1. Packages
  2. Strata Cloud Manager Provider
  3. API Docs
  4. IkeCryptoProfile
Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi
scm logo
Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

    IkeCryptoProfile resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as scm from "@pulumi/scm";
    
    // The resource block defines a new IKE Crypto Profile.
    const scmIkeCryptoProfile2 = new scm.IkeCryptoProfile("scm_ike_crypto_profile_2", {
        name: "scm_ike_crypto_profile_2",
        folder: "Prisma Access",
        hashes: [
            "sha256",
            "sha384",
        ],
        dhGroups: [
            "group14",
            "group5",
        ],
        encryptions: [
            "aes-256-cbc",
            "aes-128-cbc",
        ],
        lifetime: {
            hours: 8,
        },
        authenticationMultiple: 10,
    });
    
    import pulumi
    import pulumi_scm as scm
    
    # The resource block defines a new IKE Crypto Profile.
    scm_ike_crypto_profile2 = scm.IkeCryptoProfile("scm_ike_crypto_profile_2",
        name="scm_ike_crypto_profile_2",
        folder="Prisma Access",
        hashes=[
            "sha256",
            "sha384",
        ],
        dh_groups=[
            "group14",
            "group5",
        ],
        encryptions=[
            "aes-256-cbc",
            "aes-128-cbc",
        ],
        lifetime={
            "hours": 8,
        },
        authentication_multiple=10)
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-scm/sdk/go/scm"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		// The resource block defines a new IKE Crypto Profile.
    		_, err := scm.NewIkeCryptoProfile(ctx, "scm_ike_crypto_profile_2", &scm.IkeCryptoProfileArgs{
    			Name:   pulumi.String("scm_ike_crypto_profile_2"),
    			Folder: pulumi.String("Prisma Access"),
    			Hashes: pulumi.StringArray{
    				pulumi.String("sha256"),
    				pulumi.String("sha384"),
    			},
    			DhGroups: pulumi.StringArray{
    				pulumi.String("group14"),
    				pulumi.String("group5"),
    			},
    			Encryptions: pulumi.StringArray{
    				pulumi.String("aes-256-cbc"),
    				pulumi.String("aes-128-cbc"),
    			},
    			Lifetime: &scm.IkeCryptoProfileLifetimeArgs{
    				Hours: pulumi.Int(8),
    			},
    			AuthenticationMultiple: pulumi.Int(10),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Scm = Pulumi.Scm;
    
    return await Deployment.RunAsync(() => 
    {
        // The resource block defines a new IKE Crypto Profile.
        var scmIkeCryptoProfile2 = new Scm.IkeCryptoProfile("scm_ike_crypto_profile_2", new()
        {
            Name = "scm_ike_crypto_profile_2",
            Folder = "Prisma Access",
            Hashes = new[]
            {
                "sha256",
                "sha384",
            },
            DhGroups = new[]
            {
                "group14",
                "group5",
            },
            Encryptions = new[]
            {
                "aes-256-cbc",
                "aes-128-cbc",
            },
            Lifetime = new Scm.Inputs.IkeCryptoProfileLifetimeArgs
            {
                Hours = 8,
            },
            AuthenticationMultiple = 10,
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.scm.IkeCryptoProfile;
    import com.pulumi.scm.IkeCryptoProfileArgs;
    import com.pulumi.scm.inputs.IkeCryptoProfileLifetimeArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            // The resource block defines a new IKE Crypto Profile.
            var scmIkeCryptoProfile2 = new IkeCryptoProfile("scmIkeCryptoProfile2", IkeCryptoProfileArgs.builder()
                .name("scm_ike_crypto_profile_2")
                .folder("Prisma Access")
                .hashes(            
                    "sha256",
                    "sha384")
                .dhGroups(            
                    "group14",
                    "group5")
                .encryptions(            
                    "aes-256-cbc",
                    "aes-128-cbc")
                .lifetime(IkeCryptoProfileLifetimeArgs.builder()
                    .hours(8)
                    .build())
                .authenticationMultiple(10)
                .build());
    
        }
    }
    
    resources:
      # The resource block defines a new IKE Crypto Profile.
      scmIkeCryptoProfile2:
        type: scm:IkeCryptoProfile
        name: scm_ike_crypto_profile_2
        properties:
          name: scm_ike_crypto_profile_2
          folder: Prisma Access
          hashes:
            - sha256
            - sha384
          dhGroups:
            - group14
            - group5
          encryptions:
            - aes-256-cbc
            - aes-128-cbc
          lifetime:
            hours: 8
          authenticationMultiple: 10
    

    Create IkeCryptoProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IkeCryptoProfile(name: string, args: IkeCryptoProfileArgs, opts?: CustomResourceOptions);
    @overload
    def IkeCryptoProfile(resource_name: str,
                         args: IkeCryptoProfileArgs,
                         opts: Optional[ResourceOptions] = None)
    
    @overload
    def IkeCryptoProfile(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         dh_groups: Optional[Sequence[str]] = None,
                         encryptions: Optional[Sequence[str]] = None,
                         hashes: Optional[Sequence[str]] = None,
                         authentication_multiple: Optional[int] = None,
                         device: Optional[str] = None,
                         folder: Optional[str] = None,
                         lifetime: Optional[IkeCryptoProfileLifetimeArgs] = None,
                         name: Optional[str] = None,
                         snippet: Optional[str] = None)
    func NewIkeCryptoProfile(ctx *Context, name string, args IkeCryptoProfileArgs, opts ...ResourceOption) (*IkeCryptoProfile, error)
    public IkeCryptoProfile(string name, IkeCryptoProfileArgs args, CustomResourceOptions? opts = null)
    public IkeCryptoProfile(String name, IkeCryptoProfileArgs args)
    public IkeCryptoProfile(String name, IkeCryptoProfileArgs args, CustomResourceOptions options)
    
    type: scm:IkeCryptoProfile
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args IkeCryptoProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IkeCryptoProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IkeCryptoProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IkeCryptoProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IkeCryptoProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var ikeCryptoProfileResource = new Scm.IkeCryptoProfile("ikeCryptoProfileResource", new()
    {
        DhGroups = new[]
        {
            "string",
        },
        Encryptions = new[]
        {
            "string",
        },
        Hashes = new[]
        {
            "string",
        },
        AuthenticationMultiple = 0,
        Device = "string",
        Folder = "string",
        Lifetime = new Scm.Inputs.IkeCryptoProfileLifetimeArgs
        {
            Days = 0,
            Hours = 0,
            Minutes = 0,
            Seconds = 0,
        },
        Name = "string",
        Snippet = "string",
    });
    
    example, err := scm.NewIkeCryptoProfile(ctx, "ikeCryptoProfileResource", &scm.IkeCryptoProfileArgs{
    	DhGroups: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Encryptions: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Hashes: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	AuthenticationMultiple: pulumi.Int(0),
    	Device:                 pulumi.String("string"),
    	Folder:                 pulumi.String("string"),
    	Lifetime: &scm.IkeCryptoProfileLifetimeArgs{
    		Days:    pulumi.Int(0),
    		Hours:   pulumi.Int(0),
    		Minutes: pulumi.Int(0),
    		Seconds: pulumi.Int(0),
    	},
    	Name:    pulumi.String("string"),
    	Snippet: pulumi.String("string"),
    })
    
    var ikeCryptoProfileResource = new IkeCryptoProfile("ikeCryptoProfileResource", IkeCryptoProfileArgs.builder()
        .dhGroups("string")
        .encryptions("string")
        .hashes("string")
        .authenticationMultiple(0)
        .device("string")
        .folder("string")
        .lifetime(IkeCryptoProfileLifetimeArgs.builder()
            .days(0)
            .hours(0)
            .minutes(0)
            .seconds(0)
            .build())
        .name("string")
        .snippet("string")
        .build());
    
    ike_crypto_profile_resource = scm.IkeCryptoProfile("ikeCryptoProfileResource",
        dh_groups=["string"],
        encryptions=["string"],
        hashes=["string"],
        authentication_multiple=0,
        device="string",
        folder="string",
        lifetime={
            "days": 0,
            "hours": 0,
            "minutes": 0,
            "seconds": 0,
        },
        name="string",
        snippet="string")
    
    const ikeCryptoProfileResource = new scm.IkeCryptoProfile("ikeCryptoProfileResource", {
        dhGroups: ["string"],
        encryptions: ["string"],
        hashes: ["string"],
        authenticationMultiple: 0,
        device: "string",
        folder: "string",
        lifetime: {
            days: 0,
            hours: 0,
            minutes: 0,
            seconds: 0,
        },
        name: "string",
        snippet: "string",
    });
    
    type: scm:IkeCryptoProfile
    properties:
        authenticationMultiple: 0
        device: string
        dhGroups:
            - string
        encryptions:
            - string
        folder: string
        hashes:
            - string
        lifetime:
            days: 0
            hours: 0
            minutes: 0
            seconds: 0
        name: string
        snippet: string
    

    IkeCryptoProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IkeCryptoProfile resource accepts the following input properties:

    DhGroups List<string>
    Dh group
    Encryptions List<string>
    Encryption algorithm
    Hashes List<string>
    Hash
    AuthenticationMultiple int
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    Device string
    The device in which the resource is defined
    Folder string
    The folder in which the resource is defined
    Lifetime IkeCryptoProfileLifetime
    Ike crypto profile lifetime
    Name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    Snippet string
    The snippet in which the resource is defined
    DhGroups []string
    Dh group
    Encryptions []string
    Encryption algorithm
    Hashes []string
    Hash
    AuthenticationMultiple int
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    Device string
    The device in which the resource is defined
    Folder string
    The folder in which the resource is defined
    Lifetime IkeCryptoProfileLifetimeArgs
    Ike crypto profile lifetime
    Name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    Snippet string
    The snippet in which the resource is defined
    dhGroups List<String>
    Dh group
    encryptions List<String>
    Encryption algorithm
    hashes List<String>
    Hash
    authenticationMultiple Integer
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    device String
    The device in which the resource is defined
    folder String
    The folder in which the resource is defined
    lifetime IkeCryptoProfileLifetime
    Ike crypto profile lifetime
    name String
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet String
    The snippet in which the resource is defined
    dhGroups string[]
    Dh group
    encryptions string[]
    Encryption algorithm
    hashes string[]
    Hash
    authenticationMultiple number
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    device string
    The device in which the resource is defined
    folder string
    The folder in which the resource is defined
    lifetime IkeCryptoProfileLifetime
    Ike crypto profile lifetime
    name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet string
    The snippet in which the resource is defined
    dh_groups Sequence[str]
    Dh group
    encryptions Sequence[str]
    Encryption algorithm
    hashes Sequence[str]
    Hash
    authentication_multiple int
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    device str
    The device in which the resource is defined
    folder str
    The folder in which the resource is defined
    lifetime IkeCryptoProfileLifetimeArgs
    Ike crypto profile lifetime
    name str
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet str
    The snippet in which the resource is defined
    dhGroups List<String>
    Dh group
    encryptions List<String>
    Encryption algorithm
    hashes List<String>
    Hash
    authenticationMultiple Number
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    device String
    The device in which the resource is defined
    folder String
    The folder in which the resource is defined
    lifetime Property Map
    Ike crypto profile lifetime
    name String
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet String
    The snippet in which the resource is defined

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IkeCryptoProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Tfid string
    Id string
    The provider-assigned unique ID for this managed resource.
    Tfid string
    id String
    The provider-assigned unique ID for this managed resource.
    tfid String
    id string
    The provider-assigned unique ID for this managed resource.
    tfid string
    id str
    The provider-assigned unique ID for this managed resource.
    tfid str
    id String
    The provider-assigned unique ID for this managed resource.
    tfid String

    Look up Existing IkeCryptoProfile Resource

    Get an existing IkeCryptoProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IkeCryptoProfileState, opts?: CustomResourceOptions): IkeCryptoProfile
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            authentication_multiple: Optional[int] = None,
            device: Optional[str] = None,
            dh_groups: Optional[Sequence[str]] = None,
            encryptions: Optional[Sequence[str]] = None,
            folder: Optional[str] = None,
            hashes: Optional[Sequence[str]] = None,
            lifetime: Optional[IkeCryptoProfileLifetimeArgs] = None,
            name: Optional[str] = None,
            snippet: Optional[str] = None,
            tfid: Optional[str] = None) -> IkeCryptoProfile
    func GetIkeCryptoProfile(ctx *Context, name string, id IDInput, state *IkeCryptoProfileState, opts ...ResourceOption) (*IkeCryptoProfile, error)
    public static IkeCryptoProfile Get(string name, Input<string> id, IkeCryptoProfileState? state, CustomResourceOptions? opts = null)
    public static IkeCryptoProfile get(String name, Output<String> id, IkeCryptoProfileState state, CustomResourceOptions options)
    resources:  _:    type: scm:IkeCryptoProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AuthenticationMultiple int
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    Device string
    The device in which the resource is defined
    DhGroups List<string>
    Dh group
    Encryptions List<string>
    Encryption algorithm
    Folder string
    The folder in which the resource is defined
    Hashes List<string>
    Hash
    Lifetime IkeCryptoProfileLifetime
    Ike crypto profile lifetime
    Name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    Snippet string
    The snippet in which the resource is defined
    Tfid string
    AuthenticationMultiple int
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    Device string
    The device in which the resource is defined
    DhGroups []string
    Dh group
    Encryptions []string
    Encryption algorithm
    Folder string
    The folder in which the resource is defined
    Hashes []string
    Hash
    Lifetime IkeCryptoProfileLifetimeArgs
    Ike crypto profile lifetime
    Name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    Snippet string
    The snippet in which the resource is defined
    Tfid string
    authenticationMultiple Integer
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    device String
    The device in which the resource is defined
    dhGroups List<String>
    Dh group
    encryptions List<String>
    Encryption algorithm
    folder String
    The folder in which the resource is defined
    hashes List<String>
    Hash
    lifetime IkeCryptoProfileLifetime
    Ike crypto profile lifetime
    name String
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet String
    The snippet in which the resource is defined
    tfid String
    authenticationMultiple number
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    device string
    The device in which the resource is defined
    dhGroups string[]
    Dh group
    encryptions string[]
    Encryption algorithm
    folder string
    The folder in which the resource is defined
    hashes string[]
    Hash
    lifetime IkeCryptoProfileLifetime
    Ike crypto profile lifetime
    name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet string
    The snippet in which the resource is defined
    tfid string
    authentication_multiple int
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    device str
    The device in which the resource is defined
    dh_groups Sequence[str]
    Dh group
    encryptions Sequence[str]
    Encryption algorithm
    folder str
    The folder in which the resource is defined
    hashes Sequence[str]
    Hash
    lifetime IkeCryptoProfileLifetimeArgs
    Ike crypto profile lifetime
    name str
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet str
    The snippet in which the resource is defined
    tfid str
    authenticationMultiple Number
    IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication disabled
    device String
    The device in which the resource is defined
    dhGroups List<String>
    Dh group
    encryptions List<String>
    Encryption algorithm
    folder String
    The folder in which the resource is defined
    hashes List<String>
    Hash
    lifetime Property Map
    Ike crypto profile lifetime
    name String
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet String
    The snippet in which the resource is defined
    tfid String

    Supporting Types

    IkeCryptoProfileLifetime, IkeCryptoProfileLifetimeArgs

    Days int
    specify lifetime in days
    Hours int
    specify lifetime in hours
    Minutes int
    specify lifetime in minutes
    Seconds int
    specify lifetime in seconds
    Days int
    specify lifetime in days
    Hours int
    specify lifetime in hours
    Minutes int
    specify lifetime in minutes
    Seconds int
    specify lifetime in seconds
    days Integer
    specify lifetime in days
    hours Integer
    specify lifetime in hours
    minutes Integer
    specify lifetime in minutes
    seconds Integer
    specify lifetime in seconds
    days number
    specify lifetime in days
    hours number
    specify lifetime in hours
    minutes number
    specify lifetime in minutes
    seconds number
    specify lifetime in seconds
    days int
    specify lifetime in days
    hours int
    specify lifetime in hours
    minutes int
    specify lifetime in minutes
    seconds int
    specify lifetime in seconds
    days Number
    specify lifetime in days
    hours Number
    specify lifetime in hours
    minutes Number
    specify lifetime in minutes
    seconds Number
    specify lifetime in seconds

    Package Details

    Repository
    scm pulumi/pulumi-scm
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the scm Terraform Provider.
    scm logo
    Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi
      Meet Neo: Your AI Platform Teammate