Control Policy
Provides a Cloud Firewall Control Policy resource. For information about Cloud Firewall Control Policy and how to use it, see What is Control Policy.
NOTE: Available since v1.129.0.
Example Usage
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const example = new alicloud.cloudfirewall.ControlPolicy("example", {
applicationName: "ANY",
aclAction: "accept",
description: "example",
destinationType: "net",
destination: "100.1.1.0/24",
direction: "out",
proto: "ANY",
source: "1.2.3.0/24",
sourceType: "net",
});import pulumi
import pulumi_alicloud as alicloud
example = alicloud.cloudfirewall.ControlPolicy("example",
application_name="ANY",
acl_action="accept",
description="example",
destination_type="net",
destination="100.1.1.0/24",
direction="out",
proto="ANY",
source="1.2.3.0/24",
source_type="net")using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var example = new AliCloud.CloudFirewall.ControlPolicy("example", new()
{
ApplicationName = "ANY",
AclAction = "accept",
Description = "example",
DestinationType = "net",
Destination = "100.1.1.0/24",
Direction = "out",
Proto = "ANY",
Source = "1.2.3.0/24",
SourceType = "net",
});
});package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cloudfirewall"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cloudfirewall.NewControlPolicy(ctx, "example", &cloudfirewall.ControlPolicyArgs{
ApplicationName: pulumi.String("ANY"),
AclAction: pulumi.String("accept"),
Description: pulumi.String("example"),
DestinationType: pulumi.String("net"),
Destination: pulumi.String("100.1.1.0/24"),
Direction: pulumi.String("out"),
Proto: pulumi.String("ANY"),
Source: pulumi.String("1.2.3.0/24"),
SourceType: pulumi.String("net"),
})
if err != nil {
return err
}
return nil
})
}package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.cloudfirewall.ControlPolicy;
import com.pulumi.alicloud.cloudfirewall.ControlPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ControlPolicy("example", ControlPolicyArgs.builder()
.applicationName("ANY")
.aclAction("accept")
.description("example")
.destinationType("net")
.destination("100.1.1.0/24")
.direction("out")
.proto("ANY")
.source("1.2.3.0/24")
.sourceType("net")
.build());
}
}resources:
example:
type: alicloud:cloudfirewall:ControlPolicy
properties:
applicationName: ANY
aclAction: accept
description: example
destinationType: net
destination: 100.1.1.0/24
direction: out
proto: ANY
source: 1.2.3.0/24
sourceType: netImport
Cloud Firewall Control Policy can be imported using the id, e.g.
$ pulumi import alicloud:cloudfirewall/controlPolicy:ControlPolicy example <acl_uuid>:<direction>Properties
The application type supported by the access control policy. Valid values: ANY, HTTP, HTTPS, MQTT, Memcache, MongoDB, MySQL, RDP, Redis, SMTP, SMTPS, SSH, SSL, VNC.
The description of the access control policy.
The destination address defined in the access control policy.
DestinationType. Valid values: If Direction is in, the valid values are net, group. If direction is out, the valid values are net, group, domain, location.
The destination port address book defined in the access control policy.
The destination port type defined in the access control policy. Valid values: group, port.
SourceType. Valid values: If direction is in, the valid values are net, group, location. If direction is out, the valid values are net, group.