Class TlsInspectionConfiguration


  • public class TlsInspectionConfiguration
    extends com.pulumi.resources.CustomResource
    Resource for managing an AWS Network Firewall TLS Inspection Configuration. ## Example Usage > **NOTE:** You must configure either inbound inspection, outbound inspection, or both. ### Basic inbound/ingress inspection
     
     package generated_program;
     
     import com.pulumi.Context;
     import com.pulumi.Pulumi;
     import com.pulumi.core.Output;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs;
     import java.util.ArrayList;
     import java.util.Arrays;
     import java.util.Map;
     import java.io.File;
     import java.nio.file.Files;
     import java.nio.file.Paths;
     
     public class App {
         public static void main(String[] args) {
             Pulumi.run(App::stack);
         }
     
         public static void stack(Context ctx) {
             var example = new TlsInspectionConfiguration("example", TlsInspectionConfigurationArgs.builder()
                 .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder()
                     .serverCertificateConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs.builder()
                         .scopes(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs.builder()
                             .destinationPorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs.builder()
                                 .fromPort(443)
                                 .toPort(443)
                                 .build())
                             .destinations(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs.builder()
                                 .addressDefinition("0.0.0.0/0")
                                 .build())
                             .sourcePorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs.builder()
                                 .fromPort(0)
                                 .toPort(65535)
                                 .build())
                             .sources(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs.builder()
                                 .addressDefinition("0.0.0.0/0")
                                 .build())
                             .protocols(6)
                             .build())
                         .serverCertificates(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs.builder()
                             .resourceArn(example1.arn())
                             .build())
                         .build())
                     .build())
                 .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder()
                     .keyId("AWS_OWNED_KMS_KEY")
                     .type("AWS_OWNED_KMS_KEY")
                     .build())
                 .name("example")
                 .description("example")
                 .build());
     
         }
     }
     
     
    ### Basic outbound/engress inspection
     
     package generated_program;
     
     import com.pulumi.Context;
     import com.pulumi.Pulumi;
     import com.pulumi.core.Output;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs;
     import java.util.ArrayList;
     import java.util.Arrays;
     import java.util.Map;
     import java.io.File;
     import java.nio.file.Files;
     import java.nio.file.Paths;
     
     public class App {
         public static void main(String[] args) {
             Pulumi.run(App::stack);
         }
     
         public static void stack(Context ctx) {
             var example = new TlsInspectionConfiguration("example", TlsInspectionConfigurationArgs.builder()
                 .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder()
                     .serverCertificateConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs.builder()
                         .checkCertificateRevocationStatus(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusArgs.builder()
                             .revokedStatusAction("REJECT")
                             .unknownStatusAction("PASS")
                             .build())
                         .scopes(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs.builder()
                             .destinationPorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs.builder()
                                 .fromPort(443)
                                 .toPort(443)
                                 .build())
                             .destinations(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs.builder()
                                 .addressDefinition("0.0.0.0/0")
                                 .build())
                             .sourcePorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs.builder()
                                 .fromPort(0)
                                 .toPort(65535)
                                 .build())
                             .sources(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs.builder()
                                 .addressDefinition("0.0.0.0/0")
                                 .build())
                             .protocols(6)
                             .build())
                         .certificateAuthorityArn(example1.arn())
                         .build())
                     .build())
                 .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder()
                     .keyId("AWS_OWNED_KMS_KEY")
                     .type("AWS_OWNED_KMS_KEY")
                     .build())
                 .name("example")
                 .description("example")
                 .build());
     
         }
     }
     
     
    ### Inbound with encryption configuration
     
     package generated_program;
     
     import com.pulumi.Context;
     import com.pulumi.Pulumi;
     import com.pulumi.core.Output;
     import com.pulumi.aws.kms.Key;
     import com.pulumi.aws.kms.KeyArgs;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs;
     import java.util.ArrayList;
     import java.util.Arrays;
     import java.util.Map;
     import java.io.File;
     import java.nio.file.Files;
     import java.nio.file.Paths;
     
     public class App {
         public static void main(String[] args) {
             Pulumi.run(App::stack);
         }
     
         public static void stack(Context ctx) {
             var example = new Key("example", KeyArgs.builder()
                 .description("example")
                 .deletionWindowInDays(7)
                 .build());
     
             var exampleTlsInspectionConfiguration = new TlsInspectionConfiguration("exampleTlsInspectionConfiguration", TlsInspectionConfigurationArgs.builder()
                 .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder()
                     .serverCertificateConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs.builder()
                         .scopes(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs.builder()
                             .destinationPorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs.builder()
                                 .fromPort(443)
                                 .toPort(443)
                                 .build())
                             .destinations(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs.builder()
                                 .addressDefinition("0.0.0.0/0")
                                 .build())
                             .sourcePorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs.builder()
                                 .fromPort(0)
                                 .toPort(65535)
                                 .build())
                             .sources(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs.builder()
                                 .addressDefinition("0.0.0.0/0")
                                 .build())
                             .protocols(6)
                             .build())
                         .serverCertificates(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs.builder()
                             .resourceArn(example1.arn())
                             .build())
                         .build())
                     .build())
                 .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder()
                     .keyId(example.arn())
                     .type("CUSTOMER_KMS")
                     .build())
                 .name("example")
                 .description("example")
                 .build());
     
         }
     }
     
     
    ### Outbound with encryption configuration
     
     package generated_program;
     
     import com.pulumi.Context;
     import com.pulumi.Pulumi;
     import com.pulumi.core.Output;
     import com.pulumi.aws.kms.Key;
     import com.pulumi.aws.kms.KeyArgs;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs;
     import java.util.ArrayList;
     import java.util.Arrays;
     import java.util.Map;
     import java.io.File;
     import java.nio.file.Files;
     import java.nio.file.Paths;
     
     public class App {
         public static void main(String[] args) {
             Pulumi.run(App::stack);
         }
     
         public static void stack(Context ctx) {
             var example = new Key("example", KeyArgs.builder()
                 .description("example")
                 .deletionWindowInDays(7)
                 .build());
     
             var exampleTlsInspectionConfiguration = new TlsInspectionConfiguration("exampleTlsInspectionConfiguration", TlsInspectionConfigurationArgs.builder()
                 .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder()
                     .serverCertificateConfigurations(Arrays.asList(Map.ofEntries(
                         Map.entry("checkCertificateRevocationStatus", Arrays.asList(Map.ofEntries(
                             Map.entry("revokedStatusAction", "REJECT"),
                             Map.entry("unknownStatusAction", "PASS")
                         ))),
                         Map.entry("scope", Arrays.asList(Map.ofEntries(
                             Map.entry("destination", Arrays.asList(Map.of("addressDefinition", "0.0.0.0/0"))),
                             Map.entry("destinationPorts", Arrays.asList(Map.ofEntries(
                                 Map.entry("fromPort", 443),
                                 Map.entry("toPort", 443)
                             ))),
                             Map.entry("source", Arrays.asList(Map.of("addressDefinition", "0.0.0.0/0"))),
                             Map.entry("sourcePorts", Arrays.asList(Map.ofEntries(
                                 Map.entry("fromPort", 0),
                                 Map.entry("toPort", 65535)
                             ))),
                             Map.entry("protocols", Arrays.asList(6))
                         ))),
                         Map.entry("certificateAuthorityArn", example1.arn())
                     )))
                     .build())
                 .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder()
                     .keyId(example.arn())
                     .type("CUSTOMER_KMS")
                     .build())
                 .name("example")
                 .description("example")
                 .build());
     
         }
     }
     
     
    ### Combined inbound and outbound
     
     package generated_program;
     
     import com.pulumi.Context;
     import com.pulumi.Pulumi;
     import com.pulumi.core.Output;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration;
     import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs;
     import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs;
     import java.util.ArrayList;
     import java.util.Arrays;
     import java.util.Map;
     import java.io.File;
     import java.nio.file.Files;
     import java.nio.file.Paths;
     
     public class App {
         public static void main(String[] args) {
             Pulumi.run(App::stack);
         }
     
         public static void stack(Context ctx) {
             var example = new TlsInspectionConfiguration("example", TlsInspectionConfigurationArgs.builder()
                 .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder()
                     .serverCertificateConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs.builder()
                         .checkCertificateRevocationStatus(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusArgs.builder()
                             .revokedStatusAction("REJECT")
                             .unknownStatusAction("PASS")
                             .build())
                         .scopes(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs.builder()
                             .destinationPorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs.builder()
                                 .fromPort(443)
                                 .toPort(443)
                                 .build())
                             .destinations(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs.builder()
                                 .addressDefinition("0.0.0.0/0")
                                 .build())
                             .sourcePorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs.builder()
                                 .fromPort(0)
                                 .toPort(65535)
                                 .build())
                             .sources(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs.builder()
                                 .addressDefinition("0.0.0.0/0")
                                 .build())
                             .protocols(6)
                             .build())
                         .serverCertificates(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs.builder()
                             .resourceArn(example2.arn())
                             .build())
                         .certificateAuthorityArn(example1.arn())
                         .build())
                     .build())
                 .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder()
                     .keyId("AWS_OWNED_KMS_KEY")
                     .type("AWS_OWNED_KMS_KEY")
                     .build())
                 .name("example")
                 .description("example")
                 .build());
     
         }
     }
     
     
    ## Import ### Identity Schema #### Required - `arn` (String) ARN of the Network Firewall TLS inspection configuration. Using `pulumi import`, import Network Firewall TLS Inspection Configuration using the `arn`. For example: ```sh $ pulumi import aws:networkfirewall/tlsInspectionConfiguration:TlsInspectionConfiguration example arn:aws:network-firewall::<region>:<account_id>:tls-configuration/example ```
    • Constructor Detail

      • TlsInspectionConfiguration

        public TlsInspectionConfiguration​(java.lang.String name)
        Parameters:
        name - The _unique_ name of the resulting resource.
      • TlsInspectionConfiguration

        public TlsInspectionConfiguration​(java.lang.String name,
                                          TlsInspectionConfigurationArgs args)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.
      • TlsInspectionConfiguration

        public TlsInspectionConfiguration​(java.lang.String name,
                                          TlsInspectionConfigurationArgs args,
                                          @Nullable
                                          com.pulumi.resources.CustomResourceOptions options)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.
        options - A bag of options that control this resource's behavior.
    • Method Detail

      • arn

        public com.pulumi.core.Output<java.lang.String> arn()
        Returns:
        ARN of the TLS Inspection Configuration.
      • certificateAuthorities

        public com.pulumi.core.Output<java.util.List<TlsInspectionConfigurationCertificateAuthority>> certificateAuthorities()
        Returns:
        Certificate Manager certificate block. See Certificate Authority below for details.
      • certificates

        public com.pulumi.core.Output<java.util.List<TlsInspectionConfigurationCertificate>> certificates()
        Returns:
        List of certificate blocks describing certificates associated with the TLS inspection configuration. See Certificates below for details.
      • description

        public com.pulumi.core.Output<java.util.Optional<java.lang.String>> description()
        Returns:
        Description of the TLS inspection configuration.
      • name

        public com.pulumi.core.Output<java.lang.String> name()
        Returns:
        Descriptive name of the TLS inspection configuration.
      • numberOfAssociations

        public com.pulumi.core.Output<java.lang.Integer> numberOfAssociations()
        Returns:
        Number of firewall policies that use this TLS inspection configuration.
      • region

        public com.pulumi.core.Output<java.lang.String> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
      • tags

        public com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,​java.lang.String>>> tags()
      • tagsAll

        public com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tagsAll()
      • tlsInspectionConfigurationId

        public com.pulumi.core.Output<java.lang.String> tlsInspectionConfigurationId()
        Returns:
        A unique identifier for the TLS inspection configuration.
      • updateToken

        public com.pulumi.core.Output<java.lang.String> updateToken()
        Returns:
        String token used when updating the rule group.
      • get

        public static TlsInspectionConfiguration get​(java.lang.String name,
                                                     com.pulumi.core.Output<java.lang.String> id,
                                                     @Nullable
                                                     TlsInspectionConfigurationState state,
                                                     @Nullable
                                                     com.pulumi.resources.CustomResourceOptions options)
        Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
        Parameters:
        name - The _unique_ name of the resulting resource.
        id - The _unique_ provider ID of the resource to lookup.
        state -
        options - Optional settings to control the behavior of the CustomResource.