Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Incapsula Provider
  3. API Docs
  4. MtlsClientToImpervaCaCertificateSiteSettings
incapsula 3.33.0 published on Wednesday, Apr 30, 2025 by imperva
imperva/terraform-provider-incapsula

incapsula.MtlsClientToImpervaCaCertificateSiteSettings

Explore with Pulumi AI

incapsula logo
incapsula 3.33.0 published on Wednesday, Apr 30, 2025 by imperva
imperva/terraform-provider-incapsula

    Example Usage

    Associate 2 different certificates with the same site. Use the depends_on parameter to ensure that related resources are applied in the proper order.

    import * as pulumi from "@pulumi/pulumi";
import * as fs from "fs";
import * as incapsula from "@pulumi/incapsula";

const clientCaCertificate1 = new incapsula.MtlsClientToImpervaCaCertificate("clientCaCertificate1", {
    accountId: data.incapsula_account_data.account_data.current_account,
    certificate: fs.readFileSync("./cert.der", { encoding: "base64" }),
    certificateName: "der certificate example 1",
});
const clientCaCertificate2 = new incapsula.MtlsClientToImpervaCaCertificate("clientCaCertificate2", {
    accountId: data.incapsula_account_data.account_data.current_account,
    certificate: fs.readFileSync("./cert.pem", { encoding: "base64" }),
    certificateName: "pem certificate example 2",
});
const clientCaCertificateSiteAssociation1 = new incapsula.MtlsClientToImpervaCaCertificateSiteAssociation("clientCaCertificateSiteAssociation1", {
    certificateId: clientCaCertificate1.mtlsClientToImpervaCaCertificateId,
    siteId: incapsula_site["example-site"].id,
});
const siteClientCaCertificateSiteAssociation2 = new incapsula.MtlsClientToImpervaCaCertificateSiteAssociation("siteClientCaCertificateSiteAssociation2", {
    certificateId: clientCaCertificate2.mtlsClientToImpervaCaCertificateId,
    siteId: incapsula_site["example-site"].id,
});

    import pulumi
import base64
import pulumi_incapsula as incapsula

client_ca_certificate1 = incapsula.MtlsClientToImpervaCaCertificate("clientCaCertificate1",
    account_id=data["incapsula_account_data"]["account_data"]["current_account"],
    certificate=(lambda path: base64.b64encode(open(path).read().encode()).decode())("./cert.der"),
    certificate_name="der certificate example 1")
client_ca_certificate2 = incapsula.MtlsClientToImpervaCaCertificate("clientCaCertificate2",
    account_id=data["incapsula_account_data"]["account_data"]["current_account"],
    certificate=(lambda path: base64.b64encode(open(path).read().encode()).decode())("./cert.pem"),
    certificate_name="pem certificate example 2")
client_ca_certificate_site_association1 = incapsula.MtlsClientToImpervaCaCertificateSiteAssociation("clientCaCertificateSiteAssociation1",
    certificate_id=client_ca_certificate1.mtls_client_to_imperva_ca_certificate_id,
    site_id=incapsula_site["example-site"]["id"])
site_client_ca_certificate_site_association2 = incapsula.MtlsClientToImpervaCaCertificateSiteAssociation("siteClientCaCertificateSiteAssociation2",
    certificate_id=client_ca_certificate2.mtls_client_to_imperva_ca_certificate_id,
    site_id=incapsula_site["example-site"]["id"])

    package main

import (
	"encoding/base64"
	"os"

	"github.com/pulumi/pulumi-terraform-provider/sdks/go/incapsula/v3/incapsula"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func filebase64OrPanic(path string) string {
	if fileData, err := os.ReadFile(path); err == nil {
		return base64.StdEncoding.EncodeToString(fileData[:])
	} else {
		panic(err.Error())
	}
}

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		clientCaCertificate1, err := incapsula.NewMtlsClientToImpervaCaCertificate(ctx, "clientCaCertificate1", &incapsula.MtlsClientToImpervaCaCertificateArgs{
			AccountId:       pulumi.Any(data.Incapsula_account_data.Account_data.Current_account),
			Certificate:     pulumi.String(filebase64OrPanic("./cert.der")),
			CertificateName: pulumi.String("der certificate example 1"),
		})
		if err != nil {
			return err
		}
		clientCaCertificate2, err := incapsula.NewMtlsClientToImpervaCaCertificate(ctx, "clientCaCertificate2", &incapsula.MtlsClientToImpervaCaCertificateArgs{
			AccountId:       pulumi.Any(data.Incapsula_account_data.Account_data.Current_account),
			Certificate:     pulumi.String(filebase64OrPanic("./cert.pem")),
			CertificateName: pulumi.String("pem certificate example 2"),
		})
		if err != nil {
			return err
		}
		_, err = incapsula.NewMtlsClientToImpervaCaCertificateSiteAssociation(ctx, "clientCaCertificateSiteAssociation1", &incapsula.MtlsClientToImpervaCaCertificateSiteAssociationArgs{
			CertificateId: clientCaCertificate1.MtlsClientToImpervaCaCertificateId,
			SiteId:        pulumi.Any(incapsula_site.ExampleSite.Id),
		})
		if err != nil {
			return err
		}
		_, err = incapsula.NewMtlsClientToImpervaCaCertificateSiteAssociation(ctx, "siteClientCaCertificateSiteAssociation2", &incapsula.MtlsClientToImpervaCaCertificateSiteAssociationArgs{
			CertificateId: clientCaCertificate2.MtlsClientToImpervaCaCertificateId,
			SiteId:        pulumi.Any(incapsula_site.ExampleSite.Id),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using Pulumi;
using Incapsula = Pulumi.Incapsula;

	
string ReadFileBase64(string path) 
{
    return Convert.ToBase64String(Encoding.UTF8.GetBytes(File.ReadAllText(path)));
}

return await Deployment.RunAsync(() => 
{
    var clientCaCertificate1 = new Incapsula.MtlsClientToImpervaCaCertificate("clientCaCertificate1", new()
    {
        AccountId = data.Incapsula_account_data.Account_data.Current_account,
        Certificate = ReadFileBase64("./cert.der"),
        CertificateName = "der certificate example 1",
    });

    var clientCaCertificate2 = new Incapsula.MtlsClientToImpervaCaCertificate("clientCaCertificate2", new()
    {
        AccountId = data.Incapsula_account_data.Account_data.Current_account,
        Certificate = ReadFileBase64("./cert.pem"),
        CertificateName = "pem certificate example 2",
    });

    var clientCaCertificateSiteAssociation1 = new Incapsula.MtlsClientToImpervaCaCertificateSiteAssociation("clientCaCertificateSiteAssociation1", new()
    {
        CertificateId = clientCaCertificate1.MtlsClientToImpervaCaCertificateId,
        SiteId = incapsula_site.Example_site.Id,
    });

    var siteClientCaCertificateSiteAssociation2 = new Incapsula.MtlsClientToImpervaCaCertificateSiteAssociation("siteClientCaCertificateSiteAssociation2", new()
    {
        CertificateId = clientCaCertificate2.MtlsClientToImpervaCaCertificateId,
        SiteId = incapsula_site.Example_site.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.incapsula.MtlsClientToImpervaCaCertificate;
import com.pulumi.incapsula.MtlsClientToImpervaCaCertificateArgs;
import com.pulumi.incapsula.MtlsClientToImpervaCaCertificateSiteAssociation;
import com.pulumi.incapsula.MtlsClientToImpervaCaCertificateSiteAssociationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var clientCaCertificate1 = new MtlsClientToImpervaCaCertificate("clientCaCertificate1", MtlsClientToImpervaCaCertificateArgs.builder()
            .accountId(data.incapsula_account_data().account_data().current_account())
            .certificate(Base64.getEncoder().encodeToString(Files.readAllBytes(Paths.get("./cert.der"))))
            .certificateName("der certificate example 1")
            .build());

        var clientCaCertificate2 = new MtlsClientToImpervaCaCertificate("clientCaCertificate2", MtlsClientToImpervaCaCertificateArgs.builder()
            .accountId(data.incapsula_account_data().account_data().current_account())
            .certificate(Base64.getEncoder().encodeToString(Files.readAllBytes(Paths.get("./cert.pem"))))
            .certificateName("pem certificate example 2")
            .build());

        var clientCaCertificateSiteAssociation1 = new MtlsClientToImpervaCaCertificateSiteAssociation("clientCaCertificateSiteAssociation1", MtlsClientToImpervaCaCertificateSiteAssociationArgs.builder()
            .certificateId(clientCaCertificate1.mtlsClientToImpervaCaCertificateId())
            .siteId(incapsula_site.example-site().id())
            .build());

        var siteClientCaCertificateSiteAssociation2 = new MtlsClientToImpervaCaCertificateSiteAssociation("siteClientCaCertificateSiteAssociation2", MtlsClientToImpervaCaCertificateSiteAssociationArgs.builder()
            .certificateId(clientCaCertificate2.mtlsClientToImpervaCaCertificateId())
            .siteId(incapsula_site.example-site().id())
            .build());

    }
}

    Coming soon!

    Use the depends_on parameter to ensure that related resources are applied in the proper order.

    import * as pulumi from "@pulumi/pulumi";
import * as incapsula from "@pulumi/incapsula";

const demoClientToImpervaCertificateSiteSettings = new incapsula.MtlsClientToImpervaCaCertificateSiteSettings("demoClientToImpervaCertificateSiteSettings", {
    siteId: incapsula_site["example-site"].id,
    requireClientCertificate: true,
    ports: [
        100,
        120,
        292,
    ],
    isPortsException: false,
    hosts: [
        "host.com",
        "site.ca",
    ],
    isHostsException: true,
    fingerprints: [
        "fingerprint1",
        "fingerprint2",
    ],
    forwardToOrigin: true,
    headerName: "header",
    headerValue: "SERIAL_NUMBER",
    isDisableSessionResumption: true,
}, {
    dependsOn: [
        incapsula_mtls_client_to_imperva_ca_certificate_site_association.client_ca_certificate_site_association_1,
        incapsula_mtls_client_to_imperva_ca_certificate_site_association.client_ca_certificate_site_association_2,
    ],
});

    import pulumi
import pulumi_incapsula as incapsula

demo_client_to_imperva_certificate_site_settings = incapsula.MtlsClientToImpervaCaCertificateSiteSettings("demoClientToImpervaCertificateSiteSettings",
    site_id=incapsula_site["example-site"]["id"],
    require_client_certificate=True,
    ports=[
        100,
        120,
        292,
    ],
    is_ports_exception=False,
    hosts=[
        "host.com",
        "site.ca",
    ],
    is_hosts_exception=True,
    fingerprints=[
        "fingerprint1",
        "fingerprint2",
    ],
    forward_to_origin=True,
    header_name="header",
    header_value="SERIAL_NUMBER",
    is_disable_session_resumption=True,
    opts = pulumi.ResourceOptions(depends_on=[
            incapsula_mtls_client_to_imperva_ca_certificate_site_association["client_ca_certificate_site_association_1"],
            incapsula_mtls_client_to_imperva_ca_certificate_site_association["client_ca_certificate_site_association_2"],
        ]))

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/incapsula/v3/incapsula"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := incapsula.NewMtlsClientToImpervaCaCertificateSiteSettings(ctx, "demoClientToImpervaCertificateSiteSettings", &incapsula.MtlsClientToImpervaCaCertificateSiteSettingsArgs{
			SiteId:                   pulumi.Any(incapsula_site.ExampleSite.Id),
			RequireClientCertificate: pulumi.Bool(true),
			Ports: pulumi.Float64Array{
				pulumi.Float64(100),
				pulumi.Float64(120),
				pulumi.Float64(292),
			},
			IsPortsException: pulumi.Bool(false),
			Hosts: pulumi.StringArray{
				pulumi.String("host.com"),
				pulumi.String("site.ca"),
			},
			IsHostsException: pulumi.Bool(true),
			Fingerprints: pulumi.StringArray{
				pulumi.String("fingerprint1"),
				pulumi.String("fingerprint2"),
			},
			ForwardToOrigin:            pulumi.Bool(true),
			HeaderName:                 pulumi.String("header"),
			HeaderValue:                pulumi.String("SERIAL_NUMBER"),
			IsDisableSessionResumption: pulumi.Bool(true),
		}, pulumi.DependsOn([]pulumi.Resource{
			incapsula_mtls_client_to_imperva_ca_certificate_site_association.Client_ca_certificate_site_association_1,
			incapsula_mtls_client_to_imperva_ca_certificate_site_association.Client_ca_certificate_site_association_2,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Incapsula = Pulumi.Incapsula;

return await Deployment.RunAsync(() => 
{
    var demoClientToImpervaCertificateSiteSettings = new Incapsula.MtlsClientToImpervaCaCertificateSiteSettings("demoClientToImpervaCertificateSiteSettings", new()
    {
        SiteId = incapsula_site.Example_site.Id,
        RequireClientCertificate = true,
        Ports = new[]
        {
            100,
            120,
            292,
        },
        IsPortsException = false,
        Hosts = new[]
        {
            "host.com",
            "site.ca",
        },
        IsHostsException = true,
        Fingerprints = new[]
        {
            "fingerprint1",
            "fingerprint2",
        },
        ForwardToOrigin = true,
        HeaderName = "header",
        HeaderValue = "SERIAL_NUMBER",
        IsDisableSessionResumption = true,
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            incapsula_mtls_client_to_imperva_ca_certificate_site_association.Client_ca_certificate_site_association_1,
            incapsula_mtls_client_to_imperva_ca_certificate_site_association.Client_ca_certificate_site_association_2,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.incapsula.MtlsClientToImpervaCaCertificateSiteSettings;
import com.pulumi.incapsula.MtlsClientToImpervaCaCertificateSiteSettingsArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var demoClientToImpervaCertificateSiteSettings = new MtlsClientToImpervaCaCertificateSiteSettings("demoClientToImpervaCertificateSiteSettings", MtlsClientToImpervaCaCertificateSiteSettingsArgs.builder()
            .siteId(incapsula_site.example-site().id())
            .requireClientCertificate(true)
            .ports(            
                100,
                120,
                292)
            .isPortsException(false)
            .hosts(            
                "host.com",
                "site.ca")
            .isHostsException(true)
            .fingerprints(            
                "fingerprint1",
                "fingerprint2")
            .forwardToOrigin(true)
            .headerName("header")
            .headerValue("SERIAL_NUMBER")
            .isDisableSessionResumption(true)
            .build(), CustomResourceOptions.builder()
                .dependsOn(                
                    incapsula_mtls_client_to_imperva_ca_certificate_site_association.client_ca_certificate_site_association_1(),
                    incapsula_mtls_client_to_imperva_ca_certificate_site_association.client_ca_certificate_site_association_2())
                .build());

    }
}

    resources:
  demoClientToImpervaCertificateSiteSettings:
    type: incapsula:MtlsClientToImpervaCaCertificateSiteSettings
    properties:
      siteId: ${incapsula_site"example-site"[%!s(MISSING)].id}
      requireClientCertificate: true
      ports:
        - 100
        - 120
        - 292
      isPortsException: false
      hosts:
        - host.com
        - site.ca
      isHostsException: true
      fingerprints:
        - fingerprint1
        - fingerprint2
      forwardToOrigin: true
      headerName: header
      headerValue: SERIAL_NUMBER
      isDisableSessionResumption: true
    options:
      dependsOn:
        - ${incapsula_mtls_client_to_imperva_ca_certificate_site_association.client_ca_certificate_site_association_1}
        - ${incapsula_mtls_client_to_imperva_ca_certificate_site_association.client_ca_certificate_site_association_2}

    Create MtlsClientToImpervaCaCertificateSiteSettings Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new MtlsClientToImpervaCaCertificateSiteSettings(name: string, args: MtlsClientToImpervaCaCertificateSiteSettingsArgs, opts?: CustomResourceOptions);
    @overload
def MtlsClientToImpervaCaCertificateSiteSettings(resource_name: str,
                                                 args: MtlsClientToImpervaCaCertificateSiteSettingsArgs,
                                                 opts: Optional[ResourceOptions] = None)

@overload
def MtlsClientToImpervaCaCertificateSiteSettings(resource_name: str,
                                                 opts: Optional[ResourceOptions] = None,
                                                 site_id: Optional[str] = None,
                                                 fingerprints: Optional[Sequence[str]] = None,
                                                 forward_to_origin: Optional[bool] = None,
                                                 header_name: Optional[str] = None,
                                                 header_value: Optional[str] = None,
                                                 hosts: Optional[Sequence[str]] = None,
                                                 is_disable_session_resumption: Optional[bool] = None,
                                                 is_hosts_exception: Optional[bool] = None,
                                                 is_ports_exception: Optional[bool] = None,
                                                 mtls_client_to_imperva_ca_certificate_site_settings_id: Optional[str] = None,
                                                 ports: Optional[Sequence[float]] = None,
                                                 require_client_certificate: Optional[bool] = None)
    func NewMtlsClientToImpervaCaCertificateSiteSettings(ctx *Context, name string, args MtlsClientToImpervaCaCertificateSiteSettingsArgs, opts ...ResourceOption) (*MtlsClientToImpervaCaCertificateSiteSettings, error)
    public MtlsClientToImpervaCaCertificateSiteSettings(string name, MtlsClientToImpervaCaCertificateSiteSettingsArgs args, CustomResourceOptions? opts = null)
    public MtlsClientToImpervaCaCertificateSiteSettings(String name, MtlsClientToImpervaCaCertificateSiteSettingsArgs args)
public MtlsClientToImpervaCaCertificateSiteSettings(String name, MtlsClientToImpervaCaCertificateSiteSettingsArgs args, CustomResourceOptions options)

    type: incapsula:MtlsClientToImpervaCaCertificateSiteSettings
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args MtlsClientToImpervaCaCertificateSiteSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args MtlsClientToImpervaCaCertificateSiteSettingsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args MtlsClientToImpervaCaCertificateSiteSettingsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args MtlsClientToImpervaCaCertificateSiteSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args MtlsClientToImpervaCaCertificateSiteSettingsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var mtlsClientToImpervaCaCertificateSiteSettingsResource = new Incapsula.MtlsClientToImpervaCaCertificateSiteSettings("mtlsClientToImpervaCaCertificateSiteSettingsResource", new()
{
    SiteId = "string",
    Fingerprints = new[]
    {
        "string",
    },
    ForwardToOrigin = false,
    HeaderName = "string",
    HeaderValue = "string",
    Hosts = new[]
    {
        "string",
    },
    IsDisableSessionResumption = false,
    IsHostsException = false,
    IsPortsException = false,
    MtlsClientToImpervaCaCertificateSiteSettingsId = "string",
    Ports = new[]
    {
        0,
    },
    RequireClientCertificate = false,
});

    example, err := incapsula.NewMtlsClientToImpervaCaCertificateSiteSettings(ctx, "mtlsClientToImpervaCaCertificateSiteSettingsResource", &incapsula.MtlsClientToImpervaCaCertificateSiteSettingsArgs{
	SiteId: pulumi.String("string"),
	Fingerprints: pulumi.StringArray{
		pulumi.String("string"),
	},
	ForwardToOrigin: pulumi.Bool(false),
	HeaderName:      pulumi.String("string"),
	HeaderValue:     pulumi.String("string"),
	Hosts: pulumi.StringArray{
		pulumi.String("string"),
	},
	IsDisableSessionResumption:                     pulumi.Bool(false),
	IsHostsException:                               pulumi.Bool(false),
	IsPortsException:                               pulumi.Bool(false),
	MtlsClientToImpervaCaCertificateSiteSettingsId: pulumi.String("string"),
	Ports: pulumi.Float64Array{
		pulumi.Float64(0),
	},
	RequireClientCertificate: pulumi.Bool(false),
})

    var mtlsClientToImpervaCaCertificateSiteSettingsResource = new MtlsClientToImpervaCaCertificateSiteSettings("mtlsClientToImpervaCaCertificateSiteSettingsResource", MtlsClientToImpervaCaCertificateSiteSettingsArgs.builder()
    .siteId("string")
    .fingerprints("string")
    .forwardToOrigin(false)
    .headerName("string")
    .headerValue("string")
    .hosts("string")
    .isDisableSessionResumption(false)
    .isHostsException(false)
    .isPortsException(false)
    .mtlsClientToImpervaCaCertificateSiteSettingsId("string")
    .ports(0)
    .requireClientCertificate(false)
    .build());

    mtls_client_to_imperva_ca_certificate_site_settings_resource = incapsula.MtlsClientToImpervaCaCertificateSiteSettings("mtlsClientToImpervaCaCertificateSiteSettingsResource",
    site_id="string",
    fingerprints=["string"],
    forward_to_origin=False,
    header_name="string",
    header_value="string",
    hosts=["string"],
    is_disable_session_resumption=False,
    is_hosts_exception=False,
    is_ports_exception=False,
    mtls_client_to_imperva_ca_certificate_site_settings_id="string",
    ports=[0],
    require_client_certificate=False)

    const mtlsClientToImpervaCaCertificateSiteSettingsResource = new incapsula.MtlsClientToImpervaCaCertificateSiteSettings("mtlsClientToImpervaCaCertificateSiteSettingsResource", {
    siteId: "string",
    fingerprints: ["string"],
    forwardToOrigin: false,
    headerName: "string",
    headerValue: "string",
    hosts: ["string"],
    isDisableSessionResumption: false,
    isHostsException: false,
    isPortsException: false,
    mtlsClientToImpervaCaCertificateSiteSettingsId: "string",
    ports: [0],
    requireClientCertificate: false,
});

    type: incapsula:MtlsClientToImpervaCaCertificateSiteSettings
properties:
    fingerprints:
        - string
    forwardToOrigin: false
    headerName: string
    headerValue: string
    hosts:
        - string
    isDisableSessionResumption: false
    isHostsException: false
    isPortsException: false
    mtlsClientToImpervaCaCertificateSiteSettingsId: string
    ports:
        - 0
    requireClientCertificate: false
    siteId: string

    MtlsClientToImpervaCaCertificateSiteSettings Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The MtlsClientToImpervaCaCertificateSiteSettings resource accepts the following input properties:

    SiteId string
    Numeric identifier of the site to operate on.
    Fingerprints List<string>
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    ForwardToOrigin bool
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    HeaderName string
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    HeaderValue string
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    Hosts List<string>
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    IsDisableSessionResumption bool
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    IsHostsException bool
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    IsPortsException bool
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    MtlsClientToImpervaCaCertificateSiteSettingsId string
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    Ports List<double>
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    RequireClientCertificate bool
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    SiteId string
    Numeric identifier of the site to operate on.
    Fingerprints []string
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    ForwardToOrigin bool
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    HeaderName string
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    HeaderValue string
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    Hosts []string
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    IsDisableSessionResumption bool
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    IsHostsException bool
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    IsPortsException bool
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    MtlsClientToImpervaCaCertificateSiteSettingsId string
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    Ports []float64
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    RequireClientCertificate bool
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    siteId String
    Numeric identifier of the site to operate on.
    fingerprints List<String>
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    forwardToOrigin Boolean
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    headerName String
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    headerValue String
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    hosts List<String>
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    isDisableSessionResumption Boolean
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    isHostsException Boolean
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    isPortsException Boolean
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    mtlsClientToImpervaCaCertificateSiteSettingsId String
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    ports List<Double>
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    requireClientCertificate Boolean
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    siteId string
    Numeric identifier of the site to operate on.
    fingerprints string[]
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    forwardToOrigin boolean
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    headerName string
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    headerValue string
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    hosts string[]
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    isDisableSessionResumption boolean
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    isHostsException boolean
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    isPortsException boolean
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    mtlsClientToImpervaCaCertificateSiteSettingsId string
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    ports number[]
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    requireClientCertificate boolean
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    site_id str
    Numeric identifier of the site to operate on.
    fingerprints Sequence[str]
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    forward_to_origin bool
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    header_name str
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    header_value str
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    hosts Sequence[str]
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    is_disable_session_resumption bool
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    is_hosts_exception bool
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    is_ports_exception bool
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    mtls_client_to_imperva_ca_certificate_site_settings_id str
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    ports Sequence[float]
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    require_client_certificate bool
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    siteId String
    Numeric identifier of the site to operate on.
    fingerprints List<String>
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    forwardToOrigin Boolean
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    headerName String
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    headerValue String
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    hosts List<String>
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    isDisableSessionResumption Boolean
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    isHostsException Boolean
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    isPortsException Boolean
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    mtlsClientToImpervaCaCertificateSiteSettingsId String
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    ports List<Number>
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    requireClientCertificate Boolean
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the MtlsClientToImpervaCaCertificateSiteSettings resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing MtlsClientToImpervaCaCertificateSiteSettings Resource

    Get an existing MtlsClientToImpervaCaCertificateSiteSettings resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: MtlsClientToImpervaCaCertificateSiteSettingsState, opts?: CustomResourceOptions): MtlsClientToImpervaCaCertificateSiteSettings
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        fingerprints: Optional[Sequence[str]] = None,
        forward_to_origin: Optional[bool] = None,
        header_name: Optional[str] = None,
        header_value: Optional[str] = None,
        hosts: Optional[Sequence[str]] = None,
        is_disable_session_resumption: Optional[bool] = None,
        is_hosts_exception: Optional[bool] = None,
        is_ports_exception: Optional[bool] = None,
        mtls_client_to_imperva_ca_certificate_site_settings_id: Optional[str] = None,
        ports: Optional[Sequence[float]] = None,
        require_client_certificate: Optional[bool] = None,
        site_id: Optional[str] = None) -> MtlsClientToImpervaCaCertificateSiteSettings
    func GetMtlsClientToImpervaCaCertificateSiteSettings(ctx *Context, name string, id IDInput, state *MtlsClientToImpervaCaCertificateSiteSettingsState, opts ...ResourceOption) (*MtlsClientToImpervaCaCertificateSiteSettings, error)
    public static MtlsClientToImpervaCaCertificateSiteSettings Get(string name, Input<string> id, MtlsClientToImpervaCaCertificateSiteSettingsState? state, CustomResourceOptions? opts = null)
    public static MtlsClientToImpervaCaCertificateSiteSettings get(String name, Output<String> id, MtlsClientToImpervaCaCertificateSiteSettingsState state, CustomResourceOptions options)
    resources:  _:    type: incapsula:MtlsClientToImpervaCaCertificateSiteSettings    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Fingerprints List<string>
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    ForwardToOrigin bool
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    HeaderName string
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    HeaderValue string
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    Hosts List<string>
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    IsDisableSessionResumption bool
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    IsHostsException bool
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    IsPortsException bool
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    MtlsClientToImpervaCaCertificateSiteSettingsId string
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    Ports List<double>
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    RequireClientCertificate bool
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    SiteId string
    Numeric identifier of the site to operate on.
    Fingerprints []string
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    ForwardToOrigin bool
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    HeaderName string
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    HeaderValue string
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    Hosts []string
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    IsDisableSessionResumption bool
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    IsHostsException bool
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    IsPortsException bool
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    MtlsClientToImpervaCaCertificateSiteSettingsId string
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    Ports []float64
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    RequireClientCertificate bool
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    SiteId string
    Numeric identifier of the site to operate on.
    fingerprints List<String>
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    forwardToOrigin Boolean
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    headerName String
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    headerValue String
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    hosts List<String>
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    isDisableSessionResumption Boolean
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    isHostsException Boolean
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    isPortsException Boolean
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    mtlsClientToImpervaCaCertificateSiteSettingsId String
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    ports List<Double>
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    requireClientCertificate Boolean
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    siteId String
    Numeric identifier of the site to operate on.
    fingerprints string[]
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    forwardToOrigin boolean
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    headerName string
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    headerValue string
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    hosts string[]
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    isDisableSessionResumption boolean
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    isHostsException boolean
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    isPortsException boolean
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    mtlsClientToImpervaCaCertificateSiteSettingsId string
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    ports number[]
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    requireClientCertificate boolean
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    siteId string
    Numeric identifier of the site to operate on.
    fingerprints Sequence[str]
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    forward_to_origin bool
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    header_name str
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    header_value str
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    hosts Sequence[str]
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    is_disable_session_resumption bool
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    is_hosts_exception bool
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    is_ports_exception bool
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    mtls_client_to_imperva_ca_certificate_site_settings_id str
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    ports Sequence[float]
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    require_client_certificate bool
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    site_id str
    Numeric identifier of the site to operate on.
    fingerprints List<String>
    Permitted client certificate fingerprints. If left empty, all fingerprints are permitted. Default - empty list.
    forwardToOrigin Boolean
    When set to true, the contents specified in headerValue are sent to the origin server in the header specified by headerName. Default - false. If parameter is set to true, header_name and header_value are required.
    headerName String
    The name of the header to send header content in. By default, the header name is 'clientCertificateInfo'. Specifying this parameter is relevant only if forward_to_origin is set to true. Default - clientCertificateInfo.
    headerValue String
    The content to send in the header specified by headerName. One of the following: FULL_CERT (for full certificate in Base64) COMMON_NAME (for certificate's common name (CN)) FINGERPRINT (for the certificate fingerprints in SHA1) SERIAL_NUMBER (for the certificate's serial number). This parameter is required if forward_to_origin is set to true. Default: FULL_CERT.
    hosts List<String>
    The hosts on which client certificate authentication is supported. If left empty, client certificates are supported on all hosts. Default - empty list.
    isDisableSessionResumption Boolean
    Disables SSL session resumption for site. Needed when Incapsula Client CA Certificate is needed only for specific hosts/ports and site have clients that reuse TLS session across different hosts/ports. Default - false.
    isHostsException Boolean
    When set to true, client certificates are not supported on the hosts listed in the Hosts field ('blacklisted'). Default - false.
    isPortsException Boolean
    When set to true, client certificates are not supported on the ports listed in the Ports field ('blacklisted'). Default - false.
    mtlsClientToImpervaCaCertificateSiteSettingsId String
    Value of Site ID in the Incapsula Mutual TLS Client to Imperva CA Certificate Site Settings.
    ports List<Number>
    The ports on which client certificate authentication is supported. If left empty, client certificates are supported on all ports. Default: empty list.
    requireClientCertificate Boolean
    When set to true, the end user is required to present the client certificate in order to access the site. Default - false.
    siteId String
    Numeric identifier of the site to operate on.

    Import

    Incapsula mutual TLS Client to Imperva Certificate Site Settings can be imported using Site ID :

    $ pulumi import incapsula:index/mtlsClientToImpervaCaCertificateSiteSettings:MtlsClientToImpervaCaCertificateSiteSettings demo_client_to_imperva_certificate_site_settings 1234

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    incapsula imperva/terraform-provider-incapsula
    License
    Notes
    This Pulumi package is based on the incapsula Terraform Provider.
    incapsula logo
    incapsula 3.33.0 published on Wednesday, Apr 30, 2025 by imperva
    imperva/terraform-provider-incapsula