allowedServices | Bag<String> | true | The list of services that are allowed to run on the device. |
allowedCertificationAuthorityEnrollmentUrls | Bag<String> | true | The list of allowed Certification Authority (CA) enrollment URLs. |
managementSubnets | Bag<IpSubnet> | true | The list of subnets in CIDR notation used for management access. |
isProviderEdge | Bool | true | Whether the device is a provider edge device. |
allowedBgpPeers | Bag<IpSubnet> | true | The list of IP addresses or subnets of allowed BGP neighbors. Allowed BGP neighbors must be DOD devices. BGP peering with commercial ISPs is disallowed. |