SiteSslSettings

incapsula 3.37.0, Jan 18 26

incapsula 3.37.0 published on Sunday, Jan 18, 2026 by imperva

Schema (JSON)

imperva/terraform-provider-incapsula

incapsula 3.37.0 published on Sunday, Jan 18, 2026 by imperva

Schema (JSON)

imperva/terraform-provider-incapsula

HSTS: A security mechanism enabling websites to announce themselves as accessible only via HTTPS. For more information about HSTS, click here.
TLS settings: Define the supported TLS version and cipher suites used for encryption of the TLS handshake between client and Imperva. For more information about supported TLS versions and ciphers, click here.

If you run the SSL settings resource from a site for which SSL is not yet enabled and the SSL certificate is not approved, it will result in the following error response:

status: 406
message: Site does not have SSL configured
To enable this feature for your site, you must first configure its SSL settings including a valid certificate.

Create SiteSslSettings Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new SiteSslSettings(name: string, args: SiteSslSettingsArgs, opts?: CustomResourceOptions);

@overload
def SiteSslSettings(resource_name: str,
                    args: SiteSslSettingsArgs,
                    opts: Optional[ResourceOptions] = None)

@overload
def SiteSslSettings(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    site_id: Optional[float] = None,
                    account_id: Optional[float] = None,
                    disable_pqc_support: Optional[bool] = None,
                    hsts: Optional[Sequence[SiteSslSettingsHstArgs]] = None,
                    inbound_tls_settings: Optional[Sequence[SiteSslSettingsInboundTlsSettingArgs]] = None,
                    site_ssl_settings_id: Optional[str] = None)

func NewSiteSslSettings(ctx *Context, name string, args SiteSslSettingsArgs, opts ...ResourceOption) (*SiteSslSettings, error)

public SiteSslSettings(string name, SiteSslSettingsArgs args, CustomResourceOptions? opts = null)

public SiteSslSettings(String name, SiteSslSettingsArgs args)
public SiteSslSettings(String name, SiteSslSettingsArgs args, CustomResourceOptions options)

type: incapsula:SiteSslSettings
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args SiteSslSettingsArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args SiteSslSettingsArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args SiteSslSettingsArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args SiteSslSettingsArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args SiteSslSettingsArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var siteSslSettingsResource = new Incapsula.SiteSslSettings("siteSslSettingsResource", new()
{
    SiteId = 0,
    AccountId = 0,
    DisablePqcSupport = false,
    Hsts = new[]
    {
        new Incapsula.Inputs.SiteSslSettingsHstArgs
        {
            IsEnabled = false,
            MaxAge = 0,
            PreLoaded = false,
            SubDomainsIncluded = false,
        },
    },
    InboundTlsSettings = new[]
    {
        new Incapsula.Inputs.SiteSslSettingsInboundTlsSettingArgs
        {
            ConfigurationProfile = "string",
            TlsConfigurations = new[]
            {
                new Incapsula.Inputs.SiteSslSettingsInboundTlsSettingTlsConfigurationArgs
                {
                    CiphersSupports = new[]
                    {
                        "string",
                    },
                    TlsVersion = "string",
                },
            },
        },
    },
    SiteSslSettingsId = "string",
});

example, err := incapsula.NewSiteSslSettings(ctx, "siteSslSettingsResource", &incapsula.SiteSslSettingsArgs{
	SiteId:            pulumi.Float64(0),
	AccountId:         pulumi.Float64(0),
	DisablePqcSupport: pulumi.Bool(false),
	Hsts: incapsula.SiteSslSettingsHstArray{
		&incapsula.SiteSslSettingsHstArgs{
			IsEnabled:          pulumi.Bool(false),
			MaxAge:             pulumi.Float64(0),
			PreLoaded:          pulumi.Bool(false),
			SubDomainsIncluded: pulumi.Bool(false),
		},
	},
	InboundTlsSettings: incapsula.SiteSslSettingsInboundTlsSettingArray{
		&incapsula.SiteSslSettingsInboundTlsSettingArgs{
			ConfigurationProfile: pulumi.String("string"),
			TlsConfigurations: incapsula.SiteSslSettingsInboundTlsSettingTlsConfigurationArray{
				&incapsula.SiteSslSettingsInboundTlsSettingTlsConfigurationArgs{
					CiphersSupports: pulumi.StringArray{
						pulumi.String("string"),
					},
					TlsVersion: pulumi.String("string"),
				},
			},
		},
	},
	SiteSslSettingsId: pulumi.String("string"),
})

var siteSslSettingsResource = new SiteSslSettings("siteSslSettingsResource", SiteSslSettingsArgs.builder()
    .siteId(0.0)
    .accountId(0.0)
    .disablePqcSupport(false)
    .hsts(SiteSslSettingsHstArgs.builder()
        .isEnabled(false)
        .maxAge(0.0)
        .preLoaded(false)
        .subDomainsIncluded(false)
        .build())
    .inboundTlsSettings(SiteSslSettingsInboundTlsSettingArgs.builder()
        .configurationProfile("string")
        .tlsConfigurations(SiteSslSettingsInboundTlsSettingTlsConfigurationArgs.builder()
            .ciphersSupports("string")
            .tlsVersion("string")
            .build())
        .build())
    .siteSslSettingsId("string")
    .build());

site_ssl_settings_resource = incapsula.SiteSslSettings("siteSslSettingsResource",
    site_id=0,
    account_id=0,
    disable_pqc_support=False,
    hsts=[{
        "is_enabled": False,
        "max_age": 0,
        "pre_loaded": False,
        "sub_domains_included": False,
    }],
    inbound_tls_settings=[{
        "configuration_profile": "string",
        "tls_configurations": [{
            "ciphers_supports": ["string"],
            "tls_version": "string",
        }],
    }],
    site_ssl_settings_id="string")

const siteSslSettingsResource = new incapsula.SiteSslSettings("siteSslSettingsResource", {
    siteId: 0,
    accountId: 0,
    disablePqcSupport: false,
    hsts: [{
        isEnabled: false,
        maxAge: 0,
        preLoaded: false,
        subDomainsIncluded: false,
    }],
    inboundTlsSettings: [{
        configurationProfile: "string",
        tlsConfigurations: [{
            ciphersSupports: ["string"],
            tlsVersion: "string",
        }],
    }],
    siteSslSettingsId: "string",
});

type: incapsula:SiteSslSettings
properties:
    accountId: 0
    disablePqcSupport: false
    hsts:
        - isEnabled: false
          maxAge: 0
          preLoaded: false
          subDomainsIncluded: false
    inboundTlsSettings:
        - configurationProfile: string
          tlsConfigurations:
            - ciphersSupports:
                - string
              tlsVersion: string
    siteId: 0
    siteSslSettingsId: string

SiteSslSettings Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The SiteSslSettings resource accepts the following input properties:

SiteId double

Numeric identifier of the site to operate on.

AccountId double

Numeric identifier of the account in which the site is located.

DisablePqcSupport bool

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

Hsts List<SiteSslSettingsHst>

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

InboundTlsSettings List<SiteSslSettingsInboundTlsSetting>

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

SiteSslSettingsId string

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

SiteId float64

Numeric identifier of the site to operate on.

AccountId float64

Numeric identifier of the account in which the site is located.

DisablePqcSupport bool

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

Hsts []SiteSslSettingsHstArgs

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

InboundTlsSettings []SiteSslSettingsInboundTlsSettingArgs

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

SiteSslSettingsId string

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

siteId Double

Numeric identifier of the site to operate on.

accountId Double

Numeric identifier of the account in which the site is located.

disablePqcSupport Boolean

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

hsts List<SiteSslSettingsHst>

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

inboundTlsSettings List<SiteSslSettingsInboundTlsSetting>

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

siteSslSettingsId String

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

siteId number

Numeric identifier of the site to operate on.

accountId number

Numeric identifier of the account in which the site is located.

disablePqcSupport boolean

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

hsts SiteSslSettingsHst[]

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

inboundTlsSettings SiteSslSettingsInboundTlsSetting[]

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

siteSslSettingsId string

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

site_id float

Numeric identifier of the site to operate on.

account_id float

Numeric identifier of the account in which the site is located.

disable_pqc_support bool

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

hsts Sequence[SiteSslSettingsHstArgs]

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

inbound_tls_settings Sequence[SiteSslSettingsInboundTlsSettingArgs]

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

site_ssl_settings_id str

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

siteId Number

Numeric identifier of the site to operate on.

accountId Number

Numeric identifier of the account in which the site is located.

disablePqcSupport Boolean

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

hsts List<Property Map>

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

inboundTlsSettings List<Property Map>

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

siteSslSettingsId String

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

Outputs

All input properties are implicitly available as output properties. Additionally, the SiteSslSettings resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing SiteSslSettings Resource

Get an existing SiteSslSettings resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SiteSslSettingsState, opts?: CustomResourceOptions): SiteSslSettings

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[float] = None,
        disable_pqc_support: Optional[bool] = None,
        hsts: Optional[Sequence[SiteSslSettingsHstArgs]] = None,
        inbound_tls_settings: Optional[Sequence[SiteSslSettingsInboundTlsSettingArgs]] = None,
        site_id: Optional[float] = None,
        site_ssl_settings_id: Optional[str] = None) -> SiteSslSettings

func GetSiteSslSettings(ctx *Context, name string, id IDInput, state *SiteSslSettingsState, opts ...ResourceOption) (*SiteSslSettings, error)

public static SiteSslSettings Get(string name, Input<string> id, SiteSslSettingsState? state, CustomResourceOptions? opts = null)

public static SiteSslSettings get(String name, Output<String> id, SiteSslSettingsState state, CustomResourceOptions options)

resources:  _:    type: incapsula:SiteSslSettings    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AccountId double

Numeric identifier of the account in which the site is located.

DisablePqcSupport bool

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

Hsts List<SiteSslSettingsHst>

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

InboundTlsSettings List<SiteSslSettingsInboundTlsSetting>

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

SiteId double

Numeric identifier of the site to operate on.

SiteSslSettingsId string

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

AccountId float64

Numeric identifier of the account in which the site is located.

DisablePqcSupport bool

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

Hsts []SiteSslSettingsHstArgs

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

InboundTlsSettings []SiteSslSettingsInboundTlsSettingArgs

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

SiteId float64

Numeric identifier of the site to operate on.

SiteSslSettingsId string

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

accountId Double

Numeric identifier of the account in which the site is located.

disablePqcSupport Boolean

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

hsts List<SiteSslSettingsHst>

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

inboundTlsSettings List<SiteSslSettingsInboundTlsSetting>

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

siteId Double

Numeric identifier of the site to operate on.

siteSslSettingsId String

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

accountId number

Numeric identifier of the account in which the site is located.

disablePqcSupport boolean

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

hsts SiteSslSettingsHst[]

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

inboundTlsSettings SiteSslSettingsInboundTlsSetting[]

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

siteId number

Numeric identifier of the site to operate on.

siteSslSettingsId string

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

account_id float

Numeric identifier of the account in which the site is located.

disable_pqc_support bool

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

hsts Sequence[SiteSslSettingsHstArgs]

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

inbound_tls_settings Sequence[SiteSslSettingsInboundTlsSettingArgs]

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

site_id float

Numeric identifier of the site to operate on.

site_ssl_settings_id str

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

accountId Number

Numeric identifier of the account in which the site is located.

disablePqcSupport Boolean

: Disable Post-Quantum Cryptography support for SNI traffic.

Type: bool
Default: false

hsts List<Property Map>

: HTTP Strict Transport Security (HSTS) configuration settings for the site.

Type: set of hsts_config resource (defined below)

inboundTlsSettings List<Property Map>

: Transport Layer Security (TLS) configuration settings for the site.

Type: set of inbound_tls_settings resource (defined below)

siteId Number

Numeric identifier of the site to operate on.

siteSslSettingsId String

Unique identifier in the API for the Site SSL settings. The id is identical to Site id.

Supporting Types

SiteSslSettingsHst, SiteSslSettingsHstArgs

IsEnabled bool
MaxAge double
PreLoaded bool
SubDomainsIncluded bool

IsEnabled bool
MaxAge float64
PreLoaded bool
SubDomainsIncluded bool

isEnabled Boolean
maxAge Double
preLoaded Boolean
subDomainsIncluded Boolean

isEnabled boolean
maxAge number
preLoaded boolean
subDomainsIncluded boolean

is_enabled bool
max_age float
pre_loaded bool
sub_domains_included bool

isEnabled Boolean
maxAge Number
preLoaded Boolean
subDomainsIncluded Boolean

SiteSslSettingsInboundTlsSetting, SiteSslSettingsInboundTlsSettingArgs

ConfigurationProfile string
TlsConfigurations List<SiteSslSettingsInboundTlsSettingTlsConfiguration>

ConfigurationProfile string
TlsConfigurations []SiteSslSettingsInboundTlsSettingTlsConfiguration

configurationProfile String
tlsConfigurations List<SiteSslSettingsInboundTlsSettingTlsConfiguration>

configurationProfile string
tlsConfigurations SiteSslSettingsInboundTlsSettingTlsConfiguration[]

configuration_profile str
tls_configurations Sequence[SiteSslSettingsInboundTlsSettingTlsConfiguration]

configurationProfile String
tlsConfigurations List<Property Map>

SiteSslSettingsInboundTlsSettingTlsConfiguration, SiteSslSettingsInboundTlsSettingTlsConfigurationArgs

CiphersSupports List<string>
TlsVersion string

CiphersSupports []string
TlsVersion string

ciphersSupports List<String>
tlsVersion String

ciphersSupports string[]
tlsVersion string

ciphers_supports Sequence[str]
tls_version str

ciphersSupports List<String>
tlsVersion String

Import

Site SSL settings can be imported using the siteId or siteId/accountId for sub-accounts:

$ pulumi import incapsula:index/siteSslSettings:SiteSslSettings example 1234

$ pulumi import incapsula:index/siteSslSettings:SiteSslSettings example 1234/4321

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: incapsula imperva/terraform-provider-incapsula
License
Notes: This Pulumi package is based on the incapsula Terraform Provider.

incapsula 3.37.0 published on Sunday, Jan 18, 2026 by imperva

Schema (JSON)

imperva/terraform-provider-incapsula

incapsula.SiteSslSettings

On this page

On this page

Create SiteSslSettings Resource

Constructor syntax

Parameters

Constructor example

SiteSslSettings Resource Properties

Inputs

Outputs

Look up Existing SiteSslSettings Resource

Supporting Types

SiteSslSettingsHst, SiteSslSettingsHstArgs

SiteSslSettingsInboundTlsSetting, SiteSslSettingsInboundTlsSettingArgs

SiteSslSettingsInboundTlsSettingTlsConfiguration, SiteSslSettingsInboundTlsSettingTlsConfigurationArgs

Import

Package Details

On this page

On this page