Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi
oci.Bastion.getBastion
Explore with Pulumi AI
This data source provides details about a specific Bastion resource in Oracle Cloud Infrastructure Bastion service.
Retrieves a bastion identified by the bastion ID. A bastion provides secured, public access to target resources in the cloud that you cannot otherwise reach from the internet.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";
const testBastion = oci.Bastion.getBastion({
    bastionId: testBastionOciBastionBastion.id,
});
import pulumi
import pulumi_oci as oci
test_bastion = oci.Bastion.get_bastion(bastion_id=test_bastion_oci_bastion_bastion["id"])
package main
import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/bastion"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := bastion.GetBastion(ctx, &bastion.GetBastionArgs{
			BastionId: testBastionOciBastionBastion.Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;
return await Deployment.RunAsync(() => 
{
    var testBastion = Oci.Bastion.GetBastion.Invoke(new()
    {
        BastionId = testBastionOciBastionBastion.Id,
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Bastion.BastionFunctions;
import com.pulumi.oci.Bastion.inputs.GetBastionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var testBastion = BastionFunctions.getBastion(GetBastionArgs.builder()
            .bastionId(testBastionOciBastionBastion.id())
            .build());
    }
}
variables:
  testBastion:
    fn::invoke:
      function: oci:Bastion:getBastion
      arguments:
        bastionId: ${testBastionOciBastionBastion.id}
Using getBastion
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getBastion(args: GetBastionArgs, opts?: InvokeOptions): Promise<GetBastionResult>
function getBastionOutput(args: GetBastionOutputArgs, opts?: InvokeOptions): Output<GetBastionResult>def get_bastion(bastion_id: Optional[str] = None,
                opts: Optional[InvokeOptions] = None) -> GetBastionResult
def get_bastion_output(bastion_id: Optional[pulumi.Input[str]] = None,
                opts: Optional[InvokeOptions] = None) -> Output[GetBastionResult]func LookupBastion(ctx *Context, args *LookupBastionArgs, opts ...InvokeOption) (*LookupBastionResult, error)
func LookupBastionOutput(ctx *Context, args *LookupBastionOutputArgs, opts ...InvokeOption) LookupBastionResultOutput> Note: This function is named LookupBastion in the Go SDK.
public static class GetBastion 
{
    public static Task<GetBastionResult> InvokeAsync(GetBastionArgs args, InvokeOptions? opts = null)
    public static Output<GetBastionResult> Invoke(GetBastionInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetBastionResult> getBastion(GetBastionArgs args, InvokeOptions options)
public static Output<GetBastionResult> getBastion(GetBastionArgs args, InvokeOptions options)
fn::invoke:
  function: oci:Bastion/getBastion:getBastion
  arguments:
    # arguments dictionaryThe following arguments are supported:
- BastionId string
- The unique identifier (OCID) of the bastion.
- BastionId string
- The unique identifier (OCID) of the bastion.
- bastionId String
- The unique identifier (OCID) of the bastion.
- bastionId string
- The unique identifier (OCID) of the bastion.
- bastion_id str
- The unique identifier (OCID) of the bastion.
- bastionId String
- The unique identifier (OCID) of the bastion.
getBastion Result
The following output properties are available:
- BastionId string
- BastionType string
- The type of bastion.
- ClientCidr List<string>Block Allow Lists 
- A list of address ranges in CIDR notation that you want to allow to connect to sessions hosted by this bastion.
- CompartmentId string
- The unique identifier (OCID) of the compartment where the bastion is located.
- Dictionary<string, string>
- Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
- DnsProxy stringStatus 
- Flag to enable FQDN and SOCKS5 Proxy Support. Example: ENABLED,DISABLED
- Dictionary<string, string>
- Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
- Id string
- The unique identifier (OCID) of the bastion, which can't be changed after creation.
- LifecycleDetails string
- A message describing the current state in more detail.
- MaxSession intTtl In Seconds 
- The maximum amount of time that any session on the bastion can remain active.
- MaxSessions intAllowed 
- The maximum number of active sessions allowed on the bastion.
- Name string
- The name of the bastion, which can't be changed after creation.
- PhoneBook stringEntry 
- The phonebook entry of the customer's team, which can't be changed after creation. Not applicable to standardbastions.
- PrivateEndpoint stringIp Address 
- The private IP address of the created private endpoint.
- State string
- The current state of the bastion.
- StaticJump List<string>Host Ip Addresses 
- A list of IP addresses of the hosts that the bastion has access to. Not applicable to standardbastions.
- Dictionary<string, string>
- Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
- TargetSubnet stringId 
- The unique identifier (OCID) of the subnet that the bastion connects to.
- TargetVcn stringId 
- The unique identifier (OCID) of the virtual cloud network (VCN) that the bastion connects to.
- TimeCreated string
- The time the bastion was created. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- TimeUpdated string
- The time the bastion was updated. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- BastionId string
- BastionType string
- The type of bastion.
- ClientCidr []stringBlock Allow Lists 
- A list of address ranges in CIDR notation that you want to allow to connect to sessions hosted by this bastion.
- CompartmentId string
- The unique identifier (OCID) of the compartment where the bastion is located.
- map[string]string
- Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
- DnsProxy stringStatus 
- Flag to enable FQDN and SOCKS5 Proxy Support. Example: ENABLED,DISABLED
- map[string]string
- Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
- Id string
- The unique identifier (OCID) of the bastion, which can't be changed after creation.
- LifecycleDetails string
- A message describing the current state in more detail.
- MaxSession intTtl In Seconds 
- The maximum amount of time that any session on the bastion can remain active.
- MaxSessions intAllowed 
- The maximum number of active sessions allowed on the bastion.
- Name string
- The name of the bastion, which can't be changed after creation.
- PhoneBook stringEntry 
- The phonebook entry of the customer's team, which can't be changed after creation. Not applicable to standardbastions.
- PrivateEndpoint stringIp Address 
- The private IP address of the created private endpoint.
- State string
- The current state of the bastion.
- StaticJump []stringHost Ip Addresses 
- A list of IP addresses of the hosts that the bastion has access to. Not applicable to standardbastions.
- map[string]string
- Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
- TargetSubnet stringId 
- The unique identifier (OCID) of the subnet that the bastion connects to.
- TargetVcn stringId 
- The unique identifier (OCID) of the virtual cloud network (VCN) that the bastion connects to.
- TimeCreated string
- The time the bastion was created. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- TimeUpdated string
- The time the bastion was updated. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- bastionId String
- bastionType String
- The type of bastion.
- clientCidr List<String>Block Allow Lists 
- A list of address ranges in CIDR notation that you want to allow to connect to sessions hosted by this bastion.
- compartmentId String
- The unique identifier (OCID) of the compartment where the bastion is located.
- Map<String,String>
- Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
- dnsProxy StringStatus 
- Flag to enable FQDN and SOCKS5 Proxy Support. Example: ENABLED,DISABLED
- Map<String,String>
- Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
- id String
- The unique identifier (OCID) of the bastion, which can't be changed after creation.
- lifecycleDetails String
- A message describing the current state in more detail.
- maxSession IntegerTtl In Seconds 
- The maximum amount of time that any session on the bastion can remain active.
- maxSessions IntegerAllowed 
- The maximum number of active sessions allowed on the bastion.
- name String
- The name of the bastion, which can't be changed after creation.
- phoneBook StringEntry 
- The phonebook entry of the customer's team, which can't be changed after creation. Not applicable to standardbastions.
- privateEndpoint StringIp Address 
- The private IP address of the created private endpoint.
- state String
- The current state of the bastion.
- staticJump List<String>Host Ip Addresses 
- A list of IP addresses of the hosts that the bastion has access to. Not applicable to standardbastions.
- Map<String,String>
- Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
- targetSubnet StringId 
- The unique identifier (OCID) of the subnet that the bastion connects to.
- targetVcn StringId 
- The unique identifier (OCID) of the virtual cloud network (VCN) that the bastion connects to.
- timeCreated String
- The time the bastion was created. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- timeUpdated String
- The time the bastion was updated. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- bastionId string
- bastionType string
- The type of bastion.
- clientCidr string[]Block Allow Lists 
- A list of address ranges in CIDR notation that you want to allow to connect to sessions hosted by this bastion.
- compartmentId string
- The unique identifier (OCID) of the compartment where the bastion is located.
- {[key: string]: string}
- Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
- dnsProxy stringStatus 
- Flag to enable FQDN and SOCKS5 Proxy Support. Example: ENABLED,DISABLED
- {[key: string]: string}
- Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
- id string
- The unique identifier (OCID) of the bastion, which can't be changed after creation.
- lifecycleDetails string
- A message describing the current state in more detail.
- maxSession numberTtl In Seconds 
- The maximum amount of time that any session on the bastion can remain active.
- maxSessions numberAllowed 
- The maximum number of active sessions allowed on the bastion.
- name string
- The name of the bastion, which can't be changed after creation.
- phoneBook stringEntry 
- The phonebook entry of the customer's team, which can't be changed after creation. Not applicable to standardbastions.
- privateEndpoint stringIp Address 
- The private IP address of the created private endpoint.
- state string
- The current state of the bastion.
- staticJump string[]Host Ip Addresses 
- A list of IP addresses of the hosts that the bastion has access to. Not applicable to standardbastions.
- {[key: string]: string}
- Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
- targetSubnet stringId 
- The unique identifier (OCID) of the subnet that the bastion connects to.
- targetVcn stringId 
- The unique identifier (OCID) of the virtual cloud network (VCN) that the bastion connects to.
- timeCreated string
- The time the bastion was created. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- timeUpdated string
- The time the bastion was updated. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- bastion_id str
- bastion_type str
- The type of bastion.
- client_cidr_ Sequence[str]block_ allow_ lists 
- A list of address ranges in CIDR notation that you want to allow to connect to sessions hosted by this bastion.
- compartment_id str
- The unique identifier (OCID) of the compartment where the bastion is located.
- Mapping[str, str]
- Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
- dns_proxy_ strstatus 
- Flag to enable FQDN and SOCKS5 Proxy Support. Example: ENABLED,DISABLED
- Mapping[str, str]
- Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
- id str
- The unique identifier (OCID) of the bastion, which can't be changed after creation.
- lifecycle_details str
- A message describing the current state in more detail.
- max_session_ intttl_ in_ seconds 
- The maximum amount of time that any session on the bastion can remain active.
- max_sessions_ intallowed 
- The maximum number of active sessions allowed on the bastion.
- name str
- The name of the bastion, which can't be changed after creation.
- phone_book_ strentry 
- The phonebook entry of the customer's team, which can't be changed after creation. Not applicable to standardbastions.
- private_endpoint_ strip_ address 
- The private IP address of the created private endpoint.
- state str
- The current state of the bastion.
- static_jump_ Sequence[str]host_ ip_ addresses 
- A list of IP addresses of the hosts that the bastion has access to. Not applicable to standardbastions.
- Mapping[str, str]
- Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
- target_subnet_ strid 
- The unique identifier (OCID) of the subnet that the bastion connects to.
- target_vcn_ strid 
- The unique identifier (OCID) of the virtual cloud network (VCN) that the bastion connects to.
- time_created str
- The time the bastion was created. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- time_updated str
- The time the bastion was updated. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- bastionId String
- bastionType String
- The type of bastion.
- clientCidr List<String>Block Allow Lists 
- A list of address ranges in CIDR notation that you want to allow to connect to sessions hosted by this bastion.
- compartmentId String
- The unique identifier (OCID) of the compartment where the bastion is located.
- Map<String>
- Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}
- dnsProxy StringStatus 
- Flag to enable FQDN and SOCKS5 Proxy Support. Example: ENABLED,DISABLED
- Map<String>
- Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}
- id String
- The unique identifier (OCID) of the bastion, which can't be changed after creation.
- lifecycleDetails String
- A message describing the current state in more detail.
- maxSession NumberTtl In Seconds 
- The maximum amount of time that any session on the bastion can remain active.
- maxSessions NumberAllowed 
- The maximum number of active sessions allowed on the bastion.
- name String
- The name of the bastion, which can't be changed after creation.
- phoneBook StringEntry 
- The phonebook entry of the customer's team, which can't be changed after creation. Not applicable to standardbastions.
- privateEndpoint StringIp Address 
- The private IP address of the created private endpoint.
- state String
- The current state of the bastion.
- staticJump List<String>Host Ip Addresses 
- A list of IP addresses of the hosts that the bastion has access to. Not applicable to standardbastions.
- Map<String>
- Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
- targetSubnet StringId 
- The unique identifier (OCID) of the subnet that the bastion connects to.
- targetVcn StringId 
- The unique identifier (OCID) of the virtual cloud network (VCN) that the bastion connects to.
- timeCreated String
- The time the bastion was created. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
- timeUpdated String
- The time the bastion was updated. Format is defined by RFC3339. Example: 2020-01-25T21:10:29.600Z
Package Details
- Repository
- oci pulumi/pulumi-oci
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the ociTerraform Provider.