published on Thursday, Sep 10, 2026 by ibm-cloud
published on Thursday, Sep 10, 2026 by ibm-cloud
Provides an IBM Cloud Internet Services ruleset resource to update and delete the ruleset of an instance or domain. To deploy the managed rulesets see entrypoint ruleset. For more information about IBM Cloud Internet Services rulesets, see ruleset instance. As there is no option to create a ruleset resource, it is required to use import module to generate the respective resource configurations(Reference) and use the import command to populate the state file, as stated at the end of this page.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";
// update ruleset of a domain or instance
const config = new ibm.CisRuleset("config", {
cisId: instance.id,
domainId: cisDomain.domainId,
rulesetId: "943c5da120114ea5831dc1edf8b6f769",
rulesets: [{
description: "Entry point ruleset",
rules: [{
id: rule.id,
action: "execute",
actionParameters: {
id: toBeDeployedRuleset.id,
overrides: {
action: "log",
enabled: true,
overrideRules: [{
ruleId: overridenRule.id,
enabled: true,
action: "block",
scoreThreshold: 60,
}],
categories: [{
category: "wordpress",
enabled: true,
action: "block",
}],
},
},
description: rule.description,
enabled: false,
expression: "true",
ref: referenceRule.id,
}],
}],
});
import pulumi
import pulumi_ibm as ibm
# update ruleset of a domain or instance
config = ibm.CisRuleset("config",
cis_id=instance["id"],
domain_id=cis_domain["domainId"],
ruleset_id="943c5da120114ea5831dc1edf8b6f769",
rulesets=[{
"description": "Entry point ruleset",
"rules": [{
"id": rule["id"],
"action": "execute",
"action_parameters": {
"id": to_be_deployed_ruleset["id"],
"overrides": {
"action": "log",
"enabled": True,
"override_rules": [{
"rule_id": overriden_rule["id"],
"enabled": True,
"action": "block",
"score_threshold": 60,
}],
"categories": [{
"category": "wordpress",
"enabled": True,
"action": "block",
}],
},
},
"description": rule["description"],
"enabled": False,
"expression": "true",
"ref": reference_rule["id"],
}],
}])
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/v2/ibm"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
// update ruleset of a domain or instance
_, err := ibm.NewCisRuleset(ctx, "config", &ibm.CisRulesetArgs{
CisId: pulumi.Any(instance.Id),
DomainId: pulumi.Any(cisDomain.DomainId),
RulesetId: pulumi.String("943c5da120114ea5831dc1edf8b6f769"),
Rulesets: ibm.CisRulesetRulesetArray{
&ibm.CisRulesetRulesetArgs{
Description: pulumi.String("Entry point ruleset"),
Rules: ibm.CisRulesetRulesetRuleArray{
&ibm.CisRulesetRulesetRuleArgs{
Id: pulumi.Any(rule.Id),
Action: pulumi.String("execute"),
ActionParameters: &ibm.CisRulesetRulesetRuleActionParametersArgs{
Id: pulumi.Any(toBeDeployedRuleset.Id),
Overrides: &ibm.CisRulesetRulesetRuleActionParametersOverridesArgs{
Action: pulumi.String("log"),
Enabled: pulumi.Bool(true),
OverrideRules: ibm.CisRulesetRulesetRuleActionParametersOverridesOverrideRuleArray{
&ibm.CisRulesetRulesetRuleActionParametersOverridesOverrideRuleArgs{
RuleId: pulumi.Any(overridenRule.Id),
Enabled: pulumi.Bool(true),
Action: pulumi.String("block"),
ScoreThreshold: pulumi.Float64(60),
},
},
Categories: ibm.CisRulesetRulesetRuleActionParametersOverridesCategoryArray{
&ibm.CisRulesetRulesetRuleActionParametersOverridesCategoryArgs{
Category: pulumi.String("wordpress"),
Enabled: pulumi.Bool(true),
Action: pulumi.String("block"),
},
},
},
},
Description: pulumi.Any(rule.Description),
Enabled: pulumi.Bool(false),
Expression: pulumi.String("true"),
Ref: pulumi.Any(referenceRule.Id),
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;
return await Deployment.RunAsync(() =>
{
// update ruleset of a domain or instance
var config = new Ibm.CisRuleset("config", new()
{
CisId = instance.Id,
DomainId = cisDomain.DomainId,
RulesetId = "943c5da120114ea5831dc1edf8b6f769",
Rulesets = new[]
{
new Ibm.Inputs.CisRulesetRulesetArgs
{
Description = "Entry point ruleset",
Rules = new[]
{
new Ibm.Inputs.CisRulesetRulesetRuleArgs
{
Id = rule.Id,
Action = "execute",
ActionParameters = new Ibm.Inputs.CisRulesetRulesetRuleActionParametersArgs
{
Id = toBeDeployedRuleset.Id,
Overrides = new Ibm.Inputs.CisRulesetRulesetRuleActionParametersOverridesArgs
{
Action = "log",
Enabled = true,
OverrideRules = new[]
{
new Ibm.Inputs.CisRulesetRulesetRuleActionParametersOverridesOverrideRuleArgs
{
RuleId = overridenRule.Id,
Enabled = true,
Action = "block",
ScoreThreshold = 60,
},
},
Categories = new[]
{
new Ibm.Inputs.CisRulesetRulesetRuleActionParametersOverridesCategoryArgs
{
Category = "wordpress",
Enabled = true,
Action = "block",
},
},
},
},
Description = rule.Description,
Enabled = false,
Expression = "true",
Ref = referenceRule.Id,
},
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.CisRuleset;
import com.pulumi.ibm.CisRulesetArgs;
import com.pulumi.ibm.inputs.CisRulesetRulesetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
// update ruleset of a domain or instance
var config = new CisRuleset("config", CisRulesetArgs.builder()
.cisId(instance.id())
.domainId(cisDomain.domainId())
.rulesetId("943c5da120114ea5831dc1edf8b6f769")
.rulesets(CisRulesetRulesetArgs.builder()
.description("Entry point ruleset")
.rules(CisRulesetRulesetRuleArgs.builder()
.id(rule.id())
.action("execute")
.actionParameters(CisRulesetRulesetRuleActionParametersArgs.builder()
.id(toBeDeployedRuleset.id())
.overrides(CisRulesetRulesetRuleActionParametersOverridesArgs.builder()
.action("log")
.enabled(true)
.overrideRules(CisRulesetRulesetRuleActionParametersOverridesOverrideRuleArgs.builder()
.ruleId(overridenRule.id())
.enabled(true)
.action("block")
.scoreThreshold(60.0)
.build())
.categories(CisRulesetRulesetRuleActionParametersOverridesCategoryArgs.builder()
.category("wordpress")
.enabled(true)
.action("block")
.build())
.build())
.build())
.description(rule.description())
.enabled(false)
.expression("true")
.ref(referenceRule.id())
.build())
.build())
.build());
}
}
resources:
# update ruleset of a domain or instance
config:
type: ibm:CisRuleset
properties:
cisId: ${instance.id}
domainId: ${cisDomain.domainId}
rulesetId: 943c5da120114ea5831dc1edf8b6f769
rulesets:
- description: Entry point ruleset
rules:
- id: ${rule.id}
action: execute
actionParameters:
id: ${toBeDeployedRuleset.id}
overrides:
action: log
enabled: true
overrideRules:
- ruleId: ${overridenRule.id}
enabled: true
action: block
scoreThreshold: 60
categories:
- category: wordpress
enabled: true
action: block
description: ${rule.description}
enabled: false
expression: 'true'
ref: ${referenceRule.id}
Example coming soon!
Create CisRuleset Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new CisRuleset(name: string, args: CisRulesetArgs, opts?: CustomResourceOptions);@overload
def CisRuleset(resource_name: str,
args: CisRulesetArgs,
opts: Optional[ResourceOptions] = None)
@overload
def CisRuleset(resource_name: str,
opts: Optional[ResourceOptions] = None,
cis_id: Optional[str] = None,
cis_ruleset_id: Optional[str] = None,
domain_id: Optional[str] = None,
ruleset_id: Optional[str] = None,
rulesets: Optional[Sequence[CisRulesetRulesetArgs]] = None)func NewCisRuleset(ctx *Context, name string, args CisRulesetArgs, opts ...ResourceOption) (*CisRuleset, error)public CisRuleset(string name, CisRulesetArgs args, CustomResourceOptions? opts = null)
public CisRuleset(String name, CisRulesetArgs args)
public CisRuleset(String name, CisRulesetArgs args, CustomResourceOptions options)
type: ibm:CisRuleset
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "ibm_cis_ruleset" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args CisRulesetArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CisRulesetArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CisRulesetArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CisRulesetArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CisRulesetArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var cisRulesetResource = new Ibm.CisRuleset("cisRulesetResource", new()
{
CisId = "string",
CisRulesetId = "string",
DomainId = "string",
RulesetId = "string",
Rulesets = new[]
{
new Ibm.Inputs.CisRulesetRulesetArgs
{
Description = "string",
Rules = new[]
{
new Ibm.Inputs.CisRulesetRulesetRuleArgs
{
Action = "string",
ActionParameters = new Ibm.Inputs.CisRulesetRulesetRuleActionParametersArgs
{
Id = "string",
Overrides = new Ibm.Inputs.CisRulesetRulesetRuleActionParametersOverridesArgs
{
Action = "string",
Categories = new[]
{
new Ibm.Inputs.CisRulesetRulesetRuleActionParametersOverridesCategoryArgs
{
Category = "string",
Action = "string",
Enabled = false,
},
},
Enabled = false,
OverrideRules = new[]
{
new Ibm.Inputs.CisRulesetRulesetRuleActionParametersOverridesOverrideRuleArgs
{
RuleId = "string",
Action = "string",
Enabled = false,
ScoreThreshold = 0.0,
SensitivityLevel = "string",
},
},
},
Phases = new[]
{
"string",
},
Products = new[]
{
"string",
},
Response = new Ibm.Inputs.CisRulesetRulesetRuleActionParametersResponseArgs
{
Content = "string",
ContentType = "string",
StatusCode = 0.0,
},
Ruleset = "string",
Rulesets = new[]
{
"string",
},
},
Description = "string",
Enabled = false,
Expression = "string",
Id = "string",
Positions = new[]
{
new Ibm.Inputs.CisRulesetRulesetRulePositionArgs
{
After = "string",
Before = "string",
Index = 0.0,
},
},
Ref = "string",
},
},
},
},
});
example, err := ibm.NewCisRuleset(ctx, "cisRulesetResource", &ibm.CisRulesetArgs{
CisId: pulumi.String("string"),
CisRulesetId: pulumi.String("string"),
DomainId: pulumi.String("string"),
RulesetId: pulumi.String("string"),
Rulesets: ibm.CisRulesetRulesetArray{
&ibm.CisRulesetRulesetArgs{
Description: pulumi.String("string"),
Rules: ibm.CisRulesetRulesetRuleArray{
&ibm.CisRulesetRulesetRuleArgs{
Action: pulumi.String("string"),
ActionParameters: &ibm.CisRulesetRulesetRuleActionParametersArgs{
Id: pulumi.String("string"),
Overrides: &ibm.CisRulesetRulesetRuleActionParametersOverridesArgs{
Action: pulumi.String("string"),
Categories: ibm.CisRulesetRulesetRuleActionParametersOverridesCategoryArray{
&ibm.CisRulesetRulesetRuleActionParametersOverridesCategoryArgs{
Category: pulumi.String("string"),
Action: pulumi.String("string"),
Enabled: pulumi.Bool(false),
},
},
Enabled: pulumi.Bool(false),
OverrideRules: ibm.CisRulesetRulesetRuleActionParametersOverridesOverrideRuleArray{
&ibm.CisRulesetRulesetRuleActionParametersOverridesOverrideRuleArgs{
RuleId: pulumi.String("string"),
Action: pulumi.String("string"),
Enabled: pulumi.Bool(false),
ScoreThreshold: pulumi.Float64(0),
SensitivityLevel: pulumi.String("string"),
},
},
},
Phases: pulumi.StringArray{
pulumi.String("string"),
},
Products: pulumi.StringArray{
pulumi.String("string"),
},
Response: &ibm.CisRulesetRulesetRuleActionParametersResponseArgs{
Content: pulumi.String("string"),
ContentType: pulumi.String("string"),
StatusCode: pulumi.Float64(0),
},
Ruleset: pulumi.String("string"),
Rulesets: pulumi.StringArray{
pulumi.String("string"),
},
},
Description: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Expression: pulumi.String("string"),
Id: pulumi.String("string"),
Positions: ibm.CisRulesetRulesetRulePositionArray{
&ibm.CisRulesetRulesetRulePositionArgs{
After: pulumi.String("string"),
Before: pulumi.String("string"),
Index: pulumi.Float64(0),
},
},
Ref: pulumi.String("string"),
},
},
},
},
})
resource "ibm_cis_ruleset" "cisRulesetResource" {
lifecycle {
create_before_destroy = true
}
cis_id = "string"
cis_ruleset_id = "string"
domain_id = "string"
ruleset_id = "string"
rulesets {
description = "string"
rules {
action = "string"
action_parameters = {
id = "string"
overrides = {
action = "string"
categories = [{
category = "string"
action = "string"
enabled = false
}]
enabled = false
override_rules = [{
rule_id = "string"
action = "string"
enabled = false
score_threshold = 0
sensitivity_level = "string"
}]
}
phases = ["string"]
products = ["string"]
response = {
content = "string"
content_type = "string"
status_code = 0
}
ruleset = "string"
rulesets = ["string"]
}
description = "string"
enabled = false
expression = "string"
id = "string"
positions {
after = "string"
before = "string"
index = 0
}
ref = "string"
}
}
}
var cisRulesetResource = new CisRuleset("cisRulesetResource", CisRulesetArgs.builder()
.cisId("string")
.cisRulesetId("string")
.domainId("string")
.rulesetId("string")
.rulesets(CisRulesetRulesetArgs.builder()
.description("string")
.rules(CisRulesetRulesetRuleArgs.builder()
.action("string")
.actionParameters(CisRulesetRulesetRuleActionParametersArgs.builder()
.id("string")
.overrides(CisRulesetRulesetRuleActionParametersOverridesArgs.builder()
.action("string")
.categories(CisRulesetRulesetRuleActionParametersOverridesCategoryArgs.builder()
.category("string")
.action("string")
.enabled(false)
.build())
.enabled(false)
.overrideRules(CisRulesetRulesetRuleActionParametersOverridesOverrideRuleArgs.builder()
.ruleId("string")
.action("string")
.enabled(false)
.scoreThreshold(0.0)
.sensitivityLevel("string")
.build())
.build())
.phases("string")
.products("string")
.response(CisRulesetRulesetRuleActionParametersResponseArgs.builder()
.content("string")
.contentType("string")
.statusCode(0.0)
.build())
.ruleset("string")
.rulesets("string")
.build())
.description("string")
.enabled(false)
.expression("string")
.id("string")
.positions(CisRulesetRulesetRulePositionArgs.builder()
.after("string")
.before("string")
.index(0.0)
.build())
.ref("string")
.build())
.build())
.build());
cis_ruleset_resource = ibm.CisRuleset("cisRulesetResource",
cis_id="string",
cis_ruleset_id="string",
domain_id="string",
ruleset_id="string",
rulesets=[{
"description": "string",
"rules": [{
"action": "string",
"action_parameters": {
"id": "string",
"overrides": {
"action": "string",
"categories": [{
"category": "string",
"action": "string",
"enabled": False,
}],
"enabled": False,
"override_rules": [{
"rule_id": "string",
"action": "string",
"enabled": False,
"score_threshold": float(0),
"sensitivity_level": "string",
}],
},
"phases": ["string"],
"products": ["string"],
"response": {
"content": "string",
"content_type": "string",
"status_code": float(0),
},
"ruleset": "string",
"rulesets": ["string"],
},
"description": "string",
"enabled": False,
"expression": "string",
"id": "string",
"positions": [{
"after": "string",
"before": "string",
"index": float(0),
}],
"ref": "string",
}],
}])
const cisRulesetResource = new ibm.CisRuleset("cisRulesetResource", {
cisId: "string",
cisRulesetId: "string",
domainId: "string",
rulesetId: "string",
rulesets: [{
description: "string",
rules: [{
action: "string",
actionParameters: {
id: "string",
overrides: {
action: "string",
categories: [{
category: "string",
action: "string",
enabled: false,
}],
enabled: false,
overrideRules: [{
ruleId: "string",
action: "string",
enabled: false,
scoreThreshold: 0,
sensitivityLevel: "string",
}],
},
phases: ["string"],
products: ["string"],
response: {
content: "string",
contentType: "string",
statusCode: 0,
},
ruleset: "string",
rulesets: ["string"],
},
description: "string",
enabled: false,
expression: "string",
id: "string",
positions: [{
after: "string",
before: "string",
index: 0,
}],
ref: "string",
}],
}],
});
type: ibm:CisRuleset
properties:
cisId: string
cisRulesetId: string
domainId: string
rulesetId: string
rulesets:
- description: string
rules:
- action: string
actionParameters:
id: string
overrides:
action: string
categories:
- action: string
category: string
enabled: false
enabled: false
overrideRules:
- action: string
enabled: false
ruleId: string
scoreThreshold: 0
sensitivityLevel: string
phases:
- string
products:
- string
response:
content: string
contentType: string
statusCode: 0
ruleset: string
rulesets:
- string
description: string
enabled: false
expression: string
id: string
positions:
- after: string
before: string
index: 0
ref: string
CisRuleset Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The CisRuleset resource accepts the following input properties:
- Cis
Id string - The ID of the CIS service instance.
- Cis
Ruleset stringId - Domain
Id string - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - Ruleset
Id string - ID of the ruleset.
- Rulesets
List<Cis
Ruleset Ruleset> Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- Cis
Id string - The ID of the CIS service instance.
- Cis
Ruleset stringId - Domain
Id string - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - Ruleset
Id string - ID of the ruleset.
- Rulesets
[]Cis
Ruleset Ruleset Args Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis_
id string - The ID of the CIS service instance.
- cis_
ruleset_ stringid - domain_
id string - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset_
id string - ID of the ruleset.
- rulesets list(object)
Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis
Id String - The ID of the CIS service instance.
- cis
Ruleset StringId - domain
Id String - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset
Id String - ID of the ruleset.
- rulesets
List<Cis
Ruleset Ruleset> Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis
Id string - The ID of the CIS service instance.
- cis
Ruleset stringId - domain
Id string - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset
Id string - ID of the ruleset.
- rulesets
Cis
Ruleset Ruleset[] Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis_
id str - The ID of the CIS service instance.
- cis_
ruleset_ strid - domain_
id str - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset_
id str - ID of the ruleset.
- rulesets
Sequence[Cis
Ruleset Ruleset Args] Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis
Id String - The ID of the CIS service instance.
- cis
Ruleset StringId - domain
Id String - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset
Id String - ID of the ruleset.
- rulesets List<Property Map>
Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
Outputs
All input properties are implicitly available as output properties. Additionally, the CisRuleset resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing CisRuleset Resource
Get an existing CisRuleset resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: CisRulesetState, opts?: CustomResourceOptions): CisRuleset@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
cis_id: Optional[str] = None,
cis_ruleset_id: Optional[str] = None,
domain_id: Optional[str] = None,
ruleset_id: Optional[str] = None,
rulesets: Optional[Sequence[CisRulesetRulesetArgs]] = None) -> CisRulesetfunc GetCisRuleset(ctx *Context, name string, id IDInput, state *CisRulesetState, opts ...ResourceOption) (*CisRuleset, error)public static CisRuleset Get(string name, Input<string> id, CisRulesetState? state, CustomResourceOptions? opts = null)public static CisRuleset get(String name, Output<String> id, CisRulesetState state, CustomResourceOptions options)resources: _: type: ibm:CisRuleset get: id: ${id}import {
to = ibm_cis_ruleset.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Cis
Id string - The ID of the CIS service instance.
- Cis
Ruleset stringId - Domain
Id string - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - Ruleset
Id string - ID of the ruleset.
- Rulesets
List<Cis
Ruleset Ruleset> Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- Cis
Id string - The ID of the CIS service instance.
- Cis
Ruleset stringId - Domain
Id string - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - Ruleset
Id string - ID of the ruleset.
- Rulesets
[]Cis
Ruleset Ruleset Args Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis_
id string - The ID of the CIS service instance.
- cis_
ruleset_ stringid - domain_
id string - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset_
id string - ID of the ruleset.
- rulesets list(object)
Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis
Id String - The ID of the CIS service instance.
- cis
Ruleset StringId - domain
Id String - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset
Id String - ID of the ruleset.
- rulesets
List<Cis
Ruleset Ruleset> Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis
Id string - The ID of the CIS service instance.
- cis
Ruleset stringId - domain
Id string - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset
Id string - ID of the ruleset.
- rulesets
Cis
Ruleset Ruleset[] Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis_
id str - The ID of the CIS service instance.
- cis_
ruleset_ strid - domain_
id str - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset_
id str - ID of the ruleset.
- rulesets
Sequence[Cis
Ruleset Ruleset Args] Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
- cis
Id String - The ID of the CIS service instance.
- cis
Ruleset StringId - domain
Id String - The Domain/Zone ID of the CIS service instance. If
domain_idis provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level. - ruleset
Id String - ID of the ruleset.
- rulesets List<Property Map>
Input block containing the values to update. Contains only user-configurable fields; read-only API output fields such as
name,kind,phase,version, and ruleversionare not accepted here.Nested scheme of
rulesets:
Supporting Types
CisRulesetRuleset, CisRulesetRulesetArgs
- Description string
- Description of the ruleset.
- Rules
List<Cis
Ruleset Ruleset Rule> Rules to add or modify.
Nested scheme of
rules:
- Description string
- Description of the ruleset.
- Rules
[]Cis
Ruleset Ruleset Rule Rules to add or modify.
Nested scheme of
rules:
- description string
- Description of the ruleset.
- rules list(object)
Rules to add or modify.
Nested scheme of
rules:
- description String
- Description of the ruleset.
- rules
List<Cis
Ruleset Ruleset Rule> Rules to add or modify.
Nested scheme of
rules:
- description string
- Description of the ruleset.
- rules
Cis
Ruleset Ruleset Rule[] Rules to add or modify.
Nested scheme of
rules:
- description str
- Description of the ruleset.
- rules
Sequence[Cis
Ruleset Ruleset Rule] Rules to add or modify.
Nested scheme of
rules:
- description String
- Description of the ruleset.
- rules List<Property Map>
Rules to add or modify.
Nested scheme of
rules:
CisRulesetRulesetRule, CisRulesetRulesetRuleArgs
- Action string
- Action of the rule.
- Action
Parameters CisRuleset Ruleset Rule Action Parameters Parameters used to configure the rule action.
Nested scheme of
action_parameters:- Description string
- Description of the rule.
- Enabled bool
- Enables/Disables the rule.
- Expression string
- Expression used by the rule to match the incoming request.
- Id string
- ID of an existing rule. Required when updating a specific rule.
- Positions
List<Cis
Ruleset Ruleset Rule Position> - Position of the rule within the ruleset. Only one of
before,after, orindexmay be set. - Ref string
- Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
- Action string
- Action of the rule.
- Action
Parameters CisRuleset Ruleset Rule Action Parameters Parameters used to configure the rule action.
Nested scheme of
action_parameters:- Description string
- Description of the rule.
- Enabled bool
- Enables/Disables the rule.
- Expression string
- Expression used by the rule to match the incoming request.
- Id string
- ID of an existing rule. Required when updating a specific rule.
- Positions
[]Cis
Ruleset Ruleset Rule Position - Position of the rule within the ruleset. Only one of
before,after, orindexmay be set. - Ref string
- Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
- action string
- Action of the rule.
- action_
parameters object Parameters used to configure the rule action.
Nested scheme of
action_parameters:- description string
- Description of the rule.
- enabled bool
- Enables/Disables the rule.
- expression string
- Expression used by the rule to match the incoming request.
- id string
- ID of an existing rule. Required when updating a specific rule.
- positions list(object)
- Position of the rule within the ruleset. Only one of
before,after, orindexmay be set. - ref string
- Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
- action String
- Action of the rule.
- action
Parameters CisRuleset Ruleset Rule Action Parameters Parameters used to configure the rule action.
Nested scheme of
action_parameters:- description String
- Description of the rule.
- enabled Boolean
- Enables/Disables the rule.
- expression String
- Expression used by the rule to match the incoming request.
- id String
- ID of an existing rule. Required when updating a specific rule.
- positions
List<Cis
Ruleset Ruleset Rule Position> - Position of the rule within the ruleset. Only one of
before,after, orindexmay be set. - ref String
- Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
- action string
- Action of the rule.
- action
Parameters CisRuleset Ruleset Rule Action Parameters Parameters used to configure the rule action.
Nested scheme of
action_parameters:- description string
- Description of the rule.
- enabled boolean
- Enables/Disables the rule.
- expression string
- Expression used by the rule to match the incoming request.
- id string
- ID of an existing rule. Required when updating a specific rule.
- positions
Cis
Ruleset Ruleset Rule Position[] - Position of the rule within the ruleset. Only one of
before,after, orindexmay be set. - ref string
- Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
- action str
- Action of the rule.
- action_
parameters CisRuleset Ruleset Rule Action Parameters Parameters used to configure the rule action.
Nested scheme of
action_parameters:- description str
- Description of the rule.
- enabled bool
- Enables/Disables the rule.
- expression str
- Expression used by the rule to match the incoming request.
- id str
- ID of an existing rule. Required when updating a specific rule.
- positions
Sequence[Cis
Ruleset Ruleset Rule Position] - Position of the rule within the ruleset. Only one of
before,after, orindexmay be set. - ref str
- Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
- action String
- Action of the rule.
- action
Parameters Property Map Parameters used to configure the rule action.
Nested scheme of
action_parameters:- description String
- Description of the rule.
- enabled Boolean
- Enables/Disables the rule.
- expression String
- Expression used by the rule to match the incoming request.
- id String
- ID of an existing rule. Required when updating a specific rule.
- positions List<Property Map>
- Position of the rule within the ruleset. Only one of
before,after, orindexmay be set. - ref String
- Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
CisRulesetRulesetRuleActionParameters, CisRulesetRulesetRuleActionParametersArgs
- Id string
- ID of the managed ruleset to execute.
- Overrides
Cis
Ruleset Ruleset Rule Action Parameters Overrides Override parameters for the managed ruleset.
Nested scheme of
overrides:- Phases List<string>
- Skips the execution of one or more phases. Allowed values:
http_ratelimit,http_request_sbfm,http_request_firewall_managed. - Products List<string>
- Skips specific security products. Allowed values:
zoneLockdown,uaBlock,bic,hot,securityLevel,rateLimit,waf. - Response
Cis
Ruleset Ruleset Rule Action Parameters Response - Custom response returned by the API.
- Ruleset string
- Skips the remaining rules in the current ruleset. Allowed value:
current. - Rulesets List<string>
- List of ruleset IDs to apply the action to.
- Id string
- ID of the managed ruleset to execute.
- Overrides
Cis
Ruleset Ruleset Rule Action Parameters Overrides Override parameters for the managed ruleset.
Nested scheme of
overrides:- Phases []string
- Skips the execution of one or more phases. Allowed values:
http_ratelimit,http_request_sbfm,http_request_firewall_managed. - Products []string
- Skips specific security products. Allowed values:
zoneLockdown,uaBlock,bic,hot,securityLevel,rateLimit,waf. - Response
Cis
Ruleset Ruleset Rule Action Parameters Response - Custom response returned by the API.
- Ruleset string
- Skips the remaining rules in the current ruleset. Allowed value:
current. - Rulesets []string
- List of ruleset IDs to apply the action to.
- id string
- ID of the managed ruleset to execute.
- overrides object
Override parameters for the managed ruleset.
Nested scheme of
overrides:- phases list(string)
- Skips the execution of one or more phases. Allowed values:
http_ratelimit,http_request_sbfm,http_request_firewall_managed. - products list(string)
- Skips specific security products. Allowed values:
zoneLockdown,uaBlock,bic,hot,securityLevel,rateLimit,waf. - response object
- Custom response returned by the API.
- ruleset string
- Skips the remaining rules in the current ruleset. Allowed value:
current. - rulesets list(string)
- List of ruleset IDs to apply the action to.
- id String
- ID of the managed ruleset to execute.
- overrides
Cis
Ruleset Ruleset Rule Action Parameters Overrides Override parameters for the managed ruleset.
Nested scheme of
overrides:- phases List<String>
- Skips the execution of one or more phases. Allowed values:
http_ratelimit,http_request_sbfm,http_request_firewall_managed. - products List<String>
- Skips specific security products. Allowed values:
zoneLockdown,uaBlock,bic,hot,securityLevel,rateLimit,waf. - response
Cis
Ruleset Ruleset Rule Action Parameters Response - Custom response returned by the API.
- ruleset String
- Skips the remaining rules in the current ruleset. Allowed value:
current. - rulesets List<String>
- List of ruleset IDs to apply the action to.
- id string
- ID of the managed ruleset to execute.
- overrides
Cis
Ruleset Ruleset Rule Action Parameters Overrides Override parameters for the managed ruleset.
Nested scheme of
overrides:- phases string[]
- Skips the execution of one or more phases. Allowed values:
http_ratelimit,http_request_sbfm,http_request_firewall_managed. - products string[]
- Skips specific security products. Allowed values:
zoneLockdown,uaBlock,bic,hot,securityLevel,rateLimit,waf. - response
Cis
Ruleset Ruleset Rule Action Parameters Response - Custom response returned by the API.
- ruleset string
- Skips the remaining rules in the current ruleset. Allowed value:
current. - rulesets string[]
- List of ruleset IDs to apply the action to.
- id str
- ID of the managed ruleset to execute.
- overrides
Cis
Ruleset Ruleset Rule Action Parameters Overrides Override parameters for the managed ruleset.
Nested scheme of
overrides:- phases Sequence[str]
- Skips the execution of one or more phases. Allowed values:
http_ratelimit,http_request_sbfm,http_request_firewall_managed. - products Sequence[str]
- Skips specific security products. Allowed values:
zoneLockdown,uaBlock,bic,hot,securityLevel,rateLimit,waf. - response
Cis
Ruleset Ruleset Rule Action Parameters Response - Custom response returned by the API.
- ruleset str
- Skips the remaining rules in the current ruleset. Allowed value:
current. - rulesets Sequence[str]
- List of ruleset IDs to apply the action to.
- id String
- ID of the managed ruleset to execute.
- overrides Property Map
Override parameters for the managed ruleset.
Nested scheme of
overrides:- phases List<String>
- Skips the execution of one or more phases. Allowed values:
http_ratelimit,http_request_sbfm,http_request_firewall_managed. - products List<String>
- Skips specific security products. Allowed values:
zoneLockdown,uaBlock,bic,hot,securityLevel,rateLimit,waf. - response Property Map
- Custom response returned by the API.
- ruleset String
- Skips the remaining rules in the current ruleset. Allowed value:
current. - rulesets List<String>
- List of ruleset IDs to apply the action to.
CisRulesetRulesetRuleActionParametersOverrides, CisRulesetRulesetRuleActionParametersOverridesArgs
- Action string
- Action of the rule. Examples:
log,block,skip. - Categories
List<Cis
Ruleset Ruleset Rule Action Parameters Overrides Category> Category-level overrides.
Nested scheme of
categories:- Enabled bool
- Enables/Disables the rule.
- Override
Rules List<CisRuleset Ruleset Rule Action Parameters Overrides Override Rule> Per-rule overrides for specific rules already present in the managed ruleset.
Nested scheme of
override_rules:
- Action string
- Action of the rule. Examples:
log,block,skip. - Categories
[]Cis
Ruleset Ruleset Rule Action Parameters Overrides Category Category-level overrides.
Nested scheme of
categories:- Enabled bool
- Enables/Disables the rule.
- Override
Rules []CisRuleset Ruleset Rule Action Parameters Overrides Override Rule Per-rule overrides for specific rules already present in the managed ruleset.
Nested scheme of
override_rules:
- action string
- Action of the rule. Examples:
log,block,skip. - categories list(object)
Category-level overrides.
Nested scheme of
categories:- enabled bool
- Enables/Disables the rule.
- override_
rules list(object) Per-rule overrides for specific rules already present in the managed ruleset.
Nested scheme of
override_rules:
- action String
- Action of the rule. Examples:
log,block,skip. - categories
List<Cis
Ruleset Ruleset Rule Action Parameters Overrides Category> Category-level overrides.
Nested scheme of
categories:- enabled Boolean
- Enables/Disables the rule.
- override
Rules List<CisRuleset Ruleset Rule Action Parameters Overrides Override Rule> Per-rule overrides for specific rules already present in the managed ruleset.
Nested scheme of
override_rules:
- action string
- Action of the rule. Examples:
log,block,skip. - categories
Cis
Ruleset Ruleset Rule Action Parameters Overrides Category[] Category-level overrides.
Nested scheme of
categories:- enabled boolean
- Enables/Disables the rule.
- override
Rules CisRuleset Ruleset Rule Action Parameters Overrides Override Rule[] Per-rule overrides for specific rules already present in the managed ruleset.
Nested scheme of
override_rules:
- action str
- Action of the rule. Examples:
log,block,skip. - categories
Sequence[Cis
Ruleset Ruleset Rule Action Parameters Overrides Category] Category-level overrides.
Nested scheme of
categories:- enabled bool
- Enables/Disables the rule.
- override_
rules Sequence[CisRuleset Ruleset Rule Action Parameters Overrides Override Rule] Per-rule overrides for specific rules already present in the managed ruleset.
Nested scheme of
override_rules:
- action String
- Action of the rule. Examples:
log,block,skip. - categories List<Property Map>
Category-level overrides.
Nested scheme of
categories:- enabled Boolean
- Enables/Disables the rule.
- override
Rules List<Property Map> Per-rule overrides for specific rules already present in the managed ruleset.
Nested scheme of
override_rules:
CisRulesetRulesetRuleActionParametersOverridesCategory, CisRulesetRulesetRuleActionParametersOverridesCategoryArgs
CisRulesetRulesetRuleActionParametersOverridesOverrideRule, CisRulesetRulesetRuleActionParametersOverridesOverrideRuleArgs
- Rule
Id string - ID of the rule to override.
- Action string
- Action to apply to the rule.
- Enabled bool
- Enables/Disables the rule.
- Score
Threshold double - Score threshold of the rule. Allowed values:
25(high),40(medium),60(low sensitivity). - Sensitivity
Level string - Sensitivity level of the rule.
- Rule
Id string - ID of the rule to override.
- Action string
- Action to apply to the rule.
- Enabled bool
- Enables/Disables the rule.
- Score
Threshold float64 - Score threshold of the rule. Allowed values:
25(high),40(medium),60(low sensitivity). - Sensitivity
Level string - Sensitivity level of the rule.
- rule_
id string - ID of the rule to override.
- action string
- Action to apply to the rule.
- enabled bool
- Enables/Disables the rule.
- score_
threshold number - Score threshold of the rule. Allowed values:
25(high),40(medium),60(low sensitivity). - sensitivity_
level string - Sensitivity level of the rule.
- rule
Id String - ID of the rule to override.
- action String
- Action to apply to the rule.
- enabled Boolean
- Enables/Disables the rule.
- score
Threshold Double - Score threshold of the rule. Allowed values:
25(high),40(medium),60(low sensitivity). - sensitivity
Level String - Sensitivity level of the rule.
- rule
Id string - ID of the rule to override.
- action string
- Action to apply to the rule.
- enabled boolean
- Enables/Disables the rule.
- score
Threshold number - Score threshold of the rule. Allowed values:
25(high),40(medium),60(low sensitivity). - sensitivity
Level string - Sensitivity level of the rule.
- rule_
id str - ID of the rule to override.
- action str
- Action to apply to the rule.
- enabled bool
- Enables/Disables the rule.
- score_
threshold float - Score threshold of the rule. Allowed values:
25(high),40(medium),60(low sensitivity). - sensitivity_
level str - Sensitivity level of the rule.
- rule
Id String - ID of the rule to override.
- action String
- Action to apply to the rule.
- enabled Boolean
- Enables/Disables the rule.
- score
Threshold Number - Score threshold of the rule. Allowed values:
25(high),40(medium),60(low sensitivity). - sensitivity
Level String - Sensitivity level of the rule.
CisRulesetRulesetRuleActionParametersResponse, CisRulesetRulesetRuleActionParametersResponseArgs
- Content string
- Response body content.
- Content
Type string - Response content type.
- Status
Code double - HTTP status code to return.
- Content string
- Response body content.
- Content
Type string - Response content type.
- Status
Code float64 - HTTP status code to return.
- content string
- Response body content.
- content_
type string - Response content type.
- status_
code number - HTTP status code to return.
- content String
- Response body content.
- content
Type String - Response content type.
- status
Code Double - HTTP status code to return.
- content string
- Response body content.
- content
Type string - Response content type.
- status
Code number - HTTP status code to return.
- content str
- Response body content.
- content_
type str - Response content type.
- status_
code float - HTTP status code to return.
- content String
- Response body content.
- content
Type String - Response content type.
- status
Code Number - HTTP status code to return.
CisRulesetRulesetRulePosition, CisRulesetRulesetRulePositionArgs
Import
Example
terraform
$ pulumi import ibm:index/cisRuleset:CisRuleset config 48996f0da6ed76251b475971b097205c:9caf68812ae9b3f0377fdf986751a78f:crn:v1:bluemix:public:internet-svcs:global:a/4ea1882a2d3401ed1e459979941966ea:31fa970d-51d0-4b05-893e-251cba75a7b3::
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- ibm ibm-cloud/terraform-provider-ibm
- License
- Notes
- This Pulumi package is based on the
ibmTerraform Provider.
published on Thursday, Sep 10, 2026 by ibm-cloud