tencentcloud.TeoSecurityPolicyConfig

import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";

const example = new tencentcloud.TeoSecurityPolicyConfig("example", {
    entity: "ZoneDefaultPolicy",
    securityPolicy: {
        customRules: {
            rules: [
                {
                    action: {
                        blockIpActionParameters: {
                            duration: "120s",
                        },
                        name: "BlockIP",
                    },
                    condition: "${http.request.host} contain ['abc']",
                    enabled: "on",
                    name: "rule1",
                    priority: 50,
                    ruleType: "PreciseMatchRule",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    condition: "${http.request.ip} in ['119.28.103.58']",
                    enabled: "off",
                    id: "2182252647",
                    name: "rule2",
                    ruleType: "BasicAccessRule",
                },
            ],
        },
        managedRules: {
            autoUpdate: {
                autoUpdateToLatestVersion: "off",
            },
            detectionOnly: "off",
            enabled: "on",
            managedRuleGroups: [
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-webshell-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-xxe-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-non-compliant-protocol-usages",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-file-upload-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-command-and-code-injections",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-ldap-injections",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-ssrf-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-unauthorized-accesses",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-xss-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-vulnerability-scanners",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-cms-vulnerabilities",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-other-vulnerabilities",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-sql-injections",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-unauthorized-file-accesses",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-oa-vulnerabilities",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-ssti-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-shiro-vulnerabilities",
                    sensitivityLevel: "strict",
                },
            ],
            semanticAnalysis: "off",
        },
    },
    zoneId: "zone-37u62pwxfo8s",
});

import pulumi
import pulumi_tencentcloud as tencentcloud

example = tencentcloud.TeoSecurityPolicyConfig("example",
    entity="ZoneDefaultPolicy",
    security_policy={
        "custom_rules": {
            "rules": [
                {
                    "action": {
                        "block_ip_action_parameters": {
                            "duration": "120s",
                        },
                        "name": "BlockIP",
                    },
                    "condition": "${http.request.host} contain ['abc']",
                    "enabled": "on",
                    "name": "rule1",
                    "priority": 50,
                    "rule_type": "PreciseMatchRule",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "condition": "${http.request.ip} in ['119.28.103.58']",
                    "enabled": "off",
                    "id": "2182252647",
                    "name": "rule2",
                    "rule_type": "BasicAccessRule",
                },
            ],
        },
        "managed_rules": {
            "auto_update": {
                "auto_update_to_latest_version": "off",
            },
            "detection_only": "off",
            "enabled": "on",
            "managed_rule_groups": [
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-webshell-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-xxe-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-non-compliant-protocol-usages",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-file-upload-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-command-and-code-injections",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-ldap-injections",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-ssrf-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-unauthorized-accesses",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-xss-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-vulnerability-scanners",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-cms-vulnerabilities",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-other-vulnerabilities",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-sql-injections",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-unauthorized-file-accesses",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-oa-vulnerabilities",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-ssti-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-shiro-vulnerabilities",
                    "sensitivity_level": "strict",
                },
            ],
            "semantic_analysis": "off",
        },
    },
    zone_id="zone-37u62pwxfo8s")

package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := tencentcloud.NewTeoSecurityPolicyConfig(ctx, "example", &tencentcloud.TeoSecurityPolicyConfigArgs{
			Entity: pulumi.String("ZoneDefaultPolicy"),
			SecurityPolicy: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyArgs{
				CustomRules: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyCustomRulesArgs{
					Rules: tencentcloud.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleArray{
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleActionArgs{
								BlockIpActionParameters: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleActionBlockIpActionParametersArgs{
									Duration: pulumi.String("120s"),
								},
								Name: pulumi.String("BlockIP"),
							},
							Condition: pulumi.String("${http.request.host} contain ['abc']"),
							Enabled:   pulumi.String("on"),
							Name:      pulumi.String("rule1"),
							Priority:  pulumi.Float64(50),
							RuleType:  pulumi.String("PreciseMatchRule"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleActionArgs{
								Name: pulumi.String("Deny"),
							},
							Condition: pulumi.String("${http.request.ip} in ['119.28.103.58']"),
							Enabled:   pulumi.String("off"),
							Id:        pulumi.String("2182252647"),
							Name:      pulumi.String("rule2"),
							RuleType:  pulumi.String("BasicAccessRule"),
						},
					},
				},
				ManagedRules: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesArgs{
					AutoUpdate: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesAutoUpdateArgs{
						AutoUpdateToLatestVersion: pulumi.String("off"),
					},
					DetectionOnly: pulumi.String("off"),
					Enabled:       pulumi.String("on"),
					ManagedRuleGroups: tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArray{
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-webshell-attacks"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-xxe-attacks"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-non-compliant-protocol-usages"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-file-upload-attacks"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-command-and-code-injections"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-ldap-injections"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-ssrf-attacks"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-unauthorized-accesses"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-xss-attacks"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-vulnerability-scanners"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-cms-vulnerabilities"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-other-vulnerabilities"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-sql-injections"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-unauthorized-file-accesses"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-oa-vulnerabilities"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-ssti-attacks"),
							SensitivityLevel: pulumi.String("strict"),
						},
						&tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs{
							Action: &tencentcloud.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs{
								Name: pulumi.String("Deny"),
							},
							GroupId:          pulumi.String("wafgroup-shiro-vulnerabilities"),
							SensitivityLevel: pulumi.String("strict"),
						},
					},
					SemanticAnalysis: pulumi.String("off"),
				},
			},
			ZoneId: pulumi.String("zone-37u62pwxfo8s"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;

return await Deployment.RunAsync(() => 
{
    var example = new Tencentcloud.TeoSecurityPolicyConfig("example", new()
    {
        Entity = "ZoneDefaultPolicy",
        SecurityPolicy = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyArgs
        {
            CustomRules = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyCustomRulesArgs
            {
                Rules = new[]
                {
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleActionArgs
                        {
                            BlockIpActionParameters = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleActionBlockIpActionParametersArgs
                            {
                                Duration = "120s",
                            },
                            Name = "BlockIP",
                        },
                        Condition = "${http.request.host} contain ['abc']",
                        Enabled = "on",
                        Name = "rule1",
                        Priority = 50,
                        RuleType = "PreciseMatchRule",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleActionArgs
                        {
                            Name = "Deny",
                        },
                        Condition = "${http.request.ip} in ['119.28.103.58']",
                        Enabled = "off",
                        Id = "2182252647",
                        Name = "rule2",
                        RuleType = "BasicAccessRule",
                    },
                },
            },
            ManagedRules = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesArgs
            {
                AutoUpdate = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesAutoUpdateArgs
                {
                    AutoUpdateToLatestVersion = "off",
                },
                DetectionOnly = "off",
                Enabled = "on",
                ManagedRuleGroups = new[]
                {
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-webshell-attacks",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-xxe-attacks",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-non-compliant-protocol-usages",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-file-upload-attacks",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-command-and-code-injections",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-ldap-injections",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-ssrf-attacks",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-unauthorized-accesses",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-xss-attacks",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-vulnerability-scanners",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-cms-vulnerabilities",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-other-vulnerabilities",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-sql-injections",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-unauthorized-file-accesses",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-oa-vulnerabilities",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-ssti-attacks",
                        SensitivityLevel = "strict",
                    },
                    new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs
                    {
                        Action = new Tencentcloud.Inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs
                        {
                            Name = "Deny",
                        },
                        GroupId = "wafgroup-shiro-vulnerabilities",
                        SensitivityLevel = "strict",
                    },
                },
                SemanticAnalysis = "off",
            },
        },
        ZoneId = "zone-37u62pwxfo8s",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.TeoSecurityPolicyConfig;
import com.pulumi.tencentcloud.TeoSecurityPolicyConfigArgs;
import com.pulumi.tencentcloud.inputs.TeoSecurityPolicyConfigSecurityPolicyArgs;
import com.pulumi.tencentcloud.inputs.TeoSecurityPolicyConfigSecurityPolicyCustomRulesArgs;
import com.pulumi.tencentcloud.inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesArgs;
import com.pulumi.tencentcloud.inputs.TeoSecurityPolicyConfigSecurityPolicyManagedRulesAutoUpdateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new TeoSecurityPolicyConfig("example", TeoSecurityPolicyConfigArgs.builder()
            .entity("ZoneDefaultPolicy")
            .securityPolicy(TeoSecurityPolicyConfigSecurityPolicyArgs.builder()
                .customRules(TeoSecurityPolicyConfigSecurityPolicyCustomRulesArgs.builder()
                    .rules(                    
                        TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleActionArgs.builder()
                                .blockIpActionParameters(TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleActionBlockIpActionParametersArgs.builder()
                                    .duration("120s")
                                    .build())
                                .name("BlockIP")
                                .build())
                            .condition("${http.request.host} contain ['abc']")
                            .enabled("on")
                            .name("rule1")
                            .priority(50)
                            .ruleType("PreciseMatchRule")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyCustomRulesRuleActionArgs.builder()
                                .name("Deny")
                                .build())
                            .condition("${http.request.ip} in ['119.28.103.58']")
                            .enabled("off")
                            .id("2182252647")
                            .name("rule2")
                            .ruleType("BasicAccessRule")
                            .build())
                    .build())
                .managedRules(TeoSecurityPolicyConfigSecurityPolicyManagedRulesArgs.builder()
                    .autoUpdate(TeoSecurityPolicyConfigSecurityPolicyManagedRulesAutoUpdateArgs.builder()
                        .autoUpdateToLatestVersion("off")
                        .build())
                    .detectionOnly("off")
                    .enabled("on")
                    .managedRuleGroups(                    
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-webshell-attacks")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-xxe-attacks")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-non-compliant-protocol-usages")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-file-upload-attacks")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-command-and-code-injections")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-ldap-injections")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-ssrf-attacks")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-unauthorized-accesses")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-xss-attacks")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-vulnerability-scanners")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-cms-vulnerabilities")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-other-vulnerabilities")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-sql-injections")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-unauthorized-file-accesses")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-oa-vulnerabilities")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-ssti-attacks")
                            .sensitivityLevel("strict")
                            .build(),
                        TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupArgs.builder()
                            .action(TeoSecurityPolicyConfigSecurityPolicyManagedRulesManagedRuleGroupActionArgs.builder()
                                .name("Deny")
                                .build())
                            .groupId("wafgroup-shiro-vulnerabilities")
                            .sensitivityLevel("strict")
                            .build())
                    .semanticAnalysis("off")
                    .build())
                .build())
            .zoneId("zone-37u62pwxfo8s")
            .build());

    }
}

resources:
  example:
    type: tencentcloud:TeoSecurityPolicyConfig
    properties:
      entity: ZoneDefaultPolicy
      securityPolicy:
        customRules:
          rules:
            - action:
                blockIpActionParameters:
                  duration: 120s
                name: BlockIP
              condition: $${http.request.host} contain ['abc']
              enabled: on
              name: rule1
              priority: 50
              ruleType: PreciseMatchRule
            - action:
                name: Deny
              condition: $${http.request.ip} in ['119.28.103.58']
              enabled: off
              id: '2182252647'
              name: rule2
              ruleType: BasicAccessRule
        managedRules:
          autoUpdate:
            autoUpdateToLatestVersion: off
          detectionOnly: off
          enabled: on
          managedRuleGroups:
            - action:
                name: Deny
              groupId: wafgroup-webshell-attacks
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-xxe-attacks
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-non-compliant-protocol-usages
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-file-upload-attacks
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-command-and-code-injections
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-ldap-injections
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-ssrf-attacks
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-unauthorized-accesses
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-xss-attacks
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-vulnerability-scanners
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-cms-vulnerabilities
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-other-vulnerabilities
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-sql-injections
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-unauthorized-file-accesses
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-oa-vulnerabilities
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-ssti-attacks
              sensitivityLevel: strict
            - action:
                name: Deny
              groupId: wafgroup-shiro-vulnerabilities
              sensitivityLevel: strict
          semanticAnalysis: off
      zoneId: zone-37u62pwxfo8s

import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";

const example = new tencentcloud.TeoSecurityPolicyConfig("example", {
    entity: "Host",
    host: "www.example.com",
    securityPolicy: {
        customRules: {
            rules: [
                {
                    action: {
                        blockIpActionParameters: {
                            duration: "120s",
                        },
                        name: "BlockIP",
                    },
                    condition: "${http.request.host} contain ['abc']",
                    enabled: "on",
                    name: "rule1",
                    priority: 50,
                    ruleType: "PreciseMatchRule",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    condition: "${http.request.ip} in ['119.28.103.58']",
                    enabled: "off",
                    id: "2182252647",
                    name: "rule2",
                    ruleType: "BasicAccessRule",
                },
            ],
        },
        managedRules: {
            autoUpdate: {
                autoUpdateToLatestVersion: "off",
            },
            detectionOnly: "off",
            enabled: "on",
            managedRuleGroups: [
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-webshell-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-xxe-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-non-compliant-protocol-usages",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-file-upload-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-command-and-code-injections",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-ldap-injections",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-ssrf-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-unauthorized-accesses",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-xss-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-vulnerability-scanners",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-cms-vulnerabilities",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-other-vulnerabilities",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-sql-injections",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-unauthorized-file-accesses",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-oa-vulnerabilities",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-ssti-attacks",
                    sensitivityLevel: "strict",
                },
                {
                    action: {
                        name: "Deny",
                    },
                    groupId: "wafgroup-shiro-vulnerabilities",
                    sensitivityLevel: "strict",
                },
            ],
            semanticAnalysis: "off",
        },
    },
    zoneId: "zone-37u62pwxfo8s",
});

import pulumi
import pulumi_tencentcloud as tencentcloud

example = tencentcloud.TeoSecurityPolicyConfig("example",
    entity="Host",
    host="www.example.com",
    security_policy={
        "custom_rules": {
            "rules": [
                {
                    "action": {
                        "block_ip_action_parameters": {
                            "duration": "120s",
                        },
                        "name": "BlockIP",
                    },
                    "condition": "${http.request.host} contain ['abc']",
                    "enabled": "on",
                    "name": "rule1",
                    "priority": 50,
                    "rule_type": "PreciseMatchRule",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "condition": "${http.request.ip} in ['119.28.103.58']",
                    "enabled": "off",
                    "id": "2182252647",
                    "name": "rule2",
                    "rule_type": "BasicAccessRule",
                },
            ],
        },
        "managed_rules": {
            "auto_update": {
                "auto_update_to_latest_version": "off",
            },
            "detection_only": "off",
            "enabled": "on",
            "managed_rule_groups": [
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-webshell-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-xxe-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-non-compliant-protocol-usages",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-file-upload-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-command-and-code-injections",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-ldap-injections",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-ssrf-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-unauthorized-accesses",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-xss-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-vulnerability-scanners",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-cms-vulnerabilities",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-other-vulnerabilities",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-sql-injections",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-unauthorized-file-accesses",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-oa-vulnerabilities",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-ssti-attacks",
                    "sensitivity_level": "strict",
                },
                {
                    "action": {
                        "name": "Deny",
                    },
                    "group_id": "wafgroup-shiro-vulnerabilities",
                    "sensitivity_level": "strict",
                },
            ],
            "semantic_analysis": "off",
        },
    },
    zone_id="zone-37u62pwxfo8s")