1. Packages
  2. Tencentcloud Provider
  3. API Docs
  4. TeoWebSecurityTemplate
Viewing docs for tencentcloud 1.82.79
published on Friday, Mar 27, 2026 by tencentcloudstack
tencentcloud logo
Viewing docs for tencentcloud 1.82.79
published on Friday, Mar 27, 2026 by tencentcloudstack

    Provides a resource to create a teo web security template

    NOTE: The current resources do not support managed_rule_groups.

    Example Usage

    Basic usage

    import * as pulumi from "@pulumi/pulumi";
    import * as tencentcloud from "@pulumi/tencentcloud";
    
    const webSecurityTemplate = new tencentcloud.TeoWebSecurityTemplate("web_security_template", {
        templateName: "tf-test",
        zoneId: "zone-3fkff38fyw8s",
        securityPolicy: {
            botManagement: {
                enabled: "on",
                basicBotSettings: {
                    botIntelligence: {
                        enabled: "on",
                        botRatings: {
                            highRiskBotRequestsAction: {
                                name: "Monitor",
                            },
                            humanRequestsAction: {
                                name: "Allow",
                            },
                            likelyBotRequestsAction: {
                                name: "Monitor",
                            },
                            verifiedBotRequestsAction: {
                                name: "Monitor",
                            },
                        },
                    },
                    ipReputation: {
                        enabled: "on",
                        ipReputationGroup: {},
                    },
                    knownBotCategories: {
                        botManagementActionOverrides: [{
                            ids: ["9395241960"],
                            action: {
                                name: "Allow",
                            },
                        }],
                    },
                    searchEngineBots: {
                        botManagementActionOverrides: [{
                            ids: ["9126905504"],
                            action: {
                                name: "Deny",
                            },
                        }],
                    },
                    sourceIdc: {
                        botManagementActionOverrides: [{
                            ids: [
                                "8868370049",
                                "8868370048",
                            ],
                            action: {
                                name: "Deny",
                            },
                        }],
                    },
                },
                browserImpersonationDetection: {
                    rules: [{
                        condition: "${http.request.uri.path} like ['/*'] and ${http.request.method} in ['get']",
                        enabled: "on",
                        name: "Block Non-Browser Crawler Access",
                        action: {
                            botSessionValidation: {
                                issueNewBotSessionCookie: "on",
                                maxNewSessionTriggerConfig: {
                                    maxNewSessionCountInterval: "10s",
                                    maxNewSessionCountThreshold: 300,
                                },
                                sessionExpiredAction: {
                                    name: "Deny",
                                },
                                sessionInvalidAction: {
                                    name: "Deny",
                                    denyActionParameters: {
                                        blockIp: null,
                                        blockIpDuration: null,
                                        errorPageId: null,
                                        responseCode: null,
                                        returnCustomPage: null,
                                        stall: "on",
                                    },
                                },
                                sessionRateControl: {
                                    enabled: "off",
                                },
                            },
                        },
                    }],
                },
                clientAttestationRules: {},
                customRules: {
                    rules: [{
                        condition: "${http.request.ip} in ['222.22.22.0/24'] and ${http.request.headers['user-agent']} contain ['cURL']",
                        enabled: "on",
                        name: "Login API Request Surge Protection",
                        priority: 50,
                        actions: [{
                            weight: 100,
                            securityAction: {
                                name: "Deny",
                                denyActionParameters: {
                                    blockIp: null,
                                    blockIpDuration: null,
                                    errorPageId: null,
                                    responseCode: null,
                                    returnCustomPage: null,
                                    stall: "on",
                                },
                            },
                        }],
                    }],
                },
            },
            customRules: {
                rules: [
                    {
                        condition: "${http.request.headers['user-agent']} contain ['curl/','Wget/','ApacheBench/']",
                        enabled: "on",
                        name: "Malicious User-Agent Blacklist",
                        priority: 50,
                        ruleType: "PreciseMatchRule",
                        action: {
                            name: "JSChallenge",
                        },
                    },
                    {
                        condition: "${http.request.ip} in ['36']",
                        enabled: "on",
                        name: "Custom Rule",
                        priority: 0,
                        ruleType: "BasicAccessRule",
                        action: {
                            name: "Monitor",
                        },
                    },
                ],
            },
            exceptionRules: {
                rules: [
                    {
                        condition: "${http.request.method} in ['post'] and ${http.request.uri.path} in ['/api/EventLogUpload']",
                        enabled: "on",
                        managedRuleGroupsForExceptions: [],
                        managedRulesForExceptions: [],
                        name: "High Frequency API Skip Rate Limit 1",
                        skipOption: "SkipOnAllRequestFields",
                        skipScope: "WebSecurityModules",
                        webSecurityModulesForExceptions: ["websec-mod-adaptive-control"],
                    },
                    {
                        condition: "${http.request.ip} in ['123.123.123.0/24']",
                        enabled: "on",
                        managedRuleGroupsForExceptions: [],
                        managedRulesForExceptions: [],
                        name: "IP Whitelist 1",
                        skipOption: "SkipOnAllRequestFields",
                        skipScope: "WebSecurityModules",
                        webSecurityModulesForExceptions: [
                            "websec-mod-adaptive-control",
                            "websec-mod-bot",
                            "websec-mod-custom-rules",
                            "websec-mod-managed-rules",
                            "websec-mod-rate-limiting",
                        ],
                    },
                ],
            },
            httpDdosProtection: {
                adaptiveFrequencyControl: {
                    enabled: "on",
                    sensitivity: "Loose",
                    action: {
                        name: "Challenge",
                        challengeActionParameters: {
                            attesterId: null,
                            challengeOption: "JSChallenge",
                            interval: null,
                        },
                    },
                },
                bandwidthAbuseDefense: {
                    enabled: "on",
                    action: {
                        name: "Deny",
                    },
                },
                clientFiltering: {
                    enabled: "on",
                    action: {
                        name: "Challenge",
                        challengeActionParameters: {
                            attesterId: null,
                            challengeOption: "JSChallenge",
                            interval: null,
                        },
                    },
                },
                slowAttackDefense: {
                    enabled: "on",
                    action: {
                        name: "Deny",
                    },
                    minimalRequestBodyTransferRate: {
                        countingPeriod: "60s",
                        enabled: "off",
                        minimalAvgTransferRateThreshold: "80bps",
                    },
                    requestBodyTransferTimeout: {
                        enabled: "off",
                        idleTimeout: "5s",
                    },
                },
            },
            rateLimitingRules: {
                rules: [{
                    actionDuration: "30m",
                    condition: "${http.request.uri.path} contain ['/checkout/submit']",
                    countBies: ["http.request.ip"],
                    countingPeriod: "60s",
                    enabled: "on",
                    maxRequestThreshold: 300,
                    name: "Single IP Request Rate Limit 1",
                    priority: 50,
                    action: {
                        name: "Challenge",
                        challengeActionParameters: {
                            attesterId: null,
                            challengeOption: "JSChallenge",
                            interval: null,
                        },
                    },
                }],
            },
        },
    });
    
    import pulumi
    import pulumi_tencentcloud as tencentcloud
    
    web_security_template = tencentcloud.TeoWebSecurityTemplate("web_security_template",
        template_name="tf-test",
        zone_id="zone-3fkff38fyw8s",
        security_policy={
            "bot_management": {
                "enabled": "on",
                "basic_bot_settings": {
                    "bot_intelligence": {
                        "enabled": "on",
                        "bot_ratings": {
                            "high_risk_bot_requests_action": {
                                "name": "Monitor",
                            },
                            "human_requests_action": {
                                "name": "Allow",
                            },
                            "likely_bot_requests_action": {
                                "name": "Monitor",
                            },
                            "verified_bot_requests_action": {
                                "name": "Monitor",
                            },
                        },
                    },
                    "ip_reputation": {
                        "enabled": "on",
                        "ip_reputation_group": {},
                    },
                    "known_bot_categories": {
                        "bot_management_action_overrides": [{
                            "ids": ["9395241960"],
                            "action": {
                                "name": "Allow",
                            },
                        }],
                    },
                    "search_engine_bots": {
                        "bot_management_action_overrides": [{
                            "ids": ["9126905504"],
                            "action": {
                                "name": "Deny",
                            },
                        }],
                    },
                    "source_idc": {
                        "bot_management_action_overrides": [{
                            "ids": [
                                "8868370049",
                                "8868370048",
                            ],
                            "action": {
                                "name": "Deny",
                            },
                        }],
                    },
                },
                "browser_impersonation_detection": {
                    "rules": [{
                        "condition": "${http.request.uri.path} like ['/*'] and ${http.request.method} in ['get']",
                        "enabled": "on",
                        "name": "Block Non-Browser Crawler Access",
                        "action": {
                            "bot_session_validation": {
                                "issue_new_bot_session_cookie": "on",
                                "max_new_session_trigger_config": {
                                    "max_new_session_count_interval": "10s",
                                    "max_new_session_count_threshold": 300,
                                },
                                "session_expired_action": {
                                    "name": "Deny",
                                },
                                "session_invalid_action": {
                                    "name": "Deny",
                                    "deny_action_parameters": {
                                        "block_ip": None,
                                        "block_ip_duration": None,
                                        "error_page_id": None,
                                        "response_code": None,
                                        "return_custom_page": None,
                                        "stall": "on",
                                    },
                                },
                                "session_rate_control": {
                                    "enabled": "off",
                                },
                            },
                        },
                    }],
                },
                "client_attestation_rules": {},
                "custom_rules": {
                    "rules": [{
                        "condition": "${http.request.ip} in ['222.22.22.0/24'] and ${http.request.headers['user-agent']} contain ['cURL']",
                        "enabled": "on",
                        "name": "Login API Request Surge Protection",
                        "priority": 50,
                        "actions": [{
                            "weight": 100,
                            "security_action": {
                                "name": "Deny",
                                "deny_action_parameters": {
                                    "block_ip": None,
                                    "block_ip_duration": None,
                                    "error_page_id": None,
                                    "response_code": None,
                                    "return_custom_page": None,
                                    "stall": "on",
                                },
                            },
                        }],
                    }],
                },
            },
            "custom_rules": {
                "rules": [
                    {
                        "condition": "${http.request.headers['user-agent']} contain ['curl/','Wget/','ApacheBench/']",
                        "enabled": "on",
                        "name": "Malicious User-Agent Blacklist",
                        "priority": 50,
                        "rule_type": "PreciseMatchRule",
                        "action": {
                            "name": "JSChallenge",
                        },
                    },
                    {
                        "condition": "${http.request.ip} in ['36']",
                        "enabled": "on",
                        "name": "Custom Rule",
                        "priority": 0,
                        "rule_type": "BasicAccessRule",
                        "action": {
                            "name": "Monitor",
                        },
                    },
                ],
            },
            "exception_rules": {
                "rules": [
                    {
                        "condition": "${http.request.method} in ['post'] and ${http.request.uri.path} in ['/api/EventLogUpload']",
                        "enabled": "on",
                        "managed_rule_groups_for_exceptions": [],
                        "managed_rules_for_exceptions": [],
                        "name": "High Frequency API Skip Rate Limit 1",
                        "skip_option": "SkipOnAllRequestFields",
                        "skip_scope": "WebSecurityModules",
                        "web_security_modules_for_exceptions": ["websec-mod-adaptive-control"],
                    },
                    {
                        "condition": "${http.request.ip} in ['123.123.123.0/24']",
                        "enabled": "on",
                        "managed_rule_groups_for_exceptions": [],
                        "managed_rules_for_exceptions": [],
                        "name": "IP Whitelist 1",
                        "skip_option": "SkipOnAllRequestFields",
                        "skip_scope": "WebSecurityModules",
                        "web_security_modules_for_exceptions": [
                            "websec-mod-adaptive-control",
                            "websec-mod-bot",
                            "websec-mod-custom-rules",
                            "websec-mod-managed-rules",
                            "websec-mod-rate-limiting",
                        ],
                    },
                ],
            },
            "http_ddos_protection": {
                "adaptive_frequency_control": {
                    "enabled": "on",
                    "sensitivity": "Loose",
                    "action": {
                        "name": "Challenge",
                        "challenge_action_parameters": {
                            "attester_id": None,
                            "challenge_option": "JSChallenge",
                            "interval": None,
                        },
                    },
                },
                "bandwidth_abuse_defense": {
                    "enabled": "on",
                    "action": {
                        "name": "Deny",
                    },
                },
                "client_filtering": {
                    "enabled": "on",
                    "action": {
                        "name": "Challenge",
                        "challenge_action_parameters": {
                            "attester_id": None,
                            "challenge_option": "JSChallenge",
                            "interval": None,
                        },
                    },
                },
                "slow_attack_defense": {
                    "enabled": "on",
                    "action": {
                        "name": "Deny",
                    },
                    "minimal_request_body_transfer_rate": {
                        "counting_period": "60s",
                        "enabled": "off",
                        "minimal_avg_transfer_rate_threshold": "80bps",
                    },
                    "request_body_transfer_timeout": {
                        "enabled": "off",
                        "idle_timeout": "5s",
                    },
                },
            },
            "rate_limiting_rules": {
                "rules": [{
                    "action_duration": "30m",
                    "condition": "${http.request.uri.path} contain ['/checkout/submit']",
                    "count_bies": ["http.request.ip"],
                    "counting_period": "60s",
                    "enabled": "on",
                    "max_request_threshold": 300,
                    "name": "Single IP Request Rate Limit 1",
                    "priority": 50,
                    "action": {
                        "name": "Challenge",
                        "challenge_action_parameters": {
                            "attester_id": None,
                            "challenge_option": "JSChallenge",
                            "interval": None,
                        },
                    },
                }],
            },
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := tencentcloud.NewTeoWebSecurityTemplate(ctx, "web_security_template", &tencentcloud.TeoWebSecurityTemplateArgs{
    			TemplateName: pulumi.String("tf-test"),
    			ZoneId:       pulumi.String("zone-3fkff38fyw8s"),
    			SecurityPolicy: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyArgs{
    				BotManagement: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementArgs{
    					Enabled: pulumi.String("on"),
    					BasicBotSettings: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsArgs{
    						BotIntelligence: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceArgs{
    							Enabled: pulumi.String("on"),
    							BotRatings: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsArgs{
    								HighRiskBotRequestsAction: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionArgs{
    									Name: pulumi.String("Monitor"),
    								},
    								HumanRequestsAction: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionArgs{
    									Name: pulumi.String("Allow"),
    								},
    								LikelyBotRequestsAction: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionArgs{
    									Name: pulumi.String("Monitor"),
    								},
    								VerifiedBotRequestsAction: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionArgs{
    									Name: pulumi.String("Monitor"),
    								},
    							},
    						},
    						IpReputation: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationArgs{
    							Enabled:           pulumi.String("on"),
    							IpReputationGroup: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupArgs{},
    						},
    						KnownBotCategories: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesArgs{
    							BotManagementActionOverrides: tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideArray{
    								&tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideArgs{
    									Ids: pulumi.StringArray{
    										pulumi.String("9395241960"),
    									},
    									Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionArgs{
    										Name: pulumi.String("Allow"),
    									},
    								},
    							},
    						},
    						SearchEngineBots: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsArgs{
    							BotManagementActionOverrides: tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideArray{
    								&tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideArgs{
    									Ids: pulumi.StringArray{
    										pulumi.String("9126905504"),
    									},
    									Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionArgs{
    										Name: pulumi.String("Deny"),
    									},
    								},
    							},
    						},
    						SourceIdc: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcArgs{
    							BotManagementActionOverrides: tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideArray{
    								&tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideArgs{
    									Ids: pulumi.StringArray{
    										pulumi.String("8868370049"),
    										pulumi.String("8868370048"),
    									},
    									Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionArgs{
    										Name: pulumi.String("Deny"),
    									},
    								},
    							},
    						},
    					},
    					BrowserImpersonationDetection: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionArgs{
    						Rules: tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleArray{
    							&tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleArgs{
    								Condition: pulumi.String("${http.request.uri.path} like ['/*'] and ${http.request.method} in ['get']"),
    								Enabled:   pulumi.String("on"),
    								Name:      pulumi.String("Block Non-Browser Crawler Access"),
    								Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionArgs{
    									BotSessionValidation: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationArgs{
    										IssueNewBotSessionCookie: pulumi.String("on"),
    										MaxNewSessionTriggerConfig: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfigArgs{
    											MaxNewSessionCountInterval:  pulumi.String("10s"),
    											MaxNewSessionCountThreshold: pulumi.Float64(300),
    										},
    										SessionExpiredAction: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionArgs{
    											Name: pulumi.String("Deny"),
    										},
    										SessionInvalidAction: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionArgs{
    											Name: pulumi.String("Deny"),
    											DenyActionParameters: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParametersArgs{
    												BlockIp:          nil,
    												BlockIpDuration:  nil,
    												ErrorPageId:      nil,
    												ResponseCode:     nil,
    												ReturnCustomPage: nil,
    												Stall:            pulumi.String("on"),
    											},
    										},
    										SessionRateControl: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlArgs{
    											Enabled: pulumi.String("off"),
    										},
    									},
    								},
    							},
    						},
    					},
    					ClientAttestationRules: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesArgs{},
    					CustomRules: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesArgs{
    						Rules: tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleArray{
    							&tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleArgs{
    								Condition: pulumi.String("${http.request.ip} in ['222.22.22.0/24'] and ${http.request.headers['user-agent']} contain ['cURL']"),
    								Enabled:   pulumi.String("on"),
    								Name:      pulumi.String("Login API Request Surge Protection"),
    								Priority:  pulumi.Float64(50),
    								Actions: tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionArray{
    									&tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionArgs{
    										Weight: pulumi.Float64(100),
    										SecurityAction: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionArgs{
    											Name: pulumi.String("Deny"),
    											DenyActionParameters: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParametersArgs{
    												BlockIp:          nil,
    												BlockIpDuration:  nil,
    												ErrorPageId:      nil,
    												ResponseCode:     nil,
    												ReturnCustomPage: nil,
    												Stall:            pulumi.String("on"),
    											},
    										},
    									},
    								},
    							},
    						},
    					},
    				},
    				CustomRules: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyCustomRulesArgs{
    					Rules: tencentcloud.TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleArray{
    						&tencentcloud.TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleArgs{
    							Condition: pulumi.String("${http.request.headers['user-agent']} contain ['curl/','Wget/','ApacheBench/']"),
    							Enabled:   pulumi.String("on"),
    							Name:      pulumi.String("Malicious User-Agent Blacklist"),
    							Priority:  pulumi.Float64(50),
    							RuleType:  pulumi.String("PreciseMatchRule"),
    							Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionArgs{
    								Name: pulumi.String("JSChallenge"),
    							},
    						},
    						&tencentcloud.TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleArgs{
    							Condition: pulumi.String("${http.request.ip} in ['36']"),
    							Enabled:   pulumi.String("on"),
    							Name:      pulumi.String("Custom Rule"),
    							Priority:  pulumi.Float64(0),
    							RuleType:  pulumi.String("BasicAccessRule"),
    							Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionArgs{
    								Name: pulumi.String("Monitor"),
    							},
    						},
    					},
    				},
    				ExceptionRules: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyExceptionRulesArgs{
    					Rules: tencentcloud.TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleArray{
    						&tencentcloud.TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleArgs{
    							Condition:                      pulumi.String("${http.request.method} in ['post'] and ${http.request.uri.path} in ['/api/EventLogUpload']"),
    							Enabled:                        pulumi.String("on"),
    							ManagedRuleGroupsForExceptions: pulumi.StringArray{},
    							ManagedRulesForExceptions:      pulumi.StringArray{},
    							Name:                           pulumi.String("High Frequency API Skip Rate Limit 1"),
    							SkipOption:                     pulumi.String("SkipOnAllRequestFields"),
    							SkipScope:                      pulumi.String("WebSecurityModules"),
    							WebSecurityModulesForExceptions: pulumi.StringArray{
    								pulumi.String("websec-mod-adaptive-control"),
    							},
    						},
    						&tencentcloud.TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleArgs{
    							Condition:                      pulumi.String("${http.request.ip} in ['123.123.123.0/24']"),
    							Enabled:                        pulumi.String("on"),
    							ManagedRuleGroupsForExceptions: pulumi.StringArray{},
    							ManagedRulesForExceptions:      pulumi.StringArray{},
    							Name:                           pulumi.String("IP Whitelist 1"),
    							SkipOption:                     pulumi.String("SkipOnAllRequestFields"),
    							SkipScope:                      pulumi.String("WebSecurityModules"),
    							WebSecurityModulesForExceptions: pulumi.StringArray{
    								pulumi.String("websec-mod-adaptive-control"),
    								pulumi.String("websec-mod-bot"),
    								pulumi.String("websec-mod-custom-rules"),
    								pulumi.String("websec-mod-managed-rules"),
    								pulumi.String("websec-mod-rate-limiting"),
    							},
    						},
    					},
    				},
    				HttpDdosProtection: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionArgs{
    					AdaptiveFrequencyControl: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlArgs{
    						Enabled:     pulumi.String("on"),
    						Sensitivity: pulumi.String("Loose"),
    						Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionArgs{
    							Name: pulumi.String("Challenge"),
    							ChallengeActionParameters: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParametersArgs{
    								AttesterId:      nil,
    								ChallengeOption: pulumi.String("JSChallenge"),
    								Interval:        nil,
    							},
    						},
    					},
    					BandwidthAbuseDefense: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseArgs{
    						Enabled: pulumi.String("on"),
    						Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionArgs{
    							Name: pulumi.String("Deny"),
    						},
    					},
    					ClientFiltering: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringArgs{
    						Enabled: pulumi.String("on"),
    						Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionArgs{
    							Name: pulumi.String("Challenge"),
    							ChallengeActionParameters: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParametersArgs{
    								AttesterId:      nil,
    								ChallengeOption: pulumi.String("JSChallenge"),
    								Interval:        nil,
    							},
    						},
    					},
    					SlowAttackDefense: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseArgs{
    						Enabled: pulumi.String("on"),
    						Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionArgs{
    							Name: pulumi.String("Deny"),
    						},
    						MinimalRequestBodyTransferRate: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRateArgs{
    							CountingPeriod:                  pulumi.String("60s"),
    							Enabled:                         pulumi.String("off"),
    							MinimalAvgTransferRateThreshold: pulumi.String("80bps"),
    						},
    						RequestBodyTransferTimeout: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeoutArgs{
    							Enabled:     pulumi.String("off"),
    							IdleTimeout: pulumi.String("5s"),
    						},
    					},
    				},
    				RateLimitingRules: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesArgs{
    					Rules: tencentcloud.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleArray{
    						&tencentcloud.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleArgs{
    							ActionDuration: pulumi.String("30m"),
    							Condition:      pulumi.String("${http.request.uri.path} contain ['/checkout/submit']"),
    							CountBies: pulumi.StringArray{
    								pulumi.String("http.request.ip"),
    							},
    							CountingPeriod:      pulumi.String("60s"),
    							Enabled:             pulumi.String("on"),
    							MaxRequestThreshold: pulumi.Float64(300),
    							Name:                pulumi.String("Single IP Request Rate Limit 1"),
    							Priority:            pulumi.Float64(50),
    							Action: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionArgs{
    								Name: pulumi.String("Challenge"),
    								ChallengeActionParameters: &tencentcloud.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParametersArgs{
    									AttesterId:      nil,
    									ChallengeOption: pulumi.String("JSChallenge"),
    									Interval:        nil,
    								},
    							},
    						},
    					},
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Tencentcloud = Pulumi.Tencentcloud;
    
    return await Deployment.RunAsync(() => 
    {
        var webSecurityTemplate = new Tencentcloud.TeoWebSecurityTemplate("web_security_template", new()
        {
            TemplateName = "tf-test",
            ZoneId = "zone-3fkff38fyw8s",
            SecurityPolicy = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyArgs
            {
                BotManagement = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementArgs
                {
                    Enabled = "on",
                    BasicBotSettings = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsArgs
                    {
                        BotIntelligence = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceArgs
                        {
                            Enabled = "on",
                            BotRatings = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsArgs
                            {
                                HighRiskBotRequestsAction = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionArgs
                                {
                                    Name = "Monitor",
                                },
                                HumanRequestsAction = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionArgs
                                {
                                    Name = "Allow",
                                },
                                LikelyBotRequestsAction = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionArgs
                                {
                                    Name = "Monitor",
                                },
                                VerifiedBotRequestsAction = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionArgs
                                {
                                    Name = "Monitor",
                                },
                            },
                        },
                        IpReputation = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationArgs
                        {
                            Enabled = "on",
                            IpReputationGroup = null,
                        },
                        KnownBotCategories = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesArgs
                        {
                            BotManagementActionOverrides = new[]
                            {
                                new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideArgs
                                {
                                    Ids = new[]
                                    {
                                        "9395241960",
                                    },
                                    Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionArgs
                                    {
                                        Name = "Allow",
                                    },
                                },
                            },
                        },
                        SearchEngineBots = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsArgs
                        {
                            BotManagementActionOverrides = new[]
                            {
                                new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideArgs
                                {
                                    Ids = new[]
                                    {
                                        "9126905504",
                                    },
                                    Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionArgs
                                    {
                                        Name = "Deny",
                                    },
                                },
                            },
                        },
                        SourceIdc = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcArgs
                        {
                            BotManagementActionOverrides = new[]
                            {
                                new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideArgs
                                {
                                    Ids = new[]
                                    {
                                        "8868370049",
                                        "8868370048",
                                    },
                                    Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionArgs
                                    {
                                        Name = "Deny",
                                    },
                                },
                            },
                        },
                    },
                    BrowserImpersonationDetection = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionArgs
                    {
                        Rules = new[]
                        {
                            new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleArgs
                            {
                                Condition = "${http.request.uri.path} like ['/*'] and ${http.request.method} in ['get']",
                                Enabled = "on",
                                Name = "Block Non-Browser Crawler Access",
                                Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionArgs
                                {
                                    BotSessionValidation = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationArgs
                                    {
                                        IssueNewBotSessionCookie = "on",
                                        MaxNewSessionTriggerConfig = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfigArgs
                                        {
                                            MaxNewSessionCountInterval = "10s",
                                            MaxNewSessionCountThreshold = 300,
                                        },
                                        SessionExpiredAction = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionArgs
                                        {
                                            Name = "Deny",
                                        },
                                        SessionInvalidAction = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionArgs
                                        {
                                            Name = "Deny",
                                            DenyActionParameters = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParametersArgs
                                            {
                                                BlockIp = null,
                                                BlockIpDuration = null,
                                                ErrorPageId = null,
                                                ResponseCode = null,
                                                ReturnCustomPage = null,
                                                Stall = "on",
                                            },
                                        },
                                        SessionRateControl = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlArgs
                                        {
                                            Enabled = "off",
                                        },
                                    },
                                },
                            },
                        },
                    },
                    ClientAttestationRules = null,
                    CustomRules = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesArgs
                    {
                        Rules = new[]
                        {
                            new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleArgs
                            {
                                Condition = "${http.request.ip} in ['222.22.22.0/24'] and ${http.request.headers['user-agent']} contain ['cURL']",
                                Enabled = "on",
                                Name = "Login API Request Surge Protection",
                                Priority = 50,
                                Actions = new[]
                                {
                                    new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionArgs
                                    {
                                        Weight = 100,
                                        SecurityAction = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionArgs
                                        {
                                            Name = "Deny",
                                            DenyActionParameters = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParametersArgs
                                            {
                                                BlockIp = null,
                                                BlockIpDuration = null,
                                                ErrorPageId = null,
                                                ResponseCode = null,
                                                ReturnCustomPage = null,
                                                Stall = "on",
                                            },
                                        },
                                    },
                                },
                            },
                        },
                    },
                },
                CustomRules = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyCustomRulesArgs
                {
                    Rules = new[]
                    {
                        new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleArgs
                        {
                            Condition = "${http.request.headers['user-agent']} contain ['curl/','Wget/','ApacheBench/']",
                            Enabled = "on",
                            Name = "Malicious User-Agent Blacklist",
                            Priority = 50,
                            RuleType = "PreciseMatchRule",
                            Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionArgs
                            {
                                Name = "JSChallenge",
                            },
                        },
                        new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleArgs
                        {
                            Condition = "${http.request.ip} in ['36']",
                            Enabled = "on",
                            Name = "Custom Rule",
                            Priority = 0,
                            RuleType = "BasicAccessRule",
                            Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionArgs
                            {
                                Name = "Monitor",
                            },
                        },
                    },
                },
                ExceptionRules = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyExceptionRulesArgs
                {
                    Rules = new[]
                    {
                        new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleArgs
                        {
                            Condition = "${http.request.method} in ['post'] and ${http.request.uri.path} in ['/api/EventLogUpload']",
                            Enabled = "on",
                            ManagedRuleGroupsForExceptions = new() { },
                            ManagedRulesForExceptions = new() { },
                            Name = "High Frequency API Skip Rate Limit 1",
                            SkipOption = "SkipOnAllRequestFields",
                            SkipScope = "WebSecurityModules",
                            WebSecurityModulesForExceptions = new[]
                            {
                                "websec-mod-adaptive-control",
                            },
                        },
                        new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleArgs
                        {
                            Condition = "${http.request.ip} in ['123.123.123.0/24']",
                            Enabled = "on",
                            ManagedRuleGroupsForExceptions = new() { },
                            ManagedRulesForExceptions = new() { },
                            Name = "IP Whitelist 1",
                            SkipOption = "SkipOnAllRequestFields",
                            SkipScope = "WebSecurityModules",
                            WebSecurityModulesForExceptions = new[]
                            {
                                "websec-mod-adaptive-control",
                                "websec-mod-bot",
                                "websec-mod-custom-rules",
                                "websec-mod-managed-rules",
                                "websec-mod-rate-limiting",
                            },
                        },
                    },
                },
                HttpDdosProtection = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionArgs
                {
                    AdaptiveFrequencyControl = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlArgs
                    {
                        Enabled = "on",
                        Sensitivity = "Loose",
                        Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionArgs
                        {
                            Name = "Challenge",
                            ChallengeActionParameters = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParametersArgs
                            {
                                AttesterId = null,
                                ChallengeOption = "JSChallenge",
                                Interval = null,
                            },
                        },
                    },
                    BandwidthAbuseDefense = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseArgs
                    {
                        Enabled = "on",
                        Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionArgs
                        {
                            Name = "Deny",
                        },
                    },
                    ClientFiltering = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringArgs
                    {
                        Enabled = "on",
                        Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionArgs
                        {
                            Name = "Challenge",
                            ChallengeActionParameters = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParametersArgs
                            {
                                AttesterId = null,
                                ChallengeOption = "JSChallenge",
                                Interval = null,
                            },
                        },
                    },
                    SlowAttackDefense = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseArgs
                    {
                        Enabled = "on",
                        Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionArgs
                        {
                            Name = "Deny",
                        },
                        MinimalRequestBodyTransferRate = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRateArgs
                        {
                            CountingPeriod = "60s",
                            Enabled = "off",
                            MinimalAvgTransferRateThreshold = "80bps",
                        },
                        RequestBodyTransferTimeout = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeoutArgs
                        {
                            Enabled = "off",
                            IdleTimeout = "5s",
                        },
                    },
                },
                RateLimitingRules = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesArgs
                {
                    Rules = new[]
                    {
                        new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleArgs
                        {
                            ActionDuration = "30m",
                            Condition = "${http.request.uri.path} contain ['/checkout/submit']",
                            CountBies = new[]
                            {
                                "http.request.ip",
                            },
                            CountingPeriod = "60s",
                            Enabled = "on",
                            MaxRequestThreshold = 300,
                            Name = "Single IP Request Rate Limit 1",
                            Priority = 50,
                            Action = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionArgs
                            {
                                Name = "Challenge",
                                ChallengeActionParameters = new Tencentcloud.Inputs.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParametersArgs
                                {
                                    AttesterId = null,
                                    ChallengeOption = "JSChallenge",
                                    Interval = null,
                                },
                            },
                        },
                    },
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.tencentcloud.TeoWebSecurityTemplate;
    import com.pulumi.tencentcloud.TeoWebSecurityTemplateArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyCustomRulesArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyExceptionRulesArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParametersArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParametersArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRateArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeoutArgs;
    import com.pulumi.tencentcloud.inputs.TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var webSecurityTemplate = new TeoWebSecurityTemplate("webSecurityTemplate", TeoWebSecurityTemplateArgs.builder()
                .templateName("tf-test")
                .zoneId("zone-3fkff38fyw8s")
                .securityPolicy(TeoWebSecurityTemplateSecurityPolicyArgs.builder()
                    .botManagement(TeoWebSecurityTemplateSecurityPolicyBotManagementArgs.builder()
                        .enabled("on")
                        .basicBotSettings(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsArgs.builder()
                            .botIntelligence(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceArgs.builder()
                                .enabled("on")
                                .botRatings(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsArgs.builder()
                                    .highRiskBotRequestsAction(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionArgs.builder()
                                        .name("Monitor")
                                        .build())
                                    .humanRequestsAction(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionArgs.builder()
                                        .name("Allow")
                                        .build())
                                    .likelyBotRequestsAction(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionArgs.builder()
                                        .name("Monitor")
                                        .build())
                                    .verifiedBotRequestsAction(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionArgs.builder()
                                        .name("Monitor")
                                        .build())
                                    .build())
                                .build())
                            .ipReputation(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationArgs.builder()
                                .enabled("on")
                                .ipReputationGroup(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupArgs.builder()
                                    .build())
                                .build())
                            .knownBotCategories(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesArgs.builder()
                                .botManagementActionOverrides(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideArgs.builder()
                                    .ids("9395241960")
                                    .action(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionArgs.builder()
                                        .name("Allow")
                                        .build())
                                    .build())
                                .build())
                            .searchEngineBots(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsArgs.builder()
                                .botManagementActionOverrides(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideArgs.builder()
                                    .ids("9126905504")
                                    .action(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionArgs.builder()
                                        .name("Deny")
                                        .build())
                                    .build())
                                .build())
                            .sourceIdc(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcArgs.builder()
                                .botManagementActionOverrides(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideArgs.builder()
                                    .ids(                                
                                        "8868370049",
                                        "8868370048")
                                    .action(TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionArgs.builder()
                                        .name("Deny")
                                        .build())
                                    .build())
                                .build())
                            .build())
                        .browserImpersonationDetection(TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionArgs.builder()
                            .rules(TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleArgs.builder()
                                .condition("${http.request.uri.path} like ['/*'] and ${http.request.method} in ['get']")
                                .enabled("on")
                                .name("Block Non-Browser Crawler Access")
                                .action(TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionArgs.builder()
                                    .botSessionValidation(TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationArgs.builder()
                                        .issueNewBotSessionCookie("on")
                                        .maxNewSessionTriggerConfig(TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfigArgs.builder()
                                            .maxNewSessionCountInterval("10s")
                                            .maxNewSessionCountThreshold(300.0)
                                            .build())
                                        .sessionExpiredAction(TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionArgs.builder()
                                            .name("Deny")
                                            .build())
                                        .sessionInvalidAction(TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionArgs.builder()
                                            .name("Deny")
                                            .denyActionParameters(TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParametersArgs.builder()
                                                .blockIp(null)
                                                .blockIpDuration(null)
                                                .errorPageId(null)
                                                .responseCode(null)
                                                .returnCustomPage(null)
                                                .stall("on")
                                                .build())
                                            .build())
                                        .sessionRateControl(TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlArgs.builder()
                                            .enabled("off")
                                            .build())
                                        .build())
                                    .build())
                                .build())
                            .build())
                        .clientAttestationRules(TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesArgs.builder()
                            .build())
                        .customRules(TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesArgs.builder()
                            .rules(TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleArgs.builder()
                                .condition("${http.request.ip} in ['222.22.22.0/24'] and ${http.request.headers['user-agent']} contain ['cURL']")
                                .enabled("on")
                                .name("Login API Request Surge Protection")
                                .priority(50.0)
                                .actions(TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionArgs.builder()
                                    .weight(100.0)
                                    .securityAction(TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionArgs.builder()
                                        .name("Deny")
                                        .denyActionParameters(TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParametersArgs.builder()
                                            .blockIp(null)
                                            .blockIpDuration(null)
                                            .errorPageId(null)
                                            .responseCode(null)
                                            .returnCustomPage(null)
                                            .stall("on")
                                            .build())
                                        .build())
                                    .build())
                                .build())
                            .build())
                        .build())
                    .customRules(TeoWebSecurityTemplateSecurityPolicyCustomRulesArgs.builder()
                        .rules(                    
                            TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleArgs.builder()
                                .condition("${http.request.headers['user-agent']} contain ['curl/','Wget/','ApacheBench/']")
                                .enabled("on")
                                .name("Malicious User-Agent Blacklist")
                                .priority(50.0)
                                .ruleType("PreciseMatchRule")
                                .action(TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionArgs.builder()
                                    .name("JSChallenge")
                                    .build())
                                .build(),
                            TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleArgs.builder()
                                .condition("${http.request.ip} in ['36']")
                                .enabled("on")
                                .name("Custom Rule")
                                .priority(0.0)
                                .ruleType("BasicAccessRule")
                                .action(TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionArgs.builder()
                                    .name("Monitor")
                                    .build())
                                .build())
                        .build())
                    .exceptionRules(TeoWebSecurityTemplateSecurityPolicyExceptionRulesArgs.builder()
                        .rules(                    
                            TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleArgs.builder()
                                .condition("${http.request.method} in ['post'] and ${http.request.uri.path} in ['/api/EventLogUpload']")
                                .enabled("on")
                                .managedRuleGroupsForExceptions()
                                .managedRulesForExceptions()
                                .name("High Frequency API Skip Rate Limit 1")
                                .skipOption("SkipOnAllRequestFields")
                                .skipScope("WebSecurityModules")
                                .webSecurityModulesForExceptions("websec-mod-adaptive-control")
                                .build(),
                            TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleArgs.builder()
                                .condition("${http.request.ip} in ['123.123.123.0/24']")
                                .enabled("on")
                                .managedRuleGroupsForExceptions()
                                .managedRulesForExceptions()
                                .name("IP Whitelist 1")
                                .skipOption("SkipOnAllRequestFields")
                                .skipScope("WebSecurityModules")
                                .webSecurityModulesForExceptions(                            
                                    "websec-mod-adaptive-control",
                                    "websec-mod-bot",
                                    "websec-mod-custom-rules",
                                    "websec-mod-managed-rules",
                                    "websec-mod-rate-limiting")
                                .build())
                        .build())
                    .httpDdosProtection(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionArgs.builder()
                        .adaptiveFrequencyControl(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlArgs.builder()
                            .enabled("on")
                            .sensitivity("Loose")
                            .action(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionArgs.builder()
                                .name("Challenge")
                                .challengeActionParameters(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParametersArgs.builder()
                                    .attesterId(null)
                                    .challengeOption("JSChallenge")
                                    .interval(null)
                                    .build())
                                .build())
                            .build())
                        .bandwidthAbuseDefense(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseArgs.builder()
                            .enabled("on")
                            .action(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionArgs.builder()
                                .name("Deny")
                                .build())
                            .build())
                        .clientFiltering(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringArgs.builder()
                            .enabled("on")
                            .action(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionArgs.builder()
                                .name("Challenge")
                                .challengeActionParameters(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParametersArgs.builder()
                                    .attesterId(null)
                                    .challengeOption("JSChallenge")
                                    .interval(null)
                                    .build())
                                .build())
                            .build())
                        .slowAttackDefense(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseArgs.builder()
                            .enabled("on")
                            .action(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionArgs.builder()
                                .name("Deny")
                                .build())
                            .minimalRequestBodyTransferRate(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRateArgs.builder()
                                .countingPeriod("60s")
                                .enabled("off")
                                .minimalAvgTransferRateThreshold("80bps")
                                .build())
                            .requestBodyTransferTimeout(TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeoutArgs.builder()
                                .enabled("off")
                                .idleTimeout("5s")
                                .build())
                            .build())
                        .build())
                    .rateLimitingRules(TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesArgs.builder()
                        .rules(TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleArgs.builder()
                            .actionDuration("30m")
                            .condition("${http.request.uri.path} contain ['/checkout/submit']")
                            .countBies("http.request.ip")
                            .countingPeriod("60s")
                            .enabled("on")
                            .maxRequestThreshold(300.0)
                            .name("Single IP Request Rate Limit 1")
                            .priority(50.0)
                            .action(TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionArgs.builder()
                                .name("Challenge")
                                .challengeActionParameters(TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParametersArgs.builder()
                                    .attesterId(null)
                                    .challengeOption("JSChallenge")
                                    .interval(null)
                                    .build())
                                .build())
                            .build())
                        .build())
                    .build())
                .build());
    
        }
    }
    
    resources:
      webSecurityTemplate:
        type: tencentcloud:TeoWebSecurityTemplate
        name: web_security_template
        properties:
          templateName: tf-test
          zoneId: zone-3fkff38fyw8s
          securityPolicy:
            botManagement:
              enabled: on
              basicBotSettings:
                botIntelligence:
                  enabled: on
                  botRatings:
                    highRiskBotRequestsAction:
                      name: Monitor
                    humanRequestsAction:
                      name: Allow
                    likelyBotRequestsAction:
                      name: Monitor
                    verifiedBotRequestsAction:
                      name: Monitor
                ipReputation:
                  enabled: on
                  ipReputationGroup: {}
                knownBotCategories:
                  botManagementActionOverrides:
                    - ids:
                        - '9395241960'
                      action:
                        name: Allow
                searchEngineBots:
                  botManagementActionOverrides:
                    - ids:
                        - '9126905504'
                      action:
                        name: Deny
                sourceIdc:
                  botManagementActionOverrides:
                    - ids:
                        - '8868370049'
                        - '8868370048'
                      action:
                        name: Deny
              browserImpersonationDetection:
                rules:
                  - condition: $${http.request.uri.path} like ['/*'] and $${http.request.method} in ['get']
                    enabled: on
                    name: Block Non-Browser Crawler Access
                    action:
                      botSessionValidation:
                        issueNewBotSessionCookie: on
                        maxNewSessionTriggerConfig:
                          maxNewSessionCountInterval: 10s
                          maxNewSessionCountThreshold: 300
                        sessionExpiredAction:
                          name: Deny
                        sessionInvalidAction:
                          name: Deny
                          denyActionParameters:
                            blockIp: null
                            blockIpDuration: null
                            errorPageId: null
                            responseCode: null
                            returnCustomPage: null
                            stall: on
                        sessionRateControl:
                          enabled: off
              clientAttestationRules: {}
              customRules:
                rules:
                  - condition: $${http.request.ip} in ['222.22.22.0/24'] and $${http.request.headers['user-agent']} contain ['cURL']
                    enabled: on
                    name: Login API Request Surge Protection
                    priority: 50
                    actions:
                      - weight: 100
                        securityAction:
                          name: Deny
                          denyActionParameters:
                            blockIp: null
                            blockIpDuration: null
                            errorPageId: null
                            responseCode: null
                            returnCustomPage: null
                            stall: on
            customRules:
              rules:
                - condition: $${http.request.headers['user-agent']} contain ['curl/','Wget/','ApacheBench/']
                  enabled: on
                  name: Malicious User-Agent Blacklist
                  priority: 50
                  ruleType: PreciseMatchRule
                  action:
                    name: JSChallenge
                - condition: $${http.request.ip} in ['36']
                  enabled: on
                  name: Custom Rule
                  priority: 0
                  ruleType: BasicAccessRule
                  action:
                    name: Monitor
            exceptionRules:
              rules:
                - condition: $${http.request.method} in ['post'] and $${http.request.uri.path} in ['/api/EventLogUpload']
                  enabled: on
                  managedRuleGroupsForExceptions: []
                  managedRulesForExceptions: []
                  name: High Frequency API Skip Rate Limit 1
                  skipOption: SkipOnAllRequestFields
                  skipScope: WebSecurityModules
                  webSecurityModulesForExceptions:
                    - websec-mod-adaptive-control
                - condition: $${http.request.ip} in ['123.123.123.0/24']
                  enabled: on
                  managedRuleGroupsForExceptions: []
                  managedRulesForExceptions: []
                  name: IP Whitelist 1
                  skipOption: SkipOnAllRequestFields
                  skipScope: WebSecurityModules
                  webSecurityModulesForExceptions:
                    - websec-mod-adaptive-control
                    - websec-mod-bot
                    - websec-mod-custom-rules
                    - websec-mod-managed-rules
                    - websec-mod-rate-limiting
            httpDdosProtection:
              adaptiveFrequencyControl:
                enabled: on
                sensitivity: Loose
                action:
                  name: Challenge
                  challengeActionParameters:
                    attesterId: null
                    challengeOption: JSChallenge
                    interval: null
              bandwidthAbuseDefense:
                enabled: on
                action:
                  name: Deny
              clientFiltering:
                enabled: on
                action:
                  name: Challenge
                  challengeActionParameters:
                    attesterId: null
                    challengeOption: JSChallenge
                    interval: null
              slowAttackDefense:
                enabled: on
                action:
                  name: Deny
                minimalRequestBodyTransferRate:
                  countingPeriod: 60s
                  enabled: off
                  minimalAvgTransferRateThreshold: 80bps
                requestBodyTransferTimeout:
                  enabled: off
                  idleTimeout: 5s
            rateLimitingRules:
              rules:
                - actionDuration: 30m
                  condition: $${http.request.uri.path} contain ['/checkout/submit']
                  countBies:
                    - http.request.ip
                  countingPeriod: 60s
                  enabled: on
                  maxRequestThreshold: 300
                  name: Single IP Request Rate Limit 1
                  priority: 50
                  action:
                    name: Challenge
                    challengeActionParameters:
                      attesterId: null
                      challengeOption: JSChallenge
                      interval: null
    

    Create TeoWebSecurityTemplate Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new TeoWebSecurityTemplate(name: string, args: TeoWebSecurityTemplateArgs, opts?: CustomResourceOptions);
    @overload
    def TeoWebSecurityTemplate(resource_name: str,
                               args: TeoWebSecurityTemplateArgs,
                               opts: Optional[ResourceOptions] = None)
    
    @overload
    def TeoWebSecurityTemplate(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               template_name: Optional[str] = None,
                               zone_id: Optional[str] = None,
                               security_policy: Optional[TeoWebSecurityTemplateSecurityPolicyArgs] = None,
                               teo_web_security_template_id: Optional[str] = None)
    func NewTeoWebSecurityTemplate(ctx *Context, name string, args TeoWebSecurityTemplateArgs, opts ...ResourceOption) (*TeoWebSecurityTemplate, error)
    public TeoWebSecurityTemplate(string name, TeoWebSecurityTemplateArgs args, CustomResourceOptions? opts = null)
    public TeoWebSecurityTemplate(String name, TeoWebSecurityTemplateArgs args)
    public TeoWebSecurityTemplate(String name, TeoWebSecurityTemplateArgs args, CustomResourceOptions options)
    
    type: tencentcloud:TeoWebSecurityTemplate
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args TeoWebSecurityTemplateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TeoWebSecurityTemplateArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TeoWebSecurityTemplateArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TeoWebSecurityTemplateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TeoWebSecurityTemplateArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    TeoWebSecurityTemplate Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The TeoWebSecurityTemplate resource accepts the following input properties:

    TemplateName string
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    ZoneId string
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    SecurityPolicy TeoWebSecurityTemplateSecurityPolicy
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    TeoWebSecurityTemplateId string
    ID of the resource.
    TemplateName string
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    ZoneId string
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    SecurityPolicy TeoWebSecurityTemplateSecurityPolicyArgs
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    TeoWebSecurityTemplateId string
    ID of the resource.
    templateName String
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    zoneId String
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    securityPolicy TeoWebSecurityTemplateSecurityPolicy
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    teoWebSecurityTemplateId String
    ID of the resource.
    templateName string
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    zoneId string
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    securityPolicy TeoWebSecurityTemplateSecurityPolicy
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    teoWebSecurityTemplateId string
    ID of the resource.
    template_name str
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    zone_id str
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    security_policy TeoWebSecurityTemplateSecurityPolicyArgs
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    teo_web_security_template_id str
    ID of the resource.
    templateName String
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    zoneId String
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    securityPolicy Property Map
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    teoWebSecurityTemplateId String
    ID of the resource.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the TeoWebSecurityTemplate resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing TeoWebSecurityTemplate Resource

    Get an existing TeoWebSecurityTemplate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: TeoWebSecurityTemplateState, opts?: CustomResourceOptions): TeoWebSecurityTemplate
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            security_policy: Optional[TeoWebSecurityTemplateSecurityPolicyArgs] = None,
            template_name: Optional[str] = None,
            teo_web_security_template_id: Optional[str] = None,
            zone_id: Optional[str] = None) -> TeoWebSecurityTemplate
    func GetTeoWebSecurityTemplate(ctx *Context, name string, id IDInput, state *TeoWebSecurityTemplateState, opts ...ResourceOption) (*TeoWebSecurityTemplate, error)
    public static TeoWebSecurityTemplate Get(string name, Input<string> id, TeoWebSecurityTemplateState? state, CustomResourceOptions? opts = null)
    public static TeoWebSecurityTemplate get(String name, Output<String> id, TeoWebSecurityTemplateState state, CustomResourceOptions options)
    resources:  _:    type: tencentcloud:TeoWebSecurityTemplate    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    SecurityPolicy TeoWebSecurityTemplateSecurityPolicy
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    TemplateName string
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    TeoWebSecurityTemplateId string
    ID of the resource.
    ZoneId string
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    SecurityPolicy TeoWebSecurityTemplateSecurityPolicyArgs
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    TemplateName string
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    TeoWebSecurityTemplateId string
    ID of the resource.
    ZoneId string
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    securityPolicy TeoWebSecurityTemplateSecurityPolicy
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    templateName String
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    teoWebSecurityTemplateId String
    ID of the resource.
    zoneId String
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    securityPolicy TeoWebSecurityTemplateSecurityPolicy
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    templateName string
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    teoWebSecurityTemplateId string
    ID of the resource.
    zoneId string
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    security_policy TeoWebSecurityTemplateSecurityPolicyArgs
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    template_name str
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    teo_web_security_template_id str
    ID of the resource.
    zone_id str
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.
    securityPolicy Property Map
    Web security policy template configuration. Generates default config if empty. Supported: Exception rules, custom rules, rate limiting rules, managed rules. Not supported: Bot management rules (under development).
    templateName String
    Policy template name. Composed of Chinese characters, letters, digits, and underscores. Cannot begin with an underscore and must be less than or equal to 32 characters.
    teoWebSecurityTemplateId String
    ID of the resource.
    zoneId String
    Zone ID. Explicitly identifies the zone to which the policy template belongs for access control purposes.

    Supporting Types

    TeoWebSecurityTemplateSecurityPolicy, TeoWebSecurityTemplateSecurityPolicyArgs

    BotManagement TeoWebSecurityTemplateSecurityPolicyBotManagement
    Bot management configuration.
    CustomRules TeoWebSecurityTemplateSecurityPolicyCustomRules
    Custom rules. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    ExceptionRules TeoWebSecurityTemplateSecurityPolicyExceptionRules
    Exception rule configuration.
    HttpDdosProtection TeoWebSecurityTemplateSecurityPolicyHttpDdosProtection
    HTTP DDOS protection configuration.
    ManagedRules TeoWebSecurityTemplateSecurityPolicyManagedRules
    Managed. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    RateLimitingRules TeoWebSecurityTemplateSecurityPolicyRateLimitingRules
    Configures the rate limiting rule.
    BotManagement TeoWebSecurityTemplateSecurityPolicyBotManagement
    Bot management configuration.
    CustomRules TeoWebSecurityTemplateSecurityPolicyCustomRules
    Custom rules. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    ExceptionRules TeoWebSecurityTemplateSecurityPolicyExceptionRules
    Exception rule configuration.
    HttpDdosProtection TeoWebSecurityTemplateSecurityPolicyHttpDdosProtection
    HTTP DDOS protection configuration.
    ManagedRules TeoWebSecurityTemplateSecurityPolicyManagedRules
    Managed. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    RateLimitingRules TeoWebSecurityTemplateSecurityPolicyRateLimitingRules
    Configures the rate limiting rule.
    botManagement TeoWebSecurityTemplateSecurityPolicyBotManagement
    Bot management configuration.
    customRules TeoWebSecurityTemplateSecurityPolicyCustomRules
    Custom rules. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    exceptionRules TeoWebSecurityTemplateSecurityPolicyExceptionRules
    Exception rule configuration.
    httpDdosProtection TeoWebSecurityTemplateSecurityPolicyHttpDdosProtection
    HTTP DDOS protection configuration.
    managedRules TeoWebSecurityTemplateSecurityPolicyManagedRules
    Managed. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    rateLimitingRules TeoWebSecurityTemplateSecurityPolicyRateLimitingRules
    Configures the rate limiting rule.
    botManagement TeoWebSecurityTemplateSecurityPolicyBotManagement
    Bot management configuration.
    customRules TeoWebSecurityTemplateSecurityPolicyCustomRules
    Custom rules. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    exceptionRules TeoWebSecurityTemplateSecurityPolicyExceptionRules
    Exception rule configuration.
    httpDdosProtection TeoWebSecurityTemplateSecurityPolicyHttpDdosProtection
    HTTP DDOS protection configuration.
    managedRules TeoWebSecurityTemplateSecurityPolicyManagedRules
    Managed. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    rateLimitingRules TeoWebSecurityTemplateSecurityPolicyRateLimitingRules
    Configures the rate limiting rule.
    bot_management TeoWebSecurityTemplateSecurityPolicyBotManagement
    Bot management configuration.
    custom_rules TeoWebSecurityTemplateSecurityPolicyCustomRules
    Custom rules. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    exception_rules TeoWebSecurityTemplateSecurityPolicyExceptionRules
    Exception rule configuration.
    http_ddos_protection TeoWebSecurityTemplateSecurityPolicyHttpDdosProtection
    HTTP DDOS protection configuration.
    managed_rules TeoWebSecurityTemplateSecurityPolicyManagedRules
    Managed. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    rate_limiting_rules TeoWebSecurityTemplateSecurityPolicyRateLimitingRules
    Configures the rate limiting rule.
    botManagement Property Map
    Bot management configuration.
    customRules Property Map
    Custom rules. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    exceptionRules Property Map
    Exception rule configuration.
    httpDdosProtection Property Map
    HTTP DDOS protection configuration.
    managedRules Property Map
    Managed. If the parameter is null or not filled, the configuration last set will be used by default. Note: This field may return null, indicating that no valid value can be obtained.
    rateLimitingRules Property Map
    Configures the rate limiting rule.

    TeoWebSecurityTemplateSecurityPolicyBotManagement, TeoWebSecurityTemplateSecurityPolicyBotManagementArgs

    BasicBotSettings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettings
    Bot management basic configuration. takes effect on all domains associated with the policy. can be customized through CustomRules.
    BrowserImpersonationDetection TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetection
    Configures browser spoofing identification rules (formerly active feature detection rule). sets the response page range for JavaScript injection, browser check options, and handling method for non-browser clients.
    ClientAttestationRules TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRules
    Definition list of client authentication rules. this feature is in beta test. submit a ticket if you need to use it.
    CustomRules TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRules
    Bot management custom rule combines various crawlers and request behavior characteristics to accurately define bots and configure customized handling methods.
    Enabled string
    Whether Bot management is enabled. valid values: - on: enabled;- off: disabled.
    BasicBotSettings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettings
    Bot management basic configuration. takes effect on all domains associated with the policy. can be customized through CustomRules.
    BrowserImpersonationDetection TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetection
    Configures browser spoofing identification rules (formerly active feature detection rule). sets the response page range for JavaScript injection, browser check options, and handling method for non-browser clients.
    ClientAttestationRules TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRules
    Definition list of client authentication rules. this feature is in beta test. submit a ticket if you need to use it.
    CustomRules TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRules
    Bot management custom rule combines various crawlers and request behavior characteristics to accurately define bots and configure customized handling methods.
    Enabled string
    Whether Bot management is enabled. valid values: - on: enabled;- off: disabled.
    basicBotSettings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettings
    Bot management basic configuration. takes effect on all domains associated with the policy. can be customized through CustomRules.
    browserImpersonationDetection TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetection
    Configures browser spoofing identification rules (formerly active feature detection rule). sets the response page range for JavaScript injection, browser check options, and handling method for non-browser clients.
    clientAttestationRules TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRules
    Definition list of client authentication rules. this feature is in beta test. submit a ticket if you need to use it.
    customRules TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRules
    Bot management custom rule combines various crawlers and request behavior characteristics to accurately define bots and configure customized handling methods.
    enabled String
    Whether Bot management is enabled. valid values: - on: enabled;- off: disabled.
    basicBotSettings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettings
    Bot management basic configuration. takes effect on all domains associated with the policy. can be customized through CustomRules.
    browserImpersonationDetection TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetection
    Configures browser spoofing identification rules (formerly active feature detection rule). sets the response page range for JavaScript injection, browser check options, and handling method for non-browser clients.
    clientAttestationRules TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRules
    Definition list of client authentication rules. this feature is in beta test. submit a ticket if you need to use it.
    customRules TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRules
    Bot management custom rule combines various crawlers and request behavior characteristics to accurately define bots and configure customized handling methods.
    enabled string
    Whether Bot management is enabled. valid values: - on: enabled;- off: disabled.
    basic_bot_settings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettings
    Bot management basic configuration. takes effect on all domains associated with the policy. can be customized through CustomRules.
    browser_impersonation_detection TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetection
    Configures browser spoofing identification rules (formerly active feature detection rule). sets the response page range for JavaScript injection, browser check options, and handling method for non-browser clients.
    client_attestation_rules TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRules
    Definition list of client authentication rules. this feature is in beta test. submit a ticket if you need to use it.
    custom_rules TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRules
    Bot management custom rule combines various crawlers and request behavior characteristics to accurately define bots and configure customized handling methods.
    enabled str
    Whether Bot management is enabled. valid values: - on: enabled;- off: disabled.
    basicBotSettings Property Map
    Bot management basic configuration. takes effect on all domains associated with the policy. can be customized through CustomRules.
    browserImpersonationDetection Property Map
    Configures browser spoofing identification rules (formerly active feature detection rule). sets the response page range for JavaScript injection, browser check options, and handling method for non-browser clients.
    clientAttestationRules Property Map
    Definition list of client authentication rules. this feature is in beta test. submit a ticket if you need to use it.
    customRules Property Map
    Bot management custom rule combines various crawlers and request behavior characteristics to accurately define bots and configure customized handling methods.
    enabled String
    Whether Bot management is enabled. valid values: - on: enabled;- off: disabled.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettings, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsArgs

    BotIntelligence TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligence
    Specifies the configuration for Bot intelligent analysis.
    IpReputation TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputation
    Threat intelligence database (originally client profile analysis) configuration, used for handling client ips with specific risk characteristics in recent access behavior.
    KnownBotCategories TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategories
    Commercial or open-source tool UA feature configuration (original UA feature rule), used to handle access requests from known commercial or open-source tools. the User-Agent header of such requests complies with known commercial or open-source tool features.
    SearchEngineBots TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBots
    Search engine crawler configuration, used to handle requests from search engine crawlers. the IP, User-Agent, or rDNS results of such requests match known search engine crawlers.
    SourceIdc TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdc
    Client IP source IDC configuration, used for handling access requests from client ips in idcs (data centers). such source requests are not directly accessed by mobile terminals or browser-side.
    BotIntelligence TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligence
    Specifies the configuration for Bot intelligent analysis.
    IpReputation TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputation
    Threat intelligence database (originally client profile analysis) configuration, used for handling client ips with specific risk characteristics in recent access behavior.
    KnownBotCategories TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategories
    Commercial or open-source tool UA feature configuration (original UA feature rule), used to handle access requests from known commercial or open-source tools. the User-Agent header of such requests complies with known commercial or open-source tool features.
    SearchEngineBots TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBots
    Search engine crawler configuration, used to handle requests from search engine crawlers. the IP, User-Agent, or rDNS results of such requests match known search engine crawlers.
    SourceIdc TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdc
    Client IP source IDC configuration, used for handling access requests from client ips in idcs (data centers). such source requests are not directly accessed by mobile terminals or browser-side.
    botIntelligence TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligence
    Specifies the configuration for Bot intelligent analysis.
    ipReputation TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputation
    Threat intelligence database (originally client profile analysis) configuration, used for handling client ips with specific risk characteristics in recent access behavior.
    knownBotCategories TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategories
    Commercial or open-source tool UA feature configuration (original UA feature rule), used to handle access requests from known commercial or open-source tools. the User-Agent header of such requests complies with known commercial or open-source tool features.
    searchEngineBots TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBots
    Search engine crawler configuration, used to handle requests from search engine crawlers. the IP, User-Agent, or rDNS results of such requests match known search engine crawlers.
    sourceIdc TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdc
    Client IP source IDC configuration, used for handling access requests from client ips in idcs (data centers). such source requests are not directly accessed by mobile terminals or browser-side.
    botIntelligence TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligence
    Specifies the configuration for Bot intelligent analysis.
    ipReputation TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputation
    Threat intelligence database (originally client profile analysis) configuration, used for handling client ips with specific risk characteristics in recent access behavior.
    knownBotCategories TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategories
    Commercial or open-source tool UA feature configuration (original UA feature rule), used to handle access requests from known commercial or open-source tools. the User-Agent header of such requests complies with known commercial or open-source tool features.
    searchEngineBots TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBots
    Search engine crawler configuration, used to handle requests from search engine crawlers. the IP, User-Agent, or rDNS results of such requests match known search engine crawlers.
    sourceIdc TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdc
    Client IP source IDC configuration, used for handling access requests from client ips in idcs (data centers). such source requests are not directly accessed by mobile terminals or browser-side.
    bot_intelligence TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligence
    Specifies the configuration for Bot intelligent analysis.
    ip_reputation TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputation
    Threat intelligence database (originally client profile analysis) configuration, used for handling client ips with specific risk characteristics in recent access behavior.
    known_bot_categories TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategories
    Commercial or open-source tool UA feature configuration (original UA feature rule), used to handle access requests from known commercial or open-source tools. the User-Agent header of such requests complies with known commercial or open-source tool features.
    search_engine_bots TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBots
    Search engine crawler configuration, used to handle requests from search engine crawlers. the IP, User-Agent, or rDNS results of such requests match known search engine crawlers.
    source_idc TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdc
    Client IP source IDC configuration, used for handling access requests from client ips in idcs (data centers). such source requests are not directly accessed by mobile terminals or browser-side.
    botIntelligence Property Map
    Specifies the configuration for Bot intelligent analysis.
    ipReputation Property Map
    Threat intelligence database (originally client profile analysis) configuration, used for handling client ips with specific risk characteristics in recent access behavior.
    knownBotCategories Property Map
    Commercial or open-source tool UA feature configuration (original UA feature rule), used to handle access requests from known commercial or open-source tools. the User-Agent header of such requests complies with known commercial or open-source tool features.
    searchEngineBots Property Map
    Search engine crawler configuration, used to handle requests from search engine crawlers. the IP, User-Agent, or rDNS results of such requests match known search engine crawlers.
    sourceIdc Property Map
    Client IP source IDC configuration, used for handling access requests from client ips in idcs (data centers). such source requests are not directly accessed by mobile terminals or browser-side.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligence, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceArgs

    BotRatings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatings
    Based on client and request features, divides request sources into human requests, legitimate Bot requests, suspected Bot requests, and high-risk Bot requests, and provides request handling options.
    Enabled string
    Specifies the switch for Bot intelligent analysis configuration. valid values:. on: enabled. off: disabled.
    BotRatings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatings
    Based on client and request features, divides request sources into human requests, legitimate Bot requests, suspected Bot requests, and high-risk Bot requests, and provides request handling options.
    Enabled string
    Specifies the switch for Bot intelligent analysis configuration. valid values:. on: enabled. off: disabled.
    botRatings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatings
    Based on client and request features, divides request sources into human requests, legitimate Bot requests, suspected Bot requests, and high-risk Bot requests, and provides request handling options.
    enabled String
    Specifies the switch for Bot intelligent analysis configuration. valid values:. on: enabled. off: disabled.
    botRatings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatings
    Based on client and request features, divides request sources into human requests, legitimate Bot requests, suspected Bot requests, and high-risk Bot requests, and provides request handling options.
    enabled string
    Specifies the switch for Bot intelligent analysis configuration. valid values:. on: enabled. off: disabled.
    bot_ratings TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatings
    Based on client and request features, divides request sources into human requests, legitimate Bot requests, suspected Bot requests, and high-risk Bot requests, and provides request handling options.
    enabled str
    Specifies the switch for Bot intelligent analysis configuration. valid values:. on: enabled. off: disabled.
    botRatings Property Map
    Based on client and request features, divides request sources into human requests, legitimate Bot requests, suspected Bot requests, and high-risk Bot requests, and provides request handling options.
    enabled String
    Specifies the switch for Bot intelligent analysis configuration. valid values:. on: enabled. off: disabled.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatings, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsArgs

    HighRiskBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsAction
    Execution action for malicious Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    HumanRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsAction
    Execution action for a normal Bot request. valid values for the Name parameter in SecurityAction: - Allow: pass.
    LikelyBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsAction
    The execution action for suspected Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    VerifiedBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsAction
    Execution action for friendly Bot request. SecurityAction Name parameter supports: - Deny: block;- Monitor: observe;- Allow: pass;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    HighRiskBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsAction
    Execution action for malicious Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    HumanRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsAction
    Execution action for a normal Bot request. valid values for the Name parameter in SecurityAction: - Allow: pass.
    LikelyBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsAction
    The execution action for suspected Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    VerifiedBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsAction
    Execution action for friendly Bot request. SecurityAction Name parameter supports: - Deny: block;- Monitor: observe;- Allow: pass;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    highRiskBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsAction
    Execution action for malicious Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    humanRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsAction
    Execution action for a normal Bot request. valid values for the Name parameter in SecurityAction: - Allow: pass.
    likelyBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsAction
    The execution action for suspected Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    verifiedBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsAction
    Execution action for friendly Bot request. SecurityAction Name parameter supports: - Deny: block;- Monitor: observe;- Allow: pass;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    highRiskBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsAction
    Execution action for malicious Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    humanRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsAction
    Execution action for a normal Bot request. valid values for the Name parameter in SecurityAction: - Allow: pass.
    likelyBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsAction
    The execution action for suspected Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    verifiedBotRequestsAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsAction
    Execution action for friendly Bot request. SecurityAction Name parameter supports: - Deny: block;- Monitor: observe;- Allow: pass;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    high_risk_bot_requests_action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsAction
    Execution action for malicious Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    human_requests_action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsAction
    Execution action for a normal Bot request. valid values for the Name parameter in SecurityAction: - Allow: pass.
    likely_bot_requests_action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsAction
    The execution action for suspected Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    verified_bot_requests_action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsAction
    Execution action for friendly Bot request. SecurityAction Name parameter supports: - Deny: block;- Monitor: observe;- Allow: pass;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    highRiskBotRequestsAction Property Map
    Execution action for malicious Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    humanRequestsAction Property Map
    Execution action for a normal Bot request. valid values for the Name parameter in SecurityAction: - Allow: pass.
    likelyBotRequestsAction Property Map
    The execution action for suspected Bot requests. valid values for the Name parameter in SecurityAction: - Deny: block; - Monitor: observe; - Allow: pass; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    verifiedBotRequestsAction Property Map
    Execution action for friendly Bot request. SecurityAction Name parameter supports: - Deny: block;- Monitor: observe;- Allow: pass;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHighRiskBotRequestsActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsHumanRequestsActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsLikelyBotRequestsActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsBotIntelligenceBotRatingsVerifiedBotRequestsActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputation, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationArgs

    Enabled string
    IP intelligence library (formerly client profile analysis). valid values: - on: enable; - off: disable.
    IpReputationGroup TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroup
    IP intelligence library (formerly client profile analysis) configuration content.
    Enabled string
    IP intelligence library (formerly client profile analysis). valid values: - on: enable; - off: disable.
    IpReputationGroup TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroup
    IP intelligence library (formerly client profile analysis) configuration content.
    enabled String
    IP intelligence library (formerly client profile analysis). valid values: - on: enable; - off: disable.
    ipReputationGroup TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroup
    IP intelligence library (formerly client profile analysis) configuration content.
    enabled string
    IP intelligence library (formerly client profile analysis). valid values: - on: enable; - off: disable.
    ipReputationGroup TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroup
    IP intelligence library (formerly client profile analysis) configuration content.
    enabled str
    IP intelligence library (formerly client profile analysis). valid values: - on: enable; - off: disable.
    ip_reputation_group TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroup
    IP intelligence library (formerly client profile analysis) configuration content.
    enabled String
    IP intelligence library (formerly client profile analysis). valid values: - on: enable; - off: disable.
    ipReputationGroup Property Map
    IP intelligence library (formerly client profile analysis) configuration content.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroup, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupArgs

    BaseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseAction
    Execution action of the IP intelligence library (formerly client profile analysis). SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    BotManagementActionOverrides List<TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverride>
    The specific configuration of the IP intelligence library (originally client profile analysis), used to override the default configuration in BaseAction. among them, the Ids in BotManagementActionOverrides can be filled with: - IPREP_WEB_AND_DDOS_ATTACKERS_LOW: network attack - general confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_MID: network attack - medium confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_HIGH: network attack - HIGH confidence; - IPREP_PROXIES_AND_ANONYMIZERS_LOW: network proxy - general confidence; - IPREP_PROXIES_AND_ANONYMIZERS_MID: network proxy - medium confidence; - IPREP_PROXIES_AND_ANONYMIZERS_HIGH: network proxy - HIGH confidence; - IPREP_SCANNING_TOOLS_LOW: scanner - general confidence; - IPREP_SCANNING_TOOLS_MID: scanner - medium confidence; - IPREP_SCANNING_TOOLS_HIGH: scanner - HIGH confidence; - IPREP_ATO_ATTACKERS_LOW: account takeover attack - general confidence; - IPREP_ATO_ATTACKERS_MID: account takeover attack - medium confidence; - IPREP_ATO_ATTACKERS_HIGH: account takeover attack - HIGH confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_LOW: malicious BOT - general confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_MID: malicious BOT - medium confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_HIGH: malicious BOT - HIGH confidence.
    BaseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseAction
    Execution action of the IP intelligence library (formerly client profile analysis). SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    BotManagementActionOverrides []TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverride
    The specific configuration of the IP intelligence library (originally client profile analysis), used to override the default configuration in BaseAction. among them, the Ids in BotManagementActionOverrides can be filled with: - IPREP_WEB_AND_DDOS_ATTACKERS_LOW: network attack - general confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_MID: network attack - medium confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_HIGH: network attack - HIGH confidence; - IPREP_PROXIES_AND_ANONYMIZERS_LOW: network proxy - general confidence; - IPREP_PROXIES_AND_ANONYMIZERS_MID: network proxy - medium confidence; - IPREP_PROXIES_AND_ANONYMIZERS_HIGH: network proxy - HIGH confidence; - IPREP_SCANNING_TOOLS_LOW: scanner - general confidence; - IPREP_SCANNING_TOOLS_MID: scanner - medium confidence; - IPREP_SCANNING_TOOLS_HIGH: scanner - HIGH confidence; - IPREP_ATO_ATTACKERS_LOW: account takeover attack - general confidence; - IPREP_ATO_ATTACKERS_MID: account takeover attack - medium confidence; - IPREP_ATO_ATTACKERS_HIGH: account takeover attack - HIGH confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_LOW: malicious BOT - general confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_MID: malicious BOT - medium confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_HIGH: malicious BOT - HIGH confidence.
    baseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseAction
    Execution action of the IP intelligence library (formerly client profile analysis). SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    botManagementActionOverrides List<TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverride>
    The specific configuration of the IP intelligence library (originally client profile analysis), used to override the default configuration in BaseAction. among them, the Ids in BotManagementActionOverrides can be filled with: - IPREP_WEB_AND_DDOS_ATTACKERS_LOW: network attack - general confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_MID: network attack - medium confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_HIGH: network attack - HIGH confidence; - IPREP_PROXIES_AND_ANONYMIZERS_LOW: network proxy - general confidence; - IPREP_PROXIES_AND_ANONYMIZERS_MID: network proxy - medium confidence; - IPREP_PROXIES_AND_ANONYMIZERS_HIGH: network proxy - HIGH confidence; - IPREP_SCANNING_TOOLS_LOW: scanner - general confidence; - IPREP_SCANNING_TOOLS_MID: scanner - medium confidence; - IPREP_SCANNING_TOOLS_HIGH: scanner - HIGH confidence; - IPREP_ATO_ATTACKERS_LOW: account takeover attack - general confidence; - IPREP_ATO_ATTACKERS_MID: account takeover attack - medium confidence; - IPREP_ATO_ATTACKERS_HIGH: account takeover attack - HIGH confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_LOW: malicious BOT - general confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_MID: malicious BOT - medium confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_HIGH: malicious BOT - HIGH confidence.
    baseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseAction
    Execution action of the IP intelligence library (formerly client profile analysis). SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    botManagementActionOverrides TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverride[]
    The specific configuration of the IP intelligence library (originally client profile analysis), used to override the default configuration in BaseAction. among them, the Ids in BotManagementActionOverrides can be filled with: - IPREP_WEB_AND_DDOS_ATTACKERS_LOW: network attack - general confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_MID: network attack - medium confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_HIGH: network attack - HIGH confidence; - IPREP_PROXIES_AND_ANONYMIZERS_LOW: network proxy - general confidence; - IPREP_PROXIES_AND_ANONYMIZERS_MID: network proxy - medium confidence; - IPREP_PROXIES_AND_ANONYMIZERS_HIGH: network proxy - HIGH confidence; - IPREP_SCANNING_TOOLS_LOW: scanner - general confidence; - IPREP_SCANNING_TOOLS_MID: scanner - medium confidence; - IPREP_SCANNING_TOOLS_HIGH: scanner - HIGH confidence; - IPREP_ATO_ATTACKERS_LOW: account takeover attack - general confidence; - IPREP_ATO_ATTACKERS_MID: account takeover attack - medium confidence; - IPREP_ATO_ATTACKERS_HIGH: account takeover attack - HIGH confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_LOW: malicious BOT - general confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_MID: malicious BOT - medium confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_HIGH: malicious BOT - HIGH confidence.
    base_action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseAction
    Execution action of the IP intelligence library (formerly client profile analysis). SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    bot_management_action_overrides Sequence[TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverride]
    The specific configuration of the IP intelligence library (originally client profile analysis), used to override the default configuration in BaseAction. among them, the Ids in BotManagementActionOverrides can be filled with: - IPREP_WEB_AND_DDOS_ATTACKERS_LOW: network attack - general confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_MID: network attack - medium confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_HIGH: network attack - HIGH confidence; - IPREP_PROXIES_AND_ANONYMIZERS_LOW: network proxy - general confidence; - IPREP_PROXIES_AND_ANONYMIZERS_MID: network proxy - medium confidence; - IPREP_PROXIES_AND_ANONYMIZERS_HIGH: network proxy - HIGH confidence; - IPREP_SCANNING_TOOLS_LOW: scanner - general confidence; - IPREP_SCANNING_TOOLS_MID: scanner - medium confidence; - IPREP_SCANNING_TOOLS_HIGH: scanner - HIGH confidence; - IPREP_ATO_ATTACKERS_LOW: account takeover attack - general confidence; - IPREP_ATO_ATTACKERS_MID: account takeover attack - medium confidence; - IPREP_ATO_ATTACKERS_HIGH: account takeover attack - HIGH confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_LOW: malicious BOT - general confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_MID: malicious BOT - medium confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_HIGH: malicious BOT - HIGH confidence.
    baseAction Property Map
    Execution action of the IP intelligence library (formerly client profile analysis). SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge.
    botManagementActionOverrides List<Property Map>
    The specific configuration of the IP intelligence library (originally client profile analysis), used to override the default configuration in BaseAction. among them, the Ids in BotManagementActionOverrides can be filled with: - IPREP_WEB_AND_DDOS_ATTACKERS_LOW: network attack - general confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_MID: network attack - medium confidence; - IPREP_WEB_AND_DDOS_ATTACKERS_HIGH: network attack - HIGH confidence; - IPREP_PROXIES_AND_ANONYMIZERS_LOW: network proxy - general confidence; - IPREP_PROXIES_AND_ANONYMIZERS_MID: network proxy - medium confidence; - IPREP_PROXIES_AND_ANONYMIZERS_HIGH: network proxy - HIGH confidence; - IPREP_SCANNING_TOOLS_LOW: scanner - general confidence; - IPREP_SCANNING_TOOLS_MID: scanner - medium confidence; - IPREP_SCANNING_TOOLS_HIGH: scanner - HIGH confidence; - IPREP_ATO_ATTACKERS_LOW: account takeover attack - general confidence; - IPREP_ATO_ATTACKERS_MID: account takeover attack - medium confidence; - IPREP_ATO_ATTACKERS_HIGH: account takeover attack - HIGH confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_LOW: malicious BOT - general confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_MID: malicious BOT - medium confidence; - IPREP_WEB_SCRAPERS_AND_TRAFFIC_BOTS_HIGH: malicious BOT - HIGH confidence.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBaseActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverride, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideArgs

    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    Ids List<string>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    Ids []string
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids List<String>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids string[]
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids Sequence[str]
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action Property Map
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids List<String>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsIpReputationIpReputationGroupBotManagementActionOverrideActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategories, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesArgs

    BaseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseAction
    Handling method for access requests from known commercial tools or open-source tools. specifies the Name parameter value of SecurityAction: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    BotManagementActionOverrides List<TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverride>
    Specifies the handling method for access requests from known commercial tools or open-source tools.
    BaseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseAction
    Handling method for access requests from known commercial tools or open-source tools. specifies the Name parameter value of SecurityAction: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    BotManagementActionOverrides []TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverride
    Specifies the handling method for access requests from known commercial tools or open-source tools.
    baseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseAction
    Handling method for access requests from known commercial tools or open-source tools. specifies the Name parameter value of SecurityAction: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    botManagementActionOverrides List<TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverride>
    Specifies the handling method for access requests from known commercial tools or open-source tools.
    baseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseAction
    Handling method for access requests from known commercial tools or open-source tools. specifies the Name parameter value of SecurityAction: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    botManagementActionOverrides TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverride[]
    Specifies the handling method for access requests from known commercial tools or open-source tools.
    base_action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseAction
    Handling method for access requests from known commercial tools or open-source tools. specifies the Name parameter value of SecurityAction: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    bot_management_action_overrides Sequence[TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverride]
    Specifies the handling method for access requests from known commercial tools or open-source tools.
    baseAction Property Map
    Handling method for access requests from known commercial tools or open-source tools. specifies the Name parameter value of SecurityAction: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    botManagementActionOverrides List<Property Map>
    Specifies the handling method for access requests from known commercial tools or open-source tools.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBaseActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverride, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideArgs

    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    Ids List<string>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    Ids []string
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids List<String>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids string[]
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids Sequence[str]
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action Property Map
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids List<String>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsKnownBotCategoriesBotManagementActionOverrideActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBots, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsArgs

    BaseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseAction
    Specifies the action for requests from search engine crawlers. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    BotManagementActionOverrides List<TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverride>
    Specifies the handling method for search engine crawler requests.
    BaseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseAction
    Specifies the action for requests from search engine crawlers. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    BotManagementActionOverrides []TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverride
    Specifies the handling method for search engine crawler requests.
    baseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseAction
    Specifies the action for requests from search engine crawlers. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    botManagementActionOverrides List<TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverride>
    Specifies the handling method for search engine crawler requests.
    baseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseAction
    Specifies the action for requests from search engine crawlers. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    botManagementActionOverrides TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverride[]
    Specifies the handling method for search engine crawler requests.
    base_action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseAction
    Specifies the action for requests from search engine crawlers. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    bot_management_action_overrides Sequence[TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverride]
    Specifies the handling method for search engine crawler requests.
    baseAction Property Map
    Specifies the action for requests from search engine crawlers. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    botManagementActionOverrides List<Property Map>
    Specifies the handling method for search engine crawler requests.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBaseActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverride, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideArgs

    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    Ids List<string>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    Ids []string
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids List<String>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids string[]
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids Sequence[str]
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action Property Map
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids List<String>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSearchEngineBotsBotManagementActionOverrideActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdc, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcArgs

    BaseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseAction
    Handling method for requests from the specified IDC. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    BotManagementActionOverrides List<TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverride>
    Specifies the handling method for the specified id request.
    BaseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseAction
    Handling method for requests from the specified IDC. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    BotManagementActionOverrides []TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverride
    Specifies the handling method for the specified id request.
    baseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseAction
    Handling method for requests from the specified IDC. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    botManagementActionOverrides List<TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverride>
    Specifies the handling method for the specified id request.
    baseAction TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseAction
    Handling method for requests from the specified IDC. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    botManagementActionOverrides TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverride[]
    Specifies the handling method for the specified id request.
    base_action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseAction
    Handling method for requests from the specified IDC. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    bot_management_action_overrides Sequence[TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverride]
    Specifies the handling method for the specified id request.
    baseAction Property Map
    Handling method for requests from the specified IDC. valid values for SecurityAction Name: - Deny: block; - Monitor: observe; - Disabled: not enabled, disable specified rule; - Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge; - Allow: pass (to be deprecated).
    botManagementActionOverrides List<Property Map>
    Specifies the handling method for the specified id request.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBaseActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverride, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideArgs

    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    Ids List<string>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    Ids []string
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids List<String>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids string[]
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideAction
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids Sequence[str]
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.
    action Property Map
    Specifies the handling action for Bot rule items in Ids. valid values for the Name parameter in SecurityAction: - Deny: block;- Monitor: observe;- Disabled: Disabled, disable the specified rule;- Challenge: Challenge, where ChallengeOption in ChallengeActionParameters supports JSChallenge and ManagedChallenge;- Allow: pass (only for Bot basic feature management).
    ids List<String>
    Specific item under Bot rules used to rewrite the configuration content of this single rule. refer to the returned message from the DescribeBotManagedRules API for detailed information corresponding to Ids.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBasicBotSettingsSourceIdcBotManagementActionOverrideActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetection, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionArgs

    Rules List<TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRule>
    List of browser spoofing identification Rules. When using ModifySecurityPolicy to modify Web protection configuration: - if Rules parameter in SecurityPolicy.BotManagement.BrowserImpersonationDetection is not specified or parameter length is zero: clear all browser spoofing identification rule configurations; - if BrowserImpersonationDetection parameter value is unspecified in SecurityPolicy.BotManagement parameters: keep existing browser spoofing identification rule configurations without modification.
    Rules []TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRule
    List of browser spoofing identification Rules. When using ModifySecurityPolicy to modify Web protection configuration: - if Rules parameter in SecurityPolicy.BotManagement.BrowserImpersonationDetection is not specified or parameter length is zero: clear all browser spoofing identification rule configurations; - if BrowserImpersonationDetection parameter value is unspecified in SecurityPolicy.BotManagement parameters: keep existing browser spoofing identification rule configurations without modification.
    rules List<TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRule>
    List of browser spoofing identification Rules. When using ModifySecurityPolicy to modify Web protection configuration: - if Rules parameter in SecurityPolicy.BotManagement.BrowserImpersonationDetection is not specified or parameter length is zero: clear all browser spoofing identification rule configurations; - if BrowserImpersonationDetection parameter value is unspecified in SecurityPolicy.BotManagement parameters: keep existing browser spoofing identification rule configurations without modification.
    rules TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRule[]
    List of browser spoofing identification Rules. When using ModifySecurityPolicy to modify Web protection configuration: - if Rules parameter in SecurityPolicy.BotManagement.BrowserImpersonationDetection is not specified or parameter length is zero: clear all browser spoofing identification rule configurations; - if BrowserImpersonationDetection parameter value is unspecified in SecurityPolicy.BotManagement parameters: keep existing browser spoofing identification rule configurations without modification.
    rules Sequence[TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRule]
    List of browser spoofing identification Rules. When using ModifySecurityPolicy to modify Web protection configuration: - if Rules parameter in SecurityPolicy.BotManagement.BrowserImpersonationDetection is not specified or parameter length is zero: clear all browser spoofing identification rule configurations; - if BrowserImpersonationDetection parameter value is unspecified in SecurityPolicy.BotManagement parameters: keep existing browser spoofing identification rule configurations without modification.
    rules List<Property Map>
    List of browser spoofing identification Rules. When using ModifySecurityPolicy to modify Web protection configuration: - if Rules parameter in SecurityPolicy.BotManagement.BrowserImpersonationDetection is not specified or parameter length is zero: clear all browser spoofing identification rule configurations; - if BrowserImpersonationDetection parameter value is unspecified in SecurityPolicy.BotManagement parameters: keep existing browser spoofing identification rule configurations without modification.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRule, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleArgs

    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    Name string
    Specifies the name of the precise rate limit.
    Action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    Name string
    Specifies the name of the precise rate limit.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    name String
    Specifies the name of the precise rate limit.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id string
    ID of the resource.
    name string
    Specifies the name of the precise rate limit.
    action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition str
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled str
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id str
    ID of the resource.
    name str
    Specifies the name of the precise rate limit.
    action Property Map
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    name String
    Specifies the name of the precise rate limit.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionArgs

    botSessionValidation Property Map
    Configures Cookie verification and session tracking.
    clientBehaviorDetection Property Map
    Configures client behavior validation.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidation, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationArgs

    IssueNewBotSessionCookie string
    Whether to update Cookie and validate. valid values: - on: update Cookie and validate; - off: verify only.
    MaxNewSessionTriggerConfig TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfig
    Specifies the trigger threshold for updating and validating cookies. valid only when IssueNewBotSessionCookie is set to on.
    SessionExpiredAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredAction
    Execution action when no Cookie is carried or the Cookie expired. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters;- Monitor: observe;- Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    SessionInvalidAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidAction
    Execution action for invalid Cookie. valid values for the Name parameter in SecurityAction: - Deny: block, where the DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    SessionRateControl TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControl
    Specifies the session rate and periodic feature verification configuration.
    IssueNewBotSessionCookie string
    Whether to update Cookie and validate. valid values: - on: update Cookie and validate; - off: verify only.
    MaxNewSessionTriggerConfig TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfig
    Specifies the trigger threshold for updating and validating cookies. valid only when IssueNewBotSessionCookie is set to on.
    SessionExpiredAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredAction
    Execution action when no Cookie is carried or the Cookie expired. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters;- Monitor: observe;- Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    SessionInvalidAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidAction
    Execution action for invalid Cookie. valid values for the Name parameter in SecurityAction: - Deny: block, where the DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    SessionRateControl TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControl
    Specifies the session rate and periodic feature verification configuration.
    issueNewBotSessionCookie String
    Whether to update Cookie and validate. valid values: - on: update Cookie and validate; - off: verify only.
    maxNewSessionTriggerConfig TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfig
    Specifies the trigger threshold for updating and validating cookies. valid only when IssueNewBotSessionCookie is set to on.
    sessionExpiredAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredAction
    Execution action when no Cookie is carried or the Cookie expired. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters;- Monitor: observe;- Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    sessionInvalidAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidAction
    Execution action for invalid Cookie. valid values for the Name parameter in SecurityAction: - Deny: block, where the DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    sessionRateControl TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControl
    Specifies the session rate and periodic feature verification configuration.
    issueNewBotSessionCookie string
    Whether to update Cookie and validate. valid values: - on: update Cookie and validate; - off: verify only.
    maxNewSessionTriggerConfig TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfig
    Specifies the trigger threshold for updating and validating cookies. valid only when IssueNewBotSessionCookie is set to on.
    sessionExpiredAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredAction
    Execution action when no Cookie is carried or the Cookie expired. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters;- Monitor: observe;- Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    sessionInvalidAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidAction
    Execution action for invalid Cookie. valid values for the Name parameter in SecurityAction: - Deny: block, where the DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    sessionRateControl TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControl
    Specifies the session rate and periodic feature verification configuration.
    issue_new_bot_session_cookie str
    Whether to update Cookie and validate. valid values: - on: update Cookie and validate; - off: verify only.
    max_new_session_trigger_config TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfig
    Specifies the trigger threshold for updating and validating cookies. valid only when IssueNewBotSessionCookie is set to on.
    session_expired_action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredAction
    Execution action when no Cookie is carried or the Cookie expired. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters;- Monitor: observe;- Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    session_invalid_action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidAction
    Execution action for invalid Cookie. valid values for the Name parameter in SecurityAction: - Deny: block, where the DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    session_rate_control TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControl
    Specifies the session rate and periodic feature verification configuration.
    issueNewBotSessionCookie String
    Whether to update Cookie and validate. valid values: - on: update Cookie and validate; - off: verify only.
    maxNewSessionTriggerConfig Property Map
    Specifies the trigger threshold for updating and validating cookies. valid only when IssueNewBotSessionCookie is set to on.
    sessionExpiredAction Property Map
    Execution action when no Cookie is carried or the Cookie expired. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters;- Monitor: observe;- Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    sessionInvalidAction Property Map
    Execution action for invalid Cookie. valid values for the Name parameter in SecurityAction: - Deny: block, where the DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    sessionRateControl Property Map
    Specifies the session rate and periodic feature verification configuration.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfig, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationMaxNewSessionTriggerConfigArgs

    MaxNewSessionCountInterval string
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    MaxNewSessionCountThreshold double
    Trigger threshold cumulative count. value range: 1-100000000.
    MaxNewSessionCountInterval string
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    MaxNewSessionCountThreshold float64
    Trigger threshold cumulative count. value range: 1-100000000.
    maxNewSessionCountInterval String
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    maxNewSessionCountThreshold Double
    Trigger threshold cumulative count. value range: 1-100000000.
    maxNewSessionCountInterval string
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    maxNewSessionCountThreshold number
    Trigger threshold cumulative count. value range: 1-100000000.
    max_new_session_count_interval str
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    max_new_session_count_threshold float
    Trigger threshold cumulative count. value range: 1-100000000.
    maxNewSessionCountInterval String
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    maxNewSessionCountThreshold Number
    Trigger threshold cumulative count. value range: 1-100000000.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionExpiredActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionInvalidActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControl, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlArgs

    Enabled string
    Specifies whether session rate and periodic feature verification are enabled. valid values: - on: enable- off: disable.
    HighRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionAction
    Session rate and periodic feature verification high-risk execution actions. SecurityAction Name valid values: - Deny: block, where Stall configuration is supported in DenyActionParameters; - Monitor: observation; - Allow: respond after wait, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    LowRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionAction
    Session rate and periodic feature verification low risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    MidRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionAction
    Session rate and periodic feature verification medium-risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    Enabled string
    Specifies whether session rate and periodic feature verification are enabled. valid values: - on: enable- off: disable.
    HighRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionAction
    Session rate and periodic feature verification high-risk execution actions. SecurityAction Name valid values: - Deny: block, where Stall configuration is supported in DenyActionParameters; - Monitor: observation; - Allow: respond after wait, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    LowRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionAction
    Session rate and periodic feature verification low risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    MidRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionAction
    Session rate and periodic feature verification medium-risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    enabled String
    Specifies whether session rate and periodic feature verification are enabled. valid values: - on: enable- off: disable.
    highRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionAction
    Session rate and periodic feature verification high-risk execution actions. SecurityAction Name valid values: - Deny: block, where Stall configuration is supported in DenyActionParameters; - Monitor: observation; - Allow: respond after wait, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    lowRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionAction
    Session rate and periodic feature verification low risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    midRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionAction
    Session rate and periodic feature verification medium-risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    enabled string
    Specifies whether session rate and periodic feature verification are enabled. valid values: - on: enable- off: disable.
    highRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionAction
    Session rate and periodic feature verification high-risk execution actions. SecurityAction Name valid values: - Deny: block, where Stall configuration is supported in DenyActionParameters; - Monitor: observation; - Allow: respond after wait, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    lowRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionAction
    Session rate and periodic feature verification low risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    midRateSessionAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionAction
    Session rate and periodic feature verification medium-risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    enabled str
    Specifies whether session rate and periodic feature verification are enabled. valid values: - on: enable- off: disable.
    high_rate_session_action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionAction
    Session rate and periodic feature verification high-risk execution actions. SecurityAction Name valid values: - Deny: block, where Stall configuration is supported in DenyActionParameters; - Monitor: observation; - Allow: respond after wait, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    low_rate_session_action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionAction
    Session rate and periodic feature verification low risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    mid_rate_session_action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionAction
    Session rate and periodic feature verification medium-risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    enabled String
    Specifies whether session rate and periodic feature verification are enabled. valid values: - on: enable- off: disable.
    highRateSessionAction Property Map
    Session rate and periodic feature verification high-risk execution actions. SecurityAction Name valid values: - Deny: block, where Stall configuration is supported in DenyActionParameters; - Monitor: observation; - Allow: respond after wait, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    lowRateSessionAction Property Map
    Session rate and periodic feature verification low risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.
    midRateSessionAction Property Map
    Session rate and periodic feature verification medium-risk execution action. SecurityAction Name parameter supports: - Deny: block, where DenyActionParameters supports Stall configuration;- Monitor: observe;- Allow: respond after wait, where AllowActionParameters requires MinDelayTime and MaxDelayTime configuration.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlHighRateSessionActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlLowRateSessionActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionBotSessionValidationSessionRateControlMidRateSessionActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetection, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionArgs

    BotClientAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientAction
    The execution action of the Bot client. valid values for the Name parameter in SecurityAction: - Deny: block, where the Stall configuration is supported in DenyActionParameters;- Monitor: observation;- Allow: respond after wait, where MinDelayTime and MaxDelayTime configurations are required in AllowActionParameters.
    ChallengeNotFinishedAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedAction
    Execution action when client-side javascript is not enabled (test not completed). valid values for SecurityAction Name: - Deny: block, where Stall configuration is supported in DenyActionParameters;- Monitor: observe;- Allow: respond after waiting, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    ChallengeTimeoutAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutAction
    The execution action for client-side detection timeout. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters; - Monitor: observe; - Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    CryptoChallengeDelayBefore string
    Specifies the execution mode for client behavior verification. valid values: - 0ms: immediate execution; - 100ms: delay 100ms execution; - 200ms: delay 200ms execution; - 300ms: delay 300ms execution; - 400ms: delay 400ms execution; - 500ms: delay 500ms execution; - 600ms: delay 600ms execution; - 700ms: delay 700ms execution; - 800ms: delay 800ms execution; - 900ms: delay 900ms execution; - 1000ms: delay 1000ms execution.
    CryptoChallengeIntensity string
    Specifies the proof-of-work strength. valid values: - low: low;- medium: medium;- high: high.
    MaxChallengeCountInterval string
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    MaxChallengeCountThreshold double
    Trigger threshold cumulative count. value range: 1-100000000.
    BotClientAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientAction
    The execution action of the Bot client. valid values for the Name parameter in SecurityAction: - Deny: block, where the Stall configuration is supported in DenyActionParameters;- Monitor: observation;- Allow: respond after wait, where MinDelayTime and MaxDelayTime configurations are required in AllowActionParameters.
    ChallengeNotFinishedAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedAction
    Execution action when client-side javascript is not enabled (test not completed). valid values for SecurityAction Name: - Deny: block, where Stall configuration is supported in DenyActionParameters;- Monitor: observe;- Allow: respond after waiting, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    ChallengeTimeoutAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutAction
    The execution action for client-side detection timeout. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters; - Monitor: observe; - Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    CryptoChallengeDelayBefore string
    Specifies the execution mode for client behavior verification. valid values: - 0ms: immediate execution; - 100ms: delay 100ms execution; - 200ms: delay 200ms execution; - 300ms: delay 300ms execution; - 400ms: delay 400ms execution; - 500ms: delay 500ms execution; - 600ms: delay 600ms execution; - 700ms: delay 700ms execution; - 800ms: delay 800ms execution; - 900ms: delay 900ms execution; - 1000ms: delay 1000ms execution.
    CryptoChallengeIntensity string
    Specifies the proof-of-work strength. valid values: - low: low;- medium: medium;- high: high.
    MaxChallengeCountInterval string
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    MaxChallengeCountThreshold float64
    Trigger threshold cumulative count. value range: 1-100000000.
    botClientAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientAction
    The execution action of the Bot client. valid values for the Name parameter in SecurityAction: - Deny: block, where the Stall configuration is supported in DenyActionParameters;- Monitor: observation;- Allow: respond after wait, where MinDelayTime and MaxDelayTime configurations are required in AllowActionParameters.
    challengeNotFinishedAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedAction
    Execution action when client-side javascript is not enabled (test not completed). valid values for SecurityAction Name: - Deny: block, where Stall configuration is supported in DenyActionParameters;- Monitor: observe;- Allow: respond after waiting, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    challengeTimeoutAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutAction
    The execution action for client-side detection timeout. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters; - Monitor: observe; - Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    cryptoChallengeDelayBefore String
    Specifies the execution mode for client behavior verification. valid values: - 0ms: immediate execution; - 100ms: delay 100ms execution; - 200ms: delay 200ms execution; - 300ms: delay 300ms execution; - 400ms: delay 400ms execution; - 500ms: delay 500ms execution; - 600ms: delay 600ms execution; - 700ms: delay 700ms execution; - 800ms: delay 800ms execution; - 900ms: delay 900ms execution; - 1000ms: delay 1000ms execution.
    cryptoChallengeIntensity String
    Specifies the proof-of-work strength. valid values: - low: low;- medium: medium;- high: high.
    maxChallengeCountInterval String
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    maxChallengeCountThreshold Double
    Trigger threshold cumulative count. value range: 1-100000000.
    botClientAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientAction
    The execution action of the Bot client. valid values for the Name parameter in SecurityAction: - Deny: block, where the Stall configuration is supported in DenyActionParameters;- Monitor: observation;- Allow: respond after wait, where MinDelayTime and MaxDelayTime configurations are required in AllowActionParameters.
    challengeNotFinishedAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedAction
    Execution action when client-side javascript is not enabled (test not completed). valid values for SecurityAction Name: - Deny: block, where Stall configuration is supported in DenyActionParameters;- Monitor: observe;- Allow: respond after waiting, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    challengeTimeoutAction TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutAction
    The execution action for client-side detection timeout. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters; - Monitor: observe; - Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    cryptoChallengeDelayBefore string
    Specifies the execution mode for client behavior verification. valid values: - 0ms: immediate execution; - 100ms: delay 100ms execution; - 200ms: delay 200ms execution; - 300ms: delay 300ms execution; - 400ms: delay 400ms execution; - 500ms: delay 500ms execution; - 600ms: delay 600ms execution; - 700ms: delay 700ms execution; - 800ms: delay 800ms execution; - 900ms: delay 900ms execution; - 1000ms: delay 1000ms execution.
    cryptoChallengeIntensity string
    Specifies the proof-of-work strength. valid values: - low: low;- medium: medium;- high: high.
    maxChallengeCountInterval string
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    maxChallengeCountThreshold number
    Trigger threshold cumulative count. value range: 1-100000000.
    bot_client_action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientAction
    The execution action of the Bot client. valid values for the Name parameter in SecurityAction: - Deny: block, where the Stall configuration is supported in DenyActionParameters;- Monitor: observation;- Allow: respond after wait, where MinDelayTime and MaxDelayTime configurations are required in AllowActionParameters.
    challenge_not_finished_action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedAction
    Execution action when client-side javascript is not enabled (test not completed). valid values for SecurityAction Name: - Deny: block, where Stall configuration is supported in DenyActionParameters;- Monitor: observe;- Allow: respond after waiting, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    challenge_timeout_action TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutAction
    The execution action for client-side detection timeout. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters; - Monitor: observe; - Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    crypto_challenge_delay_before str
    Specifies the execution mode for client behavior verification. valid values: - 0ms: immediate execution; - 100ms: delay 100ms execution; - 200ms: delay 200ms execution; - 300ms: delay 300ms execution; - 400ms: delay 400ms execution; - 500ms: delay 500ms execution; - 600ms: delay 600ms execution; - 700ms: delay 700ms execution; - 800ms: delay 800ms execution; - 900ms: delay 900ms execution; - 1000ms: delay 1000ms execution.
    crypto_challenge_intensity str
    Specifies the proof-of-work strength. valid values: - low: low;- medium: medium;- high: high.
    max_challenge_count_interval str
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    max_challenge_count_threshold float
    Trigger threshold cumulative count. value range: 1-100000000.
    botClientAction Property Map
    The execution action of the Bot client. valid values for the Name parameter in SecurityAction: - Deny: block, where the Stall configuration is supported in DenyActionParameters;- Monitor: observation;- Allow: respond after wait, where MinDelayTime and MaxDelayTime configurations are required in AllowActionParameters.
    challengeNotFinishedAction Property Map
    Execution action when client-side javascript is not enabled (test not completed). valid values for SecurityAction Name: - Deny: block, where Stall configuration is supported in DenyActionParameters;- Monitor: observe;- Allow: respond after waiting, where MinDelayTime and MaxDelayTime configuration is required in AllowActionParameters.
    challengeTimeoutAction Property Map
    The execution action for client-side detection timeout. valid values for the Name parameter in SecurityAction: - Deny: block, where Stall can be configured in DenyActionParameters; - Monitor: observe; - Allow: respond after wait, where MinDelayTime and MaxDelayTime must be configured in AllowActionParameters.
    cryptoChallengeDelayBefore String
    Specifies the execution mode for client behavior verification. valid values: - 0ms: immediate execution; - 100ms: delay 100ms execution; - 200ms: delay 200ms execution; - 300ms: delay 300ms execution; - 400ms: delay 400ms execution; - 500ms: delay 500ms execution; - 600ms: delay 600ms execution; - 700ms: delay 700ms execution; - 800ms: delay 800ms execution; - 900ms: delay 900ms execution; - 1000ms: delay 1000ms execution.
    cryptoChallengeIntensity String
    Specifies the proof-of-work strength. valid values: - low: low;- medium: medium;- high: high.
    maxChallengeCountInterval String
    Time window for trigger threshold statistics. valid values: - 5s: within 5 seconds;- 10s: within 10 seconds;- 15s: within 15 seconds;- 30s: within 30 seconds;- 60s: within 60 seconds;- 5m: within 5 minutes;- 10m: within 10 minutes;- 30m: within 30 minutes;- 60m: within 60 minutes.
    maxChallengeCountThreshold Number
    Trigger threshold cumulative count. value range: 1-100000000.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionBotClientActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeNotFinishedActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutAction, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementBrowserImpersonationDetectionRuleActionClientBehaviorDetectionChallengeTimeoutActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRules, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesArgs

    Rules List<TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRule>
    List of client authentication. when using ModifySecurityPolicy to modify Web protection configuration: - if Rules in SecurityPolicy.BotManagement.ClientAttestationRules is not specified or the parameter length of Rules is zero: clear all client authentication rule configuration. - if ClientAttestationRules in SecurityPolicy.BotManagement parameters is unspecified: keep existing client authentication rule configuration and do not modify..
    Rules []TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRule
    List of client authentication. when using ModifySecurityPolicy to modify Web protection configuration: - if Rules in SecurityPolicy.BotManagement.ClientAttestationRules is not specified or the parameter length of Rules is zero: clear all client authentication rule configuration. - if ClientAttestationRules in SecurityPolicy.BotManagement parameters is unspecified: keep existing client authentication rule configuration and do not modify..
    rules List<TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRule>
    List of client authentication. when using ModifySecurityPolicy to modify Web protection configuration: - if Rules in SecurityPolicy.BotManagement.ClientAttestationRules is not specified or the parameter length of Rules is zero: clear all client authentication rule configuration. - if ClientAttestationRules in SecurityPolicy.BotManagement parameters is unspecified: keep existing client authentication rule configuration and do not modify..
    rules TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRule[]
    List of client authentication. when using ModifySecurityPolicy to modify Web protection configuration: - if Rules in SecurityPolicy.BotManagement.ClientAttestationRules is not specified or the parameter length of Rules is zero: clear all client authentication rule configuration. - if ClientAttestationRules in SecurityPolicy.BotManagement parameters is unspecified: keep existing client authentication rule configuration and do not modify..
    rules Sequence[TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRule]
    List of client authentication. when using ModifySecurityPolicy to modify Web protection configuration: - if Rules in SecurityPolicy.BotManagement.ClientAttestationRules is not specified or the parameter length of Rules is zero: clear all client authentication rule configuration. - if ClientAttestationRules in SecurityPolicy.BotManagement parameters is unspecified: keep existing client authentication rule configuration and do not modify..
    rules List<Property Map>
    List of client authentication. when using ModifySecurityPolicy to modify Web protection configuration: - if Rules in SecurityPolicy.BotManagement.ClientAttestationRules is not specified or the parameter length of Rules is zero: clear all client authentication rule configuration. - if ClientAttestationRules in SecurityPolicy.BotManagement parameters is unspecified: keep existing client authentication rule configuration and do not modify..

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRule, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleArgs

    AttesterId string
    Specifies the client authentication option ID.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    DeviceProfiles List<TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfile>
    Client device configuration. if the DeviceProfiles parameter value is not specified in the ClientAttestationRules parameter, keep the existing client device configuration and do not modify it.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    InvalidAttestationAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationAction
    Handling method for failed client authentication. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    Name string
    Specifies the name of the precise rate limit.
    Priority double
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    AttesterId string
    Specifies the client authentication option ID.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    DeviceProfiles []TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfile
    Client device configuration. if the DeviceProfiles parameter value is not specified in the ClientAttestationRules parameter, keep the existing client device configuration and do not modify it.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    InvalidAttestationAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationAction
    Handling method for failed client authentication. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    Name string
    Specifies the name of the precise rate limit.
    Priority float64
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    attesterId String
    Specifies the client authentication option ID.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    deviceProfiles List<TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfile>
    Client device configuration. if the DeviceProfiles parameter value is not specified in the ClientAttestationRules parameter, keep the existing client device configuration and do not modify it.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    invalidAttestationAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationAction
    Handling method for failed client authentication. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    name String
    Specifies the name of the precise rate limit.
    priority Double
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    attesterId string
    Specifies the client authentication option ID.
    condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    deviceProfiles TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfile[]
    Client device configuration. if the DeviceProfiles parameter value is not specified in the ClientAttestationRules parameter, keep the existing client device configuration and do not modify it.
    enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id string
    ID of the resource.
    invalidAttestationAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationAction
    Handling method for failed client authentication. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    name string
    Specifies the name of the precise rate limit.
    priority number
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    attester_id str
    Specifies the client authentication option ID.
    condition str
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    device_profiles Sequence[TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfile]
    Client device configuration. if the DeviceProfiles parameter value is not specified in the ClientAttestationRules parameter, keep the existing client device configuration and do not modify it.
    enabled str
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id str
    ID of the resource.
    invalid_attestation_action TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationAction
    Handling method for failed client authentication. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    name str
    Specifies the name of the precise rate limit.
    priority float
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    attesterId String
    Specifies the client authentication option ID.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    deviceProfiles List<Property Map>
    Client device configuration. if the DeviceProfiles parameter value is not specified in the ClientAttestationRules parameter, keep the existing client device configuration and do not modify it.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    invalidAttestationAction Property Map
    Handling method for failed client authentication. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    name String
    Specifies the name of the precise rate limit.
    priority Number
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfile, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileArgs

    ClientType string
    Client device type. valid values: - iOS; - Android; - WebView.
    HighRiskMinScore double
    The minimum value to determine a request as high-risk ranges from 1-99. the larger the value, the higher the request risk, and the closer it resembles a request initiated by a Bot client. the default value is 50, corresponding to high-risk for values 51-100.
    HighRiskRequestAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestAction
    Handling method for high-risk requests. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    MediumRiskMinScore double
    Specifies the minimum value to determine a request as medium-risk. value range: 1-99. the larger the value, the higher the request risk, resembling requests initiated by a Bot client. default value: 15, corresponding to medium-risk for values 16-50.
    MediumRiskRequestAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestAction
    Handling method for medium-risk requests. SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Redirect: Redirect; - Challenge: Challenge. default value is Monitor.
    ClientType string
    Client device type. valid values: - iOS; - Android; - WebView.
    HighRiskMinScore float64
    The minimum value to determine a request as high-risk ranges from 1-99. the larger the value, the higher the request risk, and the closer it resembles a request initiated by a Bot client. the default value is 50, corresponding to high-risk for values 51-100.
    HighRiskRequestAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestAction
    Handling method for high-risk requests. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    MediumRiskMinScore float64
    Specifies the minimum value to determine a request as medium-risk. value range: 1-99. the larger the value, the higher the request risk, resembling requests initiated by a Bot client. default value: 15, corresponding to medium-risk for values 16-50.
    MediumRiskRequestAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestAction
    Handling method for medium-risk requests. SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Redirect: Redirect; - Challenge: Challenge. default value is Monitor.
    clientType String
    Client device type. valid values: - iOS; - Android; - WebView.
    highRiskMinScore Double
    The minimum value to determine a request as high-risk ranges from 1-99. the larger the value, the higher the request risk, and the closer it resembles a request initiated by a Bot client. the default value is 50, corresponding to high-risk for values 51-100.
    highRiskRequestAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestAction
    Handling method for high-risk requests. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    mediumRiskMinScore Double
    Specifies the minimum value to determine a request as medium-risk. value range: 1-99. the larger the value, the higher the request risk, resembling requests initiated by a Bot client. default value: 15, corresponding to medium-risk for values 16-50.
    mediumRiskRequestAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestAction
    Handling method for medium-risk requests. SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Redirect: Redirect; - Challenge: Challenge. default value is Monitor.
    clientType string
    Client device type. valid values: - iOS; - Android; - WebView.
    highRiskMinScore number
    The minimum value to determine a request as high-risk ranges from 1-99. the larger the value, the higher the request risk, and the closer it resembles a request initiated by a Bot client. the default value is 50, corresponding to high-risk for values 51-100.
    highRiskRequestAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestAction
    Handling method for high-risk requests. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    mediumRiskMinScore number
    Specifies the minimum value to determine a request as medium-risk. value range: 1-99. the larger the value, the higher the request risk, resembling requests initiated by a Bot client. default value: 15, corresponding to medium-risk for values 16-50.
    mediumRiskRequestAction TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestAction
    Handling method for medium-risk requests. SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Redirect: Redirect; - Challenge: Challenge. default value is Monitor.
    client_type str
    Client device type. valid values: - iOS; - Android; - WebView.
    high_risk_min_score float
    The minimum value to determine a request as high-risk ranges from 1-99. the larger the value, the higher the request risk, and the closer it resembles a request initiated by a Bot client. the default value is 50, corresponding to high-risk for values 51-100.
    high_risk_request_action TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestAction
    Handling method for high-risk requests. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    medium_risk_min_score float
    Specifies the minimum value to determine a request as medium-risk. value range: 1-99. the larger the value, the higher the request risk, resembling requests initiated by a Bot client. default value: 15, corresponding to medium-risk for values 16-50.
    medium_risk_request_action TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestAction
    Handling method for medium-risk requests. SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Redirect: Redirect; - Challenge: Challenge. default value is Monitor.
    clientType String
    Client device type. valid values: - iOS; - Android; - WebView.
    highRiskMinScore Number
    The minimum value to determine a request as high-risk ranges from 1-99. the larger the value, the higher the request risk, and the closer it resembles a request initiated by a Bot client. the default value is 50, corresponding to high-risk for values 51-100.
    highRiskRequestAction Property Map
    Handling method for high-risk requests. valid values for SecurityAction Name: - Deny: block; - Monitor: observation; - Redirect: redirection; - Challenge: Challenge. default value: Monitor.
    mediumRiskMinScore Number
    Specifies the minimum value to determine a request as medium-risk. value range: 1-99. the larger the value, the higher the request risk, resembling requests initiated by a Bot client. default value: 15, corresponding to medium-risk for values 16-50.
    mediumRiskRequestAction Property Map
    Handling method for medium-risk requests. SecurityAction Name parameter supports: - Deny: block; - Monitor: observe; - Redirect: Redirect; - Challenge: Challenge. default value is Monitor.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestAction, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileHighRiskRequestActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestAction, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleDeviceProfileMediumRiskRequestActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationAction, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementClientAttestationRulesRuleInvalidAttestationActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRules, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesArgs

    Rules List<TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRule>
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    Rules []TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRule
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    rules List<TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRule>
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    rules TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRule[]
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    rules Sequence[TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRule]
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    rules List<Property Map>
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRule, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleArgs

    Actions List<TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleAction>
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    Name string
    Specifies the name of the precise rate limit.
    Priority double
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    Actions []TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    Name string
    Specifies the name of the precise rate limit.
    Priority float64
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    actions List<TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleAction>
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    name String
    Specifies the name of the precise rate limit.
    priority Double
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    actions TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleAction[]
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id string
    ID of the resource.
    name string
    Specifies the name of the precise rate limit.
    priority number
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    actions Sequence[TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleAction]
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition str
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled str
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id str
    ID of the resource.
    name str
    Specifies the name of the precise rate limit.
    priority float
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    actions List<Property Map>
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    name String
    Specifies the name of the precise rate limit.
    priority Number
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleAction, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionArgs

    SecurityAction TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityAction
    The handling method of the Bot custom rule. valid values: - Allow: pass, where AllowActionParameters supports MinDelayTime and MaxDelayTime configuration; - Deny: block, where DenyActionParameters supports BlockIp, ReturnCustomPage, and Stall configuration; - Monitor: observation; - Challenge: Challenge, where ChallengeActionParameters.ChallengeOption supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL.
    Weight double
    The Weight of the current SecurityAction, only supported between 10 and 100 and must be a multiple of 10. the total of all Weight parameters must equal 100.
    SecurityAction TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityAction
    The handling method of the Bot custom rule. valid values: - Allow: pass, where AllowActionParameters supports MinDelayTime and MaxDelayTime configuration; - Deny: block, where DenyActionParameters supports BlockIp, ReturnCustomPage, and Stall configuration; - Monitor: observation; - Challenge: Challenge, where ChallengeActionParameters.ChallengeOption supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL.
    Weight float64
    The Weight of the current SecurityAction, only supported between 10 and 100 and must be a multiple of 10. the total of all Weight parameters must equal 100.
    securityAction TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityAction
    The handling method of the Bot custom rule. valid values: - Allow: pass, where AllowActionParameters supports MinDelayTime and MaxDelayTime configuration; - Deny: block, where DenyActionParameters supports BlockIp, ReturnCustomPage, and Stall configuration; - Monitor: observation; - Challenge: Challenge, where ChallengeActionParameters.ChallengeOption supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL.
    weight Double
    The Weight of the current SecurityAction, only supported between 10 and 100 and must be a multiple of 10. the total of all Weight parameters must equal 100.
    securityAction TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityAction
    The handling method of the Bot custom rule. valid values: - Allow: pass, where AllowActionParameters supports MinDelayTime and MaxDelayTime configuration; - Deny: block, where DenyActionParameters supports BlockIp, ReturnCustomPage, and Stall configuration; - Monitor: observation; - Challenge: Challenge, where ChallengeActionParameters.ChallengeOption supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL.
    weight number
    The Weight of the current SecurityAction, only supported between 10 and 100 and must be a multiple of 10. the total of all Weight parameters must equal 100.
    security_action TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityAction
    The handling method of the Bot custom rule. valid values: - Allow: pass, where AllowActionParameters supports MinDelayTime and MaxDelayTime configuration; - Deny: block, where DenyActionParameters supports BlockIp, ReturnCustomPage, and Stall configuration; - Monitor: observation; - Challenge: Challenge, where ChallengeActionParameters.ChallengeOption supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL.
    weight float
    The Weight of the current SecurityAction, only supported between 10 and 100 and must be a multiple of 10. the total of all Weight parameters must equal 100.
    securityAction Property Map
    The handling method of the Bot custom rule. valid values: - Allow: pass, where AllowActionParameters supports MinDelayTime and MaxDelayTime configuration; - Deny: block, where DenyActionParameters supports BlockIp, ReturnCustomPage, and Stall configuration; - Monitor: observation; - Challenge: Challenge, where ChallengeActionParameters.ChallengeOption supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL.
    weight Number
    The Weight of the current SecurityAction, only supported between 10 and 100 and must be a multiple of 10. the total of all Weight parameters must equal 100.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityAction, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyBotManagementCustomRulesRuleActionSecurityActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyCustomRules, TeoWebSecurityTemplateSecurityPolicyCustomRulesArgs

    Rules List<TeoWebSecurityTemplateSecurityPolicyCustomRulesRule>
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    Rules []TeoWebSecurityTemplateSecurityPolicyCustomRulesRule
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    rules List<TeoWebSecurityTemplateSecurityPolicyCustomRulesRule>
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    rules TeoWebSecurityTemplateSecurityPolicyCustomRulesRule[]
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    rules Sequence[TeoWebSecurityTemplateSecurityPolicyCustomRulesRule]
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.
    rules List<Property Map>
    The custom rule. When modifying the Web protection configuration using ModifySecurityPolicy: - if the Rules parameter is not specified or the parameter length of Rules is zero: clear all custom rule configurations; - if the Rules parameter is not specified: keep the existing custom rule configuration without modification.

    TeoWebSecurityTemplateSecurityPolicyCustomRulesRule, TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleArgs

    Action TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Name string
    Specifies the name of the precise rate limit.
    Id string
    ID of the resource.
    Priority double
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    RuleType string
    Type of custom rule. Values: - BasicAccessRule: basic access control; - PreciseMatchRule: exact custom rule, default; - ManagedAccessRule: expert customized rule, output parameter only.The default value is PreciseMatchRule.
    Action TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Name string
    Specifies the name of the precise rate limit.
    Id string
    ID of the resource.
    Priority float64
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    RuleType string
    Type of custom rule. Values: - BasicAccessRule: basic access control; - PreciseMatchRule: exact custom rule, default; - ManagedAccessRule: expert customized rule, output parameter only.The default value is PreciseMatchRule.
    action TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    name String
    Specifies the name of the precise rate limit.
    id String
    ID of the resource.
    priority Double
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    ruleType String
    Type of custom rule. Values: - BasicAccessRule: basic access control; - PreciseMatchRule: exact custom rule, default; - ManagedAccessRule: expert customized rule, output parameter only.The default value is PreciseMatchRule.
    action TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    name string
    Specifies the name of the precise rate limit.
    id string
    ID of the resource.
    priority number
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    ruleType string
    Type of custom rule. Values: - BasicAccessRule: basic access control; - PreciseMatchRule: exact custom rule, default; - ManagedAccessRule: expert customized rule, output parameter only.The default value is PreciseMatchRule.
    action TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition str
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled str
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    name str
    Specifies the name of the precise rate limit.
    id str
    ID of the resource.
    priority float
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    rule_type str
    Type of custom rule. Values: - BasicAccessRule: basic access control; - PreciseMatchRule: exact custom rule, default; - ManagedAccessRule: expert customized rule, output parameter only.The default value is PreciseMatchRule.
    action Property Map
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    name String
    Specifies the name of the precise rate limit.
    id String
    ID of the resource.
    priority Number
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    ruleType String
    Type of custom rule. Values: - BasicAccessRule: basic access control; - PreciseMatchRule: exact custom rule, default; - ManagedAccessRule: expert customized rule, output parameter only.The default value is PreciseMatchRule.

    TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleAction, TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyCustomRulesRuleActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyExceptionRules, TeoWebSecurityTemplateSecurityPolicyExceptionRulesArgs

    Rules List<TeoWebSecurityTemplateSecurityPolicyExceptionRulesRule>
    Definition list of exception Rules. when using ModifySecurityPolicy to modify Web protection configuration: - if the Rules parameter is not specified or the parameter length is zero: clear all exception rule configurations.- if the ExceptionRules parameter value is not specified in SecurityPolicy: keep existing exception rule configurations without modification.
    Rules []TeoWebSecurityTemplateSecurityPolicyExceptionRulesRule
    Definition list of exception Rules. when using ModifySecurityPolicy to modify Web protection configuration: - if the Rules parameter is not specified or the parameter length is zero: clear all exception rule configurations.- if the ExceptionRules parameter value is not specified in SecurityPolicy: keep existing exception rule configurations without modification.
    rules List<TeoWebSecurityTemplateSecurityPolicyExceptionRulesRule>
    Definition list of exception Rules. when using ModifySecurityPolicy to modify Web protection configuration: - if the Rules parameter is not specified or the parameter length is zero: clear all exception rule configurations.- if the ExceptionRules parameter value is not specified in SecurityPolicy: keep existing exception rule configurations without modification.
    rules TeoWebSecurityTemplateSecurityPolicyExceptionRulesRule[]
    Definition list of exception Rules. when using ModifySecurityPolicy to modify Web protection configuration: - if the Rules parameter is not specified or the parameter length is zero: clear all exception rule configurations.- if the ExceptionRules parameter value is not specified in SecurityPolicy: keep existing exception rule configurations without modification.
    rules Sequence[TeoWebSecurityTemplateSecurityPolicyExceptionRulesRule]
    Definition list of exception Rules. when using ModifySecurityPolicy to modify Web protection configuration: - if the Rules parameter is not specified or the parameter length is zero: clear all exception rule configurations.- if the ExceptionRules parameter value is not specified in SecurityPolicy: keep existing exception rule configurations without modification.
    rules List<Property Map>
    Definition list of exception Rules. when using ModifySecurityPolicy to modify Web protection configuration: - if the Rules parameter is not specified or the parameter length is zero: clear all exception rule configurations.- if the ExceptionRules parameter value is not specified in SecurityPolicy: keep existing exception rule configurations without modification.

    TeoWebSecurityTemplateSecurityPolicyExceptionRulesRule, TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleArgs

    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    ManagedRuleGroupsForExceptions List<string>
    A managed rule group with designated exception rules is valid only when SkipScope is ManagedRules, and at this point you cannot specify ManagedRulesForException.
    ManagedRulesForExceptions List<string>
    Specifies the managed rule for the exception rule. valid only when SkipScope is ManagedRules. cannot specify ManagedRuleGroupsForException at this time.
    Name string
    Specifies the name of the precise rate limit.
    RequestFieldsForExceptions List<TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleRequestFieldsForException>
    Specify exception rules to skip request fields. valid only when SkipScope is ManagedRules and SkipOption is SkipOnSpecifiedRequestFields.
    SkipOption string
    Skip the specific type of request. valid values: - SkipOnAllRequestFields: skip all requests; - SkipOnSpecifiedRequestFields: skip specified request fields. valid only when SkipScope is ManagedRules.
    SkipScope string
    Exception rule execution options, valid values: - WebSecurityModules: designate the security protection module for the exception rule. - ManagedRules: designate the managed rule.
    WebSecurityModulesForExceptions List<string>
    Specifies the security protection module for exception rules. valid only when SkipScope is WebSecurityModules. valid values: - websec-mod-managed-rules: managed rule.- websec-mod-rate-limiting: rate limit.- websec-mod-custom-rules: custom rule.- websec-mod-adaptive-control: adaptive frequency control, intelligent client filtering, slow attack protection, traffic theft protection.- websec-mod-bot: bot management.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    ManagedRuleGroupsForExceptions []string
    A managed rule group with designated exception rules is valid only when SkipScope is ManagedRules, and at this point you cannot specify ManagedRulesForException.
    ManagedRulesForExceptions []string
    Specifies the managed rule for the exception rule. valid only when SkipScope is ManagedRules. cannot specify ManagedRuleGroupsForException at this time.
    Name string
    Specifies the name of the precise rate limit.
    RequestFieldsForExceptions []TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleRequestFieldsForException
    Specify exception rules to skip request fields. valid only when SkipScope is ManagedRules and SkipOption is SkipOnSpecifiedRequestFields.
    SkipOption string
    Skip the specific type of request. valid values: - SkipOnAllRequestFields: skip all requests; - SkipOnSpecifiedRequestFields: skip specified request fields. valid only when SkipScope is ManagedRules.
    SkipScope string
    Exception rule execution options, valid values: - WebSecurityModules: designate the security protection module for the exception rule. - ManagedRules: designate the managed rule.
    WebSecurityModulesForExceptions []string
    Specifies the security protection module for exception rules. valid only when SkipScope is WebSecurityModules. valid values: - websec-mod-managed-rules: managed rule.- websec-mod-rate-limiting: rate limit.- websec-mod-custom-rules: custom rule.- websec-mod-adaptive-control: adaptive frequency control, intelligent client filtering, slow attack protection, traffic theft protection.- websec-mod-bot: bot management.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    managedRuleGroupsForExceptions List<String>
    A managed rule group with designated exception rules is valid only when SkipScope is ManagedRules, and at this point you cannot specify ManagedRulesForException.
    managedRulesForExceptions List<String>
    Specifies the managed rule for the exception rule. valid only when SkipScope is ManagedRules. cannot specify ManagedRuleGroupsForException at this time.
    name String
    Specifies the name of the precise rate limit.
    requestFieldsForExceptions List<TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleRequestFieldsForException>
    Specify exception rules to skip request fields. valid only when SkipScope is ManagedRules and SkipOption is SkipOnSpecifiedRequestFields.
    skipOption String
    Skip the specific type of request. valid values: - SkipOnAllRequestFields: skip all requests; - SkipOnSpecifiedRequestFields: skip specified request fields. valid only when SkipScope is ManagedRules.
    skipScope String
    Exception rule execution options, valid values: - WebSecurityModules: designate the security protection module for the exception rule. - ManagedRules: designate the managed rule.
    webSecurityModulesForExceptions List<String>
    Specifies the security protection module for exception rules. valid only when SkipScope is WebSecurityModules. valid values: - websec-mod-managed-rules: managed rule.- websec-mod-rate-limiting: rate limit.- websec-mod-custom-rules: custom rule.- websec-mod-adaptive-control: adaptive frequency control, intelligent client filtering, slow attack protection, traffic theft protection.- websec-mod-bot: bot management.
    condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id string
    ID of the resource.
    managedRuleGroupsForExceptions string[]
    A managed rule group with designated exception rules is valid only when SkipScope is ManagedRules, and at this point you cannot specify ManagedRulesForException.
    managedRulesForExceptions string[]
    Specifies the managed rule for the exception rule. valid only when SkipScope is ManagedRules. cannot specify ManagedRuleGroupsForException at this time.
    name string
    Specifies the name of the precise rate limit.
    requestFieldsForExceptions TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleRequestFieldsForException[]
    Specify exception rules to skip request fields. valid only when SkipScope is ManagedRules and SkipOption is SkipOnSpecifiedRequestFields.
    skipOption string
    Skip the specific type of request. valid values: - SkipOnAllRequestFields: skip all requests; - SkipOnSpecifiedRequestFields: skip specified request fields. valid only when SkipScope is ManagedRules.
    skipScope string
    Exception rule execution options, valid values: - WebSecurityModules: designate the security protection module for the exception rule. - ManagedRules: designate the managed rule.
    webSecurityModulesForExceptions string[]
    Specifies the security protection module for exception rules. valid only when SkipScope is WebSecurityModules. valid values: - websec-mod-managed-rules: managed rule.- websec-mod-rate-limiting: rate limit.- websec-mod-custom-rules: custom rule.- websec-mod-adaptive-control: adaptive frequency control, intelligent client filtering, slow attack protection, traffic theft protection.- websec-mod-bot: bot management.
    condition str
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled str
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id str
    ID of the resource.
    managed_rule_groups_for_exceptions Sequence[str]
    A managed rule group with designated exception rules is valid only when SkipScope is ManagedRules, and at this point you cannot specify ManagedRulesForException.
    managed_rules_for_exceptions Sequence[str]
    Specifies the managed rule for the exception rule. valid only when SkipScope is ManagedRules. cannot specify ManagedRuleGroupsForException at this time.
    name str
    Specifies the name of the precise rate limit.
    request_fields_for_exceptions Sequence[TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleRequestFieldsForException]
    Specify exception rules to skip request fields. valid only when SkipScope is ManagedRules and SkipOption is SkipOnSpecifiedRequestFields.
    skip_option str
    Skip the specific type of request. valid values: - SkipOnAllRequestFields: skip all requests; - SkipOnSpecifiedRequestFields: skip specified request fields. valid only when SkipScope is ManagedRules.
    skip_scope str
    Exception rule execution options, valid values: - WebSecurityModules: designate the security protection module for the exception rule. - ManagedRules: designate the managed rule.
    web_security_modules_for_exceptions Sequence[str]
    Specifies the security protection module for exception rules. valid only when SkipScope is WebSecurityModules. valid values: - websec-mod-managed-rules: managed rule.- websec-mod-rate-limiting: rate limit.- websec-mod-custom-rules: custom rule.- websec-mod-adaptive-control: adaptive frequency control, intelligent client filtering, slow attack protection, traffic theft protection.- websec-mod-bot: bot management.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    managedRuleGroupsForExceptions List<String>
    A managed rule group with designated exception rules is valid only when SkipScope is ManagedRules, and at this point you cannot specify ManagedRulesForException.
    managedRulesForExceptions List<String>
    Specifies the managed rule for the exception rule. valid only when SkipScope is ManagedRules. cannot specify ManagedRuleGroupsForException at this time.
    name String
    Specifies the name of the precise rate limit.
    requestFieldsForExceptions List<Property Map>
    Specify exception rules to skip request fields. valid only when SkipScope is ManagedRules and SkipOption is SkipOnSpecifiedRequestFields.
    skipOption String
    Skip the specific type of request. valid values: - SkipOnAllRequestFields: skip all requests; - SkipOnSpecifiedRequestFields: skip specified request fields. valid only when SkipScope is ManagedRules.
    skipScope String
    Exception rule execution options, valid values: - WebSecurityModules: designate the security protection module for the exception rule. - ManagedRules: designate the managed rule.
    webSecurityModulesForExceptions List<String>
    Specifies the security protection module for exception rules. valid only when SkipScope is WebSecurityModules. valid values: - websec-mod-managed-rules: managed rule.- websec-mod-rate-limiting: rate limit.- websec-mod-custom-rules: custom rule.- websec-mod-adaptive-control: adaptive frequency control, intelligent client filtering, slow attack protection, traffic theft protection.- websec-mod-bot: bot management.

    TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleRequestFieldsForException, TeoWebSecurityTemplateSecurityPolicyExceptionRulesRuleRequestFieldsForExceptionArgs

    Condition string
    Skip specific field expression must comply with expression grammar. Condition supports expression configuration syntax: - write according to the matching conditional expression syntax of rules, with support for referencing key and value. - supports in, like operators, and logical combination with and. For example: - ${key} in ['x-trace-id']: the parameter name equals x-trace-id. - ${key} in ['x-trace-id'] and ${value} like ['Bearer *']: the parameter name equals x-trace-id and the parameter value wildcard matches Bearer *.
    Scope string
    Skip specific field. supported values:. - body.json: parameter content in json requests. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "body.json", "Condition": "", "TargetField": "key" }, which means all parameters in json requests skip WAF scan. cookie: cookie; at this point Condition supports key, value, TargetField supports key, value, for example { "Scope": "cookie", "Condition": "${key} in ['account-id'] and ${value} like ['prefix-']", "TargetField": "value" }, which means the cookie parameter name equals account-id and the parameter value wildcard matches prefix- to skip WAF scan;. header: HTTP header parameters. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "header", "Condition": "${key} like ['x-auth-']", "TargetField": "value" }, which means header parameter name wildcard match x-auth- skips WAF scan. uri.query: URL encoding content/query parameter. at this point, Condition supports key and value, TargetField supports key and value. example: { "Scope": "uri.query", "Condition": "${key} in ['action'] and ${value} in ['upload', 'delete']", "TargetField": "value" }. indicates URL encoding content/query parameter name equal to action and parameter value equal to upload or delete skips WAF scan. uri: specifies the request path uri. at this point, Condition must be empty. TargetField supports query, path, fullpath, such as {"Scope": "uri", "Condition": "", "TargetField": "query"}, indicates the request path uri skips WAF scan for query parameters. body: request body content. at this point Condition must be empty, TargetField supports fullbody, multipart, such as { "Scope": "body", "Condition": "", "TargetField": "fullbody" }, which means the request body content skips WAF scan as a full request.
    TargetField string
    The Scope parameter takes different values. the TargetField expression supports the following values:. - body.json: supports key, value. - cookie: supports key and value. - header: supports key, value. - uri.query: supports key and value. - uri. specifies path, query, or fullpath. - Body: supports fullbody and multipart.
    Condition string
    Skip specific field expression must comply with expression grammar. Condition supports expression configuration syntax: - write according to the matching conditional expression syntax of rules, with support for referencing key and value. - supports in, like operators, and logical combination with and. For example: - ${key} in ['x-trace-id']: the parameter name equals x-trace-id. - ${key} in ['x-trace-id'] and ${value} like ['Bearer *']: the parameter name equals x-trace-id and the parameter value wildcard matches Bearer *.
    Scope string
    Skip specific field. supported values:. - body.json: parameter content in json requests. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "body.json", "Condition": "", "TargetField": "key" }, which means all parameters in json requests skip WAF scan. cookie: cookie; at this point Condition supports key, value, TargetField supports key, value, for example { "Scope": "cookie", "Condition": "${key} in ['account-id'] and ${value} like ['prefix-']", "TargetField": "value" }, which means the cookie parameter name equals account-id and the parameter value wildcard matches prefix- to skip WAF scan;. header: HTTP header parameters. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "header", "Condition": "${key} like ['x-auth-']", "TargetField": "value" }, which means header parameter name wildcard match x-auth- skips WAF scan. uri.query: URL encoding content/query parameter. at this point, Condition supports key and value, TargetField supports key and value. example: { "Scope": "uri.query", "Condition": "${key} in ['action'] and ${value} in ['upload', 'delete']", "TargetField": "value" }. indicates URL encoding content/query parameter name equal to action and parameter value equal to upload or delete skips WAF scan. uri: specifies the request path uri. at this point, Condition must be empty. TargetField supports query, path, fullpath, such as {"Scope": "uri", "Condition": "", "TargetField": "query"}, indicates the request path uri skips WAF scan for query parameters. body: request body content. at this point Condition must be empty, TargetField supports fullbody, multipart, such as { "Scope": "body", "Condition": "", "TargetField": "fullbody" }, which means the request body content skips WAF scan as a full request.
    TargetField string
    The Scope parameter takes different values. the TargetField expression supports the following values:. - body.json: supports key, value. - cookie: supports key and value. - header: supports key, value. - uri.query: supports key and value. - uri. specifies path, query, or fullpath. - Body: supports fullbody and multipart.
    condition String
    Skip specific field expression must comply with expression grammar. Condition supports expression configuration syntax: - write according to the matching conditional expression syntax of rules, with support for referencing key and value. - supports in, like operators, and logical combination with and. For example: - ${key} in ['x-trace-id']: the parameter name equals x-trace-id. - ${key} in ['x-trace-id'] and ${value} like ['Bearer *']: the parameter name equals x-trace-id and the parameter value wildcard matches Bearer *.
    scope String
    Skip specific field. supported values:. - body.json: parameter content in json requests. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "body.json", "Condition": "", "TargetField": "key" }, which means all parameters in json requests skip WAF scan. cookie: cookie; at this point Condition supports key, value, TargetField supports key, value, for example { "Scope": "cookie", "Condition": "${key} in ['account-id'] and ${value} like ['prefix-']", "TargetField": "value" }, which means the cookie parameter name equals account-id and the parameter value wildcard matches prefix- to skip WAF scan;. header: HTTP header parameters. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "header", "Condition": "${key} like ['x-auth-']", "TargetField": "value" }, which means header parameter name wildcard match x-auth- skips WAF scan. uri.query: URL encoding content/query parameter. at this point, Condition supports key and value, TargetField supports key and value. example: { "Scope": "uri.query", "Condition": "${key} in ['action'] and ${value} in ['upload', 'delete']", "TargetField": "value" }. indicates URL encoding content/query parameter name equal to action and parameter value equal to upload or delete skips WAF scan. uri: specifies the request path uri. at this point, Condition must be empty. TargetField supports query, path, fullpath, such as {"Scope": "uri", "Condition": "", "TargetField": "query"}, indicates the request path uri skips WAF scan for query parameters. body: request body content. at this point Condition must be empty, TargetField supports fullbody, multipart, such as { "Scope": "body", "Condition": "", "TargetField": "fullbody" }, which means the request body content skips WAF scan as a full request.
    targetField String
    The Scope parameter takes different values. the TargetField expression supports the following values:. - body.json: supports key, value. - cookie: supports key and value. - header: supports key, value. - uri.query: supports key and value. - uri. specifies path, query, or fullpath. - Body: supports fullbody and multipart.
    condition string
    Skip specific field expression must comply with expression grammar. Condition supports expression configuration syntax: - write according to the matching conditional expression syntax of rules, with support for referencing key and value. - supports in, like operators, and logical combination with and. For example: - ${key} in ['x-trace-id']: the parameter name equals x-trace-id. - ${key} in ['x-trace-id'] and ${value} like ['Bearer *']: the parameter name equals x-trace-id and the parameter value wildcard matches Bearer *.
    scope string
    Skip specific field. supported values:. - body.json: parameter content in json requests. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "body.json", "Condition": "", "TargetField": "key" }, which means all parameters in json requests skip WAF scan. cookie: cookie; at this point Condition supports key, value, TargetField supports key, value, for example { "Scope": "cookie", "Condition": "${key} in ['account-id'] and ${value} like ['prefix-']", "TargetField": "value" }, which means the cookie parameter name equals account-id and the parameter value wildcard matches prefix- to skip WAF scan;. header: HTTP header parameters. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "header", "Condition": "${key} like ['x-auth-']", "TargetField": "value" }, which means header parameter name wildcard match x-auth- skips WAF scan. uri.query: URL encoding content/query parameter. at this point, Condition supports key and value, TargetField supports key and value. example: { "Scope": "uri.query", "Condition": "${key} in ['action'] and ${value} in ['upload', 'delete']", "TargetField": "value" }. indicates URL encoding content/query parameter name equal to action and parameter value equal to upload or delete skips WAF scan. uri: specifies the request path uri. at this point, Condition must be empty. TargetField supports query, path, fullpath, such as {"Scope": "uri", "Condition": "", "TargetField": "query"}, indicates the request path uri skips WAF scan for query parameters. body: request body content. at this point Condition must be empty, TargetField supports fullbody, multipart, such as { "Scope": "body", "Condition": "", "TargetField": "fullbody" }, which means the request body content skips WAF scan as a full request.
    targetField string
    The Scope parameter takes different values. the TargetField expression supports the following values:. - body.json: supports key, value. - cookie: supports key and value. - header: supports key, value. - uri.query: supports key and value. - uri. specifies path, query, or fullpath. - Body: supports fullbody and multipart.
    condition str
    Skip specific field expression must comply with expression grammar. Condition supports expression configuration syntax: - write according to the matching conditional expression syntax of rules, with support for referencing key and value. - supports in, like operators, and logical combination with and. For example: - ${key} in ['x-trace-id']: the parameter name equals x-trace-id. - ${key} in ['x-trace-id'] and ${value} like ['Bearer *']: the parameter name equals x-trace-id and the parameter value wildcard matches Bearer *.
    scope str
    Skip specific field. supported values:. - body.json: parameter content in json requests. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "body.json", "Condition": "", "TargetField": "key" }, which means all parameters in json requests skip WAF scan. cookie: cookie; at this point Condition supports key, value, TargetField supports key, value, for example { "Scope": "cookie", "Condition": "${key} in ['account-id'] and ${value} like ['prefix-']", "TargetField": "value" }, which means the cookie parameter name equals account-id and the parameter value wildcard matches prefix- to skip WAF scan;. header: HTTP header parameters. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "header", "Condition": "${key} like ['x-auth-']", "TargetField": "value" }, which means header parameter name wildcard match x-auth- skips WAF scan. uri.query: URL encoding content/query parameter. at this point, Condition supports key and value, TargetField supports key and value. example: { "Scope": "uri.query", "Condition": "${key} in ['action'] and ${value} in ['upload', 'delete']", "TargetField": "value" }. indicates URL encoding content/query parameter name equal to action and parameter value equal to upload or delete skips WAF scan. uri: specifies the request path uri. at this point, Condition must be empty. TargetField supports query, path, fullpath, such as {"Scope": "uri", "Condition": "", "TargetField": "query"}, indicates the request path uri skips WAF scan for query parameters. body: request body content. at this point Condition must be empty, TargetField supports fullbody, multipart, such as { "Scope": "body", "Condition": "", "TargetField": "fullbody" }, which means the request body content skips WAF scan as a full request.
    target_field str
    The Scope parameter takes different values. the TargetField expression supports the following values:. - body.json: supports key, value. - cookie: supports key and value. - header: supports key, value. - uri.query: supports key and value. - uri. specifies path, query, or fullpath. - Body: supports fullbody and multipart.
    condition String
    Skip specific field expression must comply with expression grammar. Condition supports expression configuration syntax: - write according to the matching conditional expression syntax of rules, with support for referencing key and value. - supports in, like operators, and logical combination with and. For example: - ${key} in ['x-trace-id']: the parameter name equals x-trace-id. - ${key} in ['x-trace-id'] and ${value} like ['Bearer *']: the parameter name equals x-trace-id and the parameter value wildcard matches Bearer *.
    scope String
    Skip specific field. supported values:. - body.json: parameter content in json requests. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "body.json", "Condition": "", "TargetField": "key" }, which means all parameters in json requests skip WAF scan. cookie: cookie; at this point Condition supports key, value, TargetField supports key, value, for example { "Scope": "cookie", "Condition": "${key} in ['account-id'] and ${value} like ['prefix-']", "TargetField": "value" }, which means the cookie parameter name equals account-id and the parameter value wildcard matches prefix- to skip WAF scan;. header: HTTP header parameters. at this point, Condition supports key and value, TargetField supports key and value, for example { "Scope": "header", "Condition": "${key} like ['x-auth-']", "TargetField": "value" }, which means header parameter name wildcard match x-auth- skips WAF scan. uri.query: URL encoding content/query parameter. at this point, Condition supports key and value, TargetField supports key and value. example: { "Scope": "uri.query", "Condition": "${key} in ['action'] and ${value} in ['upload', 'delete']", "TargetField": "value" }. indicates URL encoding content/query parameter name equal to action and parameter value equal to upload or delete skips WAF scan. uri: specifies the request path uri. at this point, Condition must be empty. TargetField supports query, path, fullpath, such as {"Scope": "uri", "Condition": "", "TargetField": "query"}, indicates the request path uri skips WAF scan for query parameters. body: request body content. at this point Condition must be empty, TargetField supports fullbody, multipart, such as { "Scope": "body", "Condition": "", "TargetField": "fullbody" }, which means the request body content skips WAF scan as a full request.
    targetField String
    The Scope parameter takes different values. the TargetField expression supports the following values:. - body.json: supports key, value. - cookie: supports key and value. - header: supports key, value. - uri.query: supports key and value. - uri. specifies path, query, or fullpath. - Body: supports fullbody and multipart.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtection, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionArgs

    AdaptiveFrequencyControl TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControl
    Specifies the specific configuration of adaptive frequency control.
    BandwidthAbuseDefense TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefense
    Specifies the specific configuration for bandwidth abuse protection.
    ClientFiltering TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFiltering
    Specifies the intelligent client filter configuration.
    SlowAttackDefense TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefense
    Specifies the configuration of slow attack protection.
    AdaptiveFrequencyControl TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControl
    Specifies the specific configuration of adaptive frequency control.
    BandwidthAbuseDefense TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefense
    Specifies the specific configuration for bandwidth abuse protection.
    ClientFiltering TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFiltering
    Specifies the intelligent client filter configuration.
    SlowAttackDefense TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefense
    Specifies the configuration of slow attack protection.
    adaptiveFrequencyControl TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControl
    Specifies the specific configuration of adaptive frequency control.
    bandwidthAbuseDefense TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefense
    Specifies the specific configuration for bandwidth abuse protection.
    clientFiltering TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFiltering
    Specifies the intelligent client filter configuration.
    slowAttackDefense TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefense
    Specifies the configuration of slow attack protection.
    adaptiveFrequencyControl TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControl
    Specifies the specific configuration of adaptive frequency control.
    bandwidthAbuseDefense TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefense
    Specifies the specific configuration for bandwidth abuse protection.
    clientFiltering TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFiltering
    Specifies the intelligent client filter configuration.
    slowAttackDefense TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefense
    Specifies the configuration of slow attack protection.
    adaptiveFrequencyControl Property Map
    Specifies the specific configuration of adaptive frequency control.
    bandwidthAbuseDefense Property Map
    Specifies the specific configuration for bandwidth abuse protection.
    clientFiltering Property Map
    Specifies the intelligent client filter configuration.
    slowAttackDefense Property Map
    Specifies the configuration of slow attack protection.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControl, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlArgs

    Enabled string
    Whether adaptive frequency control is enabled. valid values: - on: enable; - off: disable.
    Action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlAction
    The handling method of adaptive frequency control. this field is required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    Sensitivity string
    The restriction level of adaptive frequency control. required when Enabled is on. valid values: - Loose: Loose- Moderate: Moderate- Strict: Strict.
    Enabled string
    Whether adaptive frequency control is enabled. valid values: - on: enable; - off: disable.
    Action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlAction
    The handling method of adaptive frequency control. this field is required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    Sensitivity string
    The restriction level of adaptive frequency control. required when Enabled is on. valid values: - Loose: Loose- Moderate: Moderate- Strict: Strict.
    enabled String
    Whether adaptive frequency control is enabled. valid values: - on: enable; - off: disable.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlAction
    The handling method of adaptive frequency control. this field is required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    sensitivity String
    The restriction level of adaptive frequency control. required when Enabled is on. valid values: - Loose: Loose- Moderate: Moderate- Strict: Strict.
    enabled string
    Whether adaptive frequency control is enabled. valid values: - on: enable; - off: disable.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlAction
    The handling method of adaptive frequency control. this field is required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    sensitivity string
    The restriction level of adaptive frequency control. required when Enabled is on. valid values: - Loose: Loose- Moderate: Moderate- Strict: Strict.
    enabled str
    Whether adaptive frequency control is enabled. valid values: - on: enable; - off: disable.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlAction
    The handling method of adaptive frequency control. this field is required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    sensitivity str
    The restriction level of adaptive frequency control. required when Enabled is on. valid values: - Loose: Loose- Moderate: Moderate- Strict: Strict.
    enabled String
    Whether adaptive frequency control is enabled. valid values: - on: enable; - off: disable.
    action Property Map
    The handling method of adaptive frequency control. this field is required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    sensitivity String
    The restriction level of adaptive frequency control. required when Enabled is on. valid values: - Loose: Loose- Moderate: Moderate- Strict: Strict.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlAction, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionAdaptiveFrequencyControlActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefense, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseArgs

    Enabled string
    Whether bandwidth abuse protection (applicable to chinese mainland only) is enabled. valid values: - on: enabled; - off: disabled.
    Action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseAction
    Bandwidth abuse protection (applicable to chinese mainland) handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observe; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    Enabled string
    Whether bandwidth abuse protection (applicable to chinese mainland only) is enabled. valid values: - on: enabled; - off: disabled.
    Action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseAction
    Bandwidth abuse protection (applicable to chinese mainland) handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observe; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    enabled String
    Whether bandwidth abuse protection (applicable to chinese mainland only) is enabled. valid values: - on: enabled; - off: disabled.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseAction
    Bandwidth abuse protection (applicable to chinese mainland) handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observe; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    enabled string
    Whether bandwidth abuse protection (applicable to chinese mainland only) is enabled. valid values: - on: enabled; - off: disabled.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseAction
    Bandwidth abuse protection (applicable to chinese mainland) handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observe; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    enabled str
    Whether bandwidth abuse protection (applicable to chinese mainland only) is enabled. valid values: - on: enabled; - off: disabled.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseAction
    Bandwidth abuse protection (applicable to chinese mainland) handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observe; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    enabled String
    Whether bandwidth abuse protection (applicable to chinese mainland only) is enabled. valid values: - on: enabled; - off: disabled.
    action Property Map
    Bandwidth abuse protection (applicable to chinese mainland) handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observe; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseAction, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionBandwidthAbuseDefenseActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFiltering, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringArgs

    Enabled string
    Whether intelligent client filtering is enabled. valid values: - on: enable; - off: disable.
    Action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringAction
    The handling method of intelligent client filtering. when Enabled is on, this field is required. the Name parameter of SecurityAction supports: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    Enabled string
    Whether intelligent client filtering is enabled. valid values: - on: enable; - off: disable.
    Action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringAction
    The handling method of intelligent client filtering. when Enabled is on, this field is required. the Name parameter of SecurityAction supports: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    enabled String
    Whether intelligent client filtering is enabled. valid values: - on: enable; - off: disable.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringAction
    The handling method of intelligent client filtering. when Enabled is on, this field is required. the Name parameter of SecurityAction supports: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    enabled string
    Whether intelligent client filtering is enabled. valid values: - on: enable; - off: disable.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringAction
    The handling method of intelligent client filtering. when Enabled is on, this field is required. the Name parameter of SecurityAction supports: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    enabled str
    Whether intelligent client filtering is enabled. valid values: - on: enable; - off: disable.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringAction
    The handling method of intelligent client filtering. when Enabled is on, this field is required. the Name parameter of SecurityAction supports: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.
    enabled String
    Whether intelligent client filtering is enabled. valid values: - on: enable; - off: disable.
    action Property Map
    The handling method of intelligent client filtering. when Enabled is on, this field is required. the Name parameter of SecurityAction supports: - Monitor: observation; - Deny: block; - Challenge: Challenge, where ChallengeActionParameters.Name only supports JSChallenge.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringAction, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionClientFilteringActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefense, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseArgs

    Enabled string
    Whether slow attack protection is enabled. valid values: - on: enabled; - off: disabled.
    Action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseAction
    Slow attack protection handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block;.
    MinimalRequestBodyTransferRate TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRate
    The specific configuration of the minimum body transfer rate threshold is required when Enabled is on.
    RequestBodyTransferTimeout TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeout
    Specifies the specific configuration of body transfer timeout duration. required when Enabled is on.
    Enabled string
    Whether slow attack protection is enabled. valid values: - on: enabled; - off: disabled.
    Action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseAction
    Slow attack protection handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block;.
    MinimalRequestBodyTransferRate TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRate
    The specific configuration of the minimum body transfer rate threshold is required when Enabled is on.
    RequestBodyTransferTimeout TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeout
    Specifies the specific configuration of body transfer timeout duration. required when Enabled is on.
    enabled String
    Whether slow attack protection is enabled. valid values: - on: enabled; - off: disabled.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseAction
    Slow attack protection handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block;.
    minimalRequestBodyTransferRate TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRate
    The specific configuration of the minimum body transfer rate threshold is required when Enabled is on.
    requestBodyTransferTimeout TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeout
    Specifies the specific configuration of body transfer timeout duration. required when Enabled is on.
    enabled string
    Whether slow attack protection is enabled. valid values: - on: enabled; - off: disabled.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseAction
    Slow attack protection handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block;.
    minimalRequestBodyTransferRate TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRate
    The specific configuration of the minimum body transfer rate threshold is required when Enabled is on.
    requestBodyTransferTimeout TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeout
    Specifies the specific configuration of body transfer timeout duration. required when Enabled is on.
    enabled str
    Whether slow attack protection is enabled. valid values: - on: enabled; - off: disabled.
    action TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseAction
    Slow attack protection handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block;.
    minimal_request_body_transfer_rate TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRate
    The specific configuration of the minimum body transfer rate threshold is required when Enabled is on.
    request_body_transfer_timeout TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeout
    Specifies the specific configuration of body transfer timeout duration. required when Enabled is on.
    enabled String
    Whether slow attack protection is enabled. valid values: - on: enabled; - off: disabled.
    action Property Map
    Slow attack protection handling method. required when Enabled is on. valid values for SecurityAction Name: - Monitor: observation; - Deny: block;.
    minimalRequestBodyTransferRate Property Map
    The specific configuration of the minimum body transfer rate threshold is required when Enabled is on.
    requestBodyTransferTimeout Property Map
    Specifies the specific configuration of body transfer timeout duration. required when Enabled is on.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseAction, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRate, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseMinimalRequestBodyTransferRateArgs

    CountingPeriod string
    Minimum body transfer rate statistical time range, valid values: - 10s: 10 seconds; - 30s: 30 seconds; - 60s: 60 seconds; - 120s: 120 seconds.
    Enabled string
    Specifies whether the minimum body transfer rate threshold is enabled. valid values: - on: enable; - off: disable.
    MinimalAvgTransferRateThreshold string
    Minimum body transfer rate threshold, the measurement unit is only supported in bps.
    CountingPeriod string
    Minimum body transfer rate statistical time range, valid values: - 10s: 10 seconds; - 30s: 30 seconds; - 60s: 60 seconds; - 120s: 120 seconds.
    Enabled string
    Specifies whether the minimum body transfer rate threshold is enabled. valid values: - on: enable; - off: disable.
    MinimalAvgTransferRateThreshold string
    Minimum body transfer rate threshold, the measurement unit is only supported in bps.
    countingPeriod String
    Minimum body transfer rate statistical time range, valid values: - 10s: 10 seconds; - 30s: 30 seconds; - 60s: 60 seconds; - 120s: 120 seconds.
    enabled String
    Specifies whether the minimum body transfer rate threshold is enabled. valid values: - on: enable; - off: disable.
    minimalAvgTransferRateThreshold String
    Minimum body transfer rate threshold, the measurement unit is only supported in bps.
    countingPeriod string
    Minimum body transfer rate statistical time range, valid values: - 10s: 10 seconds; - 30s: 30 seconds; - 60s: 60 seconds; - 120s: 120 seconds.
    enabled string
    Specifies whether the minimum body transfer rate threshold is enabled. valid values: - on: enable; - off: disable.
    minimalAvgTransferRateThreshold string
    Minimum body transfer rate threshold, the measurement unit is only supported in bps.
    counting_period str
    Minimum body transfer rate statistical time range, valid values: - 10s: 10 seconds; - 30s: 30 seconds; - 60s: 60 seconds; - 120s: 120 seconds.
    enabled str
    Specifies whether the minimum body transfer rate threshold is enabled. valid values: - on: enable; - off: disable.
    minimal_avg_transfer_rate_threshold str
    Minimum body transfer rate threshold, the measurement unit is only supported in bps.
    countingPeriod String
    Minimum body transfer rate statistical time range, valid values: - 10s: 10 seconds; - 30s: 30 seconds; - 60s: 60 seconds; - 120s: 120 seconds.
    enabled String
    Specifies whether the minimum body transfer rate threshold is enabled. valid values: - on: enable; - off: disable.
    minimalAvgTransferRateThreshold String
    Minimum body transfer rate threshold, the measurement unit is only supported in bps.

    TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeout, TeoWebSecurityTemplateSecurityPolicyHttpDdosProtectionSlowAttackDefenseRequestBodyTransferTimeoutArgs

    Enabled string
    Whether body transfer timeout is enabled. valid values: - on: enable - off: disable.
    IdleTimeout string
    Body transfer timeout duration. valid values: 5-120. measurement unit: seconds (s) only.
    Enabled string
    Whether body transfer timeout is enabled. valid values: - on: enable - off: disable.
    IdleTimeout string
    Body transfer timeout duration. valid values: 5-120. measurement unit: seconds (s) only.
    enabled String
    Whether body transfer timeout is enabled. valid values: - on: enable - off: disable.
    idleTimeout String
    Body transfer timeout duration. valid values: 5-120. measurement unit: seconds (s) only.
    enabled string
    Whether body transfer timeout is enabled. valid values: - on: enable - off: disable.
    idleTimeout string
    Body transfer timeout duration. valid values: 5-120. measurement unit: seconds (s) only.
    enabled str
    Whether body transfer timeout is enabled. valid values: - on: enable - off: disable.
    idle_timeout str
    Body transfer timeout duration. valid values: 5-120. measurement unit: seconds (s) only.
    enabled String
    Whether body transfer timeout is enabled. valid values: - on: enable - off: disable.
    idleTimeout String
    Body transfer timeout duration. valid values: 5-120. measurement unit: seconds (s) only.

    TeoWebSecurityTemplateSecurityPolicyManagedRules, TeoWebSecurityTemplateSecurityPolicyManagedRulesArgs

    DetectionOnly string
    Evaluation mode is enabled or not, it is valid only when the Enabled parameter is set to on. Values: - on: enabled, all managed rules take effect in observe mode. - off: disabled, all managed rules take effect according to the specified configuration.
    Enabled string
    The managed rule status. Values: - on: enabled, all managed rules take effect as configured; - off: disabled, all managed rules do not take effect.
    AutoUpdate TeoWebSecurityTemplateSecurityPolicyManagedRulesAutoUpdate
    Managed rule automatic update option.
    FrequentScanningProtection TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtection
    High-Frequency scan protection configuration option. when a visitor's frequent requests hit the managed rule configured as block within a period of time, all requests from that visitor are blocked.
    SemanticAnalysis string
    Managed rule semantic analysis is enabled or not, it is valid only when the Enabled parameter is on. Values: on: enabled, perform semantic analysis before processing requests; off: disabled, process requests directly without semantic analysis. The default value is off.
    DetectionOnly string
    Evaluation mode is enabled or not, it is valid only when the Enabled parameter is set to on. Values: - on: enabled, all managed rules take effect in observe mode. - off: disabled, all managed rules take effect according to the specified configuration.
    Enabled string
    The managed rule status. Values: - on: enabled, all managed rules take effect as configured; - off: disabled, all managed rules do not take effect.
    AutoUpdate TeoWebSecurityTemplateSecurityPolicyManagedRulesAutoUpdate
    Managed rule automatic update option.
    FrequentScanningProtection TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtection
    High-Frequency scan protection configuration option. when a visitor's frequent requests hit the managed rule configured as block within a period of time, all requests from that visitor are blocked.
    SemanticAnalysis string
    Managed rule semantic analysis is enabled or not, it is valid only when the Enabled parameter is on. Values: on: enabled, perform semantic analysis before processing requests; off: disabled, process requests directly without semantic analysis. The default value is off.
    detectionOnly String
    Evaluation mode is enabled or not, it is valid only when the Enabled parameter is set to on. Values: - on: enabled, all managed rules take effect in observe mode. - off: disabled, all managed rules take effect according to the specified configuration.
    enabled String
    The managed rule status. Values: - on: enabled, all managed rules take effect as configured; - off: disabled, all managed rules do not take effect.
    autoUpdate TeoWebSecurityTemplateSecurityPolicyManagedRulesAutoUpdate
    Managed rule automatic update option.
    frequentScanningProtection TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtection
    High-Frequency scan protection configuration option. when a visitor's frequent requests hit the managed rule configured as block within a period of time, all requests from that visitor are blocked.
    semanticAnalysis String
    Managed rule semantic analysis is enabled or not, it is valid only when the Enabled parameter is on. Values: on: enabled, perform semantic analysis before processing requests; off: disabled, process requests directly without semantic analysis. The default value is off.
    detectionOnly string
    Evaluation mode is enabled or not, it is valid only when the Enabled parameter is set to on. Values: - on: enabled, all managed rules take effect in observe mode. - off: disabled, all managed rules take effect according to the specified configuration.
    enabled string
    The managed rule status. Values: - on: enabled, all managed rules take effect as configured; - off: disabled, all managed rules do not take effect.
    autoUpdate TeoWebSecurityTemplateSecurityPolicyManagedRulesAutoUpdate
    Managed rule automatic update option.
    frequentScanningProtection TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtection
    High-Frequency scan protection configuration option. when a visitor's frequent requests hit the managed rule configured as block within a period of time, all requests from that visitor are blocked.
    semanticAnalysis string
    Managed rule semantic analysis is enabled or not, it is valid only when the Enabled parameter is on. Values: on: enabled, perform semantic analysis before processing requests; off: disabled, process requests directly without semantic analysis. The default value is off.
    detection_only str
    Evaluation mode is enabled or not, it is valid only when the Enabled parameter is set to on. Values: - on: enabled, all managed rules take effect in observe mode. - off: disabled, all managed rules take effect according to the specified configuration.
    enabled str
    The managed rule status. Values: - on: enabled, all managed rules take effect as configured; - off: disabled, all managed rules do not take effect.
    auto_update TeoWebSecurityTemplateSecurityPolicyManagedRulesAutoUpdate
    Managed rule automatic update option.
    frequent_scanning_protection TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtection
    High-Frequency scan protection configuration option. when a visitor's frequent requests hit the managed rule configured as block within a period of time, all requests from that visitor are blocked.
    semantic_analysis str
    Managed rule semantic analysis is enabled or not, it is valid only when the Enabled parameter is on. Values: on: enabled, perform semantic analysis before processing requests; off: disabled, process requests directly without semantic analysis. The default value is off.
    detectionOnly String
    Evaluation mode is enabled or not, it is valid only when the Enabled parameter is set to on. Values: - on: enabled, all managed rules take effect in observe mode. - off: disabled, all managed rules take effect according to the specified configuration.
    enabled String
    The managed rule status. Values: - on: enabled, all managed rules take effect as configured; - off: disabled, all managed rules do not take effect.
    autoUpdate Property Map
    Managed rule automatic update option.
    frequentScanningProtection Property Map
    High-Frequency scan protection configuration option. when a visitor's frequent requests hit the managed rule configured as block within a period of time, all requests from that visitor are blocked.
    semanticAnalysis String
    Managed rule semantic analysis is enabled or not, it is valid only when the Enabled parameter is on. Values: on: enabled, perform semantic analysis before processing requests; off: disabled, process requests directly without semantic analysis. The default value is off.

    TeoWebSecurityTemplateSecurityPolicyManagedRulesAutoUpdate, TeoWebSecurityTemplateSecurityPolicyManagedRulesAutoUpdateArgs

    AutoUpdateToLatestVersion string
    Enable automatic update to the latest version or not. Values: - on: enabled - off: disabled.
    RulesetVersion string
    Current version, compliant with ISO 8601 standard format, such as 2023-12-21T12:00:32Z, empty by default, output parameter only.
    AutoUpdateToLatestVersion string
    Enable automatic update to the latest version or not. Values: - on: enabled - off: disabled.
    RulesetVersion string
    Current version, compliant with ISO 8601 standard format, such as 2023-12-21T12:00:32Z, empty by default, output parameter only.
    autoUpdateToLatestVersion String
    Enable automatic update to the latest version or not. Values: - on: enabled - off: disabled.
    rulesetVersion String
    Current version, compliant with ISO 8601 standard format, such as 2023-12-21T12:00:32Z, empty by default, output parameter only.
    autoUpdateToLatestVersion string
    Enable automatic update to the latest version or not. Values: - on: enabled - off: disabled.
    rulesetVersion string
    Current version, compliant with ISO 8601 standard format, such as 2023-12-21T12:00:32Z, empty by default, output parameter only.
    auto_update_to_latest_version str
    Enable automatic update to the latest version or not. Values: - on: enabled - off: disabled.
    ruleset_version str
    Current version, compliant with ISO 8601 standard format, such as 2023-12-21T12:00:32Z, empty by default, output parameter only.
    autoUpdateToLatestVersion String
    Enable automatic update to the latest version or not. Values: - on: enabled - off: disabled.
    rulesetVersion String
    Current version, compliant with ISO 8601 standard format, such as 2023-12-21T12:00:32Z, empty by default, output parameter only.

    TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtection, TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionArgs

    Action TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionAction
    The handling action for high-frequency scan protection. required when Enabled is on. valid values for SecurityAction Name: - Deny: block and respond with an interception page; - Monitor: observe without processing requests, log security events in logs; - JSChallenge: respond with a JavaScript challenge page.
    ActionDuration string
    This parameter specifies the duration of the handling Action set by the high frequency scan protection Action parameter. value range: 60 to 86400. measurement unit: seconds (s) only, for example 60s. this field is required when Enabled is on.
    BlockThreshold double
    This parameter specifies the threshold for high-frequency scan protection, which is the intercept count of managed rules set to interception within the time range set by CountingPeriod. value range: 1 to 4294967294, for example 100. when exceeding this statistical value, subsequent requests will trigger the handling Action set by Action. required when Enabled is on.
    CountBy string
    The match mode for request statistics. required when Enabled is on. valid values: - http.request.xff_header_ip: client ip (priority match xff header);- http.request.ip: client ip.
    CountingPeriod string
    This parameter specifies the statistical time window for high-frequency scan protection, which is the time window for counting requests that hit managed rules configured as block. valid values: 5-1800. measurement unit: seconds (s) only, such as 5s. this field is required when Enabled is on.
    Enabled string
    Whether the high-frequency scan protection rule is enabled. valid values: - on: enable. the high-frequency scan protection rule takes effect.- off: disable. the high-frequency scan protection rule does not take effect.
    Action TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionAction
    The handling action for high-frequency scan protection. required when Enabled is on. valid values for SecurityAction Name: - Deny: block and respond with an interception page; - Monitor: observe without processing requests, log security events in logs; - JSChallenge: respond with a JavaScript challenge page.
    ActionDuration string
    This parameter specifies the duration of the handling Action set by the high frequency scan protection Action parameter. value range: 60 to 86400. measurement unit: seconds (s) only, for example 60s. this field is required when Enabled is on.
    BlockThreshold float64
    This parameter specifies the threshold for high-frequency scan protection, which is the intercept count of managed rules set to interception within the time range set by CountingPeriod. value range: 1 to 4294967294, for example 100. when exceeding this statistical value, subsequent requests will trigger the handling Action set by Action. required when Enabled is on.
    CountBy string
    The match mode for request statistics. required when Enabled is on. valid values: - http.request.xff_header_ip: client ip (priority match xff header);- http.request.ip: client ip.
    CountingPeriod string
    This parameter specifies the statistical time window for high-frequency scan protection, which is the time window for counting requests that hit managed rules configured as block. valid values: 5-1800. measurement unit: seconds (s) only, such as 5s. this field is required when Enabled is on.
    Enabled string
    Whether the high-frequency scan protection rule is enabled. valid values: - on: enable. the high-frequency scan protection rule takes effect.- off: disable. the high-frequency scan protection rule does not take effect.
    action TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionAction
    The handling action for high-frequency scan protection. required when Enabled is on. valid values for SecurityAction Name: - Deny: block and respond with an interception page; - Monitor: observe without processing requests, log security events in logs; - JSChallenge: respond with a JavaScript challenge page.
    actionDuration String
    This parameter specifies the duration of the handling Action set by the high frequency scan protection Action parameter. value range: 60 to 86400. measurement unit: seconds (s) only, for example 60s. this field is required when Enabled is on.
    blockThreshold Double
    This parameter specifies the threshold for high-frequency scan protection, which is the intercept count of managed rules set to interception within the time range set by CountingPeriod. value range: 1 to 4294967294, for example 100. when exceeding this statistical value, subsequent requests will trigger the handling Action set by Action. required when Enabled is on.
    countBy String
    The match mode for request statistics. required when Enabled is on. valid values: - http.request.xff_header_ip: client ip (priority match xff header);- http.request.ip: client ip.
    countingPeriod String
    This parameter specifies the statistical time window for high-frequency scan protection, which is the time window for counting requests that hit managed rules configured as block. valid values: 5-1800. measurement unit: seconds (s) only, such as 5s. this field is required when Enabled is on.
    enabled String
    Whether the high-frequency scan protection rule is enabled. valid values: - on: enable. the high-frequency scan protection rule takes effect.- off: disable. the high-frequency scan protection rule does not take effect.
    action TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionAction
    The handling action for high-frequency scan protection. required when Enabled is on. valid values for SecurityAction Name: - Deny: block and respond with an interception page; - Monitor: observe without processing requests, log security events in logs; - JSChallenge: respond with a JavaScript challenge page.
    actionDuration string
    This parameter specifies the duration of the handling Action set by the high frequency scan protection Action parameter. value range: 60 to 86400. measurement unit: seconds (s) only, for example 60s. this field is required when Enabled is on.
    blockThreshold number
    This parameter specifies the threshold for high-frequency scan protection, which is the intercept count of managed rules set to interception within the time range set by CountingPeriod. value range: 1 to 4294967294, for example 100. when exceeding this statistical value, subsequent requests will trigger the handling Action set by Action. required when Enabled is on.
    countBy string
    The match mode for request statistics. required when Enabled is on. valid values: - http.request.xff_header_ip: client ip (priority match xff header);- http.request.ip: client ip.
    countingPeriod string
    This parameter specifies the statistical time window for high-frequency scan protection, which is the time window for counting requests that hit managed rules configured as block. valid values: 5-1800. measurement unit: seconds (s) only, such as 5s. this field is required when Enabled is on.
    enabled string
    Whether the high-frequency scan protection rule is enabled. valid values: - on: enable. the high-frequency scan protection rule takes effect.- off: disable. the high-frequency scan protection rule does not take effect.
    action TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionAction
    The handling action for high-frequency scan protection. required when Enabled is on. valid values for SecurityAction Name: - Deny: block and respond with an interception page; - Monitor: observe without processing requests, log security events in logs; - JSChallenge: respond with a JavaScript challenge page.
    action_duration str
    This parameter specifies the duration of the handling Action set by the high frequency scan protection Action parameter. value range: 60 to 86400. measurement unit: seconds (s) only, for example 60s. this field is required when Enabled is on.
    block_threshold float
    This parameter specifies the threshold for high-frequency scan protection, which is the intercept count of managed rules set to interception within the time range set by CountingPeriod. value range: 1 to 4294967294, for example 100. when exceeding this statistical value, subsequent requests will trigger the handling Action set by Action. required when Enabled is on.
    count_by str
    The match mode for request statistics. required when Enabled is on. valid values: - http.request.xff_header_ip: client ip (priority match xff header);- http.request.ip: client ip.
    counting_period str
    This parameter specifies the statistical time window for high-frequency scan protection, which is the time window for counting requests that hit managed rules configured as block. valid values: 5-1800. measurement unit: seconds (s) only, such as 5s. this field is required when Enabled is on.
    enabled str
    Whether the high-frequency scan protection rule is enabled. valid values: - on: enable. the high-frequency scan protection rule takes effect.- off: disable. the high-frequency scan protection rule does not take effect.
    action Property Map
    The handling action for high-frequency scan protection. required when Enabled is on. valid values for SecurityAction Name: - Deny: block and respond with an interception page; - Monitor: observe without processing requests, log security events in logs; - JSChallenge: respond with a JavaScript challenge page.
    actionDuration String
    This parameter specifies the duration of the handling Action set by the high frequency scan protection Action parameter. value range: 60 to 86400. measurement unit: seconds (s) only, for example 60s. this field is required when Enabled is on.
    blockThreshold Number
    This parameter specifies the threshold for high-frequency scan protection, which is the intercept count of managed rules set to interception within the time range set by CountingPeriod. value range: 1 to 4294967294, for example 100. when exceeding this statistical value, subsequent requests will trigger the handling Action set by Action. required when Enabled is on.
    countBy String
    The match mode for request statistics. required when Enabled is on. valid values: - http.request.xff_header_ip: client ip (priority match xff header);- http.request.ip: client ip.
    countingPeriod String
    This parameter specifies the statistical time window for high-frequency scan protection, which is the time window for counting requests that hit managed rules configured as block. valid values: 5-1800. measurement unit: seconds (s) only, such as 5s. this field is required when Enabled is on.
    enabled String
    Whether the high-frequency scan protection rule is enabled. valid values: - on: enable. the high-frequency scan protection rule takes effect.- off: disable. the high-frequency scan protection rule does not take effect.

    TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionAction, TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyManagedRulesFrequentScanningProtectionActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    TeoWebSecurityTemplateSecurityPolicyRateLimitingRules, TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesArgs

    Rules List<TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRule>
    Definition list of precise rate limiting. When using ModifySecurityPolicy to modify the Web protection configuration: - if the Rules parameter is not specified or its length is zero: clear all precision rate limiting configurations; - if the RateLimitingRules parameter value is unspecified in the SecurityPolicy parameter: retain the existing custom rule configuration without modification.
    Rules []TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRule
    Definition list of precise rate limiting. When using ModifySecurityPolicy to modify the Web protection configuration: - if the Rules parameter is not specified or its length is zero: clear all precision rate limiting configurations; - if the RateLimitingRules parameter value is unspecified in the SecurityPolicy parameter: retain the existing custom rule configuration without modification.
    rules List<TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRule>
    Definition list of precise rate limiting. When using ModifySecurityPolicy to modify the Web protection configuration: - if the Rules parameter is not specified or its length is zero: clear all precision rate limiting configurations; - if the RateLimitingRules parameter value is unspecified in the SecurityPolicy parameter: retain the existing custom rule configuration without modification.
    rules TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRule[]
    Definition list of precise rate limiting. When using ModifySecurityPolicy to modify the Web protection configuration: - if the Rules parameter is not specified or its length is zero: clear all precision rate limiting configurations; - if the RateLimitingRules parameter value is unspecified in the SecurityPolicy parameter: retain the existing custom rule configuration without modification.
    rules Sequence[TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRule]
    Definition list of precise rate limiting. When using ModifySecurityPolicy to modify the Web protection configuration: - if the Rules parameter is not specified or its length is zero: clear all precision rate limiting configurations; - if the RateLimitingRules parameter value is unspecified in the SecurityPolicy parameter: retain the existing custom rule configuration without modification.
    rules List<Property Map>
    Definition list of precise rate limiting. When using ModifySecurityPolicy to modify the Web protection configuration: - if the Rules parameter is not specified or its length is zero: clear all precision rate limiting configurations; - if the RateLimitingRules parameter value is unspecified in the SecurityPolicy parameter: retain the existing custom rule configuration without modification.

    TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRule, TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleArgs

    Action TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    ActionDuration string
    The duration of an Action is only supported in the following units: - s: seconds, value range 1-120; - m: minutes, value range 1-120; - h: hours, value range 1-48; - d: days, value range 1-30.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    CountBies List<string>
    Rate threshold request feature match mode. this field is required when Enabled is on. when there are multiple conditions, composite multiple conditions will perform statistics count. the maximum number of conditions must not exceed 5. valid values: - http.request.ip: client ip; - http.request.xff_header_ip: client ip (priority match xff header); - http.request.uri.path: request access path; - http.request.cookies['session']: Cookie named session, where session can be replaced with your own specified parameter; - http.request.headers['user-agent']: http header named user-agent, where user-agent can be replaced with your own specified parameter; - http.request.ja3: request ja3 fingerprint; - http.request.uri.query['test']: URL query parameter named test, where test can be replaced with your own specified parameter.
    CountingPeriod string
    Specifies the time window for statistics. valid values: - 1s: 1 second;- 5s: 5 seconds;- 10s: 10 seconds;- 20s: 20 seconds;- 30s: 30 seconds;- 40s: 40 seconds;- 50s: 50 seconds;- 1m: 1 minute;- 2m: 2 minutes;- 5m: 5 minutes;- 10m: 10 minutes;- 1h: 1 hour.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    MaxRequestThreshold double
    Precision rate limiting specifies the cumulative number of interceptions within the time range. value ranges from 1 to 100000.
    Name string
    Specifies the name of the precise rate limit.
    Priority double
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    Action TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    ActionDuration string
    The duration of an Action is only supported in the following units: - s: seconds, value range 1-120; - m: minutes, value range 1-120; - h: hours, value range 1-48; - d: days, value range 1-30.
    Condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    CountBies []string
    Rate threshold request feature match mode. this field is required when Enabled is on. when there are multiple conditions, composite multiple conditions will perform statistics count. the maximum number of conditions must not exceed 5. valid values: - http.request.ip: client ip; - http.request.xff_header_ip: client ip (priority match xff header); - http.request.uri.path: request access path; - http.request.cookies['session']: Cookie named session, where session can be replaced with your own specified parameter; - http.request.headers['user-agent']: http header named user-agent, where user-agent can be replaced with your own specified parameter; - http.request.ja3: request ja3 fingerprint; - http.request.uri.query['test']: URL query parameter named test, where test can be replaced with your own specified parameter.
    CountingPeriod string
    Specifies the time window for statistics. valid values: - 1s: 1 second;- 5s: 5 seconds;- 10s: 10 seconds;- 20s: 20 seconds;- 30s: 30 seconds;- 40s: 40 seconds;- 50s: 50 seconds;- 1m: 1 minute;- 2m: 2 minutes;- 5m: 5 minutes;- 10m: 10 minutes;- 1h: 1 hour.
    Enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    Id string
    ID of the resource.
    MaxRequestThreshold float64
    Precision rate limiting specifies the cumulative number of interceptions within the time range. value ranges from 1 to 100000.
    Name string
    Specifies the name of the precise rate limit.
    Priority float64
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    action TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    actionDuration String
    The duration of an Action is only supported in the following units: - s: seconds, value range 1-120; - m: minutes, value range 1-120; - h: hours, value range 1-48; - d: days, value range 1-30.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    countBies List<String>
    Rate threshold request feature match mode. this field is required when Enabled is on. when there are multiple conditions, composite multiple conditions will perform statistics count. the maximum number of conditions must not exceed 5. valid values: - http.request.ip: client ip; - http.request.xff_header_ip: client ip (priority match xff header); - http.request.uri.path: request access path; - http.request.cookies['session']: Cookie named session, where session can be replaced with your own specified parameter; - http.request.headers['user-agent']: http header named user-agent, where user-agent can be replaced with your own specified parameter; - http.request.ja3: request ja3 fingerprint; - http.request.uri.query['test']: URL query parameter named test, where test can be replaced with your own specified parameter.
    countingPeriod String
    Specifies the time window for statistics. valid values: - 1s: 1 second;- 5s: 5 seconds;- 10s: 10 seconds;- 20s: 20 seconds;- 30s: 30 seconds;- 40s: 40 seconds;- 50s: 50 seconds;- 1m: 1 minute;- 2m: 2 minutes;- 5m: 5 minutes;- 10m: 10 minutes;- 1h: 1 hour.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    maxRequestThreshold Double
    Precision rate limiting specifies the cumulative number of interceptions within the time range. value ranges from 1 to 100000.
    name String
    Specifies the name of the precise rate limit.
    priority Double
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    action TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    actionDuration string
    The duration of an Action is only supported in the following units: - s: seconds, value range 1-120; - m: minutes, value range 1-120; - h: hours, value range 1-48; - d: days, value range 1-30.
    condition string
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    countBies string[]
    Rate threshold request feature match mode. this field is required when Enabled is on. when there are multiple conditions, composite multiple conditions will perform statistics count. the maximum number of conditions must not exceed 5. valid values: - http.request.ip: client ip; - http.request.xff_header_ip: client ip (priority match xff header); - http.request.uri.path: request access path; - http.request.cookies['session']: Cookie named session, where session can be replaced with your own specified parameter; - http.request.headers['user-agent']: http header named user-agent, where user-agent can be replaced with your own specified parameter; - http.request.ja3: request ja3 fingerprint; - http.request.uri.query['test']: URL query parameter named test, where test can be replaced with your own specified parameter.
    countingPeriod string
    Specifies the time window for statistics. valid values: - 1s: 1 second;- 5s: 5 seconds;- 10s: 10 seconds;- 20s: 20 seconds;- 30s: 30 seconds;- 40s: 40 seconds;- 50s: 50 seconds;- 1m: 1 minute;- 2m: 2 minutes;- 5m: 5 minutes;- 10m: 10 minutes;- 1h: 1 hour.
    enabled string
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id string
    ID of the resource.
    maxRequestThreshold number
    Precision rate limiting specifies the cumulative number of interceptions within the time range. value ranges from 1 to 100000.
    name string
    Specifies the name of the precise rate limit.
    priority number
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    action TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleAction
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    action_duration str
    The duration of an Action is only supported in the following units: - s: seconds, value range 1-120; - m: minutes, value range 1-120; - h: hours, value range 1-48; - d: days, value range 1-30.
    condition str
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    count_bies Sequence[str]
    Rate threshold request feature match mode. this field is required when Enabled is on. when there are multiple conditions, composite multiple conditions will perform statistics count. the maximum number of conditions must not exceed 5. valid values: - http.request.ip: client ip; - http.request.xff_header_ip: client ip (priority match xff header); - http.request.uri.path: request access path; - http.request.cookies['session']: Cookie named session, where session can be replaced with your own specified parameter; - http.request.headers['user-agent']: http header named user-agent, where user-agent can be replaced with your own specified parameter; - http.request.ja3: request ja3 fingerprint; - http.request.uri.query['test']: URL query parameter named test, where test can be replaced with your own specified parameter.
    counting_period str
    Specifies the time window for statistics. valid values: - 1s: 1 second;- 5s: 5 seconds;- 10s: 10 seconds;- 20s: 20 seconds;- 30s: 30 seconds;- 40s: 40 seconds;- 50s: 50 seconds;- 1m: 1 minute;- 2m: 2 minutes;- 5m: 5 minutes;- 10m: 10 minutes;- 1h: 1 hour.
    enabled str
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id str
    ID of the resource.
    max_request_threshold float
    Precision rate limiting specifies the cumulative number of interceptions within the time range. value ranges from 1 to 100000.
    name str
    Specifies the name of the precise rate limit.
    priority float
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.
    action Property Map
    Precision rate limiting handling methods. valid values: - Monitor: Monitor; - Deny: block, where DenyActionParameters.Name supports Deny and ReturnCustomPage; - Challenge: Challenge, where ChallengeActionParameters.Name supports JSChallenge and ManagedChallenge; - Redirect: Redirect to URL;.
    actionDuration String
    The duration of an Action is only supported in the following units: - s: seconds, value range 1-120; - m: minutes, value range 1-120; - h: hours, value range 1-48; - d: days, value range 1-30.
    condition String
    The specific content of precise speed limit shall comply with the expression syntax. for detailed specifications, see the product documentation.
    countBies List<String>
    Rate threshold request feature match mode. this field is required when Enabled is on. when there are multiple conditions, composite multiple conditions will perform statistics count. the maximum number of conditions must not exceed 5. valid values: - http.request.ip: client ip; - http.request.xff_header_ip: client ip (priority match xff header); - http.request.uri.path: request access path; - http.request.cookies['session']: Cookie named session, where session can be replaced with your own specified parameter; - http.request.headers['user-agent']: http header named user-agent, where user-agent can be replaced with your own specified parameter; - http.request.ja3: request ja3 fingerprint; - http.request.uri.query['test']: URL query parameter named test, where test can be replaced with your own specified parameter.
    countingPeriod String
    Specifies the time window for statistics. valid values: - 1s: 1 second;- 5s: 5 seconds;- 10s: 10 seconds;- 20s: 20 seconds;- 30s: 30 seconds;- 40s: 40 seconds;- 50s: 50 seconds;- 1m: 1 minute;- 2m: 2 minutes;- 5m: 5 minutes;- 10m: 10 minutes;- 1h: 1 hour.
    enabled String
    Whether the precise rate limiting rule is enabled. valid values: - on: enabled; - off: disabled(No other fields are required when closing).
    id String
    ID of the resource.
    maxRequestThreshold Number
    Precision rate limiting specifies the cumulative number of interceptions within the time range. value ranges from 1 to 100000.
    name String
    Specifies the name of the precise rate limit.
    priority Number
    Precision rate limiting specifies the priority. value range is 0 to 100. default is 0.

    TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleAction, TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionArgs

    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    Name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    AllowActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    BlockIpActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    ChallengeActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    DenyActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    RedirectActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    ReturnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name string
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    blockIpActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    denyActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirectActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name str
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allow_action_parameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionAllowActionParameters
    Additional parameters when Name is Allow.
    block_ip_action_parameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionBlockIpActionParameters
    To be deprecated, additional parameter when Name is BlockIP.
    challenge_action_parameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParameters
    Additional parameter when Name is Challenge.
    deny_action_parameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionDenyActionParameters
    Additional parameters when Name is Deny.
    redirect_action_parameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionRedirectActionParameters
    Additional parameter when Name is Redirect.
    return_custom_page_action_parameters TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionReturnCustomPageActionParameters
    To be deprecated, additional parameter when Name is ReturnCustomPage.
    name String
    Specifies the specific actions for safe execution. valid values:. - Deny. specifies to block requests from accessing site resources. - Monitor: observation, only record logs. - Redirect: Redirect to URL. - Disabled: specifies that the rule is not enabled. - Allow: specifies whether to allow access with delayed processing of requests. - Challenge: specifies the challenge content to respond to. - Trans: pass and allow requests to directly access site resources. - BlockIP: to be deprecated. ip block. - ReturnCustomPage: to be deprecated. use specified page for interception. - JSChallenge: to be deprecated, JavaScript challenge;. - ManagedChallenge: to be deprecated. managed challenge.
    allowActionParameters Property Map
    Additional parameters when Name is Allow.
    blockIpActionParameters Property Map
    To be deprecated, additional parameter when Name is BlockIP.
    challengeActionParameters Property Map
    Additional parameter when Name is Challenge.
    denyActionParameters Property Map
    Additional parameters when Name is Deny.
    redirectActionParameters Property Map
    Additional parameter when Name is Redirect.
    returnCustomPageActionParameters Property Map
    To be deprecated, additional parameter when Name is ReturnCustomPage.

    TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionAllowActionParameters, TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionAllowActionParametersArgs

    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    MaxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    MinDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime string
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime string
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    max_delay_time str
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    min_delay_time str
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.
    maxDelayTime String
    Maximum delayed response time. supported units: - s: seconds, value ranges from 5 to 10.
    minDelayTime String
    Minimum latency response time. when configured as 0s, it means no delay for direct response. supported units: - s: seconds, value ranges from 0 to 5.

    TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionBlockIpActionParameters, TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionBlockIpActionParametersArgs

    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    Duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration string
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration str
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.
    duration String
    Penalty duration for BlockIP. Units: - s: second, value range 1-120; - m: minute, value range 1-120; - h: hour, value range 1-48.

    TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParameters, TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionChallengeActionParametersArgs

    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    ChallengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    AttesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    Interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption string
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId string
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval string
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challenge_option str
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attester_id str
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval str
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.
    challengeOption String
    Safe execution challenge actions. valid values: - InterstitialChallenge: interstitial challenge; - InlineChallenge: embedded challenge; - JSChallenge: JavaScript challenge; - ManagedChallenge: managed challenge.
    attesterId String
    Client authentication method ID. this field is required when Name is InterstitialChallenge/InlineChallenge.
    interval String
    Specifies the time interval for challenge repetition. this field is required when Name is InterstitialChallenge/InlineChallenge. default value is 300s. supported units: - s: second, value ranges from 1 to 60;- m: minute, value ranges from 1 to 60;- h: hour, value ranges from 1 to 24.

    TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionDenyActionParameters, TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionDenyActionParametersArgs

    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    BlockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    BlockIpDuration string
    The ban duration when BlockIP is on.
    ErrorPageId string
    Specifies the page id of the custom page.
    ResponseCode string
    Status code of the custom page.
    ReturnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    Stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp string
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration string
    The ban duration when BlockIP is on.
    errorPageId string
    Specifies the page id of the custom page.
    responseCode string
    Status code of the custom page.
    returnCustomPage string
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall string
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    block_ip str
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    block_ip_duration str
    The ban duration when BlockIP is on.
    error_page_id str
    Specifies the page id of the custom page.
    response_code str
    Status code of the custom page.
    return_custom_page str
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall str
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.
    blockIp String
    Specifies whether to extend the ban on the source IP. valid values. - on: Enable; - off: Disable. After enabled, continuously blocks client ips that trigger the rule. when this option is enabled, the BlockIpDuration parameter must be simultaneously designated. Note: this option cannot intersect with ReturnCustomPage or Stall.
    blockIpDuration String
    The ban duration when BlockIP is on.
    errorPageId String
    Specifies the page id of the custom page.
    responseCode String
    Status code of the custom page.
    returnCustomPage String
    Specifies whether to use a custom page. valid values:. - on: Enable; - off: Disable. Enabled, use custom page content to intercept requests. when this option is enabled, ResponseCode and ErrorPageId parameters must be specified simultaneously. Note: this option cannot intersect with the BlockIp or Stall option.
    stall String
    Specifies whether to suspend the request source without processing. valid values:. - on: Enable; - off: Disable. Enabled, no longer responds to requests in the current connection session and does not actively disconnect. used for crawler combat to consume client connection resources. Note: this option cannot intersect with BlockIp or ReturnCustomPage options.

    TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionRedirectActionParameters, TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionRedirectActionParametersArgs

    Url string
    Redirect URL.
    Url string
    Redirect URL.
    url String
    Redirect URL.
    url string
    Redirect URL.
    url str
    Redirect URL.
    url String
    Redirect URL.

    TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionReturnCustomPageActionParameters, TeoWebSecurityTemplateSecurityPolicyRateLimitingRulesRuleActionReturnCustomPageActionParametersArgs

    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    ErrorPageId string
    Response custom page ID.
    ResponseCode string
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.
    errorPageId string
    Response custom page ID.
    responseCode string
    Response custom status code.
    error_page_id str
    Response custom page ID.
    response_code str
    Response custom status code.
    errorPageId String
    Response custom page ID.
    responseCode String
    Response custom status code.

    Import

    teo web security template can be imported using the id, e.g.

    $ pulumi import tencentcloud:index/teoWebSecurityTemplate:TeoWebSecurityTemplate example zone-37u62pwxfo8s#temp-05dtxkyw
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    tencentcloud tencentcloudstack/terraform-provider-tencentcloud
    License
    Notes
    This Pulumi package is based on the tencentcloud Terraform Provider.
    tencentcloud logo
    Viewing docs for tencentcloud 1.82.79
    published on Friday, Mar 27, 2026 by tencentcloudstack
      Try Pulumi Cloud free. Your team will thank you.