scm.VulnerabilityProtectionProfile

Strata Cloud Manager v0.4.3, Nov 8 25

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

Example Usage

Example coming soon!

Example coming soon!

Example coming soon!

Example coming soon!

Example coming soon!

resources:
  scmVpProfile1Test:
    type: scm:VulnerabilityProtectionProfile
    name: scm_vp_profile_1_test
    properties:
      folder: Shared
      name: vp-profile-1-test
      description: basic profile
  scmVpProfile2Test:
    type: scm:VulnerabilityProtectionProfile
    name: scm_vp_profile_2_test
    properties:
      folder: Shared
      name: vp-profile-2-test
      description: 'rules: allow, alert, and drop'
      rules:
        - name: Rule-Informational-Allow
          action:
            allow: {}
          packetCapture: extended-capture
          severity:
            - informational
          category: scan
          cve:
            - N/A
          host: client
          vendorId:
            - Match Any Vendor
          threatName: '30000'
        - name: Rule-Medium-Alert
          action:
            alert: {}
          packetCapture: single-packet
          severity:
            - medium
          category: info-leak
          cve:
            - Match Any CVE
          host: server
          vendorId:
            - MS08-037
          threatName: OpenSSL Threat
        - name: Rule-Critical-High-Drop
          action:
            drop: {}
          packetCapture: disable
          severity:
            - critical
            - high
          category: overflow
          cve:
            - CVE-2008-1147
          host: any
          vendorId:
            - Match Any Vendor
          threatName: any
  scmVpProfile3Test:
    type: scm:VulnerabilityProtectionProfile
    name: scm_vp_profile_3_test
    properties:
      folder: Shared
      name: vp-profile-3-test
      description: 'rules: reset client, reset server, reset both'
      rules:
        - name: Rule-Low-Reset_Client
          action:
            resetClient: {}
          severity:
            - low
          category: protocol-anomaly
          cve:
            - CVE-2010-3332
            - CVE-2019-14537
          host: client
          vendorId:
            - MSO5-032
            - IZ18434
          threatName: '30261'
        - name: Rule-Info-Low-Reset_Server
          action:
            resetServer: {}
          packetCapture: disable
          severity:
            - informational
            - low
          category: insecure-credentials
          cve:
            - N/A
          host: server
          vendorId:
            - Match Any Vendor
          threatName: Zone Bypass
        - name: Rule-Medium-Reset_Both
          action:
            resetBoth: {}
          packetCapture: single-packet
          severity:
            - medium
          category: brute-force
          cve:
            - CVE-2012-0175
            - CVE-2024-6387
            - CVE-2017-14473
          host: any
          vendorId:
            - CORE-1009-0227
            - SHIRO-550
            - AST-2012-008
          threatName: any
  scmVpProfile4Test:
    type: scm:VulnerabilityProtectionProfile
    name: scm_vp_profile_4_test
    properties:
      folder: Shared
      name: vp-profile-4-test
      description: 'rules: block ip'
      rules:
        - name: Rule-High-Critical-Block_IP
          action:
            blockIp:
              duration: 3600
              trackBy: source-and-destination
          severity:
            - high
            - critical
          category: insecure-credentials
          cve:
            - N/A
          host: server
          vendorId:
            - Match Any Vendor
          threatName: Zone Credentials
        - name: Rule-Low-Medium-Block_IP
          action:
            blockIp:
              duration: 2400
              trackBy: source-and-destination
          severity:
            - low
            - medium
          category: command-execution
          cve:
            - N/A
          host: server
          vendorId:
            - Match Any Vendor
          threatName: any
  scmVpProfile5Test:
    type: scm:VulnerabilityProtectionProfile
    name: scm_vp_profile_5_test
    properties:
      folder: Shared
      name: vp-profile-5-test
      description: override
      threatExceptions:
        - name: '12345'
          action:
            allow: {}
          severity:
            - informational
          category: command-execution
          exemptIp:
            - name: 192.14.3.100
          timeAttribute:
            interval: 3600
            threshold: 24000
            trackBy: source
  scmVpProfile6Test:
    type: scm:VulnerabilityProtectionProfile
    name: scm_vp_profile_6_test
    properties:
      folder: Shared
      name: vp-profile-6-test
      description: mixed
      rules:
        - name: Rule-Info-Rest_Both
          action:
            allow: {}
          packetCapture: disable
          severity:
            - informational
          category: exploit-kit
          cve:
            - N/A
          host: client
          vendorId:
            - Match Any Vendor
          threatName: '30000'
        - name: Rule-Low-Alert
          action:
            alert: {}
          packetCapture: single-packet
          severity:
            - low
          category: dos
          cve:
            - CVE-2020-8790
          host: server
          vendorId:
            - MS09-036
          threatName: Memory Corruption
        - name: Rule-Medium-Drop
          action:
            drop: {}
          packetCapture: disable
          severity:
            - medium
            - high
          category: insecure-credentials
          cve:
            - N/A
          host: any
          vendorId:
            - Match Any Vendor
          threatName: any
      threatExceptions:
        - name: '12345'
          action:
            drop: {}
          packetCapture: single-packet
          host: any
          category: scan
          cve:
            - CVE-2011-2663
            - CVE-2016-9949
          exemptIp:
            - name: 192.14.3.100

Create VulnerabilityProtectionProfile Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new VulnerabilityProtectionProfile(name: string, args?: VulnerabilityProtectionProfileArgs, opts?: CustomResourceOptions);

@overload
def VulnerabilityProtectionProfile(resource_name: str,
                                   args: Optional[VulnerabilityProtectionProfileArgs] = None,
                                   opts: Optional[ResourceOptions] = None)

@overload
def VulnerabilityProtectionProfile(resource_name: str,
                                   opts: Optional[ResourceOptions] = None,
                                   description: Optional[str] = None,
                                   device: Optional[str] = None,
                                   folder: Optional[str] = None,
                                   name: Optional[str] = None,
                                   rules: Optional[Sequence[VulnerabilityProtectionProfileRuleArgs]] = None,
                                   snippet: Optional[str] = None,
                                   threat_exceptions: Optional[Sequence[VulnerabilityProtectionProfileThreatExceptionArgs]] = None)

func NewVulnerabilityProtectionProfile(ctx *Context, name string, args *VulnerabilityProtectionProfileArgs, opts ...ResourceOption) (*VulnerabilityProtectionProfile, error)

public VulnerabilityProtectionProfile(string name, VulnerabilityProtectionProfileArgs? args = null, CustomResourceOptions? opts = null)

public VulnerabilityProtectionProfile(String name, VulnerabilityProtectionProfileArgs args)
public VulnerabilityProtectionProfile(String name, VulnerabilityProtectionProfileArgs args, CustomResourceOptions options)

type: scm:VulnerabilityProtectionProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args VulnerabilityProtectionProfileArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args VulnerabilityProtectionProfileArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args VulnerabilityProtectionProfileArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args VulnerabilityProtectionProfileArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args VulnerabilityProtectionProfileArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var vulnerabilityProtectionProfileResource = new Scm.VulnerabilityProtectionProfile("vulnerabilityProtectionProfileResource", new()
{
    Description = "string",
    Device = "string",
    Folder = "string",
    Name = "string",
    Rules = new[]
    {
        new Scm.Inputs.VulnerabilityProtectionProfileRuleArgs
        {
            Action = new Scm.Inputs.VulnerabilityProtectionProfileRuleActionArgs
            {
                Alert = null,
                Allow = null,
                BlockIp = new Scm.Inputs.VulnerabilityProtectionProfileRuleActionBlockIpArgs
                {
                    Duration = 0,
                    TrackBy = "string",
                },
                Default = null,
                Drop = null,
                ResetBoth = null,
                ResetClient = null,
                ResetServer = null,
            },
            Category = "string",
            Cves = new[]
            {
                "string",
            },
            Host = "string",
            Name = "string",
            PacketCapture = "string",
            Severities = new[]
            {
                "string",
            },
            ThreatName = "string",
            VendorIds = new[]
            {
                "string",
            },
        },
    },
    Snippet = "string",
    ThreatExceptions = new[]
    {
        new Scm.Inputs.VulnerabilityProtectionProfileThreatExceptionArgs
        {
            Action = new Scm.Inputs.VulnerabilityProtectionProfileThreatExceptionActionArgs
            {
                Alert = null,
                Allow = null,
                BlockIp = new Scm.Inputs.VulnerabilityProtectionProfileThreatExceptionActionBlockIpArgs
                {
                    Duration = 0,
                    TrackBy = "string",
                },
                Default = null,
                Drop = null,
                ResetBoth = null,
                ResetClient = null,
                ResetServer = null,
            },
            ExemptIps = new[]
            {
                new Scm.Inputs.VulnerabilityProtectionProfileThreatExceptionExemptIpArgs
                {
                    Name = "string",
                },
            },
            Name = "string",
            Notes = "string",
            PacketCapture = "string",
            TimeAttribute = new Scm.Inputs.VulnerabilityProtectionProfileThreatExceptionTimeAttributeArgs
            {
                Interval = 0,
                Threshold = 0,
                TrackBy = "string",
            },
        },
    },
});

example, err := scm.NewVulnerabilityProtectionProfile(ctx, "vulnerabilityProtectionProfileResource", &scm.VulnerabilityProtectionProfileArgs{
	Description: pulumi.String("string"),
	Device:      pulumi.String("string"),
	Folder:      pulumi.String("string"),
	Name:        pulumi.String("string"),
	Rules: scm.VulnerabilityProtectionProfileRuleArray{
		&scm.VulnerabilityProtectionProfileRuleArgs{
			Action: &scm.VulnerabilityProtectionProfileRuleActionArgs{
				Alert: &scm.VulnerabilityProtectionProfileRuleActionAlertArgs{},
				Allow: &scm.VulnerabilityProtectionProfileRuleActionAllowArgs{},
				BlockIp: &scm.VulnerabilityProtectionProfileRuleActionBlockIpArgs{
					Duration: pulumi.Int(0),
					TrackBy:  pulumi.String("string"),
				},
				Default:     &scm.VulnerabilityProtectionProfileRuleActionDefaultArgs{},
				Drop:        &scm.VulnerabilityProtectionProfileRuleActionDropArgs{},
				ResetBoth:   &scm.VulnerabilityProtectionProfileRuleActionResetBothArgs{},
				ResetClient: &scm.VulnerabilityProtectionProfileRuleActionResetClientArgs{},
				ResetServer: &scm.VulnerabilityProtectionProfileRuleActionResetServerArgs{},
			},
			Category: pulumi.String("string"),
			Cves: pulumi.StringArray{
				pulumi.String("string"),
			},
			Host:          pulumi.String("string"),
			Name:          pulumi.String("string"),
			PacketCapture: pulumi.String("string"),
			Severities: pulumi.StringArray{
				pulumi.String("string"),
			},
			ThreatName: pulumi.String("string"),
			VendorIds: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Snippet: pulumi.String("string"),
	ThreatExceptions: scm.VulnerabilityProtectionProfileThreatExceptionArray{
		&scm.VulnerabilityProtectionProfileThreatExceptionArgs{
			Action: &scm.VulnerabilityProtectionProfileThreatExceptionActionArgs{
				Alert: &scm.VulnerabilityProtectionProfileThreatExceptionActionAlertArgs{},
				Allow: &scm.VulnerabilityProtectionProfileThreatExceptionActionAllowArgs{},
				BlockIp: &scm.VulnerabilityProtectionProfileThreatExceptionActionBlockIpArgs{
					Duration: pulumi.Int(0),
					TrackBy:  pulumi.String("string"),
				},
				Default:     &scm.VulnerabilityProtectionProfileThreatExceptionActionDefaultArgs{},
				Drop:        &scm.VulnerabilityProtectionProfileThreatExceptionActionDropArgs{},
				ResetBoth:   &scm.VulnerabilityProtectionProfileThreatExceptionActionResetBothArgs{},
				ResetClient: &scm.VulnerabilityProtectionProfileThreatExceptionActionResetClientArgs{},
				ResetServer: &scm.VulnerabilityProtectionProfileThreatExceptionActionResetServerArgs{},
			},
			ExemptIps: scm.VulnerabilityProtectionProfileThreatExceptionExemptIpArray{
				&scm.VulnerabilityProtectionProfileThreatExceptionExemptIpArgs{
					Name: pulumi.String("string"),
				},
			},
			Name:          pulumi.String("string"),
			Notes:         pulumi.String("string"),
			PacketCapture: pulumi.String("string"),
			TimeAttribute: &scm.VulnerabilityProtectionProfileThreatExceptionTimeAttributeArgs{
				Interval:  pulumi.Int(0),
				Threshold: pulumi.Int(0),
				TrackBy:   pulumi.String("string"),
			},
		},
	},
})

var vulnerabilityProtectionProfileResource = new VulnerabilityProtectionProfile("vulnerabilityProtectionProfileResource", VulnerabilityProtectionProfileArgs.builder()
    .description("string")
    .device("string")
    .folder("string")
    .name("string")
    .rules(VulnerabilityProtectionProfileRuleArgs.builder()
        .action(VulnerabilityProtectionProfileRuleActionArgs.builder()
            .alert(VulnerabilityProtectionProfileRuleActionAlertArgs.builder()
                .build())
            .allow(VulnerabilityProtectionProfileRuleActionAllowArgs.builder()
                .build())
            .blockIp(VulnerabilityProtectionProfileRuleActionBlockIpArgs.builder()
                .duration(0)
                .trackBy("string")
                .build())
            .default_(VulnerabilityProtectionProfileRuleActionDefaultArgs.builder()
                .build())
            .drop(VulnerabilityProtectionProfileRuleActionDropArgs.builder()
                .build())
            .resetBoth(VulnerabilityProtectionProfileRuleActionResetBothArgs.builder()
                .build())
            .resetClient(VulnerabilityProtectionProfileRuleActionResetClientArgs.builder()
                .build())
            .resetServer(VulnerabilityProtectionProfileRuleActionResetServerArgs.builder()
                .build())
            .build())
        .category("string")
        .cves("string")
        .host("string")
        .name("string")
        .packetCapture("string")
        .severities("string")
        .threatName("string")
        .vendorIds("string")
        .build())
    .snippet("string")
    .threatExceptions(VulnerabilityProtectionProfileThreatExceptionArgs.builder()
        .action(VulnerabilityProtectionProfileThreatExceptionActionArgs.builder()
            .alert(VulnerabilityProtectionProfileThreatExceptionActionAlertArgs.builder()
                .build())
            .allow(VulnerabilityProtectionProfileThreatExceptionActionAllowArgs.builder()
                .build())
            .blockIp(VulnerabilityProtectionProfileThreatExceptionActionBlockIpArgs.builder()
                .duration(0)
                .trackBy("string")
                .build())
            .default_(VulnerabilityProtectionProfileThreatExceptionActionDefaultArgs.builder()
                .build())
            .drop(VulnerabilityProtectionProfileThreatExceptionActionDropArgs.builder()
                .build())
            .resetBoth(VulnerabilityProtectionProfileThreatExceptionActionResetBothArgs.builder()
                .build())
            .resetClient(VulnerabilityProtectionProfileThreatExceptionActionResetClientArgs.builder()
                .build())
            .resetServer(VulnerabilityProtectionProfileThreatExceptionActionResetServerArgs.builder()
                .build())
            .build())
        .exemptIps(VulnerabilityProtectionProfileThreatExceptionExemptIpArgs.builder()
            .name("string")
            .build())
        .name("string")
        .notes("string")
        .packetCapture("string")
        .timeAttribute(VulnerabilityProtectionProfileThreatExceptionTimeAttributeArgs.builder()
            .interval(0)
            .threshold(0)
            .trackBy("string")
            .build())
        .build())
    .build());

vulnerability_protection_profile_resource = scm.VulnerabilityProtectionProfile("vulnerabilityProtectionProfileResource",
    description="string",
    device="string",
    folder="string",
    name="string",
    rules=[{
        "action": {
            "alert": {},
            "allow": {},
            "block_ip": {
                "duration": 0,
                "track_by": "string",
            },
            "default": {},
            "drop": {},
            "reset_both": {},
            "reset_client": {},
            "reset_server": {},
        },
        "category": "string",
        "cves": ["string"],
        "host": "string",
        "name": "string",
        "packet_capture": "string",
        "severities": ["string"],
        "threat_name": "string",
        "vendor_ids": ["string"],
    }],
    snippet="string",
    threat_exceptions=[{
        "action": {
            "alert": {},
            "allow": {},
            "block_ip": {
                "duration": 0,
                "track_by": "string",
            },
            "default": {},
            "drop": {},
            "reset_both": {},
            "reset_client": {},
            "reset_server": {},
        },
        "exempt_ips": [{
            "name": "string",
        }],
        "name": "string",
        "notes": "string",
        "packet_capture": "string",
        "time_attribute": {
            "interval": 0,
            "threshold": 0,
            "track_by": "string",
        },
    }])

const vulnerabilityProtectionProfileResource = new scm.VulnerabilityProtectionProfile("vulnerabilityProtectionProfileResource", {
    description: "string",
    device: "string",
    folder: "string",
    name: "string",
    rules: [{
        action: {
            alert: {},
            allow: {},
            blockIp: {
                duration: 0,
                trackBy: "string",
            },
            "default": {},
            drop: {},
            resetBoth: {},
            resetClient: {},
            resetServer: {},
        },
        category: "string",
        cves: ["string"],
        host: "string",
        name: "string",
        packetCapture: "string",
        severities: ["string"],
        threatName: "string",
        vendorIds: ["string"],
    }],
    snippet: "string",
    threatExceptions: [{
        action: {
            alert: {},
            allow: {},
            blockIp: {
                duration: 0,
                trackBy: "string",
            },
            "default": {},
            drop: {},
            resetBoth: {},
            resetClient: {},
            resetServer: {},
        },
        exemptIps: [{
            name: "string",
        }],
        name: "string",
        notes: "string",
        packetCapture: "string",
        timeAttribute: {
            interval: 0,
            threshold: 0,
            trackBy: "string",
        },
    }],
});

type: scm:VulnerabilityProtectionProfile
properties:
    description: string
    device: string
    folder: string
    name: string
    rules:
        - action:
            alert: {}
            allow: {}
            blockIp:
                duration: 0
                trackBy: string
            default: {}
            drop: {}
            resetBoth: {}
            resetClient: {}
            resetServer: {}
          category: string
          cves:
            - string
          host: string
          name: string
          packetCapture: string
          severities:
            - string
          threatName: string
          vendorIds:
            - string
    snippet: string
    threatExceptions:
        - action:
            alert: {}
            allow: {}
            blockIp:
                duration: 0
                trackBy: string
            default: {}
            drop: {}
            resetBoth: {}
            resetClient: {}
            resetServer: {}
          exemptIps:
            - name: string
          name: string
          notes: string
          packetCapture: string
          timeAttribute:
            interval: 0
            threshold: 0
            trackBy: string

VulnerabilityProtectionProfile Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The VulnerabilityProtectionProfile resource accepts the following input properties:

Description string: Description
Device string: The device in which the resource is defined
Folder string: The folder in which the resource is defined
Name string: Name
Rules List<VulnerabilityProtectionProfileRule>: Rules
Snippet string: The snippet in which the resource is defined
ThreatExceptions List<VulnerabilityProtectionProfileThreatException>: Threat exception

Description string: Description
Device string: The device in which the resource is defined
Folder string: The folder in which the resource is defined
Name string: Name
Rules []VulnerabilityProtectionProfileRuleArgs: Rules
Snippet string: The snippet in which the resource is defined
ThreatExceptions []VulnerabilityProtectionProfileThreatExceptionArgs: Threat exception

description String: Description
device String: The device in which the resource is defined
folder String: The folder in which the resource is defined
name String: Name
rules List<VulnerabilityProtectionProfileRule>: Rules
snippet String: The snippet in which the resource is defined
threatExceptions List<VulnerabilityProtectionProfileThreatException>: Threat exception

description string: Description
device string: The device in which the resource is defined
folder string: The folder in which the resource is defined
name string: Name
rules VulnerabilityProtectionProfileRule[]: Rules
snippet string: The snippet in which the resource is defined
threatExceptions VulnerabilityProtectionProfileThreatException[]: Threat exception

description str: Description
device str: The device in which the resource is defined
folder str: The folder in which the resource is defined
name str: Name
rules Sequence[VulnerabilityProtectionProfileRuleArgs]: Rules
snippet str: The snippet in which the resource is defined
threat_exceptions Sequence[VulnerabilityProtectionProfileThreatExceptionArgs]: Threat exception

description String: Description
device String: The device in which the resource is defined
folder String: The folder in which the resource is defined
name String: Name
rules List<Property Map>: Rules
snippet String: The snippet in which the resource is defined
threatExceptions List<Property Map>: Threat exception

Outputs

All input properties are implicitly available as output properties. Additionally, the VulnerabilityProtectionProfile resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
Tfid string

Id string: The provider-assigned unique ID for this managed resource.
Tfid string

id String: The provider-assigned unique ID for this managed resource.
tfid String

id string: The provider-assigned unique ID for this managed resource.
tfid string

id str: The provider-assigned unique ID for this managed resource.
tfid str

id String: The provider-assigned unique ID for this managed resource.
tfid String

Look up Existing VulnerabilityProtectionProfile Resource

Get an existing VulnerabilityProtectionProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: VulnerabilityProtectionProfileState, opts?: CustomResourceOptions): VulnerabilityProtectionProfile

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        description: Optional[str] = None,
        device: Optional[str] = None,
        folder: Optional[str] = None,
        name: Optional[str] = None,
        rules: Optional[Sequence[VulnerabilityProtectionProfileRuleArgs]] = None,
        snippet: Optional[str] = None,
        tfid: Optional[str] = None,
        threat_exceptions: Optional[Sequence[VulnerabilityProtectionProfileThreatExceptionArgs]] = None) -> VulnerabilityProtectionProfile

func GetVulnerabilityProtectionProfile(ctx *Context, name string, id IDInput, state *VulnerabilityProtectionProfileState, opts ...ResourceOption) (*VulnerabilityProtectionProfile, error)

public static VulnerabilityProtectionProfile Get(string name, Input<string> id, VulnerabilityProtectionProfileState? state, CustomResourceOptions? opts = null)

public static VulnerabilityProtectionProfile get(String name, Output<String> id, VulnerabilityProtectionProfileState state, CustomResourceOptions options)

resources:  _:    type: scm:VulnerabilityProtectionProfile    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Description string: Description
Device string: The device in which the resource is defined
Folder string: The folder in which the resource is defined
Name string: Name
Rules List<VulnerabilityProtectionProfileRule>: Rules
Snippet string: The snippet in which the resource is defined
Tfid string
ThreatExceptions List<VulnerabilityProtectionProfileThreatException>: Threat exception

Description string: Description
Device string: The device in which the resource is defined
Folder string: The folder in which the resource is defined
Name string: Name
Rules []VulnerabilityProtectionProfileRuleArgs: Rules
Snippet string: The snippet in which the resource is defined
Tfid string
ThreatExceptions []VulnerabilityProtectionProfileThreatExceptionArgs: Threat exception

description String: Description
device String: The device in which the resource is defined
folder String: The folder in which the resource is defined
name String: Name
rules List<VulnerabilityProtectionProfileRule>: Rules
snippet String: The snippet in which the resource is defined
tfid String
threatExceptions List<VulnerabilityProtectionProfileThreatException>: Threat exception

description string: Description
device string: The device in which the resource is defined
folder string: The folder in which the resource is defined
name string: Name
rules VulnerabilityProtectionProfileRule[]: Rules
snippet string: The snippet in which the resource is defined
tfid string
threatExceptions VulnerabilityProtectionProfileThreatException[]: Threat exception

description str: Description
device str: The device in which the resource is defined
folder str: The folder in which the resource is defined
name str: Name
rules Sequence[VulnerabilityProtectionProfileRuleArgs]: Rules
snippet str: The snippet in which the resource is defined
tfid str
threat_exceptions Sequence[VulnerabilityProtectionProfileThreatExceptionArgs]: Threat exception

description String: Description
device String: The device in which the resource is defined
folder String: The folder in which the resource is defined
name String: Name
rules List<Property Map>: Rules
snippet String: The snippet in which the resource is defined
tfid String
threatExceptions List<Property Map>: Threat exception

Supporting Types

VulnerabilityProtectionProfileRule, VulnerabilityProtectionProfileRuleArgs

Action VulnerabilityProtectionProfileRuleAction: vulnerability profiles threat exception default action
Category string: Category
Cves List<string>: Cve
Host string: Host
Name string: Name
PacketCapture string: Packet capture
Severities List<string>: Severity
ThreatName string: Threat name
VendorIds List<string>: Vendor id

Action VulnerabilityProtectionProfileRuleAction: vulnerability profiles threat exception default action
Category string: Category
Cves []string: Cve
Host string: Host
Name string: Name
PacketCapture string: Packet capture
Severities []string: Severity
ThreatName string: Threat name
VendorIds []string: Vendor id

action VulnerabilityProtectionProfileRuleAction: vulnerability profiles threat exception default action
category String: Category
cves List<String>: Cve
host String: Host
name String: Name
packetCapture String: Packet capture
severities List<String>: Severity
threatName String: Threat name
vendorIds List<String>: Vendor id

action VulnerabilityProtectionProfileRuleAction: vulnerability profiles threat exception default action
category string: Category
cves string[]: Cve
host string: Host
name string: Name
packetCapture string: Packet capture
severities string[]: Severity
threatName string: Threat name
vendorIds string[]: Vendor id

action VulnerabilityProtectionProfileRuleAction: vulnerability profiles threat exception default action
category str: Category
cves Sequence[str]: Cve
host str: Host
name str: Name
packet_capture str: Packet capture
severities Sequence[str]: Severity
threat_name str: Threat name
vendor_ids Sequence[str]: Vendor id

action Property Map: vulnerability profiles threat exception default action
category String: Category
cves List<String>: Cve
host String: Host
name String: Name
packetCapture String: Packet capture
severities List<String>: Severity
threatName String: Threat name
vendorIds List<String>: Vendor id

VulnerabilityProtectionProfileRuleAction, VulnerabilityProtectionProfileRuleActionArgs

Alert VulnerabilityProtectionProfileRuleActionAlert: Alert
Allow VulnerabilityProtectionProfileRuleActionAllow: Allow
BlockIp VulnerabilityProtectionProfileRuleActionBlockIp: vulnerability protection block ip
Default VulnerabilityProtectionProfileRuleActionDefault: Default
Drop VulnerabilityProtectionProfileRuleActionDrop: Drop
ResetBoth VulnerabilityProtectionProfileRuleActionResetBoth: Reset both
ResetClient VulnerabilityProtectionProfileRuleActionResetClient: Reset client
ResetServer VulnerabilityProtectionProfileRuleActionResetServer: Reset server

Alert VulnerabilityProtectionProfileRuleActionAlert: Alert
Allow VulnerabilityProtectionProfileRuleActionAllow: Allow
BlockIp VulnerabilityProtectionProfileRuleActionBlockIp: vulnerability protection block ip
Default VulnerabilityProtectionProfileRuleActionDefault: Default
Drop VulnerabilityProtectionProfileRuleActionDrop: Drop
ResetBoth VulnerabilityProtectionProfileRuleActionResetBoth: Reset both
ResetClient VulnerabilityProtectionProfileRuleActionResetClient: Reset client
ResetServer VulnerabilityProtectionProfileRuleActionResetServer: Reset server

alert VulnerabilityProtectionProfileRuleActionAlert: Alert
allow VulnerabilityProtectionProfileRuleActionAllow: Allow
blockIp VulnerabilityProtectionProfileRuleActionBlockIp: vulnerability protection block ip
default_ VulnerabilityProtectionProfileRuleActionDefault: Default
drop VulnerabilityProtectionProfileRuleActionDrop: Drop
resetBoth VulnerabilityProtectionProfileRuleActionResetBoth: Reset both
resetClient VulnerabilityProtectionProfileRuleActionResetClient: Reset client
resetServer VulnerabilityProtectionProfileRuleActionResetServer: Reset server

alert VulnerabilityProtectionProfileRuleActionAlert: Alert
allow VulnerabilityProtectionProfileRuleActionAllow: Allow
blockIp VulnerabilityProtectionProfileRuleActionBlockIp: vulnerability protection block ip
default VulnerabilityProtectionProfileRuleActionDefault: Default
drop VulnerabilityProtectionProfileRuleActionDrop: Drop
resetBoth VulnerabilityProtectionProfileRuleActionResetBoth: Reset both
resetClient VulnerabilityProtectionProfileRuleActionResetClient: Reset client
resetServer VulnerabilityProtectionProfileRuleActionResetServer: Reset server

alert VulnerabilityProtectionProfileRuleActionAlert: Alert
allow VulnerabilityProtectionProfileRuleActionAllow: Allow
block_ip VulnerabilityProtectionProfileRuleActionBlockIp: vulnerability protection block ip
default VulnerabilityProtectionProfileRuleActionDefault: Default
drop VulnerabilityProtectionProfileRuleActionDrop: Drop
reset_both VulnerabilityProtectionProfileRuleActionResetBoth: Reset both
reset_client VulnerabilityProtectionProfileRuleActionResetClient: Reset client
reset_server VulnerabilityProtectionProfileRuleActionResetServer: Reset server

alert Property Map: Alert
allow Property Map: Allow
blockIp Property Map: vulnerability protection block ip
default Property Map: Default
drop Property Map: Drop
resetBoth Property Map: Reset both
resetClient Property Map: Reset client
resetServer Property Map: Reset server

VulnerabilityProtectionProfileRuleActionBlockIp, VulnerabilityProtectionProfileRuleActionBlockIpArgs

Duration int: Duration
TrackBy string: Track by

Duration int: Duration
TrackBy string: Track by

duration Integer: Duration
trackBy String: Track by

duration number: Duration
trackBy string: Track by

duration int: Duration
track_by str: Track by

duration Number: Duration
trackBy String: Track by

VulnerabilityProtectionProfileThreatException, VulnerabilityProtectionProfileThreatExceptionArgs

Action VulnerabilityProtectionProfileThreatExceptionAction: vulnerability threat exception default action
ExemptIps List<VulnerabilityProtectionProfileThreatExceptionExemptIp>: Exempt ip
Name string: Name
Notes string: Notes
PacketCapture string: Packet capture
TimeAttribute VulnerabilityProtectionProfileThreatExceptionTimeAttribute: vulnerability time attribute

Action VulnerabilityProtectionProfileThreatExceptionAction: vulnerability threat exception default action
ExemptIps []VulnerabilityProtectionProfileThreatExceptionExemptIp: Exempt ip
Name string: Name
Notes string: Notes
PacketCapture string: Packet capture
TimeAttribute VulnerabilityProtectionProfileThreatExceptionTimeAttribute: vulnerability time attribute

action VulnerabilityProtectionProfileThreatExceptionAction: vulnerability threat exception default action
exemptIps List<VulnerabilityProtectionProfileThreatExceptionExemptIp>: Exempt ip
name String: Name
notes String: Notes
packetCapture String: Packet capture
timeAttribute VulnerabilityProtectionProfileThreatExceptionTimeAttribute: vulnerability time attribute

action VulnerabilityProtectionProfileThreatExceptionAction: vulnerability threat exception default action
exemptIps VulnerabilityProtectionProfileThreatExceptionExemptIp[]: Exempt ip
name string: Name
notes string: Notes
packetCapture string: Packet capture
timeAttribute VulnerabilityProtectionProfileThreatExceptionTimeAttribute: vulnerability time attribute

action VulnerabilityProtectionProfileThreatExceptionAction: vulnerability threat exception default action
exempt_ips Sequence[VulnerabilityProtectionProfileThreatExceptionExemptIp]: Exempt ip
name str: Name
notes str: Notes
packet_capture str: Packet capture
time_attribute VulnerabilityProtectionProfileThreatExceptionTimeAttribute: vulnerability time attribute

action Property Map: vulnerability threat exception default action
exemptIps List<Property Map>: Exempt ip
name String: Name
notes String: Notes
packetCapture String: Packet capture
timeAttribute Property Map: vulnerability time attribute

VulnerabilityProtectionProfileThreatExceptionAction, VulnerabilityProtectionProfileThreatExceptionActionArgs

Alert VulnerabilityProtectionProfileThreatExceptionActionAlert: Alert
Allow VulnerabilityProtectionProfileThreatExceptionActionAllow: Allow
BlockIp VulnerabilityProtectionProfileThreatExceptionActionBlockIp: vulnerability protection threat exception block ip
Default VulnerabilityProtectionProfileThreatExceptionActionDefault: Default
Drop VulnerabilityProtectionProfileThreatExceptionActionDrop: Drop
ResetBoth VulnerabilityProtectionProfileThreatExceptionActionResetBoth: Reset both
ResetClient VulnerabilityProtectionProfileThreatExceptionActionResetClient: Reset client
ResetServer VulnerabilityProtectionProfileThreatExceptionActionResetServer: Reset server

Alert VulnerabilityProtectionProfileThreatExceptionActionAlert: Alert
Allow VulnerabilityProtectionProfileThreatExceptionActionAllow: Allow
BlockIp VulnerabilityProtectionProfileThreatExceptionActionBlockIp: vulnerability protection threat exception block ip
Default VulnerabilityProtectionProfileThreatExceptionActionDefault: Default
Drop VulnerabilityProtectionProfileThreatExceptionActionDrop: Drop
ResetBoth VulnerabilityProtectionProfileThreatExceptionActionResetBoth: Reset both
ResetClient VulnerabilityProtectionProfileThreatExceptionActionResetClient: Reset client
ResetServer VulnerabilityProtectionProfileThreatExceptionActionResetServer: Reset server

alert VulnerabilityProtectionProfileThreatExceptionActionAlert: Alert
allow VulnerabilityProtectionProfileThreatExceptionActionAllow: Allow
blockIp VulnerabilityProtectionProfileThreatExceptionActionBlockIp: vulnerability protection threat exception block ip
default_ VulnerabilityProtectionProfileThreatExceptionActionDefault: Default
drop VulnerabilityProtectionProfileThreatExceptionActionDrop: Drop
resetBoth VulnerabilityProtectionProfileThreatExceptionActionResetBoth: Reset both
resetClient VulnerabilityProtectionProfileThreatExceptionActionResetClient: Reset client
resetServer VulnerabilityProtectionProfileThreatExceptionActionResetServer: Reset server

alert VulnerabilityProtectionProfileThreatExceptionActionAlert: Alert
allow VulnerabilityProtectionProfileThreatExceptionActionAllow: Allow
blockIp VulnerabilityProtectionProfileThreatExceptionActionBlockIp: vulnerability protection threat exception block ip
default VulnerabilityProtectionProfileThreatExceptionActionDefault: Default
drop VulnerabilityProtectionProfileThreatExceptionActionDrop: Drop
resetBoth VulnerabilityProtectionProfileThreatExceptionActionResetBoth: Reset both
resetClient VulnerabilityProtectionProfileThreatExceptionActionResetClient: Reset client
resetServer VulnerabilityProtectionProfileThreatExceptionActionResetServer: Reset server

alert VulnerabilityProtectionProfileThreatExceptionActionAlert: Alert
allow VulnerabilityProtectionProfileThreatExceptionActionAllow: Allow
block_ip VulnerabilityProtectionProfileThreatExceptionActionBlockIp: vulnerability protection threat exception block ip
default VulnerabilityProtectionProfileThreatExceptionActionDefault: Default
drop VulnerabilityProtectionProfileThreatExceptionActionDrop: Drop
reset_both VulnerabilityProtectionProfileThreatExceptionActionResetBoth: Reset both
reset_client VulnerabilityProtectionProfileThreatExceptionActionResetClient: Reset client
reset_server VulnerabilityProtectionProfileThreatExceptionActionResetServer: Reset server

alert Property Map: Alert
allow Property Map: Allow
blockIp Property Map: vulnerability protection threat exception block ip
default Property Map: Default
drop Property Map: Drop
resetBoth Property Map: Reset both
resetClient Property Map: Reset client
resetServer Property Map: Reset server

VulnerabilityProtectionProfileThreatExceptionActionBlockIp, VulnerabilityProtectionProfileThreatExceptionActionBlockIpArgs

Duration int: Duration
TrackBy string: Track by

Duration int: Duration
TrackBy string: Track by

duration Integer: Duration
trackBy String: Track by

duration number: Duration
trackBy string: Track by

duration int: Duration
track_by str: Track by

duration Number: Duration
trackBy String: Track by

VulnerabilityProtectionProfileThreatExceptionExemptIp, VulnerabilityProtectionProfileThreatExceptionExemptIpArgs

Name string: Name

Name string: Name

name String: Name

name string: Name

name str: Name

name String: Name

VulnerabilityProtectionProfileThreatExceptionTimeAttribute, VulnerabilityProtectionProfileThreatExceptionTimeAttributeArgs

Interval int: Interval
Threshold int: Threshold
TrackBy string: Track by

Interval int: Interval
Threshold int: Threshold
TrackBy string: Track by

interval Integer: Interval
threshold Integer: Threshold
trackBy String: Track by

interval number: Interval
threshold number: Threshold
trackBy string: Track by

interval int: Interval
threshold int: Threshold
track_by str: Track by

interval Number: Interval
threshold Number: Threshold
trackBy String: Track by

Package Details

Repository: scm pulumi/pulumi-scm
License: Apache-2.0
Notes: This Pulumi package is based on the scm Terraform Provider.

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

scm.VulnerabilityProtectionProfile

On this page

On this page

Example Usage

Create VulnerabilityProtectionProfile Resource

Constructor syntax

Parameters

Constructor example

VulnerabilityProtectionProfile Resource Properties

Inputs

Outputs

Look up Existing VulnerabilityProtectionProfile Resource

Supporting Types

VulnerabilityProtectionProfileRule, VulnerabilityProtectionProfileRuleArgs

VulnerabilityProtectionProfileRuleAction, VulnerabilityProtectionProfileRuleActionArgs

VulnerabilityProtectionProfileRuleActionBlockIp, VulnerabilityProtectionProfileRuleActionBlockIpArgs

VulnerabilityProtectionProfileThreatException, VulnerabilityProtectionProfileThreatExceptionArgs

VulnerabilityProtectionProfileThreatExceptionAction, VulnerabilityProtectionProfileThreatExceptionActionArgs

VulnerabilityProtectionProfileThreatExceptionActionBlockIp, VulnerabilityProtectionProfileThreatExceptionActionBlockIpArgs

VulnerabilityProtectionProfileThreatExceptionExemptIp, VulnerabilityProtectionProfileThreatExceptionExemptIpArgs

VulnerabilityProtectionProfileThreatExceptionTimeAttribute, VulnerabilityProtectionProfileThreatExceptionTimeAttributeArgs

Package Details

On this page

On this page