1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. Waf
  5. AppFirewall
Oracle Cloud Infrastructure v3.9.0 published on Wednesday, Sep 24, 2025 by Pulumi
pulumi/pulumi-oci

oci.Waf.AppFirewall

Get Started
oci logo
Oracle Cloud Infrastructure v3.9.0 published on Wednesday, Sep 24, 2025 by Pulumi
pulumi/pulumi-oci

    This resource provides the Web App Firewall resource in Oracle Cloud Infrastructure Waf service.

    Creates a new WebAppFirewall.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testWebAppFirewall = new oci.waf.AppFirewall("test_web_app_firewall", {
    backendType: webAppFirewallBackendType,
    compartmentId: compartmentId,
    loadBalancerId: testLoadBalancer.id,
    webAppFirewallPolicyId: testWebAppFirewallPolicy.id,
    definedTags: {
        "foo-namespace.bar-key": "value",
    },
    displayName: webAppFirewallDisplayName,
    freeformTags: {
        "bar-key": "value",
    },
    systemTags: webAppFirewallSystemTags,
});

    import pulumi
import pulumi_oci as oci

test_web_app_firewall = oci.waf.AppFirewall("test_web_app_firewall",
    backend_type=web_app_firewall_backend_type,
    compartment_id=compartment_id,
    load_balancer_id=test_load_balancer["id"],
    web_app_firewall_policy_id=test_web_app_firewall_policy["id"],
    defined_tags={
        "foo-namespace.bar-key": "value",
    },
    display_name=web_app_firewall_display_name,
    freeform_tags={
        "bar-key": "value",
    },
    system_tags=web_app_firewall_system_tags)

    package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v3/go/oci/waf"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := waf.NewAppFirewall(ctx, "test_web_app_firewall", &waf.AppFirewallArgs{
			BackendType:            pulumi.Any(webAppFirewallBackendType),
			CompartmentId:          pulumi.Any(compartmentId),
			LoadBalancerId:         pulumi.Any(testLoadBalancer.Id),
			WebAppFirewallPolicyId: pulumi.Any(testWebAppFirewallPolicy.Id),
			DefinedTags: pulumi.StringMap{
				"foo-namespace.bar-key": pulumi.String("value"),
			},
			DisplayName: pulumi.Any(webAppFirewallDisplayName),
			FreeformTags: pulumi.StringMap{
				"bar-key": pulumi.String("value"),
			},
			SystemTags: pulumi.Any(webAppFirewallSystemTags),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testWebAppFirewall = new Oci.Waf.AppFirewall("test_web_app_firewall", new()
    {
        BackendType = webAppFirewallBackendType,
        CompartmentId = compartmentId,
        LoadBalancerId = testLoadBalancer.Id,
        WebAppFirewallPolicyId = testWebAppFirewallPolicy.Id,
        DefinedTags = 
        {
            { "foo-namespace.bar-key", "value" },
        },
        DisplayName = webAppFirewallDisplayName,
        FreeformTags = 
        {
            { "bar-key", "value" },
        },
        SystemTags = webAppFirewallSystemTags,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Waf.AppFirewall;
import com.pulumi.oci.Waf.AppFirewallArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var testWebAppFirewall = new AppFirewall("testWebAppFirewall", AppFirewallArgs.builder()
            .backendType(webAppFirewallBackendType)
            .compartmentId(compartmentId)
            .loadBalancerId(testLoadBalancer.id())
            .webAppFirewallPolicyId(testWebAppFirewallPolicy.id())
            .definedTags(Map.of("foo-namespace.bar-key", "value"))
            .displayName(webAppFirewallDisplayName)
            .freeformTags(Map.of("bar-key", "value"))
            .systemTags(webAppFirewallSystemTags)
            .build());

    }
}

    resources:
  testWebAppFirewall:
    type: oci:Waf:AppFirewall
    name: test_web_app_firewall
    properties:
      backendType: ${webAppFirewallBackendType}
      compartmentId: ${compartmentId}
      loadBalancerId: ${testLoadBalancer.id}
      webAppFirewallPolicyId: ${testWebAppFirewallPolicy.id}
      definedTags:
        foo-namespace.bar-key: value
      displayName: ${webAppFirewallDisplayName}
      freeformTags:
        bar-key: value
      systemTags: ${webAppFirewallSystemTags}

    Create AppFirewall Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AppFirewall(name: string, args: AppFirewallArgs, opts?: CustomResourceOptions);
    @overload
def AppFirewall(resource_name: str,
                args: AppFirewallArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def AppFirewall(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                backend_type: Optional[str] = None,
                compartment_id: Optional[str] = None,
                load_balancer_id: Optional[str] = None,
                web_app_firewall_policy_id: Optional[str] = None,
                defined_tags: Optional[Mapping[str, str]] = None,
                display_name: Optional[str] = None,
                freeform_tags: Optional[Mapping[str, str]] = None,
                system_tags: Optional[Mapping[str, str]] = None)
    func NewAppFirewall(ctx *Context, name string, args AppFirewallArgs, opts ...ResourceOption) (*AppFirewall, error)
    public AppFirewall(string name, AppFirewallArgs args, CustomResourceOptions? opts = null)
    public AppFirewall(String name, AppFirewallArgs args)
public AppFirewall(String name, AppFirewallArgs args, CustomResourceOptions options)

    type: oci:Waf:AppFirewall
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AppFirewallArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AppFirewallArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AppFirewallArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AppFirewallArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AppFirewallArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var appFirewallResource = new Oci.Waf.AppFirewall("appFirewallResource", new()
{
    BackendType = "string",
    CompartmentId = "string",
    LoadBalancerId = "string",
    WebAppFirewallPolicyId = "string",
    DefinedTags = 
    {
        { "string", "string" },
    },
    DisplayName = "string",
    FreeformTags = 
    {
        { "string", "string" },
    },
    SystemTags = 
    {
        { "string", "string" },
    },
});

    example, err := waf.NewAppFirewall(ctx, "appFirewallResource", &waf.AppFirewallArgs{
	BackendType:            pulumi.String("string"),
	CompartmentId:          pulumi.String("string"),
	LoadBalancerId:         pulumi.String("string"),
	WebAppFirewallPolicyId: pulumi.String("string"),
	DefinedTags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	DisplayName: pulumi.String("string"),
	FreeformTags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	SystemTags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

    var appFirewallResource = new AppFirewall("appFirewallResource", AppFirewallArgs.builder()
    .backendType("string")
    .compartmentId("string")
    .loadBalancerId("string")
    .webAppFirewallPolicyId("string")
    .definedTags(Map.of("string", "string"))
    .displayName("string")
    .freeformTags(Map.of("string", "string"))
    .systemTags(Map.of("string", "string"))
    .build());

    app_firewall_resource = oci.waf.AppFirewall("appFirewallResource",
    backend_type="string",
    compartment_id="string",
    load_balancer_id="string",
    web_app_firewall_policy_id="string",
    defined_tags={
        "string": "string",
    },
    display_name="string",
    freeform_tags={
        "string": "string",
    },
    system_tags={
        "string": "string",
    })

    const appFirewallResource = new oci.waf.AppFirewall("appFirewallResource", {
    backendType: "string",
    compartmentId: "string",
    loadBalancerId: "string",
    webAppFirewallPolicyId: "string",
    definedTags: {
        string: "string",
    },
    displayName: "string",
    freeformTags: {
        string: "string",
    },
    systemTags: {
        string: "string",
    },
});

    type: oci:Waf:AppFirewall
properties:
    backendType: string
    compartmentId: string
    definedTags:
        string: string
    displayName: string
    freeformTags:
        string: string
    loadBalancerId: string
    systemTags:
        string: string
    webAppFirewallPolicyId: string

    AppFirewall Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AppFirewall resource accepts the following input properties:

    BackendType string
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    CompartmentId string
    (Updatable) The OCID of the compartment.
    LoadBalancerId string
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    WebAppFirewallPolicyId string

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    DefinedTags Dictionary<string, string>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    DisplayName string
    (Updatable) WebAppFirewall display name, can be renamed.
    FreeformTags Dictionary<string, string>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    SystemTags Dictionary<string, string>
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    BackendType string
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    CompartmentId string
    (Updatable) The OCID of the compartment.
    LoadBalancerId string
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    WebAppFirewallPolicyId string

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    DefinedTags map[string]string
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    DisplayName string
    (Updatable) WebAppFirewall display name, can be renamed.
    FreeformTags map[string]string
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    SystemTags map[string]string
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    backendType String
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    compartmentId String
    (Updatable) The OCID of the compartment.
    loadBalancerId String
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    webAppFirewallPolicyId String

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    definedTags Map<String,String>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    displayName String
    (Updatable) WebAppFirewall display name, can be renamed.
    freeformTags Map<String,String>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    systemTags Map<String,String>
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    backendType string
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    compartmentId string
    (Updatable) The OCID of the compartment.
    loadBalancerId string
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    webAppFirewallPolicyId string

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    definedTags {[key: string]: string}
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    displayName string
    (Updatable) WebAppFirewall display name, can be renamed.
    freeformTags {[key: string]: string}
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    systemTags {[key: string]: string}
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    backend_type str
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    compartment_id str
    (Updatable) The OCID of the compartment.
    load_balancer_id str
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    web_app_firewall_policy_id str

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    defined_tags Mapping[str, str]
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    display_name str
    (Updatable) WebAppFirewall display name, can be renamed.
    freeform_tags Mapping[str, str]
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    system_tags Mapping[str, str]
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    backendType String
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    compartmentId String
    (Updatable) The OCID of the compartment.
    loadBalancerId String
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    webAppFirewallPolicyId String

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    definedTags Map<String>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    displayName String
    (Updatable) WebAppFirewall display name, can be renamed.
    freeformTags Map<String>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    systemTags Map<String>
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AppFirewall resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    LifecycleDetails string
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    State string
    The current state of the WebAppFirewall.
    TimeCreated string
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    TimeUpdated string
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    Id string
    The provider-assigned unique ID for this managed resource.
    LifecycleDetails string
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    State string
    The current state of the WebAppFirewall.
    TimeCreated string
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    TimeUpdated string
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    id String
    The provider-assigned unique ID for this managed resource.
    lifecycleDetails String
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    state String
    The current state of the WebAppFirewall.
    timeCreated String
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    timeUpdated String
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    id string
    The provider-assigned unique ID for this managed resource.
    lifecycleDetails string
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    state string
    The current state of the WebAppFirewall.
    timeCreated string
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    timeUpdated string
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    id str
    The provider-assigned unique ID for this managed resource.
    lifecycle_details str
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    state str
    The current state of the WebAppFirewall.
    time_created str
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    time_updated str
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    id String
    The provider-assigned unique ID for this managed resource.
    lifecycleDetails String
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    state String
    The current state of the WebAppFirewall.
    timeCreated String
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    timeUpdated String
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.

    Look up Existing AppFirewall Resource

    Get an existing AppFirewall resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AppFirewallState, opts?: CustomResourceOptions): AppFirewall
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        backend_type: Optional[str] = None,
        compartment_id: Optional[str] = None,
        defined_tags: Optional[Mapping[str, str]] = None,
        display_name: Optional[str] = None,
        freeform_tags: Optional[Mapping[str, str]] = None,
        lifecycle_details: Optional[str] = None,
        load_balancer_id: Optional[str] = None,
        state: Optional[str] = None,
        system_tags: Optional[Mapping[str, str]] = None,
        time_created: Optional[str] = None,
        time_updated: Optional[str] = None,
        web_app_firewall_policy_id: Optional[str] = None) -> AppFirewall
    func GetAppFirewall(ctx *Context, name string, id IDInput, state *AppFirewallState, opts ...ResourceOption) (*AppFirewall, error)
    public static AppFirewall Get(string name, Input<string> id, AppFirewallState? state, CustomResourceOptions? opts = null)
    public static AppFirewall get(String name, Output<String> id, AppFirewallState state, CustomResourceOptions options)
    resources:  _:    type: oci:Waf:AppFirewall    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    BackendType string
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    CompartmentId string
    (Updatable) The OCID of the compartment.
    DefinedTags Dictionary<string, string>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    DisplayName string
    (Updatable) WebAppFirewall display name, can be renamed.
    FreeformTags Dictionary<string, string>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    LifecycleDetails string
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    LoadBalancerId string
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    State string
    The current state of the WebAppFirewall.
    SystemTags Dictionary<string, string>
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    TimeCreated string
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    TimeUpdated string
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    WebAppFirewallPolicyId string

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    BackendType string
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    CompartmentId string
    (Updatable) The OCID of the compartment.
    DefinedTags map[string]string
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    DisplayName string
    (Updatable) WebAppFirewall display name, can be renamed.
    FreeformTags map[string]string
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    LifecycleDetails string
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    LoadBalancerId string
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    State string
    The current state of the WebAppFirewall.
    SystemTags map[string]string
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    TimeCreated string
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    TimeUpdated string
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    WebAppFirewallPolicyId string

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    backendType String
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    compartmentId String
    (Updatable) The OCID of the compartment.
    definedTags Map<String,String>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    displayName String
    (Updatable) WebAppFirewall display name, can be renamed.
    freeformTags Map<String,String>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    lifecycleDetails String
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    loadBalancerId String
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    state String
    The current state of the WebAppFirewall.
    systemTags Map<String,String>
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    timeCreated String
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    timeUpdated String
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    webAppFirewallPolicyId String

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    backendType string
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    compartmentId string
    (Updatable) The OCID of the compartment.
    definedTags {[key: string]: string}
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    displayName string
    (Updatable) WebAppFirewall display name, can be renamed.
    freeformTags {[key: string]: string}
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    lifecycleDetails string
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    loadBalancerId string
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    state string
    The current state of the WebAppFirewall.
    systemTags {[key: string]: string}
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    timeCreated string
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    timeUpdated string
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    webAppFirewallPolicyId string

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    backend_type str
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    compartment_id str
    (Updatable) The OCID of the compartment.
    defined_tags Mapping[str, str]
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    display_name str
    (Updatable) WebAppFirewall display name, can be renamed.
    freeform_tags Mapping[str, str]
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    lifecycle_details str
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    load_balancer_id str
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    state str
    The current state of the WebAppFirewall.
    system_tags Mapping[str, str]
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    time_created str
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    time_updated str
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    web_app_firewall_policy_id str

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    backendType String
    Type of the WebAppFirewall, as example LOAD_BALANCER.
    compartmentId String
    (Updatable) The OCID of the compartment.
    definedTags Map<String>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
    displayName String
    (Updatable) WebAppFirewall display name, can be renamed.
    freeformTags Map<String>
    (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
    lifecycleDetails String
    A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
    loadBalancerId String
    LoadBalancer OCID to which the WebAppFirewallPolicy is attached to.
    state String
    The current state of the WebAppFirewall.
    systemTags Map<String>
    (Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    timeCreated String
    The time the WebAppFirewall was created. An RFC3339 formatted datetime string.
    timeUpdated String
    The time the WebAppFirewall was updated. An RFC3339 formatted datetime string.
    webAppFirewallPolicyId String

    (Updatable) The OCID of WebAppFirewallPolicy, which is attached to the resource.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    Import

    WebAppFirewalls can be imported using the id, e.g.

    $ pulumi import oci:Waf/appFirewall:AppFirewall test_web_app_firewall "id"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo
    Oracle Cloud Infrastructure v3.9.0 published on Wednesday, Sep 24, 2025 by Pulumi
    pulumi/pulumi-oci
      Meet Neo: Your AI Platform Teammate