getDecryptionRule

Strata Cloud Manager v0.4.3, Nov 8 25

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as scm from "@pulumi/scm";

// 1. RESOURCE: Create a rule to ensure a predictable target for lookups
const testDecryptionRule = new scm.DecryptionRule("test_decryption_rule", {
    name: "data-source-test-rule",
    description: "Rule created specifically for data source testing.",
    folder: "All",
    position: "pre",
    action: "decrypt",
    froms: ["trust"],
    tos: ["untrust"],
    sources: ["any"],
    destinations: ["any"],
    services: ["service-https"],
    categories: ["high-risk"],
    sourceUsers: ["any"],
    type: {
        sslForwardProxy: {},
    },
});
// We use the ID from the resource created above.
const singleRuleById = scm.getDecryptionRuleOutput({
    id: testDecryptionRule.id,
});
export const singleDecryptionRuleName = singleRuleById;

import pulumi
import pulumi_scm as scm

# 1. RESOURCE: Create a rule to ensure a predictable target for lookups
test_decryption_rule = scm.DecryptionRule("test_decryption_rule",
    name="data-source-test-rule",
    description="Rule created specifically for data source testing.",
    folder="All",
    position="pre",
    action="decrypt",
    froms=["trust"],
    tos=["untrust"],
    sources=["any"],
    destinations=["any"],
    services=["service-https"],
    categories=["high-risk"],
    source_users=["any"],
    type={
        "ssl_forward_proxy": {},
    })
# We use the ID from the resource created above.
single_rule_by_id = scm.get_decryption_rule_output(id=test_decryption_rule.id)
pulumi.export("singleDecryptionRuleName", single_rule_by_id)

package main

import (
	"github.com/pulumi/pulumi-scm/sdk/go/scm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// 1. RESOURCE: Create a rule to ensure a predictable target for lookups
		testDecryptionRule, err := scm.NewDecryptionRule(ctx, "test_decryption_rule", &scm.DecryptionRuleArgs{
			Name:        pulumi.String("data-source-test-rule"),
			Description: pulumi.String("Rule created specifically for data source testing."),
			Folder:      pulumi.String("All"),
			Position:    pulumi.String("pre"),
			Action:      pulumi.String("decrypt"),
			Froms: pulumi.StringArray{
				pulumi.String("trust"),
			},
			Tos: pulumi.StringArray{
				pulumi.String("untrust"),
			},
			Sources: pulumi.StringArray{
				pulumi.String("any"),
			},
			Destinations: pulumi.StringArray{
				pulumi.String("any"),
			},
			Services: pulumi.StringArray{
				pulumi.String("service-https"),
			},
			Categories: pulumi.StringArray{
				pulumi.String("high-risk"),
			},
			SourceUsers: pulumi.StringArray{
				pulumi.String("any"),
			},
			Type: &scm.DecryptionRuleTypeArgs{
				SslForwardProxy: &scm.DecryptionRuleTypeSslForwardProxyArgs{},
			},
		})
		if err != nil {
			return err
		}
		// We use the ID from the resource created above.
		singleRuleById := scm.LookupDecryptionRuleOutput(ctx, scm.GetDecryptionRuleOutputArgs{
			Id: testDecryptionRule.ID(),
		}, nil)
		ctx.Export("singleDecryptionRuleName", singleRuleById)
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scm = Pulumi.Scm;

return await Deployment.RunAsync(() => 
{
    // 1. RESOURCE: Create a rule to ensure a predictable target for lookups
    var testDecryptionRule = new Scm.DecryptionRule("test_decryption_rule", new()
    {
        Name = "data-source-test-rule",
        Description = "Rule created specifically for data source testing.",
        Folder = "All",
        Position = "pre",
        Action = "decrypt",
        Froms = new[]
        {
            "trust",
        },
        Tos = new[]
        {
            "untrust",
        },
        Sources = new[]
        {
            "any",
        },
        Destinations = new[]
        {
            "any",
        },
        Services = new[]
        {
            "service-https",
        },
        Categories = new[]
        {
            "high-risk",
        },
        SourceUsers = new[]
        {
            "any",
        },
        Type = new Scm.Inputs.DecryptionRuleTypeArgs
        {
            SslForwardProxy = null,
        },
    });

    // We use the ID from the resource created above.
    var singleRuleById = Scm.GetDecryptionRule.Invoke(new()
    {
        Id = testDecryptionRule.Id,
    });

    return new Dictionary<string, object?>
    {
        ["singleDecryptionRuleName"] = singleRuleById,
    };
});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scm.DecryptionRule;
import com.pulumi.scm.DecryptionRuleArgs;
import com.pulumi.scm.inputs.DecryptionRuleTypeArgs;
import com.pulumi.scm.inputs.DecryptionRuleTypeSslForwardProxyArgs;
import com.pulumi.scm.ScmFunctions;
import com.pulumi.scm.inputs.GetDecryptionRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // 1. RESOURCE: Create a rule to ensure a predictable target for lookups
        var testDecryptionRule = new DecryptionRule("testDecryptionRule", DecryptionRuleArgs.builder()
            .name("data-source-test-rule")
            .description("Rule created specifically for data source testing.")
            .folder("All")
            .position("pre")
            .action("decrypt")
            .froms("trust")
            .tos("untrust")
            .sources("any")
            .destinations("any")
            .services("service-https")
            .categories("high-risk")
            .sourceUsers("any")
            .type(DecryptionRuleTypeArgs.builder()
                .sslForwardProxy(DecryptionRuleTypeSslForwardProxyArgs.builder()
                    .build())
                .build())
            .build());

        // We use the ID from the resource created above.
        final var singleRuleById = ScmFunctions.getDecryptionRule(GetDecryptionRuleArgs.builder()
            .id(testDecryptionRule.id())
            .build());

        ctx.export("singleDecryptionRuleName", singleRuleById);
    }
}

resources:
  # 1. RESOURCE: Create a rule to ensure a predictable target for lookups
  testDecryptionRule:
    type: scm:DecryptionRule
    name: test_decryption_rule
    properties:
      name: data-source-test-rule
      description: Rule created specifically for data source testing.
      folder: All
      position: pre
      action: decrypt
      froms:
        - trust
      tos:
        - untrust
      sources:
        - any
      destinations:
        - any
      services:
        - service-https
      categories:
        - high-risk
      sourceUsers:
        - any
      type:
        sslForwardProxy: {}
variables:
  # We use the ID from the resource created above.
  singleRuleById:
    fn::invoke:
      function: scm:getDecryptionRule
      arguments:
        id: ${testDecryptionRule.id}
outputs:
  singleDecryptionRuleName: ${singleRuleById}

Using getDecryptionRule

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getDecryptionRule(args: GetDecryptionRuleArgs, opts?: InvokeOptions): Promise<GetDecryptionRuleResult>
function getDecryptionRuleOutput(args: GetDecryptionRuleOutputArgs, opts?: InvokeOptions): Output<GetDecryptionRuleResult>

def get_decryption_rule(id: Optional[str] = None,
                        name: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetDecryptionRuleResult
def get_decryption_rule_output(id: Optional[pulumi.Input[str]] = None,
                        name: Optional[pulumi.Input[str]] = None,
                        opts: Optional[InvokeOptions] = None) -> Output[GetDecryptionRuleResult]

func LookupDecryptionRule(ctx *Context, args *LookupDecryptionRuleArgs, opts ...InvokeOption) (*LookupDecryptionRuleResult, error)
func LookupDecryptionRuleOutput(ctx *Context, args *LookupDecryptionRuleOutputArgs, opts ...InvokeOption) LookupDecryptionRuleResultOutput

> Note: This function is named LookupDecryptionRule in the Go SDK.

public static class GetDecryptionRule 
{
    public static Task<GetDecryptionRuleResult> InvokeAsync(GetDecryptionRuleArgs args, InvokeOptions? opts = null)
    public static Output<GetDecryptionRuleResult> Invoke(GetDecryptionRuleInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetDecryptionRuleResult> getDecryptionRule(GetDecryptionRuleArgs args, InvokeOptions options)
public static Output<GetDecryptionRuleResult> getDecryptionRule(GetDecryptionRuleArgs args, InvokeOptions options)

fn::invoke:
  function: scm:index/getDecryptionRule:getDecryptionRule
  arguments:
    # arguments dictionary

The following arguments are supported:

Id string: The UUID of the decryption rule
Name string: The name of the decryption rule

Id string: The UUID of the decryption rule
Name string: The name of the decryption rule

id String: The UUID of the decryption rule
name String: The name of the decryption rule

id string: The UUID of the decryption rule
name string: The name of the decryption rule

id str: The UUID of the decryption rule
name str: The name of the decryption rule

id String: The UUID of the decryption rule
name String: The name of the decryption rule