Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Ibm Provider
  3. API Docs
  4. IsSubnetNetworkAclAttachment
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

ibm.IsSubnetNetworkAclAttachment

Explore with Pulumi AI

ibm logo
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

    Create, update, or delete a subnet network ACL attachment resource. For more information, about subnet network ACL attachment, see setting up network ACLs.

    Note: VPC infrastructure services are a regional specific based endpoint, by default targets to us-south. Please make sure to target right region in the provider block as shown in the provider.tf file, if VPC service is created in region other than us-south.

    provider.tf

    import * as pulumi from "@pulumi/pulumi";

    import pulumi

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;

return await Deployment.RunAsync(() => 
{
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
    }
}

    {}

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";

const exampleIsNetworkAcl = new ibm.IsNetworkAcl("exampleIsNetworkAcl", {rules: [
    {
        name: "outbound",
        action: "allow",
        source: "0.0.0.0/0",
        destination: "0.0.0.0/0",
        direction: "outbound",
        icmp: {
            code: 1,
            type: 1,
        },
    },
    {
        name: "inbound",
        action: "allow",
        source: "0.0.0.0/0",
        destination: "0.0.0.0/0",
        direction: "inbound",
        icmp: {
            code: 1,
            type: 1,
        },
    },
]});
const exampleIsSubnet = new ibm.IsSubnet("exampleIsSubnet", {
    vpc: ibm_is_vpc.example.id,
    zone: "us-south-1",
    ipv4CidrBlock: "192.168.0.0/1",
});
const exampleIsSubnetNetworkAclAttachment = new ibm.IsSubnetNetworkAclAttachment("exampleIsSubnetNetworkAclAttachment", {
    subnet: exampleIsSubnet.isSubnetId,
    networkAcl: exampleIsNetworkAcl.isNetworkAclId,
});

    import pulumi
import pulumi_ibm as ibm

example_is_network_acl = ibm.IsNetworkAcl("exampleIsNetworkAcl", rules=[
    {
        "name": "outbound",
        "action": "allow",
        "source": "0.0.0.0/0",
        "destination": "0.0.0.0/0",
        "direction": "outbound",
        "icmp": {
            "code": 1,
            "type": 1,
        },
    },
    {
        "name": "inbound",
        "action": "allow",
        "source": "0.0.0.0/0",
        "destination": "0.0.0.0/0",
        "direction": "inbound",
        "icmp": {
            "code": 1,
            "type": 1,
        },
    },
])
example_is_subnet = ibm.IsSubnet("exampleIsSubnet",
    vpc=ibm_is_vpc["example"]["id"],
    zone="us-south-1",
    ipv4_cidr_block="192.168.0.0/1")
example_is_subnet_network_acl_attachment = ibm.IsSubnetNetworkAclAttachment("exampleIsSubnetNetworkAclAttachment",
    subnet=example_is_subnet.is_subnet_id,
    network_acl=example_is_network_acl.is_network_acl_id)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleIsNetworkAcl, err := ibm.NewIsNetworkAcl(ctx, "exampleIsNetworkAcl", &ibm.IsNetworkAclArgs{
			Rules: ibm.IsNetworkAclRuleTypeArray{
				&ibm.IsNetworkAclRuleTypeArgs{
					Name:        pulumi.String("outbound"),
					Action:      pulumi.String("allow"),
					Source:      pulumi.String("0.0.0.0/0"),
					Destination: pulumi.String("0.0.0.0/0"),
					Direction:   pulumi.String("outbound"),
					Icmp: &ibm.IsNetworkAclRuleIcmpArgs{
						Code: pulumi.Float64(1),
						Type: pulumi.Float64(1),
					},
				},
				&ibm.IsNetworkAclRuleTypeArgs{
					Name:        pulumi.String("inbound"),
					Action:      pulumi.String("allow"),
					Source:      pulumi.String("0.0.0.0/0"),
					Destination: pulumi.String("0.0.0.0/0"),
					Direction:   pulumi.String("inbound"),
					Icmp: &ibm.IsNetworkAclRuleIcmpArgs{
						Code: pulumi.Float64(1),
						Type: pulumi.Float64(1),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		exampleIsSubnet, err := ibm.NewIsSubnet(ctx, "exampleIsSubnet", &ibm.IsSubnetArgs{
			Vpc:           pulumi.Any(ibm_is_vpc.Example.Id),
			Zone:          pulumi.String("us-south-1"),
			Ipv4CidrBlock: pulumi.String("192.168.0.0/1"),
		})
		if err != nil {
			return err
		}
		_, err = ibm.NewIsSubnetNetworkAclAttachment(ctx, "exampleIsSubnetNetworkAclAttachment", &ibm.IsSubnetNetworkAclAttachmentArgs{
			Subnet:     exampleIsSubnet.IsSubnetId,
			NetworkAcl: exampleIsNetworkAcl.IsNetworkAclId,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;

return await Deployment.RunAsync(() => 
{
    var exampleIsNetworkAcl = new Ibm.IsNetworkAcl("exampleIsNetworkAcl", new()
    {
        Rules = new[]
        {
            new Ibm.Inputs.IsNetworkAclRuleArgs
            {
                Name = "outbound",
                Action = "allow",
                Source = "0.0.0.0/0",
                Destination = "0.0.0.0/0",
                Direction = "outbound",
                Icmp = new Ibm.Inputs.IsNetworkAclRuleIcmpArgs
                {
                    Code = 1,
                    Type = 1,
                },
            },
            new Ibm.Inputs.IsNetworkAclRuleArgs
            {
                Name = "inbound",
                Action = "allow",
                Source = "0.0.0.0/0",
                Destination = "0.0.0.0/0",
                Direction = "inbound",
                Icmp = new Ibm.Inputs.IsNetworkAclRuleIcmpArgs
                {
                    Code = 1,
                    Type = 1,
                },
            },
        },
    });

    var exampleIsSubnet = new Ibm.IsSubnet("exampleIsSubnet", new()
    {
        Vpc = ibm_is_vpc.Example.Id,
        Zone = "us-south-1",
        Ipv4CidrBlock = "192.168.0.0/1",
    });

    var exampleIsSubnetNetworkAclAttachment = new Ibm.IsSubnetNetworkAclAttachment("exampleIsSubnetNetworkAclAttachment", new()
    {
        Subnet = exampleIsSubnet.IsSubnetId,
        NetworkAcl = exampleIsNetworkAcl.IsNetworkAclId,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.IsNetworkAcl;
import com.pulumi.ibm.IsNetworkAclArgs;
import com.pulumi.ibm.inputs.IsNetworkAclRuleArgs;
import com.pulumi.ibm.inputs.IsNetworkAclRuleIcmpArgs;
import com.pulumi.ibm.IsSubnet;
import com.pulumi.ibm.IsSubnetArgs;
import com.pulumi.ibm.IsSubnetNetworkAclAttachment;
import com.pulumi.ibm.IsSubnetNetworkAclAttachmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleIsNetworkAcl = new IsNetworkAcl("exampleIsNetworkAcl", IsNetworkAclArgs.builder()
            .rules(            
                IsNetworkAclRuleArgs.builder()
                    .name("outbound")
                    .action("allow")
                    .source("0.0.0.0/0")
                    .destination("0.0.0.0/0")
                    .direction("outbound")
                    .icmp(IsNetworkAclRuleIcmpArgs.builder()
                        .code(1)
                        .type(1)
                        .build())
                    .build(),
                IsNetworkAclRuleArgs.builder()
                    .name("inbound")
                    .action("allow")
                    .source("0.0.0.0/0")
                    .destination("0.0.0.0/0")
                    .direction("inbound")
                    .icmp(IsNetworkAclRuleIcmpArgs.builder()
                        .code(1)
                        .type(1)
                        .build())
                    .build())
            .build());

        var exampleIsSubnet = new IsSubnet("exampleIsSubnet", IsSubnetArgs.builder()
            .vpc(ibm_is_vpc.example().id())
            .zone("us-south-1")
            .ipv4CidrBlock("192.168.0.0/1")
            .build());

        var exampleIsSubnetNetworkAclAttachment = new IsSubnetNetworkAclAttachment("exampleIsSubnetNetworkAclAttachment", IsSubnetNetworkAclAttachmentArgs.builder()
            .subnet(exampleIsSubnet.isSubnetId())
            .networkAcl(exampleIsNetworkAcl.isNetworkAclId())
            .build());

    }
}

    resources:
  exampleIsNetworkAcl:
    type: ibm:IsNetworkAcl
    properties:
      rules:
        - name: outbound
          action: allow
          source: 0.0.0.0/0
          destination: 0.0.0.0/0
          direction: outbound
          icmp:
            code: 1
            type: 1
        - name: inbound
          action: allow
          source: 0.0.0.0/0
          destination: 0.0.0.0/0
          direction: inbound
          icmp:
            code: 1
            type: 1
  exampleIsSubnet:
    type: ibm:IsSubnet
    properties:
      vpc: ${ibm_is_vpc.example.id}
      zone: us-south-1
      ipv4CidrBlock: 192.168.0.0/1
  exampleIsSubnetNetworkAclAttachment:
    type: ibm:IsSubnetNetworkAclAttachment
    properties:
      subnet: ${exampleIsSubnet.isSubnetId}
      networkAcl: ${exampleIsNetworkAcl.isNetworkAclId}

    Create IsSubnetNetworkAclAttachment Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IsSubnetNetworkAclAttachment(name: string, args: IsSubnetNetworkAclAttachmentArgs, opts?: CustomResourceOptions);
    @overload
def IsSubnetNetworkAclAttachment(resource_name: str,
                                 args: IsSubnetNetworkAclAttachmentArgs,
                                 opts: Optional[ResourceOptions] = None)

@overload
def IsSubnetNetworkAclAttachment(resource_name: str,
                                 opts: Optional[ResourceOptions] = None,
                                 network_acl: Optional[str] = None,
                                 subnet: Optional[str] = None,
                                 is_subnet_network_acl_attachment_id: Optional[str] = None,
                                 timeouts: Optional[IsSubnetNetworkAclAttachmentTimeoutsArgs] = None)
    func NewIsSubnetNetworkAclAttachment(ctx *Context, name string, args IsSubnetNetworkAclAttachmentArgs, opts ...ResourceOption) (*IsSubnetNetworkAclAttachment, error)
    public IsSubnetNetworkAclAttachment(string name, IsSubnetNetworkAclAttachmentArgs args, CustomResourceOptions? opts = null)
    public IsSubnetNetworkAclAttachment(String name, IsSubnetNetworkAclAttachmentArgs args)
public IsSubnetNetworkAclAttachment(String name, IsSubnetNetworkAclAttachmentArgs args, CustomResourceOptions options)

    type: ibm:IsSubnetNetworkAclAttachment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args IsSubnetNetworkAclAttachmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IsSubnetNetworkAclAttachmentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IsSubnetNetworkAclAttachmentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IsSubnetNetworkAclAttachmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IsSubnetNetworkAclAttachmentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var isSubnetNetworkAclAttachmentResource = new Ibm.IsSubnetNetworkAclAttachment("isSubnetNetworkAclAttachmentResource", new()
{
    NetworkAcl = "string",
    Subnet = "string",
    IsSubnetNetworkAclAttachmentId = "string",
    Timeouts = new Ibm.Inputs.IsSubnetNetworkAclAttachmentTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Update = "string",
    },
});

    example, err := ibm.NewIsSubnetNetworkAclAttachment(ctx, "isSubnetNetworkAclAttachmentResource", &ibm.IsSubnetNetworkAclAttachmentArgs{
	NetworkAcl:                     pulumi.String("string"),
	Subnet:                         pulumi.String("string"),
	IsSubnetNetworkAclAttachmentId: pulumi.String("string"),
	Timeouts: &ibm.IsSubnetNetworkAclAttachmentTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Update: pulumi.String("string"),
	},
})

    var isSubnetNetworkAclAttachmentResource = new IsSubnetNetworkAclAttachment("isSubnetNetworkAclAttachmentResource", IsSubnetNetworkAclAttachmentArgs.builder()
    .networkAcl("string")
    .subnet("string")
    .isSubnetNetworkAclAttachmentId("string")
    .timeouts(IsSubnetNetworkAclAttachmentTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .update("string")
        .build())
    .build());

    is_subnet_network_acl_attachment_resource = ibm.IsSubnetNetworkAclAttachment("isSubnetNetworkAclAttachmentResource",
    network_acl="string",
    subnet="string",
    is_subnet_network_acl_attachment_id="string",
    timeouts={
        "create": "string",
        "delete": "string",
        "update": "string",
    })

    const isSubnetNetworkAclAttachmentResource = new ibm.IsSubnetNetworkAclAttachment("isSubnetNetworkAclAttachmentResource", {
    networkAcl: "string",
    subnet: "string",
    isSubnetNetworkAclAttachmentId: "string",
    timeouts: {
        create: "string",
        "delete": "string",
        update: "string",
    },
});

    type: ibm:IsSubnetNetworkAclAttachment
properties:
    isSubnetNetworkAclAttachmentId: string
    networkAcl: string
    subnet: string
    timeouts:
        create: string
        delete: string
        update: string

    IsSubnetNetworkAclAttachment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IsSubnetNetworkAclAttachment resource accepts the following input properties:

    NetworkAcl string
    The network ACL identity.
    Subnet string
    The subnet identifier.
    IsSubnetNetworkAclAttachmentId string
    (String) The unique identifier of the Network ACL rule.
    Timeouts IsSubnetNetworkAclAttachmentTimeouts
    NetworkAcl string
    The network ACL identity.
    Subnet string
    The subnet identifier.
    IsSubnetNetworkAclAttachmentId string
    (String) The unique identifier of the Network ACL rule.
    Timeouts IsSubnetNetworkAclAttachmentTimeoutsArgs
    networkAcl String
    The network ACL identity.
    subnet String
    The subnet identifier.
    isSubnetNetworkAclAttachmentId String
    (String) The unique identifier of the Network ACL rule.
    timeouts IsSubnetNetworkAclAttachmentTimeouts
    networkAcl string
    The network ACL identity.
    subnet string
    The subnet identifier.
    isSubnetNetworkAclAttachmentId string
    (String) The unique identifier of the Network ACL rule.
    timeouts IsSubnetNetworkAclAttachmentTimeouts
    network_acl str
    The network ACL identity.
    subnet str
    The subnet identifier.
    is_subnet_network_acl_attachment_id str
    (String) The unique identifier of the Network ACL rule.
    timeouts IsSubnetNetworkAclAttachmentTimeoutsArgs
    networkAcl String
    The network ACL identity.
    subnet String
    The subnet identifier.
    isSubnetNetworkAclAttachmentId String
    (String) The unique identifier of the Network ACL rule.
    timeouts Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IsSubnetNetworkAclAttachment resource produces the following output properties:

    Crn string
    (String) The CRN of this network ACL.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    (String) The user-defined name of the rule.
    ResourceGroup string
    (String) The resource group (Id), of this network ACL.
    Rules List<IsSubnetNetworkAclAttachmentRule>
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    Vpc string
    (String) The VPC to which this network ACL is a part of.
    Crn string
    (String) The CRN of this network ACL.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    (String) The user-defined name of the rule.
    ResourceGroup string
    (String) The resource group (Id), of this network ACL.
    Rules []IsSubnetNetworkAclAttachmentRule
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    Vpc string
    (String) The VPC to which this network ACL is a part of.
    crn String
    (String) The CRN of this network ACL.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    (String) The user-defined name of the rule.
    resourceGroup String
    (String) The resource group (Id), of this network ACL.
    rules List<IsSubnetNetworkAclAttachmentRule>
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    vpc String
    (String) The VPC to which this network ACL is a part of.
    crn string
    (String) The CRN of this network ACL.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    (String) The user-defined name of the rule.
    resourceGroup string
    (String) The resource group (Id), of this network ACL.
    rules IsSubnetNetworkAclAttachmentRule[]
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    vpc string
    (String) The VPC to which this network ACL is a part of.
    crn str
    (String) The CRN of this network ACL.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    (String) The user-defined name of the rule.
    resource_group str
    (String) The resource group (Id), of this network ACL.
    rules Sequence[IsSubnetNetworkAclAttachmentRule]
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    vpc str
    (String) The VPC to which this network ACL is a part of.
    crn String
    (String) The CRN of this network ACL.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    (String) The user-defined name of the rule.
    resourceGroup String
    (String) The resource group (Id), of this network ACL.
    rules List<Property Map>
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    vpc String
    (String) The VPC to which this network ACL is a part of.

    Look up Existing IsSubnetNetworkAclAttachment Resource

    Get an existing IsSubnetNetworkAclAttachment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IsSubnetNetworkAclAttachmentState, opts?: CustomResourceOptions): IsSubnetNetworkAclAttachment
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        crn: Optional[str] = None,
        is_subnet_network_acl_attachment_id: Optional[str] = None,
        name: Optional[str] = None,
        network_acl: Optional[str] = None,
        resource_group: Optional[str] = None,
        rules: Optional[Sequence[IsSubnetNetworkAclAttachmentRuleArgs]] = None,
        subnet: Optional[str] = None,
        timeouts: Optional[IsSubnetNetworkAclAttachmentTimeoutsArgs] = None,
        vpc: Optional[str] = None) -> IsSubnetNetworkAclAttachment
    func GetIsSubnetNetworkAclAttachment(ctx *Context, name string, id IDInput, state *IsSubnetNetworkAclAttachmentState, opts ...ResourceOption) (*IsSubnetNetworkAclAttachment, error)
    public static IsSubnetNetworkAclAttachment Get(string name, Input<string> id, IsSubnetNetworkAclAttachmentState? state, CustomResourceOptions? opts = null)
    public static IsSubnetNetworkAclAttachment get(String name, Output<String> id, IsSubnetNetworkAclAttachmentState state, CustomResourceOptions options)
    resources:  _:    type: ibm:IsSubnetNetworkAclAttachment    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Crn string
    (String) The CRN of this network ACL.
    IsSubnetNetworkAclAttachmentId string
    (String) The unique identifier of the Network ACL rule.
    Name string
    (String) The user-defined name of the rule.
    NetworkAcl string
    The network ACL identity.
    ResourceGroup string
    (String) The resource group (Id), of this network ACL.
    Rules List<IsSubnetNetworkAclAttachmentRule>
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    Subnet string
    The subnet identifier.
    Timeouts IsSubnetNetworkAclAttachmentTimeouts
    Vpc string
    (String) The VPC to which this network ACL is a part of.
    Crn string
    (String) The CRN of this network ACL.
    IsSubnetNetworkAclAttachmentId string
    (String) The unique identifier of the Network ACL rule.
    Name string
    (String) The user-defined name of the rule.
    NetworkAcl string
    The network ACL identity.
    ResourceGroup string
    (String) The resource group (Id), of this network ACL.
    Rules []IsSubnetNetworkAclAttachmentRuleArgs
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    Subnet string
    The subnet identifier.
    Timeouts IsSubnetNetworkAclAttachmentTimeoutsArgs
    Vpc string
    (String) The VPC to which this network ACL is a part of.
    crn String
    (String) The CRN of this network ACL.
    isSubnetNetworkAclAttachmentId String
    (String) The unique identifier of the Network ACL rule.
    name String
    (String) The user-defined name of the rule.
    networkAcl String
    The network ACL identity.
    resourceGroup String
    (String) The resource group (Id), of this network ACL.
    rules List<IsSubnetNetworkAclAttachmentRule>
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    subnet String
    The subnet identifier.
    timeouts IsSubnetNetworkAclAttachmentTimeouts
    vpc String
    (String) The VPC to which this network ACL is a part of.
    crn string
    (String) The CRN of this network ACL.
    isSubnetNetworkAclAttachmentId string
    (String) The unique identifier of the Network ACL rule.
    name string
    (String) The user-defined name of the rule.
    networkAcl string
    The network ACL identity.
    resourceGroup string
    (String) The resource group (Id), of this network ACL.
    rules IsSubnetNetworkAclAttachmentRule[]
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    subnet string
    The subnet identifier.
    timeouts IsSubnetNetworkAclAttachmentTimeouts
    vpc string
    (String) The VPC to which this network ACL is a part of.
    crn str
    (String) The CRN of this network ACL.
    is_subnet_network_acl_attachment_id str
    (String) The unique identifier of the Network ACL rule.
    name str
    (String) The user-defined name of the rule.
    network_acl str
    The network ACL identity.
    resource_group str
    (String) The resource group (Id), of this network ACL.
    rules Sequence[IsSubnetNetworkAclAttachmentRuleArgs]
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    subnet str
    The subnet identifier.
    timeouts IsSubnetNetworkAclAttachmentTimeoutsArgs
    vpc str
    (String) The VPC to which this network ACL is a part of.
    crn String
    (String) The CRN of this network ACL.
    isSubnetNetworkAclAttachmentId String
    (String) The unique identifier of the Network ACL rule.
    name String
    (String) The user-defined name of the rule.
    networkAcl String
    The network ACL identity.
    resourceGroup String
    (String) The resource group (Id), of this network ACL.
    rules List<Property Map>
    (List) The ordered rules of this network ACL. If rules does not exist, all traffic will be denied. Nested rules blocks has the following structure.
    subnet String
    The subnet identifier.
    timeouts Property Map
    vpc String
    (String) The VPC to which this network ACL is a part of.

    Supporting Types

    IsSubnetNetworkAclAttachmentRule, IsSubnetNetworkAclAttachmentRuleArgs

    Action string
    (String) Specify to allow or deny matching traffic.
    Destination string
    (String) The destination CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    Direction string
    Icmps List<IsSubnetNetworkAclAttachmentRuleIcmp>
    (List) The protocol ICMP.
    Id string
    (String) The unique identifier of the Network ACL rule.
    IpVersion string
    (String) The IP version of the rule.
    Name string
    (String) The user-defined name of the rule.
    Source string
    (String) The source CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    Tcps List<IsSubnetNetworkAclAttachmentRuleTcp>
    (List) The TCP protocol.
    Udps List<IsSubnetNetworkAclAttachmentRuleUdp>
    (List) The UDP protocol.
    Action string
    (String) Specify to allow or deny matching traffic.
    Destination string
    (String) The destination CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    Direction string
    Icmps []IsSubnetNetworkAclAttachmentRuleIcmp
    (List) The protocol ICMP.
    Id string
    (String) The unique identifier of the Network ACL rule.
    IpVersion string
    (String) The IP version of the rule.
    Name string
    (String) The user-defined name of the rule.
    Source string
    (String) The source CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    Tcps []IsSubnetNetworkAclAttachmentRuleTcp
    (List) The TCP protocol.
    Udps []IsSubnetNetworkAclAttachmentRuleUdp
    (List) The UDP protocol.
    action String
    (String) Specify to allow or deny matching traffic.
    destination String
    (String) The destination CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    direction String
    icmps List<IsSubnetNetworkAclAttachmentRuleIcmp>
    (List) The protocol ICMP.
    id String
    (String) The unique identifier of the Network ACL rule.
    ipVersion String
    (String) The IP version of the rule.
    name String
    (String) The user-defined name of the rule.
    source String
    (String) The source CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    tcps List<IsSubnetNetworkAclAttachmentRuleTcp>
    (List) The TCP protocol.
    udps List<IsSubnetNetworkAclAttachmentRuleUdp>
    (List) The UDP protocol.
    action string
    (String) Specify to allow or deny matching traffic.
    destination string
    (String) The destination CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    direction string
    icmps IsSubnetNetworkAclAttachmentRuleIcmp[]
    (List) The protocol ICMP.
    id string
    (String) The unique identifier of the Network ACL rule.
    ipVersion string
    (String) The IP version of the rule.
    name string
    (String) The user-defined name of the rule.
    source string
    (String) The source CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    tcps IsSubnetNetworkAclAttachmentRuleTcp[]
    (List) The TCP protocol.
    udps IsSubnetNetworkAclAttachmentRuleUdp[]
    (List) The UDP protocol.
    action str
    (String) Specify to allow or deny matching traffic.
    destination str
    (String) The destination CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    direction str
    icmps Sequence[IsSubnetNetworkAclAttachmentRuleIcmp]
    (List) The protocol ICMP.
    id str
    (String) The unique identifier of the Network ACL rule.
    ip_version str
    (String) The IP version of the rule.
    name str
    (String) The user-defined name of the rule.
    source str
    (String) The source CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    tcps Sequence[IsSubnetNetworkAclAttachmentRuleTcp]
    (List) The TCP protocol.
    udps Sequence[IsSubnetNetworkAclAttachmentRuleUdp]
    (List) The UDP protocol.
    action String
    (String) Specify to allow or deny matching traffic.
    destination String
    (String) The destination CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    direction String
    icmps List<Property Map>
    (List) The protocol ICMP.
    id String
    (String) The unique identifier of the Network ACL rule.
    ipVersion String
    (String) The IP version of the rule.
    name String
    (String) The user-defined name of the rule.
    source String
    (String) The source CIDR block. The CIDR block 0.0.0.0/0 applies to all addresses.
    tcps List<Property Map>
    (List) The TCP protocol.
    udps List<Property Map>
    (List) The UDP protocol.

    IsSubnetNetworkAclAttachmentRuleIcmp, IsSubnetNetworkAclAttachmentRuleIcmpArgs

    Code double
    (String) The ICMP traffic code to allow. If unspecified, all codes are allowed. This can only be specified if type is also specified.
    Type double
    (String) The ICMP traffic type to allow. If unspecified, all types are allowed by this rule.
    Code float64
    (String) The ICMP traffic code to allow. If unspecified, all codes are allowed. This can only be specified if type is also specified.
    Type float64
    (String) The ICMP traffic type to allow. If unspecified, all types are allowed by this rule.
    code Double
    (String) The ICMP traffic code to allow. If unspecified, all codes are allowed. This can only be specified if type is also specified.
    type Double
    (String) The ICMP traffic type to allow. If unspecified, all types are allowed by this rule.
    code number
    (String) The ICMP traffic code to allow. If unspecified, all codes are allowed. This can only be specified if type is also specified.
    type number
    (String) The ICMP traffic type to allow. If unspecified, all types are allowed by this rule.
    code float
    (String) The ICMP traffic code to allow. If unspecified, all codes are allowed. This can only be specified if type is also specified.
    type float
    (String) The ICMP traffic type to allow. If unspecified, all types are allowed by this rule.
    code Number
    (String) The ICMP traffic code to allow. If unspecified, all codes are allowed. This can only be specified if type is also specified.
    type Number
    (String) The ICMP traffic type to allow. If unspecified, all types are allowed by this rule.

    IsSubnetNetworkAclAttachmentRuleTcp, IsSubnetNetworkAclAttachmentRuleTcpArgs

    PortMax double
    PortMin double
    SourcePortMax double
    (String) The inclusive maximum bound of UDP source port range.
    SourcePortMin double
    (String) The inclusive minimum bound of UDP source port range.
    PortMax float64
    PortMin float64
    SourcePortMax float64
    (String) The inclusive maximum bound of UDP source port range.
    SourcePortMin float64
    (String) The inclusive minimum bound of UDP source port range.
    portMax Double
    portMin Double
    sourcePortMax Double
    (String) The inclusive maximum bound of UDP source port range.
    sourcePortMin Double
    (String) The inclusive minimum bound of UDP source port range.
    portMax number
    portMin number
    sourcePortMax number
    (String) The inclusive maximum bound of UDP source port range.
    sourcePortMin number
    (String) The inclusive minimum bound of UDP source port range.
    port_max float
    port_min float
    source_port_max float
    (String) The inclusive maximum bound of UDP source port range.
    source_port_min float
    (String) The inclusive minimum bound of UDP source port range.
    portMax Number
    portMin Number
    sourcePortMax Number
    (String) The inclusive maximum bound of UDP source port range.
    sourcePortMin Number
    (String) The inclusive minimum bound of UDP source port range.

    IsSubnetNetworkAclAttachmentRuleUdp, IsSubnetNetworkAclAttachmentRuleUdpArgs

    PortMax double
    PortMin double
    SourcePortMax double
    (String) The inclusive maximum bound of UDP source port range.
    SourcePortMin double
    (String) The inclusive minimum bound of UDP source port range.
    PortMax float64
    PortMin float64
    SourcePortMax float64
    (String) The inclusive maximum bound of UDP source port range.
    SourcePortMin float64
    (String) The inclusive minimum bound of UDP source port range.
    portMax Double
    portMin Double
    sourcePortMax Double
    (String) The inclusive maximum bound of UDP source port range.
    sourcePortMin Double
    (String) The inclusive minimum bound of UDP source port range.
    portMax number
    portMin number
    sourcePortMax number
    (String) The inclusive maximum bound of UDP source port range.
    sourcePortMin number
    (String) The inclusive minimum bound of UDP source port range.
    port_max float
    port_min float
    source_port_max float
    (String) The inclusive maximum bound of UDP source port range.
    source_port_min float
    (String) The inclusive minimum bound of UDP source port range.
    portMax Number
    portMin Number
    sourcePortMax Number
    (String) The inclusive maximum bound of UDP source port range.
    sourcePortMin Number
    (String) The inclusive minimum bound of UDP source port range.

    IsSubnetNetworkAclAttachmentTimeouts, IsSubnetNetworkAclAttachmentTimeoutsArgs

    Create string
    Delete string
    Update string
    Create string
    Delete string
    Update string
    create String
    delete String
    update String
    create string
    delete string
    update string
    create str
    delete str
    update str
    create String
    delete String
    update String

    Import

    The ibm_is_subnet_network_acl_attachment resource can be imported by using the ID.

    Syntax

    $ pulumi import ibm:index/isSubnetNetworkAclAttachment:IsSubnetNetworkAclAttachment example <subnet_network_acl_ID>

    Example

    $ pulumi import ibm:index/isSubnetNetworkAclAttachment:IsSubnetNetworkAclAttachment example d7bec597-4726-451f-8a63-1111e6f19c32c

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ibm ibm-cloud/terraform-provider-ibm
    License
    Notes
    This Pulumi package is based on the ibm Terraform Provider.
    ibm logo
    ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
    ibm-cloud/terraform-provider-ibm