import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
/**
 * This resource provides the Network Firewall Policy Decryption Rule resource in Oracle Cloud Infrastructure Network Firewall service.
 * Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/network-firewall/latest/NetworkFirewallPolicyDecryptionRule
 *
 * Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/network_firewall
 *
 * Creates a new Decryption Rule for the Network Firewall Policy.
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as oci from "@pulumi/oci";
 *
 * const testNetworkFirewallPolicyDecryptionRule = new oci.networkfirewall.NetworkFirewallPolicyDecryptionRule("test_network_firewall_policy_decryption_rule", {
 *     lifecycle: {
 *         ignoreChanges: [position],
 *     },
 *     name: networkFirewallPolicyDecryptionRuleName,
 *     action: networkFirewallPolicyDecryptionRuleAction,
 *     condition: {
 *         destinationAddresses: networkFirewallPolicyDecryptionRuleConditionDestinationAddress,
 *         sourceAddresses: networkFirewallPolicyDecryptionRuleConditionSourceAddress,
 *     },
 *     networkFirewallPolicyId: testNetworkFirewallPolicy.id,
 *     description: networkFirewallPolicyDecryptionRuleDescription,
 *     decryptionProfile: networkFirewallPolicyDecryptionRuleDecryptionProfile,
 *     secret: networkFirewallPolicyDecryptionRuleSecret,
 *     position: {
 *         afterRule: networkFirewallPolicyDecryptionRulePositionAfterRule,
 *         beforeRule: networkFirewallPolicyDecryptionRulePositionBeforeRule,
 *     },
 * });
 * ```
 *
 * ## Import
 *
 * NetworkFirewallPolicyDecryptionRules can be imported using the `name`, e.g.
 *
 * ```sh
 * $ pulumi import oci:NetworkFirewall/networkFirewallPolicyDecryptionRule:NetworkFirewallPolicyDecryptionRule test_network_firewall_policy_decryption_rule "networkFirewallPolicies/{networkFirewallPolicyId}/decryptionRules/{decryptionRuleName}"
 * ```
 */
export declare class NetworkFirewallPolicyDecryptionRule extends pulumi.CustomResource {
    /**
     * Get an existing NetworkFirewallPolicyDecryptionRule resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: NetworkFirewallPolicyDecryptionRuleState, opts?: pulumi.CustomResourceOptions): NetworkFirewallPolicyDecryptionRule;
    /**
     * Returns true if the given object is an instance of NetworkFirewallPolicyDecryptionRule.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is NetworkFirewallPolicyDecryptionRule;
    /**
     * (Updatable) Action:
     * * NO_DECRYPT - Matching traffic is not decrypted.
     * * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`.
     */
    readonly action: pulumi.Output<string>;
    /**
     * (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules.
     */
    readonly condition: pulumi.Output<outputs.NetworkFirewall.NetworkFirewallPolicyDecryptionRuleCondition>;
    /**
     * (Updatable) The name of the decryption profile to use.
     */
    readonly decryptionProfile: pulumi.Output<string | undefined>;
    /**
     * (Updatable) The description of the decryption rule. This field can be used to add additional info.
     */
    readonly description: pulumi.Output<string | undefined>;
    /**
     * Name for the decryption rule, must be unique within the policy.
     */
    readonly name: pulumi.Output<string>;
    /**
     * Unique Network Firewall Policy identifier
     */
    readonly networkFirewallPolicyId: pulumi.Output<string>;
    /**
     * OCID of the Network Firewall Policy this decryption rule belongs to.
     */
    readonly parentResourceId: pulumi.Output<string>;
    /**
     * (Updatable) An object which defines the position of the rule. Only one of `afterRule` or `beforeRule` should be provided.
     */
    readonly position: pulumi.Output<outputs.NetworkFirewall.NetworkFirewallPolicyDecryptionRulePosition>;
    readonly priorityOrder: pulumi.Output<string | undefined>;
    /**
     * (Updatable) The name of a mapped secret. Its `type` must match that of the specified decryption profile.
     */
    readonly secret: pulumi.Output<string | undefined>;
    /**
     * Create a NetworkFirewallPolicyDecryptionRule resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: NetworkFirewallPolicyDecryptionRuleArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering NetworkFirewallPolicyDecryptionRule resources.
 */
export interface NetworkFirewallPolicyDecryptionRuleState {
    /**
     * (Updatable) Action:
     * * NO_DECRYPT - Matching traffic is not decrypted.
     * * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`.
     */
    action?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules.
     */
    condition?: pulumi.Input<inputs.NetworkFirewall.NetworkFirewallPolicyDecryptionRuleCondition | undefined>;
    /**
     * (Updatable) The name of the decryption profile to use.
     */
    decryptionProfile?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) The description of the decryption rule. This field can be used to add additional info.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * Name for the decryption rule, must be unique within the policy.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * Unique Network Firewall Policy identifier
     */
    networkFirewallPolicyId?: pulumi.Input<string | undefined>;
    /**
     * OCID of the Network Firewall Policy this decryption rule belongs to.
     */
    parentResourceId?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) An object which defines the position of the rule. Only one of `afterRule` or `beforeRule` should be provided.
     */
    position?: pulumi.Input<inputs.NetworkFirewall.NetworkFirewallPolicyDecryptionRulePosition | undefined>;
    priorityOrder?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) The name of a mapped secret. Its `type` must match that of the specified decryption profile.
     */
    secret?: pulumi.Input<string | undefined>;
}
/**
 * The set of arguments for constructing a NetworkFirewallPolicyDecryptionRule resource.
 */
export interface NetworkFirewallPolicyDecryptionRuleArgs {
    /**
     * (Updatable) Action:
     * * NO_DECRYPT - Matching traffic is not decrypted.
     * * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`.
     */
    action: pulumi.Input<string>;
    /**
     * (Updatable) Match criteria used in Decryption Rule used on the firewall policy rules.
     */
    condition: pulumi.Input<inputs.NetworkFirewall.NetworkFirewallPolicyDecryptionRuleCondition>;
    /**
     * (Updatable) The name of the decryption profile to use.
     */
    decryptionProfile?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) The description of the decryption rule. This field can be used to add additional info.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * Name for the decryption rule, must be unique within the policy.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * Unique Network Firewall Policy identifier
     */
    networkFirewallPolicyId: pulumi.Input<string>;
    /**
     * (Updatable) An object which defines the position of the rule. Only one of `afterRule` or `beforeRule` should be provided.
     */
    position?: pulumi.Input<inputs.NetworkFirewall.NetworkFirewallPolicyDecryptionRulePosition | undefined>;
    priorityOrder?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) The name of a mapped secret. Its `type` must match that of the specified decryption profile.
     */
    secret?: pulumi.Input<string | undefined>;
}
//# sourceMappingURL=networkFirewallPolicyDecryptionRule.d.ts.map