1. Registry
  2. Packages
  3. Strata Cloud Manager Provider
  4. API Docs
  5. getDecryptionRule
Viewing docs for Strata Cloud Manager v1.2.1
published on Friday, Oct 16, 2026 by Pulumi
scm logo Strata Cloud Manager
Viewing docs for Strata Cloud Manager v1.2.1
published on Friday, Oct 16, 2026 by Pulumi

    DecryptionRule data source

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as scm from "@pulumi/scm";
    
    // We use the ID from the resource created above.
    const singleRuleById = scm.getDecryptionRule({
        id: "b3544acb-fc55-4c6f-921d-4128b5a1d135",
    });
    export const singleDecryptionRuleName = singleRuleById;
    
    import pulumi
    import pulumi_scm as scm
    
    # We use the ID from the resource created above.
    single_rule_by_id = scm.get_decryption_rule(id="b3544acb-fc55-4c6f-921d-4128b5a1d135")
    pulumi.export("singleDecryptionRuleName", single_rule_by_id)
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-scm/sdk/go/scm"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		// We use the ID from the resource created above.
    		singleRuleById, err := scm.GetDecryptionRule(ctx, &scm.LookupDecryptionRuleArgs{
    			Id: "b3544acb-fc55-4c6f-921d-4128b5a1d135",
    		}, nil)
    		if err != nil {
    			return err
    		}
    		ctx.Export("singleDecryptionRuleName", singleRuleById)
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Scm = Pulumi.Scm;
    
    return await Deployment.RunAsync(() => 
    {
        // We use the ID from the resource created above.
        var singleRuleById = Scm.GetDecryptionRule.Invoke(new()
        {
            Id = "b3544acb-fc55-4c6f-921d-4128b5a1d135",
        });
    
        return new Dictionary<string, object?>
        {
            ["singleDecryptionRuleName"] = singleRuleById,
        };
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.scm.ScmFunctions;
    import com.pulumi.scm.inputs.GetDecryptionRuleArgs;
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            // We use the ID from the resource created above.
            final var singleRuleById = ScmFunctions.getDecryptionRule(GetDecryptionRuleArgs.builder()
                .id("b3544acb-fc55-4c6f-921d-4128b5a1d135")
                .build());
    
            ctx.export("singleDecryptionRuleName", singleRuleById);
        }
    }
    
    variables:
      # We use the ID from the resource created above.
      singleRuleById:
        fn::invoke:
          function: scm:getDecryptionRule
          arguments:
            id: b3544acb-fc55-4c6f-921d-4128b5a1d135
    outputs:
      singleDecryptionRuleName: ${singleRuleById}
    
    terraform {
      required_providers {
        scm = {
          source = "pulumi/scm"
        }
      }
    }
    
    data "scm_decryption_rule" "singleRuleById" {
      id = "b3544acb-fc55-4c6f-921d-4128b5a1d135"
    }
    
    # We use the ID from the resource created above.
    # Requires the unique UUID of the rule
    output "singleDecryptionRuleName" {
      value = data.scm_decryption_rule.singleRuleById
    }
    

    Using getDecryptionRule

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getDecryptionRule(args: GetDecryptionRuleArgs, opts?: InvokeOptions): Promise<GetDecryptionRuleResult>
    function getDecryptionRuleOutput(args: GetDecryptionRuleOutputArgs, opts?: InvokeOutputOptions): Output<GetDecryptionRuleResult>
    def get_decryption_rule(device: Optional[str] = None,
                            folder: Optional[str] = None,
                            id: Optional[str] = None,
                            name: Optional[str] = None,
                            snippet: Optional[str] = None,
                            opts: Optional[InvokeOptions] = None) -> GetDecryptionRuleResult
    def get_decryption_rule_output(device: pulumi.Input[Optional[str]] = None,
                            folder: pulumi.Input[Optional[str]] = None,
                            id: pulumi.Input[Optional[str]] = None,
                            name: pulumi.Input[Optional[str]] = None,
                            snippet: pulumi.Input[Optional[str]] = None,
                            opts: Optional[InvokeOutputOptions] = None) -> Output[GetDecryptionRuleResult]
    func LookupDecryptionRule(ctx *Context, args *LookupDecryptionRuleArgs, opts ...InvokeOption) (*LookupDecryptionRuleResult, error)
    func LookupDecryptionRuleOutput(ctx *Context, args *LookupDecryptionRuleOutputArgs, opts ...InvokeOption) LookupDecryptionRuleResultOutput

    > Note: This function is named LookupDecryptionRule in the Go SDK.

    public static class GetDecryptionRule 
    {
        public static Task<GetDecryptionRuleResult> InvokeAsync(GetDecryptionRuleArgs args, InvokeOptions? opts = null)
        public static Output<GetDecryptionRuleResult> Invoke(GetDecryptionRuleInvokeArgs args, InvokeOptions? opts = null)
        public static Output<GetDecryptionRuleResult> Invoke(GetDecryptionRuleInvokeArgs args, InvokeOutputOptions opts)
    }
    public static CompletableFuture<GetDecryptionRuleResult> getDecryptionRule(GetDecryptionRuleArgs args, InvokeOptions options)
    public static Output<GetDecryptionRuleResult> getDecryptionRule(GetDecryptionRuleArgs args, InvokeOptions options)
    public static Output<GetDecryptionRuleResult> getDecryptionRule(GetDecryptionRuleArgs args, InvokeOutputOptions options)
    
    fn::invoke:
      function: scm:index/getDecryptionRule:getDecryptionRule
      arguments:
        # arguments dictionary
    data "scm_get_decryption_rule" "name" {
        # arguments
    }

    The following arguments are supported:

    Id string
    The UUID of the decryption rule
    Device string
    The device in which the resource is defined
    Folder string
    The folder in which the resource is defined
    Name string
    The name of the decryption rule
    Snippet string
    The snippet in which the resource is defined
    Id string
    The UUID of the decryption rule
    Device string
    The device in which the resource is defined
    Folder string
    The folder in which the resource is defined
    Name string
    The name of the decryption rule
    Snippet string
    The snippet in which the resource is defined
    id string
    The UUID of the decryption rule
    device string
    The device in which the resource is defined
    folder string
    The folder in which the resource is defined
    name string
    The name of the decryption rule
    snippet string
    The snippet in which the resource is defined
    id String
    The UUID of the decryption rule
    device String
    The device in which the resource is defined
    folder String
    The folder in which the resource is defined
    name String
    The name of the decryption rule
    snippet String
    The snippet in which the resource is defined
    id string
    The UUID of the decryption rule
    device string
    The device in which the resource is defined
    folder string
    The folder in which the resource is defined
    name string
    The name of the decryption rule
    snippet string
    The snippet in which the resource is defined
    id str
    The UUID of the decryption rule
    device str
    The device in which the resource is defined
    folder str
    The folder in which the resource is defined
    name str
    The name of the decryption rule
    snippet str
    The snippet in which the resource is defined
    id String
    The UUID of the decryption rule
    device String
    The device in which the resource is defined
    folder String
    The folder in which the resource is defined
    name String
    The name of the decryption rule
    snippet String
    The snippet in which the resource is defined

    getDecryptionRule Result

    The following output properties are available:

    Action string
    The action to be taken. Possible values are decrypt and no-decrypt.
    Categories List<string>
    The destination URL category
    Description string
    The description of the decryption rule
    DestinationHips List<string>
    The Host Integrity Profile of the destination host
    Destinations List<string>
    The destination addresses
    Device string
    The device in which the resource is defined
    Disabled bool
    Is the rule disabled?
    Folder string
    The folder in which the resource is defined
    Froms List<string>
    The source security zone
    Id string
    The UUID of the decryption rule
    LogFail bool
    Log failed decryption events?
    LogSetting string
    The log settings of the decryption rule
    LogSuccess bool
    Log successful decryption events?
    Name string
    The name of the decryption rule
    NegateDestination bool
    Negate the destination addresses?
    NegateSource bool
    Negate the source addresses?
    Position string
    The position of a security rule. Possible values are pre and post.
    Profile string
    The decryption profile associated with the decryption rule
    RelativePosition string
    Relative positioning rule. String must be one of these: "before", "after", "top", "bottom". If not specified, rule is created at the bottom of the ruleset.
    Services List<string>
    The destination services and/or service groups
    Snippet string
    The snippet in which the resource is defined
    SourceHips List<string>
    Source hip
    SourceUsers List<string>
    List of source users and/or groups. Reserved words include any, pre-login, known-user, and unknown.
    Sources List<string>
    The source addresses
    Tags List<string>
    The tags associated with the decryption rule
    TargetRule string
    UUID of the rule to position this rule relative to. Required when relativePosition is "before" or "after".
    Tfid string
    The Terraform ID.
    Tos List<string>
    The destination security zone
    Type GetDecryptionRuleType
    The type of decryption
    Action string
    The action to be taken. Possible values are decrypt and no-decrypt.
    Categories []string
    The destination URL category
    Description string
    The description of the decryption rule
    DestinationHips []string
    The Host Integrity Profile of the destination host
    Destinations []string
    The destination addresses
    Device string
    The device in which the resource is defined
    Disabled bool
    Is the rule disabled?
    Folder string
    The folder in which the resource is defined
    Froms []string
    The source security zone
    Id string
    The UUID of the decryption rule
    LogFail bool
    Log failed decryption events?
    LogSetting string
    The log settings of the decryption rule
    LogSuccess bool
    Log successful decryption events?
    Name string
    The name of the decryption rule
    NegateDestination bool
    Negate the destination addresses?
    NegateSource bool
    Negate the source addresses?
    Position string
    The position of a security rule. Possible values are pre and post.
    Profile string
    The decryption profile associated with the decryption rule
    RelativePosition string
    Relative positioning rule. String must be one of these: "before", "after", "top", "bottom". If not specified, rule is created at the bottom of the ruleset.
    Services []string
    The destination services and/or service groups
    Snippet string
    The snippet in which the resource is defined
    SourceHips []string
    Source hip
    SourceUsers []string
    List of source users and/or groups. Reserved words include any, pre-login, known-user, and unknown.
    Sources []string
    The source addresses
    Tags []string
    The tags associated with the decryption rule
    TargetRule string
    UUID of the rule to position this rule relative to. Required when relativePosition is "before" or "after".
    Tfid string
    The Terraform ID.
    Tos []string
    The destination security zone
    Type GetDecryptionRuleType
    The type of decryption
    action string
    The action to be taken. Possible values are decrypt and no-decrypt.
    categories list(string)
    The destination URL category
    description string
    The description of the decryption rule
    destination_hips list(string)
    The Host Integrity Profile of the destination host
    destinations list(string)
    The destination addresses
    device string
    The device in which the resource is defined
    disabled bool
    Is the rule disabled?
    folder string
    The folder in which the resource is defined
    froms list(string)
    The source security zone
    id string
    The UUID of the decryption rule
    log_fail bool
    Log failed decryption events?
    log_setting string
    The log settings of the decryption rule
    log_success bool
    Log successful decryption events?
    name string
    The name of the decryption rule
    negate_destination bool
    Negate the destination addresses?
    negate_source bool
    Negate the source addresses?
    position string
    The position of a security rule. Possible values are pre and post.
    profile string
    The decryption profile associated with the decryption rule
    relative_position string
    Relative positioning rule. String must be one of these: "before", "after", "top", "bottom". If not specified, rule is created at the bottom of the ruleset.
    services list(string)
    The destination services and/or service groups
    snippet string
    The snippet in which the resource is defined
    source_hips list(string)
    Source hip
    source_users list(string)
    List of source users and/or groups. Reserved words include any, pre-login, known-user, and unknown.
    sources list(string)
    The source addresses
    tags list(string)
    The tags associated with the decryption rule
    target_rule string
    UUID of the rule to position this rule relative to. Required when relativePosition is "before" or "after".
    tfid string
    The Terraform ID.
    tos list(string)
    The destination security zone
    type object
    The type of decryption
    action String
    The action to be taken. Possible values are decrypt and no-decrypt.
    categories List<String>
    The destination URL category
    description String
    The description of the decryption rule
    destinationHips List<String>
    The Host Integrity Profile of the destination host
    destinations List<String>
    The destination addresses
    device String
    The device in which the resource is defined
    disabled Boolean
    Is the rule disabled?
    folder String
    The folder in which the resource is defined
    froms List<String>
    The source security zone
    id String
    The UUID of the decryption rule
    logFail Boolean
    Log failed decryption events?
    logSetting String
    The log settings of the decryption rule
    logSuccess Boolean
    Log successful decryption events?
    name String
    The name of the decryption rule
    negateDestination Boolean
    Negate the destination addresses?
    negateSource Boolean
    Negate the source addresses?
    position String
    The position of a security rule. Possible values are pre and post.
    profile String
    The decryption profile associated with the decryption rule
    relativePosition String
    Relative positioning rule. String must be one of these: "before", "after", "top", "bottom". If not specified, rule is created at the bottom of the ruleset.
    services List<String>
    The destination services and/or service groups
    snippet String
    The snippet in which the resource is defined
    sourceHips List<String>
    Source hip
    sourceUsers List<String>
    List of source users and/or groups. Reserved words include any, pre-login, known-user, and unknown.
    sources List<String>
    The source addresses
    tags List<String>
    The tags associated with the decryption rule
    targetRule String
    UUID of the rule to position this rule relative to. Required when relativePosition is "before" or "after".
    tfid String
    The Terraform ID.
    tos List<String>
    The destination security zone
    type GetDecryptionRuleType
    The type of decryption
    action string
    The action to be taken. Possible values are decrypt and no-decrypt.
    categories string[]
    The destination URL category
    description string
    The description of the decryption rule
    destinationHips string[]
    The Host Integrity Profile of the destination host
    destinations string[]
    The destination addresses
    device string
    The device in which the resource is defined
    disabled boolean
    Is the rule disabled?
    folder string
    The folder in which the resource is defined
    froms string[]
    The source security zone
    id string
    The UUID of the decryption rule
    logFail boolean
    Log failed decryption events?
    logSetting string
    The log settings of the decryption rule
    logSuccess boolean
    Log successful decryption events?
    name string
    The name of the decryption rule
    negateDestination boolean
    Negate the destination addresses?
    negateSource boolean
    Negate the source addresses?
    position string
    The position of a security rule. Possible values are pre and post.
    profile string
    The decryption profile associated with the decryption rule
    relativePosition string
    Relative positioning rule. String must be one of these: "before", "after", "top", "bottom". If not specified, rule is created at the bottom of the ruleset.
    services string[]
    The destination services and/or service groups
    snippet string
    The snippet in which the resource is defined
    sourceHips string[]
    Source hip
    sourceUsers string[]
    List of source users and/or groups. Reserved words include any, pre-login, known-user, and unknown.
    sources string[]
    The source addresses
    tags string[]
    The tags associated with the decryption rule
    targetRule string
    UUID of the rule to position this rule relative to. Required when relativePosition is "before" or "after".
    tfid string
    The Terraform ID.
    tos string[]
    The destination security zone
    type GetDecryptionRuleType
    The type of decryption
    action str
    The action to be taken. Possible values are decrypt and no-decrypt.
    categories Sequence[str]
    The destination URL category
    description str
    The description of the decryption rule
    destination_hips Sequence[str]
    The Host Integrity Profile of the destination host
    destinations Sequence[str]
    The destination addresses
    device str
    The device in which the resource is defined
    disabled bool
    Is the rule disabled?
    folder str
    The folder in which the resource is defined
    froms Sequence[str]
    The source security zone
    id str
    The UUID of the decryption rule
    log_fail bool
    Log failed decryption events?
    log_setting str
    The log settings of the decryption rule
    log_success bool
    Log successful decryption events?
    name str
    The name of the decryption rule
    negate_destination bool
    Negate the destination addresses?
    negate_source bool
    Negate the source addresses?
    position str
    The position of a security rule. Possible values are pre and post.
    profile str
    The decryption profile associated with the decryption rule
    relative_position str
    Relative positioning rule. String must be one of these: "before", "after", "top", "bottom". If not specified, rule is created at the bottom of the ruleset.
    services Sequence[str]
    The destination services and/or service groups
    snippet str
    The snippet in which the resource is defined
    source_hips Sequence[str]
    Source hip
    source_users Sequence[str]
    List of source users and/or groups. Reserved words include any, pre-login, known-user, and unknown.
    sources Sequence[str]
    The source addresses
    tags Sequence[str]
    The tags associated with the decryption rule
    target_rule str
    UUID of the rule to position this rule relative to. Required when relativePosition is "before" or "after".
    tfid str
    The Terraform ID.
    tos Sequence[str]
    The destination security zone
    type GetDecryptionRuleType
    The type of decryption
    action String
    The action to be taken. Possible values are decrypt and no-decrypt.
    categories List<String>
    The destination URL category
    description String
    The description of the decryption rule
    destinationHips List<String>
    The Host Integrity Profile of the destination host
    destinations List<String>
    The destination addresses
    device String
    The device in which the resource is defined
    disabled Boolean
    Is the rule disabled?
    folder String
    The folder in which the resource is defined
    froms List<String>
    The source security zone
    id String
    The UUID of the decryption rule
    logFail Boolean
    Log failed decryption events?
    logSetting String
    The log settings of the decryption rule
    logSuccess Boolean
    Log successful decryption events?
    name String
    The name of the decryption rule
    negateDestination Boolean
    Negate the destination addresses?
    negateSource Boolean
    Negate the source addresses?
    position String
    The position of a security rule. Possible values are pre and post.
    profile String
    The decryption profile associated with the decryption rule
    relativePosition String
    Relative positioning rule. String must be one of these: "before", "after", "top", "bottom". If not specified, rule is created at the bottom of the ruleset.
    services List<String>
    The destination services and/or service groups
    snippet String
    The snippet in which the resource is defined
    sourceHips List<String>
    Source hip
    sourceUsers List<String>
    List of source users and/or groups. Reserved words include any, pre-login, known-user, and unknown.
    sources List<String>
    The source addresses
    tags List<String>
    The tags associated with the decryption rule
    targetRule String
    UUID of the rule to position this rule relative to. Required when relativePosition is "before" or "after".
    tfid String
    The Terraform ID.
    tos List<String>
    The destination security zone
    type Property Map
    The type of decryption

    Supporting Types

    GetDecryptionRuleType

    ssl_forward_proxy object
    Ssl forward proxy
    ssl_inbound_inspection object
    add the certificate name for SSL inbound inspection
    sslForwardProxy Property Map
    Ssl forward proxy
    sslInboundInspection Property Map
    add the certificate name for SSL inbound inspection

    GetDecryptionRuleTypeSslInboundInspection

    Certificates List<string>
    List of certificate names for SSL inbound inspection
    Certificates []string
    List of certificate names for SSL inbound inspection
    certificates list(string)
    List of certificate names for SSL inbound inspection
    certificates List<String>
    List of certificate names for SSL inbound inspection
    certificates string[]
    List of certificate names for SSL inbound inspection
    certificates Sequence[str]
    List of certificate names for SSL inbound inspection
    certificates List<String>
    List of certificate names for SSL inbound inspection

    Package Details

    Repository
    scm pulumi/pulumi-scm
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the scm Terraform Provider.
    scm logo Strata Cloud Manager
    Viewing docs for Strata Cloud Manager v1.2.1
    published on Friday, Oct 16, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial