Docs
Packages
Oracle Cloud Infrastructure v0.20.0, May 31 23
Oracle Cloud Infrastructure v0.20.0, May 31 23
oci.Waf.AppFirewallPolicy
Explore with Pulumi AI
This resource provides the Web App Firewall Policy resource in Oracle Cloud Infrastructure Waf service.
Creates a new WebAppFirewallPolicy.
Example Usage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;
return await Deployment.RunAsync(() =>
{
var testWebAppFirewallPolicy = new Oci.Waf.AppFirewallPolicy("testWebAppFirewallPolicy", new()
{
CompartmentId = @var.Compartment_id,
Actions = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyActionArgs
{
Name = @var.Web_app_firewall_policy_actions_name,
Type = @var.Web_app_firewall_policy_actions_type,
Body = new Oci.Waf.Inputs.AppFirewallPolicyActionBodyArgs
{
Text = @var.Web_app_firewall_policy_actions_body_text,
Type = @var.Web_app_firewall_policy_actions_body_type,
},
Code = @var.Web_app_firewall_policy_actions_code,
Headers = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyActionHeaderArgs
{
Name = @var.Web_app_firewall_policy_actions_headers_name,
Value = @var.Web_app_firewall_policy_actions_headers_value,
},
},
},
},
DefinedTags =
{
{ "foo-namespace.bar-key", "value" },
},
DisplayName = @var.Web_app_firewall_policy_display_name,
FreeformTags =
{
{ "bar-key", "value" },
},
RequestAccessControl = new Oci.Waf.Inputs.AppFirewallPolicyRequestAccessControlArgs
{
DefaultActionName = @var.Web_app_firewall_policy_request_access_control_default_action_name,
Rules = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyRequestAccessControlRuleArgs
{
ActionName = @var.Web_app_firewall_policy_request_access_control_rules_action_name,
Name = @var.Web_app_firewall_policy_request_access_control_rules_name,
Type = @var.Web_app_firewall_policy_request_access_control_rules_type,
Condition = @var.Web_app_firewall_policy_request_access_control_rules_condition,
ConditionLanguage = @var.Web_app_firewall_policy_request_access_control_rules_condition_language,
},
},
},
RequestProtection = new Oci.Waf.Inputs.AppFirewallPolicyRequestProtectionArgs
{
BodyInspectionSizeLimitExceededActionName = @var.Web_app_firewall_policy_request_protection_body_inspection_size_limit_exceeded_action_name,
BodyInspectionSizeLimitInBytes = @var.Web_app_firewall_policy_request_protection_body_inspection_size_limit_in_bytes,
Rules = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyRequestProtectionRuleArgs
{
ActionName = @var.Web_app_firewall_policy_request_protection_rules_action_name,
Name = @var.Web_app_firewall_policy_request_protection_rules_name,
ProtectionCapabilities = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityArgs
{
Key = @var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_key,
Version = @var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_version,
ActionName = @var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_action_name,
CollaborativeActionThreshold = @var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_action_threshold,
CollaborativeWeights = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityCollaborativeWeightArgs
{
Key = @var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_key,
Weight = @var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_weight,
},
},
Exclusions = new Oci.Waf.Inputs.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityExclusionsArgs
{
Args = @var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_args,
RequestCookies = @var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_request_cookies,
},
},
},
Type = @var.Web_app_firewall_policy_request_protection_rules_type,
Condition = @var.Web_app_firewall_policy_request_protection_rules_condition,
ConditionLanguage = @var.Web_app_firewall_policy_request_protection_rules_condition_language,
IsBodyInspectionEnabled = @var.Web_app_firewall_policy_request_protection_rules_is_body_inspection_enabled,
ProtectionCapabilitySettings = new Oci.Waf.Inputs.AppFirewallPolicyRequestProtectionRuleProtectionCapabilitySettingsArgs
{
AllowedHttpMethods = @var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_allowed_http_methods,
MaxHttpRequestHeaderLength = @var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_header_length,
MaxHttpRequestHeaders = @var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_headers,
MaxNumberOfArguments = @var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_number_of_arguments,
MaxSingleArgumentLength = @var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_single_argument_length,
MaxTotalArgumentLength = @var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_total_argument_length,
},
},
},
},
RequestRateLimiting = new Oci.Waf.Inputs.AppFirewallPolicyRequestRateLimitingArgs
{
Rules = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyRequestRateLimitingRuleArgs
{
ActionName = @var.Web_app_firewall_policy_request_rate_limiting_rules_action_name,
Configurations = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyRequestRateLimitingRuleConfigurationArgs
{
PeriodInSeconds = @var.Web_app_firewall_policy_request_rate_limiting_rules_configurations_period_in_seconds,
RequestsLimit = @var.Web_app_firewall_policy_request_rate_limiting_rules_configurations_requests_limit,
ActionDurationInSeconds = @var.Web_app_firewall_policy_request_rate_limiting_rules_configurations_action_duration_in_seconds,
},
},
Name = @var.Web_app_firewall_policy_request_rate_limiting_rules_name,
Type = @var.Web_app_firewall_policy_request_rate_limiting_rules_type,
Condition = @var.Web_app_firewall_policy_request_rate_limiting_rules_condition,
ConditionLanguage = @var.Web_app_firewall_policy_request_rate_limiting_rules_condition_language,
},
},
},
ResponseAccessControl = new Oci.Waf.Inputs.AppFirewallPolicyResponseAccessControlArgs
{
Rules = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyResponseAccessControlRuleArgs
{
ActionName = @var.Web_app_firewall_policy_response_access_control_rules_action_name,
Name = @var.Web_app_firewall_policy_response_access_control_rules_name,
Type = @var.Web_app_firewall_policy_response_access_control_rules_type,
Condition = @var.Web_app_firewall_policy_response_access_control_rules_condition,
ConditionLanguage = @var.Web_app_firewall_policy_response_access_control_rules_condition_language,
},
},
},
ResponseProtection = new Oci.Waf.Inputs.AppFirewallPolicyResponseProtectionArgs
{
Rules = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyResponseProtectionRuleArgs
{
ActionName = @var.Web_app_firewall_policy_response_protection_rules_action_name,
Name = @var.Web_app_firewall_policy_response_protection_rules_name,
ProtectionCapabilities = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityArgs
{
Key = @var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_key,
Version = @var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_version,
ActionName = @var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_action_name,
CollaborativeActionThreshold = @var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_action_threshold,
CollaborativeWeights = new[]
{
new Oci.Waf.Inputs.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityCollaborativeWeightArgs
{
Key = @var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_key,
Weight = @var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_weight,
},
},
Exclusions = new Oci.Waf.Inputs.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityExclusionsArgs
{
Args = @var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_args,
RequestCookies = @var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_request_cookies,
},
},
},
Type = @var.Web_app_firewall_policy_response_protection_rules_type,
Condition = @var.Web_app_firewall_policy_response_protection_rules_condition,
ConditionLanguage = @var.Web_app_firewall_policy_response_protection_rules_condition_language,
IsBodyInspectionEnabled = @var.Web_app_firewall_policy_response_protection_rules_is_body_inspection_enabled,
ProtectionCapabilitySettings = new Oci.Waf.Inputs.AppFirewallPolicyResponseProtectionRuleProtectionCapabilitySettingsArgs
{
AllowedHttpMethods = @var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_allowed_http_methods,
MaxHttpRequestHeaderLength = @var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_header_length,
MaxHttpRequestHeaders = @var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_headers,
MaxNumberOfArguments = @var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_number_of_arguments,
MaxSingleArgumentLength = @var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_single_argument_length,
MaxTotalArgumentLength = @var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_total_argument_length,
},
},
},
},
SystemTags = @var.Web_app_firewall_policy_system_tags,
});
});
package main
import (
"github.com/pulumi/pulumi-oci/sdk/go/oci/Waf"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := Waf.NewAppFirewallPolicy(ctx, "testWebAppFirewallPolicy", &Waf.AppFirewallPolicyArgs{
CompartmentId: pulumi.Any(_var.Compartment_id),
Actions: waf.AppFirewallPolicyActionArray{
&waf.AppFirewallPolicyActionArgs{
Name: pulumi.Any(_var.Web_app_firewall_policy_actions_name),
Type: pulumi.Any(_var.Web_app_firewall_policy_actions_type),
Body: &waf.AppFirewallPolicyActionBodyArgs{
Text: pulumi.Any(_var.Web_app_firewall_policy_actions_body_text),
Type: pulumi.Any(_var.Web_app_firewall_policy_actions_body_type),
},
Code: pulumi.Any(_var.Web_app_firewall_policy_actions_code),
Headers: waf.AppFirewallPolicyActionHeaderArray{
&waf.AppFirewallPolicyActionHeaderArgs{
Name: pulumi.Any(_var.Web_app_firewall_policy_actions_headers_name),
Value: pulumi.Any(_var.Web_app_firewall_policy_actions_headers_value),
},
},
},
},
DefinedTags: pulumi.AnyMap{
"foo-namespace.bar-key": pulumi.Any("value"),
},
DisplayName: pulumi.Any(_var.Web_app_firewall_policy_display_name),
FreeformTags: pulumi.AnyMap{
"bar-key": pulumi.Any("value"),
},
RequestAccessControl: &waf.AppFirewallPolicyRequestAccessControlArgs{
DefaultActionName: pulumi.Any(_var.Web_app_firewall_policy_request_access_control_default_action_name),
Rules: waf.AppFirewallPolicyRequestAccessControlRuleArray{
&waf.AppFirewallPolicyRequestAccessControlRuleArgs{
ActionName: pulumi.Any(_var.Web_app_firewall_policy_request_access_control_rules_action_name),
Name: pulumi.Any(_var.Web_app_firewall_policy_request_access_control_rules_name),
Type: pulumi.Any(_var.Web_app_firewall_policy_request_access_control_rules_type),
Condition: pulumi.Any(_var.Web_app_firewall_policy_request_access_control_rules_condition),
ConditionLanguage: pulumi.Any(_var.Web_app_firewall_policy_request_access_control_rules_condition_language),
},
},
},
RequestProtection: &waf.AppFirewallPolicyRequestProtectionArgs{
BodyInspectionSizeLimitExceededActionName: pulumi.Any(_var.Web_app_firewall_policy_request_protection_body_inspection_size_limit_exceeded_action_name),
BodyInspectionSizeLimitInBytes: pulumi.Any(_var.Web_app_firewall_policy_request_protection_body_inspection_size_limit_in_bytes),
Rules: waf.AppFirewallPolicyRequestProtectionRuleArray{
&waf.AppFirewallPolicyRequestProtectionRuleArgs{
ActionName: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_action_name),
Name: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_name),
ProtectionCapabilities: waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityArray{
&waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityArgs{
Key: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_key),
Version: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_version),
ActionName: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_action_name),
CollaborativeActionThreshold: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_action_threshold),
CollaborativeWeights: waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityCollaborativeWeightArray{
&waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityCollaborativeWeightArgs{
Key: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_key),
Weight: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_weight),
},
},
Exclusions: &waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityExclusionsArgs{
Args: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_args),
RequestCookies: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_request_cookies),
},
},
},
Type: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_type),
Condition: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_condition),
ConditionLanguage: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_condition_language),
IsBodyInspectionEnabled: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_is_body_inspection_enabled),
ProtectionCapabilitySettings: &waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilitySettingsArgs{
AllowedHttpMethods: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_allowed_http_methods),
MaxHttpRequestHeaderLength: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_header_length),
MaxHttpRequestHeaders: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_headers),
MaxNumberOfArguments: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_number_of_arguments),
MaxSingleArgumentLength: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_single_argument_length),
MaxTotalArgumentLength: pulumi.Any(_var.Web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_total_argument_length),
},
},
},
},
RequestRateLimiting: &waf.AppFirewallPolicyRequestRateLimitingArgs{
Rules: waf.AppFirewallPolicyRequestRateLimitingRuleArray{
&waf.AppFirewallPolicyRequestRateLimitingRuleArgs{
ActionName: pulumi.Any(_var.Web_app_firewall_policy_request_rate_limiting_rules_action_name),
Configurations: waf.AppFirewallPolicyRequestRateLimitingRuleConfigurationArray{
&waf.AppFirewallPolicyRequestRateLimitingRuleConfigurationArgs{
PeriodInSeconds: pulumi.Any(_var.Web_app_firewall_policy_request_rate_limiting_rules_configurations_period_in_seconds),
RequestsLimit: pulumi.Any(_var.Web_app_firewall_policy_request_rate_limiting_rules_configurations_requests_limit),
ActionDurationInSeconds: pulumi.Any(_var.Web_app_firewall_policy_request_rate_limiting_rules_configurations_action_duration_in_seconds),
},
},
Name: pulumi.Any(_var.Web_app_firewall_policy_request_rate_limiting_rules_name),
Type: pulumi.Any(_var.Web_app_firewall_policy_request_rate_limiting_rules_type),
Condition: pulumi.Any(_var.Web_app_firewall_policy_request_rate_limiting_rules_condition),
ConditionLanguage: pulumi.Any(_var.Web_app_firewall_policy_request_rate_limiting_rules_condition_language),
},
},
},
ResponseAccessControl: &waf.AppFirewallPolicyResponseAccessControlArgs{
Rules: waf.AppFirewallPolicyResponseAccessControlRuleArray{
&waf.AppFirewallPolicyResponseAccessControlRuleArgs{
ActionName: pulumi.Any(_var.Web_app_firewall_policy_response_access_control_rules_action_name),
Name: pulumi.Any(_var.Web_app_firewall_policy_response_access_control_rules_name),
Type: pulumi.Any(_var.Web_app_firewall_policy_response_access_control_rules_type),
Condition: pulumi.Any(_var.Web_app_firewall_policy_response_access_control_rules_condition),
ConditionLanguage: pulumi.Any(_var.Web_app_firewall_policy_response_access_control_rules_condition_language),
},
},
},
ResponseProtection: &waf.AppFirewallPolicyResponseProtectionArgs{
Rules: waf.AppFirewallPolicyResponseProtectionRuleArray{
&waf.AppFirewallPolicyResponseProtectionRuleArgs{
ActionName: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_action_name),
Name: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_name),
ProtectionCapabilities: waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityArray{
&waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityArgs{
Key: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_key),
Version: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_version),
ActionName: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_action_name),
CollaborativeActionThreshold: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_action_threshold),
CollaborativeWeights: waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityCollaborativeWeightArray{
&waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityCollaborativeWeightArgs{
Key: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_key),
Weight: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_weight),
},
},
Exclusions: &waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityExclusionsArgs{
Args: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_args),
RequestCookies: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_request_cookies),
},
},
},
Type: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_type),
Condition: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_condition),
ConditionLanguage: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_condition_language),
IsBodyInspectionEnabled: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_is_body_inspection_enabled),
ProtectionCapabilitySettings: &waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilitySettingsArgs{
AllowedHttpMethods: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_allowed_http_methods),
MaxHttpRequestHeaderLength: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_header_length),
MaxHttpRequestHeaders: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_headers),
MaxNumberOfArguments: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_number_of_arguments),
MaxSingleArgumentLength: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_single_argument_length),
MaxTotalArgumentLength: pulumi.Any(_var.Web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_total_argument_length),
},
},
},
},
SystemTags: pulumi.Any(_var.Web_app_firewall_policy_system_tags),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Waf.AppFirewallPolicy;
import com.pulumi.oci.Waf.AppFirewallPolicyArgs;
import com.pulumi.oci.Waf.inputs.AppFirewallPolicyActionArgs;
import com.pulumi.oci.Waf.inputs.AppFirewallPolicyActionBodyArgs;
import com.pulumi.oci.Waf.inputs.AppFirewallPolicyRequestAccessControlArgs;
import com.pulumi.oci.Waf.inputs.AppFirewallPolicyRequestProtectionArgs;
import com.pulumi.oci.Waf.inputs.AppFirewallPolicyRequestRateLimitingArgs;
import com.pulumi.oci.Waf.inputs.AppFirewallPolicyResponseAccessControlArgs;
import com.pulumi.oci.Waf.inputs.AppFirewallPolicyResponseProtectionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var testWebAppFirewallPolicy = new AppFirewallPolicy("testWebAppFirewallPolicy", AppFirewallPolicyArgs.builder()
.compartmentId(var_.compartment_id())
.actions(AppFirewallPolicyActionArgs.builder()
.name(var_.web_app_firewall_policy_actions_name())
.type(var_.web_app_firewall_policy_actions_type())
.body(AppFirewallPolicyActionBodyArgs.builder()
.text(var_.web_app_firewall_policy_actions_body_text())
.type(var_.web_app_firewall_policy_actions_body_type())
.build())
.code(var_.web_app_firewall_policy_actions_code())
.headers(AppFirewallPolicyActionHeaderArgs.builder()
.name(var_.web_app_firewall_policy_actions_headers_name())
.value(var_.web_app_firewall_policy_actions_headers_value())
.build())
.build())
.definedTags(Map.of("foo-namespace.bar-key", "value"))
.displayName(var_.web_app_firewall_policy_display_name())
.freeformTags(Map.of("bar-key", "value"))
.requestAccessControl(AppFirewallPolicyRequestAccessControlArgs.builder()
.defaultActionName(var_.web_app_firewall_policy_request_access_control_default_action_name())
.rules(AppFirewallPolicyRequestAccessControlRuleArgs.builder()
.actionName(var_.web_app_firewall_policy_request_access_control_rules_action_name())
.name(var_.web_app_firewall_policy_request_access_control_rules_name())
.type(var_.web_app_firewall_policy_request_access_control_rules_type())
.condition(var_.web_app_firewall_policy_request_access_control_rules_condition())
.conditionLanguage(var_.web_app_firewall_policy_request_access_control_rules_condition_language())
.build())
.build())
.requestProtection(AppFirewallPolicyRequestProtectionArgs.builder()
.bodyInspectionSizeLimitExceededActionName(var_.web_app_firewall_policy_request_protection_body_inspection_size_limit_exceeded_action_name())
.bodyInspectionSizeLimitInBytes(var_.web_app_firewall_policy_request_protection_body_inspection_size_limit_in_bytes())
.rules(AppFirewallPolicyRequestProtectionRuleArgs.builder()
.actionName(var_.web_app_firewall_policy_request_protection_rules_action_name())
.name(var_.web_app_firewall_policy_request_protection_rules_name())
.protectionCapabilities(AppFirewallPolicyRequestProtectionRuleProtectionCapabilityArgs.builder()
.key(var_.web_app_firewall_policy_request_protection_rules_protection_capabilities_key())
.version(var_.web_app_firewall_policy_request_protection_rules_protection_capabilities_version())
.actionName(var_.web_app_firewall_policy_request_protection_rules_protection_capabilities_action_name())
.collaborativeActionThreshold(var_.web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_action_threshold())
.collaborativeWeights(AppFirewallPolicyRequestProtectionRuleProtectionCapabilityCollaborativeWeightArgs.builder()
.key(var_.web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_key())
.weight(var_.web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_weight())
.build())
.exclusions(AppFirewallPolicyRequestProtectionRuleProtectionCapabilityExclusionsArgs.builder()
.args(var_.web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_args())
.requestCookies(var_.web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_request_cookies())
.build())
.build())
.type(var_.web_app_firewall_policy_request_protection_rules_type())
.condition(var_.web_app_firewall_policy_request_protection_rules_condition())
.conditionLanguage(var_.web_app_firewall_policy_request_protection_rules_condition_language())
.isBodyInspectionEnabled(var_.web_app_firewall_policy_request_protection_rules_is_body_inspection_enabled())
.protectionCapabilitySettings(AppFirewallPolicyRequestProtectionRuleProtectionCapabilitySettingsArgs.builder()
.allowedHttpMethods(var_.web_app_firewall_policy_request_protection_rules_protection_capability_settings_allowed_http_methods())
.maxHttpRequestHeaderLength(var_.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_header_length())
.maxHttpRequestHeaders(var_.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_headers())
.maxNumberOfArguments(var_.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_number_of_arguments())
.maxSingleArgumentLength(var_.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_single_argument_length())
.maxTotalArgumentLength(var_.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_total_argument_length())
.build())
.build())
.build())
.requestRateLimiting(AppFirewallPolicyRequestRateLimitingArgs.builder()
.rules(AppFirewallPolicyRequestRateLimitingRuleArgs.builder()
.actionName(var_.web_app_firewall_policy_request_rate_limiting_rules_action_name())
.configurations(AppFirewallPolicyRequestRateLimitingRuleConfigurationArgs.builder()
.periodInSeconds(var_.web_app_firewall_policy_request_rate_limiting_rules_configurations_period_in_seconds())
.requestsLimit(var_.web_app_firewall_policy_request_rate_limiting_rules_configurations_requests_limit())
.actionDurationInSeconds(var_.web_app_firewall_policy_request_rate_limiting_rules_configurations_action_duration_in_seconds())
.build())
.name(var_.web_app_firewall_policy_request_rate_limiting_rules_name())
.type(var_.web_app_firewall_policy_request_rate_limiting_rules_type())
.condition(var_.web_app_firewall_policy_request_rate_limiting_rules_condition())
.conditionLanguage(var_.web_app_firewall_policy_request_rate_limiting_rules_condition_language())
.build())
.build())
.responseAccessControl(AppFirewallPolicyResponseAccessControlArgs.builder()
.rules(AppFirewallPolicyResponseAccessControlRuleArgs.builder()
.actionName(var_.web_app_firewall_policy_response_access_control_rules_action_name())
.name(var_.web_app_firewall_policy_response_access_control_rules_name())
.type(var_.web_app_firewall_policy_response_access_control_rules_type())
.condition(var_.web_app_firewall_policy_response_access_control_rules_condition())
.conditionLanguage(var_.web_app_firewall_policy_response_access_control_rules_condition_language())
.build())
.build())
.responseProtection(AppFirewallPolicyResponseProtectionArgs.builder()
.rules(AppFirewallPolicyResponseProtectionRuleArgs.builder()
.actionName(var_.web_app_firewall_policy_response_protection_rules_action_name())
.name(var_.web_app_firewall_policy_response_protection_rules_name())
.protectionCapabilities(AppFirewallPolicyResponseProtectionRuleProtectionCapabilityArgs.builder()
.key(var_.web_app_firewall_policy_response_protection_rules_protection_capabilities_key())
.version(var_.web_app_firewall_policy_response_protection_rules_protection_capabilities_version())
.actionName(var_.web_app_firewall_policy_response_protection_rules_protection_capabilities_action_name())
.collaborativeActionThreshold(var_.web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_action_threshold())
.collaborativeWeights(AppFirewallPolicyResponseProtectionRuleProtectionCapabilityCollaborativeWeightArgs.builder()
.key(var_.web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_key())
.weight(var_.web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_weight())
.build())
.exclusions(AppFirewallPolicyResponseProtectionRuleProtectionCapabilityExclusionsArgs.builder()
.args(var_.web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_args())
.requestCookies(var_.web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_request_cookies())
.build())
.build())
.type(var_.web_app_firewall_policy_response_protection_rules_type())
.condition(var_.web_app_firewall_policy_response_protection_rules_condition())
.conditionLanguage(var_.web_app_firewall_policy_response_protection_rules_condition_language())
.isBodyInspectionEnabled(var_.web_app_firewall_policy_response_protection_rules_is_body_inspection_enabled())
.protectionCapabilitySettings(AppFirewallPolicyResponseProtectionRuleProtectionCapabilitySettingsArgs.builder()
.allowedHttpMethods(var_.web_app_firewall_policy_response_protection_rules_protection_capability_settings_allowed_http_methods())
.maxHttpRequestHeaderLength(var_.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_header_length())
.maxHttpRequestHeaders(var_.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_headers())
.maxNumberOfArguments(var_.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_number_of_arguments())
.maxSingleArgumentLength(var_.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_single_argument_length())
.maxTotalArgumentLength(var_.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_total_argument_length())
.build())
.build())
.build())
.systemTags(var_.web_app_firewall_policy_system_tags())
.build());
}
}
import pulumi
import pulumi_oci as oci
test_web_app_firewall_policy = oci.waf.AppFirewallPolicy("testWebAppFirewallPolicy",
compartment_id=var["compartment_id"],
actions=[oci.waf.AppFirewallPolicyActionArgs(
name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
type=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
body=oci.waf.AppFirewallPolicyActionBodyArgs(
text=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
type=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
),
code=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
headers=[oci.waf.AppFirewallPolicyActionHeaderArgs(
name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
value=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
)],
)],
defined_tags={
"foo-namespace.bar-key": "value",
},
display_name=var["web_app_firewall_policy_display_name"],
freeform_tags={
"bar-key": "value",
},
request_access_control=oci.waf.AppFirewallPolicyRequestAccessControlArgs(
default_action_name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
rules=[oci.waf.AppFirewallPolicyRequestAccessControlRuleArgs(
action_name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
type=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition_language=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
)],
),
request_protection=oci.waf.AppFirewallPolicyRequestProtectionArgs(
body_inspection_size_limit_exceeded_action_name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
body_inspection_size_limit_in_bytes=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
rules=[oci.waf.AppFirewallPolicyRequestProtectionRuleArgs(
action_name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
protection_capabilities=[oci.waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityArgs(
key=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
version=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
action_name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
collaborative_action_threshold=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
collaborative_weights=[oci.waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityCollaborativeWeightArgs(
key=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
weight=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
)],
exclusions=oci.waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilityExclusionsArgs(
args=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
request_cookies=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
),
)],
type=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition_language=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
is_body_inspection_enabled=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
protection_capability_settings=oci.waf.AppFirewallPolicyRequestProtectionRuleProtectionCapabilitySettingsArgs(
allowed_http_methods=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_http_request_header_length=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_http_request_headers=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_number_of_arguments=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_single_argument_length=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_total_argument_length=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
),
)],
),
request_rate_limiting=oci.waf.AppFirewallPolicyRequestRateLimitingArgs(
rules=[oci.waf.AppFirewallPolicyRequestRateLimitingRuleArgs(
action_name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
configurations=[oci.waf.AppFirewallPolicyRequestRateLimitingRuleConfigurationArgs(
period_in_seconds=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
requests_limit=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
action_duration_in_seconds=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
)],
name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
type=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition_language=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
)],
),
response_access_control=oci.waf.AppFirewallPolicyResponseAccessControlArgs(
rules=[oci.waf.AppFirewallPolicyResponseAccessControlRuleArgs(
action_name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
type=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition_language=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
)],
),
response_protection=oci.waf.AppFirewallPolicyResponseProtectionArgs(
rules=[oci.waf.AppFirewallPolicyResponseProtectionRuleArgs(
action_name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
protection_capabilities=[oci.waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityArgs(
key=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
version=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
action_name=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
collaborative_action_threshold=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
collaborative_weights=[oci.waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityCollaborativeWeightArgs(
key=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
weight=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
)],
exclusions=oci.waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilityExclusionsArgs(
args=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
request_cookies=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
),
)],
type=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
condition_language=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
is_body_inspection_enabled=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
protection_capability_settings=oci.waf.AppFirewallPolicyResponseProtectionRuleProtectionCapabilitySettingsArgs(
allowed_http_methods=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_http_request_header_length=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_http_request_headers=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_number_of_arguments=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_single_argument_length=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
max_total_argument_length=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
),
)],
),
system_tags=var["web_app_firewall_policy_system_tags"])
import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";
const testWebAppFirewallPolicy = new oci.waf.AppFirewallPolicy("testWebAppFirewallPolicy", {
compartmentId: _var.compartment_id,
actions: [{
name: _var.web_app_firewall_policy_actions_name,
type: _var.web_app_firewall_policy_actions_type,
body: {
text: _var.web_app_firewall_policy_actions_body_text,
type: _var.web_app_firewall_policy_actions_body_type,
},
code: _var.web_app_firewall_policy_actions_code,
headers: [{
name: _var.web_app_firewall_policy_actions_headers_name,
value: _var.web_app_firewall_policy_actions_headers_value,
}],
}],
definedTags: {
"foo-namespace.bar-key": "value",
},
displayName: _var.web_app_firewall_policy_display_name,
freeformTags: {
"bar-key": "value",
},
requestAccessControl: {
defaultActionName: _var.web_app_firewall_policy_request_access_control_default_action_name,
rules: [{
actionName: _var.web_app_firewall_policy_request_access_control_rules_action_name,
name: _var.web_app_firewall_policy_request_access_control_rules_name,
type: _var.web_app_firewall_policy_request_access_control_rules_type,
condition: _var.web_app_firewall_policy_request_access_control_rules_condition,
conditionLanguage: _var.web_app_firewall_policy_request_access_control_rules_condition_language,
}],
},
requestProtection: {
bodyInspectionSizeLimitExceededActionName: _var.web_app_firewall_policy_request_protection_body_inspection_size_limit_exceeded_action_name,
bodyInspectionSizeLimitInBytes: _var.web_app_firewall_policy_request_protection_body_inspection_size_limit_in_bytes,
rules: [{
actionName: _var.web_app_firewall_policy_request_protection_rules_action_name,
name: _var.web_app_firewall_policy_request_protection_rules_name,
protectionCapabilities: [{
key: _var.web_app_firewall_policy_request_protection_rules_protection_capabilities_key,
version: _var.web_app_firewall_policy_request_protection_rules_protection_capabilities_version,
actionName: _var.web_app_firewall_policy_request_protection_rules_protection_capabilities_action_name,
collaborativeActionThreshold: _var.web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_action_threshold,
collaborativeWeights: [{
key: _var.web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_key,
weight: _var.web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_weight,
}],
exclusions: {
args: _var.web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_args,
requestCookies: _var.web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_request_cookies,
},
}],
type: _var.web_app_firewall_policy_request_protection_rules_type,
condition: _var.web_app_firewall_policy_request_protection_rules_condition,
conditionLanguage: _var.web_app_firewall_policy_request_protection_rules_condition_language,
isBodyInspectionEnabled: _var.web_app_firewall_policy_request_protection_rules_is_body_inspection_enabled,
protectionCapabilitySettings: {
allowedHttpMethods: _var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_allowed_http_methods,
maxHttpRequestHeaderLength: _var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_header_length,
maxHttpRequestHeaders: _var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_headers,
maxNumberOfArguments: _var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_number_of_arguments,
maxSingleArgumentLength: _var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_single_argument_length,
maxTotalArgumentLength: _var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_total_argument_length,
},
}],
},
requestRateLimiting: {
rules: [{
actionName: _var.web_app_firewall_policy_request_rate_limiting_rules_action_name,
configurations: [{
periodInSeconds: _var.web_app_firewall_policy_request_rate_limiting_rules_configurations_period_in_seconds,
requestsLimit: _var.web_app_firewall_policy_request_rate_limiting_rules_configurations_requests_limit,
actionDurationInSeconds: _var.web_app_firewall_policy_request_rate_limiting_rules_configurations_action_duration_in_seconds,
}],
name: _var.web_app_firewall_policy_request_rate_limiting_rules_name,
type: _var.web_app_firewall_policy_request_rate_limiting_rules_type,
condition: _var.web_app_firewall_policy_request_rate_limiting_rules_condition,
conditionLanguage: _var.web_app_firewall_policy_request_rate_limiting_rules_condition_language,
}],
},
responseAccessControl: {
rules: [{
actionName: _var.web_app_firewall_policy_response_access_control_rules_action_name,
name: _var.web_app_firewall_policy_response_access_control_rules_name,
type: _var.web_app_firewall_policy_response_access_control_rules_type,
condition: _var.web_app_firewall_policy_response_access_control_rules_condition,
conditionLanguage: _var.web_app_firewall_policy_response_access_control_rules_condition_language,
}],
},
responseProtection: {
rules: [{
actionName: _var.web_app_firewall_policy_response_protection_rules_action_name,
name: _var.web_app_firewall_policy_response_protection_rules_name,
protectionCapabilities: [{
key: _var.web_app_firewall_policy_response_protection_rules_protection_capabilities_key,
version: _var.web_app_firewall_policy_response_protection_rules_protection_capabilities_version,
actionName: _var.web_app_firewall_policy_response_protection_rules_protection_capabilities_action_name,
collaborativeActionThreshold: _var.web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_action_threshold,
collaborativeWeights: [{
key: _var.web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_key,
weight: _var.web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_weight,
}],
exclusions: {
args: _var.web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_args,
requestCookies: _var.web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_request_cookies,
},
}],
type: _var.web_app_firewall_policy_response_protection_rules_type,
condition: _var.web_app_firewall_policy_response_protection_rules_condition,
conditionLanguage: _var.web_app_firewall_policy_response_protection_rules_condition_language,
isBodyInspectionEnabled: _var.web_app_firewall_policy_response_protection_rules_is_body_inspection_enabled,
protectionCapabilitySettings: {
allowedHttpMethods: _var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_allowed_http_methods,
maxHttpRequestHeaderLength: _var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_header_length,
maxHttpRequestHeaders: _var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_headers,
maxNumberOfArguments: _var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_number_of_arguments,
maxSingleArgumentLength: _var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_single_argument_length,
maxTotalArgumentLength: _var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_total_argument_length,
},
}],
},
systemTags: _var.web_app_firewall_policy_system_tags,
});
resources:
testWebAppFirewallPolicy:
type: oci:Waf:AppFirewallPolicy
properties:
#Required
compartmentId: ${var.compartment_id}
#Optional
actions:
- name: ${var.web_app_firewall_policy_actions_name}
type: ${var.web_app_firewall_policy_actions_type}
body:
text: ${var.web_app_firewall_policy_actions_body_text}
type: ${var.web_app_firewall_policy_actions_body_type}
code: ${var.web_app_firewall_policy_actions_code}
headers:
- name: ${var.web_app_firewall_policy_actions_headers_name}
value: ${var.web_app_firewall_policy_actions_headers_value}
definedTags:
foo-namespace.bar-key: value
displayName: ${var.web_app_firewall_policy_display_name}
freeformTags:
bar-key: value
requestAccessControl:
defaultActionName: ${var.web_app_firewall_policy_request_access_control_default_action_name}
rules:
- actionName: ${var.web_app_firewall_policy_request_access_control_rules_action_name}
name: ${var.web_app_firewall_policy_request_access_control_rules_name}
type: ${var.web_app_firewall_policy_request_access_control_rules_type}
condition: ${var.web_app_firewall_policy_request_access_control_rules_condition}
conditionLanguage: ${var.web_app_firewall_policy_request_access_control_rules_condition_language}
requestProtection:
bodyInspectionSizeLimitExceededActionName: ${var.web_app_firewall_policy_request_protection_body_inspection_size_limit_exceeded_action_name}
bodyInspectionSizeLimitInBytes: ${var.web_app_firewall_policy_request_protection_body_inspection_size_limit_in_bytes}
rules:
- actionName: ${var.web_app_firewall_policy_request_protection_rules_action_name}
name: ${var.web_app_firewall_policy_request_protection_rules_name}
protectionCapabilities:
- key: ${var.web_app_firewall_policy_request_protection_rules_protection_capabilities_key}
version: ${var.web_app_firewall_policy_request_protection_rules_protection_capabilities_version}
actionName: ${var.web_app_firewall_policy_request_protection_rules_protection_capabilities_action_name}
collaborativeActionThreshold: ${var.web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_action_threshold}
collaborativeWeights:
- key: ${var.web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_key}
weight: ${var.web_app_firewall_policy_request_protection_rules_protection_capabilities_collaborative_weights_weight}
exclusions:
args: ${var.web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_args}
requestCookies: ${var.web_app_firewall_policy_request_protection_rules_protection_capabilities_exclusions_request_cookies}
type: ${var.web_app_firewall_policy_request_protection_rules_type}
condition: ${var.web_app_firewall_policy_request_protection_rules_condition}
conditionLanguage: ${var.web_app_firewall_policy_request_protection_rules_condition_language}
isBodyInspectionEnabled: ${var.web_app_firewall_policy_request_protection_rules_is_body_inspection_enabled}
protectionCapabilitySettings:
allowedHttpMethods: ${var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_allowed_http_methods}
maxHttpRequestHeaderLength: ${var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_header_length}
maxHttpRequestHeaders: ${var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_http_request_headers}
maxNumberOfArguments: ${var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_number_of_arguments}
maxSingleArgumentLength: ${var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_single_argument_length}
maxTotalArgumentLength: ${var.web_app_firewall_policy_request_protection_rules_protection_capability_settings_max_total_argument_length}
requestRateLimiting:
rules:
- actionName: ${var.web_app_firewall_policy_request_rate_limiting_rules_action_name}
configurations:
- periodInSeconds: ${var.web_app_firewall_policy_request_rate_limiting_rules_configurations_period_in_seconds}
requestsLimit: ${var.web_app_firewall_policy_request_rate_limiting_rules_configurations_requests_limit}
actionDurationInSeconds: ${var.web_app_firewall_policy_request_rate_limiting_rules_configurations_action_duration_in_seconds}
name: ${var.web_app_firewall_policy_request_rate_limiting_rules_name}
type: ${var.web_app_firewall_policy_request_rate_limiting_rules_type}
condition: ${var.web_app_firewall_policy_request_rate_limiting_rules_condition}
conditionLanguage: ${var.web_app_firewall_policy_request_rate_limiting_rules_condition_language}
responseAccessControl:
rules:
- actionName: ${var.web_app_firewall_policy_response_access_control_rules_action_name}
name: ${var.web_app_firewall_policy_response_access_control_rules_name}
type: ${var.web_app_firewall_policy_response_access_control_rules_type}
condition: ${var.web_app_firewall_policy_response_access_control_rules_condition}
conditionLanguage: ${var.web_app_firewall_policy_response_access_control_rules_condition_language}
responseProtection:
rules:
- actionName: ${var.web_app_firewall_policy_response_protection_rules_action_name}
name: ${var.web_app_firewall_policy_response_protection_rules_name}
protectionCapabilities:
- key: ${var.web_app_firewall_policy_response_protection_rules_protection_capabilities_key}
version: ${var.web_app_firewall_policy_response_protection_rules_protection_capabilities_version}
actionName: ${var.web_app_firewall_policy_response_protection_rules_protection_capabilities_action_name}
collaborativeActionThreshold: ${var.web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_action_threshold}
collaborativeWeights:
- key: ${var.web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_key}
weight: ${var.web_app_firewall_policy_response_protection_rules_protection_capabilities_collaborative_weights_weight}
exclusions:
args: ${var.web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_args}
requestCookies: ${var.web_app_firewall_policy_response_protection_rules_protection_capabilities_exclusions_request_cookies}
type: ${var.web_app_firewall_policy_response_protection_rules_type}
condition: ${var.web_app_firewall_policy_response_protection_rules_condition}
conditionLanguage: ${var.web_app_firewall_policy_response_protection_rules_condition_language}
isBodyInspectionEnabled: ${var.web_app_firewall_policy_response_protection_rules_is_body_inspection_enabled}
protectionCapabilitySettings:
allowedHttpMethods: ${var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_allowed_http_methods}
maxHttpRequestHeaderLength: ${var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_header_length}
maxHttpRequestHeaders: ${var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_http_request_headers}
maxNumberOfArguments: ${var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_number_of_arguments}
maxSingleArgumentLength: ${var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_single_argument_length}
maxTotalArgumentLength: ${var.web_app_firewall_policy_response_protection_rules_protection_capability_settings_max_total_argument_length}
systemTags: ${var.web_app_firewall_policy_system_tags}
Create AppFirewallPolicy Resource
new AppFirewallPolicy(name: string, args: AppFirewallPolicyArgs, opts?: CustomResourceOptions);@overload
def AppFirewallPolicy(resource_name: str,
opts: Optional[ResourceOptions] = None,
actions: Optional[Sequence[_waf.AppFirewallPolicyActionArgs]] = None,
compartment_id: Optional[str] = None,
defined_tags: Optional[Mapping[str, Any]] = None,
display_name: Optional[str] = None,
freeform_tags: Optional[Mapping[str, Any]] = None,
request_access_control: Optional[_waf.AppFirewallPolicyRequestAccessControlArgs] = None,
request_protection: Optional[_waf.AppFirewallPolicyRequestProtectionArgs] = None,
request_rate_limiting: Optional[_waf.AppFirewallPolicyRequestRateLimitingArgs] = None,
response_access_control: Optional[_waf.AppFirewallPolicyResponseAccessControlArgs] = None,
response_protection: Optional[_waf.AppFirewallPolicyResponseProtectionArgs] = None,
system_tags: Optional[Mapping[str, Any]] = None)
@overload
def AppFirewallPolicy(resource_name: str,
args: AppFirewallPolicyArgs,
opts: Optional[ResourceOptions] = None)func NewAppFirewallPolicy(ctx *Context, name string, args AppFirewallPolicyArgs, opts ...ResourceOption) (*AppFirewallPolicy, error)public AppFirewallPolicy(string name, AppFirewallPolicyArgs args, CustomResourceOptions? opts = null)
public AppFirewallPolicy(String name, AppFirewallPolicyArgs args)
public AppFirewallPolicy(String name, AppFirewallPolicyArgs args, CustomResourceOptions options)
type: oci:Waf:AppFirewallPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AppFirewallPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AppFirewallPolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AppFirewallPolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AppFirewallPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AppFirewallPolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
AppFirewallPolicy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The AppFirewallPolicy resource accepts the following input properties:
- Compartment
Id string (Updatable) The OCID of the compartment.
- Actions
List<App
Firewall Policy Action Args> (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- Dictionary<string, object>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- Display
Name string (Updatable) WebAppFirewallPolicy display name, can be renamed.
- Dictionary<string, object>
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- Request
Access AppControl Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- Request
Protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- Request
Rate AppLimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- Response
Access AppControl Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- Response
Protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- Dictionary<string, object>
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- Compartment
Id string (Updatable) The OCID of the compartment.
- Actions
[]App
Firewall Policy Action Args (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- map[string]interface{}
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- Display
Name string (Updatable) WebAppFirewallPolicy display name, can be renamed.
- map[string]interface{}
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- Request
Access AppControl Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- Request
Protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- Request
Rate AppLimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- Response
Access AppControl Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- Response
Protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- map[string]interface{}
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- compartment
Id String (Updatable) The OCID of the compartment.
- actions
List<App
Firewall Policy Action Args> (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- Map<String,Object>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- display
Name String (Updatable) WebAppFirewallPolicy display name, can be renamed.
- Map<String,Object>
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- request
Access AppControl Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- request
Protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- request
Rate AppLimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- response
Access AppControl Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- response
Protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- Map<String,Object>
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- compartment
Id string (Updatable) The OCID of the compartment.
- actions
App
Firewall Policy Action Args[] (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- {[key: string]: any}
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- display
Name string (Updatable) WebAppFirewallPolicy display name, can be renamed.
- {[key: string]: any}
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- request
Access AppControl Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- request
Protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- request
Rate AppLimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- response
Access AppControl Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- response
Protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- {[key: string]: any}
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- compartment_
id str (Updatable) The OCID of the compartment.
- actions
App
Firewall Policy Action Args] (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- Mapping[str, Any]
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- display_
name str (Updatable) WebAppFirewallPolicy display name, can be renamed.
- Mapping[str, Any]
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- request_
access_ Appcontrol Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- request_
protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- request_
rate_ Applimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- response_
access_ Appcontrol Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- response_
protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- Mapping[str, Any]
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- compartment
Id String (Updatable) The OCID of the compartment.
- actions List<Property Map>
(Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- Map<Any>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- display
Name String (Updatable) WebAppFirewallPolicy display name, can be renamed.
- Map<Any>
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- request
Access Property MapControl (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- request
Protection Property Map (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- request
Rate Property MapLimiting (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- response
Access Property MapControl (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- response
Protection Property Map (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- Map<Any>
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
Outputs
All input properties are implicitly available as output properties. Additionally, the AppFirewallPolicy resource produces the following output properties:
- Id string
The provider-assigned unique ID for this managed resource.
- Lifecycle
Details string A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- State string
The current state of the WebAppFirewallPolicy.
- Time
Created string The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- Time
Updated string The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- Id string
The provider-assigned unique ID for this managed resource.
- Lifecycle
Details string A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- State string
The current state of the WebAppFirewallPolicy.
- Time
Created string The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- Time
Updated string The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- id String
The provider-assigned unique ID for this managed resource.
- lifecycle
Details String A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- state String
The current state of the WebAppFirewallPolicy.
- time
Created String The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- time
Updated String The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- id string
The provider-assigned unique ID for this managed resource.
- lifecycle
Details string A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- state string
The current state of the WebAppFirewallPolicy.
- time
Created string The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- time
Updated string The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- id str
The provider-assigned unique ID for this managed resource.
- lifecycle_
details str A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- state str
The current state of the WebAppFirewallPolicy.
- time_
created str The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- time_
updated str The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- id String
The provider-assigned unique ID for this managed resource.
- lifecycle
Details String A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- state String
The current state of the WebAppFirewallPolicy.
- time
Created String The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- time
Updated String The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
Look up Existing AppFirewallPolicy Resource
Get an existing AppFirewallPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AppFirewallPolicyState, opts?: CustomResourceOptions): AppFirewallPolicy@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
actions: Optional[Sequence[_waf.AppFirewallPolicyActionArgs]] = None,
compartment_id: Optional[str] = None,
defined_tags: Optional[Mapping[str, Any]] = None,
display_name: Optional[str] = None,
freeform_tags: Optional[Mapping[str, Any]] = None,
lifecycle_details: Optional[str] = None,
request_access_control: Optional[_waf.AppFirewallPolicyRequestAccessControlArgs] = None,
request_protection: Optional[_waf.AppFirewallPolicyRequestProtectionArgs] = None,
request_rate_limiting: Optional[_waf.AppFirewallPolicyRequestRateLimitingArgs] = None,
response_access_control: Optional[_waf.AppFirewallPolicyResponseAccessControlArgs] = None,
response_protection: Optional[_waf.AppFirewallPolicyResponseProtectionArgs] = None,
state: Optional[str] = None,
system_tags: Optional[Mapping[str, Any]] = None,
time_created: Optional[str] = None,
time_updated: Optional[str] = None) -> AppFirewallPolicyfunc GetAppFirewallPolicy(ctx *Context, name string, id IDInput, state *AppFirewallPolicyState, opts ...ResourceOption) (*AppFirewallPolicy, error)public static AppFirewallPolicy Get(string name, Input<string> id, AppFirewallPolicyState? state, CustomResourceOptions? opts = null)public static AppFirewallPolicy get(String name, Output<String> id, AppFirewallPolicyState state, CustomResourceOptions options)Resource lookup is not supported in YAML- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Actions
List<App
Firewall Policy Action Args> (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- Compartment
Id string (Updatable) The OCID of the compartment.
- Dictionary<string, object>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- Display
Name string (Updatable) WebAppFirewallPolicy display name, can be renamed.
- Dictionary<string, object>
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- Lifecycle
Details string A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- Request
Access AppControl Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- Request
Protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- Request
Rate AppLimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- Response
Access AppControl Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- Response
Protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- State string
The current state of the WebAppFirewallPolicy.
- Dictionary<string, object>
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- Time
Created string The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- Time
Updated string The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- Actions
[]App
Firewall Policy Action Args (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- Compartment
Id string (Updatable) The OCID of the compartment.
- map[string]interface{}
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- Display
Name string (Updatable) WebAppFirewallPolicy display name, can be renamed.
- map[string]interface{}
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- Lifecycle
Details string A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- Request
Access AppControl Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- Request
Protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- Request
Rate AppLimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- Response
Access AppControl Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- Response
Protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- State string
The current state of the WebAppFirewallPolicy.
- map[string]interface{}
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- Time
Created string The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- Time
Updated string The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- actions
List<App
Firewall Policy Action Args> (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- compartment
Id String (Updatable) The OCID of the compartment.
- Map<String,Object>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- display
Name String (Updatable) WebAppFirewallPolicy display name, can be renamed.
- Map<String,Object>
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- lifecycle
Details String A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- request
Access AppControl Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- request
Protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- request
Rate AppLimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- response
Access AppControl Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- response
Protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- state String
The current state of the WebAppFirewallPolicy.
- Map<String,Object>
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- time
Created String The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- time
Updated String The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- actions
App
Firewall Policy Action Args[] (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- compartment
Id string (Updatable) The OCID of the compartment.
- {[key: string]: any}
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- display
Name string (Updatable) WebAppFirewallPolicy display name, can be renamed.
- {[key: string]: any}
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- lifecycle
Details string A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- request
Access AppControl Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- request
Protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- request
Rate AppLimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- response
Access AppControl Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- response
Protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- state string
The current state of the WebAppFirewallPolicy.
- {[key: string]: any}
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- time
Created string The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- time
Updated string The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- actions
App
Firewall Policy Action Args] (Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- compartment_
id str (Updatable) The OCID of the compartment.
- Mapping[str, Any]
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- display_
name str (Updatable) WebAppFirewallPolicy display name, can be renamed.
- Mapping[str, Any]
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- lifecycle_
details str A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- request_
access_ Appcontrol Firewall Policy Request Access Control Args (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- request_
protection AppFirewall Policy Request Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- request_
rate_ Applimiting Firewall Policy Request Rate Limiting Args (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- response_
access_ Appcontrol Firewall Policy Response Access Control Args (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- response_
protection AppFirewall Policy Response Protection Args (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- state str
The current state of the WebAppFirewallPolicy.
- Mapping[str, Any]
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- time_
created str The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- time_
updated str The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
- actions List<Property Map>
(Updatable) Predefined actions for use in multiple different rules. Not all actions are supported in every module. Some actions terminate further execution of modules and rules in a module and some do not. Actions names must be unique within this array.
- compartment
Id String (Updatable) The OCID of the compartment.
- Map<Any>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:
{"foo-namespace.bar-key": "value"}- display
Name String (Updatable) WebAppFirewallPolicy display name, can be renamed.
- Map<Any>
(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:
{"bar-key": "value"}- lifecycle
Details String A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in FAILED state.
- request
Access Property MapControl (Updatable) Module that allows inspection of HTTP request properties and to return a defined HTTP response. In this module, rules with the name 'Default Action' are not allowed, since this name is reserved for default action logs.
- request
Protection Property Map (Updatable) Module that allows to enable OCI-managed protection capabilities for incoming HTTP requests.
- request
Rate Property MapLimiting (Updatable) Module that allows inspection of HTTP connection properties and to limit requests frequency for a given key.
- response
Access Property MapControl (Updatable) Module that allows inspection of HTTP response properties and to return a defined HTTP response.
- response
Protection Property Map (Updatable) Module that allows to enable OCI-managed protection capabilities for HTTP responses.
- state String
The current state of the WebAppFirewallPolicy.
- Map<Any>
(Updatable) Usage of system tag keys. These predefined keys are scoped to namespaces. Example:
{"orcl-cloud.free-tier-retained": "true"}** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
- time
Created String The time the WebAppFirewallPolicy was created. An RFC3339 formatted datetime string.
- time
Updated String The time the WebAppFirewallPolicy was updated. An RFC3339 formatted datetime string.
Supporting Types
AppFirewallPolicyAction
- Name string
(Updatable) Rule name. Must be unique within the module.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Body
App
Firewall Policy Action Body (Updatable) Type of returned HTTP response body.
- Code int
(Updatable) Response code.
The following response codes are valid values for this property:
- 2xx
200 OK 201 Created 202 Accepted 206 Partial Content
- 3xx
300 Multiple Choices 301 Moved Permanently 302 Found 303 See Other 307 Temporary Redirect
- 4xx
400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 405 Method Not Allowed 408 Request Timeout 409 Conflict 411 Length Required 412 Precondition Failed 413 Payload Too Large 414 URI Too Long 415 Unsupported Media Type 416 Range Not Satisfiable 422 Unprocessable Entity 494 Request Header Too Large 495 Cert Error 496 No Cert 497 HTTP to HTTPS
- 5xx
500 Internal Server Error 501 Not Implemented 502 Bad Gateway 503 Service Unavailable 504 Gateway Timeout 507 Insufficient Storage
Example:
200- Headers
List<App
Firewall Policy Action Header> (Updatable) Adds headers defined in this array for HTTP response.
Hop-by-hop headers are not allowed to be set:
- Connection
- Keep-Alive
- Proxy-Authenticate
- Proxy-Authorization
- TE
- Trailer
- Transfer-Encoding
- Upgrade
- Name string
(Updatable) Rule name. Must be unique within the module.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Body
App
Firewall Policy Action Body (Updatable) Type of returned HTTP response body.
- Code int
(Updatable) Response code.
The following response codes are valid values for this property:
- 2xx
200 OK 201 Created 202 Accepted 206 Partial Content
- 3xx
300 Multiple Choices 301 Moved Permanently 302 Found 303 See Other 307 Temporary Redirect
- 4xx
400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 405 Method Not Allowed 408 Request Timeout 409 Conflict 411 Length Required 412 Precondition Failed 413 Payload Too Large 414 URI Too Long 415 Unsupported Media Type 416 Range Not Satisfiable 422 Unprocessable Entity 494 Request Header Too Large 495 Cert Error 496 No Cert 497 HTTP to HTTPS
- 5xx
500 Internal Server Error 501 Not Implemented 502 Bad Gateway 503 Service Unavailable 504 Gateway Timeout 507 Insufficient Storage
Example:
200- Headers
[]App
Firewall Policy Action Header (Updatable) Adds headers defined in this array for HTTP response.
Hop-by-hop headers are not allowed to be set:
- Connection
- Keep-Alive
- Proxy-Authenticate
- Proxy-Authorization
- TE
- Trailer
- Transfer-Encoding
- Upgrade
- name String
(Updatable) Rule name. Must be unique within the module.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- body
App
Firewall Policy Action Body (Updatable) Type of returned HTTP response body.
- code Integer
(Updatable) Response code.
The following response codes are valid values for this property:
- 2xx
200 OK 201 Created 202 Accepted 206 Partial Content
- 3xx
300 Multiple Choices 301 Moved Permanently 302 Found 303 See Other 307 Temporary Redirect
- 4xx
400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 405 Method Not Allowed 408 Request Timeout 409 Conflict 411 Length Required 412 Precondition Failed 413 Payload Too Large 414 URI Too Long 415 Unsupported Media Type 416 Range Not Satisfiable 422 Unprocessable Entity 494 Request Header Too Large 495 Cert Error 496 No Cert 497 HTTP to HTTPS
- 5xx
500 Internal Server Error 501 Not Implemented 502 Bad Gateway 503 Service Unavailable 504 Gateway Timeout 507 Insufficient Storage
Example:
200- headers
List<App
Firewall Policy Action Header> (Updatable) Adds headers defined in this array for HTTP response.
Hop-by-hop headers are not allowed to be set:
- Connection
- Keep-Alive
- Proxy-Authenticate
- Proxy-Authorization
- TE
- Trailer
- Transfer-Encoding
- Upgrade
- name string
(Updatable) Rule name. Must be unique within the module.
- type string
(Updatable) Type of WebAppFirewallPolicyRule.
- body
App
Firewall Policy Action Body (Updatable) Type of returned HTTP response body.
- code number
(Updatable) Response code.
The following response codes are valid values for this property:
- 2xx
200 OK 201 Created 202 Accepted 206 Partial Content
- 3xx
300 Multiple Choices 301 Moved Permanently 302 Found 303 See Other 307 Temporary Redirect
- 4xx
400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 405 Method Not Allowed 408 Request Timeout 409 Conflict 411 Length Required 412 Precondition Failed 413 Payload Too Large 414 URI Too Long 415 Unsupported Media Type 416 Range Not Satisfiable 422 Unprocessable Entity 494 Request Header Too Large 495 Cert Error 496 No Cert 497 HTTP to HTTPS
- 5xx
500 Internal Server Error 501 Not Implemented 502 Bad Gateway 503 Service Unavailable 504 Gateway Timeout 507 Insufficient Storage
Example:
200- headers
App
Firewall Policy Action Header[] (Updatable) Adds headers defined in this array for HTTP response.
Hop-by-hop headers are not allowed to be set:
- Connection
- Keep-Alive
- Proxy-Authenticate
- Proxy-Authorization
- TE
- Trailer
- Transfer-Encoding
- Upgrade
- name str
(Updatable) Rule name. Must be unique within the module.
- type str
(Updatable) Type of WebAppFirewallPolicyRule.
- body
App
Firewall Policy Action Body (Updatable) Type of returned HTTP response body.
- code int
(Updatable) Response code.
The following response codes are valid values for this property:
- 2xx
200 OK 201 Created 202 Accepted 206 Partial Content
- 3xx
300 Multiple Choices 301 Moved Permanently 302 Found 303 See Other 307 Temporary Redirect
- 4xx
400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 405 Method Not Allowed 408 Request Timeout 409 Conflict 411 Length Required 412 Precondition Failed 413 Payload Too Large 414 URI Too Long 415 Unsupported Media Type 416 Range Not Satisfiable 422 Unprocessable Entity 494 Request Header Too Large 495 Cert Error 496 No Cert 497 HTTP to HTTPS
- 5xx
500 Internal Server Error 501 Not Implemented 502 Bad Gateway 503 Service Unavailable 504 Gateway Timeout 507 Insufficient Storage
Example:
200- headers
App
Firewall Policy Action Header] (Updatable) Adds headers defined in this array for HTTP response.
Hop-by-hop headers are not allowed to be set:
- Connection
- Keep-Alive
- Proxy-Authenticate
- Proxy-Authorization
- TE
- Trailer
- Transfer-Encoding
- Upgrade
- name String
(Updatable) Rule name. Must be unique within the module.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- body Property Map
(Updatable) Type of returned HTTP response body.
- code Number
(Updatable) Response code.
The following response codes are valid values for this property:
- 2xx
200 OK 201 Created 202 Accepted 206 Partial Content
- 3xx
300 Multiple Choices 301 Moved Permanently 302 Found 303 See Other 307 Temporary Redirect
- 4xx
400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 405 Method Not Allowed 408 Request Timeout 409 Conflict 411 Length Required 412 Precondition Failed 413 Payload Too Large 414 URI Too Long 415 Unsupported Media Type 416 Range Not Satisfiable 422 Unprocessable Entity 494 Request Header Too Large 495 Cert Error 496 No Cert 497 HTTP to HTTPS
- 5xx
500 Internal Server Error 501 Not Implemented 502 Bad Gateway 503 Service Unavailable 504 Gateway Timeout 507 Insufficient Storage
Example:
200- headers List<Property Map>
(Updatable) Adds headers defined in this array for HTTP response.
Hop-by-hop headers are not allowed to be set:
- Connection
- Keep-Alive
- Proxy-Authenticate
- Proxy-Authorization
- TE
- Trailer
- Transfer-Encoding
- Upgrade
AppFirewallPolicyActionBody
AppFirewallPolicyActionHeader
AppFirewallPolicyRequestAccessControl
- Default
Action stringName (Updatable) References an default Action to take if no AccessControlRule was matched. Allowed action types:
- ALLOW continues execution of other modules and their rules.
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- Rules
List<App
Firewall Policy Request Access Control Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- Default
Action stringName (Updatable) References an default Action to take if no AccessControlRule was matched. Allowed action types:
- ALLOW continues execution of other modules and their rules.
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- Rules
[]App
Firewall Policy Request Access Control Rule (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- default
Action StringName (Updatable) References an default Action to take if no AccessControlRule was matched. Allowed action types:
- ALLOW continues execution of other modules and their rules.
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- rules
List<App
Firewall Policy Request Access Control Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- default
Action stringName (Updatable) References an default Action to take if no AccessControlRule was matched. Allowed action types:
- ALLOW continues execution of other modules and their rules.
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- rules
App
Firewall Policy Request Access Control Rule[] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- default_
action_ strname (Updatable) References an default Action to take if no AccessControlRule was matched. Allowed action types:
- ALLOW continues execution of other modules and their rules.
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- rules
App
Firewall Policy Request Access Control Rule] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- default
Action StringName (Updatable) References an default Action to take if no AccessControlRule was matched. Allowed action types:
- ALLOW continues execution of other modules and their rules.
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- rules List<Property Map>
(Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
AppFirewallPolicyRequestAccessControlRule
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Name string
(Updatable) Rule name. Must be unique within the module.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Name string
(Updatable) Rule name. Must be unique within the module.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name String
(Updatable) Rule name. Must be unique within the module.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name string
(Updatable) Rule name. Must be unique within the module.
- type string
(Updatable) Type of WebAppFirewallPolicyRule.
- condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action_
name str (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name str
(Updatable) Rule name. Must be unique within the module.
- type str
(Updatable) Type of WebAppFirewallPolicyRule.
- condition str
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition_
language str (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name String
(Updatable) Rule name. Must be unique within the module.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
AppFirewallPolicyRequestProtection
- Body
Inspection stringSize Limit Exceeded Action Name (Updatable) References action by name from actions defined in WebAppFirewallPolicy. Executed if HTTP message body size exceeds limit set in field
bodyInspectionSizeLimitInBytes.If this field is
nullHTTP message body will inspected up tobodyInspectionSizeLimitInBytesand the rest will not be inspected by Protection Capabilities.Allowed action types:
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- Body
Inspection intSize Limit In Bytes (Updatable) Maximum size of inspected HTTP message body in bytes. Actions to take if this limit is exceeded are defined in
bodyInspectionSizeLimitExceededActionName.Body inspection maximum size allowed is defined with per-tenancy limit: 8192 bytes.
For steps to request a limit increase, see Requesting a Service Limit Increase.
- Rules
List<App
Firewall Policy Request Protection Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- Body
Inspection stringSize Limit Exceeded Action Name (Updatable) References action by name from actions defined in WebAppFirewallPolicy. Executed if HTTP message body size exceeds limit set in field
bodyInspectionSizeLimitInBytes.If this field is
nullHTTP message body will inspected up tobodyInspectionSizeLimitInBytesand the rest will not be inspected by Protection Capabilities.Allowed action types:
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- Body
Inspection intSize Limit In Bytes (Updatable) Maximum size of inspected HTTP message body in bytes. Actions to take if this limit is exceeded are defined in
bodyInspectionSizeLimitExceededActionName.Body inspection maximum size allowed is defined with per-tenancy limit: 8192 bytes.
For steps to request a limit increase, see Requesting a Service Limit Increase.
- Rules
[]App
Firewall Policy Request Protection Rule (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- body
Inspection StringSize Limit Exceeded Action Name (Updatable) References action by name from actions defined in WebAppFirewallPolicy. Executed if HTTP message body size exceeds limit set in field
bodyInspectionSizeLimitInBytes.If this field is
nullHTTP message body will inspected up tobodyInspectionSizeLimitInBytesand the rest will not be inspected by Protection Capabilities.Allowed action types:
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- body
Inspection IntegerSize Limit In Bytes (Updatable) Maximum size of inspected HTTP message body in bytes. Actions to take if this limit is exceeded are defined in
bodyInspectionSizeLimitExceededActionName.Body inspection maximum size allowed is defined with per-tenancy limit: 8192 bytes.
For steps to request a limit increase, see Requesting a Service Limit Increase.
- rules
List<App
Firewall Policy Request Protection Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- body
Inspection stringSize Limit Exceeded Action Name (Updatable) References action by name from actions defined in WebAppFirewallPolicy. Executed if HTTP message body size exceeds limit set in field
bodyInspectionSizeLimitInBytes.If this field is
nullHTTP message body will inspected up tobodyInspectionSizeLimitInBytesand the rest will not be inspected by Protection Capabilities.Allowed action types:
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- body
Inspection numberSize Limit In Bytes (Updatable) Maximum size of inspected HTTP message body in bytes. Actions to take if this limit is exceeded are defined in
bodyInspectionSizeLimitExceededActionName.Body inspection maximum size allowed is defined with per-tenancy limit: 8192 bytes.
For steps to request a limit increase, see Requesting a Service Limit Increase.
- rules
App
Firewall Policy Request Protection Rule[] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- body_
inspection_ strsize_ limit_ exceeded_ action_ name (Updatable) References action by name from actions defined in WebAppFirewallPolicy. Executed if HTTP message body size exceeds limit set in field
bodyInspectionSizeLimitInBytes.If this field is
nullHTTP message body will inspected up tobodyInspectionSizeLimitInBytesand the rest will not be inspected by Protection Capabilities.Allowed action types:
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- body_
inspection_ intsize_ limit_ in_ bytes (Updatable) Maximum size of inspected HTTP message body in bytes. Actions to take if this limit is exceeded are defined in
bodyInspectionSizeLimitExceededActionName.Body inspection maximum size allowed is defined with per-tenancy limit: 8192 bytes.
For steps to request a limit increase, see Requesting a Service Limit Increase.
- rules
App
Firewall Policy Request Protection Rule] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- body
Inspection StringSize Limit Exceeded Action Name (Updatable) References action by name from actions defined in WebAppFirewallPolicy. Executed if HTTP message body size exceeds limit set in field
bodyInspectionSizeLimitInBytes.If this field is
nullHTTP message body will inspected up tobodyInspectionSizeLimitInBytesand the rest will not be inspected by Protection Capabilities.Allowed action types:
- RETURN_HTTP_RESPONSE terminates further execution of modules and rules and returns defined HTTP response.
- body
Inspection NumberSize Limit In Bytes (Updatable) Maximum size of inspected HTTP message body in bytes. Actions to take if this limit is exceeded are defined in
bodyInspectionSizeLimitExceededActionName.Body inspection maximum size allowed is defined with per-tenancy limit: 8192 bytes.
For steps to request a limit increase, see Requesting a Service Limit Increase.
- rules List<Property Map>
(Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
AppFirewallPolicyRequestProtectionRule
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Name string
(Updatable) Rule name. Must be unique within the module.
- Protection
Capabilities List<AppFirewall Policy Request Protection Rule Protection Capability> (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- Is
Body boolInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- Protection
Capability AppSettings Firewall Policy Request Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Name string
(Updatable) Rule name. Must be unique within the module.
- Protection
Capabilities []AppFirewall Policy Request Protection Rule Protection Capability (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- Is
Body boolInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- Protection
Capability AppSettings Firewall Policy Request Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name String
(Updatable) Rule name. Must be unique within the module.
- protection
Capabilities List<AppFirewall Policy Request Protection Rule Protection Capability> (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- is
Body BooleanInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- protection
Capability AppSettings Firewall Policy Request Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name string
(Updatable) Rule name. Must be unique within the module.
- protection
Capabilities AppFirewall Policy Request Protection Rule Protection Capability[] (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- type string
(Updatable) Type of WebAppFirewallPolicyRule.
- condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- is
Body booleanInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- protection
Capability AppSettings Firewall Policy Request Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- action_
name str (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name str
(Updatable) Rule name. Must be unique within the module.
- protection_
capabilities AppFirewall Policy Request Protection Rule Protection Capability] (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- type str
(Updatable) Type of WebAppFirewallPolicyRule.
- condition str
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition_
language str (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- is_
body_ boolinspection_ enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- protection_
capability_ Appsettings Firewall Policy Request Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name String
(Updatable) Rule name. Must be unique within the module.
- protection
Capabilities List<Property Map> (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- is
Body BooleanInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- protection
Capability Property MapSettings (Updatable) Settings for protection capabilities
AppFirewallPolicyRequestProtectionRuleProtectionCapability
- Key string
(Updatable) Unique key of referenced protection capability.
- Version int
(Updatable) Version of referenced protection capability.
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Collaborative
Action intThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- Collaborative
Weights List<AppFirewall Policy Request Protection Rule Protection Capability Collaborative Weight> (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- Exclusions
App
Firewall Policy Request Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- Key string
(Updatable) Unique key of referenced protection capability.
- Version int
(Updatable) Version of referenced protection capability.
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Collaborative
Action intThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- Collaborative
Weights []AppFirewall Policy Request Protection Rule Protection Capability Collaborative Weight (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- Exclusions
App
Firewall Policy Request Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- key String
(Updatable) Unique key of referenced protection capability.
- version Integer
(Updatable) Version of referenced protection capability.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- collaborative
Action IntegerThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- collaborative
Weights List<AppFirewall Policy Request Protection Rule Protection Capability Collaborative Weight> (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- exclusions
App
Firewall Policy Request Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- key string
(Updatable) Unique key of referenced protection capability.
- version number
(Updatable) Version of referenced protection capability.
- action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- collaborative
Action numberThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- collaborative
Weights AppFirewall Policy Request Protection Rule Protection Capability Collaborative Weight[] (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- exclusions
App
Firewall Policy Request Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- key str
(Updatable) Unique key of referenced protection capability.
- version int
(Updatable) Version of referenced protection capability.
- action_
name str (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- collaborative_
action_ intthreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- collaborative_
weights AppFirewall Policy Request Protection Rule Protection Capability Collaborative Weight] (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- exclusions
App
Firewall Policy Request Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- key String
(Updatable) Unique key of referenced protection capability.
- version Number
(Updatable) Version of referenced protection capability.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- collaborative
Action NumberThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- collaborative
Weights List<Property Map> (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- exclusions Property Map
(Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
AppFirewallPolicyRequestProtectionRuleProtectionCapabilityCollaborativeWeight
AppFirewallPolicyRequestProtectionRuleProtectionCapabilityExclusions
- Args List<string>
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- List<string>
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- Args []string
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- []string
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- args List<String>
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- List<String>
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- args string[]
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- string[]
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- args Sequence[str]
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- Sequence[str]
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- args List<String>
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- List<String>
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
AppFirewallPolicyRequestProtectionRuleProtectionCapabilitySettings
- Allowed
Http List<string>Methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- Max
Http intRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- Max
Http intRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- Max
Number intOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- Max
Single intArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- Max
Total intArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- Allowed
Http []stringMethods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- Max
Http intRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- Max
Http intRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- Max
Number intOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- Max
Single intArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- Max
Total intArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- allowed
Http List<String>Methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- max
Http IntegerRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- max
Http IntegerRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- max
Number IntegerOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- max
Single IntegerArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- max
Total IntegerArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- allowed
Http string[]Methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- max
Http numberRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- max
Http numberRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- max
Number numberOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- max
Single numberArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- max
Total numberArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- allowed_
http_ Sequence[str]methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- max_
http_ intrequest_ header_ length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- max_
http_ intrequest_ headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- max_
number_ intof_ arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- max_
single_ intargument_ length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- max_
total_ intargument_ length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- allowed
Http List<String>Methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- max
Http NumberRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- max
Http NumberRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- max
Number NumberOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- max
Single NumberArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- max
Total NumberArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
AppFirewallPolicyRequestRateLimiting
- Rules
List<App
Firewall Policy Request Rate Limiting Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- Rules
[]App
Firewall Policy Request Rate Limiting Rule (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules
List<App
Firewall Policy Request Rate Limiting Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules
App
Firewall Policy Request Rate Limiting Rule[] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules
App
Firewall Policy Request Rate Limiting Rule] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules List<Property Map>
(Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
AppFirewallPolicyRequestRateLimitingRule
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Configurations
List<App
Firewall Policy Request Rate Limiting Rule Configuration> (Updatable) Rate Limiting Configurations. Each configuration counts requests towards its own
requestsLimit.- Name string
(Updatable) Rule name. Must be unique within the module.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Configurations
[]App
Firewall Policy Request Rate Limiting Rule Configuration (Updatable) Rate Limiting Configurations. Each configuration counts requests towards its own
requestsLimit.- Name string
(Updatable) Rule name. Must be unique within the module.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- configurations
List<App
Firewall Policy Request Rate Limiting Rule Configuration> (Updatable) Rate Limiting Configurations. Each configuration counts requests towards its own
requestsLimit.- name String
(Updatable) Rule name. Must be unique within the module.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- configurations
App
Firewall Policy Request Rate Limiting Rule Configuration[] (Updatable) Rate Limiting Configurations. Each configuration counts requests towards its own
requestsLimit.- name string
(Updatable) Rule name. Must be unique within the module.
- type string
(Updatable) Type of WebAppFirewallPolicyRule.
- condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action_
name str (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- configurations
App
Firewall Policy Request Rate Limiting Rule Configuration] (Updatable) Rate Limiting Configurations. Each configuration counts requests towards its own
requestsLimit.- name str
(Updatable) Rule name. Must be unique within the module.
- type str
(Updatable) Type of WebAppFirewallPolicyRule.
- condition str
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition_
language str (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- configurations List<Property Map>
(Updatable) Rate Limiting Configurations. Each configuration counts requests towards its own
requestsLimit.- name String
(Updatable) Rule name. Must be unique within the module.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
AppFirewallPolicyRequestRateLimitingRuleConfiguration
- Period
In intSeconds (Updatable) Evaluation period in seconds.
- Requests
Limit int (Updatable) Requests allowed per evaluation period.
- Action
Duration intIn Seconds (Updatable) Duration of block action application in seconds when
requestsLimitis reached. Optional and can be 0 (no block duration).
- Period
In intSeconds (Updatable) Evaluation period in seconds.
- Requests
Limit int (Updatable) Requests allowed per evaluation period.
- Action
Duration intIn Seconds (Updatable) Duration of block action application in seconds when
requestsLimitis reached. Optional and can be 0 (no block duration).
- period
In IntegerSeconds (Updatable) Evaluation period in seconds.
- requests
Limit Integer (Updatable) Requests allowed per evaluation period.
- action
Duration IntegerIn Seconds (Updatable) Duration of block action application in seconds when
requestsLimitis reached. Optional and can be 0 (no block duration).
- period
In numberSeconds (Updatable) Evaluation period in seconds.
- requests
Limit number (Updatable) Requests allowed per evaluation period.
- action
Duration numberIn Seconds (Updatable) Duration of block action application in seconds when
requestsLimitis reached. Optional and can be 0 (no block duration).
- period_
in_ intseconds (Updatable) Evaluation period in seconds.
- requests_
limit int (Updatable) Requests allowed per evaluation period.
- action_
duration_ intin_ seconds (Updatable) Duration of block action application in seconds when
requestsLimitis reached. Optional and can be 0 (no block duration).
- period
In NumberSeconds (Updatable) Evaluation period in seconds.
- requests
Limit Number (Updatable) Requests allowed per evaluation period.
- action
Duration NumberIn Seconds (Updatable) Duration of block action application in seconds when
requestsLimitis reached. Optional and can be 0 (no block duration).
AppFirewallPolicyResponseAccessControl
- Rules
List<App
Firewall Policy Response Access Control Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- Rules
[]App
Firewall Policy Response Access Control Rule (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules
List<App
Firewall Policy Response Access Control Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules
App
Firewall Policy Response Access Control Rule[] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules
App
Firewall Policy Response Access Control Rule] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules List<Property Map>
(Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
AppFirewallPolicyResponseAccessControlRule
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Name string
(Updatable) Rule name. Must be unique within the module.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Name string
(Updatable) Rule name. Must be unique within the module.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name String
(Updatable) Rule name. Must be unique within the module.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name string
(Updatable) Rule name. Must be unique within the module.
- type string
(Updatable) Type of WebAppFirewallPolicyRule.
- condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action_
name str (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name str
(Updatable) Rule name. Must be unique within the module.
- type str
(Updatable) Type of WebAppFirewallPolicyRule.
- condition str
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition_
language str (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name String
(Updatable) Rule name. Must be unique within the module.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
AppFirewallPolicyResponseProtection
- Rules
List<App
Firewall Policy Response Protection Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- Rules
[]App
Firewall Policy Response Protection Rule (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules
List<App
Firewall Policy Response Protection Rule> (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules
App
Firewall Policy Response Protection Rule[] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules
App
Firewall Policy Response Protection Rule] (Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
- rules List<Property Map>
(Updatable) Ordered list of ProtectionRules. Rules are executed in order of appearance in this array. ProtectionRules in this array can only use protection capabilities of RESPONSE_PROTECTION_CAPABILITY type.
AppFirewallPolicyResponseProtectionRule
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Name string
(Updatable) Rule name. Must be unique within the module.
- Protection
Capabilities List<AppFirewall Policy Response Protection Rule Protection Capability> (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- Is
Body boolInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- Protection
Capability AppSettings Firewall Policy Response Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Name string
(Updatable) Rule name. Must be unique within the module.
- Protection
Capabilities []AppFirewall Policy Response Protection Rule Protection Capability (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- Type string
(Updatable) Type of WebAppFirewallPolicyRule.
- Condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- Condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- Is
Body boolInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- Protection
Capability AppSettings Firewall Policy Response Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name String
(Updatable) Rule name. Must be unique within the module.
- protection
Capabilities List<AppFirewall Policy Response Protection Rule Protection Capability> (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- is
Body BooleanInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- protection
Capability AppSettings Firewall Policy Response Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name string
(Updatable) Rule name. Must be unique within the module.
- protection
Capabilities AppFirewall Policy Response Protection Rule Protection Capability[] (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- type string
(Updatable) Type of WebAppFirewallPolicyRule.
- condition string
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language string (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- is
Body booleanInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- protection
Capability AppSettings Firewall Policy Response Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- action_
name str (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name str
(Updatable) Rule name. Must be unique within the module.
- protection_
capabilities AppFirewall Policy Response Protection Rule Protection Capability] (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- type str
(Updatable) Type of WebAppFirewallPolicyRule.
- condition str
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition_
language str (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- is_
body_ boolinspection_ enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- protection_
capability_ Appsettings Firewall Policy Response Protection Rule Protection Capability Settings (Updatable) Settings for protection capabilities
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- name String
(Updatable) Rule name. Must be unique within the module.
- protection
Capabilities List<Property Map> (Updatable) An ordered list that references OCI-managed protection capabilities. Referenced protection capabilities are not necessarily executed in order of appearance. Their execution order is decided at runtime for improved performance. The array cannot contain entries with the same pair of capability key and version more than once.
- type String
(Updatable) Type of WebAppFirewallPolicyRule.
- condition String
(Updatable) An expression that determines whether or not the rule action should be executed.
- condition
Language String (Updatable) The language used to parse condition from field
condition. Available languages:- JMESPATH an extended JMESPath language syntax.
- is
Body BooleanInspection Enabled (Updatable) Enables/disables body inspection for this protection rule. Only Protection Rules in RequestProtection can have this option enabled. Response body inspection will be available at a later date.
- protection
Capability Property MapSettings (Updatable) Settings for protection capabilities
AppFirewallPolicyResponseProtectionRuleProtectionCapability
- Key string
(Updatable) Unique key of referenced protection capability.
- Version int
(Updatable) Version of referenced protection capability.
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Collaborative
Action intThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- Collaborative
Weights List<AppFirewall Policy Response Protection Rule Protection Capability Collaborative Weight> (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- Exclusions
App
Firewall Policy Response Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- Key string
(Updatable) Unique key of referenced protection capability.
- Version int
(Updatable) Version of referenced protection capability.
- Action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- Collaborative
Action intThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- Collaborative
Weights []AppFirewall Policy Response Protection Rule Protection Capability Collaborative Weight (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- Exclusions
App
Firewall Policy Response Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- key String
(Updatable) Unique key of referenced protection capability.
- version Integer
(Updatable) Version of referenced protection capability.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- collaborative
Action IntegerThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- collaborative
Weights List<AppFirewall Policy Response Protection Rule Protection Capability Collaborative Weight> (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- exclusions
App
Firewall Policy Response Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- key string
(Updatable) Unique key of referenced protection capability.
- version number
(Updatable) Version of referenced protection capability.
- action
Name string (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- collaborative
Action numberThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- collaborative
Weights AppFirewall Policy Response Protection Rule Protection Capability Collaborative Weight[] (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- exclusions
App
Firewall Policy Response Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- key str
(Updatable) Unique key of referenced protection capability.
- version int
(Updatable) Version of referenced protection capability.
- action_
name str (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- collaborative_
action_ intthreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- collaborative_
weights AppFirewall Policy Response Protection Rule Protection Capability Collaborative Weight] (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- exclusions
App
Firewall Policy Response Protection Rule Protection Capability Exclusions (Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
- key String
(Updatable) Unique key of referenced protection capability.
- version Number
(Updatable) Version of referenced protection capability.
- action
Name String (Updatable) Override action to take if capability was triggered, defined in Protection Rule for this capability. Only actions of type CHECK are allowed.
- collaborative
Action NumberThreshold (Updatable) The minimum sum of weights of associated collaborative protection capabilities that have triggered which must be reached in order for this capability to trigger. This field is ignored for non-collaborative capabilities.
- collaborative
Weights List<Property Map> (Updatable) Explicit weight values to use for associated collaborative protection capabilities.
- exclusions Property Map
(Updatable) Identifies specific HTTP message parameters to exclude from inspection by a protection capability.
AppFirewallPolicyResponseProtectionRuleProtectionCapabilityCollaborativeWeight
AppFirewallPolicyResponseProtectionRuleProtectionCapabilityExclusions
- Args List<string>
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- List<string>
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- Args []string
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- []string
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- args List<String>
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- List<String>
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- args string[]
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- string[]
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- args Sequence[str]
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- Sequence[str]
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
- args List<String>
(Updatable) List of URL query parameter values from form-urlencoded XML, JSON, AMP, or POST payloads to exclude from inspecting. Example: If we have query parameter 'argumentName=argumentValue' and args=['argumentName'], both 'argumentName' and 'argumentValue' will not be inspected.
- List<String>
(Updatable) List of HTTP request cookie values (by cookie name) to exclude from inspecting. Example: If we have cookie 'cookieName=cookieValue' and requestCookies=['cookieName'], both 'cookieName' and 'cookieValue' will not be inspected.
AppFirewallPolicyResponseProtectionRuleProtectionCapabilitySettings
- Allowed
Http List<string>Methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- Max
Http intRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- Max
Http intRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- Max
Number intOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- Max
Single intArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- Max
Total intArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- Allowed
Http []stringMethods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- Max
Http intRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- Max
Http intRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- Max
Number intOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- Max
Single intArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- Max
Total intArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- allowed
Http List<String>Methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- max
Http IntegerRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- max
Http IntegerRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- max
Number IntegerOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- max
Single IntegerArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- max
Total IntegerArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- allowed
Http string[]Methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- max
Http numberRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- max
Http numberRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- max
Number numberOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- max
Single numberArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- max
Total numberArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- allowed_
http_ Sequence[str]methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- max_
http_ intrequest_ header_ length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- max_
http_ intrequest_ headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- max_
number_ intof_ arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- max_
single_ intargument_ length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- max_
total_ intargument_ length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
- allowed
Http List<String>Methods (Updatable) List of allowed HTTP methods. Each value as a RFC7230 formated token string. Used in protection capability 911100: Restrict HTTP Request Methods.
- max
Http NumberRequest Header Length (Updatable) Maximum allowed length of headers in an HTTP request. Used in protection capability: 9200024: Limit length of request header size.
- max
Http NumberRequest Headers (Updatable) Maximum number of headers allowed in an HTTP request. Used in protection capability 9200014: Limit Number of Request Headers.
- max
Number NumberOf Arguments (Updatable) Maximum number of arguments allowed. Used in protection capability 920380: Number of Arguments Limits.
- max
Single NumberArgument Length (Updatable) Maximum allowed length of a single argument. Used in protection capability 920370: Limit argument value length.
- max
Total NumberArgument Length (Updatable) Maximum allowed total length of all arguments. Used in protection capability 920390: Limit arguments total length.
Import
WebAppFirewallPolicies can be imported using the id, e.g.
$ pulumi import oci:Waf/appFirewallPolicy:AppFirewallPolicy test_web_app_firewall_policy "id"
Package Details
- Repository
- oci pulumi/pulumi-oci
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
ociTerraform Provider.