Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Incapsula Provider
  4. API Docs
  5. CloudOriginDomain
Viewing docs for incapsula 3.39.0
published on Sunday, Jul 26, 2026 by imperva
Schema (JSON)
imperva/terraform-provider-incapsula

incapsula.CloudOriginDomain

Viewing docs for incapsula 3.39.0
published on Sunday, Jul 26, 2026 by imperva
Schema (JSON)
imperva/terraform-provider-incapsula

    Provides a Cloud Origin Domain resource for connecting AWS origins to Imperva for AWS (PUBLIC_CLOUD) sites.

    This resource registers your AWS origin (ALB, NLB, or custom domain) with Imperva. Imperva then generates an origin domain that you configure in your AWS CloudFront distribution to route traffic through Imperva’s security layer.

    Note: Updates are not supported once the cloud origin domain is created. To change any attribute (including region, port, or origin_tls_policy), delete the resource and create a new one.

    Example Usage

    Basic Usage

    import * as pulumi from "@pulumi/pulumi";
import * as incapsula from "@pulumi/incapsula";

const awsSite = new incapsula.SiteV3("aws_site", {
    name: "my-aws-site",
    type: "PUBLIC_CLOUD",
    cloudType: "AWS",
    refId: "cf-dist-E1234567890",
});
const origin = new incapsula.CloudOriginDomain("origin", {
    accountId: awsSite.accountId,
    siteId: awsSite.siteV3Id,
    domain: "internal-alb-1234567890.us-east-1.elb.amazonaws.com",
    region: "us-east-1",
    originTlsPolicy: "TLS_1_2",
});

    import pulumi
import pulumi_incapsula as incapsula

aws_site = incapsula.SiteV3("aws_site",
    name="my-aws-site",
    type="PUBLIC_CLOUD",
    cloud_type="AWS",
    ref_id="cf-dist-E1234567890")
origin = incapsula.CloudOriginDomain("origin",
    account_id=aws_site.account_id,
    site_id=aws_site.site_v3_id,
    domain="internal-alb-1234567890.us-east-1.elb.amazonaws.com",
    region="us-east-1",
    origin_tls_policy="TLS_1_2")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/incapsula/v3/incapsula"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		awsSite, err := incapsula.NewSiteV3(ctx, "aws_site", &incapsula.SiteV3Args{
			Name:      pulumi.String("my-aws-site"),
			Type:      pulumi.String("PUBLIC_CLOUD"),
			CloudType: pulumi.String("AWS"),
			RefId:     pulumi.String("cf-dist-E1234567890"),
		})
		if err != nil {
			return err
		}
		_, err = incapsula.NewCloudOriginDomain(ctx, "origin", &incapsula.CloudOriginDomainArgs{
			AccountId:       awsSite.AccountId,
			SiteId:          awsSite.SiteV3Id,
			Domain:          pulumi.String("internal-alb-1234567890.us-east-1.elb.amazonaws.com"),
			Region:          pulumi.String("us-east-1"),
			OriginTlsPolicy: pulumi.String("TLS_1_2"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Incapsula = Pulumi.Incapsula;

return await Deployment.RunAsync(() => 
{
    var awsSite = new Incapsula.SiteV3("aws_site", new()
    {
        Name = "my-aws-site",
        Type = "PUBLIC_CLOUD",
        CloudType = "AWS",
        RefId = "cf-dist-E1234567890",
    });

    var origin = new Incapsula.CloudOriginDomain("origin", new()
    {
        AccountId = awsSite.AccountId,
        SiteId = awsSite.SiteV3Id,
        Domain = "internal-alb-1234567890.us-east-1.elb.amazonaws.com",
        Region = "us-east-1",
        OriginTlsPolicy = "TLS_1_2",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.incapsula.SiteV3;
import com.pulumi.incapsula.SiteV3Args;
import com.pulumi.incapsula.CloudOriginDomain;
import com.pulumi.incapsula.CloudOriginDomainArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var awsSite = new SiteV3("awsSite", SiteV3Args.builder()
            .name("my-aws-site")
            .type("PUBLIC_CLOUD")
            .cloudType("AWS")
            .refId("cf-dist-E1234567890")
            .build());

        var origin = new CloudOriginDomain("origin", CloudOriginDomainArgs.builder()
            .accountId(awsSite.accountId())
            .siteId(awsSite.siteV3Id())
            .domain("internal-alb-1234567890.us-east-1.elb.amazonaws.com")
            .region("us-east-1")
            .originTlsPolicy("TLS_1_2")
            .build());

    }
}

    resources:
  awsSite:
    type: incapsula:SiteV3
    name: aws_site
    properties:
      name: my-aws-site
      type: PUBLIC_CLOUD
      cloudType: AWS
      refId: cf-dist-E1234567890
  origin:
    type: incapsula:CloudOriginDomain
    properties:
      accountId: ${awsSite.accountId}
      siteId: ${awsSite.siteV3Id}
      domain: internal-alb-1234567890.us-east-1.elb.amazonaws.com
      region: us-east-1
      originTlsPolicy: TLS_1_2

    Example coming soon!

    With All Parameters

    import * as pulumi from "@pulumi/pulumi";
import * as incapsula from "@pulumi/incapsula";

const origin = new incapsula.CloudOriginDomain("origin", {
    accountId: awsSite.accountId,
    siteId: awsSite.id,
    domain: "internal-alb-1234567890.us-east-1.elb.amazonaws.com",
    region: "us-east-1",
    port: 8443,
    originTlsPolicy: "TLS_1_2",
});

    import pulumi
import pulumi_incapsula as incapsula

origin = incapsula.CloudOriginDomain("origin",
    account_id=aws_site["accountId"],
    site_id=aws_site["id"],
    domain="internal-alb-1234567890.us-east-1.elb.amazonaws.com",
    region="us-east-1",
    port=8443,
    origin_tls_policy="TLS_1_2")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/incapsula/v3/incapsula"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := incapsula.NewCloudOriginDomain(ctx, "origin", &incapsula.CloudOriginDomainArgs{
			AccountId:       pulumi.Any(awsSite.AccountId),
			SiteId:          pulumi.Any(awsSite.Id),
			Domain:          pulumi.String("internal-alb-1234567890.us-east-1.elb.amazonaws.com"),
			Region:          pulumi.String("us-east-1"),
			Port:            pulumi.Float64(8443),
			OriginTlsPolicy: pulumi.String("TLS_1_2"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Incapsula = Pulumi.Incapsula;

return await Deployment.RunAsync(() => 
{
    var origin = new Incapsula.CloudOriginDomain("origin", new()
    {
        AccountId = awsSite.AccountId,
        SiteId = awsSite.Id,
        Domain = "internal-alb-1234567890.us-east-1.elb.amazonaws.com",
        Region = "us-east-1",
        Port = 8443,
        OriginTlsPolicy = "TLS_1_2",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.incapsula.CloudOriginDomain;
import com.pulumi.incapsula.CloudOriginDomainArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var origin = new CloudOriginDomain("origin", CloudOriginDomainArgs.builder()
            .accountId(awsSite.accountId())
            .siteId(awsSite.id())
            .domain("internal-alb-1234567890.us-east-1.elb.amazonaws.com")
            .region("us-east-1")
            .port(8443.0)
            .originTlsPolicy("TLS_1_2")
            .build());

    }
}

    resources:
  origin:
    type: incapsula:CloudOriginDomain
    properties:
      accountId: ${awsSite.accountId}
      siteId: ${awsSite.id}
      domain: internal-alb-1234567890.us-east-1.elb.amazonaws.com
      region: us-east-1
      port: 8443
      originTlsPolicy: TLS_1_2

    Example coming soon!

    Usage Notes

    1. The site must be created with type = "PUBLIC_CLOUD" and cloud_type = "AWS" before adding cloud origin domains.
    2. A site can have multiple origin domains spread across different AWS regions.
    3. After creation, copy the imperva_origin_domain value and configure it as the origin domain in your AWS CloudFront distribution.
    4. It is recommended to create one site per CloudFront distribution.

    Create CloudOriginDomain Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CloudOriginDomain(name: string, args: CloudOriginDomainArgs, opts?: CustomResourceOptions);
    @overload
def CloudOriginDomain(resource_name: str,
                      args: CloudOriginDomainArgs,
                      opts: Optional[ResourceOptions] = None)

@overload
def CloudOriginDomain(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      domain: Optional[str] = None,
                      origin_tls_policy: Optional[str] = None,
                      region: Optional[str] = None,
                      site_id: Optional[float] = None,
                      account_id: Optional[str] = None,
                      cloud_origin_domain_id: Optional[str] = None,
                      port: Optional[float] = None)
    func NewCloudOriginDomain(ctx *Context, name string, args CloudOriginDomainArgs, opts ...ResourceOption) (*CloudOriginDomain, error)
    public CloudOriginDomain(string name, CloudOriginDomainArgs args, CustomResourceOptions? opts = null)
    public CloudOriginDomain(String name, CloudOriginDomainArgs args)
public CloudOriginDomain(String name, CloudOriginDomainArgs args, CustomResourceOptions options)

    type: incapsula:CloudOriginDomain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "incapsula_cloud_origin_domain" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args CloudOriginDomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CloudOriginDomainArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CloudOriginDomainArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CloudOriginDomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CloudOriginDomainArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var cloudOriginDomainResource = new Incapsula.CloudOriginDomain("cloudOriginDomainResource", new()
{
    Domain = "string",
    OriginTlsPolicy = "string",
    Region = "string",
    SiteId = 0,
    AccountId = "string",
    CloudOriginDomainId = "string",
    Port = 0,
});

    example, err := incapsula.NewCloudOriginDomain(ctx, "cloudOriginDomainResource", &incapsula.CloudOriginDomainArgs{
	Domain:              pulumi.String("string"),
	OriginTlsPolicy:     pulumi.String("string"),
	Region:              pulumi.String("string"),
	SiteId:              pulumi.Float64(0),
	AccountId:           pulumi.String("string"),
	CloudOriginDomainId: pulumi.String("string"),
	Port:                pulumi.Float64(0),
})

    resource "incapsula_cloud_origin_domain" "cloudOriginDomainResource" {
  lifecycle {
    create_before_destroy = true
  }
  domain                 = "string"
  origin_tls_policy      = "string"
  region                 = "string"
  site_id                = 0
  account_id             = "string"
  cloud_origin_domain_id = "string"
  port                   = 0
}

    var cloudOriginDomainResource = new CloudOriginDomain("cloudOriginDomainResource", CloudOriginDomainArgs.builder()
    .domain("string")
    .originTlsPolicy("string")
    .region("string")
    .siteId(0.0)
    .accountId("string")
    .cloudOriginDomainId("string")
    .port(0.0)
    .build());

    cloud_origin_domain_resource = incapsula.CloudOriginDomain("cloudOriginDomainResource",
    domain="string",
    origin_tls_policy="string",
    region="string",
    site_id=float(0),
    account_id="string",
    cloud_origin_domain_id="string",
    port=float(0))

    const cloudOriginDomainResource = new incapsula.CloudOriginDomain("cloudOriginDomainResource", {
    domain: "string",
    originTlsPolicy: "string",
    region: "string",
    siteId: 0,
    accountId: "string",
    cloudOriginDomainId: "string",
    port: 0,
});

    type: incapsula:CloudOriginDomain
properties:
    accountId: string
    cloudOriginDomainId: string
    domain: string
    originTlsPolicy: string
    port: 0
    region: string
    siteId: 0

    CloudOriginDomain Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CloudOriginDomain resource accepts the following input properties:

    Domain string
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    OriginTlsPolicy string
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    Region string
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    SiteId double
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    AccountId string
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    CloudOriginDomainId string
    The resource ID in format account_id/site_id/origin_id.
    Port double
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    Domain string
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    OriginTlsPolicy string
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    Region string
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    SiteId float64
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    AccountId string
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    CloudOriginDomainId string
    The resource ID in format account_id/site_id/origin_id.
    Port float64
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    domain string
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    origin_tls_policy string
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    region string
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    site_id number
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    account_id string
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloud_origin_domain_id string
    The resource ID in format account_id/site_id/origin_id.
    port number
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    domain String
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    originTlsPolicy String
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    region String
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    siteId Double
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    accountId String
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloudOriginDomainId String
    The resource ID in format account_id/site_id/origin_id.
    port Double
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    domain string
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    originTlsPolicy string
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    region string
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    siteId number
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    accountId string
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloudOriginDomainId string
    The resource ID in format account_id/site_id/origin_id.
    port number
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    domain str
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    origin_tls_policy str
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    region str
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    site_id float
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    account_id str
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloud_origin_domain_id str
    The resource ID in format account_id/site_id/origin_id.
    port float
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    domain String
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    originTlsPolicy String
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    region String
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    siteId Number
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    accountId String
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloudOriginDomainId String
    The resource ID in format account_id/site_id/origin_id.
    port Number
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CloudOriginDomain resource produces the following output properties:

    CreatedAt string
    Timestamp when the cloud origin domain resource was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    ImpervaOriginDomain string
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    UpdatedAt string
    Timestamp when the cloud origin domain resource was last updated.
    CreatedAt string
    Timestamp when the cloud origin domain resource was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    ImpervaOriginDomain string
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    UpdatedAt string
    Timestamp when the cloud origin domain resource was last updated.
    created_at string
    Timestamp when the cloud origin domain resource was created.
    id string
    The provider-assigned unique ID for this managed resource.
    imperva_origin_domain string
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    updated_at string
    Timestamp when the cloud origin domain resource was last updated.
    createdAt String
    Timestamp when the cloud origin domain resource was created.
    id String
    The provider-assigned unique ID for this managed resource.
    impervaOriginDomain String
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    updatedAt String
    Timestamp when the cloud origin domain resource was last updated.
    createdAt string
    Timestamp when the cloud origin domain resource was created.
    id string
    The provider-assigned unique ID for this managed resource.
    impervaOriginDomain string
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    updatedAt string
    Timestamp when the cloud origin domain resource was last updated.
    created_at str
    Timestamp when the cloud origin domain resource was created.
    id str
    The provider-assigned unique ID for this managed resource.
    imperva_origin_domain str
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    updated_at str
    Timestamp when the cloud origin domain resource was last updated.
    createdAt String
    Timestamp when the cloud origin domain resource was created.
    id String
    The provider-assigned unique ID for this managed resource.
    impervaOriginDomain String
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    updatedAt String
    Timestamp when the cloud origin domain resource was last updated.

    Look up Existing CloudOriginDomain Resource

    Get an existing CloudOriginDomain resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CloudOriginDomainState, opts?: CustomResourceOptions): CloudOriginDomain
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        cloud_origin_domain_id: Optional[str] = None,
        created_at: Optional[str] = None,
        domain: Optional[str] = None,
        imperva_origin_domain: Optional[str] = None,
        origin_tls_policy: Optional[str] = None,
        port: Optional[float] = None,
        region: Optional[str] = None,
        site_id: Optional[float] = None,
        updated_at: Optional[str] = None) -> CloudOriginDomain
    func GetCloudOriginDomain(ctx *Context, name string, id IDInput, state *CloudOriginDomainState, opts ...ResourceOption) (*CloudOriginDomain, error)
    public static CloudOriginDomain Get(string name, Input<string> id, CloudOriginDomainState? state, CustomResourceOptions? opts = null)
    public static CloudOriginDomain get(String name, Output<String> id, CloudOriginDomainState state, CustomResourceOptions options)
    resources:  _:    type: incapsula:CloudOriginDomain    get:      id: ${id}
    import {
  to = incapsula_cloud_origin_domain.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    CloudOriginDomainId string
    The resource ID in format account_id/site_id/origin_id.
    CreatedAt string
    Timestamp when the cloud origin domain resource was created.
    Domain string
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    ImpervaOriginDomain string
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    OriginTlsPolicy string
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    Port double
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    Region string
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    SiteId double
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    UpdatedAt string
    Timestamp when the cloud origin domain resource was last updated.
    AccountId string
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    CloudOriginDomainId string
    The resource ID in format account_id/site_id/origin_id.
    CreatedAt string
    Timestamp when the cloud origin domain resource was created.
    Domain string
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    ImpervaOriginDomain string
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    OriginTlsPolicy string
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    Port float64
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    Region string
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    SiteId float64
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    UpdatedAt string
    Timestamp when the cloud origin domain resource was last updated.
    account_id string
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloud_origin_domain_id string
    The resource ID in format account_id/site_id/origin_id.
    created_at string
    Timestamp when the cloud origin domain resource was created.
    domain string
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    imperva_origin_domain string
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    origin_tls_policy string
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    port number
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    region string
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    site_id number
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    updated_at string
    Timestamp when the cloud origin domain resource was last updated.
    accountId String
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloudOriginDomainId String
    The resource ID in format account_id/site_id/origin_id.
    createdAt String
    Timestamp when the cloud origin domain resource was created.
    domain String
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    impervaOriginDomain String
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    originTlsPolicy String
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    port Double
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    region String
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    siteId Double
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    updatedAt String
    Timestamp when the cloud origin domain resource was last updated.
    accountId string
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloudOriginDomainId string
    The resource ID in format account_id/site_id/origin_id.
    createdAt string
    Timestamp when the cloud origin domain resource was created.
    domain string
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    impervaOriginDomain string
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    originTlsPolicy string
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    port number
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    region string
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    siteId number
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    updatedAt string
    Timestamp when the cloud origin domain resource was last updated.
    account_id str
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloud_origin_domain_id str
    The resource ID in format account_id/site_id/origin_id.
    created_at str
    Timestamp when the cloud origin domain resource was created.
    domain str
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    imperva_origin_domain str
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    origin_tls_policy str
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    port float
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    region str
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    site_id float
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    updated_at str
    Timestamp when the cloud origin domain resource was last updated.
    accountId String
    Numeric identifier of the account to operate on. If not specified, operation will be performed on the account identified by the authentication parameters.
    cloudOriginDomainId String
    The resource ID in format account_id/site_id/origin_id.
    createdAt String
    Timestamp when the cloud origin domain resource was created.
    domain String
    The origin domain (FQDN). Must be a valid fully qualified domain name such as an AWS ALB or NLB hostname (e.g., internal-alb-1234567890.us-east-1.elb.amazonaws.com). Cannot be changed after the resource is created. Maximum 253 characters.
    impervaOriginDomain String
    The Imperva-generated routing domain. Use this value as the origin domain in your AWS CloudFront distribution to route traffic through Imperva.
    originTlsPolicy String
    Minimum TLS version for the connection to the origin. The selected version will be supported along with all higher versions. Supported values: SSLv3, TLS_1_0, TLS_1_1, TLS_1_2.
    port Number
    Port number the origin server listens on. Must be 443 or in the range 1024-65535. Default: 443.
    region String
    The AWS region where the origin is located. Supported values: us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-west-3, eu-central-1, eu-north-1, ap-northeast-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-south-1, sa-east-1.
    siteId Number
    Numeric identifier of the site. The site type must be set to PUBLIC_CLOUD, with cloud_type = "AWS". Cannot be changed after the resource is created.
    updatedAt String
    Timestamp when the cloud origin domain resource was last updated.

    Import

    Cloud Origin Domain can be imported using the format account_id/site_id/origin_id:

    $ pulumi import incapsula:index/cloudOriginDomain:CloudOriginDomain example 55865773/123456/789

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    incapsula imperva/terraform-provider-incapsula
    License
    Notes
    This Pulumi package is based on the incapsula Terraform Provider.
    Viewing docs for incapsula 3.39.0
    published on Sunday, Jul 26, 2026 by imperva
    Schema (JSON)
    imperva/terraform-provider-incapsula

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial