Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Alibaba Cloud Provider
  3. API Docs
  4. cen
  5. TransitRouterVpnAttachment
Alibaba Cloud v3.76.0 published on Tuesday, Apr 8, 2025 by Pulumi
pulumi/pulumi-alicloud

alicloud.cen.TransitRouterVpnAttachment

Explore with Pulumi AI

alicloud logo
Alibaba Cloud v3.76.0 published on Tuesday, Apr 8, 2025 by Pulumi
pulumi/pulumi-alicloud

    Provides a Cloud Enterprise Network (CEN) Transit Router Vpn Attachment resource.

    For information about Cloud Enterprise Network (CEN) Transit Router Vpn Attachment and how to use it, see What is Transit Router Vpn Attachment.

    NOTE: Available since v1.183.0.

    Example Usage

    Basic Usage

    import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";

const config = new pulumi.Config();
const name = config.get("name") || "tf_example";
const _default = alicloud.cen.getTransitRouterAvailableResources({});
const example = new alicloud.cen.Instance("example", {cenInstanceName: name});
const exampleTransitRouter = new alicloud.cen.TransitRouter("example", {
    cenId: example.id,
    transitRouterDescription: name,
    transitRouterName: name,
});
const exampleCustomerGateway = new alicloud.vpn.CustomerGateway("example", {
    customerGatewayName: name,
    ipAddress: "42.104.22.210",
    asn: "45014",
    description: name,
});
const exampleGatewayVpnAttachment = new alicloud.vpn.GatewayVpnAttachment("example", {
    customerGatewayId: exampleCustomerGateway.id,
    networkType: "public",
    localSubnet: "0.0.0.0/0",
    remoteSubnet: "0.0.0.0/0",
    effectImmediately: false,
    ikeConfig: {
        ikeAuthAlg: "md5",
        ikeEncAlg: "des",
        ikeVersion: "ikev2",
        ikeMode: "main",
        ikeLifetime: 86400,
        psk: "tf-examplevpn2",
        ikePfs: "group1",
        remoteId: "examplebob2",
        localId: "examplealice2",
    },
    ipsecConfig: {
        ipsecPfs: "group5",
        ipsecEncAlg: "des",
        ipsecAuthAlg: "md5",
        ipsecLifetime: 86400,
    },
    bgpConfig: {
        enable: true,
        localAsn: 45014,
        tunnelCidr: "169.254.11.0/30",
        localBgpIp: "169.254.11.1",
    },
    healthCheckConfig: {
        enable: true,
        sip: "192.168.1.1",
        dip: "10.0.0.1",
        interval: 10,
        retry: 10,
        policy: "revoke_route",
    },
    enableDpd: true,
    enableNatTraversal: true,
    vpnAttachmentName: name,
});
const exampleTransitRouterCidr = new alicloud.cen.TransitRouterCidr("example", {
    transitRouterId: exampleTransitRouter.transitRouterId,
    cidr: "192.168.0.0/16",
    transitRouterCidrName: name,
    description: name,
    publishCidrRoute: true,
});
const exampleTransitRouterVpnAttachment = new alicloud.cen.TransitRouterVpnAttachment("example", {
    autoPublishRouteEnabled: false,
    transitRouterAttachmentDescription: name,
    transitRouterAttachmentName: name,
    cenId: exampleTransitRouter.cenId,
    transitRouterId: exampleTransitRouterCidr.transitRouterId,
    vpnId: exampleGatewayVpnAttachment.id,
    zones: [{
        zoneId: _default.then(_default => _default.resources?.[0]?.masterZones?.[0]),
    }],
});

    import pulumi
import pulumi_alicloud as alicloud

config = pulumi.Config()
name = config.get("name")
if name is None:
    name = "tf_example"
default = alicloud.cen.get_transit_router_available_resources()
example = alicloud.cen.Instance("example", cen_instance_name=name)
example_transit_router = alicloud.cen.TransitRouter("example",
    cen_id=example.id,
    transit_router_description=name,
    transit_router_name=name)
example_customer_gateway = alicloud.vpn.CustomerGateway("example",
    customer_gateway_name=name,
    ip_address="42.104.22.210",
    asn="45014",
    description=name)
example_gateway_vpn_attachment = alicloud.vpn.GatewayVpnAttachment("example",
    customer_gateway_id=example_customer_gateway.id,
    network_type="public",
    local_subnet="0.0.0.0/0",
    remote_subnet="0.0.0.0/0",
    effect_immediately=False,
    ike_config={
        "ike_auth_alg": "md5",
        "ike_enc_alg": "des",
        "ike_version": "ikev2",
        "ike_mode": "main",
        "ike_lifetime": 86400,
        "psk": "tf-examplevpn2",
        "ike_pfs": "group1",
        "remote_id": "examplebob2",
        "local_id": "examplealice2",
    },
    ipsec_config={
        "ipsec_pfs": "group5",
        "ipsec_enc_alg": "des",
        "ipsec_auth_alg": "md5",
        "ipsec_lifetime": 86400,
    },
    bgp_config={
        "enable": True,
        "local_asn": 45014,
        "tunnel_cidr": "169.254.11.0/30",
        "local_bgp_ip": "169.254.11.1",
    },
    health_check_config={
        "enable": True,
        "sip": "192.168.1.1",
        "dip": "10.0.0.1",
        "interval": 10,
        "retry": 10,
        "policy": "revoke_route",
    },
    enable_dpd=True,
    enable_nat_traversal=True,
    vpn_attachment_name=name)
example_transit_router_cidr = alicloud.cen.TransitRouterCidr("example",
    transit_router_id=example_transit_router.transit_router_id,
    cidr="192.168.0.0/16",
    transit_router_cidr_name=name,
    description=name,
    publish_cidr_route=True)
example_transit_router_vpn_attachment = alicloud.cen.TransitRouterVpnAttachment("example",
    auto_publish_route_enabled=False,
    transit_router_attachment_description=name,
    transit_router_attachment_name=name,
    cen_id=example_transit_router.cen_id,
    transit_router_id=example_transit_router_cidr.transit_router_id,
    vpn_id=example_gateway_vpn_attachment.id,
    zones=[{
        "zone_id": default.resources[0].master_zones[0],
    }])

    package main

import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cen"
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpn"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		name := "tf_example"
		if param := cfg.Get("name"); param != "" {
			name = param
		}
		_default, err := cen.GetTransitRouterAvailableResources(ctx, &cen.GetTransitRouterAvailableResourcesArgs{}, nil)
		if err != nil {
			return err
		}
		example, err := cen.NewInstance(ctx, "example", &cen.InstanceArgs{
			CenInstanceName: pulumi.String(name),
		})
		if err != nil {
			return err
		}
		exampleTransitRouter, err := cen.NewTransitRouter(ctx, "example", &cen.TransitRouterArgs{
			CenId:                    example.ID(),
			TransitRouterDescription: pulumi.String(name),
			TransitRouterName:        pulumi.String(name),
		})
		if err != nil {
			return err
		}
		exampleCustomerGateway, err := vpn.NewCustomerGateway(ctx, "example", &vpn.CustomerGatewayArgs{
			CustomerGatewayName: pulumi.String(name),
			IpAddress:           pulumi.String("42.104.22.210"),
			Asn:                 pulumi.String("45014"),
			Description:         pulumi.String(name),
		})
		if err != nil {
			return err
		}
		exampleGatewayVpnAttachment, err := vpn.NewGatewayVpnAttachment(ctx, "example", &vpn.GatewayVpnAttachmentArgs{
			CustomerGatewayId: exampleCustomerGateway.ID(),
			NetworkType:       pulumi.String("public"),
			LocalSubnet:       pulumi.String("0.0.0.0/0"),
			RemoteSubnet:      pulumi.String("0.0.0.0/0"),
			EffectImmediately: pulumi.Bool(false),
			IkeConfig: &vpn.GatewayVpnAttachmentIkeConfigArgs{
				IkeAuthAlg:  pulumi.String("md5"),
				IkeEncAlg:   pulumi.String("des"),
				IkeVersion:  pulumi.String("ikev2"),
				IkeMode:     pulumi.String("main"),
				IkeLifetime: pulumi.Int(86400),
				Psk:         pulumi.String("tf-examplevpn2"),
				IkePfs:      pulumi.String("group1"),
				RemoteId:    pulumi.String("examplebob2"),
				LocalId:     pulumi.String("examplealice2"),
			},
			IpsecConfig: &vpn.GatewayVpnAttachmentIpsecConfigArgs{
				IpsecPfs:      pulumi.String("group5"),
				IpsecEncAlg:   pulumi.String("des"),
				IpsecAuthAlg:  pulumi.String("md5"),
				IpsecLifetime: pulumi.Int(86400),
			},
			BgpConfig: &vpn.GatewayVpnAttachmentBgpConfigArgs{
				Enable:     pulumi.Bool(true),
				LocalAsn:   pulumi.Int(45014),
				TunnelCidr: pulumi.String("169.254.11.0/30"),
				LocalBgpIp: pulumi.String("169.254.11.1"),
			},
			HealthCheckConfig: &vpn.GatewayVpnAttachmentHealthCheckConfigArgs{
				Enable:   pulumi.Bool(true),
				Sip:      pulumi.String("192.168.1.1"),
				Dip:      pulumi.String("10.0.0.1"),
				Interval: pulumi.Int(10),
				Retry:    pulumi.Int(10),
				Policy:   pulumi.String("revoke_route"),
			},
			EnableDpd:          pulumi.Bool(true),
			EnableNatTraversal: pulumi.Bool(true),
			VpnAttachmentName:  pulumi.String(name),
		})
		if err != nil {
			return err
		}
		exampleTransitRouterCidr, err := cen.NewTransitRouterCidr(ctx, "example", &cen.TransitRouterCidrArgs{
			TransitRouterId:       exampleTransitRouter.TransitRouterId,
			Cidr:                  pulumi.String("192.168.0.0/16"),
			TransitRouterCidrName: pulumi.String(name),
			Description:           pulumi.String(name),
			PublishCidrRoute:      pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = cen.NewTransitRouterVpnAttachment(ctx, "example", &cen.TransitRouterVpnAttachmentArgs{
			AutoPublishRouteEnabled:            pulumi.Bool(false),
			TransitRouterAttachmentDescription: pulumi.String(name),
			TransitRouterAttachmentName:        pulumi.String(name),
			CenId:                              exampleTransitRouter.CenId,
			TransitRouterId:                    exampleTransitRouterCidr.TransitRouterId,
			VpnId:                              exampleGatewayVpnAttachment.ID(),
			Zones: cen.TransitRouterVpnAttachmentZoneArray{
				&cen.TransitRouterVpnAttachmentZoneArgs{
					ZoneId: pulumi.String(_default.Resources[0].MasterZones[0]),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var name = config.Get("name") ?? "tf_example";
    var @default = AliCloud.Cen.GetTransitRouterAvailableResources.Invoke();

    var example = new AliCloud.Cen.Instance("example", new()
    {
        CenInstanceName = name,
    });

    var exampleTransitRouter = new AliCloud.Cen.TransitRouter("example", new()
    {
        CenId = example.Id,
        TransitRouterDescription = name,
        TransitRouterName = name,
    });

    var exampleCustomerGateway = new AliCloud.Vpn.CustomerGateway("example", new()
    {
        CustomerGatewayName = name,
        IpAddress = "42.104.22.210",
        Asn = "45014",
        Description = name,
    });

    var exampleGatewayVpnAttachment = new AliCloud.Vpn.GatewayVpnAttachment("example", new()
    {
        CustomerGatewayId = exampleCustomerGateway.Id,
        NetworkType = "public",
        LocalSubnet = "0.0.0.0/0",
        RemoteSubnet = "0.0.0.0/0",
        EffectImmediately = false,
        IkeConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentIkeConfigArgs
        {
            IkeAuthAlg = "md5",
            IkeEncAlg = "des",
            IkeVersion = "ikev2",
            IkeMode = "main",
            IkeLifetime = 86400,
            Psk = "tf-examplevpn2",
            IkePfs = "group1",
            RemoteId = "examplebob2",
            LocalId = "examplealice2",
        },
        IpsecConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentIpsecConfigArgs
        {
            IpsecPfs = "group5",
            IpsecEncAlg = "des",
            IpsecAuthAlg = "md5",
            IpsecLifetime = 86400,
        },
        BgpConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentBgpConfigArgs
        {
            Enable = true,
            LocalAsn = 45014,
            TunnelCidr = "169.254.11.0/30",
            LocalBgpIp = "169.254.11.1",
        },
        HealthCheckConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentHealthCheckConfigArgs
        {
            Enable = true,
            Sip = "192.168.1.1",
            Dip = "10.0.0.1",
            Interval = 10,
            Retry = 10,
            Policy = "revoke_route",
        },
        EnableDpd = true,
        EnableNatTraversal = true,
        VpnAttachmentName = name,
    });

    var exampleTransitRouterCidr = new AliCloud.Cen.TransitRouterCidr("example", new()
    {
        TransitRouterId = exampleTransitRouter.TransitRouterId,
        Cidr = "192.168.0.0/16",
        TransitRouterCidrName = name,
        Description = name,
        PublishCidrRoute = true,
    });

    var exampleTransitRouterVpnAttachment = new AliCloud.Cen.TransitRouterVpnAttachment("example", new()
    {
        AutoPublishRouteEnabled = false,
        TransitRouterAttachmentDescription = name,
        TransitRouterAttachmentName = name,
        CenId = exampleTransitRouter.CenId,
        TransitRouterId = exampleTransitRouterCidr.TransitRouterId,
        VpnId = exampleGatewayVpnAttachment.Id,
        Zones = new[]
        {
            new AliCloud.Cen.Inputs.TransitRouterVpnAttachmentZoneArgs
            {
                ZoneId = @default.Apply(@default => @default.Apply(getTransitRouterAvailableResourcesResult => getTransitRouterAvailableResourcesResult.Resources[0]?.MasterZones[0])),
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.cen.CenFunctions;
import com.pulumi.alicloud.cen.inputs.GetTransitRouterAvailableResourcesArgs;
import com.pulumi.alicloud.cen.Instance;
import com.pulumi.alicloud.cen.InstanceArgs;
import com.pulumi.alicloud.cen.TransitRouter;
import com.pulumi.alicloud.cen.TransitRouterArgs;
import com.pulumi.alicloud.vpn.CustomerGateway;
import com.pulumi.alicloud.vpn.CustomerGatewayArgs;
import com.pulumi.alicloud.vpn.GatewayVpnAttachment;
import com.pulumi.alicloud.vpn.GatewayVpnAttachmentArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentIkeConfigArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentIpsecConfigArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentBgpConfigArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentHealthCheckConfigArgs;
import com.pulumi.alicloud.cen.TransitRouterCidr;
import com.pulumi.alicloud.cen.TransitRouterCidrArgs;
import com.pulumi.alicloud.cen.TransitRouterVpnAttachment;
import com.pulumi.alicloud.cen.TransitRouterVpnAttachmentArgs;
import com.pulumi.alicloud.cen.inputs.TransitRouterVpnAttachmentZoneArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var name = config.get("name").orElse("tf_example");
        final var default = CenFunctions.getTransitRouterAvailableResources();

        var example = new Instance("example", InstanceArgs.builder()
            .cenInstanceName(name)
            .build());

        var exampleTransitRouter = new TransitRouter("exampleTransitRouter", TransitRouterArgs.builder()
            .cenId(example.id())
            .transitRouterDescription(name)
            .transitRouterName(name)
            .build());

        var exampleCustomerGateway = new CustomerGateway("exampleCustomerGateway", CustomerGatewayArgs.builder()
            .customerGatewayName(name)
            .ipAddress("42.104.22.210")
            .asn("45014")
            .description(name)
            .build());

        var exampleGatewayVpnAttachment = new GatewayVpnAttachment("exampleGatewayVpnAttachment", GatewayVpnAttachmentArgs.builder()
            .customerGatewayId(exampleCustomerGateway.id())
            .networkType("public")
            .localSubnet("0.0.0.0/0")
            .remoteSubnet("0.0.0.0/0")
            .effectImmediately(false)
            .ikeConfig(GatewayVpnAttachmentIkeConfigArgs.builder()
                .ikeAuthAlg("md5")
                .ikeEncAlg("des")
                .ikeVersion("ikev2")
                .ikeMode("main")
                .ikeLifetime(86400)
                .psk("tf-examplevpn2")
                .ikePfs("group1")
                .remoteId("examplebob2")
                .localId("examplealice2")
                .build())
            .ipsecConfig(GatewayVpnAttachmentIpsecConfigArgs.builder()
                .ipsecPfs("group5")
                .ipsecEncAlg("des")
                .ipsecAuthAlg("md5")
                .ipsecLifetime(86400)
                .build())
            .bgpConfig(GatewayVpnAttachmentBgpConfigArgs.builder()
                .enable(true)
                .localAsn(45014)
                .tunnelCidr("169.254.11.0/30")
                .localBgpIp("169.254.11.1")
                .build())
            .healthCheckConfig(GatewayVpnAttachmentHealthCheckConfigArgs.builder()
                .enable(true)
                .sip("192.168.1.1")
                .dip("10.0.0.1")
                .interval(10)
                .retry(10)
                .policy("revoke_route")
                .build())
            .enableDpd(true)
            .enableNatTraversal(true)
            .vpnAttachmentName(name)
            .build());

        var exampleTransitRouterCidr = new TransitRouterCidr("exampleTransitRouterCidr", TransitRouterCidrArgs.builder()
            .transitRouterId(exampleTransitRouter.transitRouterId())
            .cidr("192.168.0.0/16")
            .transitRouterCidrName(name)
            .description(name)
            .publishCidrRoute(true)
            .build());

        var exampleTransitRouterVpnAttachment = new TransitRouterVpnAttachment("exampleTransitRouterVpnAttachment", TransitRouterVpnAttachmentArgs.builder()
            .autoPublishRouteEnabled(false)
            .transitRouterAttachmentDescription(name)
            .transitRouterAttachmentName(name)
            .cenId(exampleTransitRouter.cenId())
            .transitRouterId(exampleTransitRouterCidr.transitRouterId())
            .vpnId(exampleGatewayVpnAttachment.id())
            .zones(TransitRouterVpnAttachmentZoneArgs.builder()
                .zoneId(default_.resources()[0].masterZones()[0])
                .build())
            .build());

    }
}

    configuration:
  name:
    type: string
    default: tf_example
resources:
  example:
    type: alicloud:cen:Instance
    properties:
      cenInstanceName: ${name}
  exampleTransitRouter:
    type: alicloud:cen:TransitRouter
    name: example
    properties:
      cenId: ${example.id}
      transitRouterDescription: ${name}
      transitRouterName: ${name}
  exampleCustomerGateway:
    type: alicloud:vpn:CustomerGateway
    name: example
    properties:
      customerGatewayName: ${name}
      ipAddress: 42.104.22.210
      asn: '45014'
      description: ${name}
  exampleGatewayVpnAttachment:
    type: alicloud:vpn:GatewayVpnAttachment
    name: example
    properties:
      customerGatewayId: ${exampleCustomerGateway.id}
      networkType: public
      localSubnet: 0.0.0.0/0
      remoteSubnet: 0.0.0.0/0
      effectImmediately: false
      ikeConfig:
        ikeAuthAlg: md5
        ikeEncAlg: des
        ikeVersion: ikev2
        ikeMode: main
        ikeLifetime: 86400
        psk: tf-examplevpn2
        ikePfs: group1
        remoteId: examplebob2
        localId: examplealice2
      ipsecConfig:
        ipsecPfs: group5
        ipsecEncAlg: des
        ipsecAuthAlg: md5
        ipsecLifetime: 86400
      bgpConfig:
        enable: true
        localAsn: 45014
        tunnelCidr: 169.254.11.0/30
        localBgpIp: 169.254.11.1
      healthCheckConfig:
        enable: true
        sip: 192.168.1.1
        dip: 10.0.0.1
        interval: 10
        retry: 10
        policy: revoke_route
      enableDpd: true
      enableNatTraversal: true
      vpnAttachmentName: ${name}
  exampleTransitRouterCidr:
    type: alicloud:cen:TransitRouterCidr
    name: example
    properties:
      transitRouterId: ${exampleTransitRouter.transitRouterId}
      cidr: 192.168.0.0/16
      transitRouterCidrName: ${name}
      description: ${name}
      publishCidrRoute: true
  exampleTransitRouterVpnAttachment:
    type: alicloud:cen:TransitRouterVpnAttachment
    name: example
    properties:
      autoPublishRouteEnabled: false
      transitRouterAttachmentDescription: ${name}
      transitRouterAttachmentName: ${name}
      cenId: ${exampleTransitRouter.cenId}
      transitRouterId: ${exampleTransitRouterCidr.transitRouterId}
      vpnId: ${exampleGatewayVpnAttachment.id}
      zones:
        - zoneId: ${default.resources[0].masterZones[0]}
variables:
  default:
    fn::invoke:
      function: alicloud:cen:getTransitRouterAvailableResources
      arguments: {}

    Dual Tunnel Mode Usage

    import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";

const config = new pulumi.Config();
const name = config.get("name") || "tf_example";
const _default = alicloud.getAccount({});
const defaultbpR5Uk = new alicloud.cen.Instance("defaultbpR5Uk", {cenInstanceName: "example-vpn-attachment"});
const defaultM8Zo6H = new alicloud.cen.TransitRouter("defaultM8Zo6H", {cenId: defaultbpR5Uk.id});
const defaultuUtyCv = new alicloud.cen.TransitRouterCidr("defaultuUtyCv", {
    cidr: "192.168.10.0/24",
    transitRouterId: defaultM8Zo6H.transitRouterId,
});
const defaultMeoCIz = new alicloud.vpn.CustomerGateway("defaultMeoCIz", {
    ipAddress: "0.0.0.0",
    customerGatewayName: "example-vpn-attachment",
}, {
    dependsOn: [defaultuUtyCv],
});
const defaultGetTransitRouterService = alicloud.cen.getTransitRouterService({
    enable: "On",
});
const defaultvrPzdh = new alicloud.vpn.GatewayVpnAttachment("defaultvrPzdh", {
    networkType: "public",
    localSubnet: "0.0.0.0/0",
    enableTunnelsBgp: false,
    vpnAttachmentName: name,
    tunnelOptionsSpecifications: [
        {
            customerGatewayId: defaultMeoCIz.id,
            enableDpd: true,
            enableNatTraversal: true,
            tunnelIndex: 1,
            tunnelIkeConfig: {
                remoteId: "2.2.2.2",
                ikeEncAlg: "aes",
                ikeMode: "main",
                ikeVersion: "ikev1",
                localId: "1.1.1.1",
                ikeAuthAlg: "md5",
                ikeLifetime: 86100,
                ikePfs: "group2",
                psk: "12345678",
            },
            tunnelIpsecConfig: {
                ipsecAuthAlg: "md5",
                ipsecEncAlg: "aes",
                ipsecLifetime: 86200,
                ipsecPfs: "group5",
            },
        },
        {
            enableNatTraversal: true,
            tunnelIndex: 2,
            tunnelIkeConfig: {
                localId: "4.4.4.4",
                remoteId: "5.5.5.5",
                ikeLifetime: 86400,
                ikePfs: "group5",
                ikeMode: "main",
                ikeVersion: "ikev2",
                psk: "32333442",
                ikeAuthAlg: "md5",
                ikeEncAlg: "aes",
            },
            tunnelIpsecConfig: {
                ipsecEncAlg: "aes",
                ipsecLifetime: 86400,
                ipsecPfs: "group5",
                ipsecAuthAlg: "sha256",
            },
            customerGatewayId: defaultMeoCIz.id,
            enableDpd: true,
        },
    ],
    remoteSubnet: "0.0.0.0/0",
});
const defaultTransitRouterVpnAttachment = new alicloud.cen.TransitRouterVpnAttachment("default", {
    transitRouterId: defaultM8Zo6H.transitRouterId,
    vpnId: defaultvrPzdh.id,
    autoPublishRouteEnabled: false,
    chargeType: "POSTPAY",
    transitRouterAttachmentName: "example-vpn-attachment",
    vpnOwnerId: _default.then(_default => _default.id),
    cenId: defaultM8Zo6H.cenId,
    transitRouterAttachmentDescription: "example-vpn-attachment",
});

    import pulumi
import pulumi_alicloud as alicloud

config = pulumi.Config()
name = config.get("name")
if name is None:
    name = "tf_example"
default = alicloud.get_account()
defaultbp_r5_uk = alicloud.cen.Instance("defaultbpR5Uk", cen_instance_name="example-vpn-attachment")
default_m8_zo6_h = alicloud.cen.TransitRouter("defaultM8Zo6H", cen_id=defaultbp_r5_uk.id)
defaultu_uty_cv = alicloud.cen.TransitRouterCidr("defaultuUtyCv",
    cidr="192.168.10.0/24",
    transit_router_id=default_m8_zo6_h.transit_router_id)
default_meo_c_iz = alicloud.vpn.CustomerGateway("defaultMeoCIz",
    ip_address="0.0.0.0",
    customer_gateway_name="example-vpn-attachment",
    opts = pulumi.ResourceOptions(depends_on=[defaultu_uty_cv]))
default_get_transit_router_service = alicloud.cen.get_transit_router_service(enable="On")
defaultvr_pzdh = alicloud.vpn.GatewayVpnAttachment("defaultvrPzdh",
    network_type="public",
    local_subnet="0.0.0.0/0",
    enable_tunnels_bgp=False,
    vpn_attachment_name=name,
    tunnel_options_specifications=[
        {
            "customer_gateway_id": default_meo_c_iz.id,
            "enable_dpd": True,
            "enable_nat_traversal": True,
            "tunnel_index": 1,
            "tunnel_ike_config": {
                "remote_id": "2.2.2.2",
                "ike_enc_alg": "aes",
                "ike_mode": "main",
                "ike_version": "ikev1",
                "local_id": "1.1.1.1",
                "ike_auth_alg": "md5",
                "ike_lifetime": 86100,
                "ike_pfs": "group2",
                "psk": "12345678",
            },
            "tunnel_ipsec_config": {
                "ipsec_auth_alg": "md5",
                "ipsec_enc_alg": "aes",
                "ipsec_lifetime": 86200,
                "ipsec_pfs": "group5",
            },
        },
        {
            "enable_nat_traversal": True,
            "tunnel_index": 2,
            "tunnel_ike_config": {
                "local_id": "4.4.4.4",
                "remote_id": "5.5.5.5",
                "ike_lifetime": 86400,
                "ike_pfs": "group5",
                "ike_mode": "main",
                "ike_version": "ikev2",
                "psk": "32333442",
                "ike_auth_alg": "md5",
                "ike_enc_alg": "aes",
            },
            "tunnel_ipsec_config": {
                "ipsec_enc_alg": "aes",
                "ipsec_lifetime": 86400,
                "ipsec_pfs": "group5",
                "ipsec_auth_alg": "sha256",
            },
            "customer_gateway_id": default_meo_c_iz.id,
            "enable_dpd": True,
        },
    ],
    remote_subnet="0.0.0.0/0")
default_transit_router_vpn_attachment = alicloud.cen.TransitRouterVpnAttachment("default",
    transit_router_id=default_m8_zo6_h.transit_router_id,
    vpn_id=defaultvr_pzdh.id,
    auto_publish_route_enabled=False,
    charge_type="POSTPAY",
    transit_router_attachment_name="example-vpn-attachment",
    vpn_owner_id=default.id,
    cen_id=default_m8_zo6_h.cen_id,
    transit_router_attachment_description="example-vpn-attachment")

    package main

import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud"
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cen"
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpn"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		name := "tf_example"
		if param := cfg.Get("name"); param != "" {
			name = param
		}
		_default, err := alicloud.GetAccount(ctx, map[string]interface{}{}, nil)
		if err != nil {
			return err
		}
		defaultbpR5Uk, err := cen.NewInstance(ctx, "defaultbpR5Uk", &cen.InstanceArgs{
			CenInstanceName: pulumi.String("example-vpn-attachment"),
		})
		if err != nil {
			return err
		}
		defaultM8Zo6H, err := cen.NewTransitRouter(ctx, "defaultM8Zo6H", &cen.TransitRouterArgs{
			CenId: defaultbpR5Uk.ID(),
		})
		if err != nil {
			return err
		}
		defaultuUtyCv, err := cen.NewTransitRouterCidr(ctx, "defaultuUtyCv", &cen.TransitRouterCidrArgs{
			Cidr:            pulumi.String("192.168.10.0/24"),
			TransitRouterId: defaultM8Zo6H.TransitRouterId,
		})
		if err != nil {
			return err
		}
		defaultMeoCIz, err := vpn.NewCustomerGateway(ctx, "defaultMeoCIz", &vpn.CustomerGatewayArgs{
			IpAddress:           pulumi.String("0.0.0.0"),
			CustomerGatewayName: pulumi.String("example-vpn-attachment"),
		}, pulumi.DependsOn([]pulumi.Resource{
			defaultuUtyCv,
		}))
		if err != nil {
			return err
		}
		_, err = cen.GetTransitRouterService(ctx, &cen.GetTransitRouterServiceArgs{
			Enable: pulumi.StringRef("On"),
		}, nil)
		if err != nil {
			return err
		}
		defaultvrPzdh, err := vpn.NewGatewayVpnAttachment(ctx, "defaultvrPzdh", &vpn.GatewayVpnAttachmentArgs{
			NetworkType:       pulumi.String("public"),
			LocalSubnet:       pulumi.String("0.0.0.0/0"),
			EnableTunnelsBgp:  pulumi.Bool(false),
			VpnAttachmentName: pulumi.String(name),
			TunnelOptionsSpecifications: vpn.GatewayVpnAttachmentTunnelOptionsSpecificationArray{
				&vpn.GatewayVpnAttachmentTunnelOptionsSpecificationArgs{
					CustomerGatewayId:  defaultMeoCIz.ID(),
					EnableDpd:          pulumi.Bool(true),
					EnableNatTraversal: pulumi.Bool(true),
					TunnelIndex:        pulumi.Int(1),
					TunnelIkeConfig: &vpn.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIkeConfigArgs{
						RemoteId:    pulumi.String("2.2.2.2"),
						IkeEncAlg:   pulumi.String("aes"),
						IkeMode:     pulumi.String("main"),
						IkeVersion:  pulumi.String("ikev1"),
						LocalId:     pulumi.String("1.1.1.1"),
						IkeAuthAlg:  pulumi.String("md5"),
						IkeLifetime: pulumi.Int(86100),
						IkePfs:      pulumi.String("group2"),
						Psk:         pulumi.String("12345678"),
					},
					TunnelIpsecConfig: &vpn.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIpsecConfigArgs{
						IpsecAuthAlg:  pulumi.String("md5"),
						IpsecEncAlg:   pulumi.String("aes"),
						IpsecLifetime: pulumi.Int(86200),
						IpsecPfs:      pulumi.String("group5"),
					},
				},
				&vpn.GatewayVpnAttachmentTunnelOptionsSpecificationArgs{
					EnableNatTraversal: pulumi.Bool(true),
					TunnelIndex:        pulumi.Int(2),
					TunnelIkeConfig: &vpn.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIkeConfigArgs{
						LocalId:     pulumi.String("4.4.4.4"),
						RemoteId:    pulumi.String("5.5.5.5"),
						IkeLifetime: pulumi.Int(86400),
						IkePfs:      pulumi.String("group5"),
						IkeMode:     pulumi.String("main"),
						IkeVersion:  pulumi.String("ikev2"),
						Psk:         pulumi.String("32333442"),
						IkeAuthAlg:  pulumi.String("md5"),
						IkeEncAlg:   pulumi.String("aes"),
					},
					TunnelIpsecConfig: &vpn.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIpsecConfigArgs{
						IpsecEncAlg:   pulumi.String("aes"),
						IpsecLifetime: pulumi.Int(86400),
						IpsecPfs:      pulumi.String("group5"),
						IpsecAuthAlg:  pulumi.String("sha256"),
					},
					CustomerGatewayId: defaultMeoCIz.ID(),
					EnableDpd:         pulumi.Bool(true),
				},
			},
			RemoteSubnet: pulumi.String("0.0.0.0/0"),
		})
		if err != nil {
			return err
		}
		_, err = cen.NewTransitRouterVpnAttachment(ctx, "default", &cen.TransitRouterVpnAttachmentArgs{
			TransitRouterId:                    defaultM8Zo6H.TransitRouterId,
			VpnId:                              defaultvrPzdh.ID(),
			AutoPublishRouteEnabled:            pulumi.Bool(false),
			ChargeType:                         pulumi.String("POSTPAY"),
			TransitRouterAttachmentName:        pulumi.String("example-vpn-attachment"),
			VpnOwnerId:                         pulumi.String(_default.Id),
			CenId:                              defaultM8Zo6H.CenId,
			TransitRouterAttachmentDescription: pulumi.String("example-vpn-attachment"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var name = config.Get("name") ?? "tf_example";
    var @default = AliCloud.GetAccount.Invoke();

    var defaultbpR5Uk = new AliCloud.Cen.Instance("defaultbpR5Uk", new()
    {
        CenInstanceName = "example-vpn-attachment",
    });

    var defaultM8Zo6H = new AliCloud.Cen.TransitRouter("defaultM8Zo6H", new()
    {
        CenId = defaultbpR5Uk.Id,
    });

    var defaultuUtyCv = new AliCloud.Cen.TransitRouterCidr("defaultuUtyCv", new()
    {
        Cidr = "192.168.10.0/24",
        TransitRouterId = defaultM8Zo6H.TransitRouterId,
    });

    var defaultMeoCIz = new AliCloud.Vpn.CustomerGateway("defaultMeoCIz", new()
    {
        IpAddress = "0.0.0.0",
        CustomerGatewayName = "example-vpn-attachment",
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            defaultuUtyCv,
        },
    });

    var defaultGetTransitRouterService = AliCloud.Cen.GetTransitRouterService.Invoke(new()
    {
        Enable = "On",
    });

    var defaultvrPzdh = new AliCloud.Vpn.GatewayVpnAttachment("defaultvrPzdh", new()
    {
        NetworkType = "public",
        LocalSubnet = "0.0.0.0/0",
        EnableTunnelsBgp = false,
        VpnAttachmentName = name,
        TunnelOptionsSpecifications = new[]
        {
            new AliCloud.Vpn.Inputs.GatewayVpnAttachmentTunnelOptionsSpecificationArgs
            {
                CustomerGatewayId = defaultMeoCIz.Id,
                EnableDpd = true,
                EnableNatTraversal = true,
                TunnelIndex = 1,
                TunnelIkeConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIkeConfigArgs
                {
                    RemoteId = "2.2.2.2",
                    IkeEncAlg = "aes",
                    IkeMode = "main",
                    IkeVersion = "ikev1",
                    LocalId = "1.1.1.1",
                    IkeAuthAlg = "md5",
                    IkeLifetime = 86100,
                    IkePfs = "group2",
                    Psk = "12345678",
                },
                TunnelIpsecConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIpsecConfigArgs
                {
                    IpsecAuthAlg = "md5",
                    IpsecEncAlg = "aes",
                    IpsecLifetime = 86200,
                    IpsecPfs = "group5",
                },
            },
            new AliCloud.Vpn.Inputs.GatewayVpnAttachmentTunnelOptionsSpecificationArgs
            {
                EnableNatTraversal = true,
                TunnelIndex = 2,
                TunnelIkeConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIkeConfigArgs
                {
                    LocalId = "4.4.4.4",
                    RemoteId = "5.5.5.5",
                    IkeLifetime = 86400,
                    IkePfs = "group5",
                    IkeMode = "main",
                    IkeVersion = "ikev2",
                    Psk = "32333442",
                    IkeAuthAlg = "md5",
                    IkeEncAlg = "aes",
                },
                TunnelIpsecConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIpsecConfigArgs
                {
                    IpsecEncAlg = "aes",
                    IpsecLifetime = 86400,
                    IpsecPfs = "group5",
                    IpsecAuthAlg = "sha256",
                },
                CustomerGatewayId = defaultMeoCIz.Id,
                EnableDpd = true,
            },
        },
        RemoteSubnet = "0.0.0.0/0",
    });

    var defaultTransitRouterVpnAttachment = new AliCloud.Cen.TransitRouterVpnAttachment("default", new()
    {
        TransitRouterId = defaultM8Zo6H.TransitRouterId,
        VpnId = defaultvrPzdh.Id,
        AutoPublishRouteEnabled = false,
        ChargeType = "POSTPAY",
        TransitRouterAttachmentName = "example-vpn-attachment",
        VpnOwnerId = @default.Apply(@default => @default.Apply(getAccountResult => getAccountResult.Id)),
        CenId = defaultM8Zo6H.CenId,
        TransitRouterAttachmentDescription = "example-vpn-attachment",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.AlicloudFunctions;
import com.pulumi.alicloud.cen.Instance;
import com.pulumi.alicloud.cen.InstanceArgs;
import com.pulumi.alicloud.cen.TransitRouter;
import com.pulumi.alicloud.cen.TransitRouterArgs;
import com.pulumi.alicloud.cen.TransitRouterCidr;
import com.pulumi.alicloud.cen.TransitRouterCidrArgs;
import com.pulumi.alicloud.vpn.CustomerGateway;
import com.pulumi.alicloud.vpn.CustomerGatewayArgs;
import com.pulumi.alicloud.cen.CenFunctions;
import com.pulumi.alicloud.cen.inputs.GetTransitRouterServiceArgs;
import com.pulumi.alicloud.vpn.GatewayVpnAttachment;
import com.pulumi.alicloud.vpn.GatewayVpnAttachmentArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentTunnelOptionsSpecificationArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIkeConfigArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIpsecConfigArgs;
import com.pulumi.alicloud.cen.TransitRouterVpnAttachment;
import com.pulumi.alicloud.cen.TransitRouterVpnAttachmentArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var name = config.get("name").orElse("tf_example");
        final var default = AlicloudFunctions.getAccount();

        var defaultbpR5Uk = new Instance("defaultbpR5Uk", InstanceArgs.builder()
            .cenInstanceName("example-vpn-attachment")
            .build());

        var defaultM8Zo6H = new TransitRouter("defaultM8Zo6H", TransitRouterArgs.builder()
            .cenId(defaultbpR5Uk.id())
            .build());

        var defaultuUtyCv = new TransitRouterCidr("defaultuUtyCv", TransitRouterCidrArgs.builder()
            .cidr("192.168.10.0/24")
            .transitRouterId(defaultM8Zo6H.transitRouterId())
            .build());

        var defaultMeoCIz = new CustomerGateway("defaultMeoCIz", CustomerGatewayArgs.builder()
            .ipAddress("0.0.0.0")
            .customerGatewayName("example-vpn-attachment")
            .build(), CustomResourceOptions.builder()
                .dependsOn(defaultuUtyCv)
                .build());

        final var defaultGetTransitRouterService = CenFunctions.getTransitRouterService(GetTransitRouterServiceArgs.builder()
            .enable("On")
            .build());

        var defaultvrPzdh = new GatewayVpnAttachment("defaultvrPzdh", GatewayVpnAttachmentArgs.builder()
            .networkType("public")
            .localSubnet("0.0.0.0/0")
            .enableTunnelsBgp("false")
            .vpnAttachmentName(name)
            .tunnelOptionsSpecifications(            
                GatewayVpnAttachmentTunnelOptionsSpecificationArgs.builder()
                    .customerGatewayId(defaultMeoCIz.id())
                    .enableDpd("true")
                    .enableNatTraversal("true")
                    .tunnelIndex("1")
                    .tunnelIkeConfig(GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIkeConfigArgs.builder()
                        .remoteId("2.2.2.2")
                        .ikeEncAlg("aes")
                        .ikeMode("main")
                        .ikeVersion("ikev1")
                        .localId("1.1.1.1")
                        .ikeAuthAlg("md5")
                        .ikeLifetime("86100")
                        .ikePfs("group2")
                        .psk("12345678")
                        .build())
                    .tunnelIpsecConfig(GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIpsecConfigArgs.builder()
                        .ipsecAuthAlg("md5")
                        .ipsecEncAlg("aes")
                        .ipsecLifetime("86200")
                        .ipsecPfs("group5")
                        .build())
                    .build(),
                GatewayVpnAttachmentTunnelOptionsSpecificationArgs.builder()
                    .enableNatTraversal("true")
                    .tunnelIndex("2")
                    .tunnelIkeConfig(GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIkeConfigArgs.builder()
                        .localId("4.4.4.4")
                        .remoteId("5.5.5.5")
                        .ikeLifetime("86400")
                        .ikePfs("group5")
                        .ikeMode("main")
                        .ikeVersion("ikev2")
                        .psk("32333442")
                        .ikeAuthAlg("md5")
                        .ikeEncAlg("aes")
                        .build())
                    .tunnelIpsecConfig(GatewayVpnAttachmentTunnelOptionsSpecificationTunnelIpsecConfigArgs.builder()
                        .ipsecEncAlg("aes")
                        .ipsecLifetime("86400")
                        .ipsecPfs("group5")
                        .ipsecAuthAlg("sha256")
                        .build())
                    .customerGatewayId(defaultMeoCIz.id())
                    .enableDpd("true")
                    .build())
            .remoteSubnet("0.0.0.0/0")
            .build());

        var defaultTransitRouterVpnAttachment = new TransitRouterVpnAttachment("defaultTransitRouterVpnAttachment", TransitRouterVpnAttachmentArgs.builder()
            .transitRouterId(defaultM8Zo6H.transitRouterId())
            .vpnId(defaultvrPzdh.id())
            .autoPublishRouteEnabled("false")
            .chargeType("POSTPAY")
            .transitRouterAttachmentName("example-vpn-attachment")
            .vpnOwnerId(default_.id())
            .cenId(defaultM8Zo6H.cenId())
            .transitRouterAttachmentDescription("example-vpn-attachment")
            .build());

    }
}

    configuration:
  name:
    type: string
    default: tf_example
resources:
  defaultbpR5Uk:
    type: alicloud:cen:Instance
    properties:
      cenInstanceName: example-vpn-attachment
  defaultM8Zo6H:
    type: alicloud:cen:TransitRouter
    properties:
      cenId: ${defaultbpR5Uk.id}
  defaultuUtyCv:
    type: alicloud:cen:TransitRouterCidr
    properties:
      cidr: 192.168.10.0/24
      transitRouterId: ${defaultM8Zo6H.transitRouterId}
  defaultMeoCIz:
    type: alicloud:vpn:CustomerGateway
    properties:
      ipAddress: 0.0.0.0
      customerGatewayName: example-vpn-attachment
    options:
      dependsOn:
        - ${defaultuUtyCv}
  defaultvrPzdh:
    type: alicloud:vpn:GatewayVpnAttachment
    properties:
      networkType: public
      localSubnet: 0.0.0.0/0
      enableTunnelsBgp: 'false'
      vpnAttachmentName: ${name}
      tunnelOptionsSpecifications:
        - customerGatewayId: ${defaultMeoCIz.id}
          enableDpd: 'true'
          enableNatTraversal: 'true'
          tunnelIndex: '1'
          tunnelIkeConfig:
            remoteId: 2.2.2.2
            ikeEncAlg: aes
            ikeMode: main
            ikeVersion: ikev1
            localId: 1.1.1.1
            ikeAuthAlg: md5
            ikeLifetime: '86100'
            ikePfs: group2
            psk: '12345678'
          tunnelIpsecConfig:
            ipsecAuthAlg: md5
            ipsecEncAlg: aes
            ipsecLifetime: '86200'
            ipsecPfs: group5
        - enableNatTraversal: 'true'
          tunnelIndex: '2'
          tunnelIkeConfig:
            localId: 4.4.4.4
            remoteId: 5.5.5.5
            ikeLifetime: '86400'
            ikePfs: group5
            ikeMode: main
            ikeVersion: ikev2
            psk: '32333442'
            ikeAuthAlg: md5
            ikeEncAlg: aes
          tunnelIpsecConfig:
            ipsecEncAlg: aes
            ipsecLifetime: '86400'
            ipsecPfs: group5
            ipsecAuthAlg: sha256
          customerGatewayId: ${defaultMeoCIz.id}
          enableDpd: 'true'
      remoteSubnet: 0.0.0.0/0
  defaultTransitRouterVpnAttachment:
    type: alicloud:cen:TransitRouterVpnAttachment
    name: default
    properties:
      transitRouterId: ${defaultM8Zo6H.transitRouterId}
      vpnId: ${defaultvrPzdh.id}
      autoPublishRouteEnabled: 'false'
      chargeType: POSTPAY
      transitRouterAttachmentName: example-vpn-attachment
      vpnOwnerId: ${default.id}
      cenId: ${defaultM8Zo6H.cenId}
      transitRouterAttachmentDescription: example-vpn-attachment
variables:
  default:
    fn::invoke:
      function: alicloud:getAccount
      arguments: {}
  defaultGetTransitRouterService:
    fn::invoke:
      function: alicloud:cen:getTransitRouterService
      arguments:
        enable: On

    Create TransitRouterVpnAttachment Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new TransitRouterVpnAttachment(name: string, args: TransitRouterVpnAttachmentArgs, opts?: CustomResourceOptions);
    @overload
def TransitRouterVpnAttachment(resource_name: str,
                               args: TransitRouterVpnAttachmentArgs,
                               opts: Optional[ResourceOptions] = None)

@overload
def TransitRouterVpnAttachment(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               vpn_id: Optional[str] = None,
                               auto_publish_route_enabled: Optional[bool] = None,
                               cen_id: Optional[str] = None,
                               charge_type: Optional[str] = None,
                               tags: Optional[Mapping[str, str]] = None,
                               transit_router_attachment_description: Optional[str] = None,
                               transit_router_attachment_name: Optional[str] = None,
                               transit_router_id: Optional[str] = None,
                               vpn_owner_id: Optional[str] = None,
                               zones: Optional[Sequence[TransitRouterVpnAttachmentZoneArgs]] = None)
    func NewTransitRouterVpnAttachment(ctx *Context, name string, args TransitRouterVpnAttachmentArgs, opts ...ResourceOption) (*TransitRouterVpnAttachment, error)
    public TransitRouterVpnAttachment(string name, TransitRouterVpnAttachmentArgs args, CustomResourceOptions? opts = null)
    public TransitRouterVpnAttachment(String name, TransitRouterVpnAttachmentArgs args)
public TransitRouterVpnAttachment(String name, TransitRouterVpnAttachmentArgs args, CustomResourceOptions options)

    type: alicloud:cen:TransitRouterVpnAttachment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args TransitRouterVpnAttachmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TransitRouterVpnAttachmentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TransitRouterVpnAttachmentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TransitRouterVpnAttachmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TransitRouterVpnAttachmentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var transitRouterVpnAttachmentResource = new AliCloud.Cen.TransitRouterVpnAttachment("transitRouterVpnAttachmentResource", new()
{
    VpnId = "string",
    AutoPublishRouteEnabled = false,
    CenId = "string",
    ChargeType = "string",
    Tags = 
    {
        { "string", "string" },
    },
    TransitRouterAttachmentDescription = "string",
    TransitRouterAttachmentName = "string",
    TransitRouterId = "string",
    VpnOwnerId = "string",
    Zones = new[]
    {
        new AliCloud.Cen.Inputs.TransitRouterVpnAttachmentZoneArgs
        {
            ZoneId = "string",
        },
    },
});

    example, err := cen.NewTransitRouterVpnAttachment(ctx, "transitRouterVpnAttachmentResource", &cen.TransitRouterVpnAttachmentArgs{
	VpnId:                   pulumi.String("string"),
	AutoPublishRouteEnabled: pulumi.Bool(false),
	CenId:                   pulumi.String("string"),
	ChargeType:              pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	TransitRouterAttachmentDescription: pulumi.String("string"),
	TransitRouterAttachmentName:        pulumi.String("string"),
	TransitRouterId:                    pulumi.String("string"),
	VpnOwnerId:                         pulumi.String("string"),
	Zones: cen.TransitRouterVpnAttachmentZoneArray{
		&cen.TransitRouterVpnAttachmentZoneArgs{
			ZoneId: pulumi.String("string"),
		},
	},
})

    var transitRouterVpnAttachmentResource = new TransitRouterVpnAttachment("transitRouterVpnAttachmentResource", TransitRouterVpnAttachmentArgs.builder()
    .vpnId("string")
    .autoPublishRouteEnabled(false)
    .cenId("string")
    .chargeType("string")
    .tags(Map.of("string", "string"))
    .transitRouterAttachmentDescription("string")
    .transitRouterAttachmentName("string")
    .transitRouterId("string")
    .vpnOwnerId("string")
    .zones(TransitRouterVpnAttachmentZoneArgs.builder()
        .zoneId("string")
        .build())
    .build());

    transit_router_vpn_attachment_resource = alicloud.cen.TransitRouterVpnAttachment("transitRouterVpnAttachmentResource",
    vpn_id="string",
    auto_publish_route_enabled=False,
    cen_id="string",
    charge_type="string",
    tags={
        "string": "string",
    },
    transit_router_attachment_description="string",
    transit_router_attachment_name="string",
    transit_router_id="string",
    vpn_owner_id="string",
    zones=[{
        "zone_id": "string",
    }])

    const transitRouterVpnAttachmentResource = new alicloud.cen.TransitRouterVpnAttachment("transitRouterVpnAttachmentResource", {
    vpnId: "string",
    autoPublishRouteEnabled: false,
    cenId: "string",
    chargeType: "string",
    tags: {
        string: "string",
    },
    transitRouterAttachmentDescription: "string",
    transitRouterAttachmentName: "string",
    transitRouterId: "string",
    vpnOwnerId: "string",
    zones: [{
        zoneId: "string",
    }],
});

    type: alicloud:cen:TransitRouterVpnAttachment
properties:
    autoPublishRouteEnabled: false
    cenId: string
    chargeType: string
    tags:
        string: string
    transitRouterAttachmentDescription: string
    transitRouterAttachmentName: string
    transitRouterId: string
    vpnId: string
    vpnOwnerId: string
    zones:
        - zoneId: string

    TransitRouterVpnAttachment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The TransitRouterVpnAttachment resource accepts the following input properties:

    VpnId string
    The ID of the IPsec-VPN attachment.
    AutoPublishRouteEnabled bool
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    CenId string
    The ID of the Cloud Enterprise Network (CEN) instance.
    ChargeType string
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    Tags Dictionary<string, string>
    The tag of the resource
    TransitRouterAttachmentDescription string
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    TransitRouterAttachmentName string
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    TransitRouterId string
    The ID of the transit router.
    VpnOwnerId string
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    Zones List<Pulumi.AliCloud.Cen.Inputs.TransitRouterVpnAttachmentZone>
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    VpnId string
    The ID of the IPsec-VPN attachment.
    AutoPublishRouteEnabled bool
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    CenId string
    The ID of the Cloud Enterprise Network (CEN) instance.
    ChargeType string
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    Tags map[string]string
    The tag of the resource
    TransitRouterAttachmentDescription string
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    TransitRouterAttachmentName string
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    TransitRouterId string
    The ID of the transit router.
    VpnOwnerId string
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    Zones []TransitRouterVpnAttachmentZoneArgs
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    vpnId String
    The ID of the IPsec-VPN attachment.
    autoPublishRouteEnabled Boolean
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    cenId String
    The ID of the Cloud Enterprise Network (CEN) instance.
    chargeType String
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    tags Map<String,String>
    The tag of the resource
    transitRouterAttachmentDescription String
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    transitRouterAttachmentName String
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    transitRouterId String
    The ID of the transit router.
    vpnOwnerId String
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    zones List<TransitRouterVpnAttachmentZone>
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    vpnId string
    The ID of the IPsec-VPN attachment.
    autoPublishRouteEnabled boolean
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    cenId string
    The ID of the Cloud Enterprise Network (CEN) instance.
    chargeType string
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    tags {[key: string]: string}
    The tag of the resource
    transitRouterAttachmentDescription string
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    transitRouterAttachmentName string
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    transitRouterId string
    The ID of the transit router.
    vpnOwnerId string
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    zones TransitRouterVpnAttachmentZone[]
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    vpn_id str
    The ID of the IPsec-VPN attachment.
    auto_publish_route_enabled bool
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    cen_id str
    The ID of the Cloud Enterprise Network (CEN) instance.
    charge_type str
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    tags Mapping[str, str]
    The tag of the resource
    transit_router_attachment_description str
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    transit_router_attachment_name str
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    transit_router_id str
    The ID of the transit router.
    vpn_owner_id str
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    zones Sequence[TransitRouterVpnAttachmentZoneArgs]
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    vpnId String
    The ID of the IPsec-VPN attachment.
    autoPublishRouteEnabled Boolean
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    cenId String
    The ID of the Cloud Enterprise Network (CEN) instance.
    chargeType String
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    tags Map<String>
    The tag of the resource
    transitRouterAttachmentDescription String
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    transitRouterAttachmentName String
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    transitRouterId String
    The ID of the transit router.
    vpnOwnerId String
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    zones List<Property Map>
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the TransitRouterVpnAttachment resource produces the following output properties:

    CreateTime string
    The creation time of the resource
    Id string
    The provider-assigned unique ID for this managed resource.
    RegionId string
    The ID of the region where the transit router is deployed.
    Status string
    Status
    CreateTime string
    The creation time of the resource
    Id string
    The provider-assigned unique ID for this managed resource.
    RegionId string
    The ID of the region where the transit router is deployed.
    Status string
    Status
    createTime String
    The creation time of the resource
    id String
    The provider-assigned unique ID for this managed resource.
    regionId String
    The ID of the region where the transit router is deployed.
    status String
    Status
    createTime string
    The creation time of the resource
    id string
    The provider-assigned unique ID for this managed resource.
    regionId string
    The ID of the region where the transit router is deployed.
    status string
    Status
    create_time str
    The creation time of the resource
    id str
    The provider-assigned unique ID for this managed resource.
    region_id str
    The ID of the region where the transit router is deployed.
    status str
    Status
    createTime String
    The creation time of the resource
    id String
    The provider-assigned unique ID for this managed resource.
    regionId String
    The ID of the region where the transit router is deployed.
    status String
    Status

    Look up Existing TransitRouterVpnAttachment Resource

    Get an existing TransitRouterVpnAttachment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: TransitRouterVpnAttachmentState, opts?: CustomResourceOptions): TransitRouterVpnAttachment
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        auto_publish_route_enabled: Optional[bool] = None,
        cen_id: Optional[str] = None,
        charge_type: Optional[str] = None,
        create_time: Optional[str] = None,
        region_id: Optional[str] = None,
        status: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        transit_router_attachment_description: Optional[str] = None,
        transit_router_attachment_name: Optional[str] = None,
        transit_router_id: Optional[str] = None,
        vpn_id: Optional[str] = None,
        vpn_owner_id: Optional[str] = None,
        zones: Optional[Sequence[TransitRouterVpnAttachmentZoneArgs]] = None) -> TransitRouterVpnAttachment
    func GetTransitRouterVpnAttachment(ctx *Context, name string, id IDInput, state *TransitRouterVpnAttachmentState, opts ...ResourceOption) (*TransitRouterVpnAttachment, error)
    public static TransitRouterVpnAttachment Get(string name, Input<string> id, TransitRouterVpnAttachmentState? state, CustomResourceOptions? opts = null)
    public static TransitRouterVpnAttachment get(String name, Output<String> id, TransitRouterVpnAttachmentState state, CustomResourceOptions options)
    resources:  _:    type: alicloud:cen:TransitRouterVpnAttachment    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AutoPublishRouteEnabled bool
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    CenId string
    The ID of the Cloud Enterprise Network (CEN) instance.
    ChargeType string
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    CreateTime string
    The creation time of the resource
    RegionId string
    The ID of the region where the transit router is deployed.
    Status string
    Status
    Tags Dictionary<string, string>
    The tag of the resource
    TransitRouterAttachmentDescription string
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    TransitRouterAttachmentName string
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    TransitRouterId string
    The ID of the transit router.
    VpnId string
    The ID of the IPsec-VPN attachment.
    VpnOwnerId string
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    Zones List<Pulumi.AliCloud.Cen.Inputs.TransitRouterVpnAttachmentZone>
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    AutoPublishRouteEnabled bool
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    CenId string
    The ID of the Cloud Enterprise Network (CEN) instance.
    ChargeType string
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    CreateTime string
    The creation time of the resource
    RegionId string
    The ID of the region where the transit router is deployed.
    Status string
    Status
    Tags map[string]string
    The tag of the resource
    TransitRouterAttachmentDescription string
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    TransitRouterAttachmentName string
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    TransitRouterId string
    The ID of the transit router.
    VpnId string
    The ID of the IPsec-VPN attachment.
    VpnOwnerId string
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    Zones []TransitRouterVpnAttachmentZoneArgs
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    autoPublishRouteEnabled Boolean
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    cenId String
    The ID of the Cloud Enterprise Network (CEN) instance.
    chargeType String
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    createTime String
    The creation time of the resource
    regionId String
    The ID of the region where the transit router is deployed.
    status String
    Status
    tags Map<String,String>
    The tag of the resource
    transitRouterAttachmentDescription String
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    transitRouterAttachmentName String
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    transitRouterId String
    The ID of the transit router.
    vpnId String
    The ID of the IPsec-VPN attachment.
    vpnOwnerId String
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    zones List<TransitRouterVpnAttachmentZone>
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    autoPublishRouteEnabled boolean
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    cenId string
    The ID of the Cloud Enterprise Network (CEN) instance.
    chargeType string
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    createTime string
    The creation time of the resource
    regionId string
    The ID of the region where the transit router is deployed.
    status string
    Status
    tags {[key: string]: string}
    The tag of the resource
    transitRouterAttachmentDescription string
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    transitRouterAttachmentName string
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    transitRouterId string
    The ID of the transit router.
    vpnId string
    The ID of the IPsec-VPN attachment.
    vpnOwnerId string
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    zones TransitRouterVpnAttachmentZone[]
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    auto_publish_route_enabled bool
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    cen_id str
    The ID of the Cloud Enterprise Network (CEN) instance.
    charge_type str
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    create_time str
    The creation time of the resource
    region_id str
    The ID of the region where the transit router is deployed.
    status str
    Status
    tags Mapping[str, str]
    The tag of the resource
    transit_router_attachment_description str
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    transit_router_attachment_name str
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    transit_router_id str
    The ID of the transit router.
    vpn_id str
    The ID of the IPsec-VPN attachment.
    vpn_owner_id str
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    zones Sequence[TransitRouterVpnAttachmentZoneArgs]
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.
    autoPublishRouteEnabled Boolean
    Specifies whether to allow the transit router to automatically advertise routes to the IPsec-VPN attachment. Valid values:
    cenId String
    The ID of the Cloud Enterprise Network (CEN) instance.
    chargeType String
    The billing method. Set the value to POSTPAY, which is the default value and specifies the pay-as-you-go billing method.
    createTime String
    The creation time of the resource
    regionId String
    The ID of the region where the transit router is deployed.
    status String
    Status
    tags Map<String>
    The tag of the resource
    transitRouterAttachmentDescription String
    The new description of the VPN attachment. The description must be 2 to 256 characters in length. The description must start with a letter but cannot start with http:// or https://.
    transitRouterAttachmentName String
    The name of the VPN attachment. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.
    transitRouterId String
    The ID of the transit router.
    vpnId String
    The ID of the IPsec-VPN attachment.
    vpnOwnerId String
    The ID of the Alibaba Cloud account to which the IPsec-VPN connection belongs.

    • If you do not set this parameter, the ID of the current Alibaba Cloud account is used.
    • You must set VpnOwnerId if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.
    zones List<Property Map>
    The Zone ID in the current region. System will create resources under the Zone that you specify. Left blank if associated IPSec connection is in dual-tunnel mode. See zone below.

    Supporting Types

    TransitRouterVpnAttachmentZone, TransitRouterVpnAttachmentZoneArgs

    ZoneId string
    The zone ID of the read-only instance. You can call the ListTransitRouterAvailableResource operation to query the most recent zone list.
    ZoneId string
    The zone ID of the read-only instance. You can call the ListTransitRouterAvailableResource operation to query the most recent zone list.
    zoneId String
    The zone ID of the read-only instance. You can call the ListTransitRouterAvailableResource operation to query the most recent zone list.
    zoneId string
    The zone ID of the read-only instance. You can call the ListTransitRouterAvailableResource operation to query the most recent zone list.
    zone_id str
    The zone ID of the read-only instance. You can call the ListTransitRouterAvailableResource operation to query the most recent zone list.
    zoneId String
    The zone ID of the read-only instance. You can call the ListTransitRouterAvailableResource operation to query the most recent zone list.

    Import

    Cloud Enterprise Network (CEN) Transit Router Vpn Attachment can be imported using the id, e.g.

    $ pulumi import alicloud:cen/transitRouterVpnAttachment:TransitRouterVpnAttachment example <id>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Alibaba Cloud pulumi/pulumi-alicloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the alicloud Terraform Provider.
    alicloud logo
    Alibaba Cloud v3.76.0 published on Tuesday, Apr 8, 2025 by Pulumi
    pulumi/pulumi-alicloud