published on Saturday, Jul 11, 2026 by Pulumi
published on Saturday, Jul 11, 2026 by Pulumi
This resource manages WAN Assurance Idp Profiles.
An IDP Profile is a configuration setting that defines the behavior and actions of an intrusion detection and prevention (IDP) system. It specifies how the idp system should detect and respond to potential security threats or attacks on a network.
The profile includes rules and policies that determine which types of traffic or attacks should be monitored, what actions should be taken when a threat is detected, and any exceptions or exclusions for specific destinations or attack types.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";
const idpprofileOne = new junipermist.org.Idpprofile("idpprofile_one", {
orgId: terraformTest.id,
baseProfile: "standard",
overwrites: [
{
name: "server_bypass",
matching: {
severity: [],
dstSubnet: [],
attackName: ["SSL:OVERFLOW:KEY-ARG-NO-ENTROPY"],
},
},
{
name: "guest-bypass",
matching: {
severity: [],
dstSubnet: ["8.8.8.8/32"],
attackName: ["UDP:ZERO-DATA"],
},
},
],
name: "idpprofile_one",
});
import pulumi
import pulumi_juniper_mist as junipermist
idpprofile_one = junipermist.org.Idpprofile("idpprofile_one",
org_id=terraform_test["id"],
base_profile="standard",
overwrites=[
{
"name": "server_bypass",
"matching": {
"severity": [],
"dst_subnet": [],
"attack_name": ["SSL:OVERFLOW:KEY-ARG-NO-ENTROPY"],
},
},
{
"name": "guest-bypass",
"matching": {
"severity": [],
"dst_subnet": ["8.8.8.8/32"],
"attack_name": ["UDP:ZERO-DATA"],
},
},
],
name="idpprofile_one")
package main
import (
"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := org.NewIdpprofile(ctx, "idpprofile_one", &org.IdpprofileArgs{
OrgId: pulumi.Any(terraformTest.Id),
BaseProfile: pulumi.String("standard"),
Overwrites: org.IdpprofileOverwriteArray{
&org.IdpprofileOverwriteArgs{
Name: pulumi.String("server_bypass"),
Matching: &org.IdpprofileOverwriteMatchingArgs{
Severity: []interface{}{},
DstSubnet: []interface{}{},
AttackName: []string{
"SSL:OVERFLOW:KEY-ARG-NO-ENTROPY",
},
},
},
&org.IdpprofileOverwriteArgs{
Name: pulumi.String("guest-bypass"),
Matching: &org.IdpprofileOverwriteMatchingArgs{
Severity: []interface{}{},
DstSubnet: []string{
"8.8.8.8/32",
},
AttackName: []string{
"UDP:ZERO-DATA",
},
},
},
},
Name: pulumi.String("idpprofile_one"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;
return await Deployment.RunAsync(() =>
{
var idpprofileOne = new JuniperMist.Org.Idpprofile("idpprofile_one", new()
{
OrgId = terraformTest.Id,
BaseProfile = "standard",
Overwrites = new[]
{
new JuniperMist.Org.Inputs.IdpprofileOverwriteArgs
{
Name = "server_bypass",
Matching = new JuniperMist.Org.Inputs.IdpprofileOverwriteMatchingArgs
{
Severity = new() { },
DstSubnet = new() { },
AttackName = new[]
{
"SSL:OVERFLOW:KEY-ARG-NO-ENTROPY",
},
},
},
new JuniperMist.Org.Inputs.IdpprofileOverwriteArgs
{
Name = "guest-bypass",
Matching = new JuniperMist.Org.Inputs.IdpprofileOverwriteMatchingArgs
{
Severity = new() { },
DstSubnet = new[]
{
"8.8.8.8/32",
},
AttackName = new[]
{
"UDP:ZERO-DATA",
},
},
},
},
Name = "idpprofile_one",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.Idpprofile;
import com.pulumi.junipermist.org.IdpprofileArgs;
import com.pulumi.junipermist.org.inputs.IdpprofileOverwriteArgs;
import com.pulumi.junipermist.org.inputs.IdpprofileOverwriteMatchingArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var idpprofileOne = new Idpprofile("idpprofileOne", IdpprofileArgs.builder()
.orgId(terraformTest.id())
.baseProfile("standard")
.overwrites(
IdpprofileOverwriteArgs.builder()
.name("server_bypass")
.matching(IdpprofileOverwriteMatchingArgs.builder()
.severity(Arrays.asList())
.dstSubnet(Arrays.asList())
.attackName(Arrays.asList("SSL:OVERFLOW:KEY-ARG-NO-ENTROPY"))
.build())
.build(),
IdpprofileOverwriteArgs.builder()
.name("guest-bypass")
.matching(IdpprofileOverwriteMatchingArgs.builder()
.severity(Arrays.asList())
.dstSubnet(Arrays.asList("8.8.8.8/32"))
.attackName(Arrays.asList("UDP:ZERO-DATA"))
.build())
.build())
.name("idpprofile_one")
.build());
}
}
resources:
idpprofileOne:
type: junipermist:org:Idpprofile
name: idpprofile_one
properties:
orgId: ${terraformTest.id}
baseProfile: standard
overwrites:
- name: server_bypass
matching:
severity: []
dstSubnet: []
attackName:
- SSL:OVERFLOW:KEY-ARG-NO-ENTROPY
- name: guest-bypass
matching:
severity: []
dstSubnet:
- 8.8.8.8/32
attackName:
- UDP:ZERO-DATA
name: idpprofile_one
pulumi {
required_providers {
junipermist = {
source = "pulumi/junipermist"
}
}
}
resource "junipermist_org_idpprofile" "idpprofile_one" {
org_id = terraformTest.id
base_profile = "standard"
overwrites {
name = "server_bypass"
matching = {
severity = []
dst_subnet = []
attack_name = ["SSL:OVERFLOW:KEY-ARG-NO-ENTROPY"]
}
}
overwrites {
name = "guest-bypass"
matching = {
severity = []
dst_subnet = ["8.8.8.8/32"]
attack_name = ["UDP:ZERO-DATA"]
}
}
name = "idpprofile_one"
}
Create Idpprofile Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Idpprofile(name: string, args: IdpprofileArgs, opts?: CustomResourceOptions);@overload
def Idpprofile(resource_name: str,
args: IdpprofileArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Idpprofile(resource_name: str,
opts: Optional[ResourceOptions] = None,
base_profile: Optional[str] = None,
org_id: Optional[str] = None,
name: Optional[str] = None,
overwrites: Optional[Sequence[IdpprofileOverwriteArgs]] = None)func NewIdpprofile(ctx *Context, name string, args IdpprofileArgs, opts ...ResourceOption) (*Idpprofile, error)public Idpprofile(string name, IdpprofileArgs args, CustomResourceOptions? opts = null)
public Idpprofile(String name, IdpprofileArgs args)
public Idpprofile(String name, IdpprofileArgs args, CustomResourceOptions options)
type: junipermist:org:Idpprofile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "junipermist_org_idpprofile" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args IdpprofileArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args IdpprofileArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args IdpprofileArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args IdpprofileArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args IdpprofileArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var idpprofileResource = new JuniperMist.Org.Idpprofile("idpprofileResource", new()
{
BaseProfile = "string",
OrgId = "string",
Name = "string",
Overwrites = new[]
{
new JuniperMist.Org.Inputs.IdpprofileOverwriteArgs
{
Name = "string",
Action = "string",
Matching = new JuniperMist.Org.Inputs.IdpprofileOverwriteMatchingArgs
{
AttackNames = new[]
{
"string",
},
DstSubnets = new[]
{
"string",
},
Severities = new[]
{
"string",
},
},
},
},
});
example, err := org.NewIdpprofile(ctx, "idpprofileResource", &org.IdpprofileArgs{
BaseProfile: pulumi.String("string"),
OrgId: pulumi.String("string"),
Name: pulumi.String("string"),
Overwrites: org.IdpprofileOverwriteArray{
&org.IdpprofileOverwriteArgs{
Name: pulumi.String("string"),
Action: pulumi.String("string"),
Matching: &org.IdpprofileOverwriteMatchingArgs{
AttackNames: pulumi.StringArray{
pulumi.String("string"),
},
DstSubnets: pulumi.StringArray{
pulumi.String("string"),
},
Severities: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
})
resource "junipermist_org_idpprofile" "idpprofileResource" {
lifecycle {
create_before_destroy = true
}
base_profile = "string"
org_id = "string"
name = "string"
overwrites {
name = "string"
action = "string"
matching = {
attack_names = ["string"]
dst_subnets = ["string"]
severities = ["string"]
}
}
}
var idpprofileResource = new Idpprofile("idpprofileResource", IdpprofileArgs.builder()
.baseProfile("string")
.orgId("string")
.name("string")
.overwrites(IdpprofileOverwriteArgs.builder()
.name("string")
.action("string")
.matching(IdpprofileOverwriteMatchingArgs.builder()
.attackNames("string")
.dstSubnets("string")
.severities("string")
.build())
.build())
.build());
idpprofile_resource = junipermist.org.Idpprofile("idpprofileResource",
base_profile="string",
org_id="string",
name="string",
overwrites=[{
"name": "string",
"action": "string",
"matching": {
"attack_names": ["string"],
"dst_subnets": ["string"],
"severities": ["string"],
},
}])
const idpprofileResource = new junipermist.org.Idpprofile("idpprofileResource", {
baseProfile: "string",
orgId: "string",
name: "string",
overwrites: [{
name: "string",
action: "string",
matching: {
attackNames: ["string"],
dstSubnets: ["string"],
severities: ["string"],
},
}],
});
type: junipermist:org:Idpprofile
properties:
baseProfile: string
name: string
orgId: string
overwrites:
- action: string
matching:
attackNames:
- string
dstSubnets:
- string
severities:
- string
name: string
Idpprofile Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Idpprofile resource accepts the following input properties:
- Base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- Org
Id string - Owning organization for the IDP profile
- Name string
- Display name of the IDP profile
- Overwrites
List<Pulumi.
Juniper Mist. Org. Inputs. Idpprofile Overwrite> - IDP signature override rules applied on top of the base profile
- Base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- Org
Id string - Owning organization for the IDP profile
- Name string
- Display name of the IDP profile
- Overwrites
[]Idpprofile
Overwrite Args - IDP signature override rules applied on top of the base profile
- base_
profile string - Built-in IDP baseline profile inherited before applying overwrites
- org_
id string - Owning organization for the IDP profile
- name string
- Display name of the IDP profile
- overwrites list(object)
- IDP signature override rules applied on top of the base profile
- base
Profile String - Built-in IDP baseline profile inherited before applying overwrites
- org
Id String - Owning organization for the IDP profile
- name String
- Display name of the IDP profile
- overwrites
List<Idpprofile
Overwrite> - IDP signature override rules applied on top of the base profile
- base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- org
Id string - Owning organization for the IDP profile
- name string
- Display name of the IDP profile
- overwrites
Idpprofile
Overwrite[] - IDP signature override rules applied on top of the base profile
- base_
profile str - Built-in IDP baseline profile inherited before applying overwrites
- org_
id str - Owning organization for the IDP profile
- name str
- Display name of the IDP profile
- overwrites
Sequence[Idpprofile
Overwrite Args] - IDP signature override rules applied on top of the base profile
- base
Profile String - Built-in IDP baseline profile inherited before applying overwrites
- org
Id String - Owning organization for the IDP profile
- name String
- Display name of the IDP profile
- overwrites List<Property Map>
- IDP signature override rules applied on top of the base profile
Outputs
All input properties are implicitly available as output properties. Additionally, the Idpprofile resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Idpprofile Resource
Get an existing Idpprofile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: IdpprofileState, opts?: CustomResourceOptions): Idpprofile@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
base_profile: Optional[str] = None,
name: Optional[str] = None,
org_id: Optional[str] = None,
overwrites: Optional[Sequence[IdpprofileOverwriteArgs]] = None) -> Idpprofilefunc GetIdpprofile(ctx *Context, name string, id IDInput, state *IdpprofileState, opts ...ResourceOption) (*Idpprofile, error)public static Idpprofile Get(string name, Input<string> id, IdpprofileState? state, CustomResourceOptions? opts = null)public static Idpprofile get(String name, Output<String> id, IdpprofileState state, CustomResourceOptions options)resources: _: type: junipermist:org:Idpprofile get: id: ${id}import {
to = junipermist_org_idpprofile.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- Name string
- Display name of the IDP profile
- Org
Id string - Owning organization for the IDP profile
- Overwrites
List<Pulumi.
Juniper Mist. Org. Inputs. Idpprofile Overwrite> - IDP signature override rules applied on top of the base profile
- Base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- Name string
- Display name of the IDP profile
- Org
Id string - Owning organization for the IDP profile
- Overwrites
[]Idpprofile
Overwrite Args - IDP signature override rules applied on top of the base profile
- base_
profile string - Built-in IDP baseline profile inherited before applying overwrites
- name string
- Display name of the IDP profile
- org_
id string - Owning organization for the IDP profile
- overwrites list(object)
- IDP signature override rules applied on top of the base profile
- base
Profile String - Built-in IDP baseline profile inherited before applying overwrites
- name String
- Display name of the IDP profile
- org
Id String - Owning organization for the IDP profile
- overwrites
List<Idpprofile
Overwrite> - IDP signature override rules applied on top of the base profile
- base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- name string
- Display name of the IDP profile
- org
Id string - Owning organization for the IDP profile
- overwrites
Idpprofile
Overwrite[] - IDP signature override rules applied on top of the base profile
- base_
profile str - Built-in IDP baseline profile inherited before applying overwrites
- name str
- Display name of the IDP profile
- org_
id str - Owning organization for the IDP profile
- overwrites
Sequence[Idpprofile
Overwrite Args] - IDP signature override rules applied on top of the base profile
- base
Profile String - Built-in IDP baseline profile inherited before applying overwrites
- name String
- Display name of the IDP profile
- org
Id String - Owning organization for the IDP profile
- overwrites List<Property Map>
- IDP signature override rules applied on top of the base profile
Supporting Types
IdpprofileOverwrite, IdpprofileOverwriteArgs
- Name string
- Display name for this IDP profile overwrite rule
- Action string
- Enforcement action applied when this overwrite rule matches
- Matching
Pulumi.
Juniper Mist. Org. Inputs. Idpprofile Overwrite Matching - Criteria that select signatures for this overwrite rule
- Name string
- Display name for this IDP profile overwrite rule
- Action string
- Enforcement action applied when this overwrite rule matches
- Matching
Idpprofile
Overwrite Matching - Criteria that select signatures for this overwrite rule
- name String
- Display name for this IDP profile overwrite rule
- action String
- Enforcement action applied when this overwrite rule matches
- matching
Idpprofile
Overwrite Matching - Criteria that select signatures for this overwrite rule
- name string
- Display name for this IDP profile overwrite rule
- action string
- Enforcement action applied when this overwrite rule matches
- matching
Idpprofile
Overwrite Matching - Criteria that select signatures for this overwrite rule
- name str
- Display name for this IDP profile overwrite rule
- action str
- Enforcement action applied when this overwrite rule matches
- matching
Idpprofile
Overwrite Matching - Criteria that select signatures for this overwrite rule
- name String
- Display name for this IDP profile overwrite rule
- action String
- Enforcement action applied when this overwrite rule matches
- matching Property Map
- Criteria that select signatures for this overwrite rule
IdpprofileOverwriteMatching, IdpprofileOverwriteMatchingArgs
- Attack
Names List<string> - Signature names matched by the IDP profile overwrite
- Dst
Subnets List<string> - Destination subnets matched by the IDP profile overwrite
- Severities List<string>
- Threat levels matched by the IDP profile overwrite
- Attack
Names []string - Signature names matched by the IDP profile overwrite
- Dst
Subnets []string - Destination subnets matched by the IDP profile overwrite
- Severities []string
- Threat levels matched by the IDP profile overwrite
- attack_
names list(string) - Signature names matched by the IDP profile overwrite
- dst_
subnets list(string) - Destination subnets matched by the IDP profile overwrite
- severities list(string)
- Threat levels matched by the IDP profile overwrite
- attack
Names List<String> - Signature names matched by the IDP profile overwrite
- dst
Subnets List<String> - Destination subnets matched by the IDP profile overwrite
- severities List<String>
- Threat levels matched by the IDP profile overwrite
- attack
Names string[] - Signature names matched by the IDP profile overwrite
- dst
Subnets string[] - Destination subnets matched by the IDP profile overwrite
- severities string[]
- Threat levels matched by the IDP profile overwrite
- attack_
names Sequence[str] - Signature names matched by the IDP profile overwrite
- dst_
subnets Sequence[str] - Destination subnets matched by the IDP profile overwrite
- severities Sequence[str]
- Threat levels matched by the IDP profile overwrite
- attack
Names List<String> - Signature names matched by the IDP profile overwrite
- dst
Subnets List<String> - Destination subnets matched by the IDP profile overwrite
- severities List<String>
- Threat levels matched by the IDP profile overwrite
Import
Using pulumi import, import junipermist.org.Idpprofile with:
IDP Profile can be imported by specifying the orgId and the idpprofileId
$ pulumi import junipermist:org/idpprofile:Idpprofile idpprofile_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- junipermist pulumi/pulumi-junipermist
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
mistTerraform Provider.
published on Saturday, Jul 11, 2026 by Pulumi