1. Packages
  2. Cisco ISE
  3. API Docs
  4. deviceadmin
  5. AuthenticationRule
Cisco ISE v0.1.4 published on Friday, May 31, 2024 by Pulumi

ise.deviceadmin.AuthenticationRule

Explore with Pulumi AI

ise logo
Cisco ISE v0.1.4 published on Friday, May 31, 2024 by Pulumi

    This resource can manage a Device Admin Authentication Rule.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as ise from "@pulumi/ise";
    
    const example = new ise.deviceadmin.AuthenticationRule("example", {
        policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
        name: "Rule1",
        "default": false,
        rank: 0,
        state: "enabled",
        conditionType: "ConditionAttributes",
        conditionIsNegate: false,
        conditionAttributeName: "Location",
        conditionAttributeValue: "All Locations",
        conditionDictionaryName: "DEVICE",
        conditionOperator: "equals",
        identitySourceName: "Internal Endpoints",
        ifAuthFail: "REJECT",
        ifProcessFail: "DROP",
        ifUserNotFound: "REJECT",
    });
    
    import pulumi
    import pulumi_ise as ise
    
    example = ise.deviceadmin.AuthenticationRule("example",
        policy_set_id="d82952cb-b901-4b09-b363-5ebf39bdbaf9",
        name="Rule1",
        default=False,
        rank=0,
        state="enabled",
        condition_type="ConditionAttributes",
        condition_is_negate=False,
        condition_attribute_name="Location",
        condition_attribute_value="All Locations",
        condition_dictionary_name="DEVICE",
        condition_operator="equals",
        identity_source_name="Internal Endpoints",
        if_auth_fail="REJECT",
        if_process_fail="DROP",
        if_user_not_found="REJECT")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-ise/sdk/go/ise/deviceadmin"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := deviceadmin.NewAuthenticationRule(ctx, "example", &deviceadmin.AuthenticationRuleArgs{
    			PolicySetId:             pulumi.String("d82952cb-b901-4b09-b363-5ebf39bdbaf9"),
    			Name:                    pulumi.String("Rule1"),
    			Default:                 pulumi.Bool(false),
    			Rank:                    pulumi.Int(0),
    			State:                   pulumi.String("enabled"),
    			ConditionType:           pulumi.String("ConditionAttributes"),
    			ConditionIsNegate:       pulumi.Bool(false),
    			ConditionAttributeName:  pulumi.String("Location"),
    			ConditionAttributeValue: pulumi.String("All Locations"),
    			ConditionDictionaryName: pulumi.String("DEVICE"),
    			ConditionOperator:       pulumi.String("equals"),
    			IdentitySourceName:      pulumi.String("Internal Endpoints"),
    			IfAuthFail:              pulumi.String("REJECT"),
    			IfProcessFail:           pulumi.String("DROP"),
    			IfUserNotFound:          pulumi.String("REJECT"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Ise = Pulumi.Ise;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Ise.DeviceAdmin.AuthenticationRule("example", new()
        {
            PolicySetId = "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
            Name = "Rule1",
            Default = false,
            Rank = 0,
            State = "enabled",
            ConditionType = "ConditionAttributes",
            ConditionIsNegate = false,
            ConditionAttributeName = "Location",
            ConditionAttributeValue = "All Locations",
            ConditionDictionaryName = "DEVICE",
            ConditionOperator = "equals",
            IdentitySourceName = "Internal Endpoints",
            IfAuthFail = "REJECT",
            IfProcessFail = "DROP",
            IfUserNotFound = "REJECT",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.ise.deviceadmin.AuthenticationRule;
    import com.pulumi.ise.deviceadmin.AuthenticationRuleArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new AuthenticationRule("example", AuthenticationRuleArgs.builder()
                .policySetId("d82952cb-b901-4b09-b363-5ebf39bdbaf9")
                .name("Rule1")
                .default_(false)
                .rank(0)
                .state("enabled")
                .conditionType("ConditionAttributes")
                .conditionIsNegate(false)
                .conditionAttributeName("Location")
                .conditionAttributeValue("All Locations")
                .conditionDictionaryName("DEVICE")
                .conditionOperator("equals")
                .identitySourceName("Internal Endpoints")
                .ifAuthFail("REJECT")
                .ifProcessFail("DROP")
                .ifUserNotFound("REJECT")
                .build());
    
        }
    }
    
    resources:
      example:
        type: ise:deviceadmin:AuthenticationRule
        properties:
          policySetId: d82952cb-b901-4b09-b363-5ebf39bdbaf9
          name: Rule1
          default: false
          rank: 0
          state: enabled
          conditionType: ConditionAttributes
          conditionIsNegate: false
          conditionAttributeName: Location
          conditionAttributeValue: All Locations
          conditionDictionaryName: DEVICE
          conditionOperator: equals
          identitySourceName: Internal Endpoints
          ifAuthFail: REJECT
          ifProcessFail: DROP
          ifUserNotFound: REJECT
    

    Create AuthenticationRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AuthenticationRule(name: string, args: AuthenticationRuleArgs, opts?: CustomResourceOptions);
    @overload
    def AuthenticationRule(resource_name: str,
                           args: AuthenticationRuleArgs,
                           opts: Optional[ResourceOptions] = None)
    
    @overload
    def AuthenticationRule(resource_name: str,
                           opts: Optional[ResourceOptions] = None,
                           if_auth_fail: Optional[str] = None,
                           policy_set_id: Optional[str] = None,
                           if_user_not_found: Optional[str] = None,
                           if_process_fail: Optional[str] = None,
                           condition_dictionary_value: Optional[str] = None,
                           childrens: Optional[Sequence[AuthenticationRuleChildrenArgs]] = None,
                           condition_is_negate: Optional[bool] = None,
                           condition_operator: Optional[str] = None,
                           condition_type: Optional[str] = None,
                           default: Optional[bool] = None,
                           identity_source_name: Optional[str] = None,
                           condition_id: Optional[str] = None,
                           condition_dictionary_name: Optional[str] = None,
                           condition_attribute_value: Optional[str] = None,
                           name: Optional[str] = None,
                           condition_attribute_name: Optional[str] = None,
                           rank: Optional[int] = None,
                           state: Optional[str] = None)
    func NewAuthenticationRule(ctx *Context, name string, args AuthenticationRuleArgs, opts ...ResourceOption) (*AuthenticationRule, error)
    public AuthenticationRule(string name, AuthenticationRuleArgs args, CustomResourceOptions? opts = null)
    public AuthenticationRule(String name, AuthenticationRuleArgs args)
    public AuthenticationRule(String name, AuthenticationRuleArgs args, CustomResourceOptions options)
    
    type: ise:deviceadmin:AuthenticationRule
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var authenticationRuleResource = new Ise.DeviceAdmin.AuthenticationRule("authenticationRuleResource", new()
    {
        IfAuthFail = "string",
        PolicySetId = "string",
        IfUserNotFound = "string",
        IfProcessFail = "string",
        ConditionDictionaryValue = "string",
        Childrens = new[]
        {
            new Ise.DeviceAdmin.Inputs.AuthenticationRuleChildrenArgs
            {
                ConditionType = "string",
                AttributeName = "string",
                AttributeValue = "string",
                Childrens = new[]
                {
                    new Ise.DeviceAdmin.Inputs.AuthenticationRuleChildrenChildrenArgs
                    {
                        ConditionType = "string",
                        AttributeName = "string",
                        AttributeValue = "string",
                        DictionaryName = "string",
                        DictionaryValue = "string",
                        Id = "string",
                        IsNegate = false,
                        Operator = "string",
                    },
                },
                DictionaryName = "string",
                DictionaryValue = "string",
                Id = "string",
                IsNegate = false,
                Operator = "string",
            },
        },
        ConditionIsNegate = false,
        ConditionOperator = "string",
        ConditionType = "string",
        Default = false,
        IdentitySourceName = "string",
        ConditionId = "string",
        ConditionDictionaryName = "string",
        ConditionAttributeValue = "string",
        Name = "string",
        ConditionAttributeName = "string",
        Rank = 0,
        State = "string",
    });
    
    example, err := deviceadmin.NewAuthenticationRule(ctx, "authenticationRuleResource", &deviceadmin.AuthenticationRuleArgs{
    	IfAuthFail:               pulumi.String("string"),
    	PolicySetId:              pulumi.String("string"),
    	IfUserNotFound:           pulumi.String("string"),
    	IfProcessFail:            pulumi.String("string"),
    	ConditionDictionaryValue: pulumi.String("string"),
    	Childrens: deviceadmin.AuthenticationRuleChildrenArray{
    		&deviceadmin.AuthenticationRuleChildrenArgs{
    			ConditionType:  pulumi.String("string"),
    			AttributeName:  pulumi.String("string"),
    			AttributeValue: pulumi.String("string"),
    			Childrens: deviceadmin.AuthenticationRuleChildrenChildrenArray{
    				&deviceadmin.AuthenticationRuleChildrenChildrenArgs{
    					ConditionType:   pulumi.String("string"),
    					AttributeName:   pulumi.String("string"),
    					AttributeValue:  pulumi.String("string"),
    					DictionaryName:  pulumi.String("string"),
    					DictionaryValue: pulumi.String("string"),
    					Id:              pulumi.String("string"),
    					IsNegate:        pulumi.Bool(false),
    					Operator:        pulumi.String("string"),
    				},
    			},
    			DictionaryName:  pulumi.String("string"),
    			DictionaryValue: pulumi.String("string"),
    			Id:              pulumi.String("string"),
    			IsNegate:        pulumi.Bool(false),
    			Operator:        pulumi.String("string"),
    		},
    	},
    	ConditionIsNegate:       pulumi.Bool(false),
    	ConditionOperator:       pulumi.String("string"),
    	ConditionType:           pulumi.String("string"),
    	Default:                 pulumi.Bool(false),
    	IdentitySourceName:      pulumi.String("string"),
    	ConditionId:             pulumi.String("string"),
    	ConditionDictionaryName: pulumi.String("string"),
    	ConditionAttributeValue: pulumi.String("string"),
    	Name:                    pulumi.String("string"),
    	ConditionAttributeName:  pulumi.String("string"),
    	Rank:                    pulumi.Int(0),
    	State:                   pulumi.String("string"),
    })
    
    var authenticationRuleResource = new AuthenticationRule("authenticationRuleResource", AuthenticationRuleArgs.builder()
        .ifAuthFail("string")
        .policySetId("string")
        .ifUserNotFound("string")
        .ifProcessFail("string")
        .conditionDictionaryValue("string")
        .childrens(AuthenticationRuleChildrenArgs.builder()
            .conditionType("string")
            .attributeName("string")
            .attributeValue("string")
            .childrens(AuthenticationRuleChildrenChildrenArgs.builder()
                .conditionType("string")
                .attributeName("string")
                .attributeValue("string")
                .dictionaryName("string")
                .dictionaryValue("string")
                .id("string")
                .isNegate(false)
                .operator("string")
                .build())
            .dictionaryName("string")
            .dictionaryValue("string")
            .id("string")
            .isNegate(false)
            .operator("string")
            .build())
        .conditionIsNegate(false)
        .conditionOperator("string")
        .conditionType("string")
        .default_(false)
        .identitySourceName("string")
        .conditionId("string")
        .conditionDictionaryName("string")
        .conditionAttributeValue("string")
        .name("string")
        .conditionAttributeName("string")
        .rank(0)
        .state("string")
        .build());
    
    authentication_rule_resource = ise.deviceadmin.AuthenticationRule("authenticationRuleResource",
        if_auth_fail="string",
        policy_set_id="string",
        if_user_not_found="string",
        if_process_fail="string",
        condition_dictionary_value="string",
        childrens=[ise.deviceadmin.AuthenticationRuleChildrenArgs(
            condition_type="string",
            attribute_name="string",
            attribute_value="string",
            childrens=[ise.deviceadmin.AuthenticationRuleChildrenChildrenArgs(
                condition_type="string",
                attribute_name="string",
                attribute_value="string",
                dictionary_name="string",
                dictionary_value="string",
                id="string",
                is_negate=False,
                operator="string",
            )],
            dictionary_name="string",
            dictionary_value="string",
            id="string",
            is_negate=False,
            operator="string",
        )],
        condition_is_negate=False,
        condition_operator="string",
        condition_type="string",
        default=False,
        identity_source_name="string",
        condition_id="string",
        condition_dictionary_name="string",
        condition_attribute_value="string",
        name="string",
        condition_attribute_name="string",
        rank=0,
        state="string")
    
    const authenticationRuleResource = new ise.deviceadmin.AuthenticationRule("authenticationRuleResource", {
        ifAuthFail: "string",
        policySetId: "string",
        ifUserNotFound: "string",
        ifProcessFail: "string",
        conditionDictionaryValue: "string",
        childrens: [{
            conditionType: "string",
            attributeName: "string",
            attributeValue: "string",
            childrens: [{
                conditionType: "string",
                attributeName: "string",
                attributeValue: "string",
                dictionaryName: "string",
                dictionaryValue: "string",
                id: "string",
                isNegate: false,
                operator: "string",
            }],
            dictionaryName: "string",
            dictionaryValue: "string",
            id: "string",
            isNegate: false,
            operator: "string",
        }],
        conditionIsNegate: false,
        conditionOperator: "string",
        conditionType: "string",
        "default": false,
        identitySourceName: "string",
        conditionId: "string",
        conditionDictionaryName: "string",
        conditionAttributeValue: "string",
        name: "string",
        conditionAttributeName: "string",
        rank: 0,
        state: "string",
    });
    
    type: ise:deviceadmin:AuthenticationRule
    properties:
        childrens:
            - attributeName: string
              attributeValue: string
              childrens:
                - attributeName: string
                  attributeValue: string
                  conditionType: string
                  dictionaryName: string
                  dictionaryValue: string
                  id: string
                  isNegate: false
                  operator: string
              conditionType: string
              dictionaryName: string
              dictionaryValue: string
              id: string
              isNegate: false
              operator: string
        conditionAttributeName: string
        conditionAttributeValue: string
        conditionDictionaryName: string
        conditionDictionaryValue: string
        conditionId: string
        conditionIsNegate: false
        conditionOperator: string
        conditionType: string
        default: false
        identitySourceName: string
        ifAuthFail: string
        ifProcessFail: string
        ifUserNotFound: string
        name: string
        policySetId: string
        rank: 0
        state: string
    

    AuthenticationRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The AuthenticationRule resource accepts the following input properties:

    IfAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    IfProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    IfUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    PolicySetId string
    Policy set ID
    Childrens List<AuthenticationRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Default bool
    Indicates if this rule is the default one
    IdentitySourceName string
    Identity source name from the identity stores
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    IfAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    IfProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    IfUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    PolicySetId string
    Policy set ID
    Childrens []AuthenticationRuleChildrenArgs
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Default bool
    Indicates if this rule is the default one
    IdentitySourceName string
    Identity source name from the identity stores
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    ifAuthFail String
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail String
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound String
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    policySetId String
    Policy set ID
    childrens List<AuthenticationRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default_ Boolean
    Indicates if this rule is the default one
    identitySourceName String
    Identity source name from the identity stores
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    rank Integer
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    ifAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    policySetId string
    Policy set ID
    childrens AuthenticationRuleChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName string
    Dictionary attribute name
    conditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName string
    Dictionary name
    conditionDictionaryValue string
    Dictionary value
    conditionId string
    UUID for condition
    conditionIsNegate boolean
    Indicates whereas this condition is in negate mode
    conditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default boolean
    Indicates if this rule is the default one
    identitySourceName string
    Identity source name from the identity stores
    name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    rank number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    if_auth_fail str
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    if_process_fail str
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    if_user_not_found str
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    policy_set_id str
    Policy set ID
    childrens Sequence[AuthenticationRuleChildrenArgs]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    condition_attribute_name str
    Dictionary attribute name
    condition_attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    condition_dictionary_name str
    Dictionary name
    condition_dictionary_value str
    Dictionary value
    condition_id str
    UUID for condition
    condition_is_negate bool
    Indicates whereas this condition is in negate mode
    condition_operator str
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default bool
    Indicates if this rule is the default one
    identity_source_name str
    Identity source name from the identity stores
    name str
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state str
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    ifAuthFail String
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail String
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound String
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    policySetId String
    Policy set ID
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default Boolean
    Indicates if this rule is the default one
    identitySourceName String
    Identity source name from the identity stores
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    rank Number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AuthenticationRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AuthenticationRule Resource

    Get an existing AuthenticationRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AuthenticationRuleState, opts?: CustomResourceOptions): AuthenticationRule
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            childrens: Optional[Sequence[AuthenticationRuleChildrenArgs]] = None,
            condition_attribute_name: Optional[str] = None,
            condition_attribute_value: Optional[str] = None,
            condition_dictionary_name: Optional[str] = None,
            condition_dictionary_value: Optional[str] = None,
            condition_id: Optional[str] = None,
            condition_is_negate: Optional[bool] = None,
            condition_operator: Optional[str] = None,
            condition_type: Optional[str] = None,
            default: Optional[bool] = None,
            identity_source_name: Optional[str] = None,
            if_auth_fail: Optional[str] = None,
            if_process_fail: Optional[str] = None,
            if_user_not_found: Optional[str] = None,
            name: Optional[str] = None,
            policy_set_id: Optional[str] = None,
            rank: Optional[int] = None,
            state: Optional[str] = None) -> AuthenticationRule
    func GetAuthenticationRule(ctx *Context, name string, id IDInput, state *AuthenticationRuleState, opts ...ResourceOption) (*AuthenticationRule, error)
    public static AuthenticationRule Get(string name, Input<string> id, AuthenticationRuleState? state, CustomResourceOptions? opts = null)
    public static AuthenticationRule get(String name, Output<String> id, AuthenticationRuleState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Childrens List<AuthenticationRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Default bool
    Indicates if this rule is the default one
    IdentitySourceName string
    Identity source name from the identity stores
    IfAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    IfProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    IfUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    PolicySetId string
    Policy set ID
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    Childrens []AuthenticationRuleChildrenArgs
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Default bool
    Indicates if this rule is the default one
    IdentitySourceName string
    Identity source name from the identity stores
    IfAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    IfProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    IfUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    PolicySetId string
    Policy set ID
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<AuthenticationRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default_ Boolean
    Indicates if this rule is the default one
    identitySourceName String
    Identity source name from the identity stores
    ifAuthFail String
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail String
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound String
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    policySetId String
    Policy set ID
    rank Integer
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens AuthenticationRuleChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName string
    Dictionary attribute name
    conditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName string
    Dictionary name
    conditionDictionaryValue string
    Dictionary value
    conditionId string
    UUID for condition
    conditionIsNegate boolean
    Indicates whereas this condition is in negate mode
    conditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default boolean
    Indicates if this rule is the default one
    identitySourceName string
    Identity source name from the identity stores
    ifAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    policySetId string
    Policy set ID
    rank number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens Sequence[AuthenticationRuleChildrenArgs]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    condition_attribute_name str
    Dictionary attribute name
    condition_attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    condition_dictionary_name str
    Dictionary name
    condition_dictionary_value str
    Dictionary value
    condition_id str
    UUID for condition
    condition_is_negate bool
    Indicates whereas this condition is in negate mode
    condition_operator str
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default bool
    Indicates if this rule is the default one
    identity_source_name str
    Identity source name from the identity stores
    if_auth_fail str
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    if_process_fail str
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    if_user_not_found str
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    name str
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    policy_set_id str
    Policy set ID
    rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state str
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default Boolean
    Indicates if this rule is the default one
    identitySourceName String
    Identity source name from the identity stores
    ifAuthFail String
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail String
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound String
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    policySetId String
    Policy set ID
    rank Number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

    Supporting Types

    AuthenticationRuleChildren, AuthenticationRuleChildrenArgs

    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    Childrens List<AuthenticationRuleChildrenChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    Childrens []AuthenticationRuleChildrenChildren
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    childrens List<AuthenticationRuleChildrenChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName string
    Dictionary attribute name
    attributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    childrens AuthenticationRuleChildrenChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName string
    Dictionary name
    dictionaryValue string
    Dictionary value
    id string
    UUID for condition
    isNegate boolean
    Indicates whereas this condition is in negate mode
    operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attribute_name str
    Dictionary attribute name
    attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    childrens Sequence[AuthenticationRuleChildrenChildren]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionary_name str
    Dictionary name
    dictionary_value str
    Dictionary value
    id str
    UUID for condition
    is_negate bool
    Indicates whereas this condition is in negate mode
    operator str
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

    AuthenticationRuleChildrenChildren, AuthenticationRuleChildrenChildrenArgs

    ConditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName string
    Dictionary attribute name
    attributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName string
    Dictionary name
    dictionaryValue string
    Dictionary value
    id string
    UUID for condition
    isNegate boolean
    Indicates whereas this condition is in negate mode
    operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attribute_name str
    Dictionary attribute name
    attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    dictionary_name str
    Dictionary name
    dictionary_value str
    Dictionary value
    id str
    UUID for condition
    is_negate bool
    Indicates whereas this condition is in negate mode
    operator str
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

    Import

    $ pulumi import ise:deviceadmin/authenticationRule:AuthenticationRule example "76d24097-41c4-4558-a4d0-a8c07ac08470,76d24097-41c4-4558-a4d0-a8c07ac08470"
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ise pulumi/pulumi-ise
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the ise Terraform Provider.
    ise logo
    Cisco ISE v0.1.4 published on Friday, May 31, 2024 by Pulumi