Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. stackit
  4. API Docs
  5. CdnDistribution
Viewing docs for stackit v0.0.7
published on Monday, Aug 17, 2026 by stackitcloud
Schema (JSON)
stackitcloud/pulumi-stackit

stackit.CdnDistribution

stackit logo
Viewing docs for stackit v0.0.7
published on Monday, Aug 17, 2026 by stackitcloud
Schema (JSON)
stackitcloud/pulumi-stackit

    CDN distribution data source schema.

    This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our guide for how to opt-in to use beta resources.

    Example Usage

    resource "stackit_cdn_distribution" "example_distribution" {
  project_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  config = {
    backend = {
      type       = "http"
      origin_url = "https://mybackend.onstackit.cloud"
      geofencing = {
        "https://mybackend.onstackit.cloud" = ["DE"]
      }
    }
    regions           = ["EU", "US", "ASIA", "AF", "SA"]
    blocked_countries = ["DE", "AT", "CH"]
    blocked_ips       = ["1.1.1.1"]

    default_cache_duration = "P1DT2H30M"
    monthly_limit_bytes    = 1048576

    optimizer = {
      enabled = true
    }
  }
}

resource "stackit_cdn_distribution" "example_bucket_distribution" {
  project_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  config = {
    backend = {
      type       = "bucket"
      bucket_url = "https://my-test.object.storage.eu01.onstackit.cloud"
      region     = "eu01"

      # Credentials are required for bucket backends
      # It is strongly recommended to use variables for secrets
      credentials = {
        access_key_id     = var.bucket_access_key
        secret_access_key = var.bucket_secret_key
      }
    }
    regions           = ["EU", "US"]
    blocked_countries = ["CN", "RU"]
    blocked_ips       = ["1.1.1.1"]

    default_cache_duration = "P1DT2H30M"
    monthly_limit_bytes    = 1048576

    optimizer = {
      enabled = false
    }

    redirects = {
      rules = [
        {
          description          = "test redirect"
          enabled              = true
          rule_match_condition = "ANY"
          status_code          = 302
          target_url           = "https://stackit.de/"
          matchers = [
            {
              values                = ["*/otherPath/"]
              value_match_condition = "ANY"
            }
          ]
        }
      ]
    }

    tls = {
      enable_tls_10 = true
      enable_tls_11 = true
    }
    strip_response_cookies = true
    forward_host_header    = true

    # WAF Configuration
    # 
    # Precedence Hierarchy: Specific Rules > Groups > Collections
    # In this example, the entire "@builtin/crs/request" collection is ENABLED.
    # However, because specific Rule IDs have a higher precedence, the rule 
    # "@builtin/crs/request/942151" is explicitly DISABLED, overriding the collection setting.
    # 
    # To view all available collections, groups, and rules, consult the API documentation:
    # https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    waf = {
      mode                          = "ENABLED"
      type                          = "PREMIUM"
      paranoia_level                = "L1"
      allowed_http_versions         = ["HTTP/1.0", "HTTP/1.1"]
      allowed_http_methods          = ["GET"]
      allowed_request_content_types = ["text/plain"]

      # Collections
      enabled_rule_collection_ids  = ["@builtin/crs/request"]
      disabled_rule_collection_ids = []
      log_only_rule_collection_ids = ["@builtin/crs/response"]

      # Groups
      enabled_rule_group_ids  = []
      disabled_rule_group_ids = []
      log_only_rule_group_ids = []

      # Specific Rules (Highest Precedence)
      enabled_rule_ids  = ["@builtin/crs/request/913100"]
      disabled_rule_ids = ["@builtin/crs/request/942151"]
      log_only_rule_ids = ["@builtin/crs/response/954120"]
    }
  }
}

    Create CdnDistribution Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CdnDistribution(name: string, args: CdnDistributionArgs, opts?: CustomResourceOptions);
    @overload
def CdnDistribution(resource_name: str,
                    args: CdnDistributionArgs,
                    opts: Optional[ResourceOptions] = None)

@overload
def CdnDistribution(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    config: Optional[CdnDistributionConfigArgs] = None,
                    project_id: Optional[str] = None)
    func NewCdnDistribution(ctx *Context, name string, args CdnDistributionArgs, opts ...ResourceOption) (*CdnDistribution, error)
    public CdnDistribution(string name, CdnDistributionArgs args, CustomResourceOptions? opts = null)
    public CdnDistribution(String name, CdnDistributionArgs args)
public CdnDistribution(String name, CdnDistributionArgs args, CustomResourceOptions options)

    type: stackit:CdnDistribution
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "stackit_cdn_distribution" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args CdnDistributionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CdnDistributionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CdnDistributionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CdnDistributionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CdnDistributionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var cdnDistributionResource = new Stackit.CdnDistribution("cdnDistributionResource", new()
{
    Config = new Stackit.Inputs.CdnDistributionConfigArgs
    {
        Backend = new Stackit.Inputs.CdnDistributionConfigBackendArgs
        {
            Type = "string",
            BucketUrl = "string",
            Credentials = new Stackit.Inputs.CdnDistributionConfigBackendCredentialsArgs
            {
                AccessKeyId = "string",
                SecretAccessKey = "string",
            },
            Geofencing = 
            {
                { "string", new[]
                {
                    "string",
                } },
            },
            OriginRequestHeaders = 
            {
                { "string", "string" },
            },
            OriginUrl = "string",
            Region = "string",
        },
        Regions = new[]
        {
            "string",
        },
        BlockedCountries = new[]
        {
            "string",
        },
        BlockedIps = new[]
        {
            "string",
        },
        DefaultCacheDuration = "string",
        ForwardHostHeader = false,
        MonthlyLimitBytes = 0,
        Optimizer = new Stackit.Inputs.CdnDistributionConfigOptimizerArgs
        {
            Enabled = false,
        },
        Redirects = new Stackit.Inputs.CdnDistributionConfigRedirectsArgs
        {
            Rules = new[]
            {
                new Stackit.Inputs.CdnDistributionConfigRedirectsRuleArgs
                {
                    Matchers = new[]
                    {
                        new Stackit.Inputs.CdnDistributionConfigRedirectsRuleMatcherArgs
                        {
                            Values = new[]
                            {
                                "string",
                            },
                            ValueMatchCondition = "string",
                        },
                    },
                    StatusCode = 0,
                    TargetUrl = "string",
                    Description = "string",
                    Enabled = false,
                    RuleMatchCondition = "string",
                },
            },
        },
        StripResponseCookies = false,
        Tls = new Stackit.Inputs.CdnDistributionConfigTlsArgs
        {
            EnableTls10 = false,
            EnableTls11 = false,
        },
        Waf = new Stackit.Inputs.CdnDistributionConfigWafArgs
        {
            AllowedHttpMethods = new[]
            {
                "string",
            },
            AllowedHttpVersions = new[]
            {
                "string",
            },
            AllowedRequestContentTypes = new[]
            {
                "string",
            },
            DisabledRuleCollectionIds = new[]
            {
                "string",
            },
            DisabledRuleGroupIds = new[]
            {
                "string",
            },
            DisabledRuleIds = new[]
            {
                "string",
            },
            EnabledRuleCollectionIds = new[]
            {
                "string",
            },
            EnabledRuleGroupIds = new[]
            {
                "string",
            },
            EnabledRuleIds = new[]
            {
                "string",
            },
            LogOnlyRuleCollectionIds = new[]
            {
                "string",
            },
            LogOnlyRuleGroupIds = new[]
            {
                "string",
            },
            LogOnlyRuleIds = new[]
            {
                "string",
            },
            Mode = "string",
            ParanoiaLevel = "string",
            Type = "string",
        },
    },
    ProjectId = "string",
});

    example, err := stackit.NewCdnDistribution(ctx, "cdnDistributionResource", &stackit.CdnDistributionArgs{
	Config: &stackit.CdnDistributionConfigArgs{
		Backend: &stackit.CdnDistributionConfigBackendArgs{
			Type:      pulumi.String("string"),
			BucketUrl: pulumi.String("string"),
			Credentials: &stackit.CdnDistributionConfigBackendCredentialsArgs{
				AccessKeyId:     pulumi.String("string"),
				SecretAccessKey: pulumi.String("string"),
			},
			Geofencing: pulumi.StringArrayMap{
				"string": pulumi.StringArray{
					pulumi.String("string"),
				},
			},
			OriginRequestHeaders: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
			OriginUrl: pulumi.String("string"),
			Region:    pulumi.String("string"),
		},
		Regions: pulumi.StringArray{
			pulumi.String("string"),
		},
		BlockedCountries: pulumi.StringArray{
			pulumi.String("string"),
		},
		BlockedIps: pulumi.StringArray{
			pulumi.String("string"),
		},
		DefaultCacheDuration: pulumi.String("string"),
		ForwardHostHeader:    pulumi.Bool(false),
		MonthlyLimitBytes:    pulumi.Int(0),
		Optimizer: &stackit.CdnDistributionConfigOptimizerArgs{
			Enabled: pulumi.Bool(false),
		},
		Redirects: &stackit.CdnDistributionConfigRedirectsArgs{
			Rules: stackit.CdnDistributionConfigRedirectsRuleArray{
				&stackit.CdnDistributionConfigRedirectsRuleArgs{
					Matchers: stackit.CdnDistributionConfigRedirectsRuleMatcherArray{
						&stackit.CdnDistributionConfigRedirectsRuleMatcherArgs{
							Values: pulumi.StringArray{
								pulumi.String("string"),
							},
							ValueMatchCondition: pulumi.String("string"),
						},
					},
					StatusCode:         pulumi.Int(0),
					TargetUrl:          pulumi.String("string"),
					Description:        pulumi.String("string"),
					Enabled:            pulumi.Bool(false),
					RuleMatchCondition: pulumi.String("string"),
				},
			},
		},
		StripResponseCookies: pulumi.Bool(false),
		Tls: &stackit.CdnDistributionConfigTlsArgs{
			EnableTls10: pulumi.Bool(false),
			EnableTls11: pulumi.Bool(false),
		},
		Waf: &stackit.CdnDistributionConfigWafArgs{
			AllowedHttpMethods: pulumi.StringArray{
				pulumi.String("string"),
			},
			AllowedHttpVersions: pulumi.StringArray{
				pulumi.String("string"),
			},
			AllowedRequestContentTypes: pulumi.StringArray{
				pulumi.String("string"),
			},
			DisabledRuleCollectionIds: pulumi.StringArray{
				pulumi.String("string"),
			},
			DisabledRuleGroupIds: pulumi.StringArray{
				pulumi.String("string"),
			},
			DisabledRuleIds: pulumi.StringArray{
				pulumi.String("string"),
			},
			EnabledRuleCollectionIds: pulumi.StringArray{
				pulumi.String("string"),
			},
			EnabledRuleGroupIds: pulumi.StringArray{
				pulumi.String("string"),
			},
			EnabledRuleIds: pulumi.StringArray{
				pulumi.String("string"),
			},
			LogOnlyRuleCollectionIds: pulumi.StringArray{
				pulumi.String("string"),
			},
			LogOnlyRuleGroupIds: pulumi.StringArray{
				pulumi.String("string"),
			},
			LogOnlyRuleIds: pulumi.StringArray{
				pulumi.String("string"),
			},
			Mode:          pulumi.String("string"),
			ParanoiaLevel: pulumi.String("string"),
			Type:          pulumi.String("string"),
		},
	},
	ProjectId: pulumi.String("string"),
})

    resource "stackit_cdn_distribution" "cdnDistributionResource" {
  lifecycle {
    create_before_destroy = true
  }
  config = {
    backend = {
      type       = "string"
      bucket_url = "string"
      credentials = {
        access_key_id     = "string"
        secret_access_key = "string"
      }
      geofencing = {
        "string" = ["string"]
      }
      origin_request_headers = {
        "string" = "string"
      }
      origin_url = "string"
      region     = "string"
    }
    regions                = ["string"]
    blocked_countries      = ["string"]
    blocked_ips            = ["string"]
    default_cache_duration = "string"
    forward_host_header    = false
    monthly_limit_bytes    = 0
    optimizer = {
      enabled = false
    }
    redirects = {
      rules = [{
        matchers = [{
          values                = ["string"]
          value_match_condition = "string"
        }]
        status_code          = 0
        target_url           = "string"
        description          = "string"
        enabled              = false
        rule_match_condition = "string"
      }]
    }
    strip_response_cookies = false
    tls = {
      enable_tls10 = false
      enable_tls11 = false
    }
    waf = {
      allowed_http_methods          = ["string"]
      allowed_http_versions         = ["string"]
      allowed_request_content_types = ["string"]
      disabled_rule_collection_ids  = ["string"]
      disabled_rule_group_ids       = ["string"]
      disabled_rule_ids             = ["string"]
      enabled_rule_collection_ids   = ["string"]
      enabled_rule_group_ids        = ["string"]
      enabled_rule_ids              = ["string"]
      log_only_rule_collection_ids  = ["string"]
      log_only_rule_group_ids       = ["string"]
      log_only_rule_ids             = ["string"]
      mode                          = "string"
      paranoia_level                = "string"
      type                          = "string"
    }
  }
  project_id = "string"
}

    var cdnDistributionResource = new CdnDistribution("cdnDistributionResource", CdnDistributionArgs.builder()
    .config(CdnDistributionConfigArgs.builder()
        .backend(CdnDistributionConfigBackendArgs.builder()
            .type("string")
            .bucketUrl("string")
            .credentials(CdnDistributionConfigBackendCredentialsArgs.builder()
                .accessKeyId("string")
                .secretAccessKey("string")
                .build())
            .geofencing(Map.of("string", Arrays.asList("string")))
            .originRequestHeaders(Map.of("string", "string"))
            .originUrl("string")
            .region("string")
            .build())
        .regions("string")
        .blockedCountries("string")
        .blockedIps("string")
        .defaultCacheDuration("string")
        .forwardHostHeader(false)
        .monthlyLimitBytes(0)
        .optimizer(CdnDistributionConfigOptimizerArgs.builder()
            .enabled(false)
            .build())
        .redirects(CdnDistributionConfigRedirectsArgs.builder()
            .rules(CdnDistributionConfigRedirectsRuleArgs.builder()
                .matchers(CdnDistributionConfigRedirectsRuleMatcherArgs.builder()
                    .values("string")
                    .valueMatchCondition("string")
                    .build())
                .statusCode(0)
                .targetUrl("string")
                .description("string")
                .enabled(false)
                .ruleMatchCondition("string")
                .build())
            .build())
        .stripResponseCookies(false)
        .tls(CdnDistributionConfigTlsArgs.builder()
            .enableTls10(false)
            .enableTls11(false)
            .build())
        .waf(CdnDistributionConfigWafArgs.builder()
            .allowedHttpMethods("string")
            .allowedHttpVersions("string")
            .allowedRequestContentTypes("string")
            .disabledRuleCollectionIds("string")
            .disabledRuleGroupIds("string")
            .disabledRuleIds("string")
            .enabledRuleCollectionIds("string")
            .enabledRuleGroupIds("string")
            .enabledRuleIds("string")
            .logOnlyRuleCollectionIds("string")
            .logOnlyRuleGroupIds("string")
            .logOnlyRuleIds("string")
            .mode("string")
            .paranoiaLevel("string")
            .type("string")
            .build())
        .build())
    .projectId("string")
    .build());

    cdn_distribution_resource = stackit.CdnDistribution("cdnDistributionResource",
    config={
        "backend": {
            "type": "string",
            "bucket_url": "string",
            "credentials": {
                "access_key_id": "string",
                "secret_access_key": "string",
            },
            "geofencing": {
                "string": ["string"],
            },
            "origin_request_headers": {
                "string": "string",
            },
            "origin_url": "string",
            "region": "string",
        },
        "regions": ["string"],
        "blocked_countries": ["string"],
        "blocked_ips": ["string"],
        "default_cache_duration": "string",
        "forward_host_header": False,
        "monthly_limit_bytes": 0,
        "optimizer": {
            "enabled": False,
        },
        "redirects": {
            "rules": [{
                "matchers": [{
                    "values": ["string"],
                    "value_match_condition": "string",
                }],
                "status_code": 0,
                "target_url": "string",
                "description": "string",
                "enabled": False,
                "rule_match_condition": "string",
            }],
        },
        "strip_response_cookies": False,
        "tls": {
            "enable_tls10": False,
            "enable_tls11": False,
        },
        "waf": {
            "allowed_http_methods": ["string"],
            "allowed_http_versions": ["string"],
            "allowed_request_content_types": ["string"],
            "disabled_rule_collection_ids": ["string"],
            "disabled_rule_group_ids": ["string"],
            "disabled_rule_ids": ["string"],
            "enabled_rule_collection_ids": ["string"],
            "enabled_rule_group_ids": ["string"],
            "enabled_rule_ids": ["string"],
            "log_only_rule_collection_ids": ["string"],
            "log_only_rule_group_ids": ["string"],
            "log_only_rule_ids": ["string"],
            "mode": "string",
            "paranoia_level": "string",
            "type": "string",
        },
    },
    project_id="string")

    const cdnDistributionResource = new stackit.CdnDistribution("cdnDistributionResource", {
    config: {
        backend: {
            type: "string",
            bucketUrl: "string",
            credentials: {
                accessKeyId: "string",
                secretAccessKey: "string",
            },
            geofencing: {
                string: ["string"],
            },
            originRequestHeaders: {
                string: "string",
            },
            originUrl: "string",
            region: "string",
        },
        regions: ["string"],
        blockedCountries: ["string"],
        blockedIps: ["string"],
        defaultCacheDuration: "string",
        forwardHostHeader: false,
        monthlyLimitBytes: 0,
        optimizer: {
            enabled: false,
        },
        redirects: {
            rules: [{
                matchers: [{
                    values: ["string"],
                    valueMatchCondition: "string",
                }],
                statusCode: 0,
                targetUrl: "string",
                description: "string",
                enabled: false,
                ruleMatchCondition: "string",
            }],
        },
        stripResponseCookies: false,
        tls: {
            enableTls10: false,
            enableTls11: false,
        },
        waf: {
            allowedHttpMethods: ["string"],
            allowedHttpVersions: ["string"],
            allowedRequestContentTypes: ["string"],
            disabledRuleCollectionIds: ["string"],
            disabledRuleGroupIds: ["string"],
            disabledRuleIds: ["string"],
            enabledRuleCollectionIds: ["string"],
            enabledRuleGroupIds: ["string"],
            enabledRuleIds: ["string"],
            logOnlyRuleCollectionIds: ["string"],
            logOnlyRuleGroupIds: ["string"],
            logOnlyRuleIds: ["string"],
            mode: "string",
            paranoiaLevel: "string",
            type: "string",
        },
    },
    projectId: "string",
});

    type: stackit:CdnDistribution
properties:
    config:
        backend:
            bucketUrl: string
            credentials:
                accessKeyId: string
                secretAccessKey: string
            geofencing:
                string:
                    - string
            originRequestHeaders:
                string: string
            originUrl: string
            region: string
            type: string
        blockedCountries:
            - string
        blockedIps:
            - string
        defaultCacheDuration: string
        forwardHostHeader: false
        monthlyLimitBytes: 0
        optimizer:
            enabled: false
        redirects:
            rules:
                - description: string
                  enabled: false
                  matchers:
                    - valueMatchCondition: string
                      values:
                        - string
                  ruleMatchCondition: string
                  statusCode: 0
                  targetUrl: string
        regions:
            - string
        stripResponseCookies: false
        tls:
            enableTls10: false
            enableTls11: false
        waf:
            allowedHttpMethods:
                - string
            allowedHttpVersions:
                - string
            allowedRequestContentTypes:
                - string
            disabledRuleCollectionIds:
                - string
            disabledRuleGroupIds:
                - string
            disabledRuleIds:
                - string
            enabledRuleCollectionIds:
                - string
            enabledRuleGroupIds:
                - string
            enabledRuleIds:
                - string
            logOnlyRuleCollectionIds:
                - string
            logOnlyRuleGroupIds:
                - string
            logOnlyRuleIds:
                - string
            mode: string
            paranoiaLevel: string
            type: string
    projectId: string

    CdnDistribution Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CdnDistribution resource accepts the following input properties:

    Config CdnDistributionConfig
    The distribution configuration
    ProjectId string
    STACKIT project ID associated with the distribution
    Config CdnDistributionConfigArgs
    The distribution configuration
    ProjectId string
    STACKIT project ID associated with the distribution
    config object
    The distribution configuration
    project_id string
    STACKIT project ID associated with the distribution
    config CdnDistributionConfig
    The distribution configuration
    projectId String
    STACKIT project ID associated with the distribution
    config CdnDistributionConfig
    The distribution configuration
    projectId string
    STACKIT project ID associated with the distribution
    config CdnDistributionConfigArgs
    The distribution configuration
    project_id str
    STACKIT project ID associated with the distribution
    config Property Map
    The distribution configuration
    projectId String
    STACKIT project ID associated with the distribution

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CdnDistribution resource produces the following output properties:

    CreatedAt string
    Time when the distribution was created
    DistributionId string
    CDN distribution ID
    Domains List<CdnDistributionDomain>
    List of configured domains for the distribution
    Errors List<string>
    List of distribution errors
    Id string
    The provider-assigned unique ID for this managed resource.
    Status string
    Status of the distribution
    UpdatedAt string
    Time when the distribution was last updated
    CreatedAt string
    Time when the distribution was created
    DistributionId string
    CDN distribution ID
    Domains []CdnDistributionDomain
    List of configured domains for the distribution
    Errors []string
    List of distribution errors
    Id string
    The provider-assigned unique ID for this managed resource.
    Status string
    Status of the distribution
    UpdatedAt string
    Time when the distribution was last updated
    created_at string
    Time when the distribution was created
    distribution_id string
    CDN distribution ID
    domains list(object)
    List of configured domains for the distribution
    errors list(string)
    List of distribution errors
    id string
    The provider-assigned unique ID for this managed resource.
    status string
    Status of the distribution
    updated_at string
    Time when the distribution was last updated
    createdAt String
    Time when the distribution was created
    distributionId String
    CDN distribution ID
    domains List<CdnDistributionDomain>
    List of configured domains for the distribution
    errors List<String>
    List of distribution errors
    id String
    The provider-assigned unique ID for this managed resource.
    status String
    Status of the distribution
    updatedAt String
    Time when the distribution was last updated
    createdAt string
    Time when the distribution was created
    distributionId string
    CDN distribution ID
    domains CdnDistributionDomain[]
    List of configured domains for the distribution
    errors string[]
    List of distribution errors
    id string
    The provider-assigned unique ID for this managed resource.
    status string
    Status of the distribution
    updatedAt string
    Time when the distribution was last updated
    created_at str
    Time when the distribution was created
    distribution_id str
    CDN distribution ID
    domains Sequence[CdnDistributionDomain]
    List of configured domains for the distribution
    errors Sequence[str]
    List of distribution errors
    id str
    The provider-assigned unique ID for this managed resource.
    status str
    Status of the distribution
    updated_at str
    Time when the distribution was last updated
    createdAt String
    Time when the distribution was created
    distributionId String
    CDN distribution ID
    domains List<Property Map>
    List of configured domains for the distribution
    errors List<String>
    List of distribution errors
    id String
    The provider-assigned unique ID for this managed resource.
    status String
    Status of the distribution
    updatedAt String
    Time when the distribution was last updated

    Look up Existing CdnDistribution Resource

    Get an existing CdnDistribution resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CdnDistributionState, opts?: CustomResourceOptions): CdnDistribution
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        config: Optional[CdnDistributionConfigArgs] = None,
        created_at: Optional[str] = None,
        distribution_id: Optional[str] = None,
        domains: Optional[Sequence[CdnDistributionDomainArgs]] = None,
        errors: Optional[Sequence[str]] = None,
        project_id: Optional[str] = None,
        status: Optional[str] = None,
        updated_at: Optional[str] = None) -> CdnDistribution
    func GetCdnDistribution(ctx *Context, name string, id IDInput, state *CdnDistributionState, opts ...ResourceOption) (*CdnDistribution, error)
    public static CdnDistribution Get(string name, Input<string> id, CdnDistributionState? state, CustomResourceOptions? opts = null)
    public static CdnDistribution get(String name, Output<String> id, CdnDistributionState state, CustomResourceOptions options)
    resources:  _:    type: stackit:CdnDistribution    get:      id: ${id}
    import {
  to = stackit_cdn_distribution.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Config CdnDistributionConfig
    The distribution configuration
    CreatedAt string
    Time when the distribution was created
    DistributionId string
    CDN distribution ID
    Domains List<CdnDistributionDomain>
    List of configured domains for the distribution
    Errors List<string>
    List of distribution errors
    ProjectId string
    STACKIT project ID associated with the distribution
    Status string
    Status of the distribution
    UpdatedAt string
    Time when the distribution was last updated
    Config CdnDistributionConfigArgs
    The distribution configuration
    CreatedAt string
    Time when the distribution was created
    DistributionId string
    CDN distribution ID
    Domains []CdnDistributionDomainArgs
    List of configured domains for the distribution
    Errors []string
    List of distribution errors
    ProjectId string
    STACKIT project ID associated with the distribution
    Status string
    Status of the distribution
    UpdatedAt string
    Time when the distribution was last updated
    config object
    The distribution configuration
    created_at string
    Time when the distribution was created
    distribution_id string
    CDN distribution ID
    domains list(object)
    List of configured domains for the distribution
    errors list(string)
    List of distribution errors
    project_id string
    STACKIT project ID associated with the distribution
    status string
    Status of the distribution
    updated_at string
    Time when the distribution was last updated
    config CdnDistributionConfig
    The distribution configuration
    createdAt String
    Time when the distribution was created
    distributionId String
    CDN distribution ID
    domains List<CdnDistributionDomain>
    List of configured domains for the distribution
    errors List<String>
    List of distribution errors
    projectId String
    STACKIT project ID associated with the distribution
    status String
    Status of the distribution
    updatedAt String
    Time when the distribution was last updated
    config CdnDistributionConfig
    The distribution configuration
    createdAt string
    Time when the distribution was created
    distributionId string
    CDN distribution ID
    domains CdnDistributionDomain[]
    List of configured domains for the distribution
    errors string[]
    List of distribution errors
    projectId string
    STACKIT project ID associated with the distribution
    status string
    Status of the distribution
    updatedAt string
    Time when the distribution was last updated
    config CdnDistributionConfigArgs
    The distribution configuration
    created_at str
    Time when the distribution was created
    distribution_id str
    CDN distribution ID
    domains Sequence[CdnDistributionDomainArgs]
    List of configured domains for the distribution
    errors Sequence[str]
    List of distribution errors
    project_id str
    STACKIT project ID associated with the distribution
    status str
    Status of the distribution
    updated_at str
    Time when the distribution was last updated
    config Property Map
    The distribution configuration
    createdAt String
    Time when the distribution was created
    distributionId String
    CDN distribution ID
    domains List<Property Map>
    List of configured domains for the distribution
    errors List<String>
    List of distribution errors
    projectId String
    STACKIT project ID associated with the distribution
    status String
    Status of the distribution
    updatedAt String
    Time when the distribution was last updated

    Supporting Types

    CdnDistributionConfig, CdnDistributionConfigArgs

    Backend CdnDistributionConfigBackend
    The configured backend for the distribution
    Regions List<string>
    The configured regions where content will be hosted
    BlockedCountries List<string>
    The configured countries where distribution of content is blocked
    BlockedIps List<string>
    Restricts access to your content by specifying a list of blocked IPv4 addresses. This feature enhances security and privacy by preventing these addresses from accessing your distribution. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state; to clear it explicitly, set it to an empty list.
    DefaultCacheDuration string
    Sets the default cache duration for the distribution. The default cache duration is applied when a 'Cache-Control' header is not presented in the origin's response. We use ISO8601 duration format for cache duration (e.g. P1DT2H30M). Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    ForwardHostHeader bool
    Enable this allows the 'Host' header to be passed through to the origin.
    MonthlyLimitBytes int
    Sets the monthly limit of bandwidth in bytes that the pullzone is allowed to use. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    Optimizer CdnDistributionConfigOptimizer
    Configuration for the Image Optimizer. This is a paid feature that automatically optimizes images to reduce their file size for faster delivery, leading to improved website performance and a better user experience.
    Redirects CdnDistributionConfigRedirects
    A wrapper for a list of redirect rules that allows for redirect settings on a distribution
    StripResponseCookies bool
    Enable this to prevent origin-level cookies from being forwarded to the end user.
    Tls CdnDistributionConfigTls
    Configuration for TLS protocol versions. Note: Enabling older TLS versions (1.0, 1.1) is generally discouraged for security reasons.
    Waf CdnDistributionConfigWaf
    Configures the Web Application Firewall (WAF) for the distribution. If this block is undefined or removed from your configuration, the WAF mode will default to DISABLED and the type to FREE. All other WAF properties will retain their last known state in the API; if they were never defined, the API will apply its default settings.
    Backend CdnDistributionConfigBackend
    The configured backend for the distribution
    Regions []string
    The configured regions where content will be hosted
    BlockedCountries []string
    The configured countries where distribution of content is blocked
    BlockedIps []string
    Restricts access to your content by specifying a list of blocked IPv4 addresses. This feature enhances security and privacy by preventing these addresses from accessing your distribution. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state; to clear it explicitly, set it to an empty list.
    DefaultCacheDuration string
    Sets the default cache duration for the distribution. The default cache duration is applied when a 'Cache-Control' header is not presented in the origin's response. We use ISO8601 duration format for cache duration (e.g. P1DT2H30M). Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    ForwardHostHeader bool
    Enable this allows the 'Host' header to be passed through to the origin.
    MonthlyLimitBytes int
    Sets the monthly limit of bandwidth in bytes that the pullzone is allowed to use. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    Optimizer CdnDistributionConfigOptimizer
    Configuration for the Image Optimizer. This is a paid feature that automatically optimizes images to reduce their file size for faster delivery, leading to improved website performance and a better user experience.
    Redirects CdnDistributionConfigRedirects
    A wrapper for a list of redirect rules that allows for redirect settings on a distribution
    StripResponseCookies bool
    Enable this to prevent origin-level cookies from being forwarded to the end user.
    Tls CdnDistributionConfigTls
    Configuration for TLS protocol versions. Note: Enabling older TLS versions (1.0, 1.1) is generally discouraged for security reasons.
    Waf CdnDistributionConfigWaf
    Configures the Web Application Firewall (WAF) for the distribution. If this block is undefined or removed from your configuration, the WAF mode will default to DISABLED and the type to FREE. All other WAF properties will retain their last known state in the API; if they were never defined, the API will apply its default settings.
    backend object
    The configured backend for the distribution
    regions list(string)
    The configured regions where content will be hosted
    blocked_countries list(string)
    The configured countries where distribution of content is blocked
    blocked_ips list(string)
    Restricts access to your content by specifying a list of blocked IPv4 addresses. This feature enhances security and privacy by preventing these addresses from accessing your distribution. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state; to clear it explicitly, set it to an empty list.
    default_cache_duration string
    Sets the default cache duration for the distribution. The default cache duration is applied when a 'Cache-Control' header is not presented in the origin's response. We use ISO8601 duration format for cache duration (e.g. P1DT2H30M). Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    forward_host_header bool
    Enable this allows the 'Host' header to be passed through to the origin.
    monthly_limit_bytes number
    Sets the monthly limit of bandwidth in bytes that the pullzone is allowed to use. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    optimizer object
    Configuration for the Image Optimizer. This is a paid feature that automatically optimizes images to reduce their file size for faster delivery, leading to improved website performance and a better user experience.
    redirects object
    A wrapper for a list of redirect rules that allows for redirect settings on a distribution
    strip_response_cookies bool
    Enable this to prevent origin-level cookies from being forwarded to the end user.
    tls object
    Configuration for TLS protocol versions. Note: Enabling older TLS versions (1.0, 1.1) is generally discouraged for security reasons.
    waf object
    Configures the Web Application Firewall (WAF) for the distribution. If this block is undefined or removed from your configuration, the WAF mode will default to DISABLED and the type to FREE. All other WAF properties will retain their last known state in the API; if they were never defined, the API will apply its default settings.
    backend CdnDistributionConfigBackend
    The configured backend for the distribution
    regions List<String>
    The configured regions where content will be hosted
    blockedCountries List<String>
    The configured countries where distribution of content is blocked
    blockedIps List<String>
    Restricts access to your content by specifying a list of blocked IPv4 addresses. This feature enhances security and privacy by preventing these addresses from accessing your distribution. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state; to clear it explicitly, set it to an empty list.
    defaultCacheDuration String
    Sets the default cache duration for the distribution. The default cache duration is applied when a 'Cache-Control' header is not presented in the origin's response. We use ISO8601 duration format for cache duration (e.g. P1DT2H30M). Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    forwardHostHeader Boolean
    Enable this allows the 'Host' header to be passed through to the origin.
    monthlyLimitBytes Integer
    Sets the monthly limit of bandwidth in bytes that the pullzone is allowed to use. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    optimizer CdnDistributionConfigOptimizer
    Configuration for the Image Optimizer. This is a paid feature that automatically optimizes images to reduce their file size for faster delivery, leading to improved website performance and a better user experience.
    redirects CdnDistributionConfigRedirects
    A wrapper for a list of redirect rules that allows for redirect settings on a distribution
    stripResponseCookies Boolean
    Enable this to prevent origin-level cookies from being forwarded to the end user.
    tls CdnDistributionConfigTls
    Configuration for TLS protocol versions. Note: Enabling older TLS versions (1.0, 1.1) is generally discouraged for security reasons.
    waf CdnDistributionConfigWaf
    Configures the Web Application Firewall (WAF) for the distribution. If this block is undefined or removed from your configuration, the WAF mode will default to DISABLED and the type to FREE. All other WAF properties will retain their last known state in the API; if they were never defined, the API will apply its default settings.
    backend CdnDistributionConfigBackend
    The configured backend for the distribution
    regions string[]
    The configured regions where content will be hosted
    blockedCountries string[]
    The configured countries where distribution of content is blocked
    blockedIps string[]
    Restricts access to your content by specifying a list of blocked IPv4 addresses. This feature enhances security and privacy by preventing these addresses from accessing your distribution. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state; to clear it explicitly, set it to an empty list.
    defaultCacheDuration string
    Sets the default cache duration for the distribution. The default cache duration is applied when a 'Cache-Control' header is not presented in the origin's response. We use ISO8601 duration format for cache duration (e.g. P1DT2H30M). Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    forwardHostHeader boolean
    Enable this allows the 'Host' header to be passed through to the origin.
    monthlyLimitBytes number
    Sets the monthly limit of bandwidth in bytes that the pullzone is allowed to use. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    optimizer CdnDistributionConfigOptimizer
    Configuration for the Image Optimizer. This is a paid feature that automatically optimizes images to reduce their file size for faster delivery, leading to improved website performance and a better user experience.
    redirects CdnDistributionConfigRedirects
    A wrapper for a list of redirect rules that allows for redirect settings on a distribution
    stripResponseCookies boolean
    Enable this to prevent origin-level cookies from being forwarded to the end user.
    tls CdnDistributionConfigTls
    Configuration for TLS protocol versions. Note: Enabling older TLS versions (1.0, 1.1) is generally discouraged for security reasons.
    waf CdnDistributionConfigWaf
    Configures the Web Application Firewall (WAF) for the distribution. If this block is undefined or removed from your configuration, the WAF mode will default to DISABLED and the type to FREE. All other WAF properties will retain their last known state in the API; if they were never defined, the API will apply its default settings.
    backend CdnDistributionConfigBackend
    The configured backend for the distribution
    regions Sequence[str]
    The configured regions where content will be hosted
    blocked_countries Sequence[str]
    The configured countries where distribution of content is blocked
    blocked_ips Sequence[str]
    Restricts access to your content by specifying a list of blocked IPv4 addresses. This feature enhances security and privacy by preventing these addresses from accessing your distribution. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state; to clear it explicitly, set it to an empty list.
    default_cache_duration str
    Sets the default cache duration for the distribution. The default cache duration is applied when a 'Cache-Control' header is not presented in the origin's response. We use ISO8601 duration format for cache duration (e.g. P1DT2H30M). Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    forward_host_header bool
    Enable this allows the 'Host' header to be passed through to the origin.
    monthly_limit_bytes int
    Sets the monthly limit of bandwidth in bytes that the pullzone is allowed to use. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    optimizer CdnDistributionConfigOptimizer
    Configuration for the Image Optimizer. This is a paid feature that automatically optimizes images to reduce their file size for faster delivery, leading to improved website performance and a better user experience.
    redirects CdnDistributionConfigRedirects
    A wrapper for a list of redirect rules that allows for redirect settings on a distribution
    strip_response_cookies bool
    Enable this to prevent origin-level cookies from being forwarded to the end user.
    tls CdnDistributionConfigTls
    Configuration for TLS protocol versions. Note: Enabling older TLS versions (1.0, 1.1) is generally discouraged for security reasons.
    waf CdnDistributionConfigWaf
    Configures the Web Application Firewall (WAF) for the distribution. If this block is undefined or removed from your configuration, the WAF mode will default to DISABLED and the type to FREE. All other WAF properties will retain their last known state in the API; if they were never defined, the API will apply its default settings.
    backend Property Map
    The configured backend for the distribution
    regions List<String>
    The configured regions where content will be hosted
    blockedCountries List<String>
    The configured countries where distribution of content is blocked
    blockedIps List<String>
    Restricts access to your content by specifying a list of blocked IPv4 addresses. This feature enhances security and privacy by preventing these addresses from accessing your distribution. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state; to clear it explicitly, set it to an empty list.
    defaultCacheDuration String
    Sets the default cache duration for the distribution. The default cache duration is applied when a 'Cache-Control' header is not presented in the origin's response. We use ISO8601 duration format for cache duration (e.g. P1DT2H30M). Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    forwardHostHeader Boolean
    Enable this allows the 'Host' header to be passed through to the origin.
    monthlyLimitBytes Number
    Sets the monthly limit of bandwidth in bytes that the pullzone is allowed to use. Note: once a value is set, removing the attribute from your configuration will retain the last known value in state.
    optimizer Property Map
    Configuration for the Image Optimizer. This is a paid feature that automatically optimizes images to reduce their file size for faster delivery, leading to improved website performance and a better user experience.
    redirects Property Map
    A wrapper for a list of redirect rules that allows for redirect settings on a distribution
    stripResponseCookies Boolean
    Enable this to prevent origin-level cookies from being forwarded to the end user.
    tls Property Map
    Configuration for TLS protocol versions. Note: Enabling older TLS versions (1.0, 1.1) is generally discouraged for security reasons.
    waf Property Map
    Configures the Web Application Firewall (WAF) for the distribution. If this block is undefined or removed from your configuration, the WAF mode will default to DISABLED and the type to FREE. All other WAF properties will retain their last known state in the API; if they were never defined, the API will apply its default settings.

    CdnDistributionConfigBackend, CdnDistributionConfigBackendArgs

    Type string
    The configured backend type. Possible values are: http, bucket.
    BucketUrl string
    The URL of the bucket (e.g. https://s3.example.com). Required if type is 'bucket'.
    Credentials CdnDistributionConfigBackendCredentials
    The credentials for the bucket. Required if type is 'bucket'.
    Geofencing Dictionary<string, ImmutableArray<string>>
    The configured type http to configure countries where content is allowed. A map of URLs to a list of countries
    OriginRequestHeaders Dictionary<string, string>
    The configured type http origin request headers for the backend
    OriginUrl string
    The configured backend type http for the distribution
    Region string
    The region where the bucket is hosted. Required if type is 'bucket'.
    Type string
    The configured backend type. Possible values are: http, bucket.
    BucketUrl string
    The URL of the bucket (e.g. https://s3.example.com). Required if type is 'bucket'.
    Credentials CdnDistributionConfigBackendCredentials
    The credentials for the bucket. Required if type is 'bucket'.
    Geofencing map[string][]string
    The configured type http to configure countries where content is allowed. A map of URLs to a list of countries
    OriginRequestHeaders map[string]string
    The configured type http origin request headers for the backend
    OriginUrl string
    The configured backend type http for the distribution
    Region string
    The region where the bucket is hosted. Required if type is 'bucket'.
    type string
    The configured backend type. Possible values are: http, bucket.
    bucket_url string
    The URL of the bucket (e.g. https://s3.example.com). Required if type is 'bucket'.
    credentials object
    The credentials for the bucket. Required if type is 'bucket'.
    geofencing map(list(string))
    The configured type http to configure countries where content is allowed. A map of URLs to a list of countries
    origin_request_headers map(string)
    The configured type http origin request headers for the backend
    origin_url string
    The configured backend type http for the distribution
    region string
    The region where the bucket is hosted. Required if type is 'bucket'.
    type String
    The configured backend type. Possible values are: http, bucket.
    bucketUrl String
    The URL of the bucket (e.g. https://s3.example.com). Required if type is 'bucket'.
    credentials CdnDistributionConfigBackendCredentials
    The credentials for the bucket. Required if type is 'bucket'.
    geofencing Map<String,List<String>>
    The configured type http to configure countries where content is allowed. A map of URLs to a list of countries
    originRequestHeaders Map<String,String>
    The configured type http origin request headers for the backend
    originUrl String
    The configured backend type http for the distribution
    region String
    The region where the bucket is hosted. Required if type is 'bucket'.
    type string
    The configured backend type. Possible values are: http, bucket.
    bucketUrl string
    The URL of the bucket (e.g. https://s3.example.com). Required if type is 'bucket'.
    credentials CdnDistributionConfigBackendCredentials
    The credentials for the bucket. Required if type is 'bucket'.
    geofencing {[key: string]: string[]}
    The configured type http to configure countries where content is allowed. A map of URLs to a list of countries
    originRequestHeaders {[key: string]: string}
    The configured type http origin request headers for the backend
    originUrl string
    The configured backend type http for the distribution
    region string
    The region where the bucket is hosted. Required if type is 'bucket'.
    type str
    The configured backend type. Possible values are: http, bucket.
    bucket_url str
    The URL of the bucket (e.g. https://s3.example.com). Required if type is 'bucket'.
    credentials CdnDistributionConfigBackendCredentials
    The credentials for the bucket. Required if type is 'bucket'.
    geofencing Mapping[str, Sequence[str]]
    The configured type http to configure countries where content is allowed. A map of URLs to a list of countries
    origin_request_headers Mapping[str, str]
    The configured type http origin request headers for the backend
    origin_url str
    The configured backend type http for the distribution
    region str
    The region where the bucket is hosted. Required if type is 'bucket'.
    type String
    The configured backend type. Possible values are: http, bucket.
    bucketUrl String
    The URL of the bucket (e.g. https://s3.example.com). Required if type is 'bucket'.
    credentials Property Map
    The credentials for the bucket. Required if type is 'bucket'.
    geofencing Map<List<String>>
    The configured type http to configure countries where content is allowed. A map of URLs to a list of countries
    originRequestHeaders Map<String>
    The configured type http origin request headers for the backend
    originUrl String
    The configured backend type http for the distribution
    region String
    The region where the bucket is hosted. Required if type is 'bucket'.

    CdnDistributionConfigBackendCredentials, CdnDistributionConfigBackendCredentialsArgs

    AccessKeyId string
    The access key for the bucket. Required if type is 'bucket'.
    SecretAccessKey string
    The access key for the bucket. Required if type is 'bucket'.
    AccessKeyId string
    The access key for the bucket. Required if type is 'bucket'.
    SecretAccessKey string
    The access key for the bucket. Required if type is 'bucket'.
    access_key_id string
    The access key for the bucket. Required if type is 'bucket'.
    secret_access_key string
    The access key for the bucket. Required if type is 'bucket'.
    accessKeyId String
    The access key for the bucket. Required if type is 'bucket'.
    secretAccessKey String
    The access key for the bucket. Required if type is 'bucket'.
    accessKeyId string
    The access key for the bucket. Required if type is 'bucket'.
    secretAccessKey string
    The access key for the bucket. Required if type is 'bucket'.
    access_key_id str
    The access key for the bucket. Required if type is 'bucket'.
    secret_access_key str
    The access key for the bucket. Required if type is 'bucket'.
    accessKeyId String
    The access key for the bucket. Required if type is 'bucket'.
    secretAccessKey String
    The access key for the bucket. Required if type is 'bucket'.

    CdnDistributionConfigOptimizer, CdnDistributionConfigOptimizerArgs

    Enabled bool
    Enabled bool
    enabled bool
    enabled Boolean
    enabled boolean
    enabled bool
    enabled Boolean

    CdnDistributionConfigRedirects, CdnDistributionConfigRedirectsArgs

    Rules List<CdnDistributionConfigRedirectsRule>
    A list of redirect rules. The order of rules matters for evaluation
    Rules []CdnDistributionConfigRedirectsRule
    A list of redirect rules. The order of rules matters for evaluation
    rules list(object)
    A list of redirect rules. The order of rules matters for evaluation
    rules List<CdnDistributionConfigRedirectsRule>
    A list of redirect rules. The order of rules matters for evaluation
    rules CdnDistributionConfigRedirectsRule[]
    A list of redirect rules. The order of rules matters for evaluation
    rules Sequence[CdnDistributionConfigRedirectsRule]
    A list of redirect rules. The order of rules matters for evaluation
    rules List<Property Map>
    A list of redirect rules. The order of rules matters for evaluation

    CdnDistributionConfigRedirectsRule, CdnDistributionConfigRedirectsRuleArgs

    Matchers List<CdnDistributionConfigRedirectsRuleMatcher>
    A list of matchers that define when this rule should apply. At least one matcher is required
    StatusCode int
    The HTTP status code for the redirect. Must be one of 301, 302, 303, 307, or 308.
    TargetUrl string
    The target URL to redirect to. Must be a valid URI
    Description string
    An optional description for the redirect rule
    Enabled bool
    A toggle to enable or disable the redirect rule. Default to true
    RuleMatchCondition string
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    Matchers []CdnDistributionConfigRedirectsRuleMatcher
    A list of matchers that define when this rule should apply. At least one matcher is required
    StatusCode int
    The HTTP status code for the redirect. Must be one of 301, 302, 303, 307, or 308.
    TargetUrl string
    The target URL to redirect to. Must be a valid URI
    Description string
    An optional description for the redirect rule
    Enabled bool
    A toggle to enable or disable the redirect rule. Default to true
    RuleMatchCondition string
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    matchers list(object)
    A list of matchers that define when this rule should apply. At least one matcher is required
    status_code number
    The HTTP status code for the redirect. Must be one of 301, 302, 303, 307, or 308.
    target_url string
    The target URL to redirect to. Must be a valid URI
    description string
    An optional description for the redirect rule
    enabled bool
    A toggle to enable or disable the redirect rule. Default to true
    rule_match_condition string
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    matchers List<CdnDistributionConfigRedirectsRuleMatcher>
    A list of matchers that define when this rule should apply. At least one matcher is required
    statusCode Integer
    The HTTP status code for the redirect. Must be one of 301, 302, 303, 307, or 308.
    targetUrl String
    The target URL to redirect to. Must be a valid URI
    description String
    An optional description for the redirect rule
    enabled Boolean
    A toggle to enable or disable the redirect rule. Default to true
    ruleMatchCondition String
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    matchers CdnDistributionConfigRedirectsRuleMatcher[]
    A list of matchers that define when this rule should apply. At least one matcher is required
    statusCode number
    The HTTP status code for the redirect. Must be one of 301, 302, 303, 307, or 308.
    targetUrl string
    The target URL to redirect to. Must be a valid URI
    description string
    An optional description for the redirect rule
    enabled boolean
    A toggle to enable or disable the redirect rule. Default to true
    ruleMatchCondition string
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    matchers Sequence[CdnDistributionConfigRedirectsRuleMatcher]
    A list of matchers that define when this rule should apply. At least one matcher is required
    status_code int
    The HTTP status code for the redirect. Must be one of 301, 302, 303, 307, or 308.
    target_url str
    The target URL to redirect to. Must be a valid URI
    description str
    An optional description for the redirect rule
    enabled bool
    A toggle to enable or disable the redirect rule. Default to true
    rule_match_condition str
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    matchers List<Property Map>
    A list of matchers that define when this rule should apply. At least one matcher is required
    statusCode Number
    The HTTP status code for the redirect. Must be one of 301, 302, 303, 307, or 308.
    targetUrl String
    The target URL to redirect to. Must be a valid URI
    description String
    An optional description for the redirect rule
    enabled Boolean
    A toggle to enable or disable the redirect rule. Default to true
    ruleMatchCondition String
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.

    CdnDistributionConfigRedirectsRuleMatcher, CdnDistributionConfigRedirectsRuleMatcherArgs

    Values List<string>
    A list of glob patterns to match against the request path. At least one value is required. Examples: "/shop/" or "/img/*"
    ValueMatchCondition string
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    Values []string
    A list of glob patterns to match against the request path. At least one value is required. Examples: "/shop/" or "/img/*"
    ValueMatchCondition string
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    values list(string)
    A list of glob patterns to match against the request path. At least one value is required. Examples: "/shop/" or "/img/*"
    value_match_condition string
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    values List<String>
    A list of glob patterns to match against the request path. At least one value is required. Examples: "/shop/" or "/img/*"
    valueMatchCondition String
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    values string[]
    A list of glob patterns to match against the request path. At least one value is required. Examples: "/shop/" or "/img/*"
    valueMatchCondition string
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    values Sequence[str]
    A list of glob patterns to match against the request path. At least one value is required. Examples: "/shop/" or "/img/*"
    value_match_condition str
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.
    values List<String>
    A list of glob patterns to match against the request path. At least one value is required. Examples: "/shop/" or "/img/*"
    valueMatchCondition String
    Defines how multiple matchers within this rule are combined (ALL, ANY, NONE). Defaults to ANY.

    CdnDistributionConfigTls, CdnDistributionConfigTlsArgs

    EnableTls10 bool
    If set to true, the distribution will accept connections using TLS 1.1.
    EnableTls11 bool
    If set to true, the distribution will accept connections using TLS 1.0.
    EnableTls10 bool
    If set to true, the distribution will accept connections using TLS 1.1.
    EnableTls11 bool
    If set to true, the distribution will accept connections using TLS 1.0.
    enable_tls10 bool
    If set to true, the distribution will accept connections using TLS 1.1.
    enable_tls11 bool
    If set to true, the distribution will accept connections using TLS 1.0.
    enableTls10 Boolean
    If set to true, the distribution will accept connections using TLS 1.1.
    enableTls11 Boolean
    If set to true, the distribution will accept connections using TLS 1.0.
    enableTls10 boolean
    If set to true, the distribution will accept connections using TLS 1.1.
    enableTls11 boolean
    If set to true, the distribution will accept connections using TLS 1.0.
    enable_tls10 bool
    If set to true, the distribution will accept connections using TLS 1.1.
    enable_tls11 bool
    If set to true, the distribution will accept connections using TLS 1.0.
    enableTls10 Boolean
    If set to true, the distribution will accept connections using TLS 1.1.
    enableTls11 Boolean
    If set to true, the distribution will accept connections using TLS 1.0.

    CdnDistributionConfigWaf, CdnDistributionConfigWafArgs

    AllowedHttpMethods List<string>
    Restricts which HTTP methods the distribution accepts. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE, PATCH.
    AllowedHttpVersions List<string>
    Restricts which HTTP protocol versions are accepted. If provided, the set must contain at least one item. If omitted, the API applies the following defaults: HTTP/1.0, HTTP/1.1, HTTP/2, HTTP/2.0.
    AllowedRequestContentTypes List<string>
    Restricts which Content-Type headers are accepted in request bodies. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: application/x-www-form-urlencoded, multipart/form-data, multipart/related, text/xml, application/xml, application/soap+xml, application/x-amf, application/json, application/octet-stream, application/csp-report, application/xss-auditor-report, text/plain.
    DisabledRuleCollectionIds List<string>
    Set of WAF Collection IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    DisabledRuleGroupIds List<string>
    Set of WAF Rule Group IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    DisabledRuleIds List<string>
    Set of WAF rule IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly disabled Rule ID takes precedence over an enabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    EnabledRuleCollectionIds List<string>
    Set of WAF Collection IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    EnabledRuleGroupIds List<string>
    Set of WAF Rule Group IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    EnabledRuleIds List<string>
    Set of WAF rule IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly enabled Rule ID takes precedence over a disabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    LogOnlyRuleCollectionIds List<string>
    Set of WAF Collection IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    LogOnlyRuleGroupIds List<string>
    Set of WAF Rule Group IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    LogOnlyRuleIds List<string>
    Set of WAF rule IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    Mode string
    The operating mode of the WAF. 'ENABLED' actively blocks threats, 'LOG_ONLY' logs matches without blocking, and 'DISABLED' completely turns off inspection. Defaults to 'DISABLED'.
    ParanoiaLevel string
    Defines how aggressively the WAF should act on requests. Valid values are 'L1' to 'L4'. Case you removed waf will retain the last known state and if omitted, The API applies the following default 'L1'.
    Type string
    The tier of the WAF. Valid values are 'FREE' or 'PREMIUM'. Defaults to 'FREE'.
    AllowedHttpMethods []string
    Restricts which HTTP methods the distribution accepts. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE, PATCH.
    AllowedHttpVersions []string
    Restricts which HTTP protocol versions are accepted. If provided, the set must contain at least one item. If omitted, the API applies the following defaults: HTTP/1.0, HTTP/1.1, HTTP/2, HTTP/2.0.
    AllowedRequestContentTypes []string
    Restricts which Content-Type headers are accepted in request bodies. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: application/x-www-form-urlencoded, multipart/form-data, multipart/related, text/xml, application/xml, application/soap+xml, application/x-amf, application/json, application/octet-stream, application/csp-report, application/xss-auditor-report, text/plain.
    DisabledRuleCollectionIds []string
    Set of WAF Collection IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    DisabledRuleGroupIds []string
    Set of WAF Rule Group IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    DisabledRuleIds []string
    Set of WAF rule IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly disabled Rule ID takes precedence over an enabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    EnabledRuleCollectionIds []string
    Set of WAF Collection IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    EnabledRuleGroupIds []string
    Set of WAF Rule Group IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    EnabledRuleIds []string
    Set of WAF rule IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly enabled Rule ID takes precedence over a disabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    LogOnlyRuleCollectionIds []string
    Set of WAF Collection IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    LogOnlyRuleGroupIds []string
    Set of WAF Rule Group IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    LogOnlyRuleIds []string
    Set of WAF rule IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    Mode string
    The operating mode of the WAF. 'ENABLED' actively blocks threats, 'LOG_ONLY' logs matches without blocking, and 'DISABLED' completely turns off inspection. Defaults to 'DISABLED'.
    ParanoiaLevel string
    Defines how aggressively the WAF should act on requests. Valid values are 'L1' to 'L4'. Case you removed waf will retain the last known state and if omitted, The API applies the following default 'L1'.
    Type string
    The tier of the WAF. Valid values are 'FREE' or 'PREMIUM'. Defaults to 'FREE'.
    allowed_http_methods list(string)
    Restricts which HTTP methods the distribution accepts. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE, PATCH.
    allowed_http_versions list(string)
    Restricts which HTTP protocol versions are accepted. If provided, the set must contain at least one item. If omitted, the API applies the following defaults: HTTP/1.0, HTTP/1.1, HTTP/2, HTTP/2.0.
    allowed_request_content_types list(string)
    Restricts which Content-Type headers are accepted in request bodies. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: application/x-www-form-urlencoded, multipart/form-data, multipart/related, text/xml, application/xml, application/soap+xml, application/x-amf, application/json, application/octet-stream, application/csp-report, application/xss-auditor-report, text/plain.
    disabled_rule_collection_ids list(string)
    Set of WAF Collection IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabled_rule_group_ids list(string)
    Set of WAF Rule Group IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabled_rule_ids list(string)
    Set of WAF rule IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly disabled Rule ID takes precedence over an enabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabled_rule_collection_ids list(string)
    Set of WAF Collection IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabled_rule_group_ids list(string)
    Set of WAF Rule Group IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabled_rule_ids list(string)
    Set of WAF rule IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly enabled Rule ID takes precedence over a disabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    log_only_rule_collection_ids list(string)
    Set of WAF Collection IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    log_only_rule_group_ids list(string)
    Set of WAF Rule Group IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    log_only_rule_ids list(string)
    Set of WAF rule IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    mode string
    The operating mode of the WAF. 'ENABLED' actively blocks threats, 'LOG_ONLY' logs matches without blocking, and 'DISABLED' completely turns off inspection. Defaults to 'DISABLED'.
    paranoia_level string
    Defines how aggressively the WAF should act on requests. Valid values are 'L1' to 'L4'. Case you removed waf will retain the last known state and if omitted, The API applies the following default 'L1'.
    type string
    The tier of the WAF. Valid values are 'FREE' or 'PREMIUM'. Defaults to 'FREE'.
    allowedHttpMethods List<String>
    Restricts which HTTP methods the distribution accepts. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE, PATCH.
    allowedHttpVersions List<String>
    Restricts which HTTP protocol versions are accepted. If provided, the set must contain at least one item. If omitted, the API applies the following defaults: HTTP/1.0, HTTP/1.1, HTTP/2, HTTP/2.0.
    allowedRequestContentTypes List<String>
    Restricts which Content-Type headers are accepted in request bodies. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: application/x-www-form-urlencoded, multipart/form-data, multipart/related, text/xml, application/xml, application/soap+xml, application/x-amf, application/json, application/octet-stream, application/csp-report, application/xss-auditor-report, text/plain.
    disabledRuleCollectionIds List<String>
    Set of WAF Collection IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabledRuleGroupIds List<String>
    Set of WAF Rule Group IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabledRuleIds List<String>
    Set of WAF rule IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly disabled Rule ID takes precedence over an enabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabledRuleCollectionIds List<String>
    Set of WAF Collection IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabledRuleGroupIds List<String>
    Set of WAF Rule Group IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabledRuleIds List<String>
    Set of WAF rule IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly enabled Rule ID takes precedence over a disabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    logOnlyRuleCollectionIds List<String>
    Set of WAF Collection IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    logOnlyRuleGroupIds List<String>
    Set of WAF Rule Group IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    logOnlyRuleIds List<String>
    Set of WAF rule IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    mode String
    The operating mode of the WAF. 'ENABLED' actively blocks threats, 'LOG_ONLY' logs matches without blocking, and 'DISABLED' completely turns off inspection. Defaults to 'DISABLED'.
    paranoiaLevel String
    Defines how aggressively the WAF should act on requests. Valid values are 'L1' to 'L4'. Case you removed waf will retain the last known state and if omitted, The API applies the following default 'L1'.
    type String
    The tier of the WAF. Valid values are 'FREE' or 'PREMIUM'. Defaults to 'FREE'.
    allowedHttpMethods string[]
    Restricts which HTTP methods the distribution accepts. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE, PATCH.
    allowedHttpVersions string[]
    Restricts which HTTP protocol versions are accepted. If provided, the set must contain at least one item. If omitted, the API applies the following defaults: HTTP/1.0, HTTP/1.1, HTTP/2, HTTP/2.0.
    allowedRequestContentTypes string[]
    Restricts which Content-Type headers are accepted in request bodies. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: application/x-www-form-urlencoded, multipart/form-data, multipart/related, text/xml, application/xml, application/soap+xml, application/x-amf, application/json, application/octet-stream, application/csp-report, application/xss-auditor-report, text/plain.
    disabledRuleCollectionIds string[]
    Set of WAF Collection IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabledRuleGroupIds string[]
    Set of WAF Rule Group IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabledRuleIds string[]
    Set of WAF rule IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly disabled Rule ID takes precedence over an enabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabledRuleCollectionIds string[]
    Set of WAF Collection IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabledRuleGroupIds string[]
    Set of WAF Rule Group IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabledRuleIds string[]
    Set of WAF rule IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly enabled Rule ID takes precedence over a disabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    logOnlyRuleCollectionIds string[]
    Set of WAF Collection IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    logOnlyRuleGroupIds string[]
    Set of WAF Rule Group IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    logOnlyRuleIds string[]
    Set of WAF rule IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    mode string
    The operating mode of the WAF. 'ENABLED' actively blocks threats, 'LOG_ONLY' logs matches without blocking, and 'DISABLED' completely turns off inspection. Defaults to 'DISABLED'.
    paranoiaLevel string
    Defines how aggressively the WAF should act on requests. Valid values are 'L1' to 'L4'. Case you removed waf will retain the last known state and if omitted, The API applies the following default 'L1'.
    type string
    The tier of the WAF. Valid values are 'FREE' or 'PREMIUM'. Defaults to 'FREE'.
    allowed_http_methods Sequence[str]
    Restricts which HTTP methods the distribution accepts. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE, PATCH.
    allowed_http_versions Sequence[str]
    Restricts which HTTP protocol versions are accepted. If provided, the set must contain at least one item. If omitted, the API applies the following defaults: HTTP/1.0, HTTP/1.1, HTTP/2, HTTP/2.0.
    allowed_request_content_types Sequence[str]
    Restricts which Content-Type headers are accepted in request bodies. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: application/x-www-form-urlencoded, multipart/form-data, multipart/related, text/xml, application/xml, application/soap+xml, application/x-amf, application/json, application/octet-stream, application/csp-report, application/xss-auditor-report, text/plain.
    disabled_rule_collection_ids Sequence[str]
    Set of WAF Collection IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabled_rule_group_ids Sequence[str]
    Set of WAF Rule Group IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabled_rule_ids Sequence[str]
    Set of WAF rule IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly disabled Rule ID takes precedence over an enabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabled_rule_collection_ids Sequence[str]
    Set of WAF Collection IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabled_rule_group_ids Sequence[str]
    Set of WAF Rule Group IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabled_rule_ids Sequence[str]
    Set of WAF rule IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly enabled Rule ID takes precedence over a disabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    log_only_rule_collection_ids Sequence[str]
    Set of WAF Collection IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    log_only_rule_group_ids Sequence[str]
    Set of WAF Rule Group IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    log_only_rule_ids Sequence[str]
    Set of WAF rule IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    mode str
    The operating mode of the WAF. 'ENABLED' actively blocks threats, 'LOG_ONLY' logs matches without blocking, and 'DISABLED' completely turns off inspection. Defaults to 'DISABLED'.
    paranoia_level str
    Defines how aggressively the WAF should act on requests. Valid values are 'L1' to 'L4'. Case you removed waf will retain the last known state and if omitted, The API applies the following default 'L1'.
    type str
    The tier of the WAF. Valid values are 'FREE' or 'PREMIUM'. Defaults to 'FREE'.
    allowedHttpMethods List<String>
    Restricts which HTTP methods the distribution accepts. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE, PATCH.
    allowedHttpVersions List<String>
    Restricts which HTTP protocol versions are accepted. If provided, the set must contain at least one item. If omitted, the API applies the following defaults: HTTP/1.0, HTTP/1.1, HTTP/2, HTTP/2.0.
    allowedRequestContentTypes List<String>
    Restricts which Content-Type headers are accepted in request bodies. If provided, the set must contain at least one item. Case you removed waf will retain the last known state and if omitted, the API applies the following defaults: application/x-www-form-urlencoded, multipart/form-data, multipart/related, text/xml, application/xml, application/soap+xml, application/x-amf, application/json, application/octet-stream, application/csp-report, application/xss-auditor-report, text/plain.
    disabledRuleCollectionIds List<String>
    Set of WAF Collection IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabledRuleGroupIds List<String>
    Set of WAF Rule Group IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    disabledRuleIds List<String>
    Set of WAF rule IDs explicitly disabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly disabled Rule ID takes precedence over an enabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabledRuleCollectionIds List<String>
    Set of WAF Collection IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabledRuleGroupIds List<String>
    Set of WAF Rule Group IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    enabledRuleIds List<String>
    Set of WAF rule IDs explicitly enabled. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. For example, an explicitly enabled Rule ID takes precedence over a disabled Group ID. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    logOnlyRuleCollectionIds List<String>
    Set of WAF Collection IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. To view available rule collections, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    logOnlyRuleGroupIds List<String>
    Set of WAF Rule Group IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Groups override Collections. To view available rule groups, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    logOnlyRuleIds List<String>
    Set of WAF rule IDs explicitly marked as Log Only. Can be set to an empty set to clear previously set rules. Case you removed waf will retain the last known state. Precedence hierarchy: Specific Rules override Groups. To view available rules, please consult the API documentation: https://docs.api.eu01.stackit.cloud/documentation/cdn/version/v1#tag/WAF/operation/ListWafCollections
    mode String
    The operating mode of the WAF. 'ENABLED' actively blocks threats, 'LOG_ONLY' logs matches without blocking, and 'DISABLED' completely turns off inspection. Defaults to 'DISABLED'.
    paranoiaLevel String
    Defines how aggressively the WAF should act on requests. Valid values are 'L1' to 'L4'. Case you removed waf will retain the last known state and if omitted, The API applies the following default 'L1'.
    type String
    The tier of the WAF. Valid values are 'FREE' or 'PREMIUM'. Defaults to 'FREE'.

    CdnDistributionDomain, CdnDistributionDomainArgs

    Errors List<string>
    List of domain errors
    Name string
    The name of the domain
    Status string
    The status of the domain
    Type string
    The type of the domain. Each distribution has one domain of type "managed", and domains of type "custom" may be additionally created by the user
    Errors []string
    List of domain errors
    Name string
    The name of the domain
    Status string
    The status of the domain
    Type string
    The type of the domain. Each distribution has one domain of type "managed", and domains of type "custom" may be additionally created by the user
    errors list(string)
    List of domain errors
    name string
    The name of the domain
    status string
    The status of the domain
    type string
    The type of the domain. Each distribution has one domain of type "managed", and domains of type "custom" may be additionally created by the user
    errors List<String>
    List of domain errors
    name String
    The name of the domain
    status String
    The status of the domain
    type String
    The type of the domain. Each distribution has one domain of type "managed", and domains of type "custom" may be additionally created by the user
    errors string[]
    List of domain errors
    name string
    The name of the domain
    status string
    The status of the domain
    type string
    The type of the domain. Each distribution has one domain of type "managed", and domains of type "custom" may be additionally created by the user
    errors Sequence[str]
    List of domain errors
    name str
    The name of the domain
    status str
    The status of the domain
    type str
    The type of the domain. Each distribution has one domain of type "managed", and domains of type "custom" may be additionally created by the user
    errors List<String>
    List of domain errors
    name String
    The name of the domain
    status String
    The status of the domain
    type String
    The type of the domain. Each distribution has one domain of type "managed", and domains of type "custom" may be additionally created by the user

    Import

    In Terraform v1.5.0 and later, the + "" + import + “" + block can be used with the + "” + id + “" + attribute, for example:

    # Only use the import statement, if you want to import an existing cdn distribution
import {
  to = stackit_cdn_distribution.import-example
  id = "${var.project_id},${var.distribution_id}"
}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    stackit stackitcloud/pulumi-stackit
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the stackit Terraform Provider.
    stackit logo
    Viewing docs for stackit v0.0.7
    published on Monday, Aug 17, 2026 by stackitcloud
    Schema (JSON)
    stackitcloud/pulumi-stackit

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial