Added resource documentation.
Updated the Terraform documentation to add a new page, and a link in the sidebar, for the aws_lb_ssl_negotiation_policy resource.
This commit is contained in:
parent
a6de088375
commit
8a24dd8efe
|
@ -0,0 +1,87 @@
|
||||||
|
---
|
||||||
|
layout: "aws"
|
||||||
|
page_title: "AWS: aws_lb_ssl_negotiation_policy"
|
||||||
|
sidebar_current: "docs-aws-resource-lb-ssl-negotiation-policy"
|
||||||
|
description: |-
|
||||||
|
Provides a load balancer SSL negotiation policy, which allows an ELB to control which ciphers and protocols are supported during SSL negotiations between a client and a load balancer.
|
||||||
|
---
|
||||||
|
|
||||||
|
# aws\_lb\_ssl\_negotiation\_policy
|
||||||
|
|
||||||
|
Provides a load balancer SSL negotiation policy, which allows an ELB to control the ciphers and protocols that are supported during SSL negotiations between a client and a load balancer.
|
||||||
|
|
||||||
|
## Example Usage
|
||||||
|
|
||||||
|
```
|
||||||
|
resource "aws_elb" "lb" {
|
||||||
|
name = "test-lb"
|
||||||
|
availability_zones = ["us-east-1a"]
|
||||||
|
listener {
|
||||||
|
instance_port = 8000
|
||||||
|
instance_protocol = "https"
|
||||||
|
lb_port = 443
|
||||||
|
lb_protocol = "https"
|
||||||
|
ssl_certificate_id = "arn:aws:iam::123456789012:server-certificate/certName"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_lb_ssl_negotiation_policy" "foo" {
|
||||||
|
name = "foo-policy"
|
||||||
|
load_balancer = "${aws_elb.lb.id}"
|
||||||
|
lb_port = 443
|
||||||
|
attribute {
|
||||||
|
name = "Protocol-TLSv1"
|
||||||
|
value = "false"
|
||||||
|
}
|
||||||
|
attribute {
|
||||||
|
name = "Protocol-TLSv1.1"
|
||||||
|
value = "false"
|
||||||
|
}
|
||||||
|
attribute {
|
||||||
|
name = "Protocol-TLSv1.2"
|
||||||
|
value = "true"
|
||||||
|
}
|
||||||
|
attribute {
|
||||||
|
name = "Server-Defined-Cipher-Order"
|
||||||
|
value = "true"
|
||||||
|
}
|
||||||
|
attribute {
|
||||||
|
name = "ECDHE-RSA-AES128-GCM-SHA256"
|
||||||
|
value = "true"
|
||||||
|
}
|
||||||
|
attribute {
|
||||||
|
name = "AES128-GCM-SHA256"
|
||||||
|
value = "true"
|
||||||
|
}
|
||||||
|
attribute {
|
||||||
|
name = "EDH-RSA-DES-CBC3-SHA"
|
||||||
|
value = "false"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
## Argument Reference
|
||||||
|
|
||||||
|
The following arguments are supported:
|
||||||
|
|
||||||
|
* `name` - (Required) The name of the SSL negotiation policy.
|
||||||
|
* `load_balancer` - (Required) The load balancer to which the policy
|
||||||
|
should be attached.
|
||||||
|
* `lb_port` - (Required) The load balancer port to which the policy
|
||||||
|
should be applied. This must be an active listener on the load
|
||||||
|
balancer.
|
||||||
|
* `attribute` - (At least one Required) An SSL Negotiation policy attribute. Each has two properties:
|
||||||
|
* `name` - The name of the attribute
|
||||||
|
* `value` - The value of the attribute
|
||||||
|
|
||||||
|
To set your attributes, please see the [AWS Elastic Load Balancer Developer Guide](http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-security-policy-table.html) for a listing of the supported SSL protocols, SSL options, and SSL ciphers.
|
||||||
|
|
||||||
|
## Attributes Reference
|
||||||
|
|
||||||
|
The following attributes are exported:
|
||||||
|
|
||||||
|
* `id` - The ID of the policy.
|
||||||
|
* `name` - The name of the stickiness policy.
|
||||||
|
* `load_balancer` - The load balancer to which the policy is attached.
|
||||||
|
* `lb_port` - The load balancer port to which the policy is applied.
|
||||||
|
* `attribute` - The SSL Negotiation policy attributes.
|
|
@ -288,6 +288,10 @@
|
||||||
<a href="/docs/providers/aws/r/load_balancer_policy.html">aws_load_balancer_policy</a>
|
<a href="/docs/providers/aws/r/load_balancer_policy.html">aws_load_balancer_policy</a>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
|
<li<%= sidebar_current("docs-aws-resource-lb-ssl-negotiation-policy") %>>
|
||||||
|
<a href="/docs/providers/aws/r/lb_ssl_negotiation_policy.html">aws_lb_ssl_negotiation_policy</a>
|
||||||
|
</li>
|
||||||
|
|
||||||
<li<%= sidebar_current("docs-aws-resource-placement-group") %>>
|
<li<%= sidebar_current("docs-aws-resource-placement-group") %>>
|
||||||
<a href="/docs/providers/aws/r/placement_group.html">aws_placement_group</a>
|
<a href="/docs/providers/aws/r/placement_group.html">aws_placement_group</a>
|
||||||
</li>
|
</li>
|
||||||
|
|
Loading…
Reference in New Issue