1. Packages
  2. Cisco Catalyst SD-WAN Provider
  3. API Docs
  4. getDnsSecurityPolicy
Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi

sdwan.getDnsSecurityPolicy

Explore with Pulumi AI

Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi

This data source can read the DNS Security Policy.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as sdwan from "@pulumi/sdwan";

const example = sdwan.getDnsSecurityPolicy({
    id: "f6b2c44c-693c-4763-b010-895aa3d236bd",
    featureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
});
Copy
import pulumi
import pulumi_sdwan as sdwan

example = sdwan.get_dns_security_policy(id="f6b2c44c-693c-4763-b010-895aa3d236bd",
    feature_profile_id="f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac")
Copy
package main

import (
	"github.com/pulumi/pulumi-sdwan/sdk/go/sdwan"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdwan.LookupDnsSecurityPolicy(ctx, &sdwan.LookupDnsSecurityPolicyArgs{
			Id:               "f6b2c44c-693c-4763-b010-895aa3d236bd",
			FeatureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdwan = Pulumi.Sdwan;

return await Deployment.RunAsync(() => 
{
    var example = Sdwan.GetDnsSecurityPolicy.Invoke(new()
    {
        Id = "f6b2c44c-693c-4763-b010-895aa3d236bd",
        FeatureProfileId = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.SdwanFunctions;
import com.pulumi.sdwan.inputs.GetDnsSecurityPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = SdwanFunctions.getDnsSecurityPolicy(GetDnsSecurityPolicyArgs.builder()
            .id("f6b2c44c-693c-4763-b010-895aa3d236bd")
            .featureProfileId("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac")
            .build());

    }
}
Copy
variables:
  example:
    fn::invoke:
      function: sdwan:getDnsSecurityPolicy
      arguments:
        id: f6b2c44c-693c-4763-b010-895aa3d236bd
        featureProfileId: f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac
Copy

Using getDnsSecurityPolicy

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getDnsSecurityPolicy(args: GetDnsSecurityPolicyArgs, opts?: InvokeOptions): Promise<GetDnsSecurityPolicyResult>
function getDnsSecurityPolicyOutput(args: GetDnsSecurityPolicyOutputArgs, opts?: InvokeOptions): Output<GetDnsSecurityPolicyResult>
Copy
def get_dns_security_policy(feature_profile_id: Optional[str] = None,
                            id: Optional[str] = None,
                            opts: Optional[InvokeOptions] = None) -> GetDnsSecurityPolicyResult
def get_dns_security_policy_output(feature_profile_id: Optional[pulumi.Input[str]] = None,
                            id: Optional[pulumi.Input[str]] = None,
                            opts: Optional[InvokeOptions] = None) -> Output[GetDnsSecurityPolicyResult]
Copy
func LookupDnsSecurityPolicy(ctx *Context, args *LookupDnsSecurityPolicyArgs, opts ...InvokeOption) (*LookupDnsSecurityPolicyResult, error)
func LookupDnsSecurityPolicyOutput(ctx *Context, args *LookupDnsSecurityPolicyOutputArgs, opts ...InvokeOption) LookupDnsSecurityPolicyResultOutput
Copy

> Note: This function is named LookupDnsSecurityPolicy in the Go SDK.

public static class GetDnsSecurityPolicy 
{
    public static Task<GetDnsSecurityPolicyResult> InvokeAsync(GetDnsSecurityPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetDnsSecurityPolicyResult> Invoke(GetDnsSecurityPolicyInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetDnsSecurityPolicyResult> getDnsSecurityPolicy(GetDnsSecurityPolicyArgs args, InvokeOptions options)
public static Output<GetDnsSecurityPolicyResult> getDnsSecurityPolicy(GetDnsSecurityPolicyArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: sdwan:index/getDnsSecurityPolicy:getDnsSecurityPolicy
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

FeatureProfileId This property is required. string
Feature Profile ID
Id This property is required. string
The id of the Policy
FeatureProfileId This property is required. string
Feature Profile ID
Id This property is required. string
The id of the Policy
featureProfileId This property is required. String
Feature Profile ID
id This property is required. String
The id of the Policy
featureProfileId This property is required. string
Feature Profile ID
id This property is required. string
The id of the Policy
feature_profile_id This property is required. str
Feature Profile ID
id This property is required. str
The id of the Policy
featureProfileId This property is required. String
Feature Profile ID
id This property is required. String
The id of the Policy

getDnsSecurityPolicy Result

The following output properties are available:

ChildOrgId string
String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
Description string
The description of the Policy
DnsCrypt bool
If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
DnsServerIp string
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
FeatureProfileId string
Feature Profile ID
Id string
The id of the Policy
LocalDomainBypassEnabled bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
LocalDomainBypassListId string
MatchAllVpn bool
If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
Name string
The name of the Policy
TargetVpns List<GetDnsSecurityPolicyTargetVpn>
Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
UmbrellaDefault bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Version int
The version of the Policy
ChildOrgId string
String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
Description string
The description of the Policy
DnsCrypt bool
If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
DnsServerIp string
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
FeatureProfileId string
Feature Profile ID
Id string
The id of the Policy
LocalDomainBypassEnabled bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
LocalDomainBypassListId string
MatchAllVpn bool
If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
Name string
The name of the Policy
TargetVpns []GetDnsSecurityPolicyTargetVpn
Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
UmbrellaDefault bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Version int
The version of the Policy
childOrgId String
String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
description String
The description of the Policy
dnsCrypt Boolean
If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
dnsServerIp String
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
featureProfileId String
Feature Profile ID
id String
The id of the Policy
localDomainBypassEnabled Boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassListId String
matchAllVpn Boolean
If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
name String
The name of the Policy
targetVpns List<GetDnsSecurityPolicyTargetVpn>
Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
umbrellaDefault Boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
version Integer
The version of the Policy
childOrgId string
String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
description string
The description of the Policy
dnsCrypt boolean
If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
dnsServerIp string
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
featureProfileId string
Feature Profile ID
id string
The id of the Policy
localDomainBypassEnabled boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassListId string
matchAllVpn boolean
If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
name string
The name of the Policy
targetVpns GetDnsSecurityPolicyTargetVpn[]
Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
umbrellaDefault boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
version number
The version of the Policy
child_org_id str
String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
description str
The description of the Policy
dns_crypt bool
If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
dns_server_ip str
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
feature_profile_id str
Feature Profile ID
id str
The id of the Policy
local_domain_bypass_enabled bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
local_domain_bypass_list_id str
match_all_vpn bool
If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
name str
The name of the Policy
target_vpns Sequence[GetDnsSecurityPolicyTargetVpn]
Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
umbrella_default bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
version int
The version of the Policy
childOrgId String
String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
description String
The description of the Policy
dnsCrypt Boolean
If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
dnsServerIp String
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
featureProfileId String
Feature Profile ID
id String
The id of the Policy
localDomainBypassEnabled Boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassListId String
matchAllVpn Boolean
If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
name String
The name of the Policy
targetVpns List<Property Map>
Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
umbrellaDefault Boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
version Number
The version of the Policy

Supporting Types

GetDnsSecurityPolicyTargetVpn

DnsServerIp This property is required. string
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
LocalDomainBypassEnabled This property is required. bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Uid This property is required. string
non empty interger string
UmbrellaDefault This property is required. bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Vpns This property is required. List<string>
DnsServerIp This property is required. string
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
LocalDomainBypassEnabled This property is required. bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Uid This property is required. string
non empty interger string
UmbrellaDefault This property is required. bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Vpns This property is required. []string
dnsServerIp This property is required. String
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassEnabled This property is required. Boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
uid This property is required. String
non empty interger string
umbrellaDefault This property is required. Boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
vpns This property is required. List<String>
dnsServerIp This property is required. string
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassEnabled This property is required. boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
uid This property is required. string
non empty interger string
umbrellaDefault This property is required. boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
vpns This property is required. string[]
dns_server_ip This property is required. str
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
local_domain_bypass_enabled This property is required. bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
uid This property is required. str
non empty interger string
umbrella_default This property is required. bool
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
vpns This property is required. Sequence[str]
dnsServerIp This property is required. String
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassEnabled This property is required. Boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
uid This property is required. String
non empty interger string
umbrellaDefault This property is required. Boolean
Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
vpns This property is required. List<String>

Package Details

Repository
sdwan pulumi/pulumi-sdwan
License
Apache-2.0
Notes
This Pulumi package is based on the sdwan Terraform Provider.
Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi