Package com.pulumi.aws.networkfirewall
Class TlsInspectionConfiguration
- java.lang.Object
-
- com.pulumi.resources.Resource
-
- com.pulumi.resources.CustomResource
-
- com.pulumi.aws.networkfirewall.TlsInspectionConfiguration
-
public class TlsInspectionConfiguration extends com.pulumi.resources.CustomResourceResource for managing an AWS Network Firewall TLS Inspection Configuration. ## Example Usage > **NOTE:** You must configure either inbound inspection, outbound inspection, or both. ### Basic inbound/ingress inspection
### Basic outbound/engress inspectionpackage generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration; import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var example = new TlsInspectionConfiguration("example", TlsInspectionConfigurationArgs.builder() .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder() .serverCertificateConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs.builder() .scopes(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs.builder() .destinationPorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs.builder() .fromPort(443) .toPort(443) .build()) .destinations(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs.builder() .addressDefinition("0.0.0.0/0") .build()) .sourcePorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs.builder() .fromPort(0) .toPort(65535) .build()) .sources(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs.builder() .addressDefinition("0.0.0.0/0") .build()) .protocols(6) .build()) .serverCertificates(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs.builder() .resourceArn(example1.arn()) .build()) .build()) .build()) .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder() .keyId("AWS_OWNED_KMS_KEY") .type("AWS_OWNED_KMS_KEY") .build()) .name("example") .description("example") .build()); } }
### Inbound with encryption configurationpackage generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration; import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var example = new TlsInspectionConfiguration("example", TlsInspectionConfigurationArgs.builder() .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder() .serverCertificateConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs.builder() .checkCertificateRevocationStatus(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusArgs.builder() .revokedStatusAction("REJECT") .unknownStatusAction("PASS") .build()) .scopes(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs.builder() .destinationPorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs.builder() .fromPort(443) .toPort(443) .build()) .destinations(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs.builder() .addressDefinition("0.0.0.0/0") .build()) .sourcePorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs.builder() .fromPort(0) .toPort(65535) .build()) .sources(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs.builder() .addressDefinition("0.0.0.0/0") .build()) .protocols(6) .build()) .certificateAuthorityArn(example1.arn()) .build()) .build()) .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder() .keyId("AWS_OWNED_KMS_KEY") .type("AWS_OWNED_KMS_KEY") .build()) .name("example") .description("example") .build()); } }
### Outbound with encryption configurationpackage generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.kms.Key; import com.pulumi.aws.kms.KeyArgs; import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration; import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var example = new Key("example", KeyArgs.builder() .description("example") .deletionWindowInDays(7) .build()); var exampleTlsInspectionConfiguration = new TlsInspectionConfiguration("exampleTlsInspectionConfiguration", TlsInspectionConfigurationArgs.builder() .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder() .serverCertificateConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs.builder() .scopes(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs.builder() .destinationPorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs.builder() .fromPort(443) .toPort(443) .build()) .destinations(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs.builder() .addressDefinition("0.0.0.0/0") .build()) .sourcePorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs.builder() .fromPort(0) .toPort(65535) .build()) .sources(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs.builder() .addressDefinition("0.0.0.0/0") .build()) .protocols(6) .build()) .serverCertificates(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs.builder() .resourceArn(example1.arn()) .build()) .build()) .build()) .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder() .keyId(example.arn()) .type("CUSTOMER_KMS") .build()) .name("example") .description("example") .build()); } }
### Combined inbound and outboundpackage generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.kms.Key; import com.pulumi.aws.kms.KeyArgs; import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration; import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var example = new Key("example", KeyArgs.builder() .description("example") .deletionWindowInDays(7) .build()); var exampleTlsInspectionConfiguration = new TlsInspectionConfiguration("exampleTlsInspectionConfiguration", TlsInspectionConfigurationArgs.builder() .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder() .serverCertificateConfigurations(Arrays.asList(Map.ofEntries( Map.entry("checkCertificateRevocationStatus", Arrays.asList(Map.ofEntries( Map.entry("revokedStatusAction", "REJECT"), Map.entry("unknownStatusAction", "PASS") ))), Map.entry("scope", Arrays.asList(Map.ofEntries( Map.entry("destination", Arrays.asList(Map.of("addressDefinition", "0.0.0.0/0"))), Map.entry("destinationPorts", Arrays.asList(Map.ofEntries( Map.entry("fromPort", 443), Map.entry("toPort", 443) ))), Map.entry("source", Arrays.asList(Map.of("addressDefinition", "0.0.0.0/0"))), Map.entry("sourcePorts", Arrays.asList(Map.ofEntries( Map.entry("fromPort", 0), Map.entry("toPort", 65535) ))), Map.entry("protocols", Arrays.asList(6)) ))), Map.entry("certificateAuthorityArn", example1.arn()) ))) .build()) .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder() .keyId(example.arn()) .type("CUSTOMER_KMS") .build()) .name("example") .description("example") .build()); } }
## Import ### Identity Schema #### Required - `arn` (String) ARN of the Network Firewall TLS inspection configuration. Using `pulumi import`, import Network Firewall TLS Inspection Configuration using the `arn`. For example: ```sh $ pulumi import aws:networkfirewall/tlsInspectionConfiguration:TlsInspectionConfiguration example arn:aws:network-firewall::<region>:<account_id>:tls-configuration/example ```package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.networkfirewall.TlsInspectionConfiguration; import com.pulumi.aws.networkfirewall.TlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs; import com.pulumi.aws.networkfirewall.inputs.TlsInspectionConfigurationEncryptionConfigurationArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var example = new TlsInspectionConfiguration("example", TlsInspectionConfigurationArgs.builder() .tlsInspectionConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationArgs.builder() .serverCertificateConfiguration(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationArgs.builder() .checkCertificateRevocationStatus(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusArgs.builder() .revokedStatusAction("REJECT") .unknownStatusAction("PASS") .build()) .scopes(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeArgs.builder() .destinationPorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationPortArgs.builder() .fromPort(443) .toPort(443) .build()) .destinations(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestinationArgs.builder() .addressDefinition("0.0.0.0/0") .build()) .sourcePorts(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourcePortArgs.builder() .fromPort(0) .toPort(65535) .build()) .sources(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeSourceArgs.builder() .addressDefinition("0.0.0.0/0") .build()) .protocols(6) .build()) .serverCertificates(TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationServerCertificateArgs.builder() .resourceArn(example2.arn()) .build()) .certificateAuthorityArn(example1.arn()) .build()) .build()) .encryptionConfigurations(TlsInspectionConfigurationEncryptionConfigurationArgs.builder() .keyId("AWS_OWNED_KMS_KEY") .type("AWS_OWNED_KMS_KEY") .build()) .name("example") .description("example") .build()); } }
-
-
Constructor Summary
Constructors Constructor Description TlsInspectionConfiguration(java.lang.String name)TlsInspectionConfiguration(java.lang.String name, TlsInspectionConfigurationArgs args)TlsInspectionConfiguration(java.lang.String name, TlsInspectionConfigurationArgs args, com.pulumi.resources.CustomResourceOptions options)
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description com.pulumi.core.Output<java.lang.String>arn()com.pulumi.core.Output<java.util.List<TlsInspectionConfigurationCertificateAuthority>>certificateAuthorities()com.pulumi.core.Output<java.util.List<TlsInspectionConfigurationCertificate>>certificates()com.pulumi.core.Output<java.util.Optional<java.lang.String>>description()com.pulumi.core.Output<java.util.List<TlsInspectionConfigurationEncryptionConfiguration>>encryptionConfigurations()static TlsInspectionConfigurationget(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, TlsInspectionConfigurationState state, com.pulumi.resources.CustomResourceOptions options)Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.com.pulumi.core.Output<java.lang.String>name()com.pulumi.core.Output<java.lang.Integer>numberOfAssociations()com.pulumi.core.Output<java.lang.String>region()com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>>tags()com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>>tagsAll()com.pulumi.core.Output<java.util.Optional<TlsInspectionConfigurationTimeouts>>timeouts()com.pulumi.core.Output<TlsInspectionConfigurationTlsInspectionConfiguration>tlsInspectionConfiguration()com.pulumi.core.Output<java.lang.String>tlsInspectionConfigurationId()com.pulumi.core.Output<java.lang.String>updateToken()
-
-
-
Constructor Detail
-
TlsInspectionConfiguration
public TlsInspectionConfiguration(java.lang.String name)
- Parameters:
name- The _unique_ name of the resulting resource.
-
TlsInspectionConfiguration
public TlsInspectionConfiguration(java.lang.String name, TlsInspectionConfigurationArgs args)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.
-
TlsInspectionConfiguration
public TlsInspectionConfiguration(java.lang.String name, TlsInspectionConfigurationArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.options- A bag of options that control this resource's behavior.
-
-
Method Detail
-
arn
public com.pulumi.core.Output<java.lang.String> arn()
- Returns:
- ARN of the TLS Inspection Configuration.
-
certificateAuthorities
public com.pulumi.core.Output<java.util.List<TlsInspectionConfigurationCertificateAuthority>> certificateAuthorities()
- Returns:
- Certificate Manager certificate block. See Certificate Authority below for details.
-
certificates
public com.pulumi.core.Output<java.util.List<TlsInspectionConfigurationCertificate>> certificates()
- Returns:
- List of certificate blocks describing certificates associated with the TLS inspection configuration. See Certificates below for details.
-
description
public com.pulumi.core.Output<java.util.Optional<java.lang.String>> description()
- Returns:
- Description of the TLS inspection configuration.
-
encryptionConfigurations
public com.pulumi.core.Output<java.util.List<TlsInspectionConfigurationEncryptionConfiguration>> encryptionConfigurations()
- Returns:
- Encryption configuration block. Detailed below.
-
name
public com.pulumi.core.Output<java.lang.String> name()
- Returns:
- Descriptive name of the TLS inspection configuration.
-
numberOfAssociations
public com.pulumi.core.Output<java.lang.Integer> numberOfAssociations()
- Returns:
- Number of firewall policies that use this TLS inspection configuration.
-
region
public com.pulumi.core.Output<java.lang.String> region()
- Returns:
- Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
-
tags
public com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>> tags()
-
tagsAll
public com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>> tagsAll()
-
timeouts
public com.pulumi.core.Output<java.util.Optional<TlsInspectionConfigurationTimeouts>> timeouts()
-
tlsInspectionConfiguration
public com.pulumi.core.Output<TlsInspectionConfigurationTlsInspectionConfiguration> tlsInspectionConfiguration()
- Returns:
- TLS inspection configuration block. Detailed below. The following arguments are optional:
-
tlsInspectionConfigurationId
public com.pulumi.core.Output<java.lang.String> tlsInspectionConfigurationId()
- Returns:
- A unique identifier for the TLS inspection configuration.
-
updateToken
public com.pulumi.core.Output<java.lang.String> updateToken()
- Returns:
- String token used when updating the rule group.
-
get
public static TlsInspectionConfiguration get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, @Nullable TlsInspectionConfigurationState state, @Nullable com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.- Parameters:
name- The _unique_ name of the resulting resource.id- The _unique_ provider ID of the resource to lookup.state-options- Optional settings to control the behavior of the CustomResource.
-
-