ControlPolicy

class ControlPolicy : KotlinCustomResource

Provides a Cloud Firewall Control Policy resource. For information about Cloud Firewall Control Policy and how to use it, see What is Control Policy.

NOTE: Available in v1.129.0+.

Example Usage

Basic Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.cloudfirewall.ControlPolicy;
import com.pulumi.alicloud.cloudfirewall.ControlPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ControlPolicy("example", ControlPolicyArgs.builder()
.aclAction("accept")
.applicationName("ANY")
.description("example")
.destination("100.1.1.0/24")
.destinationType("net")
.direction("out")
.proto("ANY")
.source("1.2.3.0/24")
.sourceType("net")
.build());
}
}

Import

Cloud Firewall Control Policy can be imported using the id, e.g.

$ pulumi import alicloud:cloudfirewall/controlPolicy:ControlPolicy example <acl_uuid>:<direction>

Properties

Link copied to clipboard
val aclAction: Output<String>

The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.

Link copied to clipboard
val aclUuid: Output<String>

(Available in v1.148.0+) The unique ID of the access control policy.

Link copied to clipboard
val applicationName: Output<String>

The application type that the access control policy supports.If direction is in, the valid value is ANY. If direction is out, the valid values are ANY, HTTP, HTTPS, MQTT, Memcache, MongoDB, MySQL, RDP, Redis, SMTP, SMTPS, SSH, SSL, VNC.

Link copied to clipboard
val description: Output<String>

The description of the access control policy.

Link copied to clipboard
val destination: Output<String>

The destination address defined in the access control policy.

Link copied to clipboard
val destinationType: Output<String>

DestinationType. Valid values: If Direction is in, the valid values are net, group. If direction is out, the valid values are net, group, domain, location.

Link copied to clipboard
val destPort: Output<String>

The destination port defined in the access control policy.

Link copied to clipboard
val destPortGroup: Output<String>

The destination port address book defined in the access control policy.

Link copied to clipboard
val destPortType: Output<String>

The destination port type defined in the access control policy. Valid values: group, port.

Link copied to clipboard
val direction: Output<String>

Direction. Valid values: in, out.

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val ipVersion: Output<String>?

The ip version.

Link copied to clipboard
val lang: Output<String>?

DestPortGroupPorts. Valid values: en, zh.

Link copied to clipboard
val proto: Output<String>

Proto. Valid values: TCP, UDP, ANY, ICMP.

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val release: Output<String>

Specifies whether the access control policy is enabled. By default, an access control policy is enabled after it is created. Valid values: true, false.

Link copied to clipboard
val source: Output<String>

Source.

Link copied to clipboard
val sourceIp: Output<String>

The source ip.

Link copied to clipboard
val sourceType: Output<String>

SourceType. Valid values: If direction is in, the valid values are net, group, location. If direction is out, the valid values are net, group.

Link copied to clipboard
val urn: Output<String>