1. Packages
  2. Strata Cloud Manager Provider
  3. API Docs
  4. DnsSecurityProfile
Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi
scm logo
Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

    DnsSecurityProfile resource

    Example Usage

    Example coming soon!
    
    Example coming soon!
    
    Example coming soon!
    
    Example coming soon!
    
    Example coming soon!
    
    resources:
      scmDnsSecurityProfileBase:
        type: scm:DnsSecurityProfile
        name: scm_dns_security_profile_base
        properties:
          folder: All
          name: dns_base
      scmDnsSecurityCategories:
        type: scm:DnsSecurityProfile
        name: scm_dns_security_categories
        properties:
          folder: All
          name: test_dns_sec_categories
          description: dns security profile w/ dns security categories
          botnetDomains:
            dnsSecurityCategories:
              - name: pan-dns-sec-recent
              - name: pan-dns-sec-grayware
                action: allow
                logLevel: high
                packetCapture: disable
              - name: pan-dns-sec-proxy
                action: block
                logLevel: default
                packetCapture: single-packet
              - name: pan-dns-sec-phishing
                action: sinkhole
                logLevel: critical
                packetCapture: extended-capture
              - name: pan-dns-sec-malware
                action: default
                logLevel: informational
                packetCapture: disable
      scmDnsLists:
        type: scm:DnsSecurityProfile
        name: scm_dns_lists
        properties:
          folder: All
          name: test_dns_lists
          description: dns security profile w/ dns lists
          botnetDomains:
            dnsLists:
              - name: default-paloalto-dns
                packetCapture: disable
                action:
                  alert: {}
              - name: update-edl
                packetCapture: extended-capture
                action:
                  allow: {}
      scmDnsSinkhole:
        type: scm:DnsSecurityProfile
        name: scm_dns_sinkhole
        properties:
          folder: All
          name: test_dns_sinkhole
          description: dns security profile w/ sinkhole
          botnetDomains:
            sinkhole:
              ipv4Address: 127.0.0.1
              ipv6Address: ::1
      scmDnsWhitelist:
        type: scm:DnsSecurityProfile
        name: scm_dns_whitelist
        properties:
          folder: All
          name: test_dns_whitelist
          description: dns security profile w/ whitelist
          botnetDomains:
            whitelists:
              - name: example.com
              - name: example2.com
                description: creating whitelist
      scmDnsAll:
        type: scm:DnsSecurityProfile
        name: scm_dns_all
        properties:
          folder: All
          name: test_dns_all_test
          description: dns security profile w/ all
          botnetDomains:
            dnsSecurityCategories:
              - name: pan-dns-sec-ddns
                action: block
                logLevel: low
                packetCapture: disable
            dnsLists:
              - name: scm_edl_1
                packetCapture: single-packet
                action:
                  block: {}
            sinkhole:
              ipv4Address: pan-sinkhole-default-ip
              ipv6Address: ::1
            whitelists:
              - name: ebay.com
                description: creating whitelist
    

    Create DnsSecurityProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DnsSecurityProfile(name: string, args?: DnsSecurityProfileArgs, opts?: CustomResourceOptions);
    @overload
    def DnsSecurityProfile(resource_name: str,
                           args: Optional[DnsSecurityProfileArgs] = None,
                           opts: Optional[ResourceOptions] = None)
    
    @overload
    def DnsSecurityProfile(resource_name: str,
                           opts: Optional[ResourceOptions] = None,
                           botnet_domains: Optional[DnsSecurityProfileBotnetDomainsArgs] = None,
                           description: Optional[str] = None,
                           device: Optional[str] = None,
                           folder: Optional[str] = None,
                           name: Optional[str] = None,
                           snippet: Optional[str] = None)
    func NewDnsSecurityProfile(ctx *Context, name string, args *DnsSecurityProfileArgs, opts ...ResourceOption) (*DnsSecurityProfile, error)
    public DnsSecurityProfile(string name, DnsSecurityProfileArgs? args = null, CustomResourceOptions? opts = null)
    public DnsSecurityProfile(String name, DnsSecurityProfileArgs args)
    public DnsSecurityProfile(String name, DnsSecurityProfileArgs args, CustomResourceOptions options)
    
    type: scm:DnsSecurityProfile
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args DnsSecurityProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DnsSecurityProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DnsSecurityProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DnsSecurityProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DnsSecurityProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var dnsSecurityProfileResource = new Scm.DnsSecurityProfile("dnsSecurityProfileResource", new()
    {
        BotnetDomains = new Scm.Inputs.DnsSecurityProfileBotnetDomainsArgs
        {
            DnsSecurityCategories = new[]
            {
                new Scm.Inputs.DnsSecurityProfileBotnetDomainsDnsSecurityCategoryArgs
                {
                    Action = "string",
                    LogLevel = "string",
                    Name = "string",
                    PacketCapture = "string",
                },
            },
            Lists = new[]
            {
                new Scm.Inputs.DnsSecurityProfileBotnetDomainsListArgs
                {
                    Name = "string",
                    Action = new Scm.Inputs.DnsSecurityProfileBotnetDomainsListActionArgs
                    {
                        Alert = null,
                        Allow = null,
                        Block = null,
                        Sinkhole = null,
                    },
                    PacketCapture = "string",
                },
            },
            Sinkhole = new Scm.Inputs.DnsSecurityProfileBotnetDomainsSinkholeArgs
            {
                Ipv4Address = "string",
                Ipv6Address = "string",
            },
            Whitelists = new[]
            {
                new Scm.Inputs.DnsSecurityProfileBotnetDomainsWhitelistArgs
                {
                    Name = "string",
                    Description = "string",
                },
            },
        },
        Description = "string",
        Device = "string",
        Folder = "string",
        Name = "string",
        Snippet = "string",
    });
    
    example, err := scm.NewDnsSecurityProfile(ctx, "dnsSecurityProfileResource", &scm.DnsSecurityProfileArgs{
    	BotnetDomains: &scm.DnsSecurityProfileBotnetDomainsArgs{
    		DnsSecurityCategories: scm.DnsSecurityProfileBotnetDomainsDnsSecurityCategoryArray{
    			&scm.DnsSecurityProfileBotnetDomainsDnsSecurityCategoryArgs{
    				Action:        pulumi.String("string"),
    				LogLevel:      pulumi.String("string"),
    				Name:          pulumi.String("string"),
    				PacketCapture: pulumi.String("string"),
    			},
    		},
    		Lists: scm.DnsSecurityProfileBotnetDomainsListArray{
    			&scm.DnsSecurityProfileBotnetDomainsListArgs{
    				Name: pulumi.String("string"),
    				Action: &scm.DnsSecurityProfileBotnetDomainsListActionArgs{
    					Alert:    &scm.DnsSecurityProfileBotnetDomainsListActionAlertArgs{},
    					Allow:    &scm.DnsSecurityProfileBotnetDomainsListActionAllowArgs{},
    					Block:    &scm.DnsSecurityProfileBotnetDomainsListActionBlockArgs{},
    					Sinkhole: &scm.DnsSecurityProfileBotnetDomainsListActionSinkholeArgs{},
    				},
    				PacketCapture: pulumi.String("string"),
    			},
    		},
    		Sinkhole: &scm.DnsSecurityProfileBotnetDomainsSinkholeArgs{
    			Ipv4Address: pulumi.String("string"),
    			Ipv6Address: pulumi.String("string"),
    		},
    		Whitelists: scm.DnsSecurityProfileBotnetDomainsWhitelistArray{
    			&scm.DnsSecurityProfileBotnetDomainsWhitelistArgs{
    				Name:        pulumi.String("string"),
    				Description: pulumi.String("string"),
    			},
    		},
    	},
    	Description: pulumi.String("string"),
    	Device:      pulumi.String("string"),
    	Folder:      pulumi.String("string"),
    	Name:        pulumi.String("string"),
    	Snippet:     pulumi.String("string"),
    })
    
    var dnsSecurityProfileResource = new DnsSecurityProfile("dnsSecurityProfileResource", DnsSecurityProfileArgs.builder()
        .botnetDomains(DnsSecurityProfileBotnetDomainsArgs.builder()
            .dnsSecurityCategories(DnsSecurityProfileBotnetDomainsDnsSecurityCategoryArgs.builder()
                .action("string")
                .logLevel("string")
                .name("string")
                .packetCapture("string")
                .build())
            .lists(DnsSecurityProfileBotnetDomainsListArgs.builder()
                .name("string")
                .action(DnsSecurityProfileBotnetDomainsListActionArgs.builder()
                    .alert(DnsSecurityProfileBotnetDomainsListActionAlertArgs.builder()
                        .build())
                    .allow(DnsSecurityProfileBotnetDomainsListActionAllowArgs.builder()
                        .build())
                    .block(DnsSecurityProfileBotnetDomainsListActionBlockArgs.builder()
                        .build())
                    .sinkhole(DnsSecurityProfileBotnetDomainsListActionSinkholeArgs.builder()
                        .build())
                    .build())
                .packetCapture("string")
                .build())
            .sinkhole(DnsSecurityProfileBotnetDomainsSinkholeArgs.builder()
                .ipv4Address("string")
                .ipv6Address("string")
                .build())
            .whitelists(DnsSecurityProfileBotnetDomainsWhitelistArgs.builder()
                .name("string")
                .description("string")
                .build())
            .build())
        .description("string")
        .device("string")
        .folder("string")
        .name("string")
        .snippet("string")
        .build());
    
    dns_security_profile_resource = scm.DnsSecurityProfile("dnsSecurityProfileResource",
        botnet_domains={
            "dns_security_categories": [{
                "action": "string",
                "log_level": "string",
                "name": "string",
                "packet_capture": "string",
            }],
            "lists": [{
                "name": "string",
                "action": {
                    "alert": {},
                    "allow": {},
                    "block": {},
                    "sinkhole": {},
                },
                "packet_capture": "string",
            }],
            "sinkhole": {
                "ipv4_address": "string",
                "ipv6_address": "string",
            },
            "whitelists": [{
                "name": "string",
                "description": "string",
            }],
        },
        description="string",
        device="string",
        folder="string",
        name="string",
        snippet="string")
    
    const dnsSecurityProfileResource = new scm.DnsSecurityProfile("dnsSecurityProfileResource", {
        botnetDomains: {
            dnsSecurityCategories: [{
                action: "string",
                logLevel: "string",
                name: "string",
                packetCapture: "string",
            }],
            lists: [{
                name: "string",
                action: {
                    alert: {},
                    allow: {},
                    block: {},
                    sinkhole: {},
                },
                packetCapture: "string",
            }],
            sinkhole: {
                ipv4Address: "string",
                ipv6Address: "string",
            },
            whitelists: [{
                name: "string",
                description: "string",
            }],
        },
        description: "string",
        device: "string",
        folder: "string",
        name: "string",
        snippet: "string",
    });
    
    type: scm:DnsSecurityProfile
    properties:
        botnetDomains:
            dnsSecurityCategories:
                - action: string
                  logLevel: string
                  name: string
                  packetCapture: string
            lists:
                - action:
                    alert: {}
                    allow: {}
                    block: {}
                    sinkhole: {}
                  name: string
                  packetCapture: string
            sinkhole:
                ipv4Address: string
                ipv6Address: string
            whitelists:
                - description: string
                  name: string
        description: string
        device: string
        folder: string
        name: string
        snippet: string
    

    DnsSecurityProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DnsSecurityProfile resource accepts the following input properties:

    BotnetDomains DnsSecurityProfileBotnetDomains
    Botnet domains
    Description string
    The description of the DNS security profile
    Device string
    The device in which the resource is defined
    Folder string
    The folder in which the resource is defined
    Name string
    The name of the DNS security profile
    Snippet string
    The snippet in which the resource is defined
    BotnetDomains DnsSecurityProfileBotnetDomainsArgs
    Botnet domains
    Description string
    The description of the DNS security profile
    Device string
    The device in which the resource is defined
    Folder string
    The folder in which the resource is defined
    Name string
    The name of the DNS security profile
    Snippet string
    The snippet in which the resource is defined
    botnetDomains DnsSecurityProfileBotnetDomains
    Botnet domains
    description String
    The description of the DNS security profile
    device String
    The device in which the resource is defined
    folder String
    The folder in which the resource is defined
    name String
    The name of the DNS security profile
    snippet String
    The snippet in which the resource is defined
    botnetDomains DnsSecurityProfileBotnetDomains
    Botnet domains
    description string
    The description of the DNS security profile
    device string
    The device in which the resource is defined
    folder string
    The folder in which the resource is defined
    name string
    The name of the DNS security profile
    snippet string
    The snippet in which the resource is defined
    botnet_domains DnsSecurityProfileBotnetDomainsArgs
    Botnet domains
    description str
    The description of the DNS security profile
    device str
    The device in which the resource is defined
    folder str
    The folder in which the resource is defined
    name str
    The name of the DNS security profile
    snippet str
    The snippet in which the resource is defined
    botnetDomains Property Map
    Botnet domains
    description String
    The description of the DNS security profile
    device String
    The device in which the resource is defined
    folder String
    The folder in which the resource is defined
    name String
    The name of the DNS security profile
    snippet String
    The snippet in which the resource is defined

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DnsSecurityProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Tfid string
    Id string
    The provider-assigned unique ID for this managed resource.
    Tfid string
    id String
    The provider-assigned unique ID for this managed resource.
    tfid String
    id string
    The provider-assigned unique ID for this managed resource.
    tfid string
    id str
    The provider-assigned unique ID for this managed resource.
    tfid str
    id String
    The provider-assigned unique ID for this managed resource.
    tfid String

    Look up Existing DnsSecurityProfile Resource

    Get an existing DnsSecurityProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DnsSecurityProfileState, opts?: CustomResourceOptions): DnsSecurityProfile
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            botnet_domains: Optional[DnsSecurityProfileBotnetDomainsArgs] = None,
            description: Optional[str] = None,
            device: Optional[str] = None,
            folder: Optional[str] = None,
            name: Optional[str] = None,
            snippet: Optional[str] = None,
            tfid: Optional[str] = None) -> DnsSecurityProfile
    func GetDnsSecurityProfile(ctx *Context, name string, id IDInput, state *DnsSecurityProfileState, opts ...ResourceOption) (*DnsSecurityProfile, error)
    public static DnsSecurityProfile Get(string name, Input<string> id, DnsSecurityProfileState? state, CustomResourceOptions? opts = null)
    public static DnsSecurityProfile get(String name, Output<String> id, DnsSecurityProfileState state, CustomResourceOptions options)
    resources:  _:    type: scm:DnsSecurityProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    BotnetDomains DnsSecurityProfileBotnetDomains
    Botnet domains
    Description string
    The description of the DNS security profile
    Device string
    The device in which the resource is defined
    Folder string
    The folder in which the resource is defined
    Name string
    The name of the DNS security profile
    Snippet string
    The snippet in which the resource is defined
    Tfid string
    BotnetDomains DnsSecurityProfileBotnetDomainsArgs
    Botnet domains
    Description string
    The description of the DNS security profile
    Device string
    The device in which the resource is defined
    Folder string
    The folder in which the resource is defined
    Name string
    The name of the DNS security profile
    Snippet string
    The snippet in which the resource is defined
    Tfid string
    botnetDomains DnsSecurityProfileBotnetDomains
    Botnet domains
    description String
    The description of the DNS security profile
    device String
    The device in which the resource is defined
    folder String
    The folder in which the resource is defined
    name String
    The name of the DNS security profile
    snippet String
    The snippet in which the resource is defined
    tfid String
    botnetDomains DnsSecurityProfileBotnetDomains
    Botnet domains
    description string
    The description of the DNS security profile
    device string
    The device in which the resource is defined
    folder string
    The folder in which the resource is defined
    name string
    The name of the DNS security profile
    snippet string
    The snippet in which the resource is defined
    tfid string
    botnet_domains DnsSecurityProfileBotnetDomainsArgs
    Botnet domains
    description str
    The description of the DNS security profile
    device str
    The device in which the resource is defined
    folder str
    The folder in which the resource is defined
    name str
    The name of the DNS security profile
    snippet str
    The snippet in which the resource is defined
    tfid str
    botnetDomains Property Map
    Botnet domains
    description String
    The description of the DNS security profile
    device String
    The device in which the resource is defined
    folder String
    The folder in which the resource is defined
    name String
    The name of the DNS security profile
    snippet String
    The snippet in which the resource is defined
    tfid String

    Supporting Types

    DnsSecurityProfileBotnetDomains, DnsSecurityProfileBotnetDomainsArgs

    dnsSecurityCategories List<Property Map>
    DNS categories
    lists List<Property Map>
    Dynamic lists of DNS domains
    sinkhole Property Map
    DNS sinkhole settings
    whitelists List<Property Map>
    DNS security overrides

    DnsSecurityProfileBotnetDomainsDnsSecurityCategory, DnsSecurityProfileBotnetDomainsDnsSecurityCategoryArgs

    Action string
    Action
    LogLevel string
    Log level
    Name string
    Name
    PacketCapture string
    Packet capture
    Action string
    Action
    LogLevel string
    Log level
    Name string
    Name
    PacketCapture string
    Packet capture
    action String
    Action
    logLevel String
    Log level
    name String
    Name
    packetCapture String
    Packet capture
    action string
    Action
    logLevel string
    Log level
    name string
    Name
    packetCapture string
    Packet capture
    action str
    Action
    log_level str
    Log level
    name str
    Name
    packet_capture str
    Packet capture
    action String
    Action
    logLevel String
    Log level
    name String
    Name
    packetCapture String
    Packet capture

    DnsSecurityProfileBotnetDomainsList, DnsSecurityProfileBotnetDomainsListArgs

    name String
    Name
    action Property Map
    Action
    packetCapture String
    Packet capture

    DnsSecurityProfileBotnetDomainsListAction, DnsSecurityProfileBotnetDomainsListActionArgs

    DnsSecurityProfileBotnetDomainsSinkhole, DnsSecurityProfileBotnetDomainsSinkholeArgs

    Ipv4Address string
    Ipv4 address
    Ipv6Address string
    Ipv6 address
    Ipv4Address string
    Ipv4 address
    Ipv6Address string
    Ipv6 address
    ipv4Address String
    Ipv4 address
    ipv6Address String
    Ipv6 address
    ipv4Address string
    Ipv4 address
    ipv6Address string
    Ipv6 address
    ipv4_address str
    Ipv4 address
    ipv6_address str
    Ipv6 address
    ipv4Address String
    Ipv4 address
    ipv6Address String
    Ipv6 address

    DnsSecurityProfileBotnetDomainsWhitelist, DnsSecurityProfileBotnetDomainsWhitelistArgs

    Name string
    DNS domain or FQDN to be whitelisted
    Description string
    Description
    Name string
    DNS domain or FQDN to be whitelisted
    Description string
    Description
    name String
    DNS domain or FQDN to be whitelisted
    description String
    Description
    name string
    DNS domain or FQDN to be whitelisted
    description string
    Description
    name str
    DNS domain or FQDN to be whitelisted
    description str
    Description
    name String
    DNS domain or FQDN to be whitelisted
    description String
    Description

    Package Details

    Repository
    scm pulumi/pulumi-scm
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the scm Terraform Provider.
    scm logo
    Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi
      Meet Neo: Your AI Platform Teammate