dedicated waf learning group. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable
Regex StringLearning - Enable dynamic regex generation for positive security model rules. This is an experimental feature and shouldn't be used in production. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- failure
Mode String - Waf policy failure mode. This can be 'open' or 'closed'. Enum options - WAF_FAILURE_MODE_OPEN, WAF_FAILURE_MODE_CLOSED. Field introduced in 18.1.2. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- geo
Db StringRef - Geo location mapping database used by this wafpolicy. It is a reference to an object of type geodb. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- id String
- learning
Params List<GetWafpolicy Learning Param> - Parameters for tuning application learning. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- markers
List<Get
Wafpolicy Marker> - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- min
Confidence String - Minimum confidence label required for auto rule updates. Enum options - CONFIDENCE_VERY_HIGH, CONFIDENCE_HIGH, CONFIDENCE_PROBABLE, CONFIDENCE_LOW, CONFIDENCE_NONE. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- paranoia
Level String - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- positive
Security List<GetModels Wafpolicy Positive Security Model> - The positive security model. This is used to describe how the request or parts of the request should look like. It is executed in the request body phase of avi waf. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- post
Crs List<GetGroups Wafpolicy Post Crs Group> - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced after the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- pre
Crs List<GetGroups Wafpolicy Pre Crs Group> - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced before the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- required
Data List<GetFiles Wafpolicy Required Data File> - The data files and types referred in this waf policy. Field introduced in 22.1.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant
Ref String - It is a reference to an object of type tenant. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- updated
Crs StringRules In Detection Mode - While updating crs, the system will make sure that new rules are added in detection mode. It only has an effect if the policy is in enforcement mode. In this case, the update will set new rules into detection mode by adding crs_overrides for the new rules. If this flag is not set or if the policy mode is detection, rules will be added without new crs_overrides. This option is used for the auto_update_crs workflow as well as for the ui based crs update workflow. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- uuid String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- waf
Crs StringRef - Waf core ruleset used for the crs part of this policy. It is a reference to an object of type wafcrs. Field introduced in 18.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- waf
Profile StringRef - Waf profile for waf policy. It is a reference to an object of type wafprofile. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- allow
Mode stringDelegation - Allow rules to overwrite the policy mode. This must be set if the policy mode is set to enforcement. Field introduced in 18.1.5, 18.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- allowlists
Get
Wafpolicy Allowlist[] - A set of rules which describe conditions under which the request will bypass the waf. This will be processed in the request header phase before any other waf related code. Field introduced in 20.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- application
Signatures GetWafpolicy Application Signature[] - Application specific signatures. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- auto
Update stringCrs - If this flag is set, the system will try to keep the crs version used in this policy up-to-date. If a newer crs object is available on this controller, the system will issue the crs upgrade process for this waf policy. It will not update polices if the current crs version is crs-version-not-applicable. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- bypass
Static stringExtensions - Enable the functionality to bypass waf for static file extensions. Field introduced in 22.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- confidence
Overrides GetWafpolicy Confidence Override[] - Configure thresholds for confidence labels. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- configpb
Attributes GetWafpolicy Configpb Attribute[] - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- created
By string - Creator name. Field introduced in 17.2.4. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- crs
Overrides GetWafpolicy Crs Override[] - Override attributes for crs rules. Field introduced in 20.1.6. Allowed with any value in enterprise, enterprise with cloud services edition.
- description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable
App stringLearning - Enable application learning for this waf policy. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable
Auto stringRule Updates - Enable application learning based rule updates on the waf profile. Rules will be programmed in dedicated waf learning group. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable
Regex stringLearning - Enable dynamic regex generation for positive security model rules. This is an experimental feature and shouldn't be used in production. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- failure
Mode string - Waf policy failure mode. This can be 'open' or 'closed'. Enum options - WAF_FAILURE_MODE_OPEN, WAF_FAILURE_MODE_CLOSED. Field introduced in 18.1.2. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- geo
Db stringRef - Geo location mapping database used by this wafpolicy. It is a reference to an object of type geodb. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- id string
- learning
Params GetWafpolicy Learning Param[] - Parameters for tuning application learning. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- markers
Get
Wafpolicy Marker[] - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- min
Confidence string - Minimum confidence label required for auto rule updates. Enum options - CONFIDENCE_VERY_HIGH, CONFIDENCE_HIGH, CONFIDENCE_PROBABLE, CONFIDENCE_LOW, CONFIDENCE_NONE. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- positive
Security GetModels Wafpolicy Positive Security Model[] - The positive security model. This is used to describe how the request or parts of the request should look like. It is executed in the request body phase of avi waf. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- post
Crs GetGroups Wafpolicy Post Crs Group[] - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced after the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- pre
Crs GetGroups Wafpolicy Pre Crs Group[] - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced before the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- required
Data GetFiles Wafpolicy Required Data File[] - The data files and types referred in this waf policy. Field introduced in 22.1.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant
Ref string - It is a reference to an object of type tenant. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- updated
Crs stringRules In Detection Mode - While updating crs, the system will make sure that new rules are added in detection mode. It only has an effect if the policy is in enforcement mode. In this case, the update will set new rules into detection mode by adding crs_overrides for the new rules. If this flag is not set or if the policy mode is detection, rules will be added without new crs_overrides. This option is used for the auto_update_crs workflow as well as for the ui based crs update workflow. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- uuid string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- waf
Crs stringRef - Waf core ruleset used for the crs part of this policy. It is a reference to an object of type wafcrs. Field introduced in 18.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- waf
Profile stringRef - Waf profile for waf policy. It is a reference to an object of type wafprofile. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- allow_
mode_ strdelegation - Allow rules to overwrite the policy mode. This must be set if the policy mode is set to enforcement. Field introduced in 18.1.5, 18.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- allowlists
Sequence[Get
Wafpolicy Allowlist] - A set of rules which describe conditions under which the request will bypass the waf. This will be processed in the request header phase before any other waf related code. Field introduced in 20.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- application_
signatures Sequence[GetWafpolicy Application Signature] - Application specific signatures. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- auto_
update_ strcrs - If this flag is set, the system will try to keep the crs version used in this policy up-to-date. If a newer crs object is available on this controller, the system will issue the crs upgrade process for this waf policy. It will not update polices if the current crs version is crs-version-not-applicable. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- bypass_
static_ strextensions - Enable the functionality to bypass waf for static file extensions. Field introduced in 22.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- confidence_
overrides Sequence[GetWafpolicy Confidence Override] - Configure thresholds for confidence labels. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- configpb_
attributes Sequence[GetWafpolicy Configpb Attribute] - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- created_
by str - Creator name. Field introduced in 17.2.4. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- crs_
overrides Sequence[GetWafpolicy Crs Override] - Override attributes for crs rules. Field introduced in 20.1.6. Allowed with any value in enterprise, enterprise with cloud services edition.
- description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable_
app_ strlearning - Enable application learning for this waf policy. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable_
auto_ strrule_ updates - Enable application learning based rule updates on the waf profile. Rules will be programmed in dedicated waf learning group. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable_
regex_ strlearning - Enable dynamic regex generation for positive security model rules. This is an experimental feature and shouldn't be used in production. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- failure_
mode str - Waf policy failure mode. This can be 'open' or 'closed'. Enum options - WAF_FAILURE_MODE_OPEN, WAF_FAILURE_MODE_CLOSED. Field introduced in 18.1.2. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- geo_
db_ strref - Geo location mapping database used by this wafpolicy. It is a reference to an object of type geodb. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- id str
- learning_
params Sequence[GetWafpolicy Learning Param] - Parameters for tuning application learning. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- markers
Sequence[Get
Wafpolicy Marker] - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- min_
confidence str - Minimum confidence label required for auto rule updates. Enum options - CONFIDENCE_VERY_HIGH, CONFIDENCE_HIGH, CONFIDENCE_PROBABLE, CONFIDENCE_LOW, CONFIDENCE_NONE. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- mode str
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- paranoia_
level str - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- positive_
security_ Sequence[Getmodels Wafpolicy Positive Security Model] - The positive security model. This is used to describe how the request or parts of the request should look like. It is executed in the request body phase of avi waf. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- post_
crs_ Sequence[Getgroups Wafpolicy Post Crs Group] - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced after the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- pre_
crs_ Sequence[Getgroups Wafpolicy Pre Crs Group] - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced before the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- required_
data_ Sequence[Getfiles Wafpolicy Required Data File] - The data files and types referred in this waf policy. Field introduced in 22.1.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant_
ref str - It is a reference to an object of type tenant. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- updated_
crs_ strrules_ in_ detection_ mode - While updating crs, the system will make sure that new rules are added in detection mode. It only has an effect if the policy is in enforcement mode. In this case, the update will set new rules into detection mode by adding crs_overrides for the new rules. If this flag is not set or if the policy mode is detection, rules will be added without new crs_overrides. This option is used for the auto_update_crs workflow as well as for the ui based crs update workflow. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- uuid str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- waf_
crs_ strref - Waf core ruleset used for the crs part of this policy. It is a reference to an object of type wafcrs. Field introduced in 18.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- waf_
profile_ strref - Waf profile for waf policy. It is a reference to an object of type wafprofile. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- allow
Mode StringDelegation - Allow rules to overwrite the policy mode. This must be set if the policy mode is set to enforcement. Field introduced in 18.1.5, 18.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- allowlists List<Property Map>
- A set of rules which describe conditions under which the request will bypass the waf. This will be processed in the request header phase before any other waf related code. Field introduced in 20.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- application
Signatures List<Property Map> - Application specific signatures. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- auto
Update StringCrs - If this flag is set, the system will try to keep the crs version used in this policy up-to-date. If a newer crs object is available on this controller, the system will issue the crs upgrade process for this waf policy. It will not update polices if the current crs version is crs-version-not-applicable. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- bypass
Static StringExtensions - Enable the functionality to bypass waf for static file extensions. Field introduced in 22.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- confidence
Overrides List<Property Map> - Configure thresholds for confidence labels. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- configpb
Attributes List<Property Map> - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- created
By String - Creator name. Field introduced in 17.2.4. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- crs
Overrides List<Property Map> - Override attributes for crs rules. Field introduced in 20.1.6. Allowed with any value in enterprise, enterprise with cloud services edition.
- description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable
App StringLearning - Enable application learning for this waf policy. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable
Auto StringRule Updates - Enable application learning based rule updates on the waf profile. Rules will be programmed in dedicated waf learning group. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable
Regex StringLearning - Enable dynamic regex generation for positive security model rules. This is an experimental feature and shouldn't be used in production. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- failure
Mode String - Waf policy failure mode. This can be 'open' or 'closed'. Enum options - WAF_FAILURE_MODE_OPEN, WAF_FAILURE_MODE_CLOSED. Field introduced in 18.1.2. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- geo
Db StringRef - Geo location mapping database used by this wafpolicy. It is a reference to an object of type geodb. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- id String
- learning
Params List<Property Map> - Parameters for tuning application learning. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- markers List<Property Map>
- List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- min
Confidence String - Minimum confidence label required for auto rule updates. Enum options - CONFIDENCE_VERY_HIGH, CONFIDENCE_HIGH, CONFIDENCE_PROBABLE, CONFIDENCE_LOW, CONFIDENCE_NONE. Field introduced in 20.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- paranoia
Level String - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- positive
Security List<Property Map>Models - The positive security model. This is used to describe how the request or parts of the request should look like. It is executed in the request body phase of avi waf. Field introduced in 18.2.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- post
Crs List<Property Map>Groups - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced after the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- pre
Crs List<Property Map>Groups - Waf rules are categorized in to groups based on their characterization. These groups are created by the user and will be enforced before the crs groups. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- required
Data List<Property Map>Files - The data files and types referred in this waf policy. Field introduced in 22.1.3. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant
Ref String - It is a reference to an object of type tenant. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- updated
Crs StringRules In Detection Mode - While updating crs, the system will make sure that new rules are added in detection mode. It only has an effect if the policy is in enforcement mode. In this case, the update will set new rules into detection mode by adding crs_overrides for the new rules. If this flag is not set or if the policy mode is detection, rules will be added without new crs_overrides. This option is used for the auto_update_crs workflow as well as for the ui based crs update workflow. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- uuid String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- waf
Crs StringRef - Waf core ruleset used for the crs part of this policy. It is a reference to an object of type wafcrs. Field introduced in 18.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- waf
Profile StringRef - Waf profile for waf policy. It is a reference to an object of type wafprofile. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Supporting Types
GetWafpolicyAllowlist
GetWafpolicyAllowlistRule
- Actions List<string>
- Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Enable string
- Index string
- Matches
List<Get
Wafpolicy Allowlist Rule Match> - Name string
- Search WafPolicy by name.
- Sampling
Percent string
- Actions []string
- Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Enable string
- Index string
- Matches
[]Get
Wafpolicy Allowlist Rule Match - Name string
- Search WafPolicy by name.
- Sampling
Percent string
- actions List<String>
- description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable String
- index String
- matches
List<Get
Wafpolicy Allowlist Rule Match> - name String
- Search WafPolicy by name.
- sampling
Percent String
- actions string[]
- description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable string
- index string
- matches
Get
Wafpolicy Allowlist Rule Match[] - name string
- Search WafPolicy by name.
- sampling
Percent string
- actions Sequence[str]
- description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable str
- index str
- matches
Sequence[Get
Wafpolicy Allowlist Rule Match] - name str
- Search WafPolicy by name.
- sampling_
percent str
- actions List<String>
- description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- enable String
- index String
- matches List<Property Map>
- name String
- Search WafPolicy by name.
- sampling
Percent String
GetWafpolicyAllowlistRuleMatch
- Bot
Detection List<GetResults Wafpolicy Allowlist Rule Match Bot Detection Result> - Client
Ips List<GetWafpolicy Allowlist Rule Match Client Ip> - List<Get
Wafpolicy Allowlist Rule Match Cookie> - Geo
Matches List<GetWafpolicy Allowlist Rule Match Geo Match> - Hdrs
List<Get
Wafpolicy Allowlist Rule Match Hdr> - Host
Hdrs List<GetWafpolicy Allowlist Rule Match Host Hdr> - Ip
Reputation List<GetTypes Wafpolicy Allowlist Rule Match Ip Reputation Type> - Methods
List<Get
Wafpolicy Allowlist Rule Match Method> - Paths
List<Get
Wafpolicy Allowlist Rule Match Path> - Protocols
List<Get
Wafpolicy Allowlist Rule Match Protocol> - Queries
List<Get
Wafpolicy Allowlist Rule Match Query> - Source
Ips List<GetWafpolicy Allowlist Rule Match Source Ip> - Tls
Fingerprint List<GetMatches Wafpolicy Allowlist Rule Match Tls Fingerprint Match> - Versions
List<Get
Wafpolicy Allowlist Rule Match Version> - Vs
Ports List<GetWafpolicy Allowlist Rule Match Vs Port>
- Bot
Detection []GetResults Wafpolicy Allowlist Rule Match Bot Detection Result - Client
Ips []GetWafpolicy Allowlist Rule Match Client Ip - []Get
Wafpolicy Allowlist Rule Match Cookie - Geo
Matches []GetWafpolicy Allowlist Rule Match Geo Match - Hdrs
[]Get
Wafpolicy Allowlist Rule Match Hdr - Host
Hdrs []GetWafpolicy Allowlist Rule Match Host Hdr - Ip
Reputation []GetTypes Wafpolicy Allowlist Rule Match Ip Reputation Type - Methods
[]Get
Wafpolicy Allowlist Rule Match Method - Paths
[]Get
Wafpolicy Allowlist Rule Match Path - Protocols
[]Get
Wafpolicy Allowlist Rule Match Protocol - Queries
[]Get
Wafpolicy Allowlist Rule Match Query - Source
Ips []GetWafpolicy Allowlist Rule Match Source Ip - Tls
Fingerprint []GetMatches Wafpolicy Allowlist Rule Match Tls Fingerprint Match - Versions
[]Get
Wafpolicy Allowlist Rule Match Version - Vs
Ports []GetWafpolicy Allowlist Rule Match Vs Port
- bot
Detection List<GetResults Wafpolicy Allowlist Rule Match Bot Detection Result> - client
Ips List<GetWafpolicy Allowlist Rule Match Client Ip> - List<Get
Wafpolicy Allowlist Rule Match Cookie> - geo
Matches List<GetWafpolicy Allowlist Rule Match Geo Match> - hdrs
List<Get
Wafpolicy Allowlist Rule Match Hdr> - host
Hdrs List<GetWafpolicy Allowlist Rule Match Host Hdr> - ip
Reputation List<GetTypes Wafpolicy Allowlist Rule Match Ip Reputation Type> - methods
List<Get
Wafpolicy Allowlist Rule Match Method> - paths
List<Get
Wafpolicy Allowlist Rule Match Path> - protocols
List<Get
Wafpolicy Allowlist Rule Match Protocol> - queries
List<Get
Wafpolicy Allowlist Rule Match Query> - source
Ips List<GetWafpolicy Allowlist Rule Match Source Ip> - tls
Fingerprint List<GetMatches Wafpolicy Allowlist Rule Match Tls Fingerprint Match> - versions
List<Get
Wafpolicy Allowlist Rule Match Version> - vs
Ports List<GetWafpolicy Allowlist Rule Match Vs Port>
- bot
Detection GetResults Wafpolicy Allowlist Rule Match Bot Detection Result[] - client
Ips GetWafpolicy Allowlist Rule Match Client Ip[] - Get
Wafpolicy Allowlist Rule Match Cookie[] - geo
Matches GetWafpolicy Allowlist Rule Match Geo Match[] - hdrs
Get
Wafpolicy Allowlist Rule Match Hdr[] - host
Hdrs GetWafpolicy Allowlist Rule Match Host Hdr[] - ip
Reputation GetTypes Wafpolicy Allowlist Rule Match Ip Reputation Type[] - methods
Get
Wafpolicy Allowlist Rule Match Method[] - paths
Get
Wafpolicy Allowlist Rule Match Path[] - protocols
Get
Wafpolicy Allowlist Rule Match Protocol[] - queries
Get
Wafpolicy Allowlist Rule Match Query[] - source
Ips GetWafpolicy Allowlist Rule Match Source Ip[] - tls
Fingerprint GetMatches Wafpolicy Allowlist Rule Match Tls Fingerprint Match[] - versions
Get
Wafpolicy Allowlist Rule Match Version[] - vs
Ports GetWafpolicy Allowlist Rule Match Vs Port[]
- bot_
detection_ Sequence[Getresults Wafpolicy Allowlist Rule Match Bot Detection Result] - client_
ips Sequence[GetWafpolicy Allowlist Rule Match Client Ip] - Sequence[Get
Wafpolicy Allowlist Rule Match Cookie] - geo_
matches Sequence[GetWafpolicy Allowlist Rule Match Geo Match] - hdrs
Sequence[Get
Wafpolicy Allowlist Rule Match Hdr] - host_
hdrs Sequence[GetWafpolicy Allowlist Rule Match Host Hdr] - ip_
reputation_ Sequence[Gettypes Wafpolicy Allowlist Rule Match Ip Reputation Type] - methods
Sequence[Get
Wafpolicy Allowlist Rule Match Method] - paths
Sequence[Get
Wafpolicy Allowlist Rule Match Path] - protocols
Sequence[Get
Wafpolicy Allowlist Rule Match Protocol] - queries
Sequence[Get
Wafpolicy Allowlist Rule Match Query] - source_
ips Sequence[GetWafpolicy Allowlist Rule Match Source Ip] - tls_
fingerprint_ Sequence[Getmatches Wafpolicy Allowlist Rule Match Tls Fingerprint Match] - versions
Sequence[Get
Wafpolicy Allowlist Rule Match Version] - vs_
ports Sequence[GetWafpolicy Allowlist Rule Match Vs Port]
- bot
Detection List<Property Map>Results - client
Ips List<Property Map> - List<Property Map>
- geo
Matches List<Property Map> - hdrs List<Property Map>
- host
Hdrs List<Property Map> - ip
Reputation List<Property Map>Types - methods List<Property Map>
- paths List<Property Map>
- protocols List<Property Map>
- queries List<Property Map>
- source
Ips List<Property Map> - tls
Fingerprint List<Property Map>Matches - versions List<Property Map>
- vs
Ports List<Property Map>
GetWafpolicyAllowlistRuleMatchBotDetectionResult
GetWafpolicyAllowlistRuleMatchBotDetectionResultClassification
- Type string
- User
Defined stringType
- Type string
- User
Defined stringType
- type String
- user
Defined StringType
- type string
- user
Defined stringType
- type str
- user_
defined_ strtype
- type String
- user
Defined StringType
GetWafpolicyAllowlistRuleMatchClientIp
GetWafpolicyAllowlistRuleMatchClientIpAddr
GetWafpolicyAllowlistRuleMatchClientIpPrefix
- ip
Addrs List<Property Map> - mask String
GetWafpolicyAllowlistRuleMatchClientIpPrefixIpAddr
GetWafpolicyAllowlistRuleMatchClientIpRange
GetWafpolicyAllowlistRuleMatchClientIpRangeBegin
GetWafpolicyAllowlistRuleMatchClientIpRangeEnd
GetWafpolicyAllowlistRuleMatchCookie
- Match
Case string - Match
Criteria string - Name string
- Search WafPolicy by name.
- Value string
- Match
Case string - Match
Criteria string - Name string
- Search WafPolicy by name.
- Value string
- match
Case String - match
Criteria String - name String
- Search WafPolicy by name.
- value String
- match
Case string - match
Criteria string - name string
- Search WafPolicy by name.
- value string
- match_
case str - match_
criteria str - name str
- Search WafPolicy by name.
- value str
- match
Case String - match
Criteria String - name String
- Search WafPolicy by name.
- value String
GetWafpolicyAllowlistRuleMatchGeoMatch
- Attribute string
- Match
Operation string - Values List<string>
- Attribute string
- Match
Operation string - Values []string
- attribute String
- match
Operation String - values List<String>
- attribute string
- match
Operation string - values string[]
- attribute str
- match_
operation str - values Sequence[str]
- attribute String
- match
Operation String - values List<String>
GetWafpolicyAllowlistRuleMatchHdr
- Hdr string
- Match
Case string - Match
Criteria string - String
Group List<string>Refs - Values List<string>
- Hdr string
- Match
Case string - Match
Criteria string - String
Group []stringRefs - Values []string
- hdr String
- match
Case String - match
Criteria String - string
Group List<String>Refs - values List<String>
- hdr string
- match
Case string - match
Criteria string - string
Group string[]Refs - values string[]
- hdr str
- match_
case str - match_
criteria str - string_
group_ Sequence[str]refs - values Sequence[str]
- hdr String
- match
Case String - match
Criteria String - string
Group List<String>Refs - values List<String>
GetWafpolicyAllowlistRuleMatchHostHdr
- Match
Case string - Match
Criteria string - Values List<string>
- Match
Case string - Match
Criteria string - Values []string
- match
Case String - match
Criteria String - values List<String>
- match
Case string - match
Criteria string - values string[]
- match_
case str - match_
criteria str - values Sequence[str]
- match
Case String - match
Criteria String - values List<String>
GetWafpolicyAllowlistRuleMatchIpReputationType
- Match
Operation string - Reputation
Types List<string>
- Match
Operation string - Reputation
Types []string
- match
Operation String - reputation
Types List<String>
- match
Operation string - reputation
Types string[]
- match_
operation str - reputation_
types Sequence[str]
- match
Operation String - reputation
Types List<String>
GetWafpolicyAllowlistRuleMatchMethod
- Match
Criteria string - Methods List<string>
- Match
Criteria string - Methods []string
- match
Criteria String - methods List<String>
- match
Criteria string - methods string[]
- match_
criteria str - methods Sequence[str]
- match
Criteria String - methods List<String>
GetWafpolicyAllowlistRuleMatchPath
- Match
Case string - Match
Criteria string - Match
Decoded stringString - Match
Strs List<string> - String
Group List<string>Refs
- Match
Case string - Match
Criteria string - Match
Decoded stringString - Match
Strs []string - String
Group []stringRefs
- match
Case String - match
Criteria String - match
Decoded StringString - match
Strs List<String> - string
Group List<String>Refs
- match
Case string - match
Criteria string - match
Decoded stringString - match
Strs string[] - string
Group string[]Refs
- match_
case str - match_
criteria str - match_
decoded_ strstring - match_
strs Sequence[str] - string_
group_ Sequence[str]refs
- match
Case String - match
Criteria String - match
Decoded StringString - match
Strs List<String> - string
Group List<String>Refs
GetWafpolicyAllowlistRuleMatchProtocol
- Match
Criteria string - Protocols string
- Match
Criteria string - Protocols string
- match
Criteria String - protocols String
- match
Criteria string - protocols string
- match_
criteria str - protocols str
- match
Criteria String - protocols String
GetWafpolicyAllowlistRuleMatchQuery
- Match
Case string - Match
Criteria string - Match
Decoded stringString - Match
Strs List<string> - String
Group List<string>Refs
- Match
Case string - Match
Criteria string - Match
Decoded stringString - Match
Strs []string - String
Group []stringRefs
- match
Case String - match
Criteria String - match
Decoded StringString - match
Strs List<String> - string
Group List<String>Refs
- match
Case string - match
Criteria string - match
Decoded stringString - match
Strs string[] - string
Group string[]Refs
- match_
case str - match_
criteria str - match_
decoded_ strstring - match_
strs Sequence[str] - string_
group_ Sequence[str]refs
- match
Case String - match
Criteria String - match
Decoded StringString - match
Strs List<String> - string
Group List<String>Refs
GetWafpolicyAllowlistRuleMatchSourceIp
GetWafpolicyAllowlistRuleMatchSourceIpAddr
GetWafpolicyAllowlistRuleMatchSourceIpPrefix
- ip
Addrs List<Property Map> - mask String
GetWafpolicyAllowlistRuleMatchSourceIpPrefixIpAddr
GetWafpolicyAllowlistRuleMatchSourceIpRange
GetWafpolicyAllowlistRuleMatchSourceIpRangeBegin
GetWafpolicyAllowlistRuleMatchSourceIpRangeEnd
GetWafpolicyAllowlistRuleMatchTlsFingerprintMatch
- Fingerprints List<string>
- Match
Operation string - String
Group List<string>Refs
- Fingerprints []string
- Match
Operation string - String
Group []stringRefs
- fingerprints List<String>
- match
Operation String - string
Group List<String>Refs
- fingerprints string[]
- match
Operation string - string
Group string[]Refs
- fingerprints Sequence[str]
- match_
operation str - string_
group_ Sequence[str]refs
- fingerprints List<String>
- match
Operation String - string
Group List<String>Refs
GetWafpolicyAllowlistRuleMatchVersion
- Match
Criteria string - Versions List<string>
- Match
Criteria string - Versions []string
- match
Criteria String - versions List<String>
- match
Criteria string - versions string[]
- match_
criteria str - versions Sequence[str]
- match
Criteria String - versions List<String>
GetWafpolicyAllowlistRuleMatchVsPort
- Match
Criteria string - Ports List<double>
- Match
Criteria string - Ports []float64
- match
Criteria String - ports List<Double>
- match
Criteria string - ports number[]
- match_
criteria str - ports Sequence[float]
- match
Criteria String - ports List<Number>
GetWafpolicyApplicationSignature
- provider
Ref String - resolved
Rules List<Property Map> - rule
Overrides List<Property Map> - ruleset
Version String - selected
Applications List<String>
GetWafpolicyApplicationSignatureResolvedRule
- Enable string
- Exclude
Lists List<GetWafpolicy Application Signature Resolved Rule Exclude List> - Index string
- Is
Sensitive string - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Search WafPolicy by name.
- Paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Phase string
- Rule string
- Rule
Id string - List<string>
- Enable string
- Exclude
Lists []GetWafpolicy Application Signature Resolved Rule Exclude List - Index string
- Is
Sensitive string - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Search WafPolicy by name.
- Paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Phase string
- Rule string
- Rule
Id string - []string
- enable String
- exclude
Lists List<GetWafpolicy Application Signature Resolved Rule Exclude List> - index String
- is
Sensitive String - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Search WafPolicy by name.
- paranoia
Level String - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase String
- rule String
- rule
Id String - List<String>
- enable string
- exclude
Lists GetWafpolicy Application Signature Resolved Rule Exclude List[] - index string
- is
Sensitive string - mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name string
- Search WafPolicy by name.
- paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase string
- rule string
- rule
Id string - string[]
- enable str
- exclude_
lists Sequence[GetWafpolicy Application Signature Resolved Rule Exclude List] - index str
- is_
sensitive str - mode str
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name str
- Search WafPolicy by name.
- paranoia_
level str - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase str
- rule str
- rule_
id str - Sequence[str]
- enable String
- exclude
Lists List<Property Map> - index String
- is
Sensitive String - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Search WafPolicy by name.
- paranoia
Level String - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase String
- rule String
- rule
Id String - List<String>
GetWafpolicyApplicationSignatureResolvedRuleExcludeList
- Client
Subnets List<GetWafpolicy Application Signature Resolved Rule Exclude List Client Subnet> - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element List<GetCriterias Wafpolicy Application Signature Resolved Rule Exclude List Match Element Criteria> - Uri
Match List<GetCriterias Wafpolicy Application Signature Resolved Rule Exclude List Uri Match Criteria> - Uri
Path string
- Client
Subnets []GetWafpolicy Application Signature Resolved Rule Exclude List Client Subnet - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element []GetCriterias Wafpolicy Application Signature Resolved Rule Exclude List Match Element Criteria - Uri
Match []GetCriterias Wafpolicy Application Signature Resolved Rule Exclude List Uri Match Criteria - Uri
Path string
- client
Subnets List<GetWafpolicy Application Signature Resolved Rule Exclude List Client Subnet> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<GetCriterias Wafpolicy Application Signature Resolved Rule Exclude List Match Element Criteria> - uri
Match List<GetCriterias Wafpolicy Application Signature Resolved Rule Exclude List Uri Match Criteria> - uri
Path String
- client
Subnets GetWafpolicy Application Signature Resolved Rule Exclude List Client Subnet[] - description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element string - match
Element GetCriterias Wafpolicy Application Signature Resolved Rule Exclude List Match Element Criteria[] - uri
Match GetCriterias Wafpolicy Application Signature Resolved Rule Exclude List Uri Match Criteria[] - uri
Path string
- client_
subnets Sequence[GetWafpolicy Application Signature Resolved Rule Exclude List Client Subnet] - description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match_
element str - match_
element_ Sequence[Getcriterias Wafpolicy Application Signature Resolved Rule Exclude List Match Element Criteria] - uri_
match_ Sequence[Getcriterias Wafpolicy Application Signature Resolved Rule Exclude List Uri Match Criteria] - uri_
path str
- client
Subnets List<Property Map> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<Property Map>Criterias - uri
Match List<Property Map>Criterias - uri
Path String
GetWafpolicyApplicationSignatureResolvedRuleExcludeListClientSubnet
- ip
Addrs List<Property Map> - mask String
GetWafpolicyApplicationSignatureResolvedRuleExcludeListClientSubnetIpAddr
GetWafpolicyApplicationSignatureResolvedRuleExcludeListMatchElementCriteria
- match_
case str - match_
op str
GetWafpolicyApplicationSignatureResolvedRuleExcludeListUriMatchCriteria
- match_
case str - match_
op str
GetWafpolicyApplicationSignatureRuleOverride
- Enable string
- Exclude
Lists List<GetWafpolicy Application Signature Rule Override Exclude List> - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Rule
Id string
- Enable string
- Exclude
Lists []GetWafpolicy Application Signature Rule Override Exclude List - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Rule
Id string
- enable String
- exclude
Lists List<GetWafpolicy Application Signature Rule Override Exclude List> - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- rule
Id String
- enable string
- exclude
Lists GetWafpolicy Application Signature Rule Override Exclude List[] - mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- rule
Id string
- enable str
- exclude_
lists Sequence[GetWafpolicy Application Signature Rule Override Exclude List] - mode str
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- rule_
id str
- enable String
- exclude
Lists List<Property Map> - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- rule
Id String
GetWafpolicyApplicationSignatureRuleOverrideExcludeList
- Client
Subnets List<GetWafpolicy Application Signature Rule Override Exclude List Client Subnet> - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element List<GetCriterias Wafpolicy Application Signature Rule Override Exclude List Match Element Criteria> - Uri
Match List<GetCriterias Wafpolicy Application Signature Rule Override Exclude List Uri Match Criteria> - Uri
Path string
- Client
Subnets []GetWafpolicy Application Signature Rule Override Exclude List Client Subnet - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element []GetCriterias Wafpolicy Application Signature Rule Override Exclude List Match Element Criteria - Uri
Match []GetCriterias Wafpolicy Application Signature Rule Override Exclude List Uri Match Criteria - Uri
Path string
- client
Subnets List<GetWafpolicy Application Signature Rule Override Exclude List Client Subnet> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<GetCriterias Wafpolicy Application Signature Rule Override Exclude List Match Element Criteria> - uri
Match List<GetCriterias Wafpolicy Application Signature Rule Override Exclude List Uri Match Criteria> - uri
Path String
- client
Subnets GetWafpolicy Application Signature Rule Override Exclude List Client Subnet[] - description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element string - match
Element GetCriterias Wafpolicy Application Signature Rule Override Exclude List Match Element Criteria[] - uri
Match GetCriterias Wafpolicy Application Signature Rule Override Exclude List Uri Match Criteria[] - uri
Path string
- client_
subnets Sequence[GetWafpolicy Application Signature Rule Override Exclude List Client Subnet] - description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match_
element str - match_
element_ Sequence[Getcriterias Wafpolicy Application Signature Rule Override Exclude List Match Element Criteria] - uri_
match_ Sequence[Getcriterias Wafpolicy Application Signature Rule Override Exclude List Uri Match Criteria] - uri_
path str
- client
Subnets List<Property Map> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<Property Map>Criterias - uri
Match List<Property Map>Criterias - uri
Path String
GetWafpolicyApplicationSignatureRuleOverrideExcludeListClientSubnet
- ip
Addrs List<Property Map> - mask String
GetWafpolicyApplicationSignatureRuleOverrideExcludeListClientSubnetIpAddr
GetWafpolicyApplicationSignatureRuleOverrideExcludeListMatchElementCriteria
- match_
case str - match_
op str
GetWafpolicyApplicationSignatureRuleOverrideExcludeListUriMatchCriteria
- match_
case str - match_
op str
GetWafpolicyConfidenceOverride
- Confid
High stringValue - Confid
Low stringValue - Confid
Probable stringValue - Confid
Very stringHigh Value
- Confid
High stringValue - Confid
Low stringValue - Confid
Probable stringValue - Confid
Very stringHigh Value
- confid
High StringValue - confid
Low StringValue - confid
Probable StringValue - confid
Very StringHigh Value
- confid
High stringValue - confid
Low stringValue - confid
Probable stringValue - confid
Very stringHigh Value
- confid
High StringValue - confid
Low StringValue - confid
Probable StringValue - confid
Very StringHigh Value
GetWafpolicyConfigpbAttribute
- Version string
- Version string
- version String
- version string
- version str
- version String
GetWafpolicyCrsOverride
- Enable string
- Exclude
Lists List<GetWafpolicy Crs Override Exclude List> - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Search WafPolicy by name.
- Rule
Overrides List<GetWafpolicy Crs Override Rule Override>
- Enable string
- Exclude
Lists []GetWafpolicy Crs Override Exclude List - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Search WafPolicy by name.
- Rule
Overrides []GetWafpolicy Crs Override Rule Override
- enable String
- exclude
Lists List<GetWafpolicy Crs Override Exclude List> - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Search WafPolicy by name.
- rule
Overrides List<GetWafpolicy Crs Override Rule Override>
- enable string
- exclude
Lists GetWafpolicy Crs Override Exclude List[] - mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name string
- Search WafPolicy by name.
- rule
Overrides GetWafpolicy Crs Override Rule Override[]
- enable str
- exclude_
lists Sequence[GetWafpolicy Crs Override Exclude List] - mode str
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name str
- Search WafPolicy by name.
- rule_
overrides Sequence[GetWafpolicy Crs Override Rule Override]
- enable String
- exclude
Lists List<Property Map> - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Search WafPolicy by name.
- rule
Overrides List<Property Map>
GetWafpolicyCrsOverrideExcludeList
- Client
Subnets List<GetWafpolicy Crs Override Exclude List Client Subnet> - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element List<GetCriterias Wafpolicy Crs Override Exclude List Match Element Criteria> - Uri
Match List<GetCriterias Wafpolicy Crs Override Exclude List Uri Match Criteria> - Uri
Path string
- Client
Subnets []GetWafpolicy Crs Override Exclude List Client Subnet - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element []GetCriterias Wafpolicy Crs Override Exclude List Match Element Criteria - Uri
Match []GetCriterias Wafpolicy Crs Override Exclude List Uri Match Criteria - Uri
Path string
- client
Subnets List<GetWafpolicy Crs Override Exclude List Client Subnet> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<GetCriterias Wafpolicy Crs Override Exclude List Match Element Criteria> - uri
Match List<GetCriterias Wafpolicy Crs Override Exclude List Uri Match Criteria> - uri
Path String
- client
Subnets GetWafpolicy Crs Override Exclude List Client Subnet[] - description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element string - match
Element GetCriterias Wafpolicy Crs Override Exclude List Match Element Criteria[] - uri
Match GetCriterias Wafpolicy Crs Override Exclude List Uri Match Criteria[] - uri
Path string
- client_
subnets Sequence[GetWafpolicy Crs Override Exclude List Client Subnet] - description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match_
element str - match_
element_ Sequence[Getcriterias Wafpolicy Crs Override Exclude List Match Element Criteria] - uri_
match_ Sequence[Getcriterias Wafpolicy Crs Override Exclude List Uri Match Criteria] - uri_
path str
- client
Subnets List<Property Map> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<Property Map>Criterias - uri
Match List<Property Map>Criterias - uri
Path String
GetWafpolicyCrsOverrideExcludeListClientSubnet
- ip
Addrs List<Property Map> - mask String
GetWafpolicyCrsOverrideExcludeListClientSubnetIpAddr
GetWafpolicyCrsOverrideExcludeListMatchElementCriteria
- match_
case str - match_
op str
GetWafpolicyCrsOverrideExcludeListUriMatchCriteria
- match_
case str - match_
op str
GetWafpolicyCrsOverrideRuleOverride
- Enable string
- Exclude
Lists List<GetWafpolicy Crs Override Rule Override Exclude List> - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Rule
Id string
- Enable string
- Exclude
Lists []GetWafpolicy Crs Override Rule Override Exclude List - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Rule
Id string
- enable String
- exclude
Lists List<GetWafpolicy Crs Override Rule Override Exclude List> - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- rule
Id String
- enable string
- exclude
Lists GetWafpolicy Crs Override Rule Override Exclude List[] - mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- rule
Id string
- enable str
- exclude_
lists Sequence[GetWafpolicy Crs Override Rule Override Exclude List] - mode str
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- rule_
id str
- enable String
- exclude
Lists List<Property Map> - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- rule
Id String
GetWafpolicyCrsOverrideRuleOverrideExcludeList
- Client
Subnets List<GetWafpolicy Crs Override Rule Override Exclude List Client Subnet> - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element List<GetCriterias Wafpolicy Crs Override Rule Override Exclude List Match Element Criteria> - Uri
Match List<GetCriterias Wafpolicy Crs Override Rule Override Exclude List Uri Match Criteria> - Uri
Path string
- Client
Subnets []GetWafpolicy Crs Override Rule Override Exclude List Client Subnet - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element []GetCriterias Wafpolicy Crs Override Rule Override Exclude List Match Element Criteria - Uri
Match []GetCriterias Wafpolicy Crs Override Rule Override Exclude List Uri Match Criteria - Uri
Path string
- client
Subnets List<GetWafpolicy Crs Override Rule Override Exclude List Client Subnet> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<GetCriterias Wafpolicy Crs Override Rule Override Exclude List Match Element Criteria> - uri
Match List<GetCriterias Wafpolicy Crs Override Rule Override Exclude List Uri Match Criteria> - uri
Path String
- client
Subnets GetWafpolicy Crs Override Rule Override Exclude List Client Subnet[] - description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element string - match
Element GetCriterias Wafpolicy Crs Override Rule Override Exclude List Match Element Criteria[] - uri
Match GetCriterias Wafpolicy Crs Override Rule Override Exclude List Uri Match Criteria[] - uri
Path string
- client_
subnets Sequence[GetWafpolicy Crs Override Rule Override Exclude List Client Subnet] - description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match_
element str - match_
element_ Sequence[Getcriterias Wafpolicy Crs Override Rule Override Exclude List Match Element Criteria] - uri_
match_ Sequence[Getcriterias Wafpolicy Crs Override Rule Override Exclude List Uri Match Criteria] - uri_
path str
- client
Subnets List<Property Map> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<Property Map>Criterias - uri
Match List<Property Map>Criterias - uri
Path String
GetWafpolicyCrsOverrideRuleOverrideExcludeListClientSubnet
- ip
Addrs List<Property Map> - mask String
GetWafpolicyCrsOverrideRuleOverrideExcludeListClientSubnetIpAddr
GetWafpolicyCrsOverrideRuleOverrideExcludeListMatchElementCriteria
- match_
case str - match_
op str
GetWafpolicyCrsOverrideRuleOverrideExcludeListUriMatchCriteria
- match_
case str - match_
op str
GetWafpolicyLearningParam
- Enable
Learn stringFrom Bots - Enable
Per stringUri Learning - Learn
From stringAuthenticated Clients Only - Learn
From List<GetBots Wafpolicy Learning Param Learn From Bot> - Max
Params string - Max
Uris string - Min
Hits stringTo Learn - Sampling
Percent string - Trusted
Ipgroup stringRef - Update
Interval string
- Enable
Learn stringFrom Bots - Enable
Per stringUri Learning - Learn
From stringAuthenticated Clients Only - Learn
From []GetBots Wafpolicy Learning Param Learn From Bot - Max
Params string - Max
Uris string - Min
Hits stringTo Learn - Sampling
Percent string - Trusted
Ipgroup stringRef - Update
Interval string
- enable
Learn StringFrom Bots - enable
Per StringUri Learning - learn
From StringAuthenticated Clients Only - learn
From List<GetBots Wafpolicy Learning Param Learn From Bot> - max
Params String - max
Uris String - min
Hits StringTo Learn - sampling
Percent String - trusted
Ipgroup StringRef - update
Interval String
- enable
Learn stringFrom Bots - enable
Per stringUri Learning - learn
From stringAuthenticated Clients Only - learn
From GetBots Wafpolicy Learning Param Learn From Bot[] - max
Params string - max
Uris string - min
Hits stringTo Learn - sampling
Percent string - trusted
Ipgroup stringRef - update
Interval string
- enable
Learn StringFrom Bots - enable
Per StringUri Learning - learn
From StringAuthenticated Clients Only - learn
From List<Property Map>Bots - max
Params String - max
Uris String - min
Hits StringTo Learn - sampling
Percent String - trusted
Ipgroup StringRef - update
Interval String
GetWafpolicyLearningParamLearnFromBot
GetWafpolicyLearningParamLearnFromBotClassification
- Type string
- User
Defined stringType
- Type string
- User
Defined stringType
- type String
- user
Defined StringType
- type string
- user
Defined stringType
- type str
- user_
defined_ strtype
- type String
- user
Defined StringType
GetWafpolicyMarker
GetWafpolicyPositiveSecurityModel
- Group
Refs List<string>
- Group
Refs []string
- group
Refs List<String>
- group
Refs string[]
- group_
refs Sequence[str]
- group
Refs List<String>
GetWafpolicyPostCrsGroup
- Enable string
- Exclude
Lists List<GetWafpolicy Post Crs Group Exclude List> - Index string
- Name string
- Search WafPolicy by name.
- Rules
List<Get
Wafpolicy Post Crs Group Rule>
- Enable string
- Exclude
Lists []GetWafpolicy Post Crs Group Exclude List - Index string
- Name string
- Search WafPolicy by name.
- Rules
[]Get
Wafpolicy Post Crs Group Rule
- enable String
- exclude
Lists List<GetWafpolicy Post Crs Group Exclude List> - index String
- name String
- Search WafPolicy by name.
- rules
List<Get
Wafpolicy Post Crs Group Rule>
- enable string
- exclude
Lists GetWafpolicy Post Crs Group Exclude List[] - index string
- name string
- Search WafPolicy by name.
- rules
Get
Wafpolicy Post Crs Group Rule[]
- enable str
- exclude_
lists Sequence[GetWafpolicy Post Crs Group Exclude List] - index str
- name str
- Search WafPolicy by name.
- rules
Sequence[Get
Wafpolicy Post Crs Group Rule]
- enable String
- exclude
Lists List<Property Map> - index String
- name String
- Search WafPolicy by name.
- rules List<Property Map>
GetWafpolicyPostCrsGroupExcludeList
- Client
Subnets List<GetWafpolicy Post Crs Group Exclude List Client Subnet> - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element List<GetCriterias Wafpolicy Post Crs Group Exclude List Match Element Criteria> - Uri
Match List<GetCriterias Wafpolicy Post Crs Group Exclude List Uri Match Criteria> - Uri
Path string
- Client
Subnets []GetWafpolicy Post Crs Group Exclude List Client Subnet - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element []GetCriterias Wafpolicy Post Crs Group Exclude List Match Element Criteria - Uri
Match []GetCriterias Wafpolicy Post Crs Group Exclude List Uri Match Criteria - Uri
Path string
- client
Subnets List<GetWafpolicy Post Crs Group Exclude List Client Subnet> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<GetCriterias Wafpolicy Post Crs Group Exclude List Match Element Criteria> - uri
Match List<GetCriterias Wafpolicy Post Crs Group Exclude List Uri Match Criteria> - uri
Path String
- client
Subnets GetWafpolicy Post Crs Group Exclude List Client Subnet[] - description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element string - match
Element GetCriterias Wafpolicy Post Crs Group Exclude List Match Element Criteria[] - uri
Match GetCriterias Wafpolicy Post Crs Group Exclude List Uri Match Criteria[] - uri
Path string
- client_
subnets Sequence[GetWafpolicy Post Crs Group Exclude List Client Subnet] - description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match_
element str - match_
element_ Sequence[Getcriterias Wafpolicy Post Crs Group Exclude List Match Element Criteria] - uri_
match_ Sequence[Getcriterias Wafpolicy Post Crs Group Exclude List Uri Match Criteria] - uri_
path str
- client
Subnets List<Property Map> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<Property Map>Criterias - uri
Match List<Property Map>Criterias - uri
Path String
GetWafpolicyPostCrsGroupExcludeListClientSubnet
- ip
Addrs List<Property Map> - mask String
GetWafpolicyPostCrsGroupExcludeListClientSubnetIpAddr
GetWafpolicyPostCrsGroupExcludeListMatchElementCriteria
- match_
case str - match_
op str
GetWafpolicyPostCrsGroupExcludeListUriMatchCriteria
- match_
case str - match_
op str
GetWafpolicyPostCrsGroupRule
- Enable string
- Exclude
Lists List<GetWafpolicy Post Crs Group Rule Exclude List> - Index string
- Is
Sensitive string - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Search WafPolicy by name.
- Paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Phase string
- Rule string
- Rule
Id string - List<string>
- Enable string
- Exclude
Lists []GetWafpolicy Post Crs Group Rule Exclude List - Index string
- Is
Sensitive string - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Search WafPolicy by name.
- Paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Phase string
- Rule string
- Rule
Id string - []string
- enable String
- exclude
Lists List<GetWafpolicy Post Crs Group Rule Exclude List> - index String
- is
Sensitive String - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Search WafPolicy by name.
- paranoia
Level String - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase String
- rule String
- rule
Id String - List<String>
- enable string
- exclude
Lists GetWafpolicy Post Crs Group Rule Exclude List[] - index string
- is
Sensitive string - mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name string
- Search WafPolicy by name.
- paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase string
- rule string
- rule
Id string - string[]
- enable str
- exclude_
lists Sequence[GetWafpolicy Post Crs Group Rule Exclude List] - index str
- is_
sensitive str - mode str
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name str
- Search WafPolicy by name.
- paranoia_
level str - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase str
- rule str
- rule_
id str - Sequence[str]
- enable String
- exclude
Lists List<Property Map> - index String
- is
Sensitive String - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Search WafPolicy by name.
- paranoia
Level String - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase String
- rule String
- rule
Id String - List<String>
GetWafpolicyPostCrsGroupRuleExcludeList
- Client
Subnets List<GetWafpolicy Post Crs Group Rule Exclude List Client Subnet> - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element List<GetCriterias Wafpolicy Post Crs Group Rule Exclude List Match Element Criteria> - Uri
Match List<GetCriterias Wafpolicy Post Crs Group Rule Exclude List Uri Match Criteria> - Uri
Path string
- Client
Subnets []GetWafpolicy Post Crs Group Rule Exclude List Client Subnet - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element []GetCriterias Wafpolicy Post Crs Group Rule Exclude List Match Element Criteria - Uri
Match []GetCriterias Wafpolicy Post Crs Group Rule Exclude List Uri Match Criteria - Uri
Path string
- client
Subnets List<GetWafpolicy Post Crs Group Rule Exclude List Client Subnet> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<GetCriterias Wafpolicy Post Crs Group Rule Exclude List Match Element Criteria> - uri
Match List<GetCriterias Wafpolicy Post Crs Group Rule Exclude List Uri Match Criteria> - uri
Path String
- client
Subnets GetWafpolicy Post Crs Group Rule Exclude List Client Subnet[] - description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element string - match
Element GetCriterias Wafpolicy Post Crs Group Rule Exclude List Match Element Criteria[] - uri
Match GetCriterias Wafpolicy Post Crs Group Rule Exclude List Uri Match Criteria[] - uri
Path string
- client_
subnets Sequence[GetWafpolicy Post Crs Group Rule Exclude List Client Subnet] - description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match_
element str - match_
element_ Sequence[Getcriterias Wafpolicy Post Crs Group Rule Exclude List Match Element Criteria] - uri_
match_ Sequence[Getcriterias Wafpolicy Post Crs Group Rule Exclude List Uri Match Criteria] - uri_
path str
- client
Subnets List<Property Map> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<Property Map>Criterias - uri
Match List<Property Map>Criterias - uri
Path String
GetWafpolicyPostCrsGroupRuleExcludeListClientSubnet
- ip
Addrs List<Property Map> - mask String
GetWafpolicyPostCrsGroupRuleExcludeListClientSubnetIpAddr
GetWafpolicyPostCrsGroupRuleExcludeListMatchElementCriteria
- match_
case str - match_
op str
GetWafpolicyPostCrsGroupRuleExcludeListUriMatchCriteria
- match_
case str - match_
op str
GetWafpolicyPreCrsGroup
- Enable string
- Exclude
Lists List<GetWafpolicy Pre Crs Group Exclude List> - Index string
- Name string
- Search WafPolicy by name.
- Rules
List<Get
Wafpolicy Pre Crs Group Rule>
- Enable string
- Exclude
Lists []GetWafpolicy Pre Crs Group Exclude List - Index string
- Name string
- Search WafPolicy by name.
- Rules
[]Get
Wafpolicy Pre Crs Group Rule
- enable String
- exclude
Lists List<GetWafpolicy Pre Crs Group Exclude List> - index String
- name String
- Search WafPolicy by name.
- rules
List<Get
Wafpolicy Pre Crs Group Rule>
- enable string
- exclude
Lists GetWafpolicy Pre Crs Group Exclude List[] - index string
- name string
- Search WafPolicy by name.
- rules
Get
Wafpolicy Pre Crs Group Rule[]
- enable str
- exclude_
lists Sequence[GetWafpolicy Pre Crs Group Exclude List] - index str
- name str
- Search WafPolicy by name.
- rules
Sequence[Get
Wafpolicy Pre Crs Group Rule]
- enable String
- exclude
Lists List<Property Map> - index String
- name String
- Search WafPolicy by name.
- rules List<Property Map>
GetWafpolicyPreCrsGroupExcludeList
- Client
Subnets List<GetWafpolicy Pre Crs Group Exclude List Client Subnet> - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element List<GetCriterias Wafpolicy Pre Crs Group Exclude List Match Element Criteria> - Uri
Match List<GetCriterias Wafpolicy Pre Crs Group Exclude List Uri Match Criteria> - Uri
Path string
- Client
Subnets []GetWafpolicy Pre Crs Group Exclude List Client Subnet - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element []GetCriterias Wafpolicy Pre Crs Group Exclude List Match Element Criteria - Uri
Match []GetCriterias Wafpolicy Pre Crs Group Exclude List Uri Match Criteria - Uri
Path string
- client
Subnets List<GetWafpolicy Pre Crs Group Exclude List Client Subnet> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<GetCriterias Wafpolicy Pre Crs Group Exclude List Match Element Criteria> - uri
Match List<GetCriterias Wafpolicy Pre Crs Group Exclude List Uri Match Criteria> - uri
Path String
- client
Subnets GetWafpolicy Pre Crs Group Exclude List Client Subnet[] - description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element string - match
Element GetCriterias Wafpolicy Pre Crs Group Exclude List Match Element Criteria[] - uri
Match GetCriterias Wafpolicy Pre Crs Group Exclude List Uri Match Criteria[] - uri
Path string
- client_
subnets Sequence[GetWafpolicy Pre Crs Group Exclude List Client Subnet] - description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match_
element str - match_
element_ Sequence[Getcriterias Wafpolicy Pre Crs Group Exclude List Match Element Criteria] - uri_
match_ Sequence[Getcriterias Wafpolicy Pre Crs Group Exclude List Uri Match Criteria] - uri_
path str
- client
Subnets List<Property Map> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<Property Map>Criterias - uri
Match List<Property Map>Criterias - uri
Path String
GetWafpolicyPreCrsGroupExcludeListClientSubnet
- ip
Addrs List<Property Map> - mask String
GetWafpolicyPreCrsGroupExcludeListClientSubnetIpAddr
GetWafpolicyPreCrsGroupExcludeListMatchElementCriteria
- match_
case str - match_
op str
GetWafpolicyPreCrsGroupExcludeListUriMatchCriteria
- match_
case str - match_
op str
GetWafpolicyPreCrsGroupRule
- Enable string
- Exclude
Lists List<GetWafpolicy Pre Crs Group Rule Exclude List> - Index string
- Is
Sensitive string - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Search WafPolicy by name.
- Paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Phase string
- Rule string
- Rule
Id string - List<string>
- Enable string
- Exclude
Lists []GetWafpolicy Pre Crs Group Rule Exclude List - Index string
- Is
Sensitive string - Mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Search WafPolicy by name.
- Paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Phase string
- Rule string
- Rule
Id string - []string
- enable String
- exclude
Lists List<GetWafpolicy Pre Crs Group Rule Exclude List> - index String
- is
Sensitive String - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Search WafPolicy by name.
- paranoia
Level String - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase String
- rule String
- rule
Id String - List<String>
- enable string
- exclude
Lists GetWafpolicy Pre Crs Group Rule Exclude List[] - index string
- is
Sensitive string - mode string
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name string
- Search WafPolicy by name.
- paranoia
Level string - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase string
- rule string
- rule
Id string - string[]
- enable str
- exclude_
lists Sequence[GetWafpolicy Pre Crs Group Rule Exclude List] - index str
- is_
sensitive str - mode str
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name str
- Search WafPolicy by name.
- paranoia_
level str - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase str
- rule str
- rule_
id str - Sequence[str]
- enable String
- exclude
Lists List<Property Map> - index String
- is
Sensitive String - mode String
- Waf policy mode. This can be detection or enforcement. It can be overwritten by rules if allow_mode_delegation is set. Enum options - WAF_MODE_DETECTION_ONLY, WAF_MODE_ENFORCEMENT. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Search WafPolicy by name.
- paranoia
Level String - Waf ruleset paranoia mode. This is used to select rules based on the paranoia-level tag. Enum options - WAF_PARANOIA_LEVEL_LOW, WAF_PARANOIA_LEVEL_MEDIUM, WAF_PARANOIA_LEVEL_HIGH, WAF_PARANOIA_LEVEL_EXTREME. Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- phase String
- rule String
- rule
Id String - List<String>
GetWafpolicyPreCrsGroupRuleExcludeList
- Client
Subnets List<GetWafpolicy Pre Crs Group Rule Exclude List Client Subnet> - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element List<GetCriterias Wafpolicy Pre Crs Group Rule Exclude List Match Element Criteria> - Uri
Match List<GetCriterias Wafpolicy Pre Crs Group Rule Exclude List Uri Match Criteria> - Uri
Path string
- Client
Subnets []GetWafpolicy Pre Crs Group Rule Exclude List Client Subnet - Description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Match
Element string - Match
Element []GetCriterias Wafpolicy Pre Crs Group Rule Exclude List Match Element Criteria - Uri
Match []GetCriterias Wafpolicy Pre Crs Group Rule Exclude List Uri Match Criteria - Uri
Path string
- client
Subnets List<GetWafpolicy Pre Crs Group Rule Exclude List Client Subnet> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<GetCriterias Wafpolicy Pre Crs Group Rule Exclude List Match Element Criteria> - uri
Match List<GetCriterias Wafpolicy Pre Crs Group Rule Exclude List Uri Match Criteria> - uri
Path String
- client
Subnets GetWafpolicy Pre Crs Group Rule Exclude List Client Subnet[] - description string
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element string - match
Element GetCriterias Wafpolicy Pre Crs Group Rule Exclude List Match Element Criteria[] - uri
Match GetCriterias Wafpolicy Pre Crs Group Rule Exclude List Uri Match Criteria[] - uri
Path string
- client_
subnets Sequence[GetWafpolicy Pre Crs Group Rule Exclude List Client Subnet] - description str
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match_
element str - match_
element_ Sequence[Getcriterias Wafpolicy Pre Crs Group Rule Exclude List Match Element Criteria] - uri_
match_ Sequence[Getcriterias Wafpolicy Pre Crs Group Rule Exclude List Uri Match Criteria] - uri_
path str
- client
Subnets List<Property Map> - description String
- Field introduced in 17.2.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- match
Element String - match
Element List<Property Map>Criterias - uri
Match List<Property Map>Criterias - uri
Path String
GetWafpolicyPreCrsGroupRuleExcludeListClientSubnet
- ip
Addrs List<Property Map> - mask String
GetWafpolicyPreCrsGroupRuleExcludeListClientSubnetIpAddr
GetWafpolicyPreCrsGroupRuleExcludeListMatchElementCriteria
- match_
case str - match_
op str
GetWafpolicyPreCrsGroupRuleExcludeListUriMatchCriteria
- match_
case str - match_
op str
GetWafpolicyRequiredDataFile
Package Details
- Repository
- avi vmware/terraform-provider-avi
- License
- Notes
- This Pulumi package is based on the
avi
Terraform Provider.