Package com.pulumi.aws.lb

Class ListenerArgs

  • public final class ListenerArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • alpnPolicy

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> alpnPolicy()
        Returns:
        Name of the Application-Layer Protocol Negotiation (ALPN) policy. Can be set if `protocol` is `TLS`. Valid values are `HTTP1Only`, `HTTP2Only`, `HTTP2Optional`, `HTTP2Preferred`, and `None`.

      • certificateArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> certificateArn()
        Returns:
        ARN of the default SSL server certificate. Exactly one certificate is required if the protocol is HTTPS. For adding additional SSL certificates, see the `aws.lb.ListenerCertificate` resource.

      • defaultActions

        public com.pulumi.core.Output<java.util.List<ListenerDefaultActionArgs>> defaultActions()
        Returns:
        Configuration block for default actions. See below.

      • loadBalancerArn

        public com.pulumi.core.Output<java.lang.String> loadBalancerArn()
        Returns:
        ARN of the load balancer. The following arguments are optional:

      • mutualAuthentication

        public java.util.Optional<com.pulumi.core.Output<ListenerMutualAuthenticationArgs>> mutualAuthentication()
        Returns:
        The mutual authentication configuration information. See below.

      • port

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> port()
        Returns:
        Port on which the load balancer is listening. Not valid for Gateway Load Balancers.

      • protocol

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> protocol()
        Returns:
        Protocol for connections from clients to the load balancer. For Application Load Balancers, valid values are `HTTP` and `HTTPS`, with a default of `HTTP`. For Network Load Balancers, valid values are `TCP`, `TLS`, `UDP`, `TCP_UDP`, `QUIC`, and `TCP_QUIC`. Not valid to use `UDP` or `TCP_UDP` if dual-stack mode is enabled. Not valid to use `QUIC` or `TCP_QUIC` if security groups are configured or dual-stack mode is enabled. Not valid for Gateway Load Balancers.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • routingHttpRequestXAmznMtlsClientcertHeaderName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpRequestXAmznMtlsClientcertHeaderName()
        Returns:
        Enables you to modify the header name of the `X-Amzn-Mtls-Clientcert` HTTP request header. Can only be set if protocol is `HTTPS` for Application Load Balancers.

      • routingHttpRequestXAmznMtlsClientcertIssuerHeaderName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpRequestXAmznMtlsClientcertIssuerHeaderName()
        Returns:
        Enables you to modify the header name of the `X-Amzn-Mtls-Clientcert-Issuer` HTTP request header. Can only be set if protocol is `HTTPS` for Application Load Balancers.

      • routingHttpRequestXAmznMtlsClientcertLeafHeaderName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpRequestXAmznMtlsClientcertLeafHeaderName()
        Returns:
        Enables you to modify the header name of the `X-Amzn-Mtls-Clientcert-Leaf` HTTP request header. Can only be set if protocol is `HTTPS` for Application Load Balancers.

      • routingHttpRequestXAmznMtlsClientcertSerialNumberHeaderName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpRequestXAmznMtlsClientcertSerialNumberHeaderName()
        Returns:
        Enables you to modify the header name of the `X-Amzn-Mtls-Clientcert-Serial-Number` HTTP request header. Can only be set if protocol is `HTTPS` for Application Load Balancers.

      • routingHttpRequestXAmznMtlsClientcertSubjectHeaderName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpRequestXAmznMtlsClientcertSubjectHeaderName()
        Returns:
        Enables you to modify the header name of the `X-Amzn-Mtls-Clientcert-Subject` HTTP request header. Can only be set if protocol is `HTTPS` for Application Load Balancers.

      • routingHttpRequestXAmznMtlsClientcertValidityHeaderName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpRequestXAmznMtlsClientcertValidityHeaderName()
        Returns:
        Enables you to modify the header name of the `X-Amzn-Mtls-Clientcert-Validity` HTTP request header. Can only be set if protocol is `HTTPS` for Application Load Balancers.

      • routingHttpRequestXAmznTlsCipherSuiteHeaderName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpRequestXAmznTlsCipherSuiteHeaderName()
        Returns:
        Enables you to modify the header name of the `X-Amzn-Tls-Cipher-Suite` HTTP request header. Can only be set if protocol is `HTTPS` for Application Load Balancers.

      • routingHttpRequestXAmznTlsVersionHeaderName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpRequestXAmznTlsVersionHeaderName()
        Returns:
        Enables you to modify the header name of the `X-Amzn-Tls-Version` HTTP request header. Can only be set if protocol is `HTTPS` for Application Load Balancers.

      • routingHttpResponseAccessControlAllowCredentialsHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseAccessControlAllowCredentialsHeaderValue()
        Returns:
        Specifies which headers the browser can expose to the requesting client. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. The only valid value is `true`.

      • routingHttpResponseAccessControlAllowHeadersHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseAccessControlAllowHeadersHeaderValue()
        Returns:
        Specifies which headers can be used during the request. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. Valid values are `*`, `Accept`, `Accept-Language`, `Cache-Control`, `Content-Language`, `Content-Length`, `Content-Type`, `Expires`, `Last-Modified`, `Pragma`. Dependent on your use-case other headers can be exposed and then set as a value consult the Access-Control-Allow-Headers documentation.

      • routingHttpResponseAccessControlAllowMethodsHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseAccessControlAllowMethodsHeaderValue()
        Returns:
        Set which HTTP methods are allowed when accessing the server from a different origin. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. Valid values are `GET`, `HEAD`, `POST`, `DELETE`, `CONNECT`, `OPTIONS`, `TRACE` or `PATCH`.

      • routingHttpResponseAccessControlAllowOriginHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseAccessControlAllowOriginHeaderValue()
        Returns:
        Specifies which origins are allowed to access the server. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. A valid value is a URI, eg: `https://example.com`.

      • routingHttpResponseAccessControlExposeHeadersHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseAccessControlExposeHeadersHeaderValue()
        Returns:
        Specifies whether the browser should include credentials such as cookies or authentication when making requests. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. Valid values are `*`, `Cache-Control`, `Content-Language`, `Content-Length`, `Content-Type`, `Expires`, `Last-Modified`, or `Pragma`. Dependent on your use-case other headers can be exposed, consult the Access-Control-Expose-Headers documentation.

      • routingHttpResponseAccessControlMaxAgeHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseAccessControlMaxAgeHeaderValue()
        Returns:
        Specifies how long the results of a preflight request can be cached, in seconds. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. Valid values are between `0` and `86400`. This value is browser specific, consult the Access-Control-Max-Age documentation.

      • routingHttpResponseContentSecurityPolicyHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseContentSecurityPolicyHeaderValue()
        Returns:
        Specifies restrictions enforced by the browser to help minimize the risk of certain types of security threats. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. Values for this are extensive, and can be impactful when set, consult Content-Security-Policy documentation.

      • routingHttpResponseServerEnabled

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> routingHttpResponseServerEnabled()
        Returns:
        Enables you to allow or remove the HTTP response server header. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. Valid values are `true` or `false`.

      • routingHttpResponseStrictTransportSecurityHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseStrictTransportSecurityHeaderValue()
        Returns:
        Informs browsers that the site should only be accessed using HTTPS, and that any future attempts to access it using HTTP should automatically be converted to HTTPS. Default values are `max-age=31536000; includeSubDomains; preload` consult the Strict-Transport-Security documentation for further details.

      • routingHttpResponseXContentTypeOptionsHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseXContentTypeOptionsHeaderValue()
        Returns:
        Indicates whether the MIME types advertised in the Content-Type headers should be followed and not be changed. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. The only valid value is `nosniff`.

      • routingHttpResponseXFrameOptionsHeaderValue

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> routingHttpResponseXFrameOptionsHeaderValue()
        Returns:
        Indicates whether the browser is allowed to render a page in a frame, iframe, embed or object. Can only be set if protocol is `HTTP` or `HTTPS` for Application Load Balancers. Not supported for Network Load Balancer, or with a Gateway Load Balancer. The only valid values are `DENY`, `SAMEORIGIN`, or `ALLOW-FROM https://example.com`.

      • sslPolicy

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> sslPolicy()
        Returns:
        Name of the SSL Policy for the listener. Required if `protocol` is `HTTPS` or `TLS`. Default is `ELBSecurityPolicy-2016-08`.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        A map of tags to assign to the resource. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level. > **Note::** When a `Name` key is specified in the map, the AWS Console maps the value to the `Name Tag` column value inside the `Listener Rules` table within a specific load balancer listener page. Otherwise, the value resolves to `Default`.

      • tcpIdleTimeoutSeconds

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tcpIdleTimeoutSeconds()
        Returns:
        TCP idle timeout value in seconds. Can only be set if protocol is `TCP` on Network Load Balancer, or with a Gateway Load Balancer. Not supported for Application Load Balancers. Valid values are between `60` and `6000` inclusive. Default: `350`.