LoadBalancerPolicy

Provides a load balancer policy, which can be attached to an ELB listener or backend server.

Example Usage

using System.IO;
using Pulumi;
using Aws = Pulumi.Aws;

class MyStack : Stack
{
    public MyStack()
    {
        var wu_tang = new Aws.Elb.LoadBalancer("wu-tang", new Aws.Elb.LoadBalancerArgs
        {
            AvailabilityZones = 
            {
                "us-east-1a",
            },
            Listeners = 
            {
                new Aws.Elb.Inputs.LoadBalancerListenerArgs
                {
                    InstancePort = 443,
                    InstanceProtocol = "http",
                    LbPort = 443,
                    LbProtocol = "https",
                    SslCertificateId = "arn:aws:iam::000000000000:server-certificate/wu-tang.net",
                },
            },
            Tags = 
            {
                { "Name", "wu-tang" },
            },
        });
        var wu_tang_ca_pubkey_policy = new Aws.Elb.LoadBalancerPolicy("wu-tang-ca-pubkey-policy", new Aws.Elb.LoadBalancerPolicyArgs
        {
            LoadBalancerName = wu_tang.Name,
            PolicyAttributes = 
            {
                new Aws.Elb.Inputs.LoadBalancerPolicyPolicyAttributeArgs
                {
                    Name = "PublicKey",
                    Value = File.ReadAllText("wu-tang-pubkey"),
                },
            },
            PolicyName = "wu-tang-ca-pubkey-policy",
            PolicyTypeName = "PublicKeyPolicyType",
        });
        var wu_tang_root_ca_backend_auth_policy = new Aws.Elb.LoadBalancerPolicy("wu-tang-root-ca-backend-auth-policy", new Aws.Elb.LoadBalancerPolicyArgs
        {
            LoadBalancerName = wu_tang.Name,
            PolicyAttributes = 
            {
                new Aws.Elb.Inputs.LoadBalancerPolicyPolicyAttributeArgs
                {
                    Name = "PublicKeyPolicyName",
                    Value = aws_load_balancer_policy.Wu_tang_root_ca_pubkey_policy.Policy_name,
                },
            },
            PolicyName = "wu-tang-root-ca-backend-auth-policy",
            PolicyTypeName = "BackendServerAuthenticationPolicyType",
        });
        var wu_tang_ssl = new Aws.Elb.LoadBalancerPolicy("wu-tang-ssl", new Aws.Elb.LoadBalancerPolicyArgs
        {
            LoadBalancerName = wu_tang.Name,
            PolicyAttributes = 
            {
                new Aws.Elb.Inputs.LoadBalancerPolicyPolicyAttributeArgs
                {
                    Name = "ECDHE-ECDSA-AES128-GCM-SHA256",
                    Value = "true",
                },
                new Aws.Elb.Inputs.LoadBalancerPolicyPolicyAttributeArgs
                {
                    Name = "Protocol-TLSv1.2",
                    Value = "true",
                },
            },
            PolicyName = "wu-tang-ssl",
            PolicyTypeName = "SSLNegotiationPolicyType",
        });
        var wu_tang_ssl_tls_1_1 = new Aws.Elb.LoadBalancerPolicy("wu-tang-ssl-tls-1-1", new Aws.Elb.LoadBalancerPolicyArgs
        {
            LoadBalancerName = wu_tang.Name,
            PolicyAttributes = 
            {
                new Aws.Elb.Inputs.LoadBalancerPolicyPolicyAttributeArgs
                {
                    Name = "Reference-Security-Policy",
                    Value = "ELBSecurityPolicy-TLS-1-1-2017-01",
                },
            },
            PolicyName = "wu-tang-ssl",
            PolicyTypeName = "SSLNegotiationPolicyType",
        });
        var wu_tang_backend_auth_policies_443 = new Aws.Elb.LoadBalancerBackendServerPolicy("wu-tang-backend-auth-policies-443", new Aws.Elb.LoadBalancerBackendServerPolicyArgs
        {
            InstancePort = 443,
            LoadBalancerName = wu_tang.Name,
            PolicyNames = 
            {
                wu_tang_root_ca_backend_auth_policy.PolicyName,
            },
        });
        var wu_tang_listener_policies_443 = new Aws.Elb.ListenerPolicy("wu-tang-listener-policies-443", new Aws.Elb.ListenerPolicyArgs
        {
            LoadBalancerName = wu_tang.Name,
            LoadBalancerPort = 443,
            PolicyNames = 
            {
                wu_tang_ssl.PolicyName,
            },
        });
    }

}

package main

import (
    "github.com/pulumi/pulumi/sdk/v2/go/pulumi"
)

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        return nil
    })
}

import pulumi
import pulumi_aws as aws

wu_tang = aws.elb.LoadBalancer("wu-tang",
    availability_zones=["us-east-1a"],
    listeners=[{
        "instance_port": 443,
        "instanceProtocol": "http",
        "lb_port": 443,
        "lbProtocol": "https",
        "sslCertificateId": "arn:aws:iam::000000000000:server-certificate/wu-tang.net",
    }],
    tags={
        "Name": "wu-tang",
    })
wu_tang_ca_pubkey_policy = aws.elb.LoadBalancerPolicy("wu-tang-ca-pubkey-policy",
    load_balancer_name=wu_tang.name,
    policy_attributes=[{
        "name": "PublicKey",
        "value": (lambda path: open(path).read())("wu-tang-pubkey"),
    }],
    policy_name="wu-tang-ca-pubkey-policy",
    policy_type_name="PublicKeyPolicyType")
wu_tang_root_ca_backend_auth_policy = aws.elb.LoadBalancerPolicy("wu-tang-root-ca-backend-auth-policy",
    load_balancer_name=wu_tang.name,
    policy_attributes=[{
        "name": "PublicKeyPolicyName",
        "value": aws_load_balancer_policy["wu-tang-root-ca-pubkey-policy"]["policy_name"],
    }],
    policy_name="wu-tang-root-ca-backend-auth-policy",
    policy_type_name="BackendServerAuthenticationPolicyType")
wu_tang_ssl = aws.elb.LoadBalancerPolicy("wu-tang-ssl",
    load_balancer_name=wu_tang.name,
    policy_attributes=[
        {
            "name": "ECDHE-ECDSA-AES128-GCM-SHA256",
            "value": "true",
        },
        {
            "name": "Protocol-TLSv1.2",
            "value": "true",
        },
    ],
    policy_name="wu-tang-ssl",
    policy_type_name="SSLNegotiationPolicyType")
wu_tang_ssl_tls_1_1 = aws.elb.LoadBalancerPolicy("wu-tang-ssl-tls-1-1",
    load_balancer_name=wu_tang.name,
    policy_attributes=[{
        "name": "Reference-Security-Policy",
        "value": "ELBSecurityPolicy-TLS-1-1-2017-01",
    }],
    policy_name="wu-tang-ssl",
    policy_type_name="SSLNegotiationPolicyType")
wu_tang_backend_auth_policies_443 = aws.elb.LoadBalancerBackendServerPolicy("wu-tang-backend-auth-policies-443",
    instance_port=443,
    load_balancer_name=wu_tang.name,
    policy_names=[wu_tang_root_ca_backend_auth_policy.policy_name])
wu_tang_listener_policies_443 = aws.elb.ListenerPolicy("wu-tang-listener-policies-443",
    load_balancer_name=wu_tang.name,
    load_balancer_port=443,
    policy_names=[wu_tang_ssl.policy_name])

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
import * as fs from "fs";

const wu_tang = new aws.elb.LoadBalancer("wu-tang", {
    availabilityZones: ["us-east-1a"],
    listeners: [{
        instancePort: 443,
        instanceProtocol: "http",
        lbPort: 443,
        lbProtocol: "https",
        sslCertificateId: "arn:aws:iam::000000000000:server-certificate/wu-tang.net",
    }],
    tags: {
        Name: "wu-tang",
    },
});
const wu_tang_ca_pubkey_policy = new aws.elb.LoadBalancerPolicy("wu-tang-ca-pubkey-policy", {
    loadBalancerName: wu_tang.name,
    policyAttributes: [{
        name: "PublicKey",
        value: fs.readFileSync("wu-tang-pubkey", "utf-8"),
    }],
    policyName: "wu-tang-ca-pubkey-policy",
    policyTypeName: "PublicKeyPolicyType",
});
const wu_tang_root_ca_backend_auth_policy = new aws.elb.LoadBalancerPolicy("wu-tang-root-ca-backend-auth-policy", {
    loadBalancerName: wu_tang.name,
    policyAttributes: [{
        name: "PublicKeyPolicyName",
        value: aws_load_balancer_policy_wu_tang_root_ca_pubkey_policy.policyName,
    }],
    policyName: "wu-tang-root-ca-backend-auth-policy",
    policyTypeName: "BackendServerAuthenticationPolicyType",
});
const wu_tang_ssl = new aws.elb.LoadBalancerPolicy("wu-tang-ssl", {
    loadBalancerName: wu_tang.name,
    policyAttributes: [
        {
            name: "ECDHE-ECDSA-AES128-GCM-SHA256",
            value: "true",
        },
        {
            name: "Protocol-TLSv1.2",
            value: "true",
        },
    ],
    policyName: "wu-tang-ssl",
    policyTypeName: "SSLNegotiationPolicyType",
});
const wu_tang_ssl_tls_1_1 = new aws.elb.LoadBalancerPolicy("wu-tang-ssl-tls-1-1", {
    loadBalancerName: wu_tang.name,
    policyAttributes: [{
        name: "Reference-Security-Policy",
        value: "ELBSecurityPolicy-TLS-1-1-2017-01",
    }],
    policyName: "wu-tang-ssl",
    policyTypeName: "SSLNegotiationPolicyType",
});
const wu_tang_backend_auth_policies_443 = new aws.elb.LoadBalancerBackendServerPolicy("wu-tang-backend-auth-policies-443", {
    instancePort: 443,
    loadBalancerName: wu_tang.name,
    policyNames: [wu_tang_root_ca_backend_auth_policy.policyName],
});
const wu_tang_listener_policies_443 = new aws.elb.ListenerPolicy("wu-tang-listener-policies-443", {
    loadBalancerName: wu_tang.name,
    loadBalancerPort: 443,
    policyNames: [wu_tang_ssl.policyName],
});

Deprecated: aws.elasticloadbalancing.LoadBalancerPolicy has been deprecated in favor of aws.elb.LoadBalancerPolicy

Create a LoadBalancerPolicy Resource

new LoadBalancerPolicy(name: string, args: LoadBalancerPolicyArgs, opts?: CustomResourceOptions);

def LoadBalancerPolicy(resource_name, opts=None, load_balancer_name=None, policy_attributes=None, policy_name=None, policy_type_name=None, __props__=None);

func NewLoadBalancerPolicy(ctx *Context, name string, args LoadBalancerPolicyArgs, opts ...ResourceOption) (*LoadBalancerPolicy, error)

public LoadBalancerPolicy(string name, LoadBalancerPolicyArgs args, CustomResourceOptions? opts = null)

name string: The unique name of the resource.
args LoadBalancerPolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
opts ResourceOptions: A bag of options that control this resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args LoadBalancerPolicyArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args LoadBalancerPolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

LoadBalancerPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Programming Model docs.

Inputs

The LoadBalancerPolicy resource accepts the following input properties:

LoadBalancerName string: The load balancer on which the policy is defined.
PolicyName string: The name of the load balancer policy.
PolicyTypeName string: The policy type.
PolicyAttributes List<LoadBalancerPolicyPolicyAttributeArgs>: Policy attribute to apply to the policy.

LoadBalancerName string: The load balancer on which the policy is defined.
PolicyName string: The name of the load balancer policy.
PolicyTypeName string: The policy type.
PolicyAttributes []LoadBalancerPolicyPolicyAttribute: Policy attribute to apply to the policy.

loadBalancerName string: The load balancer on which the policy is defined.
policyName string: The name of the load balancer policy.
policyTypeName string: The policy type.
policyAttributes LoadBalancerPolicyPolicyAttribute[]: Policy attribute to apply to the policy.

load_balancer_name str: The load balancer on which the policy is defined.
policy_name str: The name of the load balancer policy.
policy_type_name str: The policy type.
policy_attributes List[LoadBalancerPolicyPolicyAttribute]: Policy attribute to apply to the policy.

Outputs

All input properties are implicitly available as output properties. Additionally, the LoadBalancerPolicy resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

Look up an Existing LoadBalancerPolicy Resource

Get an existing LoadBalancerPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: LoadBalancerPolicyState, opts?: CustomResourceOptions): LoadBalancerPolicy

static get(resource_name, id, opts=None, load_balancer_name=None, policy_attributes=None, policy_name=None, policy_type_name=None, __props__=None);

func GetLoadBalancerPolicy(ctx *Context, name string, id IDInput, state *LoadBalancerPolicyState, opts ...ResourceOption) (*LoadBalancerPolicy, error)

public static LoadBalancerPolicy Get(string name, Input<string> id, LoadBalancerPolicyState? state, CustomResourceOptions? opts = null)

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

LoadBalancerName string: The load balancer on which the policy is defined.
PolicyAttributes List<LoadBalancerPolicyPolicyAttributeArgs>: Policy attribute to apply to the policy.
PolicyName string: The name of the load balancer policy.
PolicyTypeName string: The policy type.

LoadBalancerName string: The load balancer on which the policy is defined.
PolicyAttributes []LoadBalancerPolicyPolicyAttribute: Policy attribute to apply to the policy.
PolicyName string: The name of the load balancer policy.
PolicyTypeName string: The policy type.

loadBalancerName string: The load balancer on which the policy is defined.
policyAttributes LoadBalancerPolicyPolicyAttribute[]: Policy attribute to apply to the policy.
policyName string: The name of the load balancer policy.
policyTypeName string: The policy type.

load_balancer_name str: The load balancer on which the policy is defined.
policy_attributes List[LoadBalancerPolicyPolicyAttribute]: Policy attribute to apply to the policy.
policy_name str: The name of the load balancer policy.
policy_type_name str: The policy type.

Supporting Types

LoadBalancerPolicyPolicyAttribute

See the input and output API doc for this type.

Name string
Value string

Name string
Value string

name string
value string

name str
value str

Package Details

Repository: https://github.com/pulumi/pulumi-aws
License: Apache-2.0
Notes: This Pulumi package is based on the aws Terraform Provider.

The Pulumi Platform

Get Started

Migrate to Pulumi

Solutions for All Teams and Engineers

Any Code

Any Cloud