published on Friday, Nov 6, 2026 by tencentcloudstack
published on Friday, Nov 6, 2026 by tencentcloudstack
Provides a resource to create a Edge ACL rule of Cloud Firewall (CFW)
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.FwmEdgeAclRule("example", {
groupId: "fwmrg-9z03vakjj8",
direction: 1,
sourceContent: "0.0.0.0/0",
sourceType: "net",
targetContent: "0.0.0.0/0",
targetType: "net",
protocol: "TCP",
port: "-1/-1",
ruleAction: "accept",
scope: "all",
description: "remark.",
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.FwmEdgeAclRule("example",
group_id="fwmrg-9z03vakjj8",
direction=1,
source_content="0.0.0.0/0",
source_type="net",
target_content="0.0.0.0/0",
target_type="net",
protocol="TCP",
port="-1/-1",
rule_action="accept",
scope="all",
description="remark.")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewFwmEdgeAclRule(ctx, "example", &tencentcloud.FwmEdgeAclRuleArgs{
GroupId: pulumi.String("fwmrg-9z03vakjj8"),
Direction: pulumi.Float64(1),
SourceContent: pulumi.String("0.0.0.0/0"),
SourceType: pulumi.String("net"),
TargetContent: pulumi.String("0.0.0.0/0"),
TargetType: pulumi.String("net"),
Protocol: pulumi.String("TCP"),
Port: pulumi.String("-1/-1"),
RuleAction: pulumi.String("accept"),
Scope: pulumi.String("all"),
Description: pulumi.String("remark."),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.FwmEdgeAclRule("example", new()
{
GroupId = "fwmrg-9z03vakjj8",
Direction = 1,
SourceContent = "0.0.0.0/0",
SourceType = "net",
TargetContent = "0.0.0.0/0",
TargetType = "net",
Protocol = "TCP",
Port = "-1/-1",
RuleAction = "accept",
Scope = "all",
Description = "remark.",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.FwmEdgeAclRule;
import com.pulumi.tencentcloud.FwmEdgeAclRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new FwmEdgeAclRule("example", FwmEdgeAclRuleArgs.builder()
.groupId("fwmrg-9z03vakjj8")
.direction(1.0)
.sourceContent("0.0.0.0/0")
.sourceType("net")
.targetContent("0.0.0.0/0")
.targetType("net")
.protocol("TCP")
.port("-1/-1")
.ruleAction("accept")
.scope("all")
.description("remark.")
.build());
}
}
resources:
example:
type: tencentcloud:FwmEdgeAclRule
properties:
groupId: fwmrg-9z03vakjj8
direction: 1
sourceContent: 0.0.0.0/0
sourceType: net
targetContent: 0.0.0.0/0
targetType: net
protocol: TCP
port: -1/-1
ruleAction: accept
scope: all
description: remark.
Example coming soon!
API Reference
This resource interacts with the following TencentCloud APIs:
- Create: CreateEdgeAclRule
- Read: DescribeEdgeAclRules
- Update: ModifyEdgeAclRule
- Delete: DeleteEdgeAclRule
Create FwmEdgeAclRule Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new FwmEdgeAclRule(name: string, args: FwmEdgeAclRuleArgs, opts?: CustomResourceOptions);@overload
def FwmEdgeAclRule(resource_name: str,
args: FwmEdgeAclRuleArgs,
opts: Optional[ResourceOptions] = None)
@overload
def FwmEdgeAclRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
direction: Optional[float] = None,
group_id: Optional[str] = None,
port: Optional[str] = None,
fwm_edge_acl_rule_id: Optional[str] = None,
description: Optional[str] = None,
param_template_id: Optional[str] = None,
belong_member_id: Optional[str] = None,
protocol: Optional[str] = None,
rule_action: Optional[str] = None,
scope: Optional[str] = None,
source_content: Optional[str] = None,
source_type: Optional[str] = None,
target_content: Optional[str] = None,
target_type: Optional[str] = None)func NewFwmEdgeAclRule(ctx *Context, name string, args FwmEdgeAclRuleArgs, opts ...ResourceOption) (*FwmEdgeAclRule, error)public FwmEdgeAclRule(string name, FwmEdgeAclRuleArgs args, CustomResourceOptions? opts = null)
public FwmEdgeAclRule(String name, FwmEdgeAclRuleArgs args)
public FwmEdgeAclRule(String name, FwmEdgeAclRuleArgs args, CustomResourceOptions options)
type: tencentcloud:FwmEdgeAclRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "tencentcloud_fwm_edge_acl_rule" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args FwmEdgeAclRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FwmEdgeAclRuleArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FwmEdgeAclRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FwmEdgeAclRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FwmEdgeAclRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
FwmEdgeAclRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The FwmEdgeAclRule resource accepts the following input properties:
- Direction double
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- Group
Id string - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- Belong
Member stringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- Description string
- Rule description, length 0-256 characters.
- Fwm
Edge stringAcl Rule Id - ID of the resource.
- Param
Template stringId - Parameter template ID.
- Port string
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- Protocol string
- Protocol type: TCP, UDP, ICMP, ANY.
- Rule
Action string - Rule action: accept-pass, drop-block, log-observe.
- Scope string
- Effective scope: serial, side, all.
- Source
Content string - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- Source
Type string - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- Target
Content string - Target address content. Format is the same as source_content.
- Target
Type string - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- Direction float64
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- Group
Id string - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- Belong
Member stringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- Description string
- Rule description, length 0-256 characters.
- Fwm
Edge stringAcl Rule Id - ID of the resource.
- Param
Template stringId - Parameter template ID.
- Port string
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- Protocol string
- Protocol type: TCP, UDP, ICMP, ANY.
- Rule
Action string - Rule action: accept-pass, drop-block, log-observe.
- Scope string
- Effective scope: serial, side, all.
- Source
Content string - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- Source
Type string - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- Target
Content string - Target address content. Format is the same as source_content.
- Target
Type string - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- direction number
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- group_
id string - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- belong_
member_ stringid - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description string
- Rule description, length 0-256 characters.
- fwm_
edge_ stringacl_ rule_ id - ID of the resource.
- param_
template_ stringid - Parameter template ID.
- port string
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol string
- Protocol type: TCP, UDP, ICMP, ANY.
- rule_
action string - Rule action: accept-pass, drop-block, log-observe.
- scope string
- Effective scope: serial, side, all.
- source_
content string - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source_
type string - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target_
content string - Target address content. Format is the same as source_content.
- target_
type string - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- direction Double
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- group
Id String - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- belong
Member StringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description String
- Rule description, length 0-256 characters.
- fwm
Edge StringAcl Rule Id - ID of the resource.
- param
Template StringId - Parameter template ID.
- port String
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol String
- Protocol type: TCP, UDP, ICMP, ANY.
- rule
Action String - Rule action: accept-pass, drop-block, log-observe.
- scope String
- Effective scope: serial, side, all.
- source
Content String - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source
Type String - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target
Content String - Target address content. Format is the same as source_content.
- target
Type String - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- direction number
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- group
Id string - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- belong
Member stringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description string
- Rule description, length 0-256 characters.
- fwm
Edge stringAcl Rule Id - ID of the resource.
- param
Template stringId - Parameter template ID.
- port string
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol string
- Protocol type: TCP, UDP, ICMP, ANY.
- rule
Action string - Rule action: accept-pass, drop-block, log-observe.
- scope string
- Effective scope: serial, side, all.
- source
Content string - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source
Type string - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target
Content string - Target address content. Format is the same as source_content.
- target
Type string - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- direction float
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- group_
id str - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- belong_
member_ strid - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description str
- Rule description, length 0-256 characters.
- fwm_
edge_ stracl_ rule_ id - ID of the resource.
- param_
template_ strid - Parameter template ID.
- port str
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol str
- Protocol type: TCP, UDP, ICMP, ANY.
- rule_
action str - Rule action: accept-pass, drop-block, log-observe.
- scope str
- Effective scope: serial, side, all.
- source_
content str - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source_
type str - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target_
content str - Target address content. Format is the same as source_content.
- target_
type str - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- direction Number
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- group
Id String - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- belong
Member StringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description String
- Rule description, length 0-256 characters.
- fwm
Edge StringAcl Rule Id - ID of the resource.
- param
Template StringId - Parameter template ID.
- port String
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol String
- Protocol type: TCP, UDP, ICMP, ANY.
- rule
Action String - Rule action: accept-pass, drop-block, log-observe.
- scope String
- Effective scope: serial, side, all.
- source
Content String - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source
Type String - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target
Content String - Target address content. Format is the same as source_content.
- target
Type String - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
Outputs
All input properties are implicitly available as output properties. Additionally, the FwmEdgeAclRule resource produces the following output properties:
Look up Existing FwmEdgeAclRule Resource
Get an existing FwmEdgeAclRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: FwmEdgeAclRuleState, opts?: CustomResourceOptions): FwmEdgeAclRule@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
belong_member_id: Optional[str] = None,
description: Optional[str] = None,
direction: Optional[float] = None,
fwm_edge_acl_rule_id: Optional[str] = None,
group_id: Optional[str] = None,
param_template_id: Optional[str] = None,
port: Optional[str] = None,
protocol: Optional[str] = None,
rule_action: Optional[str] = None,
rule_id: Optional[str] = None,
scope: Optional[str] = None,
sequence: Optional[float] = None,
source_content: Optional[str] = None,
source_type: Optional[str] = None,
target_content: Optional[str] = None,
target_type: Optional[str] = None) -> FwmEdgeAclRulefunc GetFwmEdgeAclRule(ctx *Context, name string, id IDInput, state *FwmEdgeAclRuleState, opts ...ResourceOption) (*FwmEdgeAclRule, error)public static FwmEdgeAclRule Get(string name, Input<string> id, FwmEdgeAclRuleState? state, CustomResourceOptions? opts = null)public static FwmEdgeAclRule get(String name, Output<String> id, FwmEdgeAclRuleState state, CustomResourceOptions options)resources: _: type: tencentcloud:FwmEdgeAclRule get: id: ${id}import {
to = tencentcloud_fwm_edge_acl_rule.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Belong
Member stringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- Description string
- Rule description, length 0-256 characters.
- Direction double
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- Fwm
Edge stringAcl Rule Id - ID of the resource.
- Group
Id string - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- Param
Template stringId - Parameter template ID.
- Port string
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- Protocol string
- Protocol type: TCP, UDP, ICMP, ANY.
- Rule
Action string - Rule action: accept-pass, drop-block, log-observe.
- Rule
Id string - Rule ID.
- Scope string
- Effective scope: serial, side, all.
- Sequence double
- Rule execution sequence returned by the server.
- Source
Content string - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- Source
Type string - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- Target
Content string - Target address content. Format is the same as source_content.
- Target
Type string - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- Belong
Member stringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- Description string
- Rule description, length 0-256 characters.
- Direction float64
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- Fwm
Edge stringAcl Rule Id - ID of the resource.
- Group
Id string - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- Param
Template stringId - Parameter template ID.
- Port string
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- Protocol string
- Protocol type: TCP, UDP, ICMP, ANY.
- Rule
Action string - Rule action: accept-pass, drop-block, log-observe.
- Rule
Id string - Rule ID.
- Scope string
- Effective scope: serial, side, all.
- Sequence float64
- Rule execution sequence returned by the server.
- Source
Content string - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- Source
Type string - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- Target
Content string - Target address content. Format is the same as source_content.
- Target
Type string - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- belong_
member_ stringid - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description string
- Rule description, length 0-256 characters.
- direction number
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- fwm_
edge_ stringacl_ rule_ id - ID of the resource.
- group_
id string - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- param_
template_ stringid - Parameter template ID.
- port string
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol string
- Protocol type: TCP, UDP, ICMP, ANY.
- rule_
action string - Rule action: accept-pass, drop-block, log-observe.
- rule_
id string - Rule ID.
- scope string
- Effective scope: serial, side, all.
- sequence number
- Rule execution sequence returned by the server.
- source_
content string - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source_
type string - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target_
content string - Target address content. Format is the same as source_content.
- target_
type string - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- belong
Member StringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description String
- Rule description, length 0-256 characters.
- direction Double
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- fwm
Edge StringAcl Rule Id - ID of the resource.
- group
Id String - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- param
Template StringId - Parameter template ID.
- port String
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol String
- Protocol type: TCP, UDP, ICMP, ANY.
- rule
Action String - Rule action: accept-pass, drop-block, log-observe.
- rule
Id String - Rule ID.
- scope String
- Effective scope: serial, side, all.
- sequence Double
- Rule execution sequence returned by the server.
- source
Content String - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source
Type String - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target
Content String - Target address content. Format is the same as source_content.
- target
Type String - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- belong
Member stringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description string
- Rule description, length 0-256 characters.
- direction number
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- fwm
Edge stringAcl Rule Id - ID of the resource.
- group
Id string - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- param
Template stringId - Parameter template ID.
- port string
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol string
- Protocol type: TCP, UDP, ICMP, ANY.
- rule
Action string - Rule action: accept-pass, drop-block, log-observe.
- rule
Id string - Rule ID.
- scope string
- Effective scope: serial, side, all.
- sequence number
- Rule execution sequence returned by the server.
- source
Content string - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source
Type string - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target
Content string - Target address content. Format is the same as source_content.
- target
Type string - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- belong_
member_ strid - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description str
- Rule description, length 0-256 characters.
- direction float
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- fwm_
edge_ stracl_ rule_ id - ID of the resource.
- group_
id str - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- param_
template_ strid - Parameter template ID.
- port str
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol str
- Protocol type: TCP, UDP, ICMP, ANY.
- rule_
action str - Rule action: accept-pass, drop-block, log-observe.
- rule_
id str - Rule ID.
- scope str
- Effective scope: serial, side, all.
- sequence float
- Rule execution sequence returned by the server.
- source_
content str - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source_
type str - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target_
content str - Target address content. Format is the same as source_content.
- target_
type str - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- belong
Member StringId - Member account ID that the rule belongs to (used in multi-account scenarios). Required when source_type or target_type is instance or tag.
- description String
- Rule description, length 0-256 characters.
- direction Number
- Rule direction: 0-egress, 1-ingress. Changing this will recreate the rule.
- fwm
Edge StringAcl Rule Id - ID of the resource.
- group
Id String - Edge ACL rule group ID. The rule group is the parent container and must already exist before creating the rule.
- param
Template StringId - Parameter template ID.
- port String
- Port. Supports single port, port range and comma separated multi ports, such as 80, 1-65535, 80,443,8080.
- protocol String
- Protocol type: TCP, UDP, ICMP, ANY.
- rule
Action String - Rule action: accept-pass, drop-block, log-observe.
- rule
Id String - Rule ID.
- scope String
- Effective scope: serial, side, all.
- sequence Number
- Rule execution sequence returned by the server.
- source
Content String - Source address content. Format depends on source_type: IP/CIDR for ip, domain for domain, template ID for template, instance ID list (comma separated) for instance, tag key:value for tag.
- source
Type String - Source address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
- target
Content String - Target address content. Format is the same as source_content.
- target
Type String - Target address type: ip, domain, template, instance, tag. Changing this will recreate the rule.
Import
FWM edge acl rule can be imported using the groupId#ruleId#direction, e.g.
$ pulumi import tencentcloud:index/fwmEdgeAclRule:FwmEdgeAclRule example fwmrg-9z03vakjj8#2fe0b492-5623-4646-b40e-7b0908307ca8#1
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- tencentcloud tencentcloudstack/terraform-provider-tencentcloud
- License
- Notes
- This Pulumi package is based on the
tencentcloudTerraform Provider.
published on Friday, Nov 6, 2026 by tencentcloudstack