Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Checkpoint Provider
  3. API Docs
  4. ManagementThreatIndicator
checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw
checkpointsw/terraform-provider-checkpoint

checkpoint.ManagementThreatIndicator

Explore with Pulumi AI

checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw
checkpointsw/terraform-provider-checkpoint

This resource allows you to add/update/delete Check Point Threat Indicator.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const example = new checkpoint.ManagementThreatIndicator("example", {
    action: "ask",
    ignoreWarnings: true,
    observables: [{
        confidence: "medium",
        mailTo: "someone@somewhere.com",
        name: "My_Observable",
        product: "AV",
        severity: "low",
    }],
    profileOverrides: [{
        action: "detect",
        profile: "My_Profile",
    }],
});
Copy
import pulumi
import pulumi_checkpoint as checkpoint

example = checkpoint.ManagementThreatIndicator("example",
    action="ask",
    ignore_warnings=True,
    observables=[{
        "confidence": "medium",
        "mail_to": "someone@somewhere.com",
        "name": "My_Observable",
        "product": "AV",
        "severity": "low",
    }],
    profile_overrides=[{
        "action": "detect",
        "profile": "My_Profile",
    }])
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v2/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := checkpoint.NewManagementThreatIndicator(ctx, "example", &checkpoint.ManagementThreatIndicatorArgs{
			Action:         pulumi.String("ask"),
			IgnoreWarnings: pulumi.Bool(true),
			Observables: checkpoint.ManagementThreatIndicatorObservableArray{
				&checkpoint.ManagementThreatIndicatorObservableArgs{
					Confidence: pulumi.String("medium"),
					MailTo:     pulumi.String("someone@somewhere.com"),
					Name:       pulumi.String("My_Observable"),
					Product:    pulumi.String("AV"),
					Severity:   pulumi.String("low"),
				},
			},
			ProfileOverrides: checkpoint.ManagementThreatIndicatorProfileOverrideArray{
				&checkpoint.ManagementThreatIndicatorProfileOverrideArgs{
					Action:  pulumi.String("detect"),
					Profile: pulumi.String("My_Profile"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var example = new Checkpoint.ManagementThreatIndicator("example", new()
    {
        Action = "ask",
        IgnoreWarnings = true,
        Observables = new[]
        {
            new Checkpoint.Inputs.ManagementThreatIndicatorObservableArgs
            {
                Confidence = "medium",
                MailTo = "someone@somewhere.com",
                Name = "My_Observable",
                Product = "AV",
                Severity = "low",
            },
        },
        ProfileOverrides = new[]
        {
            new Checkpoint.Inputs.ManagementThreatIndicatorProfileOverrideArgs
            {
                Action = "detect",
                Profile = "My_Profile",
            },
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.ManagementThreatIndicator;
import com.pulumi.checkpoint.ManagementThreatIndicatorArgs;
import com.pulumi.checkpoint.inputs.ManagementThreatIndicatorObservableArgs;
import com.pulumi.checkpoint.inputs.ManagementThreatIndicatorProfileOverrideArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ManagementThreatIndicator("example", ManagementThreatIndicatorArgs.builder()
            .action("ask")
            .ignoreWarnings(true)
            .observables(ManagementThreatIndicatorObservableArgs.builder()
                .confidence("medium")
                .mailTo("someone@somewhere.com")
                .name("My_Observable")
                .product("AV")
                .severity("low")
                .build())
            .profileOverrides(ManagementThreatIndicatorProfileOverrideArgs.builder()
                .action("detect")
                .profile("My_Profile")
                .build())
            .build());

    }
}
Copy
resources:
  example:
    type: checkpoint:ManagementThreatIndicator
    properties:
      action: ask
      ignoreWarnings: true
      observables:
        - confidence: medium
          mailTo: someone@somewhere.com
          name: My_Observable
          product: AV
          severity: low
      profileOverrides:
        - action: detect
          profile: My_Profile
Copy

Create ManagementThreatIndicator Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ManagementThreatIndicator(name: string, args?: ManagementThreatIndicatorArgs, opts?: CustomResourceOptions);
@overload
def ManagementThreatIndicator(resource_name: str,
                              args: Optional[ManagementThreatIndicatorArgs] = None,
                              opts: Optional[ResourceOptions] = None)

@overload
def ManagementThreatIndicator(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              action: Optional[str] = None,
                              color: Optional[str] = None,
                              comments: Optional[str] = None,
                              ignore_errors: Optional[bool] = None,
                              ignore_warnings: Optional[bool] = None,
                              management_threat_indicator_id: Optional[str] = None,
                              name: Optional[str] = None,
                              observables: Optional[Sequence[ManagementThreatIndicatorObservableArgs]] = None,
                              profile_overrides: Optional[Sequence[ManagementThreatIndicatorProfileOverrideArgs]] = None,
                              tags: Optional[Sequence[str]] = None)
func NewManagementThreatIndicator(ctx *Context, name string, args *ManagementThreatIndicatorArgs, opts ...ResourceOption) (*ManagementThreatIndicator, error)
public ManagementThreatIndicator(string name, ManagementThreatIndicatorArgs? args = null, CustomResourceOptions? opts = null)
public ManagementThreatIndicator(String name, ManagementThreatIndicatorArgs args)
public ManagementThreatIndicator(String name, ManagementThreatIndicatorArgs args, CustomResourceOptions options)

type: checkpoint:ManagementThreatIndicator
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args ManagementThreatIndicatorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args ManagementThreatIndicatorArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args ManagementThreatIndicatorArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args ManagementThreatIndicatorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ManagementThreatIndicatorArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var managementThreatIndicatorResource = new Checkpoint.ManagementThreatIndicator("managementThreatIndicatorResource", new()
{
    Action = "string",
    Color = "string",
    Comments = "string",
    IgnoreErrors = false,
    IgnoreWarnings = false,
    ManagementThreatIndicatorId = "string",
    Name = "string",
    Observables = new[]
    {
        new Checkpoint.Inputs.ManagementThreatIndicatorObservableArgs
        {
            Name = "string",
            MailFrom = "string",
            MailSubject = "string",
            IpAddressFirst = "string",
            IpAddressLast = "string",
            MailCc = "string",
            Confidence = "string",
            MailReplyTo = "string",
            IpAddress = "string",
            MailTo = "string",
            Md5 = "string",
            Domain = "string",
            Product = "string",
            Severity = "string",
            Url = "string",
        },
    },
    ProfileOverrides = new[]
    {
        new Checkpoint.Inputs.ManagementThreatIndicatorProfileOverrideArgs
        {
            Action = "string",
            Profile = "string",
        },
    },
    Tags = new[]
    {
        "string",
    },
});
Copy
example, err := checkpoint.NewManagementThreatIndicator(ctx, "managementThreatIndicatorResource", &checkpoint.ManagementThreatIndicatorArgs{
Action: pulumi.String("string"),
Color: pulumi.String("string"),
Comments: pulumi.String("string"),
IgnoreErrors: pulumi.Bool(false),
IgnoreWarnings: pulumi.Bool(false),
ManagementThreatIndicatorId: pulumi.String("string"),
Name: pulumi.String("string"),
Observables: .ManagementThreatIndicatorObservableArray{
&.ManagementThreatIndicatorObservableArgs{
Name: pulumi.String("string"),
MailFrom: pulumi.String("string"),
MailSubject: pulumi.String("string"),
IpAddressFirst: pulumi.String("string"),
IpAddressLast: pulumi.String("string"),
MailCc: pulumi.String("string"),
Confidence: pulumi.String("string"),
MailReplyTo: pulumi.String("string"),
IpAddress: pulumi.String("string"),
MailTo: pulumi.String("string"),
Md5: pulumi.String("string"),
Domain: pulumi.String("string"),
Product: pulumi.String("string"),
Severity: pulumi.String("string"),
Url: pulumi.String("string"),
},
},
ProfileOverrides: .ManagementThreatIndicatorProfileOverrideArray{
&.ManagementThreatIndicatorProfileOverrideArgs{
Action: pulumi.String("string"),
Profile: pulumi.String("string"),
},
},
Tags: pulumi.StringArray{
pulumi.String("string"),
},
})
Copy
var managementThreatIndicatorResource = new ManagementThreatIndicator("managementThreatIndicatorResource", ManagementThreatIndicatorArgs.builder()
    .action("string")
    .color("string")
    .comments("string")
    .ignoreErrors(false)
    .ignoreWarnings(false)
    .managementThreatIndicatorId("string")
    .name("string")
    .observables(ManagementThreatIndicatorObservableArgs.builder()
        .name("string")
        .mailFrom("string")
        .mailSubject("string")
        .ipAddressFirst("string")
        .ipAddressLast("string")
        .mailCc("string")
        .confidence("string")
        .mailReplyTo("string")
        .ipAddress("string")
        .mailTo("string")
        .md5("string")
        .domain("string")
        .product("string")
        .severity("string")
        .url("string")
        .build())
    .profileOverrides(ManagementThreatIndicatorProfileOverrideArgs.builder()
        .action("string")
        .profile("string")
        .build())
    .tags("string")
    .build());
Copy
management_threat_indicator_resource = checkpoint.ManagementThreatIndicator("managementThreatIndicatorResource",
    action="string",
    color="string",
    comments="string",
    ignore_errors=False,
    ignore_warnings=False,
    management_threat_indicator_id="string",
    name="string",
    observables=[{
        "name": "string",
        "mail_from": "string",
        "mail_subject": "string",
        "ip_address_first": "string",
        "ip_address_last": "string",
        "mail_cc": "string",
        "confidence": "string",
        "mail_reply_to": "string",
        "ip_address": "string",
        "mail_to": "string",
        "md5": "string",
        "domain": "string",
        "product": "string",
        "severity": "string",
        "url": "string",
    }],
    profile_overrides=[{
        "action": "string",
        "profile": "string",
    }],
    tags=["string"])
Copy
const managementThreatIndicatorResource = new checkpoint.ManagementThreatIndicator("managementThreatIndicatorResource", {
    action: "string",
    color: "string",
    comments: "string",
    ignoreErrors: false,
    ignoreWarnings: false,
    managementThreatIndicatorId: "string",
    name: "string",
    observables: [{
        name: "string",
        mailFrom: "string",
        mailSubject: "string",
        ipAddressFirst: "string",
        ipAddressLast: "string",
        mailCc: "string",
        confidence: "string",
        mailReplyTo: "string",
        ipAddress: "string",
        mailTo: "string",
        md5: "string",
        domain: "string",
        product: "string",
        severity: "string",
        url: "string",
    }],
    profileOverrides: [{
        action: "string",
        profile: "string",
    }],
    tags: ["string"],
});
Copy
type: checkpoint:ManagementThreatIndicator
properties:
    action: string
    color: string
    comments: string
    ignoreErrors: false
    ignoreWarnings: false
    managementThreatIndicatorId: string
    name: string
    observables:
        - confidence: string
          domain: string
          ipAddress: string
          ipAddressFirst: string
          ipAddressLast: string
          mailCc: string
          mailFrom: string
          mailReplyTo: string
          mailSubject: string
          mailTo: string
          md5: string
          name: string
          product: string
          severity: string
          url: string
    profileOverrides:
        - action: string
          profile: string
    tags:
        - string
Copy

ManagementThreatIndicator Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ManagementThreatIndicator resource accepts the following input properties:

Action string
The indicator's action.
Color string
Color of the object. Should be one of existing colors.
Comments string
Comments string.
IgnoreErrors bool
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
IgnoreWarnings bool
Apply changes ignoring warnings.
ManagementThreatIndicatorId string
Name string
Object name. Should be unique in the domain.
Observables List<ManagementThreatIndicatorObservable>
The indicator's observables. Indicator's observables blocks are documented below.
ProfileOverrides List<ManagementThreatIndicatorProfileOverride>
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
Tags List<string>
Collection of tag identifiers.
Action string
The indicator's action.
Color string
Color of the object. Should be one of existing colors.
Comments string
Comments string.
IgnoreErrors bool
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
IgnoreWarnings bool
Apply changes ignoring warnings.
ManagementThreatIndicatorId string
Name string
Object name. Should be unique in the domain.
Observables []ManagementThreatIndicatorObservableArgs
The indicator's observables. Indicator's observables blocks are documented below.
ProfileOverrides []ManagementThreatIndicatorProfileOverrideArgs
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
Tags []string
Collection of tag identifiers.
action String
The indicator's action.
color String
Color of the object. Should be one of existing colors.
comments String
Comments string.
ignoreErrors Boolean
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
ignoreWarnings Boolean
Apply changes ignoring warnings.
managementThreatIndicatorId String
name String
Object name. Should be unique in the domain.
observables List<ManagementThreatIndicatorObservable>
The indicator's observables. Indicator's observables blocks are documented below.
profileOverrides List<ManagementThreatIndicatorProfileOverride>
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
tags List<String>
Collection of tag identifiers.
action string
The indicator's action.
color string
Color of the object. Should be one of existing colors.
comments string
Comments string.
ignoreErrors boolean
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
ignoreWarnings boolean
Apply changes ignoring warnings.
managementThreatIndicatorId string
name string
Object name. Should be unique in the domain.
observables ManagementThreatIndicatorObservable[]
The indicator's observables. Indicator's observables blocks are documented below.
profileOverrides ManagementThreatIndicatorProfileOverride[]
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
tags string[]
Collection of tag identifiers.
action str
The indicator's action.
color str
Color of the object. Should be one of existing colors.
comments str
Comments string.
ignore_errors bool
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
ignore_warnings bool
Apply changes ignoring warnings.
management_threat_indicator_id str
name str
Object name. Should be unique in the domain.
observables Sequence[ManagementThreatIndicatorObservableArgs]
The indicator's observables. Indicator's observables blocks are documented below.
profile_overrides Sequence[ManagementThreatIndicatorProfileOverrideArgs]
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
tags Sequence[str]
Collection of tag identifiers.
action String
The indicator's action.
color String
Color of the object. Should be one of existing colors.
comments String
Comments string.
ignoreErrors Boolean
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
ignoreWarnings Boolean
Apply changes ignoring warnings.
managementThreatIndicatorId String
name String
Object name. Should be unique in the domain.
observables List<Property Map>
The indicator's observables. Indicator's observables blocks are documented below.
profileOverrides List<Property Map>
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
tags List<String>
Collection of tag identifiers.

Outputs

All input properties are implicitly available as output properties. Additionally, the ManagementThreatIndicator resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing ManagementThreatIndicator Resource

Get an existing ManagementThreatIndicator resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ManagementThreatIndicatorState, opts?: CustomResourceOptions): ManagementThreatIndicator
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        color: Optional[str] = None,
        comments: Optional[str] = None,
        ignore_errors: Optional[bool] = None,
        ignore_warnings: Optional[bool] = None,
        management_threat_indicator_id: Optional[str] = None,
        name: Optional[str] = None,
        observables: Optional[Sequence[ManagementThreatIndicatorObservableArgs]] = None,
        profile_overrides: Optional[Sequence[ManagementThreatIndicatorProfileOverrideArgs]] = None,
        tags: Optional[Sequence[str]] = None) -> ManagementThreatIndicator
func GetManagementThreatIndicator(ctx *Context, name string, id IDInput, state *ManagementThreatIndicatorState, opts ...ResourceOption) (*ManagementThreatIndicator, error)
public static ManagementThreatIndicator Get(string name, Input<string> id, ManagementThreatIndicatorState? state, CustomResourceOptions? opts = null)
public static ManagementThreatIndicator get(String name, Output<String> id, ManagementThreatIndicatorState state, CustomResourceOptions options)
resources:  _:    type: checkpoint:ManagementThreatIndicator    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Action string
The indicator's action.
Color string
Color of the object. Should be one of existing colors.
Comments string
Comments string.
IgnoreErrors bool
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
IgnoreWarnings bool
Apply changes ignoring warnings.
ManagementThreatIndicatorId string
Name string
Object name. Should be unique in the domain.
Observables List<ManagementThreatIndicatorObservable>
The indicator's observables. Indicator's observables blocks are documented below.
ProfileOverrides List<ManagementThreatIndicatorProfileOverride>
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
Tags List<string>
Collection of tag identifiers.
Action string
The indicator's action.
Color string
Color of the object. Should be one of existing colors.
Comments string
Comments string.
IgnoreErrors bool
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
IgnoreWarnings bool
Apply changes ignoring warnings.
ManagementThreatIndicatorId string
Name string
Object name. Should be unique in the domain.
Observables []ManagementThreatIndicatorObservableArgs
The indicator's observables. Indicator's observables blocks are documented below.
ProfileOverrides []ManagementThreatIndicatorProfileOverrideArgs
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
Tags []string
Collection of tag identifiers.
action String
The indicator's action.
color String
Color of the object. Should be one of existing colors.
comments String
Comments string.
ignoreErrors Boolean
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
ignoreWarnings Boolean
Apply changes ignoring warnings.
managementThreatIndicatorId String
name String
Object name. Should be unique in the domain.
observables List<ManagementThreatIndicatorObservable>
The indicator's observables. Indicator's observables blocks are documented below.
profileOverrides List<ManagementThreatIndicatorProfileOverride>
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
tags List<String>
Collection of tag identifiers.
action string
The indicator's action.
color string
Color of the object. Should be one of existing colors.
comments string
Comments string.
ignoreErrors boolean
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
ignoreWarnings boolean
Apply changes ignoring warnings.
managementThreatIndicatorId string
name string
Object name. Should be unique in the domain.
observables ManagementThreatIndicatorObservable[]
The indicator's observables. Indicator's observables blocks are documented below.
profileOverrides ManagementThreatIndicatorProfileOverride[]
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
tags string[]
Collection of tag identifiers.
action str
The indicator's action.
color str
Color of the object. Should be one of existing colors.
comments str
Comments string.
ignore_errors bool
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
ignore_warnings bool
Apply changes ignoring warnings.
management_threat_indicator_id str
name str
Object name. Should be unique in the domain.
observables Sequence[ManagementThreatIndicatorObservableArgs]
The indicator's observables. Indicator's observables blocks are documented below.
profile_overrides Sequence[ManagementThreatIndicatorProfileOverrideArgs]
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
tags Sequence[str]
Collection of tag identifiers.
action String
The indicator's action.
color String
Color of the object. Should be one of existing colors.
comments String
Comments string.
ignoreErrors Boolean
Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
ignoreWarnings Boolean
Apply changes ignoring warnings.
managementThreatIndicatorId String
name String
Object name. Should be unique in the domain.
observables List<Property Map>
The indicator's observables. Indicator's observables blocks are documented below.
profileOverrides List<Property Map>
Profiles in which to override the indicator's default action. Profile Overrides blocks are documented below.
tags List<String>
Collection of tag identifiers.

Supporting Types

ManagementThreatIndicatorObservable
, ManagementThreatIndicatorObservableArgs

Name This property is required. string
Object name. Should be unique in the domain.
Confidence string
The confidence level the indicator has that a real threat has been uncovered.
Domain string
The name of a domain.
IpAddress string
A valid IP-Address.
IpAddressFirst string
A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
IpAddressLast string
A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
MailCc string
A valid E-Mail address, cc field.
MailFrom string
A valid E-Mail address, sender field.
MailReplyTo string
A valid E-Mail address, reply-to field.
MailSubject string
Subject of E-Mail.
MailTo string
A valid E-Mail address, recipient filed.
Md5 string
A valid MD5 sequence.
Product string
The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
Severity string
The severity level of the threat.
Url string
A valid URL.
Name This property is required. string
Object name. Should be unique in the domain.
Confidence string
The confidence level the indicator has that a real threat has been uncovered.
Domain string
The name of a domain.
IpAddress string
A valid IP-Address.
IpAddressFirst string
A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
IpAddressLast string
A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
MailCc string
A valid E-Mail address, cc field.
MailFrom string
A valid E-Mail address, sender field.
MailReplyTo string
A valid E-Mail address, reply-to field.
MailSubject string
Subject of E-Mail.
MailTo string
A valid E-Mail address, recipient filed.
Md5 string
A valid MD5 sequence.
Product string
The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
Severity string
The severity level of the threat.
Url string
A valid URL.
name This property is required. String
Object name. Should be unique in the domain.
confidence String
The confidence level the indicator has that a real threat has been uncovered.
domain String
The name of a domain.
ipAddress String
A valid IP-Address.
ipAddressFirst String
A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
ipAddressLast String
A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
mailCc String
A valid E-Mail address, cc field.
mailFrom String
A valid E-Mail address, sender field.
mailReplyTo String
A valid E-Mail address, reply-to field.
mailSubject String
Subject of E-Mail.
mailTo String
A valid E-Mail address, recipient filed.
md5 String
A valid MD5 sequence.
product String
The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
severity String
The severity level of the threat.
url String
A valid URL.
name This property is required. string
Object name. Should be unique in the domain.
confidence string
The confidence level the indicator has that a real threat has been uncovered.
domain string
The name of a domain.
ipAddress string
A valid IP-Address.
ipAddressFirst string
A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
ipAddressLast string
A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
mailCc string
A valid E-Mail address, cc field.
mailFrom string
A valid E-Mail address, sender field.
mailReplyTo string
A valid E-Mail address, reply-to field.
mailSubject string
Subject of E-Mail.
mailTo string
A valid E-Mail address, recipient filed.
md5 string
A valid MD5 sequence.
product string
The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
severity string
The severity level of the threat.
url string
A valid URL.
name This property is required. str
Object name. Should be unique in the domain.
confidence str
The confidence level the indicator has that a real threat has been uncovered.
domain str
The name of a domain.
ip_address str
A valid IP-Address.
ip_address_first str
A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
ip_address_last str
A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
mail_cc str
A valid E-Mail address, cc field.
mail_from str
A valid E-Mail address, sender field.
mail_reply_to str
A valid E-Mail address, reply-to field.
mail_subject str
Subject of E-Mail.
mail_to str
A valid E-Mail address, recipient filed.
md5 str
A valid MD5 sequence.
product str
The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
severity str
The severity level of the threat.
url str
A valid URL.
name This property is required. String
Object name. Should be unique in the domain.
confidence String
The confidence level the indicator has that a real threat has been uncovered.
domain String
The name of a domain.
ipAddress String
A valid IP-Address.
ipAddressFirst String
A valid IP-Address, the beginning of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-last' parameter.
ipAddressLast String
A valid IP-Address, the end of the range. If you configure this parameter with a value, you must also configure the value of the 'ip-address-first' parameter.
mailCc String
A valid E-Mail address, cc field.
mailFrom String
A valid E-Mail address, sender field.
mailReplyTo String
A valid E-Mail address, reply-to field.
mailSubject String
Subject of E-Mail.
mailTo String
A valid E-Mail address, recipient filed.
md5 String
A valid MD5 sequence.
product String
The software blade that processes the observable: AV - AntiVirus, AB - AntiBot.
severity String
The severity level of the threat.
url String
A valid URL.

ManagementThreatIndicatorProfileOverride
, ManagementThreatIndicatorProfileOverrideArgs

Action string
The indicator's action in this profile.
Profile string
The profile in which to override the indicator's action.
Action string
The indicator's action in this profile.
Profile string
The profile in which to override the indicator's action.
action String
The indicator's action in this profile.
profile String
The profile in which to override the indicator's action.
action string
The indicator's action in this profile.
profile string
The profile in which to override the indicator's action.
action str
The indicator's action in this profile.
profile str
The profile in which to override the indicator's action.
action String
The indicator's action in this profile.
profile String
The profile in which to override the indicator's action.

Package Details

Repository
checkpoint checkpointsw/terraform-provider-checkpoint
License
Notes
This Pulumi package is based on the checkpoint Terraform Provider.
checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw
checkpointsw/terraform-provider-checkpoint