TlsInspectionPolicyState constructor

const TlsInspectionPolicyState({ Input<String?>? caPool, Input<String?>? createTime, Input<List<String>?>? customTlsFeatures, Input<String?>? deletionPolicy, Input<String?>? description, Input<bool?>? excludePublicCaSet, Input<String?>? location, Input<String?>? minTlsVersion, Input<String?>? name, Input<String?>? project, Input<String?>? tlsFeatureProfile, Input<String?>? trustConfig, Input<String?>? updateTime, })

Creates a new TlsInspectionPolicyState. caPool A CA pool resource used to issue interception certificates. createTime The timestamp when the resource was created. customTlsFeatures List of custom TLS cipher suites selected. This field is valid only if the selected tlsFeatureProfile is CUSTOM. The compute.SslPoliciesService.ListAvailableFeatures method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field. deletionPolicy Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. description Free-text description of the resource. excludePublicCaSet If FALSE (the default), use our default set of public CAs in addition to any CAs specified in trustConfig. These public CAs are currently based on the Mozilla Root Program and are subject to change over time. If TRUE, do not accept our default set of public CAs. Only CAs specified in trustConfig will be accepted. location The location of the tls inspection policy. minTlsVersion Minimum TLS version that the firewall should use when negotiating connections with both clients and servers. If this is not set, then the default value is to allow the broadest set of clients and servers (TLS 1.0 or higher). Setting this to more restrictive values may improve security, but may also prevent the firewall from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field. name Short name of the TlsInspectionPolicy resource to be created. project The ID of the project in which the resource belongs. tlsFeatureProfile The selected Profile. If this is not set, then the default value is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE"). Setting this to more restrictive values may improve security, but may also prevent the TLS inspection proxy from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field. trustConfig A TrustConfig resource used when making a connection to the TLS server. This is a relative resource path following the form "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This is necessary to intercept TLS connections to servers with certificates signed by a private CA or self-signed certificates. Trust config and the TLS inspection policy must be in the same region. Note that Secure Web Proxy does not yet honor this field. updateTime The timestamp when the resource was updated.

Implementation

const TlsInspectionPolicyState({
  this.caPool,
  this.createTime,
  this.customTlsFeatures,
  this.deletionPolicy,
  this.description,
  this.excludePublicCaSet,
  this.location,
  this.minTlsVersion,
  this.name,
  this.project,
  this.tlsFeatureProfile,
  this.trustConfig,
  this.updateTime,
});