Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Checkpoint Provider
  3. API Docs
  4. ManagementThreatIndicator
checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw
checkpointsw/terraform-provider-checkpoint

checkpoint.ManagementThreatIndicator

Explore with Pulumi AI

checkpoint logo
checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw
checkpointsw/terraform-provider-checkpoint

    This resource allows you to add/update/delete Check Point Threat Indicator.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const example = new checkpoint.ManagementThreatIndicator("example", {
    action: "ask",
    ignoreWarnings: true,
    observables: [{
        confidence: "medium",
        mailTo: "someone@somewhere.com",
        name: "My_Observable",
        product: "AV",
        severity: "low",
    }],
    profileOverrides: [{
        action: "detect",
        profile: "My_Profile",
    }],
});

    import pulumi
import pulumi_checkpoint as checkpoint

example = checkpoint.ManagementThreatIndicator("example",
    action="ask",
    ignore_warnings=True,
    observables=[{
        "confidence": "medium",
        "mail_to": "someone@somewhere.com",
        "name": "My_Observable",
        "product": "AV",
        "severity": "low",
    }],
    profile_overrides=[{
        "action": "detect",
        "profile": "My_Profile",
    }])

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v2/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := checkpoint.NewManagementThreatIndicator(ctx, "example", &checkpoint.ManagementThreatIndicatorArgs{
			Action:         pulumi.String("ask"),
			IgnoreWarnings: pulumi.Bool(true),
			Observables: checkpoint.ManagementThreatIndicatorObservableArray{
				&checkpoint.ManagementThreatIndicatorObservableArgs{
					Confidence: pulumi.String("medium"),
					MailTo:     pulumi.String("someone@somewhere.com"),
					Name:       pulumi.String("My_Observable"),
					Product:    pulumi.String("AV"),
					Severity:   pulumi.String("low"),
				},
			},
			ProfileOverrides: checkpoint.ManagementThreatIndicatorProfileOverrideArray{
				&checkpoint.ManagementThreatIndicatorProfileOverrideArgs{
					Action:  pulumi.String("detect"),
					Profile: pulumi.String("My_Profile"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var example = new Checkpoint.ManagementThreatIndicator("example", new()
    {
        Action = "ask",
        IgnoreWarnings = true,
        Observables = new[]
        {
            new Checkpoint.Inputs.ManagementThreatIndicatorObservableArgs
            {
                Confidence = "medium",
                MailTo = "someone@somewhere.com",
                Name = "My_Observable",
                Product = "AV",
                Severity = "low",
            },
        },
        ProfileOverrides = new[]
        {
            new Checkpoint.Inputs.ManagementThreatIndicatorProfileOverrideArgs
            {
                Action = "detect",
                Profile = "My_Profile",
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.ManagementThreatIndicator;
import com.pulumi.checkpoint.ManagementThreatIndicatorArgs;
import com.pulumi.checkpoint.inputs.ManagementThreatIndicatorObservableArgs;
import com.pulumi.checkpoint.inputs.ManagementThreatIndicatorProfileOverrideArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ManagementThreatIndicator("example", ManagementThreatIndicatorArgs.builder()
            .action("ask")
            .ignoreWarnings(true)
            .observables(ManagementThreatIndicatorObservableArgs.builder()
                .confidence("medium")
                .mailTo("someone@somewhere.com")
                .name("My_Observable")
                .product("AV")
                .severity("low")
                .build())
            .profileOverrides(ManagementThreatIndicatorProfileOverrideArgs.builder()
                .action("detect")
                .profile("My_Profile")
                .build())
            .build());

    }
}

    resources:
  example:
    type: checkpoint:ManagementThreatIndicator
    properties:
      action: ask
      ignoreWarnings: true
      observables:
        - confidence: medium
          mailTo: someone@somewhere.com
          name: My_Observable
          product: AV
          severity: low
      profileOverrides:
        - action: detect
          profile: My_Profile

    Create ManagementThreatIndicator Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ManagementThreatIndicator(name: string, args?: ManagementThreatIndicatorArgs, opts?: CustomResourceOptions);
    @overload
def ManagementThreatIndicator(resource_name: str,
                              args: Optional[ManagementThreatIndicatorArgs] = None,
                              opts: Optional[ResourceOptions] = None)

@overload
def ManagementThreatIndicator(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              action: Optional[str] = None,
                              color: Optional[str] = None,
                              comments: Optional[str] = None,
                              ignore_errors: Optional[bool] = None,
                              ignore_warnings: Optional[bool] = None,
                              management_threat_indicator_id: Optional[str] = None,
                              name: Optional[str] = None,
                              observables: Optional[Sequence[ManagementThreatIndicatorObservableArgs]] = None,
                              profile_overrides: Optional[Sequence[ManagementThreatIndicatorProfileOverrideArgs]] = None,
                              tags: Optional[Sequence[str]] = None)
    func NewManagementThreatIndicator(ctx *Context, name string, args *ManagementThreatIndicatorArgs, opts ...ResourceOption) (*ManagementThreatIndicator, error)
    public ManagementThreatIndicator(string name, ManagementThreatIndicatorArgs? args = null, CustomResourceOptions? opts = null)
    public ManagementThreatIndicator(String name, ManagementThreatIndicatorArgs args)
public ManagementThreatIndicator(String name, ManagementThreatIndicatorArgs args, CustomResourceOptions options)

    type: checkpoint:ManagementThreatIndicator
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ManagementThreatIndicatorArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ManagementThreatIndicatorArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ManagementThreatIndicatorArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ManagementThreatIndicatorArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ManagementThreatIndicatorArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var managementThreatIndicatorResource = new Checkpoint.ManagementThreatIndicator("managementThreatIndicatorResource", new()
{
    Action = "string",
    Color = "string",
    Comments = "string",
    IgnoreErrors = false,
    IgnoreWarnings = false,
    ManagementThreatIndicatorId = "string",
    Name = "string",
    Observables = new[]
    {
        new Checkpoint.Inputs.ManagementThreatIndicatorObservableArgs
        {
            Name = "string",
            MailFrom = "string",
            MailSubject = "string",
            IpAddressFirst = "string",
            IpAddressLast = "string",
            MailCc = "string",
            Confidence = "string",
            MailReplyTo = "string",
            IpAddress = "string",
            MailTo = "string",
            Md5 = "string",
            Domain = "string",
            Product = "string",
            Severity = "string",
            Url = "string",
        },
    },
    ProfileOverrides = new[]
    {
        new Checkpoint.Inputs.ManagementThreatIndicatorProfileOverrideArgs
        {
            Action = "string",
            Profile = "string",
        },
    },
    Tags = new[]
    {
        "string",
    },
});

    example, err := checkpoint.NewManagementThreatIndicator(ctx, "managementThreatIndicatorResource", &checkpoint.ManagementThreatIndicatorArgs{
	Action:                      pulumi.String("string"),
	Color:                       pulumi.String("string"),
	Comments:                    pulumi.String("string"),
	IgnoreErrors:                pulumi.Bool(false),
	IgnoreWarnings:              pulumi.Bool(false),
	ManagementThreatIndicatorId: pulumi.String("string"),
	Name:                        pulumi.String("string"),
	Observables: checkpoint.ManagementThreatIndicatorObservableArray{
		&checkpoint.ManagementThreatIndicatorObservableArgs{
			Name:           pulumi.String("string"),
			MailFrom:       pulumi.String("string"),
			MailSubject:    pulumi.String("string"),
			IpAddressFirst: pulumi.String("string"),
			IpAddressLast:  pulumi.String("string"),
			MailCc:         pulumi.String("string"),
			Confidence:     pulumi.String("string"),
			MailReplyTo:    pulumi.String("string"),
			IpAddress:      pulumi.String("string"),
			MailTo:         pulumi.String("string"),
			Md5:            pulumi.String("string"),
			Domain:         pulumi.String("string"),
			Product:        pulumi.String("string"),
			Severity:       pulumi.String("string"),
			Url:            pulumi.String("string"),
		},
	},
	ProfileOverrides: checkpoint.ManagementThreatIndicatorProfileOverrideArray{
		&checkpoint.ManagementThreatIndicatorProfileOverrideArgs{
			Action:  pulumi.String("string"),
			Profile: pulumi.String("string"),
		},
	},
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var managementThreatIndicatorResource = new ManagementThreatIndicator("managementThreatIndicatorResource", ManagementThreatIndicatorArgs.builder()
    .action("string")
    .color("string")
    .comments("string")
    .ignoreErrors(false)
    .ignoreWarnings(false)
    .managementThreatIndicatorId("string")
    .name("string")
    .observables(ManagementThreatIndicatorObservableArgs.builder()
        .name("string")
        .mailFrom("string")
        .mailSubject("string")
        .ipAddressFirst("string")
        .ipAddressLast("string")
        .mailCc("string")
        .confidence("string")
        .mailReplyTo("string")
        .ipAddress("string")
        .mailTo("string")
        .md5("string")
        .domain("string")
        .product("string")
        .severity("string")
        .url("string")
        .build())
    .profileOverrides(ManagementThreatIndicatorProfileOverrideArgs.builder()
        .action("string")
        .profile("string")
        .build())
    .tags("string")
    .build());

    management_threat_indicator_resource = checkpoint.ManagementThreatIndicator("managementThreatIndicatorResource",
    action="string",
    color="string",
    comments="string",
    ignore_errors=False,
    ignore_warnings=False,
    management_threat_indicator_id="string",
    name="string",
    observables=[{
        "name": "string",
        "mail_from": "string",
        "mail_subject": "string",
        "ip_address_first": "string",
        "ip_address_last": "string",
        "mail_cc": "string",
        "confidence": "string",
        "mail_reply_to": "string",
        "ip_address": "string",
        "mail_to": "string",
        "md5": "string",
        "domain": "string",
        "product": "string",
        "severity": "string",
        "url": "string",
    }],
    profile_overrides=[{
        "action": "string",
        "profile": "string",
    }],
    tags=["string"])

    const managementThreatIndicatorResource = new checkpoint.ManagementThreatIndicator("managementThreatIndicatorResource", {
    action: "string",
    color: "string",
    comments: "string",
    ignoreErrors: false,
    ignoreWarnings: false,
    managementThreatIndicatorId: "string",
    name: "string",
    observables: [{
        name: "string",
        mailFrom: "string",
        mailSubject: "string",
        ipAddressFirst: "string",
        ipAddressLast: "string",
        mailCc: "string",
        confidence: "string",
        mailReplyTo: "string",
        ipAddress: "string",
        mailTo: "string",
        md5: "string",
        domain: "string",
        product: "string",
        severity: "string",
        url: "string",
    }],
    profileOverrides: [{
        action: "string",
        profile: "string",
    }],
    tags: ["string"],
});

    type: checkpoint:ManagementThreatIndicator
properties:
    action: string
    color: string
    comments: string
    ignoreErrors: false
    ignoreWarnings: false
    managementThreatIndicatorId: string
    name: string
    observables:
        - confidence: string
          domain: string
          ipAddress: string
          ipAddressFirst: string
          ipAddressLast: string
          mailCc: string
          mailFrom: string
          mailReplyTo: string
          mailSubject: string
          mailTo: string
          md5: string
          name: string
          product: string
          severity: string
          url: string
    profileOverrides:
        - action: string
          profile: string
    tags:
        - string

    ManagementThreatIndicator Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ManagementThreatIndicator resource accepts the following input properties:

    Action string
    The indicator's action.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementThreatIndicatorId string
    Name string
    Object name. Should be unique in the domain.
    Observables List<ManagementThreatIndicatorObservable>
    The indicator's observables. Indicator's observables blocks are documented below.
    ProfileOverrides List<ManagementThreatIndicatorProfileOverride>
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    Tags List<string>
    Collection of tag identifiers.
    Action string
    The indicator's action.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementThreatIndicatorId string
    Name string
    Object name. Should be unique in the domain.
    Observables []ManagementThreatIndicatorObservableArgs
    The indicator's observables. Indicator's observables blocks are documented below.
    ProfileOverrides []ManagementThreatIndicatorProfileOverrideArgs
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    Tags []string
    Collection of tag identifiers.
    action String
    The indicator's action.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementThreatIndicatorId String
    name String
    Object name. Should be unique in the domain.
    observables List<ManagementThreatIndicatorObservable>
    The indicator's observables. Indicator's observables blocks are documented below.
    profileOverrides List<ManagementThreatIndicatorProfileOverride>
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    tags List<String>
    Collection of tag identifiers.
    action string
    The indicator's action.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    managementThreatIndicatorId string
    name string
    Object name. Should be unique in the domain.
    observables ManagementThreatIndicatorObservable[]
    The indicator's observables. Indicator's observables blocks are documented below.
    profileOverrides ManagementThreatIndicatorProfileOverride[]
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    tags string[]
    Collection of tag identifiers.
    action str
    The indicator's action.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    management_threat_indicator_id str
    name str
    Object name. Should be unique in the domain.
    observables Sequence[ManagementThreatIndicatorObservableArgs]
    The indicator's observables. Indicator's observables blocks are documented below.
    profile_overrides Sequence[ManagementThreatIndicatorProfileOverrideArgs]
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    tags Sequence[str]
    Collection of tag identifiers.
    action String
    The indicator's action.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementThreatIndicatorId String
    name String
    Object name. Should be unique in the domain.
    observables List<Property Map>
    The indicator's observables. Indicator's observables blocks are documented below.
    profileOverrides List<Property Map>
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    tags List<String>
    Collection of tag identifiers.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ManagementThreatIndicator resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ManagementThreatIndicator Resource

    Get an existing ManagementThreatIndicator resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ManagementThreatIndicatorState, opts?: CustomResourceOptions): ManagementThreatIndicator
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        color: Optional[str] = None,
        comments: Optional[str] = None,
        ignore_errors: Optional[bool] = None,
        ignore_warnings: Optional[bool] = None,
        management_threat_indicator_id: Optional[str] = None,
        name: Optional[str] = None,
        observables: Optional[Sequence[ManagementThreatIndicatorObservableArgs]] = None,
        profile_overrides: Optional[Sequence[ManagementThreatIndicatorProfileOverrideArgs]] = None,
        tags: Optional[Sequence[str]] = None) -> ManagementThreatIndicator
    func GetManagementThreatIndicator(ctx *Context, name string, id IDInput, state *ManagementThreatIndicatorState, opts ...ResourceOption) (*ManagementThreatIndicator, error)
    public static ManagementThreatIndicator Get(string name, Input<string> id, ManagementThreatIndicatorState? state, CustomResourceOptions? opts = null)
    public static ManagementThreatIndicator get(String name, Output<String> id, ManagementThreatIndicatorState state, CustomResourceOptions options)
    resources:  _:    type: checkpoint:ManagementThreatIndicator    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action string
    The indicator's action.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementThreatIndicatorId string
    Name string
    Object name. Should be unique in the domain.
    Observables List<ManagementThreatIndicatorObservable>
    The indicator's observables. Indicator's observables blocks are documented below.
    ProfileOverrides List<ManagementThreatIndicatorProfileOverride>
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    Tags List<string>
    Collection of tag identifiers.
    Action string
    The indicator's action.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    ManagementThreatIndicatorId string
    Name string
    Object name. Should be unique in the domain.
    Observables []ManagementThreatIndicatorObservableArgs
    The indicator's observables. Indicator's observables blocks are documented below.
    ProfileOverrides []ManagementThreatIndicatorProfileOverrideArgs
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    Tags []string
    Collection of tag identifiers.
    action String
    The indicator's action.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementThreatIndicatorId String
    name String
    Object name. Should be unique in the domain.
    observables List<ManagementThreatIndicatorObservable>
    The indicator's observables. Indicator's observables blocks are documented below.
    profileOverrides List<ManagementThreatIndicatorProfileOverride>
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    tags List<String>
    Collection of tag identifiers.
    action string
    The indicator's action.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    managementThreatIndicatorId string
    name string
    Object name. Should be unique in the domain.
    observables ManagementThreatIndicatorObservable[]
    The indicator's observables. Indicator's observables blocks are documented below.
    profileOverrides ManagementThreatIndicatorProfileOverride[]
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    tags string[]
    Collection of tag identifiers.
    action str
    The indicator's action.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    management_threat_indicator_id str
    name str
    Object name. Should be unique in the domain.
    observables Sequence[ManagementThreatIndicatorObservableArgs]
    The indicator's observables. Indicator's observables blocks are documented below.
    profile_overrides Sequence[ManagementThreatIndicatorProfileOverrideArgs]
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    tags Sequence[str]
    Collection of tag identifiers.
    action String
    The indicator's action.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    managementThreatIndicatorId String
    name String
    Object name. Should be unique in the domain.
    observables List<Property Map>
    The indicator's observables. Indicator's observables blocks are documented below.
    profileOverrides List<Property Map>
    Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
    tags List<String>
    Collection of tag identifiers.

    Supporting Types

    ManagementThreatIndicatorObservable, ManagementThreatIndicatorObservableArgs

    Name string
    Object name. Should be unique in the domain.
    Confidence string
    The confidence level the indicator has that a real threat has been uncovered.
    Domain string
    The name of a domain.
    IpAddress string
    A valid IP-Address.
    IpAddressFirst string
    A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
    IpAddressLast string
    A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
    MailCc string
    A valid E-Mail address, cc field.
    MailFrom string
    A valid E-Mail address, sender field.
    MailReplyTo string
    A valid E-Mail address, reply-to field.
    MailSubject string
    Subject of E-Mail.
    MailTo string
    A valid E-Mail address, recipient filed.
    Md5 string
    A valid MD5 sequence.
    Product string
    The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
    Severity string
    The severity level of the threat.
    Url string
    A valid URL.
    Name string
    Object name. Should be unique in the domain.
    Confidence string
    The confidence level the indicator has that a real threat has been uncovered.
    Domain string
    The name of a domain.
    IpAddress string
    A valid IP-Address.
    IpAddressFirst string
    A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
    IpAddressLast string
    A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
    MailCc string
    A valid E-Mail address, cc field.
    MailFrom string
    A valid E-Mail address, sender field.
    MailReplyTo string
    A valid E-Mail address, reply-to field.
    MailSubject string
    Subject of E-Mail.
    MailTo string
    A valid E-Mail address, recipient filed.
    Md5 string
    A valid MD5 sequence.
    Product string
    The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
    Severity string
    The severity level of the threat.
    Url string
    A valid URL.
    name String
    Object name. Should be unique in the domain.
    confidence String
    The confidence level the indicator has that a real threat has been uncovered.
    domain String
    The name of a domain.
    ipAddress String
    A valid IP-Address.
    ipAddressFirst String
    A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
    ipAddressLast String
    A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
    mailCc String
    A valid E-Mail address, cc field.
    mailFrom String
    A valid E-Mail address, sender field.
    mailReplyTo String
    A valid E-Mail address, reply-to field.
    mailSubject String
    Subject of E-Mail.
    mailTo String
    A valid E-Mail address, recipient filed.
    md5 String
    A valid MD5 sequence.
    product String
    The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
    severity String
    The severity level of the threat.
    url String
    A valid URL.
    name string
    Object name. Should be unique in the domain.
    confidence string
    The confidence level the indicator has that a real threat has been uncovered.
    domain string
    The name of a domain.
    ipAddress string
    A valid IP-Address.
    ipAddressFirst string
    A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
    ipAddressLast string
    A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
    mailCc string
    A valid E-Mail address, cc field.
    mailFrom string
    A valid E-Mail address, sender field.
    mailReplyTo string
    A valid E-Mail address, reply-to field.
    mailSubject string
    Subject of E-Mail.
    mailTo string
    A valid E-Mail address, recipient filed.
    md5 string
    A valid MD5 sequence.
    product string
    The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
    severity string
    The severity level of the threat.
    url string
    A valid URL.
    name str
    Object name. Should be unique in the domain.
    confidence str
    The confidence level the indicator has that a real threat has been uncovered.
    domain str
    The name of a domain.
    ip_address str
    A valid IP-Address.
    ip_address_first str
    A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
    ip_address_last str
    A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
    mail_cc str
    A valid E-Mail address, cc field.
    mail_from str
    A valid E-Mail address, sender field.
    mail_reply_to str
    A valid E-Mail address, reply-to field.
    mail_subject str
    Subject of E-Mail.
    mail_to str
    A valid E-Mail address, recipient filed.
    md5 str
    A valid MD5 sequence.
    product str
    The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
    severity str
    The severity level of the threat.
    url str
    A valid URL.
    name String
    Object name. Should be unique in the domain.
    confidence String
    The confidence level the indicator has that a real threat has been uncovered.
    domain String
    The name of a domain.
    ipAddress String
    A valid IP-Address.
    ipAddressFirst String
    A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
    ipAddressLast String
    A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
    mailCc String
    A valid E-Mail address, cc field.
    mailFrom String
    A valid E-Mail address, sender field.
    mailReplyTo String
    A valid E-Mail address, reply-to field.
    mailSubject String
    Subject of E-Mail.
    mailTo String
    A valid E-Mail address, recipient filed.
    md5 String
    A valid MD5 sequence.
    product String
    The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
    severity String
    The severity level of the threat.
    url String
    A valid URL.

    ManagementThreatIndicatorProfileOverride, ManagementThreatIndicatorProfileOverrideArgs

    Action string
    The indicator's action in this profile.
    Profile string
    The profile in which to override the indicator's action.
    Action string
    The indicator's action in this profile.
    Profile string
    The profile in which to override the indicator's action.
    action String
    The indicator's action in this profile.
    profile String
    The profile in which to override the indicator's action.
    action string
    The indicator's action in this profile.
    profile string
    The profile in which to override the indicator's action.
    action str
    The indicator's action in this profile.
    profile str
    The profile in which to override the indicator's action.
    action String
    The indicator's action in this profile.
    profile String
    The profile in which to override the indicator's action.

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    checkpoint logo
    checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw
    checkpointsw/terraform-provider-checkpoint