1. Packages
  2. Tencentcloud Provider
  3. API Docs
  4. BhAcl
Viewing docs for tencentcloud 1.82.85
published on Friday, Apr 10, 2026 by tencentcloudstack
Schema (JSON)
tencentcloudstack/terraform-provider-tencentcloud

tencentcloud.BhAcl

Viewing docs for tencentcloud 1.82.85
published on Friday, Apr 10, 2026 by tencentcloudstack
Schema (JSON)
tencentcloudstack/terraform-provider-tencentcloud

    Provides a BH (Bastion Host) acl.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";

const example = new tencentcloud.BhAcl("example", {
    name: "tf-example",
    allowDiskRedirect: true,
    allowAnyAccount: false,
    allowClipFileUp: true,
    allowClipFileDown: false,
    allowClipTextUp: false,
    allowClipTextDown: true,
    allowFileUp: false,
    allowFileDown: true,
    allowDiskFileUp: true,
    allowDiskFileDown: false,
    allowShellFileUp: false,
    allowShellFileDown: false,
    allowFileDel: false,
    allowAccessCredential: true,
    allowKeyboardLogger: false,
});

    import pulumi
import pulumi_tencentcloud as tencentcloud

example = tencentcloud.BhAcl("example",
    name="tf-example",
    allow_disk_redirect=True,
    allow_any_account=False,
    allow_clip_file_up=True,
    allow_clip_file_down=False,
    allow_clip_text_up=False,
    allow_clip_text_down=True,
    allow_file_up=False,
    allow_file_down=True,
    allow_disk_file_up=True,
    allow_disk_file_down=False,
    allow_shell_file_up=False,
    allow_shell_file_down=False,
    allow_file_del=False,
    allow_access_credential=True,
    allow_keyboard_logger=False)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := tencentcloud.NewBhAcl(ctx, "example", &tencentcloud.BhAclArgs{
			Name:                  pulumi.String("tf-example"),
			AllowDiskRedirect:     pulumi.Bool(true),
			AllowAnyAccount:       pulumi.Bool(false),
			AllowClipFileUp:       pulumi.Bool(true),
			AllowClipFileDown:     pulumi.Bool(false),
			AllowClipTextUp:       pulumi.Bool(false),
			AllowClipTextDown:     pulumi.Bool(true),
			AllowFileUp:           pulumi.Bool(false),
			AllowFileDown:         pulumi.Bool(true),
			AllowDiskFileUp:       pulumi.Bool(true),
			AllowDiskFileDown:     pulumi.Bool(false),
			AllowShellFileUp:      pulumi.Bool(false),
			AllowShellFileDown:    pulumi.Bool(false),
			AllowFileDel:          pulumi.Bool(false),
			AllowAccessCredential: pulumi.Bool(true),
			AllowKeyboardLogger:   pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;

return await Deployment.RunAsync(() => 
{
    var example = new Tencentcloud.BhAcl("example", new()
    {
        Name = "tf-example",
        AllowDiskRedirect = true,
        AllowAnyAccount = false,
        AllowClipFileUp = true,
        AllowClipFileDown = false,
        AllowClipTextUp = false,
        AllowClipTextDown = true,
        AllowFileUp = false,
        AllowFileDown = true,
        AllowDiskFileUp = true,
        AllowDiskFileDown = false,
        AllowShellFileUp = false,
        AllowShellFileDown = false,
        AllowFileDel = false,
        AllowAccessCredential = true,
        AllowKeyboardLogger = false,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.BhAcl;
import com.pulumi.tencentcloud.BhAclArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new BhAcl("example", BhAclArgs.builder()
            .name("tf-example")
            .allowDiskRedirect(true)
            .allowAnyAccount(false)
            .allowClipFileUp(true)
            .allowClipFileDown(false)
            .allowClipTextUp(false)
            .allowClipTextDown(true)
            .allowFileUp(false)
            .allowFileDown(true)
            .allowDiskFileUp(true)
            .allowDiskFileDown(false)
            .allowShellFileUp(false)
            .allowShellFileDown(false)
            .allowFileDel(false)
            .allowAccessCredential(true)
            .allowKeyboardLogger(false)
            .build());

    }
}

    resources:
  example:
    type: tencentcloud:BhAcl
    properties:
      name: tf-example
      allowDiskRedirect: true
      allowAnyAccount: false
      allowClipFileUp: true
      allowClipFileDown: false
      allowClipTextUp: false
      allowClipTextDown: true
      allowFileUp: false
      allowFileDown: true
      allowDiskFileUp: true
      allowDiskFileDown: false
      allowShellFileUp: false
      allowShellFileDown: false
      allowFileDel: false
      allowAccessCredential: true
      allowKeyboardLogger: false

    Create BhAcl Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new BhAcl(name: string, args: BhAclArgs, opts?: CustomResourceOptions);
    @overload
def BhAcl(resource_name: str,
          args: BhAclArgs,
          opts: Optional[ResourceOptions] = None)

@overload
def BhAcl(resource_name: str,
          opts: Optional[ResourceOptions] = None,
          allow_any_account: Optional[bool] = None,
          allow_disk_redirect: Optional[bool] = None,
          allow_keyboard_logger: Optional[bool] = None,
          device_group_id_sets: Optional[Sequence[float]] = None,
          allow_clip_file_down: Optional[bool] = None,
          allow_clip_file_up: Optional[bool] = None,
          allow_clip_text_down: Optional[bool] = None,
          allow_clip_text_up: Optional[bool] = None,
          allow_disk_file_down: Optional[bool] = None,
          allow_disk_file_up: Optional[bool] = None,
          account_sets: Optional[Sequence[str]] = None,
          allow_file_del: Optional[bool] = None,
          allow_file_down: Optional[bool] = None,
          allow_file_up: Optional[bool] = None,
          ac_template_id_sets: Optional[Sequence[str]] = None,
          allow_shell_file_down: Optional[bool] = None,
          allow_access_credential: Optional[bool] = None,
          bh_acl_id: Optional[str] = None,
          allow_shell_file_up: Optional[bool] = None,
          cmd_template_id_sets: Optional[Sequence[float]] = None,
          department_id: Optional[str] = None,
          app_asset_id_sets: Optional[Sequence[float]] = None,
          device_id_sets: Optional[Sequence[float]] = None,
          max_access_credential_duration: Optional[float] = None,
          max_file_down_size: Optional[float] = None,
          max_file_up_size: Optional[float] = None,
          name: Optional[str] = None,
          user_group_id_sets: Optional[Sequence[float]] = None,
          user_id_sets: Optional[Sequence[float]] = None,
          validate_from: Optional[str] = None,
          validate_to: Optional[str] = None)
    func NewBhAcl(ctx *Context, name string, args BhAclArgs, opts ...ResourceOption) (*BhAcl, error)
    public BhAcl(string name, BhAclArgs args, CustomResourceOptions? opts = null)
    public BhAcl(String name, BhAclArgs args)
public BhAcl(String name, BhAclArgs args, CustomResourceOptions options)

    type: tencentcloud:BhAcl
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args BhAclArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args BhAclArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args BhAclArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args BhAclArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args BhAclArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    BhAcl Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The BhAcl resource accepts the following input properties:

    AllowAnyAccount bool
    Whether to allow any account to log in.
    AllowDiskRedirect bool
    Whether to enable disk mapping.
    AcTemplateIdSets List<string>
    Associated high-risk DB template ID set.
    AccountSets List<string>
    Associated account set.
    AllowAccessCredential bool
    Whether to allow the use of access credentials. Default is allowed.
    AllowClipFileDown bool
    Whether to enable clipboard file download.
    AllowClipFileUp bool
    Whether to enable clipboard file upload.
    AllowClipTextDown bool
    Whether to enable clipboard text (including images) download.
    AllowClipTextUp bool
    Whether to enable clipboard text (including images) upload.
    AllowDiskFileDown bool
    Whether to enable RDP disk mapping file download.
    AllowDiskFileUp bool
    Whether to enable RDP disk mapping file upload.
    AllowFileDel bool
    Whether to enable SFTP file deletion.
    AllowFileDown bool
    Whether to enable SFTP file download.
    AllowFileUp bool
    Whether to enable SFTP file upload.
    AllowKeyboardLogger bool
    Whether to allow keyboard logging.
    AllowShellFileDown bool
    Whether to enable rz sz file download.
    AllowShellFileUp bool
    Whether to enable rz sz file upload.
    AppAssetIdSets List<double>
    Associated application asset ID set.
    BhAclId string
    ID of the resource.
    CmdTemplateIdSets List<double>
    Associated high-risk command template ID set.
    DepartmentId string
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    DeviceGroupIdSets List<double>
    Associated asset group ID set.
    DeviceIdSets List<double>
    Associated asset ID set.
    MaxAccessCredentialDuration double
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    MaxFileDownSize double
    File transfer download size limit (reserved parameter, not currently used).
    MaxFileUpSize double
    File transfer upload size limit (reserved parameter, not currently used).
    Name string
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    UserGroupIdSets List<double>
    Associated user group ID set.
    UserIdSets List<double>
    Associated user ID set.
    ValidateFrom string
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    ValidateTo string
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    AllowAnyAccount bool
    Whether to allow any account to log in.
    AllowDiskRedirect bool
    Whether to enable disk mapping.
    AcTemplateIdSets []string
    Associated high-risk DB template ID set.
    AccountSets []string
    Associated account set.
    AllowAccessCredential bool
    Whether to allow the use of access credentials. Default is allowed.
    AllowClipFileDown bool
    Whether to enable clipboard file download.
    AllowClipFileUp bool
    Whether to enable clipboard file upload.
    AllowClipTextDown bool
    Whether to enable clipboard text (including images) download.
    AllowClipTextUp bool
    Whether to enable clipboard text (including images) upload.
    AllowDiskFileDown bool
    Whether to enable RDP disk mapping file download.
    AllowDiskFileUp bool
    Whether to enable RDP disk mapping file upload.
    AllowFileDel bool
    Whether to enable SFTP file deletion.
    AllowFileDown bool
    Whether to enable SFTP file download.
    AllowFileUp bool
    Whether to enable SFTP file upload.
    AllowKeyboardLogger bool
    Whether to allow keyboard logging.
    AllowShellFileDown bool
    Whether to enable rz sz file download.
    AllowShellFileUp bool
    Whether to enable rz sz file upload.
    AppAssetIdSets []float64
    Associated application asset ID set.
    BhAclId string
    ID of the resource.
    CmdTemplateIdSets []float64
    Associated high-risk command template ID set.
    DepartmentId string
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    DeviceGroupIdSets []float64
    Associated asset group ID set.
    DeviceIdSets []float64
    Associated asset ID set.
    MaxAccessCredentialDuration float64
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    MaxFileDownSize float64
    File transfer download size limit (reserved parameter, not currently used).
    MaxFileUpSize float64
    File transfer upload size limit (reserved parameter, not currently used).
    Name string
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    UserGroupIdSets []float64
    Associated user group ID set.
    UserIdSets []float64
    Associated user ID set.
    ValidateFrom string
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    ValidateTo string
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    allowAnyAccount Boolean
    Whether to allow any account to log in.
    allowDiskRedirect Boolean
    Whether to enable disk mapping.
    acTemplateIdSets List<String>
    Associated high-risk DB template ID set.
    accountSets List<String>
    Associated account set.
    allowAccessCredential Boolean
    Whether to allow the use of access credentials. Default is allowed.
    allowClipFileDown Boolean
    Whether to enable clipboard file download.
    allowClipFileUp Boolean
    Whether to enable clipboard file upload.
    allowClipTextDown Boolean
    Whether to enable clipboard text (including images) download.
    allowClipTextUp Boolean
    Whether to enable clipboard text (including images) upload.
    allowDiskFileDown Boolean
    Whether to enable RDP disk mapping file download.
    allowDiskFileUp Boolean
    Whether to enable RDP disk mapping file upload.
    allowFileDel Boolean
    Whether to enable SFTP file deletion.
    allowFileDown Boolean
    Whether to enable SFTP file download.
    allowFileUp Boolean
    Whether to enable SFTP file upload.
    allowKeyboardLogger Boolean
    Whether to allow keyboard logging.
    allowShellFileDown Boolean
    Whether to enable rz sz file download.
    allowShellFileUp Boolean
    Whether to enable rz sz file upload.
    appAssetIdSets List<Double>
    Associated application asset ID set.
    bhAclId String
    ID of the resource.
    cmdTemplateIdSets List<Double>
    Associated high-risk command template ID set.
    departmentId String
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    deviceGroupIdSets List<Double>
    Associated asset group ID set.
    deviceIdSets List<Double>
    Associated asset ID set.
    maxAccessCredentialDuration Double
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    maxFileDownSize Double
    File transfer download size limit (reserved parameter, not currently used).
    maxFileUpSize Double
    File transfer upload size limit (reserved parameter, not currently used).
    name String
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    userGroupIdSets List<Double>
    Associated user group ID set.
    userIdSets List<Double>
    Associated user ID set.
    validateFrom String
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    validateTo String
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    allowAnyAccount boolean
    Whether to allow any account to log in.
    allowDiskRedirect boolean
    Whether to enable disk mapping.
    acTemplateIdSets string[]
    Associated high-risk DB template ID set.
    accountSets string[]
    Associated account set.
    allowAccessCredential boolean
    Whether to allow the use of access credentials. Default is allowed.
    allowClipFileDown boolean
    Whether to enable clipboard file download.
    allowClipFileUp boolean
    Whether to enable clipboard file upload.
    allowClipTextDown boolean
    Whether to enable clipboard text (including images) download.
    allowClipTextUp boolean
    Whether to enable clipboard text (including images) upload.
    allowDiskFileDown boolean
    Whether to enable RDP disk mapping file download.
    allowDiskFileUp boolean
    Whether to enable RDP disk mapping file upload.
    allowFileDel boolean
    Whether to enable SFTP file deletion.
    allowFileDown boolean
    Whether to enable SFTP file download.
    allowFileUp boolean
    Whether to enable SFTP file upload.
    allowKeyboardLogger boolean
    Whether to allow keyboard logging.
    allowShellFileDown boolean
    Whether to enable rz sz file download.
    allowShellFileUp boolean
    Whether to enable rz sz file upload.
    appAssetIdSets number[]
    Associated application asset ID set.
    bhAclId string
    ID of the resource.
    cmdTemplateIdSets number[]
    Associated high-risk command template ID set.
    departmentId string
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    deviceGroupIdSets number[]
    Associated asset group ID set.
    deviceIdSets number[]
    Associated asset ID set.
    maxAccessCredentialDuration number
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    maxFileDownSize number
    File transfer download size limit (reserved parameter, not currently used).
    maxFileUpSize number
    File transfer upload size limit (reserved parameter, not currently used).
    name string
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    userGroupIdSets number[]
    Associated user group ID set.
    userIdSets number[]
    Associated user ID set.
    validateFrom string
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    validateTo string
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    allow_any_account bool
    Whether to allow any account to log in.
    allow_disk_redirect bool
    Whether to enable disk mapping.
    ac_template_id_sets Sequence[str]
    Associated high-risk DB template ID set.
    account_sets Sequence[str]
    Associated account set.
    allow_access_credential bool
    Whether to allow the use of access credentials. Default is allowed.
    allow_clip_file_down bool
    Whether to enable clipboard file download.
    allow_clip_file_up bool
    Whether to enable clipboard file upload.
    allow_clip_text_down bool
    Whether to enable clipboard text (including images) download.
    allow_clip_text_up bool
    Whether to enable clipboard text (including images) upload.
    allow_disk_file_down bool
    Whether to enable RDP disk mapping file download.
    allow_disk_file_up bool
    Whether to enable RDP disk mapping file upload.
    allow_file_del bool
    Whether to enable SFTP file deletion.
    allow_file_down bool
    Whether to enable SFTP file download.
    allow_file_up bool
    Whether to enable SFTP file upload.
    allow_keyboard_logger bool
    Whether to allow keyboard logging.
    allow_shell_file_down bool
    Whether to enable rz sz file download.
    allow_shell_file_up bool
    Whether to enable rz sz file upload.
    app_asset_id_sets Sequence[float]
    Associated application asset ID set.
    bh_acl_id str
    ID of the resource.
    cmd_template_id_sets Sequence[float]
    Associated high-risk command template ID set.
    department_id str
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    device_group_id_sets Sequence[float]
    Associated asset group ID set.
    device_id_sets Sequence[float]
    Associated asset ID set.
    max_access_credential_duration float
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    max_file_down_size float
    File transfer download size limit (reserved parameter, not currently used).
    max_file_up_size float
    File transfer upload size limit (reserved parameter, not currently used).
    name str
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    user_group_id_sets Sequence[float]
    Associated user group ID set.
    user_id_sets Sequence[float]
    Associated user ID set.
    validate_from str
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    validate_to str
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    allowAnyAccount Boolean
    Whether to allow any account to log in.
    allowDiskRedirect Boolean
    Whether to enable disk mapping.
    acTemplateIdSets List<String>
    Associated high-risk DB template ID set.
    accountSets List<String>
    Associated account set.
    allowAccessCredential Boolean
    Whether to allow the use of access credentials. Default is allowed.
    allowClipFileDown Boolean
    Whether to enable clipboard file download.
    allowClipFileUp Boolean
    Whether to enable clipboard file upload.
    allowClipTextDown Boolean
    Whether to enable clipboard text (including images) download.
    allowClipTextUp Boolean
    Whether to enable clipboard text (including images) upload.
    allowDiskFileDown Boolean
    Whether to enable RDP disk mapping file download.
    allowDiskFileUp Boolean
    Whether to enable RDP disk mapping file upload.
    allowFileDel Boolean
    Whether to enable SFTP file deletion.
    allowFileDown Boolean
    Whether to enable SFTP file download.
    allowFileUp Boolean
    Whether to enable SFTP file upload.
    allowKeyboardLogger Boolean
    Whether to allow keyboard logging.
    allowShellFileDown Boolean
    Whether to enable rz sz file download.
    allowShellFileUp Boolean
    Whether to enable rz sz file upload.
    appAssetIdSets List<Number>
    Associated application asset ID set.
    bhAclId String
    ID of the resource.
    cmdTemplateIdSets List<Number>
    Associated high-risk command template ID set.
    departmentId String
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    deviceGroupIdSets List<Number>
    Associated asset group ID set.
    deviceIdSets List<Number>
    Associated asset ID set.
    maxAccessCredentialDuration Number
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    maxFileDownSize Number
    File transfer download size limit (reserved parameter, not currently used).
    maxFileUpSize Number
    File transfer upload size limit (reserved parameter, not currently used).
    name String
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    userGroupIdSets List<Number>
    Associated user group ID set.
    userIdSets List<Number>
    Associated user ID set.
    validateFrom String
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    validateTo String
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the BhAcl resource produces the following output properties:

    AclId double
    Access permission ID.
    Id string
    The provider-assigned unique ID for this managed resource.
    AclId float64
    Access permission ID.
    Id string
    The provider-assigned unique ID for this managed resource.
    aclId Double
    Access permission ID.
    id String
    The provider-assigned unique ID for this managed resource.
    aclId number
    Access permission ID.
    id string
    The provider-assigned unique ID for this managed resource.
    acl_id float
    Access permission ID.
    id str
    The provider-assigned unique ID for this managed resource.
    aclId Number
    Access permission ID.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing BhAcl Resource

    Get an existing BhAcl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: BhAclState, opts?: CustomResourceOptions): BhAcl
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        ac_template_id_sets: Optional[Sequence[str]] = None,
        account_sets: Optional[Sequence[str]] = None,
        acl_id: Optional[float] = None,
        allow_access_credential: Optional[bool] = None,
        allow_any_account: Optional[bool] = None,
        allow_clip_file_down: Optional[bool] = None,
        allow_clip_file_up: Optional[bool] = None,
        allow_clip_text_down: Optional[bool] = None,
        allow_clip_text_up: Optional[bool] = None,
        allow_disk_file_down: Optional[bool] = None,
        allow_disk_file_up: Optional[bool] = None,
        allow_disk_redirect: Optional[bool] = None,
        allow_file_del: Optional[bool] = None,
        allow_file_down: Optional[bool] = None,
        allow_file_up: Optional[bool] = None,
        allow_keyboard_logger: Optional[bool] = None,
        allow_shell_file_down: Optional[bool] = None,
        allow_shell_file_up: Optional[bool] = None,
        app_asset_id_sets: Optional[Sequence[float]] = None,
        bh_acl_id: Optional[str] = None,
        cmd_template_id_sets: Optional[Sequence[float]] = None,
        department_id: Optional[str] = None,
        device_group_id_sets: Optional[Sequence[float]] = None,
        device_id_sets: Optional[Sequence[float]] = None,
        max_access_credential_duration: Optional[float] = None,
        max_file_down_size: Optional[float] = None,
        max_file_up_size: Optional[float] = None,
        name: Optional[str] = None,
        user_group_id_sets: Optional[Sequence[float]] = None,
        user_id_sets: Optional[Sequence[float]] = None,
        validate_from: Optional[str] = None,
        validate_to: Optional[str] = None) -> BhAcl
    func GetBhAcl(ctx *Context, name string, id IDInput, state *BhAclState, opts ...ResourceOption) (*BhAcl, error)
    public static BhAcl Get(string name, Input<string> id, BhAclState? state, CustomResourceOptions? opts = null)
    public static BhAcl get(String name, Output<String> id, BhAclState state, CustomResourceOptions options)
    resources:  _:    type: tencentcloud:BhAcl    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AcTemplateIdSets List<string>
    Associated high-risk DB template ID set.
    AccountSets List<string>
    Associated account set.
    AclId double
    Access permission ID.
    AllowAccessCredential bool
    Whether to allow the use of access credentials. Default is allowed.
    AllowAnyAccount bool
    Whether to allow any account to log in.
    AllowClipFileDown bool
    Whether to enable clipboard file download.
    AllowClipFileUp bool
    Whether to enable clipboard file upload.
    AllowClipTextDown bool
    Whether to enable clipboard text (including images) download.
    AllowClipTextUp bool
    Whether to enable clipboard text (including images) upload.
    AllowDiskFileDown bool
    Whether to enable RDP disk mapping file download.
    AllowDiskFileUp bool
    Whether to enable RDP disk mapping file upload.
    AllowDiskRedirect bool
    Whether to enable disk mapping.
    AllowFileDel bool
    Whether to enable SFTP file deletion.
    AllowFileDown bool
    Whether to enable SFTP file download.
    AllowFileUp bool
    Whether to enable SFTP file upload.
    AllowKeyboardLogger bool
    Whether to allow keyboard logging.
    AllowShellFileDown bool
    Whether to enable rz sz file download.
    AllowShellFileUp bool
    Whether to enable rz sz file upload.
    AppAssetIdSets List<double>
    Associated application asset ID set.
    BhAclId string
    ID of the resource.
    CmdTemplateIdSets List<double>
    Associated high-risk command template ID set.
    DepartmentId string
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    DeviceGroupIdSets List<double>
    Associated asset group ID set.
    DeviceIdSets List<double>
    Associated asset ID set.
    MaxAccessCredentialDuration double
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    MaxFileDownSize double
    File transfer download size limit (reserved parameter, not currently used).
    MaxFileUpSize double
    File transfer upload size limit (reserved parameter, not currently used).
    Name string
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    UserGroupIdSets List<double>
    Associated user group ID set.
    UserIdSets List<double>
    Associated user ID set.
    ValidateFrom string
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    ValidateTo string
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    AcTemplateIdSets []string
    Associated high-risk DB template ID set.
    AccountSets []string
    Associated account set.
    AclId float64
    Access permission ID.
    AllowAccessCredential bool
    Whether to allow the use of access credentials. Default is allowed.
    AllowAnyAccount bool
    Whether to allow any account to log in.
    AllowClipFileDown bool
    Whether to enable clipboard file download.
    AllowClipFileUp bool
    Whether to enable clipboard file upload.
    AllowClipTextDown bool
    Whether to enable clipboard text (including images) download.
    AllowClipTextUp bool
    Whether to enable clipboard text (including images) upload.
    AllowDiskFileDown bool
    Whether to enable RDP disk mapping file download.
    AllowDiskFileUp bool
    Whether to enable RDP disk mapping file upload.
    AllowDiskRedirect bool
    Whether to enable disk mapping.
    AllowFileDel bool
    Whether to enable SFTP file deletion.
    AllowFileDown bool
    Whether to enable SFTP file download.
    AllowFileUp bool
    Whether to enable SFTP file upload.
    AllowKeyboardLogger bool
    Whether to allow keyboard logging.
    AllowShellFileDown bool
    Whether to enable rz sz file download.
    AllowShellFileUp bool
    Whether to enable rz sz file upload.
    AppAssetIdSets []float64
    Associated application asset ID set.
    BhAclId string
    ID of the resource.
    CmdTemplateIdSets []float64
    Associated high-risk command template ID set.
    DepartmentId string
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    DeviceGroupIdSets []float64
    Associated asset group ID set.
    DeviceIdSets []float64
    Associated asset ID set.
    MaxAccessCredentialDuration float64
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    MaxFileDownSize float64
    File transfer download size limit (reserved parameter, not currently used).
    MaxFileUpSize float64
    File transfer upload size limit (reserved parameter, not currently used).
    Name string
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    UserGroupIdSets []float64
    Associated user group ID set.
    UserIdSets []float64
    Associated user ID set.
    ValidateFrom string
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    ValidateTo string
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    acTemplateIdSets List<String>
    Associated high-risk DB template ID set.
    accountSets List<String>
    Associated account set.
    aclId Double
    Access permission ID.
    allowAccessCredential Boolean
    Whether to allow the use of access credentials. Default is allowed.
    allowAnyAccount Boolean
    Whether to allow any account to log in.
    allowClipFileDown Boolean
    Whether to enable clipboard file download.
    allowClipFileUp Boolean
    Whether to enable clipboard file upload.
    allowClipTextDown Boolean
    Whether to enable clipboard text (including images) download.
    allowClipTextUp Boolean
    Whether to enable clipboard text (including images) upload.
    allowDiskFileDown Boolean
    Whether to enable RDP disk mapping file download.
    allowDiskFileUp Boolean
    Whether to enable RDP disk mapping file upload.
    allowDiskRedirect Boolean
    Whether to enable disk mapping.
    allowFileDel Boolean
    Whether to enable SFTP file deletion.
    allowFileDown Boolean
    Whether to enable SFTP file download.
    allowFileUp Boolean
    Whether to enable SFTP file upload.
    allowKeyboardLogger Boolean
    Whether to allow keyboard logging.
    allowShellFileDown Boolean
    Whether to enable rz sz file download.
    allowShellFileUp Boolean
    Whether to enable rz sz file upload.
    appAssetIdSets List<Double>
    Associated application asset ID set.
    bhAclId String
    ID of the resource.
    cmdTemplateIdSets List<Double>
    Associated high-risk command template ID set.
    departmentId String
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    deviceGroupIdSets List<Double>
    Associated asset group ID set.
    deviceIdSets List<Double>
    Associated asset ID set.
    maxAccessCredentialDuration Double
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    maxFileDownSize Double
    File transfer download size limit (reserved parameter, not currently used).
    maxFileUpSize Double
    File transfer upload size limit (reserved parameter, not currently used).
    name String
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    userGroupIdSets List<Double>
    Associated user group ID set.
    userIdSets List<Double>
    Associated user ID set.
    validateFrom String
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    validateTo String
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    acTemplateIdSets string[]
    Associated high-risk DB template ID set.
    accountSets string[]
    Associated account set.
    aclId number
    Access permission ID.
    allowAccessCredential boolean
    Whether to allow the use of access credentials. Default is allowed.
    allowAnyAccount boolean
    Whether to allow any account to log in.
    allowClipFileDown boolean
    Whether to enable clipboard file download.
    allowClipFileUp boolean
    Whether to enable clipboard file upload.
    allowClipTextDown boolean
    Whether to enable clipboard text (including images) download.
    allowClipTextUp boolean
    Whether to enable clipboard text (including images) upload.
    allowDiskFileDown boolean
    Whether to enable RDP disk mapping file download.
    allowDiskFileUp boolean
    Whether to enable RDP disk mapping file upload.
    allowDiskRedirect boolean
    Whether to enable disk mapping.
    allowFileDel boolean
    Whether to enable SFTP file deletion.
    allowFileDown boolean
    Whether to enable SFTP file download.
    allowFileUp boolean
    Whether to enable SFTP file upload.
    allowKeyboardLogger boolean
    Whether to allow keyboard logging.
    allowShellFileDown boolean
    Whether to enable rz sz file download.
    allowShellFileUp boolean
    Whether to enable rz sz file upload.
    appAssetIdSets number[]
    Associated application asset ID set.
    bhAclId string
    ID of the resource.
    cmdTemplateIdSets number[]
    Associated high-risk command template ID set.
    departmentId string
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    deviceGroupIdSets number[]
    Associated asset group ID set.
    deviceIdSets number[]
    Associated asset ID set.
    maxAccessCredentialDuration number
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    maxFileDownSize number
    File transfer download size limit (reserved parameter, not currently used).
    maxFileUpSize number
    File transfer upload size limit (reserved parameter, not currently used).
    name string
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    userGroupIdSets number[]
    Associated user group ID set.
    userIdSets number[]
    Associated user ID set.
    validateFrom string
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    validateTo string
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    ac_template_id_sets Sequence[str]
    Associated high-risk DB template ID set.
    account_sets Sequence[str]
    Associated account set.
    acl_id float
    Access permission ID.
    allow_access_credential bool
    Whether to allow the use of access credentials. Default is allowed.
    allow_any_account bool
    Whether to allow any account to log in.
    allow_clip_file_down bool
    Whether to enable clipboard file download.
    allow_clip_file_up bool
    Whether to enable clipboard file upload.
    allow_clip_text_down bool
    Whether to enable clipboard text (including images) download.
    allow_clip_text_up bool
    Whether to enable clipboard text (including images) upload.
    allow_disk_file_down bool
    Whether to enable RDP disk mapping file download.
    allow_disk_file_up bool
    Whether to enable RDP disk mapping file upload.
    allow_disk_redirect bool
    Whether to enable disk mapping.
    allow_file_del bool
    Whether to enable SFTP file deletion.
    allow_file_down bool
    Whether to enable SFTP file download.
    allow_file_up bool
    Whether to enable SFTP file upload.
    allow_keyboard_logger bool
    Whether to allow keyboard logging.
    allow_shell_file_down bool
    Whether to enable rz sz file download.
    allow_shell_file_up bool
    Whether to enable rz sz file upload.
    app_asset_id_sets Sequence[float]
    Associated application asset ID set.
    bh_acl_id str
    ID of the resource.
    cmd_template_id_sets Sequence[float]
    Associated high-risk command template ID set.
    department_id str
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    device_group_id_sets Sequence[float]
    Associated asset group ID set.
    device_id_sets Sequence[float]
    Associated asset ID set.
    max_access_credential_duration float
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    max_file_down_size float
    File transfer download size limit (reserved parameter, not currently used).
    max_file_up_size float
    File transfer upload size limit (reserved parameter, not currently used).
    name str
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    user_group_id_sets Sequence[float]
    Associated user group ID set.
    user_id_sets Sequence[float]
    Associated user ID set.
    validate_from str
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    validate_to str
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.
    acTemplateIdSets List<String>
    Associated high-risk DB template ID set.
    accountSets List<String>
    Associated account set.
    aclId Number
    Access permission ID.
    allowAccessCredential Boolean
    Whether to allow the use of access credentials. Default is allowed.
    allowAnyAccount Boolean
    Whether to allow any account to log in.
    allowClipFileDown Boolean
    Whether to enable clipboard file download.
    allowClipFileUp Boolean
    Whether to enable clipboard file upload.
    allowClipTextDown Boolean
    Whether to enable clipboard text (including images) download.
    allowClipTextUp Boolean
    Whether to enable clipboard text (including images) upload.
    allowDiskFileDown Boolean
    Whether to enable RDP disk mapping file download.
    allowDiskFileUp Boolean
    Whether to enable RDP disk mapping file upload.
    allowDiskRedirect Boolean
    Whether to enable disk mapping.
    allowFileDel Boolean
    Whether to enable SFTP file deletion.
    allowFileDown Boolean
    Whether to enable SFTP file download.
    allowFileUp Boolean
    Whether to enable SFTP file upload.
    allowKeyboardLogger Boolean
    Whether to allow keyboard logging.
    allowShellFileDown Boolean
    Whether to enable rz sz file download.
    allowShellFileUp Boolean
    Whether to enable rz sz file upload.
    appAssetIdSets List<Number>
    Associated application asset ID set.
    bhAclId String
    ID of the resource.
    cmdTemplateIdSets List<Number>
    Associated high-risk command template ID set.
    departmentId String
    Department ID to which the access permission belongs, e.g.: 1.2.3.
    deviceGroupIdSets List<Number>
    Associated asset group ID set.
    deviceIdSets List<Number>
    Associated asset ID set.
    maxAccessCredentialDuration Number
    Maximum validity period of access credentials (in seconds). Must be a multiple of 86400 when access credentials are enabled.
    maxFileDownSize Number
    File transfer download size limit (reserved parameter, not currently used).
    maxFileUpSize Number
    File transfer upload size limit (reserved parameter, not currently used).
    name String
    Access permission name, maximum 32 characters, cannot contain whitespace characters.
    userGroupIdSets List<Number>
    Associated user group ID set.
    userIdSets List<Number>
    Associated user ID set.
    validateFrom String
    Access permission effective time in ISO8601 format, e.g.: 2021-09-22T00:00:00+00:00. If not set, the permission is permanently valid.
    validateTo String
    Access permission expiration time in ISO8601 format, e.g.: 2021-09-23T00:00:00+00:00. If not set, the permission is permanently valid.

    Import

    BH acl can be imported using the id, e.g.

    $ pulumi import tencentcloud:index/bhAcl:BhAcl example 1374

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    tencentcloud tencentcloudstack/terraform-provider-tencentcloud
    License
    Notes
    This Pulumi package is based on the tencentcloud Terraform Provider.
    Viewing docs for tencentcloud 1.82.85
    published on Friday, Apr 10, 2026 by tencentcloudstack
    Schema (JSON)
    tencentcloudstack/terraform-provider-tencentcloud
      Try Pulumi Cloud free. Your team will thank you.