pulumi-alicloud-kotlin/com.pulumi.alicloud.cloudfirewall.kotlin/FirewallVpcFirewallControlPolicy

FirewallVpcFirewallControlPolicy

class FirewallVpcFirewallControlPolicy : KotlinCustomResource

Provides a Cloud Firewall Vpc Firewall Control Policy resource. For information about Cloud Firewall Vpc Firewall Control Policy and how to use it, see What is Vpc Firewall Control Policy.

NOTE: Available since v1.194.0.

Example Usage

Basic Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.AlicloudFunctions;
import com.pulumi.alicloud.cen.Instance;
import com.pulumi.alicloud.cen.InstanceArgs;
import com.pulumi.alicloud.cloudfirewall.FirewallVpcFirewallControlPolicy;
import com.pulumi.alicloud.cloudfirewall.FirewallVpcFirewallControlPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var defaultAccount = AlicloudFunctions.getAccount();
        var defaultInstance = new Instance("defaultInstance", InstanceArgs.builder()
            .cenInstanceName(var_.name())
            .description("example_value")
            .tags(Map.ofEntries(
                Map.entry("Created", "TF"),
                Map.entry("For", "acceptance test")
            ))
            .build());
        var defaultFirewallVpcFirewallControlPolicy = new FirewallVpcFirewallControlPolicy("defaultFirewallVpcFirewallControlPolicy", FirewallVpcFirewallControlPolicyArgs.builder()
            .order("1")
            .destination("127.0.0.2/32")
            .applicationName("ANY")
            .description("example_value")
            .sourceType("net")
            .destPort("80/88")
            .aclAction("accept")
            .lang("zh")
            .destinationType("net")
            .source("127.0.0.1/32")
            .destPortType("port")
            .proto("TCP")
            .release(true)
            .memberUid(defaultAccount.applyValue(getAccountResult -> getAccountResult.id()))
            .vpcFirewallId(defaultInstance.id())
            .build());
    }
}

Import

Cloud Firewall Vpc Firewall Control Policy can be imported using the id, e.g.

$ pulumi import alicloud:cloudfirewall/firewallVpcFirewallControlPolicy:FirewallVpcFirewallControlPolicy example <vpc_firewall_id>:<acl_uuid>

Properties

aclAction

val aclAction: Output<String>

The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.

aclUuid

val aclUuid: Output<String>

Access control over VPC firewalls strategy unique identifier.

applicationId

val applicationId: Output<String>

Policy specifies the application ID.

applicationName

val applicationName: Output<String>

The type of the applications that the access control policy supports. Valid values: FTP, HTTP, HTTPS, MySQL, SMTP, SMTPS, RDP, VNC, SSH, Redis, MQTT, MongoDB, Memcache, SSL, ANY.

description

val description: Output<String>

Access control over VPC firewalls description of the strategy information.

destination

val destination: Output<String>

The destination address in the access control policy. Valid values:

destinationGroupCidrs

val destinationGroupCidrs: Output<List<String>>

Destination address book defined in the address list.

destinationGroupType

val destinationGroupType: Output<String>

The destination address book type in the access control policy.

destinationType

val destinationType: Output<String>

The type of the destination address in the access control policy. Valid values: net, group, domain.

destPort

val destPort: Output<String>

The destination port in the access control policy. Note: If dest_port_type is set to port, you must specify this parameter.

destPortGroup

val destPortGroup: Output<String>?

Access control policy in the access traffic of the destination port address book name. Note: If dest_port_type is set to group, you must specify this parameter.