Docs Packages
  1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. NetworkFirewall
  5. NetworkFirewallPolicyDecryptionRule
Oracle Cloud Infrastructure v1.34.0 published on Friday, May 3, 2024 by Pulumi
pulumi/pulumi-oci

oci.NetworkFirewall.NetworkFirewallPolicyDecryptionRule

Explore with Pulumi AI

oci logo
Oracle Cloud Infrastructure v1.34.0 published on Friday, May 3, 2024 by Pulumi
pulumi/pulumi-oci

    This resource provides the Network Firewall Policy Decryption Rule resource in Oracle Cloud Infrastructure Network Firewall service.

    Creates a new Decryption Rule for the Network Firewall Policy.

    Example Usage

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.NetworkFirewall.NetworkFirewallPolicyDecryptionRule;
import com.pulumi.oci.NetworkFirewall.NetworkFirewallPolicyDecryptionRuleArgs;
import com.pulumi.oci.NetworkFirewall.inputs.NetworkFirewallPolicyDecryptionRuleConditionArgs;
import com.pulumi.oci.NetworkFirewall.inputs.NetworkFirewallPolicyDecryptionRulePositionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var testNetworkFirewallPolicyDecryptionRule = new NetworkFirewallPolicyDecryptionRule("testNetworkFirewallPolicyDecryptionRule", NetworkFirewallPolicyDecryptionRuleArgs.builder()        
            .lifecycle(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
            .name(networkFirewallPolicyDecryptionRuleName)
            .action(networkFirewallPolicyDecryptionRuleAction)
            .condition(NetworkFirewallPolicyDecryptionRuleConditionArgs.builder()
                .destinationAddresses(networkFirewallPolicyDecryptionRuleConditionDestinationAddress)
                .sourceAddresses(networkFirewallPolicyDecryptionRuleConditionSourceAddress)
                .build())
            .position(NetworkFirewallPolicyDecryptionRulePositionArgs.builder()
                .afterRule(networkFirewallPolicyDecryptionRulePositionAfterRule)
                .beforeRule(networkFirewallPolicyDecryptionRulePositionBeforeRule)
                .build())
            .networkFirewallPolicyId(testNetworkFirewallPolicy.id())
            .decryptionProfile(networkFirewallPolicyDecryptionRuleDecryptionProfile)
            .secret(networkFirewallPolicyDecryptionRuleSecret)
            .build());

    }
}

    resources:
  testNetworkFirewallPolicyDecryptionRule:
    type: oci:NetworkFirewall:NetworkFirewallPolicyDecryptionRule
    name: test_network_firewall_policy_decryption_rule
    properties:
      lifecycle:
        ignoreChanges:
          - ${position}
      name: ${networkFirewallPolicyDecryptionRuleName}
      action: ${networkFirewallPolicyDecryptionRuleAction}
      condition:
        destinationAddresses: ${networkFirewallPolicyDecryptionRuleConditionDestinationAddress}
        sourceAddresses: ${networkFirewallPolicyDecryptionRuleConditionSourceAddress}
      position:
        afterRule: ${networkFirewallPolicyDecryptionRulePositionAfterRule}
        beforeRule: ${networkFirewallPolicyDecryptionRulePositionBeforeRule}
      networkFirewallPolicyId: ${testNetworkFirewallPolicy.id}
      decryptionProfile: ${networkFirewallPolicyDecryptionRuleDecryptionProfile}
      secret: ${networkFirewallPolicyDecryptionRuleSecret}

    Create NetworkFirewallPolicyDecryptionRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new NetworkFirewallPolicyDecryptionRule(name: string, args: NetworkFirewallPolicyDecryptionRuleArgs, opts?: CustomResourceOptions);
    @overload
def NetworkFirewallPolicyDecryptionRule(resource_name: str,
                                        args: NetworkFirewallPolicyDecryptionRuleArgs,
                                        opts: Optional[ResourceOptions] = None)

@overload
def NetworkFirewallPolicyDecryptionRule(resource_name: str,
                                        opts: Optional[ResourceOptions] = None,
                                        action: Optional[str] = None,
                                        condition: Optional[_networkfirewall.NetworkFirewallPolicyDecryptionRuleConditionArgs] = None,
                                        network_firewall_policy_id: Optional[str] = None,
                                        decryption_profile: Optional[str] = None,
                                        name: Optional[str] = None,
                                        position: Optional[_networkfirewall.NetworkFirewallPolicyDecryptionRulePositionArgs] = None,
                                        priority_order: Optional[str] = None,
                                        secret: Optional[str] = None)
    func NewNetworkFirewallPolicyDecryptionRule(ctx *Context, name string, args NetworkFirewallPolicyDecryptionRuleArgs, opts ...ResourceOption) (*NetworkFirewallPolicyDecryptionRule, error)
    public NetworkFirewallPolicyDecryptionRule(string name, NetworkFirewallPolicyDecryptionRuleArgs args, CustomResourceOptions? opts = null)
    public NetworkFirewallPolicyDecryptionRule(String name, NetworkFirewallPolicyDecryptionRuleArgs args)
public NetworkFirewallPolicyDecryptionRule(String name, NetworkFirewallPolicyDecryptionRuleArgs args, CustomResourceOptions options)

    type: oci:NetworkFirewall:NetworkFirewallPolicyDecryptionRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args NetworkFirewallPolicyDecryptionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NetworkFirewallPolicyDecryptionRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NetworkFirewallPolicyDecryptionRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NetworkFirewallPolicyDecryptionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NetworkFirewallPolicyDecryptionRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Example

    The following reference example uses placeholder values for all input properties.

    var networkFirewallPolicyDecryptionRuleResource = new Oci.NetworkFirewall.NetworkFirewallPolicyDecryptionRule("networkFirewallPolicyDecryptionRuleResource", new()
{
    Action = "string",
    Condition = new Oci.NetworkFirewall.Inputs.NetworkFirewallPolicyDecryptionRuleConditionArgs
    {
        DestinationAddresses = new[]
        {
            "string",
        },
        SourceAddresses = new[]
        {
            "string",
        },
    },
    NetworkFirewallPolicyId = "string",
    DecryptionProfile = "string",
    Name = "string",
    Position = new Oci.NetworkFirewall.Inputs.NetworkFirewallPolicyDecryptionRulePositionArgs
    {
        AfterRule = "string",
        BeforeRule = "string",
    },
    PriorityOrder = "string",
    Secret = "string",
});

    example, err := NetworkFirewall.NewNetworkFirewallPolicyDecryptionRule(ctx, "networkFirewallPolicyDecryptionRuleResource", &NetworkFirewall.NetworkFirewallPolicyDecryptionRuleArgs{
	Action: pulumi.String("string"),
	Condition: &networkfirewall.NetworkFirewallPolicyDecryptionRuleConditionArgs{
		DestinationAddresses: pulumi.StringArray{
			pulumi.String("string"),
		},
		SourceAddresses: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	NetworkFirewallPolicyId: pulumi.String("string"),
	DecryptionProfile:       pulumi.String("string"),
	Name:                    pulumi.String("string"),
	Position: &networkfirewall.NetworkFirewallPolicyDecryptionRulePositionArgs{
		AfterRule:  pulumi.String("string"),
		BeforeRule: pulumi.String("string"),
	},
	PriorityOrder: pulumi.String("string"),
	Secret:        pulumi.String("string"),
})

    var networkFirewallPolicyDecryptionRuleResource = new NetworkFirewallPolicyDecryptionRule("networkFirewallPolicyDecryptionRuleResource", NetworkFirewallPolicyDecryptionRuleArgs.builder()        
    .action("string")
    .condition(NetworkFirewallPolicyDecryptionRuleConditionArgs.builder()
        .destinationAddresses("string")
        .sourceAddresses("string")
        .build())
    .networkFirewallPolicyId("string")
    .decryptionProfile("string")
    .name("string")
    .position(NetworkFirewallPolicyDecryptionRulePositionArgs.builder()
        .afterRule("string")
        .beforeRule("string")
        .build())
    .priorityOrder("string")
    .secret("string")
    .build());

    network_firewall_policy_decryption_rule_resource = oci.network_firewall.NetworkFirewallPolicyDecryptionRule("networkFirewallPolicyDecryptionRuleResource",
    action="string",
    condition=oci.network_firewall.NetworkFirewallPolicyDecryptionRuleConditionArgs(
        destination_addresses=["string"],
        source_addresses=["string"],
    ),
    network_firewall_policy_id="string",
    decryption_profile="string",
    name="string",
    position=oci.network_firewall.NetworkFirewallPolicyDecryptionRulePositionArgs(
        after_rule="string",
        before_rule="string",
    ),
    priority_order="string",
    secret="string")

    const networkFirewallPolicyDecryptionRuleResource = new oci.networkfirewall.NetworkFirewallPolicyDecryptionRule("networkFirewallPolicyDecryptionRuleResource", {
    action: "string",
    condition: {
        destinationAddresses: ["string"],
        sourceAddresses: ["string"],
    },
    networkFirewallPolicyId: "string",
    decryptionProfile: "string",
    name: "string",
    position: {
        afterRule: "string",
        beforeRule: "string",
    },
    priorityOrder: "string",
    secret: "string",
});

    type: oci:NetworkFirewall:NetworkFirewallPolicyDecryptionRule
properties:
    action: string
    condition:
        destinationAddresses:
            - string
        sourceAddresses:
            - string
    decryptionProfile: string
    name: string
    networkFirewallPolicyId: string
    position:
        afterRule: string
        beforeRule: string
    priorityOrder: string
    secret: string

    NetworkFirewallPolicyDecryptionRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The NetworkFirewallPolicyDecryptionRule resource accepts the following input properties:

    Action string
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    Condition NetworkFirewallPolicyDecryptionRuleCondition
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    DecryptionProfile string
    (Updatable) The name of the decryption profile to use.
    Name string
    Name for the decryption rule, must be unique within the policy.
    Position NetworkFirewallPolicyDecryptionRulePosition
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    PriorityOrder string
    Secret string
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    Action string
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    Condition NetworkFirewallPolicyDecryptionRuleConditionArgs
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    DecryptionProfile string
    (Updatable) The name of the decryption profile to use.
    Name string
    Name for the decryption rule, must be unique within the policy.
    Position NetworkFirewallPolicyDecryptionRulePositionArgs
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    PriorityOrder string
    Secret string
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    action String
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition PolicyDecryptionRuleCondition
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    decryptionProfile String
    (Updatable) The name of the decryption profile to use.
    name String
    Name for the decryption rule, must be unique within the policy.
    position PolicyDecryptionRulePosition
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    priorityOrder String
    secret String
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    action string
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition NetworkFirewallPolicyDecryptionRuleCondition
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    networkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    decryptionProfile string
    (Updatable) The name of the decryption profile to use.
    name string
    Name for the decryption rule, must be unique within the policy.
    position NetworkFirewallPolicyDecryptionRulePosition
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    priorityOrder string
    secret string
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    action str
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition networkfirewall.NetworkFirewallPolicyDecryptionRuleConditionArgs
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    network_firewall_policy_id str
    Unique Network Firewall Policy identifier
    decryption_profile str
    (Updatable) The name of the decryption profile to use.
    name str
    Name for the decryption rule, must be unique within the policy.
    position networkfirewall.NetworkFirewallPolicyDecryptionRulePositionArgs
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    priority_order str
    secret str
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    action String
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition Property Map
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    decryptionProfile String
    (Updatable) The name of the decryption profile to use.
    name String
    Name for the decryption rule, must be unique within the policy.
    position Property Map
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    priorityOrder String
    secret String
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the NetworkFirewallPolicyDecryptionRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    ParentResourceId string
    OCID of the Network Firewall Policy this decryption rule belongs to.
    Id string
    The provider-assigned unique ID for this managed resource.
    ParentResourceId string
    OCID of the Network Firewall Policy this decryption rule belongs to.
    id String
    The provider-assigned unique ID for this managed resource.
    parentResourceId String
    OCID of the Network Firewall Policy this decryption rule belongs to.
    id string
    The provider-assigned unique ID for this managed resource.
    parentResourceId string
    OCID of the Network Firewall Policy this decryption rule belongs to.
    id str
    The provider-assigned unique ID for this managed resource.
    parent_resource_id str
    OCID of the Network Firewall Policy this decryption rule belongs to.
    id String
    The provider-assigned unique ID for this managed resource.
    parentResourceId String
    OCID of the Network Firewall Policy this decryption rule belongs to.

    Look up Existing NetworkFirewallPolicyDecryptionRule Resource

    Get an existing NetworkFirewallPolicyDecryptionRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NetworkFirewallPolicyDecryptionRuleState, opts?: CustomResourceOptions): NetworkFirewallPolicyDecryptionRule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        condition: Optional[_networkfirewall.NetworkFirewallPolicyDecryptionRuleConditionArgs] = None,
        decryption_profile: Optional[str] = None,
        name: Optional[str] = None,
        network_firewall_policy_id: Optional[str] = None,
        parent_resource_id: Optional[str] = None,
        position: Optional[_networkfirewall.NetworkFirewallPolicyDecryptionRulePositionArgs] = None,
        priority_order: Optional[str] = None,
        secret: Optional[str] = None) -> NetworkFirewallPolicyDecryptionRule
    func GetNetworkFirewallPolicyDecryptionRule(ctx *Context, name string, id IDInput, state *NetworkFirewallPolicyDecryptionRuleState, opts ...ResourceOption) (*NetworkFirewallPolicyDecryptionRule, error)
    public static NetworkFirewallPolicyDecryptionRule Get(string name, Input<string> id, NetworkFirewallPolicyDecryptionRuleState? state, CustomResourceOptions? opts = null)
    public static NetworkFirewallPolicyDecryptionRule get(String name, Output<String> id, NetworkFirewallPolicyDecryptionRuleState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action string
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    Condition NetworkFirewallPolicyDecryptionRuleCondition
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    DecryptionProfile string
    (Updatable) The name of the decryption profile to use.
    Name string
    Name for the decryption rule, must be unique within the policy.
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    ParentResourceId string
    OCID of the Network Firewall Policy this decryption rule belongs to.
    Position NetworkFirewallPolicyDecryptionRulePosition
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    PriorityOrder string
    Secret string
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    Action string
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    Condition NetworkFirewallPolicyDecryptionRuleConditionArgs
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    DecryptionProfile string
    (Updatable) The name of the decryption profile to use.
    Name string
    Name for the decryption rule, must be unique within the policy.
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    ParentResourceId string
    OCID of the Network Firewall Policy this decryption rule belongs to.
    Position NetworkFirewallPolicyDecryptionRulePositionArgs
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    PriorityOrder string
    Secret string
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    action String
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition PolicyDecryptionRuleCondition
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    decryptionProfile String
    (Updatable) The name of the decryption profile to use.
    name String
    Name for the decryption rule, must be unique within the policy.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    parentResourceId String
    OCID of the Network Firewall Policy this decryption rule belongs to.
    position PolicyDecryptionRulePosition
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    priorityOrder String
    secret String
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    action string
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition NetworkFirewallPolicyDecryptionRuleCondition
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    decryptionProfile string
    (Updatable) The name of the decryption profile to use.
    name string
    Name for the decryption rule, must be unique within the policy.
    networkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    parentResourceId string
    OCID of the Network Firewall Policy this decryption rule belongs to.
    position NetworkFirewallPolicyDecryptionRulePosition
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    priorityOrder string
    secret string
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    action str
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition networkfirewall.NetworkFirewallPolicyDecryptionRuleConditionArgs
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    decryption_profile str
    (Updatable) The name of the decryption profile to use.
    name str
    Name for the decryption rule, must be unique within the policy.
    network_firewall_policy_id str
    Unique Network Firewall Policy identifier
    parent_resource_id str
    OCID of the Network Firewall Policy this decryption rule belongs to.
    position networkfirewall.NetworkFirewallPolicyDecryptionRulePositionArgs
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    priority_order str
    secret str
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.
    action String
    (Updatable) Action:

    • NO_DECRYPT - Matching traffic is not decrypted.
    • DECRYPT - Matching traffic is decrypted with the specified secret according to the specified decryptionProfile.
    condition Property Map
    (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules. The resources mentioned must already be present in the policy before being referenced in the rule.
    decryptionProfile String
    (Updatable) The name of the decryption profile to use.
    name String
    Name for the decryption rule, must be unique within the policy.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    parentResourceId String
    OCID of the Network Firewall Policy this decryption rule belongs to.
    position Property Map
    (Updatable) An object which defines the position of the rule. Only one of after_rule or before_rule should be provided.
    priorityOrder String
    secret String
    (Updatable) The name of a mapped secret. Its type must match that of the specified decryption profile.

    Supporting Types

    NetworkFirewallPolicyDecryptionRuleCondition, NetworkFirewallPolicyDecryptionRuleConditionArgs

    DestinationAddresses List<string>
    (Updatable) An array of address list names to be evaluated against the traffic destination address.
    SourceAddresses List<string>
    (Updatable) An array of address list names to be evaluated against the traffic source address.
    DestinationAddresses []string
    (Updatable) An array of address list names to be evaluated against the traffic destination address.
    SourceAddresses []string
    (Updatable) An array of address list names to be evaluated against the traffic source address.
    destinationAddresses List<String>
    (Updatable) An array of address list names to be evaluated against the traffic destination address.
    sourceAddresses List<String>
    (Updatable) An array of address list names to be evaluated against the traffic source address.
    destinationAddresses string[]
    (Updatable) An array of address list names to be evaluated against the traffic destination address.
    sourceAddresses string[]
    (Updatable) An array of address list names to be evaluated against the traffic source address.
    destination_addresses Sequence[str]
    (Updatable) An array of address list names to be evaluated against the traffic destination address.
    source_addresses Sequence[str]
    (Updatable) An array of address list names to be evaluated against the traffic source address.
    destinationAddresses List<String>
    (Updatable) An array of address list names to be evaluated against the traffic destination address.
    sourceAddresses List<String>
    (Updatable) An array of address list names to be evaluated against the traffic source address.

    NetworkFirewallPolicyDecryptionRulePosition, NetworkFirewallPolicyDecryptionRulePositionArgs

    AfterRule string
    (Updatable) Identifier for rule after which this rule lies.
    BeforeRule string

    (Updatable) Identifier for rule before which this rule lies.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    AfterRule string
    (Updatable) Identifier for rule after which this rule lies.
    BeforeRule string

    (Updatable) Identifier for rule before which this rule lies.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    afterRule String
    (Updatable) Identifier for rule after which this rule lies.
    beforeRule String

    (Updatable) Identifier for rule before which this rule lies.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    afterRule string
    (Updatable) Identifier for rule after which this rule lies.
    beforeRule string

    (Updatable) Identifier for rule before which this rule lies.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    after_rule str
    (Updatable) Identifier for rule after which this rule lies.
    before_rule str

    (Updatable) Identifier for rule before which this rule lies.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    afterRule String
    (Updatable) Identifier for rule after which this rule lies.
    beforeRule String

    (Updatable) Identifier for rule before which this rule lies.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    Import

    NetworkFirewallPolicyDecryptionRules can be imported using the name, e.g.

    $ pulumi import oci:NetworkFirewall/networkFirewallPolicyDecryptionRule:NetworkFirewallPolicyDecryptionRule test_network_firewall_policy_decryption_rule "networkFirewallPolicies/{networkFirewallPolicyId}/decryptionRules/{decryptionRuleName}"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo
    Oracle Cloud Infrastructure v1.34.0 published on Friday, May 3, 2024 by Pulumi
    pulumi/pulumi-oci