fix(teo): [124574429] tencentcloud_teo_security_policy_config add new item for security_policy (#3413)

* add

* add

* add

Author: SevenEarth

.changelog/3413.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/tencentcloud_teo_security_policy_config: add new item for `security_policy`
+```

go.mod

@@ -46,7 +46,7 @@ require (
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/clb v1.0.1107
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cloudaudit v1.0.1033
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cls v1.0.1148
-	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1170
+	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1182
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cvm v1.0.1153
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cwp v1.0.762
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cynosdb v1.0.1161
@@ -90,7 +90,7 @@ require (
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tdcpg v1.0.533
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tdmq v1.0.955
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tem v1.0.578
-	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1129
+	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1182
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tke v1.0.1133
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/trocket v1.0.947
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tse v1.0.857

go.sum

@@ -985,6 +985,8 @@ github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1164 h1:qEz
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1164/go.mod h1:r5r4xbfxSaeR04b166HGsBa/R4U3SueirEUpXGuw+Q0=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1170 h1:67TIDmxXDa73+7nFuyVVxtVswf83JPXiwBy1Xicv+xQ=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1170/go.mod h1:r5r4xbfxSaeR04b166HGsBa/R4U3SueirEUpXGuw+Q0=
+github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1182 h1:it8gutbUhh2l68CzKt0W3OAEytReLg4H9Wq1/ahkzmg=
+github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1182/go.mod h1:r5r4xbfxSaeR04b166HGsBa/R4U3SueirEUpXGuw+Q0=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/controlcenter v1.0.993 h1:WlPgXldQCxt7qi5Xrc6j6zTrsXWzN5BcOGs7Irq7fwQ=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/controlcenter v1.0.993/go.mod h1:Z9U8zNtyuyKhjS0698wqsrG/kLx1TQ5CEixXBwVe7xY=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/csip v1.0.860 h1:F3esKBIT3HW9+7Gt8cVgf8X06VdGIczpgLBUECzSEzU=
@@ -1107,6 +1109,8 @@ github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tem v1.0.578 h1:vBpQhUr
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tem v1.0.578/go.mod h1:UlojGQh/9wb7/uXPNi7PvMral1CNAskVDNgqJEV83l0=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1129 h1:9zrLWqS6sQ7YHjyrRGKexB5s7MkmlaAjME+Gsjw0FXo=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1129/go.mod h1:Upcwa9By8gGR8qNLEiAetIKGbe4LmZbtXw0muPWXYc8=
+github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1182 h1:usJ5oGRWXkOufePi9JRP+kz5s0lTKUazpLDJJzVaJrQ=
+github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1182/go.mod h1:lR5rdTT9V5RO9c0hXlFqO0o/bHdxn+R1+JMnWILzne0=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/thpc v1.0.998 h1:f4/n0dVKQTD06xJ84B5asHViNJHrZmGojdAWEPIsITM=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/thpc v1.0.998/go.mod h1:fyi/HUwCwVe2NCCCjz8k/C5GwPu3QazCZO+OBJ3MhLk=
 github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tke v1.0.1038 h1:tmK0aSj8zJrTx7aubJR8DBvtySj1uO8UdFANUDFtbmo=

tencentcloud/services/teo/resource_tc_teo_security_policy_config.go

@@ -14,7 +14,7 @@ resource "tencentcloud_teo_security_policy_config" "example" {
     custom_rules {
       precise_match_rules {
         name      = "rule1"
-        condition = "$${http.request.host} contain ['abc']"
+        condition = "$${http.request.host} contain ['test']"
         enabled   = "on"
         priority  = 50
         action {
@@ -179,6 +179,84 @@ resource "tencentcloud_teo_security_policy_config" "example" {
         }
       }
     }
+
+    http_ddos_protection {
+      adaptive_frequency_control {
+        enabled     = "on"
+        sensitivity = "Loose"
+        action {
+          name = "Challenge"
+          challenge_action_parameters {
+            challenge_option = "JSChallenge"
+          }
+        }
+      }
+
+      client_filtering {
+        enabled = "on"
+        action {
+          name = "Challenge"
+          challenge_action_parameters {
+            challenge_option = "JSChallenge"
+          }
+        }
+      }
+
+      bandwidth_abuse_defense {
+        enabled = "on"
+        action {
+          name = "Deny"
+        }
+      }
+
+      slow_attack_defense {
+        enabled = "on"
+        action {
+          name = "Deny"
+        }
+
+        minimal_request_body_transfer_rate {
+          minimal_avg_transfer_rate_threshold = "80bps"
+          counting_period                     = "60s"
+          enabled                             = "on"
+        }
+
+        request_body_transfer_timeout {
+          idle_timeout = "5s"
+          enabled      = "on"
+        }
+      }
+    }
+
+    rate_limiting_rules {
+      rules {
+        name                  = "Single IP request rate limit"
+        condition             = "$${http.request.uri.path} contain ['/checkout/submit']"
+        count_by              = ["http.request.ip"]
+        max_request_threshold = 300
+        counting_period       = "60s"
+        action_duration       = "30m"
+        action {
+          name = "Challenge"
+          challenge_action_parameters {
+            challenge_option = "JSChallenge"
+          }
+        }
+        priority = 50
+        enabled  = "on"
+      }
+    }
+
+    exception_rules {
+      rules {
+        name                               = "High-frequency API bypasses rate limits"
+        condition                          = "$${http.request.method} in ['POST'] and $${http.request.uri.path} in ['/api/EventLogUpload']"
+        skip_scope                         = "WebSecurityModules"
+        skip_option                        = "SkipOnAllRequestFields"
+        web_security_modules_for_exception = ["websec-mod-adaptive-control"]
+        enabled                            = "off"
+      }
+    }
   }
 }
 ```