10000 fix(teo): [124574429] `tencentcloud_teo_security_policy_config` add new item for `security_policy` by SevenEarth · Pull Request #3413 · tencentcloudstack/terraform-provider-tencentcloud · GitHub
[go: up one dir, main page]
Skip to content

fix(teo): [124574429] tencentcloud_teo_security_policy_config add new item for security_policy #3413

New issue

Have a question about t 8000 his project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 16, 2025
Merged

fix(teo): [124574429] tencentcloud_teo_security_policy_config add new item for security_policy #3413

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
2e29210
add
SevenEarth Jun 12, 2025
fa236f5
add
SevenEarth Jun 16, 2025
431c508
add
SevenEarth Jun 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .changelog/3413.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
```release-note:enhancement
resource/tencentcloud_teo_security_policy_config: add new item for `security_policy`
```
4 changes: 2 additions & 2 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ require (
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/clb v1.0.1107
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cloudaudit v1.0.1033
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cls v1.0.1148
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1170
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1182
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cvm v1.0.1153
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cwp v1.0.762
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cynosdb v1.0.1161
Expand Down Expand Up @@ -90,7 +90,7 @@ require (
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tdcpg v1.0.533
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tdmq v1.0.955
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tem v1.0.578
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1129
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1182
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tke v1.0.1133
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/trocket v1.0.947
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tse v1.0.857
Expand Down
4 changes: 4 additions & 0 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -985,6 +985,8 @@ github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1164 h1:qEz
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1164/go.mod h1:r5r4xbfxSaeR04b166HGsBa/R4U3SueirEUpXGuw+Q0=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1170 h1:67TIDmxXDa73+7nFuyVVxtVswf83JPXiwBy1Xicv+xQ=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1170/go.mod h1:r5r4xbfxSaeR04b166HGsBa/R4U3SueirEUpXGuw+Q0=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1182 h1:it8gutbUhh2l68CzKt0W3OAEytReLg4H9Wq1/ahkzmg=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1182/go.mod h1:r5r4xbfxSaeR04b166HGsBa/R4U3SueirEUpXGuw+Q0=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/controlcenter v1.0.993 h1:WlPgXldQCxt7qi5Xrc6j6zTrsXWzN5BcOGs7Irq7fwQ=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/controlcenter v1.0.993/go.mod h1:Z9U8zNtyuyKhjS0698wqsrG/kLx1TQ5CEixXBwVe7xY=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/csip v1.0.860 h1:F3esKBIT3HW9+7Gt8cVgf8X06VdGIczpgLBUECzSEzU=
Expand Down Expand Up @@ -1107,6 +1109,8 @@ github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tem v1.0.578 h1:vBpQhUr
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tem v1.0.578/go.mod h1:UlojGQh/9wb7/uXPNi7PvMral1CNAskVDNgqJEV83l0=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1129 h1:9zrLWqS6sQ7YHjyrRGKexB5s7MkmlaAjME+Gsjw0FXo=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1129/go.mod h1:Upcwa9By8gGR8qNLEiAetIKGbe4LmZbtXw0muPWXYc8=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1182 h1:usJ5oGRWXkOufePi9JRP+kz5s0lTKUazpLDJJzVaJrQ=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1182/go.mod h1:lR5rdTT9V5RO9c0hXlFqO0o/bHdxn+R1+JMnWILzne0=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/thpc v1.0.998 h1:f4/n0dVKQTD06xJ84B5asHViNJHrZmGojdAWEPIsITM=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/thpc v1.0.998/go.mod h1:fyi/HUwCwVe2NCCCjz8k/C5GwPu3QazCZO+OBJ3MhLk=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tke v1.0.1038 h1:tmK0aSj8zJrTx7aubJR8DBvtySj1uO8UdFANUDFtbmo=
Expand Down
3,307 changes: 2,793 additions & 514 deletions tencentcloud/services/teo/resource_tc_teo_security_policy_config.go
View file
Open in desktop

Large diffs are not rendered by default.

80 changes: 79 additions & 1 deletion tencentcloud/services/teo/resource_tc_teo_security_policy_config.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ resource "tencentcloud_teo_security_policy_config" "example" {
custom_rules {
precise_match_rules {
name = "rule1"
condition = "$${http.request.host} contain ['abc']"
condition = "$${http.request.host} contain ['test']"
enabled = "on"
priority = 50
action {
Expand Down Expand Up @@ -179,6 +179,84 @@ resource "tencentcloud_teo_security_policy_config" "example" {
}
}
}

http_ddos_protection {
adaptive_frequency_control {
enabled = "on"
sensitivity = "Loose"
action {
name = "Challenge"
challenge_action_parameters {
challenge_option = "JSChallenge"
}
}
}

client_filtering {
enabled = "on"
action {
name = "Challenge"
challenge_action_parameters {
challenge_option = "JSChallenge"
}
}
}

bandwidth_abuse_defense {
enabled = "on"
action {
name = "Deny"
}
}

slow_attack_defense {
enabled = "on"
action {
name = "Deny"
}

minimal_request_body_transfer_rate {
minimal_avg_transfer_rate_threshold = "80bps"
counting_period = "60s"
enabled = "on"
}

request_body_transfer_timeout {
idle_timeout = "5s"
enabled = "on"
}
}
}

rate_limiting_rules {
rules {
name = "Single IP request rate limit"
condition = "$${http.request.uri.path} contain ['/checkout/submit']"
count_by = ["http.request.ip"]
max_request_threshold = 300
counting_period = "60s"
action_duration = "30m"
action {
name = "Challenge"
challenge_action_parameters {
challenge_option = "JSChallenge"
}
}
priority = 50
enabled = "on"
}
}

exception_rules {
rules {
name = "High-frequency API bypasses rate limits"
condition = "$${http.request.method} in ['POST'] and $${http.request.uri.path} in ['/api/EventLogUpload']"
skip_scope = "WebSecurityModules"
skip_option = "SkipOnAllRequestFields"
web_security_modules_for_exception = ["websec-mod-adaptive-control"]
enabled = "off"
}
}
}
}
```
Expand Down
2 changes: 1 addition & 1 deletion vendor/github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common/http/request.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading
0