Cisco Catalyst SD-WAN v0.3.2, Jul 16 25

Cisco Catalyst SD-WAN v0.3.2 published on Wednesday, Jul 16, 2025 by Pulumi

sdwan.getDnsSecurityPolicy

Explore with Pulumi AI

Cisco Catalyst SD-WAN v0.3.2 published on Wednesday, Jul 16, 2025 by Pulumi

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as sdwan from "@pulumi/sdwan";

const example = sdwan.getDnsSecurityPolicy({
    id: "f6b2c44c-693c-4763-b010-895aa3d236bd",
    featureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
});

import pulumi
import pulumi_sdwan as sdwan

example = sdwan.get_dns_security_policy(id="f6b2c44c-693c-4763-b010-895aa3d236bd",
    feature_profile_id="f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac")

package main

import (
	"github.com/pulumi/pulumi-sdwan/sdk/go/sdwan"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdwan.LookupDnsSecurityPolicy(ctx, &sdwan.LookupDnsSecurityPolicyArgs{
			Id:               "f6b2c44c-693c-4763-b010-895aa3d236bd",
			FeatureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdwan = Pulumi.Sdwan;

return await Deployment.RunAsync(() => 
{
    var example = Sdwan.GetDnsSecurityPolicy.Invoke(new()
    {
        Id = "f6b2c44c-693c-4763-b010-895aa3d236bd",
        FeatureProfileId = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.SdwanFunctions;
import com.pulumi.sdwan.inputs.GetDnsSecurityPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = SdwanFunctions.getDnsSecurityPolicy(GetDnsSecurityPolicyArgs.builder()
            .id("f6b2c44c-693c-4763-b010-895aa3d236bd")
            .featureProfileId("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac")
            .build());

    }
}

variables:
  example:
    fn::invoke:
      function: sdwan:getDnsSecurityPolicy
      arguments:
        id: f6b2c44c-693c-4763-b010-895aa3d236bd
        featureProfileId: f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac

Using getDnsSecurityPolicy

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getDnsSecurityPolicy(args: GetDnsSecurityPolicyArgs, opts?: InvokeOptions): Promise<GetDnsSecurityPolicyResult>
function getDnsSecurityPolicyOutput(args: GetDnsSecurityPolicyOutputArgs, opts?: InvokeOptions): Output<GetDnsSecurityPolicyResult>

def get_dns_security_policy(feature_profile_id: Optional[str] = None,
                            id: Optional[str] = None,
                            opts: Optional[InvokeOptions] = None) -> GetDnsSecurityPolicyResult
def get_dns_security_policy_output(feature_profile_id: Optional[pulumi.Input[str]] = None,
                            id: Optional[pulumi.Input[str]] = None,
                            opts: Optional[InvokeOptions] = None) -> Output[GetDnsSecurityPolicyResult]

func LookupDnsSecurityPolicy(ctx *Context, args *LookupDnsSecurityPolicyArgs, opts ...InvokeOption) (*LookupDnsSecurityPolicyResult, error)
func LookupDnsSecurityPolicyOutput(ctx *Context, args *LookupDnsSecurityPolicyOutputArgs, opts ...InvokeOption) LookupDnsSecurityPolicyResultOutput

> Note: This function is named LookupDnsSecurityPolicy in the Go SDK.

public static class GetDnsSecurityPolicy 
{
    public static Task<GetDnsSecurityPolicyResult> InvokeAsync(GetDnsSecurityPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetDnsSecurityPolicyResult> Invoke(GetDnsSecurityPolicyInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetDnsSecurityPolicyResult> getDnsSecurityPolicy(GetDnsSecurityPolicyArgs args, InvokeOptions options)
public static Output<GetDnsSecurityPolicyResult> getDnsSecurityPolicy(GetDnsSecurityPolicyArgs args, InvokeOptions options)

fn::invoke:
  function: sdwan:index/getDnsSecurityPolicy:getDnsSecurityPolicy
  arguments:
    # arguments dictionary

The following arguments are supported:

FeatureProfileId string: Feature Profile ID
Id string: The id of the Policy

FeatureProfileId string: Feature Profile ID
Id string: The id of the Policy

featureProfileId String: Feature Profile ID
id String: The id of the Policy

featureProfileId string: Feature Profile ID
id string: The id of the Policy

feature_profile_id str: Feature Profile ID
id str: The id of the Policy

featureProfileId String: Feature Profile ID
id String: The id of the Policy

getDnsSecurityPolicy Result

The following output properties are available:

ChildOrgId string: String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
Description string: The description of the Policy
DnsCrypt bool: If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
DnsServerIp string: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
FeatureProfileId string: Feature Profile ID
Id string: The id of the Policy
LocalDomainBypassEnabled bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
LocalDomainBypassListId string
MatchAllVpn bool: If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
Name string: The name of the Policy
TargetVpns List<GetDnsSecurityPolicyTargetVpn>: Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
UmbrellaDefault bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Version int: The version of the Policy

ChildOrgId string: String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
Description string: The description of the Policy
DnsCrypt bool: If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
DnsServerIp string: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
FeatureProfileId string: Feature Profile ID
Id string: The id of the Policy
LocalDomainBypassEnabled bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
LocalDomainBypassListId string
MatchAllVpn bool: If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
Name string: The name of the Policy
TargetVpns []GetDnsSecurityPolicyTargetVpn: Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
UmbrellaDefault bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Version int: The version of the Policy

childOrgId String: String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
description String: The description of the Policy
dnsCrypt Boolean: If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
dnsServerIp String: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
featureProfileId String: Feature Profile ID
id String: The id of the Policy
localDomainBypassEnabled Boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassListId String
matchAllVpn Boolean: If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
name String: The name of the Policy
targetVpns List<GetDnsSecurityPolicyTargetVpn>: Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
umbrellaDefault Boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
version Integer: The version of the Policy

childOrgId string: String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
description string: The description of the Policy
dnsCrypt boolean: If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
dnsServerIp string: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
featureProfileId string: Feature Profile ID
id string: The id of the Policy
localDomainBypassEnabled boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassListId string
matchAllVpn boolean: If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
name string: The name of the Policy
targetVpns GetDnsSecurityPolicyTargetVpn[]: Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
umbrellaDefault boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
version number: The version of the Policy

child_org_id str: String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
description str: The description of the Policy
dns_crypt bool: If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
dns_server_ip str: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
feature_profile_id str: Feature Profile ID
id str: The id of the Policy
local_domain_bypass_enabled bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
local_domain_bypass_list_id str
match_all_vpn bool: If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
name str: The name of the Policy
target_vpns Sequence[GetDnsSecurityPolicyTargetVpn]: Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
umbrella_default bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
version int: The version of the Policy

childOrgId String: String that is a number that corresponds to Umbrella Multi Org, can be empty if not using Umbrella Multi Org
description String: The description of the Policy
dnsCrypt Boolean: If matchAllVpn is false, this field is only true if at least one of the targetVpns entires contains an umbrellaDefault true
dnsServerIp String: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
featureProfileId String: Feature Profile ID
id String: The id of the Policy
localDomainBypassEnabled Boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassListId String
matchAllVpn Boolean: If this is true, there shouldn't be a targetVpns field, if false then targetVpns field should be there
name String: The name of the Policy
targetVpns List<Property Map>: Will be under data field only if matchAllVpn is false, if matchAllVpn is true field should not be in payload
umbrellaDefault Boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
version Number: The version of the Policy

Supporting Types

GetDnsSecurityPolicyTargetVpn

DnsServerIp string: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
LocalDomainBypassEnabled bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Uid string: non empty interger string
UmbrellaDefault bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Vpns List<string>

DnsServerIp string: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
LocalDomainBypassEnabled bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Uid string: non empty interger string
UmbrellaDefault bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
Vpns []string

dnsServerIp String: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassEnabled Boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
uid String: non empty interger string
umbrellaDefault Boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
vpns List<String>

dnsServerIp string: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassEnabled boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
uid string: non empty interger string
umbrellaDefault boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
vpns string[]

dns_server_ip str: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
local_domain_bypass_enabled bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
uid str: non empty interger string
umbrella_default bool: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
vpns Sequence[str]

dnsServerIp String: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
localDomainBypassEnabled Boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
uid String: non empty interger string
umbrellaDefault Boolean: Field will only be under data field if matchAllVpn is true, otherwise field will be under targetVpns and set per entry
vpns List<String>

Package Details

Repository: sdwan pulumi/pulumi-sdwan
License: Apache-2.0
Notes: This Pulumi package is based on the sdwan Terraform Provider.

Cisco Catalyst SD-WAN v0.3.2 published on Wednesday, Jul 16, 2025 by Pulumi

pulumi/pulumi-sdwan

sdwan.getDnsSecurityPolicy

On this page

On this page

Example Usage

Using getDnsSecurityPolicy

getDnsSecurityPolicy Result

Supporting Types

GetDnsSecurityPolicyTargetVpn

Package Details

On this page

On this page