Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Ibm Provider
  4. API Docs
  5. CisRulesetEntrypointVersion
Viewing docs for ibm 2.8.0
published on Friday, Oct 23, 2026 by ibm-cloud
Schema (JSON)
ibm-cloud/terraform-provider-ibm

ibm.CisRulesetEntrypointVersion

ibm
Viewing docs for ibm 2.8.0
published on Friday, Oct 23, 2026 by ibm-cloud
Schema (JSON)
ibm-cloud/terraform-provider-ibm

    Provides an IBM Cloud Internet Services ruleset entrypoint version resource to create and update the ruleset entrypoint of an instance or domain. This entrypoint version is also used to deploy the managed ruleset and to add custom rules. For more information, about the IBM Cloud Internet Services ruleset entrypoint version, see ruleset entrypoint instance. To manage rules individually, you can also use ruleset rule.

    Example

    terraform

    $ pulumi import ibm:index/cisRulesetEntrypointVersion:CisRulesetEntrypointVersion config http_request_firewall_managed:9caf68812ae9b3f0377fdf986751a78f:crn:v1:bluemix:public:internet-svcs:global:a/4ea1882a2d3401ed1e459979941966ea:31fa970d-51d0-4b05-893e-251cba75a7b3::

    Create CisRulesetEntrypointVersion Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CisRulesetEntrypointVersion(name: string, args: CisRulesetEntrypointVersionArgs, opts?: CustomResourceOptions);
    @overload
def CisRulesetEntrypointVersion(resource_name: str,
                                args: CisRulesetEntrypointVersionArgs,
                                opts: Optional[ResourceOptions] = None)

@overload
def CisRulesetEntrypointVersion(resource_name: str,
                                opts: Optional[ResourceOptions] = None,
                                cis_id: Optional[str] = None,
                                phase: Optional[str] = None,
                                cis_ruleset_entrypoint_version_id: Optional[str] = None,
                                domain_id: Optional[str] = None,
                                rulesets: Optional[CisRulesetEntrypointVersionRulesetsArgs] = None)
    func NewCisRulesetEntrypointVersion(ctx *Context, name string, args CisRulesetEntrypointVersionArgs, opts ...ResourceOption) (*CisRulesetEntrypointVersion, error)
    public CisRulesetEntrypointVersion(string name, CisRulesetEntrypointVersionArgs args, CustomResourceOptions? opts = null)
    public CisRulesetEntrypointVersion(String name, CisRulesetEntrypointVersionArgs args)
public CisRulesetEntrypointVersion(String name, CisRulesetEntrypointVersionArgs args, CustomResourceOptions options)

    type: ibm:CisRulesetEntrypointVersion
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "ibm_cis_ruleset_entrypoint_version" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args CisRulesetEntrypointVersionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CisRulesetEntrypointVersionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CisRulesetEntrypointVersionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CisRulesetEntrypointVersionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CisRulesetEntrypointVersionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var cisRulesetEntrypointVersionResource = new Ibm.CisRulesetEntrypointVersion("cisRulesetEntrypointVersionResource", new()
{
    CisId = "string",
    Phase = "string",
    CisRulesetEntrypointVersionId = "string",
    DomainId = "string",
    Rulesets = new Ibm.Inputs.CisRulesetEntrypointVersionRulesetsArgs
    {
        Description = "string",
        Rules = new[]
        {
            new Ibm.Inputs.CisRulesetEntrypointVersionRulesetsRuleArgs
            {
                Action = "string",
                ActionParameters = new Ibm.Inputs.CisRulesetEntrypointVersionRulesetsRuleActionParametersArgs
                {
                    Id = "string",
                    Overrides = new Ibm.Inputs.CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesArgs
                    {
                        Action = "string",
                        Categories = new[]
                        {
                            new Ibm.Inputs.CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategoryArgs
                            {
                                Category = "string",
                                Action = "string",
                                Enabled = false,
                            },
                        },
                        Enabled = false,
                        OverrideRules = new[]
                        {
                            new Ibm.Inputs.CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRuleArgs
                            {
                                RuleId = "string",
                                Action = "string",
                                Enabled = false,
                                ScoreThreshold = 0.0,
                                SensitivityLevel = "string",
                            },
                        },
                    },
                    Phases = new[]
                    {
                        "string",
                    },
                    Products = new[]
                    {
                        "string",
                    },
                    Response = new Ibm.Inputs.CisRulesetEntrypointVersionRulesetsRuleActionParametersResponseArgs
                    {
                        Content = "string",
                        ContentType = "string",
                        StatusCode = 0.0,
                    },
                    Ruleset = "string",
                    Rulesets = new[]
                    {
                        "string",
                    },
                },
                Description = "string",
                Enabled = false,
                Expression = "string",
                Id = "string",
                Positions = new[]
                {
                    new Ibm.Inputs.CisRulesetEntrypointVersionRulesetsRulePositionArgs
                    {
                        After = "string",
                        Before = "string",
                        Index = 0.0,
                    },
                },
                Ref = "string",
            },
        },
    },
});

    example, err := ibm.NewCisRulesetEntrypointVersion(ctx, "cisRulesetEntrypointVersionResource", &ibm.CisRulesetEntrypointVersionArgs{
	CisId:                         pulumi.String("string"),
	Phase:                         pulumi.String("string"),
	CisRulesetEntrypointVersionId: pulumi.String("string"),
	DomainId:                      pulumi.String("string"),
	Rulesets: &ibm.CisRulesetEntrypointVersionRulesetsArgs{
		Description: pulumi.String("string"),
		Rules: ibm.CisRulesetEntrypointVersionRulesetsRuleArray{
			&ibm.CisRulesetEntrypointVersionRulesetsRuleArgs{
				Action: pulumi.String("string"),
				ActionParameters: &ibm.CisRulesetEntrypointVersionRulesetsRuleActionParametersArgs{
					Id: pulumi.String("string"),
					Overrides: &ibm.CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesArgs{
						Action: pulumi.String("string"),
						Categories: ibm.CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategoryArray{
							&ibm.CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategoryArgs{
								Category: pulumi.String("string"),
								Action:   pulumi.String("string"),
								Enabled:  pulumi.Bool(false),
							},
						},
						Enabled: pulumi.Bool(false),
						OverrideRules: ibm.CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRuleArray{
							&ibm.CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRuleArgs{
								RuleId:           pulumi.String("string"),
								Action:           pulumi.String("string"),
								Enabled:          pulumi.Bool(false),
								ScoreThreshold:   pulumi.Float64(0),
								SensitivityLevel: pulumi.String("string"),
							},
						},
					},
					Phases: pulumi.StringArray{
						pulumi.String("string"),
					},
					Products: pulumi.StringArray{
						pulumi.String("string"),
					},
					Response: &ibm.CisRulesetEntrypointVersionRulesetsRuleActionParametersResponseArgs{
						Content:     pulumi.String("string"),
						ContentType: pulumi.String("string"),
						StatusCode:  pulumi.Float64(0),
					},
					Ruleset: pulumi.String("string"),
					Rulesets: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
				Description: pulumi.String("string"),
				Enabled:     pulumi.Bool(false),
				Expression:  pulumi.String("string"),
				Id:          pulumi.String("string"),
				Positions: ibm.CisRulesetEntrypointVersionRulesetsRulePositionArray{
					&ibm.CisRulesetEntrypointVersionRulesetsRulePositionArgs{
						After:  pulumi.String("string"),
						Before: pulumi.String("string"),
						Index:  pulumi.Float64(0),
					},
				},
				Ref: pulumi.String("string"),
			},
		},
	},
})

    resource "ibm_cis_ruleset_entrypoint_version" "cisRulesetEntrypointVersionResource" {
  lifecycle {
    create_before_destroy = true
  }
  cis_id                            = "string"
  phase                             = "string"
  cis_ruleset_entrypoint_version_id = "string"
  domain_id                         = "string"
  rulesets = {
    description = "string"
    rules = [{
      action = "string"
      action_parameters = {
        id = "string"
        overrides = {
          action = "string"
          categories = [{
            category = "string"
            action   = "string"
            enabled  = false
          }]
          enabled = false
          override_rules = [{
            rule_id           = "string"
            action            = "string"
            enabled           = false
            score_threshold   = 0
            sensitivity_level = "string"
          }]
        }
        phases   = ["string"]
        products = ["string"]
        response = {
          content      = "string"
          content_type = "string"
          status_code  = 0
        }
        ruleset  = "string"
        rulesets = ["string"]
      }
      description = "string"
      enabled     = false
      expression  = "string"
      id          = "string"
      positions = [{
        after  = "string"
        before = "string"
        index  = 0
      }]
      ref = "string"
    }]
  }
}

    var cisRulesetEntrypointVersionResource = new CisRulesetEntrypointVersion("cisRulesetEntrypointVersionResource", CisRulesetEntrypointVersionArgs.builder()
    .cisId("string")
    .phase("string")
    .cisRulesetEntrypointVersionId("string")
    .domainId("string")
    .rulesets(CisRulesetEntrypointVersionRulesetsArgs.builder()
        .description("string")
        .rules(CisRulesetEntrypointVersionRulesetsRuleArgs.builder()
            .action("string")
            .actionParameters(CisRulesetEntrypointVersionRulesetsRuleActionParametersArgs.builder()
                .id("string")
                .overrides(CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesArgs.builder()
                    .action("string")
                    .categories(CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategoryArgs.builder()
                        .category("string")
                        .action("string")
                        .enabled(false)
                        .build())
                    .enabled(false)
                    .overrideRules(CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRuleArgs.builder()
                        .ruleId("string")
                        .action("string")
                        .enabled(false)
                        .scoreThreshold(0.0)
                        .sensitivityLevel("string")
                        .build())
                    .build())
                .phases("string")
                .products("string")
                .response(CisRulesetEntrypointVersionRulesetsRuleActionParametersResponseArgs.builder()
                    .content("string")
                    .contentType("string")
                    .statusCode(0.0)
                    .build())
                .ruleset("string")
                .rulesets("string")
                .build())
            .description("string")
            .enabled(false)
            .expression("string")
            .id("string")
            .positions(CisRulesetEntrypointVersionRulesetsRulePositionArgs.builder()
                .after("string")
                .before("string")
                .index(0.0)
                .build())
            .ref("string")
            .build())
        .build())
    .build());

    cis_ruleset_entrypoint_version_resource = ibm.CisRulesetEntrypointVersion("cisRulesetEntrypointVersionResource",
    cis_id="string",
    phase="string",
    cis_ruleset_entrypoint_version_id="string",
    domain_id="string",
    rulesets={
        "description": "string",
        "rules": [{
            "action": "string",
            "action_parameters": {
                "id": "string",
                "overrides": {
                    "action": "string",
                    "categories": [{
                        "category": "string",
                        "action": "string",
                        "enabled": False,
                    }],
                    "enabled": False,
                    "override_rules": [{
                        "rule_id": "string",
                        "action": "string",
                        "enabled": False,
                        "score_threshold": float(0),
                        "sensitivity_level": "string",
                    }],
                },
                "phases": ["string"],
                "products": ["string"],
                "response": {
                    "content": "string",
                    "content_type": "string",
                    "status_code": float(0),
                },
                "ruleset": "string",
                "rulesets": ["string"],
            },
            "description": "string",
            "enabled": False,
            "expression": "string",
            "id": "string",
            "positions": [{
                "after": "string",
                "before": "string",
                "index": float(0),
            }],
            "ref": "string",
        }],
    })

    const cisRulesetEntrypointVersionResource = new ibm.CisRulesetEntrypointVersion("cisRulesetEntrypointVersionResource", {
    cisId: "string",
    phase: "string",
    cisRulesetEntrypointVersionId: "string",
    domainId: "string",
    rulesets: {
        description: "string",
        rules: [{
            action: "string",
            actionParameters: {
                id: "string",
                overrides: {
                    action: "string",
                    categories: [{
                        category: "string",
                        action: "string",
                        enabled: false,
                    }],
                    enabled: false,
                    overrideRules: [{
                        ruleId: "string",
                        action: "string",
                        enabled: false,
                        scoreThreshold: 0,
                        sensitivityLevel: "string",
                    }],
                },
                phases: ["string"],
                products: ["string"],
                response: {
                    content: "string",
                    contentType: "string",
                    statusCode: 0,
                },
                ruleset: "string",
                rulesets: ["string"],
            },
            description: "string",
            enabled: false,
            expression: "string",
            id: "string",
            positions: [{
                after: "string",
                before: "string",
                index: 0,
            }],
            ref: "string",
        }],
    },
});

    type: ibm:CisRulesetEntrypointVersion
properties:
    cisId: string
    cisRulesetEntrypointVersionId: string
    domainId: string
    phase: string
    rulesets:
        description: string
        rules:
            - action: string
              actionParameters:
                id: string
                overrides:
                    action: string
                    categories:
                        - action: string
                          category: string
                          enabled: false
                    enabled: false
                    overrideRules:
                        - action: string
                          enabled: false
                          ruleId: string
                          scoreThreshold: 0
                          sensitivityLevel: string
                phases:
                    - string
                products:
                    - string
                response:
                    content: string
                    contentType: string
                    statusCode: 0
                ruleset: string
                rulesets:
                    - string
              description: string
              enabled: false
              expression: string
              id: string
              positions:
                - after: string
                  before: string
                  index: 0
              ref: string

    CisRulesetEntrypointVersion Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CisRulesetEntrypointVersion resource accepts the following input properties:

    CisId string
    The ID of the CIS service instance.
    Phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    CisRulesetEntrypointVersionId string
    (String) ID of the managed ruleset deployed by this rule.
    DomainId string
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    Rulesets CisRulesetEntrypointVersionRulesets

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    CisId string
    The ID of the CIS service instance.
    Phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    CisRulesetEntrypointVersionId string
    (String) ID of the managed ruleset deployed by this rule.
    DomainId string
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    Rulesets CisRulesetEntrypointVersionRulesetsArgs

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    cis_id string
    The ID of the CIS service instance.
    phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    cis_ruleset_entrypoint_version_id string
    (String) ID of the managed ruleset deployed by this rule.
    domain_id string
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    rulesets object

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    cisId String
    The ID of the CIS service instance.
    phase String
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    cisRulesetEntrypointVersionId String
    (String) ID of the managed ruleset deployed by this rule.
    domainId String
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    rulesets CisRulesetEntrypointVersionRulesets

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    cisId string
    The ID of the CIS service instance.
    phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    cisRulesetEntrypointVersionId string
    (String) ID of the managed ruleset deployed by this rule.
    domainId string
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    rulesets CisRulesetEntrypointVersionRulesets

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    cis_id str
    The ID of the CIS service instance.
    phase str
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    cis_ruleset_entrypoint_version_id str
    (String) ID of the managed ruleset deployed by this rule.
    domain_id str
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    rulesets CisRulesetEntrypointVersionRulesetsArgs

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    cisId String
    The ID of the CIS service instance.
    phase String
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    cisRulesetEntrypointVersionId String
    (String) ID of the managed ruleset deployed by this rule.
    domainId String
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    rulesets Property Map

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CisRulesetEntrypointVersion resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    RulesetsResponses List<CisRulesetEntrypointVersionRulesetsResponse>
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    Id string
    The provider-assigned unique ID for this managed resource.
    RulesetsResponses []CisRulesetEntrypointVersionRulesetsResponse
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    id string
    The provider-assigned unique ID for this managed resource.
    rulesets_responses list(object)
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    id String
    The provider-assigned unique ID for this managed resource.
    rulesetsResponses List<CisRulesetEntrypointVersionRulesetsResponse>
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    id string
    The provider-assigned unique ID for this managed resource.
    rulesetsResponses CisRulesetEntrypointVersionRulesetsResponse[]
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    id str
    The provider-assigned unique ID for this managed resource.
    rulesets_responses Sequence[CisRulesetEntrypointVersionRulesetsResponse]
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    id String
    The provider-assigned unique ID for this managed resource.
    rulesetsResponses List<Property Map>
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.

    Look up Existing CisRulesetEntrypointVersion Resource

    Get an existing CisRulesetEntrypointVersion resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CisRulesetEntrypointVersionState, opts?: CustomResourceOptions): CisRulesetEntrypointVersion
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        cis_id: Optional[str] = None,
        cis_ruleset_entrypoint_version_id: Optional[str] = None,
        domain_id: Optional[str] = None,
        phase: Optional[str] = None,
        rulesets: Optional[CisRulesetEntrypointVersionRulesetsArgs] = None,
        rulesets_responses: Optional[Sequence[CisRulesetEntrypointVersionRulesetsResponseArgs]] = None) -> CisRulesetEntrypointVersion
    func GetCisRulesetEntrypointVersion(ctx *Context, name string, id IDInput, state *CisRulesetEntrypointVersionState, opts ...ResourceOption) (*CisRulesetEntrypointVersion, error)
    public static CisRulesetEntrypointVersion Get(string name, Input<string> id, CisRulesetEntrypointVersionState? state, CustomResourceOptions? opts = null)
    public static CisRulesetEntrypointVersion get(String name, Output<String> id, CisRulesetEntrypointVersionState state, CustomResourceOptions options)
    resources:  _:    type: ibm:CisRulesetEntrypointVersion    get:      id: ${id}
    import {
  to = ibm_cis_ruleset_entrypoint_version.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CisId string
    The ID of the CIS service instance.
    CisRulesetEntrypointVersionId string
    (String) ID of the managed ruleset deployed by this rule.
    DomainId string
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    Phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    Rulesets CisRulesetEntrypointVersionRulesets

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    RulesetsResponses List<CisRulesetEntrypointVersionRulesetsResponse>
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    CisId string
    The ID of the CIS service instance.
    CisRulesetEntrypointVersionId string
    (String) ID of the managed ruleset deployed by this rule.
    DomainId string
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    Phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    Rulesets CisRulesetEntrypointVersionRulesetsArgs

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    RulesetsResponses []CisRulesetEntrypointVersionRulesetsResponseArgs
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    cis_id string
    The ID of the CIS service instance.
    cis_ruleset_entrypoint_version_id string
    (String) ID of the managed ruleset deployed by this rule.
    domain_id string
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rulesets object

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    rulesets_responses list(object)
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    cisId String
    The ID of the CIS service instance.
    cisRulesetEntrypointVersionId String
    (String) ID of the managed ruleset deployed by this rule.
    domainId String
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    phase String
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rulesets CisRulesetEntrypointVersionRulesets

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    rulesetsResponses List<CisRulesetEntrypointVersionRulesetsResponse>
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    cisId string
    The ID of the CIS service instance.
    cisRulesetEntrypointVersionId string
    (String) ID of the managed ruleset deployed by this rule.
    domainId string
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rulesets CisRulesetEntrypointVersionRulesets

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    rulesetsResponses CisRulesetEntrypointVersionRulesetsResponse[]
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    cis_id str
    The ID of the CIS service instance.
    cis_ruleset_entrypoint_version_id str
    (String) ID of the managed ruleset deployed by this rule.
    domain_id str
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    phase str
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rulesets CisRulesetEntrypointVersionRulesetsArgs

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    rulesets_responses Sequence[CisRulesetEntrypointVersionRulesetsResponseArgs]
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.
    cisId String
    The ID of the CIS service instance.
    cisRulesetEntrypointVersionId String
    (String) ID of the managed ruleset deployed by this rule.
    domainId String
    The Domain/Zone ID of the CIS service instance. If domain_id is provided, the request is made at the zone/domain level; otherwise, the request is made at the instance level.
    phase String
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rulesets Property Map

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    rulesetsResponses List<Property Map>
    (Computed, List) Full ruleset response as returned by the CIS API after apply. This block is read-only and reflects the live state of the entrypoint ruleset.

    Supporting Types

    CisRulesetEntrypointVersionRulesets, CisRulesetEntrypointVersionRulesetsArgs

    Description string
    Description of the ruleset.
    Rules List<CisRulesetEntrypointVersionRulesetsRule>

    Rules to add or modify.

    Nested scheme of rules:

    Description string
    Description of the ruleset.
    Rules []CisRulesetEntrypointVersionRulesetsRule

    Rules to add or modify.

    Nested scheme of rules:

    description string
    Description of the ruleset.
    rules list(object)

    Rules to add or modify.

    Nested scheme of rules:

    description String
    Description of the ruleset.
    rules List<CisRulesetEntrypointVersionRulesetsRule>

    Rules to add or modify.

    Nested scheme of rules:

    description string
    Description of the ruleset.
    rules CisRulesetEntrypointVersionRulesetsRule[]

    Rules to add or modify.

    Nested scheme of rules:

    description str
    Description of the ruleset.
    rules Sequence[CisRulesetEntrypointVersionRulesetsRule]

    Rules to add or modify.

    Nested scheme of rules:

    description String
    Description of the ruleset.
    rules List<Property Map>

    Rules to add or modify.

    Nested scheme of rules:

    CisRulesetEntrypointVersionRulesetsResponse, CisRulesetEntrypointVersionRulesetsResponseArgs

    Description string
    (String) Description of the rule.
    Kind string
    (String) Kind of the ruleset.
    LastUpdated string
    (String) Timestamp of the last update to the ruleset.
    Name string
    (String) Name of the ruleset.
    Phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    Rules List<CisRulesetEntrypointVersionRulesetsResponseRule>
    (List) Rules associated with the ruleset.
    RulesetId string
    (String) Ruleset identifier.
    Version string
    (String) Version of the managed ruleset.
    Description string
    (String) Description of the rule.
    Kind string
    (String) Kind of the ruleset.
    LastUpdated string
    (String) Timestamp of the last update to the ruleset.
    Name string
    (String) Name of the ruleset.
    Phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    Rules []CisRulesetEntrypointVersionRulesetsResponseRule
    (List) Rules associated with the ruleset.
    RulesetId string
    (String) Ruleset identifier.
    Version string
    (String) Version of the managed ruleset.
    description string
    (String) Description of the rule.
    kind string
    (String) Kind of the ruleset.
    last_updated string
    (String) Timestamp of the last update to the ruleset.
    name string
    (String) Name of the ruleset.
    phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rules list(object)
    (List) Rules associated with the ruleset.
    ruleset_id string
    (String) Ruleset identifier.
    version string
    (String) Version of the managed ruleset.
    description String
    (String) Description of the rule.
    kind String
    (String) Kind of the ruleset.
    lastUpdated String
    (String) Timestamp of the last update to the ruleset.
    name String
    (String) Name of the ruleset.
    phase String
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rules List<CisRulesetEntrypointVersionRulesetsResponseRule>
    (List) Rules associated with the ruleset.
    rulesetId String
    (String) Ruleset identifier.
    version String
    (String) Version of the managed ruleset.
    description string
    (String) Description of the rule.
    kind string
    (String) Kind of the ruleset.
    lastUpdated string
    (String) Timestamp of the last update to the ruleset.
    name string
    (String) Name of the ruleset.
    phase string
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rules CisRulesetEntrypointVersionRulesetsResponseRule[]
    (List) Rules associated with the ruleset.
    rulesetId string
    (String) Ruleset identifier.
    version string
    (String) Version of the managed ruleset.
    description str
    (String) Description of the rule.
    kind str
    (String) Kind of the ruleset.
    last_updated str
    (String) Timestamp of the last update to the ruleset.
    name str
    (String) Name of the ruleset.
    phase str
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rules Sequence[CisRulesetEntrypointVersionRulesetsResponseRule]
    (List) Rules associated with the ruleset.
    ruleset_id str
    (String) Ruleset identifier.
    version str
    (String) Version of the managed ruleset.
    description String
    (String) Description of the rule.
    kind String
    (String) Kind of the ruleset.
    lastUpdated String
    (String) Timestamp of the last update to the ruleset.
    name String
    (String) Name of the ruleset.
    phase String
    Phase of the ruleset. Currently, only http_request_firewall_managed phase is supported.
    rules List<Property Map>
    (List) Rules associated with the ruleset.
    rulesetId String
    (String) Ruleset identifier.
    version String
    (String) Version of the managed ruleset.

    CisRulesetEntrypointVersionRulesetsResponseRule, CisRulesetEntrypointVersionRulesetsResponseRuleArgs

    Action string
    (String) Action override for the category.
    ActionParameters List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameter>
    (Set) Action parameters of the rule.
    Categories List<string>
    (List) Category overrides.
    Description string
    (String) Description of the rule.
    Enabled bool
    (Boolean) Enable/disable the category.
    Expression string
    (String) Expression used by the rule to match the incoming request.
    Id string
    (String) ID of the managed ruleset deployed by this rule.
    LastUpdatedAt string
    (String) Timestamp of the last update to the rule.
    Logging Dictionary<string, bool>
    (Map) Logging configuration. Contains enabled (Boolean).
    Ref string
    (String) Reference ID of the rule.
    Version string
    (String) Version of the managed ruleset.
    Action string
    (String) Action override for the category.
    ActionParameters []CisRulesetEntrypointVersionRulesetsResponseRuleActionParameter
    (Set) Action parameters of the rule.
    Categories []string
    (List) Category overrides.
    Description string
    (String) Description of the rule.
    Enabled bool
    (Boolean) Enable/disable the category.
    Expression string
    (String) Expression used by the rule to match the incoming request.
    Id string
    (String) ID of the managed ruleset deployed by this rule.
    LastUpdatedAt string
    (String) Timestamp of the last update to the rule.
    Logging map[string]bool
    (Map) Logging configuration. Contains enabled (Boolean).
    Ref string
    (String) Reference ID of the rule.
    Version string
    (String) Version of the managed ruleset.
    action string
    (String) Action override for the category.
    action_parameters list(object)
    (Set) Action parameters of the rule.
    categories list(string)
    (List) Category overrides.
    description string
    (String) Description of the rule.
    enabled bool
    (Boolean) Enable/disable the category.
    expression string
    (String) Expression used by the rule to match the incoming request.
    id string
    (String) ID of the managed ruleset deployed by this rule.
    last_updated_at string
    (String) Timestamp of the last update to the rule.
    logging map(bool)
    (Map) Logging configuration. Contains enabled (Boolean).
    ref string
    (String) Reference ID of the rule.
    version string
    (String) Version of the managed ruleset.
    action String
    (String) Action override for the category.
    actionParameters List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameter>
    (Set) Action parameters of the rule.
    categories List<String>
    (List) Category overrides.
    description String
    (String) Description of the rule.
    enabled Boolean
    (Boolean) Enable/disable the category.
    expression String
    (String) Expression used by the rule to match the incoming request.
    id String
    (String) ID of the managed ruleset deployed by this rule.
    lastUpdatedAt String
    (String) Timestamp of the last update to the rule.
    logging Map<String,Boolean>
    (Map) Logging configuration. Contains enabled (Boolean).
    ref String
    (String) Reference ID of the rule.
    version String
    (String) Version of the managed ruleset.
    action string
    (String) Action override for the category.
    actionParameters CisRulesetEntrypointVersionRulesetsResponseRuleActionParameter[]
    (Set) Action parameters of the rule.
    categories string[]
    (List) Category overrides.
    description string
    (String) Description of the rule.
    enabled boolean
    (Boolean) Enable/disable the category.
    expression string
    (String) Expression used by the rule to match the incoming request.
    id string
    (String) ID of the managed ruleset deployed by this rule.
    lastUpdatedAt string
    (String) Timestamp of the last update to the rule.
    logging {[key: string]: boolean}
    (Map) Logging configuration. Contains enabled (Boolean).
    ref string
    (String) Reference ID of the rule.
    version string
    (String) Version of the managed ruleset.
    action str
    (String) Action override for the category.
    action_parameters Sequence[CisRulesetEntrypointVersionRulesetsResponseRuleActionParameter]
    (Set) Action parameters of the rule.
    categories Sequence[str]
    (List) Category overrides.
    description str
    (String) Description of the rule.
    enabled bool
    (Boolean) Enable/disable the category.
    expression str
    (String) Expression used by the rule to match the incoming request.
    id str
    (String) ID of the managed ruleset deployed by this rule.
    last_updated_at str
    (String) Timestamp of the last update to the rule.
    logging Mapping[str, bool]
    (Map) Logging configuration. Contains enabled (Boolean).
    ref str
    (String) Reference ID of the rule.
    version str
    (String) Version of the managed ruleset.
    action String
    (String) Action override for the category.
    actionParameters List<Property Map>
    (Set) Action parameters of the rule.
    categories List<String>
    (List) Category overrides.
    description String
    (String) Description of the rule.
    enabled Boolean
    (Boolean) Enable/disable the category.
    expression String
    (String) Expression used by the rule to match the incoming request.
    id String
    (String) ID of the managed ruleset deployed by this rule.
    lastUpdatedAt String
    (String) Timestamp of the last update to the rule.
    logging Map<Boolean>
    (Map) Logging configuration. Contains enabled (Boolean).
    ref String
    (String) Reference ID of the rule.
    version String
    (String) Version of the managed ruleset.

    CisRulesetEntrypointVersionRulesetsResponseRuleActionParameter, CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterArgs

    Id string
    (String) ID of the managed ruleset deployed by this rule.
    Overrides List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverride>
    (Set) Override configuration applied to the managed ruleset.
    Phases List<string>
    (List) Phases targeted by this rule.
    Products List<string>
    (List) Security products targeted by this rule.
    Responses List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterResponse>
    (Set) Custom response configuration.
    RulesToSkips List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterRulesToSkip>
    (List) Ruleset-to-rule-IDs mappings for rules to skip.
    Ruleset string
    (String) Ruleset identifier.
    Rulesets List<string>

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    Version string
    (String) Version of the managed ruleset.
    Id string
    (String) ID of the managed ruleset deployed by this rule.
    Overrides []CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverride
    (Set) Override configuration applied to the managed ruleset.
    Phases []string
    (List) Phases targeted by this rule.
    Products []string
    (List) Security products targeted by this rule.
    Responses []CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterResponse
    (Set) Custom response configuration.
    RulesToSkips []CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterRulesToSkip
    (List) Ruleset-to-rule-IDs mappings for rules to skip.
    Ruleset string
    (String) Ruleset identifier.
    Rulesets []string

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    Version string
    (String) Version of the managed ruleset.
    id string
    (String) ID of the managed ruleset deployed by this rule.
    overrides list(object)
    (Set) Override configuration applied to the managed ruleset.
    phases list(string)
    (List) Phases targeted by this rule.
    products list(string)
    (List) Security products targeted by this rule.
    responses list(object)
    (Set) Custom response configuration.
    rules_to_skips list(object)
    (List) Ruleset-to-rule-IDs mappings for rules to skip.
    ruleset string
    (String) Ruleset identifier.
    rulesets list(string)

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    version string
    (String) Version of the managed ruleset.
    id String
    (String) ID of the managed ruleset deployed by this rule.
    overrides List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverride>
    (Set) Override configuration applied to the managed ruleset.
    phases List<String>
    (List) Phases targeted by this rule.
    products List<String>
    (List) Security products targeted by this rule.
    responses List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterResponse>
    (Set) Custom response configuration.
    rulesToSkips List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterRulesToSkip>
    (List) Ruleset-to-rule-IDs mappings for rules to skip.
    ruleset String
    (String) Ruleset identifier.
    rulesets List<String>

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    version String
    (String) Version of the managed ruleset.
    id string
    (String) ID of the managed ruleset deployed by this rule.
    overrides CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverride[]
    (Set) Override configuration applied to the managed ruleset.
    phases string[]
    (List) Phases targeted by this rule.
    products string[]
    (List) Security products targeted by this rule.
    responses CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterResponse[]
    (Set) Custom response configuration.
    rulesToSkips CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterRulesToSkip[]
    (List) Ruleset-to-rule-IDs mappings for rules to skip.
    ruleset string
    (String) Ruleset identifier.
    rulesets string[]

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    version string
    (String) Version of the managed ruleset.
    id str
    (String) ID of the managed ruleset deployed by this rule.
    overrides Sequence[CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverride]
    (Set) Override configuration applied to the managed ruleset.
    phases Sequence[str]
    (List) Phases targeted by this rule.
    products Sequence[str]
    (List) Security products targeted by this rule.
    responses Sequence[CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterResponse]
    (Set) Custom response configuration.
    rules_to_skips Sequence[CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterRulesToSkip]
    (List) Ruleset-to-rule-IDs mappings for rules to skip.
    ruleset str
    (String) Ruleset identifier.
    rulesets Sequence[str]

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    version str
    (String) Version of the managed ruleset.
    id String
    (String) ID of the managed ruleset deployed by this rule.
    overrides List<Property Map>
    (Set) Override configuration applied to the managed ruleset.
    phases List<String>
    (List) Phases targeted by this rule.
    products List<String>
    (List) Security products targeted by this rule.
    responses List<Property Map>
    (Set) Custom response configuration.
    rulesToSkips List<Property Map>
    (List) Ruleset-to-rule-IDs mappings for rules to skip.
    ruleset String
    (String) Ruleset identifier.
    rulesets List<String>

    Input block containing the ruleset description and rules to deploy.

    Nested scheme of rulesets:

    version String
    (String) Version of the managed ruleset.

    CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverride, CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideArgs

    Action string
    (String) Action override for the category.
    Categories List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideCategory>
    (List) Category overrides.
    Enabled bool
    (Boolean) Enable/disable the category.
    OverrideRules List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideOverrideRule>
    (List) Per-rule overrides.
    Action string
    (String) Action override for the category.
    Categories []CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideCategory
    (List) Category overrides.
    Enabled bool
    (Boolean) Enable/disable the category.
    OverrideRules []CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideOverrideRule
    (List) Per-rule overrides.
    action string
    (String) Action override for the category.
    categories list(object)
    (List) Category overrides.
    enabled bool
    (Boolean) Enable/disable the category.
    override_rules list(object)
    (List) Per-rule overrides.
    action String
    (String) Action override for the category.
    categories List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideCategory>
    (List) Category overrides.
    enabled Boolean
    (Boolean) Enable/disable the category.
    overrideRules List<CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideOverrideRule>
    (List) Per-rule overrides.
    action string
    (String) Action override for the category.
    categories CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideCategory[]
    (List) Category overrides.
    enabled boolean
    (Boolean) Enable/disable the category.
    overrideRules CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideOverrideRule[]
    (List) Per-rule overrides.
    action String
    (String) Action override for the category.
    categories List<Property Map>
    (List) Category overrides.
    enabled Boolean
    (Boolean) Enable/disable the category.
    overrideRules List<Property Map>
    (List) Per-rule overrides.

    CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideCategory, CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideCategoryArgs

    Action string
    (String) Action override for the category.
    Category string
    (String) Category name.
    Enabled bool
    (Boolean) Enable/disable the category.
    Action string
    (String) Action override for the category.
    Category string
    (String) Category name.
    Enabled bool
    (Boolean) Enable/disable the category.
    action string
    (String) Action override for the category.
    category string
    (String) Category name.
    enabled bool
    (Boolean) Enable/disable the category.
    action String
    (String) Action override for the category.
    category String
    (String) Category name.
    enabled Boolean
    (Boolean) Enable/disable the category.
    action string
    (String) Action override for the category.
    category string
    (String) Category name.
    enabled boolean
    (Boolean) Enable/disable the category.
    action str
    (String) Action override for the category.
    category str
    (String) Category name.
    enabled bool
    (Boolean) Enable/disable the category.
    action String
    (String) Action override for the category.
    category String
    (String) Category name.
    enabled Boolean
    (Boolean) Enable/disable the category.

    CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideOverrideRule, CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterOverrideOverrideRuleArgs

    Action string
    (String) Action override for the category.
    Enabled bool
    (Boolean) Enable/disable the category.
    RuleId string
    (String) ID of the overridden rule.
    ScoreThreshold double
    (Integer) Score threshold override.
    Action string
    (String) Action override for the category.
    Enabled bool
    (Boolean) Enable/disable the category.
    RuleId string
    (String) ID of the overridden rule.
    ScoreThreshold float64
    (Integer) Score threshold override.
    action string
    (String) Action override for the category.
    enabled bool
    (Boolean) Enable/disable the category.
    rule_id string
    (String) ID of the overridden rule.
    score_threshold number
    (Integer) Score threshold override.
    action String
    (String) Action override for the category.
    enabled Boolean
    (Boolean) Enable/disable the category.
    ruleId String
    (String) ID of the overridden rule.
    scoreThreshold Double
    (Integer) Score threshold override.
    action string
    (String) Action override for the category.
    enabled boolean
    (Boolean) Enable/disable the category.
    ruleId string
    (String) ID of the overridden rule.
    scoreThreshold number
    (Integer) Score threshold override.
    action str
    (String) Action override for the category.
    enabled bool
    (Boolean) Enable/disable the category.
    rule_id str
    (String) ID of the overridden rule.
    score_threshold float
    (Integer) Score threshold override.
    action String
    (String) Action override for the category.
    enabled Boolean
    (Boolean) Enable/disable the category.
    ruleId String
    (String) ID of the overridden rule.
    scoreThreshold Number
    (Integer) Score threshold override.

    CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterResponse, CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterResponseArgs

    Content string
    (String) Response body content.
    ContentType string
    (String) Response content type.
    StatusCode double
    (Integer) HTTP status code.
    Content string
    (String) Response body content.
    ContentType string
    (String) Response content type.
    StatusCode float64
    (Integer) HTTP status code.
    content string
    (String) Response body content.
    content_type string
    (String) Response content type.
    status_code number
    (Integer) HTTP status code.
    content String
    (String) Response body content.
    contentType String
    (String) Response content type.
    statusCode Double
    (Integer) HTTP status code.
    content string
    (String) Response body content.
    contentType string
    (String) Response content type.
    statusCode number
    (Integer) HTTP status code.
    content str
    (String) Response body content.
    content_type str
    (String) Response content type.
    status_code float
    (Integer) HTTP status code.
    content String
    (String) Response body content.
    contentType String
    (String) Response content type.
    statusCode Number
    (Integer) HTTP status code.

    CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterRulesToSkip, CisRulesetEntrypointVersionRulesetsResponseRuleActionParameterRulesToSkipArgs

    RuleIds List<string>
    (List of String) Rule IDs to skip within the ruleset.
    RulesetId string
    (String) Ruleset identifier.
    RuleIds []string
    (List of String) Rule IDs to skip within the ruleset.
    RulesetId string
    (String) Ruleset identifier.
    rule_ids list(string)
    (List of String) Rule IDs to skip within the ruleset.
    ruleset_id string
    (String) Ruleset identifier.
    ruleIds List<String>
    (List of String) Rule IDs to skip within the ruleset.
    rulesetId String
    (String) Ruleset identifier.
    ruleIds string[]
    (List of String) Rule IDs to skip within the ruleset.
    rulesetId string
    (String) Ruleset identifier.
    rule_ids Sequence[str]
    (List of String) Rule IDs to skip within the ruleset.
    ruleset_id str
    (String) Ruleset identifier.
    ruleIds List<String>
    (List of String) Rule IDs to skip within the ruleset.
    rulesetId String
    (String) Ruleset identifier.

    CisRulesetEntrypointVersionRulesetsRule, CisRulesetEntrypointVersionRulesetsRuleArgs

    Action string
    Action of the rule. Use execute to deploy a managed ruleset.
    ActionParameters CisRulesetEntrypointVersionRulesetsRuleActionParameters

    Parameters used to configure the rule action.

    Nested scheme of action_parameters:

    Description string
    Description of the rule.
    Enabled bool
    Enables/Disables the rule.
    Expression string
    Expression used by the rule to match the incoming request.
    Id string
    ID of an existing rule. Required when updating a specific rule; omit when creating a new rule.
    Positions List<CisRulesetEntrypointVersionRulesetsRulePosition>
    Position of the rule within the ruleset. Only one of before, after, or index may be set.
    Ref string
    Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
    Action string
    Action of the rule. Use execute to deploy a managed ruleset.
    ActionParameters CisRulesetEntrypointVersionRulesetsRuleActionParameters

    Parameters used to configure the rule action.

    Nested scheme of action_parameters:

    Description string
    Description of the rule.
    Enabled bool
    Enables/Disables the rule.
    Expression string
    Expression used by the rule to match the incoming request.
    Id string
    ID of an existing rule. Required when updating a specific rule; omit when creating a new rule.
    Positions []CisRulesetEntrypointVersionRulesetsRulePosition
    Position of the rule within the ruleset. Only one of before, after, or index may be set.
    Ref string
    Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
    action string
    Action of the rule. Use execute to deploy a managed ruleset.
    action_parameters object

    Parameters used to configure the rule action.

    Nested scheme of action_parameters:

    description string
    Description of the rule.
    enabled bool
    Enables/Disables the rule.
    expression string
    Expression used by the rule to match the incoming request.
    id string
    ID of an existing rule. Required when updating a specific rule; omit when creating a new rule.
    positions list(object)
    Position of the rule within the ruleset. Only one of before, after, or index may be set.
    ref string
    Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
    action String
    Action of the rule. Use execute to deploy a managed ruleset.
    actionParameters CisRulesetEntrypointVersionRulesetsRuleActionParameters

    Parameters used to configure the rule action.

    Nested scheme of action_parameters:

    description String
    Description of the rule.
    enabled Boolean
    Enables/Disables the rule.
    expression String
    Expression used by the rule to match the incoming request.
    id String
    ID of an existing rule. Required when updating a specific rule; omit when creating a new rule.
    positions List<CisRulesetEntrypointVersionRulesetsRulePosition>
    Position of the rule within the ruleset. Only one of before, after, or index may be set.
    ref String
    Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
    action string
    Action of the rule. Use execute to deploy a managed ruleset.
    actionParameters CisRulesetEntrypointVersionRulesetsRuleActionParameters

    Parameters used to configure the rule action.

    Nested scheme of action_parameters:

    description string
    Description of the rule.
    enabled boolean
    Enables/Disables the rule.
    expression string
    Expression used by the rule to match the incoming request.
    id string
    ID of an existing rule. Required when updating a specific rule; omit when creating a new rule.
    positions CisRulesetEntrypointVersionRulesetsRulePosition[]
    Position of the rule within the ruleset. Only one of before, after, or index may be set.
    ref string
    Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
    action str
    Action of the rule. Use execute to deploy a managed ruleset.
    action_parameters CisRulesetEntrypointVersionRulesetsRuleActionParameters

    Parameters used to configure the rule action.

    Nested scheme of action_parameters:

    description str
    Description of the rule.
    enabled bool
    Enables/Disables the rule.
    expression str
    Expression used by the rule to match the incoming request.
    id str
    ID of an existing rule. Required when updating a specific rule; omit when creating a new rule.
    positions Sequence[CisRulesetEntrypointVersionRulesetsRulePosition]
    Position of the rule within the ruleset. Only one of before, after, or index may be set.
    ref str
    Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.
    action String
    Action of the rule. Use execute to deploy a managed ruleset.
    actionParameters Property Map

    Parameters used to configure the rule action.

    Nested scheme of action_parameters:

    description String
    Description of the rule.
    enabled Boolean
    Enables/Disables the rule.
    expression String
    Expression used by the rule to match the incoming request.
    id String
    ID of an existing rule. Required when updating a specific rule; omit when creating a new rule.
    positions List<Property Map>
    Position of the rule within the ruleset. Only one of before, after, or index may be set.
    ref String
    Reference ID of an existing rule. If not provided, it is populated by the ID of the created rule.

    CisRulesetEntrypointVersionRulesetsRuleActionParameters, CisRulesetEntrypointVersionRulesetsRuleActionParametersArgs

    Id string
    ID of the managed ruleset to execute.
    Overrides CisRulesetEntrypointVersionRulesetsRuleActionParametersOverrides

    Override parameters for the managed ruleset.

    Nested scheme of overrides:

    Phases List<string>
    Skips the execution of one or more phases. Allowed values: http_ratelimit, http_request_sbfm, http_request_firewall_managed.
    Products List<string>
    Skips specific security products. Allowed values: zoneLockdown, uaBlock, bic, hot, securityLevel, rateLimit, waf.
    Response CisRulesetEntrypointVersionRulesetsRuleActionParametersResponse
    Custom response returned by the API.
    Ruleset string
    Skips the remaining rules in the current ruleset. Allowed value: current.
    Rulesets List<string>
    List of ruleset IDs to apply the action to.
    Id string
    ID of the managed ruleset to execute.
    Overrides CisRulesetEntrypointVersionRulesetsRuleActionParametersOverrides

    Override parameters for the managed ruleset.

    Nested scheme of overrides:

    Phases []string
    Skips the execution of one or more phases. Allowed values: http_ratelimit, http_request_sbfm, http_request_firewall_managed.
    Products []string
    Skips specific security products. Allowed values: zoneLockdown, uaBlock, bic, hot, securityLevel, rateLimit, waf.
    Response CisRulesetEntrypointVersionRulesetsRuleActionParametersResponse
    Custom response returned by the API.
    Ruleset string
    Skips the remaining rules in the current ruleset. Allowed value: current.
    Rulesets []string
    List of ruleset IDs to apply the action to.
    id string
    ID of the managed ruleset to execute.
    overrides object

    Override parameters for the managed ruleset.

    Nested scheme of overrides:

    phases list(string)
    Skips the execution of one or more phases. Allowed values: http_ratelimit, http_request_sbfm, http_request_firewall_managed.
    products list(string)
    Skips specific security products. Allowed values: zoneLockdown, uaBlock, bic, hot, securityLevel, rateLimit, waf.
    response object
    Custom response returned by the API.
    ruleset string
    Skips the remaining rules in the current ruleset. Allowed value: current.
    rulesets list(string)
    List of ruleset IDs to apply the action to.
    id String
    ID of the managed ruleset to execute.
    overrides CisRulesetEntrypointVersionRulesetsRuleActionParametersOverrides

    Override parameters for the managed ruleset.

    Nested scheme of overrides:

    phases List<String>
    Skips the execution of one or more phases. Allowed values: http_ratelimit, http_request_sbfm, http_request_firewall_managed.
    products List<String>
    Skips specific security products. Allowed values: zoneLockdown, uaBlock, bic, hot, securityLevel, rateLimit, waf.
    response CisRulesetEntrypointVersionRulesetsRuleActionParametersResponse
    Custom response returned by the API.
    ruleset String
    Skips the remaining rules in the current ruleset. Allowed value: current.
    rulesets List<String>
    List of ruleset IDs to apply the action to.
    id string
    ID of the managed ruleset to execute.
    overrides CisRulesetEntrypointVersionRulesetsRuleActionParametersOverrides

    Override parameters for the managed ruleset.

    Nested scheme of overrides:

    phases string[]
    Skips the execution of one or more phases. Allowed values: http_ratelimit, http_request_sbfm, http_request_firewall_managed.
    products string[]
    Skips specific security products. Allowed values: zoneLockdown, uaBlock, bic, hot, securityLevel, rateLimit, waf.
    response CisRulesetEntrypointVersionRulesetsRuleActionParametersResponse
    Custom response returned by the API.
    ruleset string
    Skips the remaining rules in the current ruleset. Allowed value: current.
    rulesets string[]
    List of ruleset IDs to apply the action to.
    id str
    ID of the managed ruleset to execute.
    overrides CisRulesetEntrypointVersionRulesetsRuleActionParametersOverrides

    Override parameters for the managed ruleset.

    Nested scheme of overrides:

    phases Sequence[str]
    Skips the execution of one or more phases. Allowed values: http_ratelimit, http_request_sbfm, http_request_firewall_managed.
    products Sequence[str]
    Skips specific security products. Allowed values: zoneLockdown, uaBlock, bic, hot, securityLevel, rateLimit, waf.
    response CisRulesetEntrypointVersionRulesetsRuleActionParametersResponse
    Custom response returned by the API.
    ruleset str
    Skips the remaining rules in the current ruleset. Allowed value: current.
    rulesets Sequence[str]
    List of ruleset IDs to apply the action to.
    id String
    ID of the managed ruleset to execute.
    overrides Property Map

    Override parameters for the managed ruleset.

    Nested scheme of overrides:

    phases List<String>
    Skips the execution of one or more phases. Allowed values: http_ratelimit, http_request_sbfm, http_request_firewall_managed.
    products List<String>
    Skips specific security products. Allowed values: zoneLockdown, uaBlock, bic, hot, securityLevel, rateLimit, waf.
    response Property Map
    Custom response returned by the API.
    ruleset String
    Skips the remaining rules in the current ruleset. Allowed value: current.
    rulesets List<String>
    List of ruleset IDs to apply the action to.

    CisRulesetEntrypointVersionRulesetsRuleActionParametersOverrides, CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesArgs

    Action string
    Default action to apply to all rules in the managed ruleset. Examples: log, block, skip.
    Categories List<CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategory>

    Category-level overrides.

    Nested scheme of categories:

    Enabled bool
    Enables/Disables all rules in the managed ruleset.
    OverrideRules List<CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRule>

    Per-rule overrides for specific rules already present in the managed ruleset.

    Nested scheme of override_rules:

    Action string
    Default action to apply to all rules in the managed ruleset. Examples: log, block, skip.
    Categories []CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategory

    Category-level overrides.

    Nested scheme of categories:

    Enabled bool
    Enables/Disables all rules in the managed ruleset.
    OverrideRules []CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRule

    Per-rule overrides for specific rules already present in the managed ruleset.

    Nested scheme of override_rules:

    action string
    Default action to apply to all rules in the managed ruleset. Examples: log, block, skip.
    categories list(object)

    Category-level overrides.

    Nested scheme of categories:

    enabled bool
    Enables/Disables all rules in the managed ruleset.
    override_rules list(object)

    Per-rule overrides for specific rules already present in the managed ruleset.

    Nested scheme of override_rules:

    action String
    Default action to apply to all rules in the managed ruleset. Examples: log, block, skip.
    categories List<CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategory>

    Category-level overrides.

    Nested scheme of categories:

    enabled Boolean
    Enables/Disables all rules in the managed ruleset.
    overrideRules List<CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRule>

    Per-rule overrides for specific rules already present in the managed ruleset.

    Nested scheme of override_rules:

    action string
    Default action to apply to all rules in the managed ruleset. Examples: log, block, skip.
    categories CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategory[]

    Category-level overrides.

    Nested scheme of categories:

    enabled boolean
    Enables/Disables all rules in the managed ruleset.
    overrideRules CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRule[]

    Per-rule overrides for specific rules already present in the managed ruleset.

    Nested scheme of override_rules:

    action str
    Default action to apply to all rules in the managed ruleset. Examples: log, block, skip.
    categories Sequence[CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategory]

    Category-level overrides.

    Nested scheme of categories:

    enabled bool
    Enables/Disables all rules in the managed ruleset.
    override_rules Sequence[CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRule]

    Per-rule overrides for specific rules already present in the managed ruleset.

    Nested scheme of override_rules:

    action String
    Default action to apply to all rules in the managed ruleset. Examples: log, block, skip.
    categories List<Property Map>

    Category-level overrides.

    Nested scheme of categories:

    enabled Boolean
    Enables/Disables all rules in the managed ruleset.
    overrideRules List<Property Map>

    Per-rule overrides for specific rules already present in the managed ruleset.

    Nested scheme of override_rules:

    CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategory, CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesCategoryArgs

    Category string
    Category name.
    Action string
    Action to apply to rules in the category.
    Enabled bool
    Enables/Disables rules in the category.
    Category string
    Category name.
    Action string
    Action to apply to rules in the category.
    Enabled bool
    Enables/Disables rules in the category.
    category string
    Category name.
    action string
    Action to apply to rules in the category.
    enabled bool
    Enables/Disables rules in the category.
    category String
    Category name.
    action String
    Action to apply to rules in the category.
    enabled Boolean
    Enables/Disables rules in the category.
    category string
    Category name.
    action string
    Action to apply to rules in the category.
    enabled boolean
    Enables/Disables rules in the category.
    category str
    Category name.
    action str
    Action to apply to rules in the category.
    enabled bool
    Enables/Disables rules in the category.
    category String
    Category name.
    action String
    Action to apply to rules in the category.
    enabled Boolean
    Enables/Disables rules in the category.

    CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRule, CisRulesetEntrypointVersionRulesetsRuleActionParametersOverridesOverrideRuleArgs

    RuleId string
    ID of the rule to override.
    Action string
    Action to apply to the rule.
    Enabled bool
    Enables/Disables the rule.
    ScoreThreshold double
    Score threshold of the rule. Allowed values: 25 (high), 40 (medium), 60 (low sensitivity).
    SensitivityLevel string
    Sensitivity level of the rule.
    RuleId string
    ID of the rule to override.
    Action string
    Action to apply to the rule.
    Enabled bool
    Enables/Disables the rule.
    ScoreThreshold float64
    Score threshold of the rule. Allowed values: 25 (high), 40 (medium), 60 (low sensitivity).
    SensitivityLevel string
    Sensitivity level of the rule.
    rule_id string
    ID of the rule to override.
    action string
    Action to apply to the rule.
    enabled bool
    Enables/Disables the rule.
    score_threshold number
    Score threshold of the rule. Allowed values: 25 (high), 40 (medium), 60 (low sensitivity).
    sensitivity_level string
    Sensitivity level of the rule.
    ruleId String
    ID of the rule to override.
    action String
    Action to apply to the rule.
    enabled Boolean
    Enables/Disables the rule.
    scoreThreshold Double
    Score threshold of the rule. Allowed values: 25 (high), 40 (medium), 60 (low sensitivity).
    sensitivityLevel String
    Sensitivity level of the rule.
    ruleId string
    ID of the rule to override.
    action string
    Action to apply to the rule.
    enabled boolean
    Enables/Disables the rule.
    scoreThreshold number
    Score threshold of the rule. Allowed values: 25 (high), 40 (medium), 60 (low sensitivity).
    sensitivityLevel string
    Sensitivity level of the rule.
    rule_id str
    ID of the rule to override.
    action str
    Action to apply to the rule.
    enabled bool
    Enables/Disables the rule.
    score_threshold float
    Score threshold of the rule. Allowed values: 25 (high), 40 (medium), 60 (low sensitivity).
    sensitivity_level str
    Sensitivity level of the rule.
    ruleId String
    ID of the rule to override.
    action String
    Action to apply to the rule.
    enabled Boolean
    Enables/Disables the rule.
    scoreThreshold Number
    Score threshold of the rule. Allowed values: 25 (high), 40 (medium), 60 (low sensitivity).
    sensitivityLevel String
    Sensitivity level of the rule.

    CisRulesetEntrypointVersionRulesetsRuleActionParametersResponse, CisRulesetEntrypointVersionRulesetsRuleActionParametersResponseArgs

    Content string
    Response body content.
    ContentType string
    Response content type.
    StatusCode double
    HTTP status code to return.
    Content string
    Response body content.
    ContentType string
    Response content type.
    StatusCode float64
    HTTP status code to return.
    content string
    Response body content.
    content_type string
    Response content type.
    status_code number
    HTTP status code to return.
    content String
    Response body content.
    contentType String
    Response content type.
    statusCode Double
    HTTP status code to return.
    content string
    Response body content.
    contentType string
    Response content type.
    statusCode number
    HTTP status code to return.
    content str
    Response body content.
    content_type str
    Response content type.
    status_code float
    HTTP status code to return.
    content String
    Response body content.
    contentType String
    Response content type.
    statusCode Number
    HTTP status code to return.

    CisRulesetEntrypointVersionRulesetsRulePosition, CisRulesetEntrypointVersionRulesetsRulePositionArgs

    After string
    Place this rule after the rule with this ID.
    Before string
    Place this rule before the rule with this ID.
    Index double
    Place this rule at this index position.
    After string
    Place this rule after the rule with this ID.
    Before string
    Place this rule before the rule with this ID.
    Index float64
    Place this rule at this index position.
    after string
    Place this rule after the rule with this ID.
    before string
    Place this rule before the rule with this ID.
    index number
    Place this rule at this index position.
    after String
    Place this rule after the rule with this ID.
    before String
    Place this rule before the rule with this ID.
    index Double
    Place this rule at this index position.
    after string
    Place this rule after the rule with this ID.
    before string
    Place this rule before the rule with this ID.
    index number
    Place this rule at this index position.
    after str
    Place this rule after the rule with this ID.
    before str
    Place this rule before the rule with this ID.
    index float
    Place this rule at this index position.
    after String
    Place this rule after the rule with this ID.
    before String
    Place this rule before the rule with this ID.
    index Number
    Place this rule at this index position.

    Package Details

    Repository
    ibm ibm-cloud/terraform-provider-ibm
    License
    Notes
    This Pulumi package is based on the ibm Terraform Provider.
    ibm
    Viewing docs for ibm 2.8.0
    published on Friday, Oct 23, 2026 by ibm-cloud
    Schema (JSON)
    ibm-cloud/terraform-provider-ibm

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial