1. Registry
  2. Packages
  3. Strata Cloud Manager Provider
  4. API Docs
  5. IpsecCryptoProfile
Viewing docs for Strata Cloud Manager v1.2.1
published on Friday, Oct 16, 2026 by Pulumi
scm logo Strata Cloud Manager
Viewing docs for Strata Cloud Manager v1.2.1
published on Friday, Oct 16, 2026 by Pulumi

    IpsecCryptoProfile resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as scm from "@pulumi/scm";
    
    // The resource block defines a new IPsec Crypto Profile.
    const scmIpsecCryptoProfile2 = new scm.IpsecCryptoProfile("scm_ipsec_crypto_profile_2", {
        name: "scm_ipsec_crypto_profile_2",
        folder: "Prisma Access",
        esp: {
            authentications: [
                "sha256",
                "sha384",
            ],
            encryptions: [
                "aes-256-gcm",
                "aes-128-cbc",
            ],
        },
        dhGroup: "group14",
        lifetime: {
            hours: 1,
        },
        lifesize: {
            gb: 10,
        },
    });
    
    import pulumi
    import pulumi_scm as scm
    
    # The resource block defines a new IPsec Crypto Profile.
    scm_ipsec_crypto_profile2 = scm.IpsecCryptoProfile("scm_ipsec_crypto_profile_2",
        name="scm_ipsec_crypto_profile_2",
        folder="Prisma Access",
        esp={
            "authentications": [
                "sha256",
                "sha384",
            ],
            "encryptions": [
                "aes-256-gcm",
                "aes-128-cbc",
            ],
        },
        dh_group="group14",
        lifetime={
            "hours": 1,
        },
        lifesize={
            "gb": 10,
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-scm/sdk/go/scm"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		// The resource block defines a new IPsec Crypto Profile.
    		_, err := scm.NewIpsecCryptoProfile(ctx, "scm_ipsec_crypto_profile_2", &scm.IpsecCryptoProfileArgs{
    			Name:   pulumi.String("scm_ipsec_crypto_profile_2"),
    			Folder: pulumi.String("Prisma Access"),
    			Esp: &scm.IpsecCryptoProfileEspArgs{
    				Authentications: pulumi.StringArray{
    					pulumi.String("sha256"),
    					pulumi.String("sha384"),
    				},
    				Encryptions: pulumi.StringArray{
    					pulumi.String("aes-256-gcm"),
    					pulumi.String("aes-128-cbc"),
    				},
    			},
    			DhGroup: pulumi.String("group14"),
    			Lifetime: &scm.IpsecCryptoProfileLifetimeArgs{
    				Hours: pulumi.Int(1),
    			},
    			Lifesize: &scm.IpsecCryptoProfileLifesizeArgs{
    				Gb: pulumi.Int(10),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Scm = Pulumi.Scm;
    
    return await Deployment.RunAsync(() => 
    {
        // The resource block defines a new IPsec Crypto Profile.
        var scmIpsecCryptoProfile2 = new Scm.IpsecCryptoProfile("scm_ipsec_crypto_profile_2", new()
        {
            Name = "scm_ipsec_crypto_profile_2",
            Folder = "Prisma Access",
            Esp = new Scm.Inputs.IpsecCryptoProfileEspArgs
            {
                Authentications = new[]
                {
                    "sha256",
                    "sha384",
                },
                Encryptions = new[]
                {
                    "aes-256-gcm",
                    "aes-128-cbc",
                },
            },
            DhGroup = "group14",
            Lifetime = new Scm.Inputs.IpsecCryptoProfileLifetimeArgs
            {
                Hours = 1,
            },
            Lifesize = new Scm.Inputs.IpsecCryptoProfileLifesizeArgs
            {
                Gb = 10,
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.scm.IpsecCryptoProfile;
    import com.pulumi.scm.IpsecCryptoProfileArgs;
    import com.pulumi.scm.inputs.IpsecCryptoProfileEspArgs;
    import com.pulumi.scm.inputs.IpsecCryptoProfileLifetimeArgs;
    import com.pulumi.scm.inputs.IpsecCryptoProfileLifesizeArgs;
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            // The resource block defines a new IPsec Crypto Profile.
            var scmIpsecCryptoProfile2 = new IpsecCryptoProfile("scmIpsecCryptoProfile2", IpsecCryptoProfileArgs.builder()
                .name("scm_ipsec_crypto_profile_2")
                .folder("Prisma Access")
                .esp(IpsecCryptoProfileEspArgs.builder()
                    .authentications(                
                        "sha256",
                        "sha384")
                    .encryptions(                
                        "aes-256-gcm",
                        "aes-128-cbc")
                    .build())
                .dhGroup("group14")
                .lifetime(IpsecCryptoProfileLifetimeArgs.builder()
                    .hours(1)
                    .build())
                .lifesize(IpsecCryptoProfileLifesizeArgs.builder()
                    .gb(10)
                    .build())
                .build());
    
        }
    }
    
    resources:
      # The resource block defines a new IPsec Crypto Profile.
      scmIpsecCryptoProfile2:
        type: scm:IpsecCryptoProfile
        name: scm_ipsec_crypto_profile_2
        properties:
          name: scm_ipsec_crypto_profile_2
          folder: Prisma Access
          esp:
            authentications:
              - sha256
              - sha384
            encryptions:
              - aes-256-gcm
              - aes-128-cbc
          dhGroup: group14
          lifetime:
            hours: 1
          lifesize:
            gb: 10
    
    terraform {
      required_providers {
        scm = {
          source = "pulumi/scm"
        }
      }
    }
    
    # The resource block defines a new IPsec Crypto Profile.
    resource "scm_ipsec_crypto_profile" "scm_ipsec_crypto_profile_2" {
      lifecycle {
        create_before_destroy = true
      }
      name   = "scm_ipsec_crypto_profile_2"
      folder = "Prisma Access"
      esp = {
        authentications = ["sha256", "sha384"]
        encryptions     = ["aes-256-gcm", "aes-128-cbc"]
      }
      dh_group = "group14"
      lifetime = {
        hours = 1
      }
      lifesize = {
        gb = 10
      }
    }
    

    Create IpsecCryptoProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IpsecCryptoProfile(name: string, args: IpsecCryptoProfileArgs, opts?: CustomResourceOptions);
    @overload
    def IpsecCryptoProfile(resource_name: str,
                           args: IpsecCryptoProfileArgs,
                           opts: Optional[ResourceOptions] = None)
    
    @overload
    def IpsecCryptoProfile(resource_name: str,
                           opts: Optional[ResourceOptions] = None,
                           lifetime: Optional[IpsecCryptoProfileLifetimeArgs] = None,
                           ah: Optional[IpsecCryptoProfileAhArgs] = None,
                           device: Optional[str] = None,
                           dh_group: Optional[str] = None,
                           esp: Optional[IpsecCryptoProfileEspArgs] = None,
                           folder: Optional[str] = None,
                           lifesize: Optional[IpsecCryptoProfileLifesizeArgs] = None,
                           name: Optional[str] = None,
                           snippet: Optional[str] = None)
    func NewIpsecCryptoProfile(ctx *Context, name string, args IpsecCryptoProfileArgs, opts ...ResourceOption) (*IpsecCryptoProfile, error)
    public IpsecCryptoProfile(string name, IpsecCryptoProfileArgs args, CustomResourceOptions? opts = null)
    public IpsecCryptoProfile(String name, IpsecCryptoProfileArgs args)
    public IpsecCryptoProfile(String name, IpsecCryptoProfileArgs args, CustomResourceOptions options)
    
    type: scm:IpsecCryptoProfile
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "scm_ipsec_crypto_profile" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args IpsecCryptoProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IpsecCryptoProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IpsecCryptoProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IpsecCryptoProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IpsecCryptoProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var ipsecCryptoProfileResource = new Scm.IpsecCryptoProfile("ipsecCryptoProfileResource", new()
    {
        Lifetime = new Scm.Inputs.IpsecCryptoProfileLifetimeArgs
        {
            Days = 0,
            Hours = 0,
            Minutes = 0,
            Seconds = 0,
        },
        Ah = new Scm.Inputs.IpsecCryptoProfileAhArgs
        {
            Authentications = new[]
            {
                "string",
            },
        },
        Device = "string",
        DhGroup = "string",
        Esp = new Scm.Inputs.IpsecCryptoProfileEspArgs
        {
            Authentications = new[]
            {
                "string",
            },
            Encryptions = new[]
            {
                "string",
            },
        },
        Folder = "string",
        Lifesize = new Scm.Inputs.IpsecCryptoProfileLifesizeArgs
        {
            Gb = 0,
            Kb = 0,
            Mb = 0,
            Tb = 0,
        },
        Name = "string",
        Snippet = "string",
    });
    
    example, err := scm.NewIpsecCryptoProfile(ctx, "ipsecCryptoProfileResource", &scm.IpsecCryptoProfileArgs{
    	Lifetime: &scm.IpsecCryptoProfileLifetimeArgs{
    		Days:    pulumi.Int(0),
    		Hours:   pulumi.Int(0),
    		Minutes: pulumi.Int(0),
    		Seconds: pulumi.Int(0),
    	},
    	Ah: &scm.IpsecCryptoProfileAhArgs{
    		Authentications: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    	},
    	Device:  pulumi.String("string"),
    	DhGroup: pulumi.String("string"),
    	Esp: &scm.IpsecCryptoProfileEspArgs{
    		Authentications: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    		Encryptions: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    	},
    	Folder: pulumi.String("string"),
    	Lifesize: &scm.IpsecCryptoProfileLifesizeArgs{
    		Gb: pulumi.Int(0),
    		Kb: pulumi.Int(0),
    		Mb: pulumi.Int(0),
    		Tb: pulumi.Int(0),
    	},
    	Name:    pulumi.String("string"),
    	Snippet: pulumi.String("string"),
    })
    
    resource "scm_ipsec_crypto_profile" "ipsecCryptoProfileResource" {
      lifecycle {
        create_before_destroy = true
      }
      lifetime = {
        days    = 0
        hours   = 0
        minutes = 0
        seconds = 0
      }
      ah = {
        authentications = ["string"]
      }
      device   = "string"
      dh_group = "string"
      esp = {
        authentications = ["string"]
        encryptions     = ["string"]
      }
      folder = "string"
      lifesize = {
        gb = 0
        kb = 0
        mb = 0
        tb = 0
      }
      name    = "string"
      snippet = "string"
    }
    
    var ipsecCryptoProfileResource = new IpsecCryptoProfile("ipsecCryptoProfileResource", IpsecCryptoProfileArgs.builder()
        .lifetime(IpsecCryptoProfileLifetimeArgs.builder()
            .days(0)
            .hours(0)
            .minutes(0)
            .seconds(0)
            .build())
        .ah(IpsecCryptoProfileAhArgs.builder()
            .authentications("string")
            .build())
        .device("string")
        .dhGroup("string")
        .esp(IpsecCryptoProfileEspArgs.builder()
            .authentications("string")
            .encryptions("string")
            .build())
        .folder("string")
        .lifesize(IpsecCryptoProfileLifesizeArgs.builder()
            .gb(0)
            .kb(0)
            .mb(0)
            .tb(0)
            .build())
        .name("string")
        .snippet("string")
        .build());
    
    ipsec_crypto_profile_resource = scm.IpsecCryptoProfile("ipsecCryptoProfileResource",
        lifetime={
            "days": 0,
            "hours": 0,
            "minutes": 0,
            "seconds": 0,
        },
        ah={
            "authentications": ["string"],
        },
        device="string",
        dh_group="string",
        esp={
            "authentications": ["string"],
            "encryptions": ["string"],
        },
        folder="string",
        lifesize={
            "gb": 0,
            "kb": 0,
            "mb": 0,
            "tb": 0,
        },
        name="string",
        snippet="string")
    
    const ipsecCryptoProfileResource = new scm.IpsecCryptoProfile("ipsecCryptoProfileResource", {
        lifetime: {
            days: 0,
            hours: 0,
            minutes: 0,
            seconds: 0,
        },
        ah: {
            authentications: ["string"],
        },
        device: "string",
        dhGroup: "string",
        esp: {
            authentications: ["string"],
            encryptions: ["string"],
        },
        folder: "string",
        lifesize: {
            gb: 0,
            kb: 0,
            mb: 0,
            tb: 0,
        },
        name: "string",
        snippet: "string",
    });
    
    type: scm:IpsecCryptoProfile
    properties:
        ah:
            authentications:
                - string
        device: string
        dhGroup: string
        esp:
            authentications:
                - string
            encryptions:
                - string
        folder: string
        lifesize:
            gb: 0
            kb: 0
            mb: 0
            tb: 0
        lifetime:
            days: 0
            hours: 0
            minutes: 0
            seconds: 0
        name: string
        snippet: string
    

    IpsecCryptoProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IpsecCryptoProfile resource accepts the following input properties:

    Lifetime IpsecCryptoProfileLifetime
    Ipsec crypto profile lifetime
    Ah IpsecCryptoProfileAh
    Ah
    Device string
    The device in which the resource is defined
    DhGroup string
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    Esp IpsecCryptoProfileEsp
    Esp
    Folder string
    The folder in which the resource is defined
    Lifesize IpsecCryptoProfileLifesize
    Lifesize
    Name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    Snippet string
    The snippet in which the resource is defined
    Lifetime IpsecCryptoProfileLifetimeArgs
    Ipsec crypto profile lifetime
    Ah IpsecCryptoProfileAhArgs
    Ah
    Device string
    The device in which the resource is defined
    DhGroup string
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    Esp IpsecCryptoProfileEspArgs
    Esp
    Folder string
    The folder in which the resource is defined
    Lifesize IpsecCryptoProfileLifesizeArgs
    Lifesize
    Name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    Snippet string
    The snippet in which the resource is defined
    lifetime object
    Ipsec crypto profile lifetime
    ah object
    Ah
    device string
    The device in which the resource is defined
    dh_group string
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp object
    Esp
    folder string
    The folder in which the resource is defined
    lifesize object
    Lifesize
    name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet string
    The snippet in which the resource is defined
    lifetime IpsecCryptoProfileLifetime
    Ipsec crypto profile lifetime
    ah IpsecCryptoProfileAh
    Ah
    device String
    The device in which the resource is defined
    dhGroup String
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp IpsecCryptoProfileEsp
    Esp
    folder String
    The folder in which the resource is defined
    lifesize IpsecCryptoProfileLifesize
    Lifesize
    name String
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet String
    The snippet in which the resource is defined
    lifetime IpsecCryptoProfileLifetime
    Ipsec crypto profile lifetime
    ah IpsecCryptoProfileAh
    Ah
    device string
    The device in which the resource is defined
    dhGroup string
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp IpsecCryptoProfileEsp
    Esp
    folder string
    The folder in which the resource is defined
    lifesize IpsecCryptoProfileLifesize
    Lifesize
    name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet string
    The snippet in which the resource is defined
    lifetime IpsecCryptoProfileLifetimeArgs
    Ipsec crypto profile lifetime
    ah IpsecCryptoProfileAhArgs
    Ah
    device str
    The device in which the resource is defined
    dh_group str
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp IpsecCryptoProfileEspArgs
    Esp
    folder str
    The folder in which the resource is defined
    lifesize IpsecCryptoProfileLifesizeArgs
    Lifesize
    name str
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet str
    The snippet in which the resource is defined
    lifetime Property Map
    Ipsec crypto profile lifetime
    ah Property Map
    Ah
    device String
    The device in which the resource is defined
    dhGroup String
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp Property Map
    Esp
    folder String
    The folder in which the resource is defined
    lifesize Property Map
    Lifesize
    name String
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet String
    The snippet in which the resource is defined

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IpsecCryptoProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Tfid string
    The Terraform ID.
    Id string
    The provider-assigned unique ID for this managed resource.
    Tfid string
    The Terraform ID.
    id string
    The provider-assigned unique ID for this managed resource.
    tfid string
    The Terraform ID.
    id String
    The provider-assigned unique ID for this managed resource.
    tfid String
    The Terraform ID.
    id string
    The provider-assigned unique ID for this managed resource.
    tfid string
    The Terraform ID.
    id str
    The provider-assigned unique ID for this managed resource.
    tfid str
    The Terraform ID.
    id String
    The provider-assigned unique ID for this managed resource.
    tfid String
    The Terraform ID.

    Look up Existing IpsecCryptoProfile Resource

    Get an existing IpsecCryptoProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IpsecCryptoProfileState, opts?: CustomResourceOptions): IpsecCryptoProfile
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            ah: Optional[IpsecCryptoProfileAhArgs] = None,
            device: Optional[str] = None,
            dh_group: Optional[str] = None,
            esp: Optional[IpsecCryptoProfileEspArgs] = None,
            folder: Optional[str] = None,
            lifesize: Optional[IpsecCryptoProfileLifesizeArgs] = None,
            lifetime: Optional[IpsecCryptoProfileLifetimeArgs] = None,
            name: Optional[str] = None,
            snippet: Optional[str] = None,
            tfid: Optional[str] = None) -> IpsecCryptoProfile
    func GetIpsecCryptoProfile(ctx *Context, name string, id IDInput, state *IpsecCryptoProfileState, opts ...ResourceOption) (*IpsecCryptoProfile, error)
    public static IpsecCryptoProfile Get(string name, Input<string> id, IpsecCryptoProfileState? state, CustomResourceOptions? opts = null)
    public static IpsecCryptoProfile get(String name, Output<String> id, IpsecCryptoProfileState state, CustomResourceOptions options)
    resources:  _:    type: scm:IpsecCryptoProfile    get:      id: ${id}
    import {
      to = scm_ipsec_crypto_profile.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Ah IpsecCryptoProfileAh
    Ah
    Device string
    The device in which the resource is defined
    DhGroup string
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    Esp IpsecCryptoProfileEsp
    Esp
    Folder string
    The folder in which the resource is defined
    Lifesize IpsecCryptoProfileLifesize
    Lifesize
    Lifetime IpsecCryptoProfileLifetime
    Ipsec crypto profile lifetime
    Name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    Snippet string
    The snippet in which the resource is defined
    Tfid string
    The Terraform ID.
    Ah IpsecCryptoProfileAhArgs
    Ah
    Device string
    The device in which the resource is defined
    DhGroup string
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    Esp IpsecCryptoProfileEspArgs
    Esp
    Folder string
    The folder in which the resource is defined
    Lifesize IpsecCryptoProfileLifesizeArgs
    Lifesize
    Lifetime IpsecCryptoProfileLifetimeArgs
    Ipsec crypto profile lifetime
    Name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    Snippet string
    The snippet in which the resource is defined
    Tfid string
    The Terraform ID.
    ah object
    Ah
    device string
    The device in which the resource is defined
    dh_group string
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp object
    Esp
    folder string
    The folder in which the resource is defined
    lifesize object
    Lifesize
    lifetime object
    Ipsec crypto profile lifetime
    name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet string
    The snippet in which the resource is defined
    tfid string
    The Terraform ID.
    ah IpsecCryptoProfileAh
    Ah
    device String
    The device in which the resource is defined
    dhGroup String
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp IpsecCryptoProfileEsp
    Esp
    folder String
    The folder in which the resource is defined
    lifesize IpsecCryptoProfileLifesize
    Lifesize
    lifetime IpsecCryptoProfileLifetime
    Ipsec crypto profile lifetime
    name String
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet String
    The snippet in which the resource is defined
    tfid String
    The Terraform ID.
    ah IpsecCryptoProfileAh
    Ah
    device string
    The device in which the resource is defined
    dhGroup string
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp IpsecCryptoProfileEsp
    Esp
    folder string
    The folder in which the resource is defined
    lifesize IpsecCryptoProfileLifesize
    Lifesize
    lifetime IpsecCryptoProfileLifetime
    Ipsec crypto profile lifetime
    name string
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet string
    The snippet in which the resource is defined
    tfid string
    The Terraform ID.
    ah IpsecCryptoProfileAhArgs
    Ah
    device str
    The device in which the resource is defined
    dh_group str
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp IpsecCryptoProfileEspArgs
    Esp
    folder str
    The folder in which the resource is defined
    lifesize IpsecCryptoProfileLifesizeArgs
    Lifesize
    lifetime IpsecCryptoProfileLifetimeArgs
    Ipsec crypto profile lifetime
    name str
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet str
    The snippet in which the resource is defined
    tfid str
    The Terraform ID.
    ah Property Map
    Ah
    device String
    The device in which the resource is defined
    dhGroup String
    phase-2 DH group (PFS DH group). Possible values are no-pfs, group1, group2, group5, group14, group19, group20, group21, ml-kem-512, ml-kem-768 and ml-kem-1024.
    esp Property Map
    Esp
    folder String
    The folder in which the resource is defined
    lifesize Property Map
    Lifesize
    lifetime Property Map
    Ipsec crypto profile lifetime
    name String
    Alphanumeric string begin with letter: [0-9a-zA-Z._-]
    snippet String
    The snippet in which the resource is defined
    tfid String
    The Terraform ID.

    Supporting Types

    IpsecCryptoProfileAh, IpsecCryptoProfileAhArgs

    Authentications List<string>
    Authentication. Possible values are md5, sha1, sha256, sha384 and sha512.
    Authentications []string
    Authentication. Possible values are md5, sha1, sha256, sha384 and sha512.
    authentications list(string)
    Authentication. Possible values are md5, sha1, sha256, sha384 and sha512.
    authentications List<String>
    Authentication. Possible values are md5, sha1, sha256, sha384 and sha512.
    authentications string[]
    Authentication. Possible values are md5, sha1, sha256, sha384 and sha512.
    authentications Sequence[str]
    Authentication. Possible values are md5, sha1, sha256, sha384 and sha512.
    authentications List<String>
    Authentication. Possible values are md5, sha1, sha256, sha384 and sha512.

    IpsecCryptoProfileEsp, IpsecCryptoProfileEspArgs

    Authentications List<string>
    Authentication algorithm
    Encryptions List<string>
    Encryption algorithm. Possible values are des, 3des, aes-128-cbc, aes-192-cbc, aes-256-cbc, aes-128-gcm, aes-256-gcm and null.
    Authentications []string
    Authentication algorithm
    Encryptions []string
    Encryption algorithm. Possible values are des, 3des, aes-128-cbc, aes-192-cbc, aes-256-cbc, aes-128-gcm, aes-256-gcm and null.
    authentications list(string)
    Authentication algorithm
    encryptions list(string)
    Encryption algorithm. Possible values are des, 3des, aes-128-cbc, aes-192-cbc, aes-256-cbc, aes-128-gcm, aes-256-gcm and null.
    authentications List<String>
    Authentication algorithm
    encryptions List<String>
    Encryption algorithm. Possible values are des, 3des, aes-128-cbc, aes-192-cbc, aes-256-cbc, aes-128-gcm, aes-256-gcm and null.
    authentications string[]
    Authentication algorithm
    encryptions string[]
    Encryption algorithm. Possible values are des, 3des, aes-128-cbc, aes-192-cbc, aes-256-cbc, aes-128-gcm, aes-256-gcm and null.
    authentications Sequence[str]
    Authentication algorithm
    encryptions Sequence[str]
    Encryption algorithm. Possible values are des, 3des, aes-128-cbc, aes-192-cbc, aes-256-cbc, aes-128-gcm, aes-256-gcm and null.
    authentications List<String>
    Authentication algorithm
    encryptions List<String>
    Encryption algorithm. Possible values are des, 3des, aes-128-cbc, aes-192-cbc, aes-256-cbc, aes-128-gcm, aes-256-gcm and null.

    IpsecCryptoProfileLifesize, IpsecCryptoProfileLifesizeArgs

    Gb int
    specify lifesize in gigabytes(GB)
    Kb int
    specify lifesize in kilobytes(KB)
    Mb int
    specify lifesize in megabytes(MB)
    Tb int
    specify lifesize in terabytes(TB)
    Gb int
    specify lifesize in gigabytes(GB)
    Kb int
    specify lifesize in kilobytes(KB)
    Mb int
    specify lifesize in megabytes(MB)
    Tb int
    specify lifesize in terabytes(TB)
    gb number
    specify lifesize in gigabytes(GB)
    kb number
    specify lifesize in kilobytes(KB)
    mb number
    specify lifesize in megabytes(MB)
    tb number
    specify lifesize in terabytes(TB)
    gb Integer
    specify lifesize in gigabytes(GB)
    kb Integer
    specify lifesize in kilobytes(KB)
    mb Integer
    specify lifesize in megabytes(MB)
    tb Integer
    specify lifesize in terabytes(TB)
    gb number
    specify lifesize in gigabytes(GB)
    kb number
    specify lifesize in kilobytes(KB)
    mb number
    specify lifesize in megabytes(MB)
    tb number
    specify lifesize in terabytes(TB)
    gb int
    specify lifesize in gigabytes(GB)
    kb int
    specify lifesize in kilobytes(KB)
    mb int
    specify lifesize in megabytes(MB)
    tb int
    specify lifesize in terabytes(TB)
    gb Number
    specify lifesize in gigabytes(GB)
    kb Number
    specify lifesize in kilobytes(KB)
    mb Number
    specify lifesize in megabytes(MB)
    tb Number
    specify lifesize in terabytes(TB)

    IpsecCryptoProfileLifetime, IpsecCryptoProfileLifetimeArgs

    Days int
    specify lifetime in days
    Hours int
    specify lifetime in hours
    Minutes int
    specify lifetime in minutes
    Seconds int
    specify lifetime in seconds
    Days int
    specify lifetime in days
    Hours int
    specify lifetime in hours
    Minutes int
    specify lifetime in minutes
    Seconds int
    specify lifetime in seconds
    days number
    specify lifetime in days
    hours number
    specify lifetime in hours
    minutes number
    specify lifetime in minutes
    seconds number
    specify lifetime in seconds
    days Integer
    specify lifetime in days
    hours Integer
    specify lifetime in hours
    minutes Integer
    specify lifetime in minutes
    seconds Integer
    specify lifetime in seconds
    days number
    specify lifetime in days
    hours number
    specify lifetime in hours
    minutes number
    specify lifetime in minutes
    seconds number
    specify lifetime in seconds
    days int
    specify lifetime in days
    hours int
    specify lifetime in hours
    minutes int
    specify lifetime in minutes
    seconds int
    specify lifetime in seconds
    days Number
    specify lifetime in days
    hours Number
    specify lifetime in hours
    minutes Number
    specify lifetime in minutes
    seconds Number
    specify lifetime in seconds

    Import

    The following command can be used to import a resource not managed by Terraform:

    $ pulumi import scm:index/ipsecCryptoProfile:IpsecCryptoProfile example folder:::id
    

    or

    $ pulumi import scm:index/ipsecCryptoProfile:IpsecCryptoProfile example :snippet::id
    

    or

    $ pulumi import scm:index/ipsecCryptoProfile:IpsecCryptoProfile example ::device:id
    

    Note: Please provide just one of folder, snippet, or device for the import command.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    scm pulumi/pulumi-scm
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the scm Terraform Provider.
    scm logo Strata Cloud Manager
    Viewing docs for Strata Cloud Manager v1.2.1
    published on Friday, Oct 16, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial