published on Friday, Nov 6, 2026 by tencentcloudstack
published on Friday, Nov 6, 2026 by tencentcloudstack
Provides a resource to create a FWM security group rule.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.FwmSecurityGroupRule("example", {
groupId: "fwmrg-ghlu11dv",
ipVersion: "ipv4",
sourceType: "net",
sourceContent: "0.0.0.0/0",
destType: "net",
destContent: "0.0.0.0/0",
protocol: "ANY",
port: "-1/-1",
ruleAction: "drop",
scope: "SG",
protocolPortType: 0,
description: "remark.",
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.FwmSecurityGroupRule("example",
group_id="fwmrg-ghlu11dv",
ip_version="ipv4",
source_type="net",
source_content="0.0.0.0/0",
dest_type="net",
dest_content="0.0.0.0/0",
protocol="ANY",
port="-1/-1",
rule_action="drop",
scope="SG",
protocol_port_type=0,
description="remark.")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewFwmSecurityGroupRule(ctx, "example", &tencentcloud.FwmSecurityGroupRuleArgs{
GroupId: pulumi.String("fwmrg-ghlu11dv"),
IpVersion: pulumi.String("ipv4"),
SourceType: pulumi.String("net"),
SourceContent: pulumi.String("0.0.0.0/0"),
DestType: pulumi.String("net"),
DestContent: pulumi.String("0.0.0.0/0"),
Protocol: pulumi.String("ANY"),
Port: pulumi.String("-1/-1"),
RuleAction: pulumi.String("drop"),
Scope: pulumi.String("SG"),
ProtocolPortType: pulumi.Float64(0),
Description: pulumi.String("remark."),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.FwmSecurityGroupRule("example", new()
{
GroupId = "fwmrg-ghlu11dv",
IpVersion = "ipv4",
SourceType = "net",
SourceContent = "0.0.0.0/0",
DestType = "net",
DestContent = "0.0.0.0/0",
Protocol = "ANY",
Port = "-1/-1",
RuleAction = "drop",
Scope = "SG",
ProtocolPortType = 0,
Description = "remark.",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.FwmSecurityGroupRule;
import com.pulumi.tencentcloud.FwmSecurityGroupRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new FwmSecurityGroupRule("example", FwmSecurityGroupRuleArgs.builder()
.groupId("fwmrg-ghlu11dv")
.ipVersion("ipv4")
.sourceType("net")
.sourceContent("0.0.0.0/0")
.destType("net")
.destContent("0.0.0.0/0")
.protocol("ANY")
.port("-1/-1")
.ruleAction("drop")
.scope("SG")
.protocolPortType(0.0)
.description("remark.")
.build());
}
}
resources:
example:
type: tencentcloud:FwmSecurityGroupRule
properties:
groupId: fwmrg-ghlu11dv
ipVersion: ipv4
sourceType: net
sourceContent: 0.0.0.0/0
destType: net
destContent: 0.0.0.0/0
protocol: ANY
port: -1/-1
ruleAction: drop
scope: SG
protocolPortType: 0
description: remark.
Example coming soon!
API Reference
This resource interacts with the following TencentCloud APIs:
- Create: CreateSecurityGroupRule
- Read: DescribeSecurityGroupRules
- Update: ModifySecurityGroupRule
- Delete: DeleteSecurityGroupRule
Create FwmSecurityGroupRule Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new FwmSecurityGroupRule(name: string, args: FwmSecurityGroupRuleArgs, opts?: CustomResourceOptions);@overload
def FwmSecurityGroupRule(resource_name: str,
args: FwmSecurityGroupRuleArgs,
opts: Optional[ResourceOptions] = None)
@overload
def FwmSecurityGroupRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
ip_version: Optional[str] = None,
port: Optional[str] = None,
dest_content: Optional[str] = None,
dest_type: Optional[str] = None,
source_type: Optional[str] = None,
group_id: Optional[str] = None,
source_content: Optional[str] = None,
rule_action: Optional[str] = None,
protocol: Optional[str] = None,
protocol_port_type: Optional[float] = None,
belong_member_id: Optional[str] = None,
scope: Optional[str] = None,
service_template_id: Optional[str] = None,
description: Optional[str] = None,
fwm_security_group_rule_id: Optional[str] = None)func NewFwmSecurityGroupRule(ctx *Context, name string, args FwmSecurityGroupRuleArgs, opts ...ResourceOption) (*FwmSecurityGroupRule, error)public FwmSecurityGroupRule(string name, FwmSecurityGroupRuleArgs args, CustomResourceOptions? opts = null)
public FwmSecurityGroupRule(String name, FwmSecurityGroupRuleArgs args)
public FwmSecurityGroupRule(String name, FwmSecurityGroupRuleArgs args, CustomResourceOptions options)
type: tencentcloud:FwmSecurityGroupRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "tencentcloud_fwm_security_group_rule" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args FwmSecurityGroupRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FwmSecurityGroupRuleArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FwmSecurityGroupRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FwmSecurityGroupRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FwmSecurityGroupRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
FwmSecurityGroupRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The FwmSecurityGroupRule resource accepts the following input properties:
- Dest
Content string - Destination content, such as IP, CIDR or instance ID.
- Dest
Type string - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- Group
Id string - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- Ip
Version string - IP version: ipv4, ipv6.
- Port string
- Port, such as 80, 1-65535 or ALL.
- Protocol string
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- Rule
Action string - Rule action: accept, drop, log.
- Source
Content string - Source content, such as IP, CIDR or instance ID.
- Source
Type string - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- Belong
Member stringId - ID of the member account that the rule belongs to.
- Description string
- Rule description.
- Fwm
Security stringGroup Rule Id - ID of the resource.
- Protocol
Port doubleType - Protocol port type.
- Scope string
- Rule effective scope: SG, LH.
- Service
Template stringId - Service template ID.
- Dest
Content string - Destination content, such as IP, CIDR or instance ID.
- Dest
Type string - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- Group
Id string - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- Ip
Version string - IP version: ipv4, ipv6.
- Port string
- Port, such as 80, 1-65535 or ALL.
- Protocol string
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- Rule
Action string - Rule action: accept, drop, log.
- Source
Content string - Source content, such as IP, CIDR or instance ID.
- Source
Type string - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- Belong
Member stringId - ID of the member account that the rule belongs to.
- Description string
- Rule description.
- Fwm
Security stringGroup Rule Id - ID of the resource.
- Protocol
Port float64Type - Protocol port type.
- Scope string
- Rule effective scope: SG, LH.
- Service
Template stringId - Service template ID.
- dest_
content string - Destination content, such as IP, CIDR or instance ID.
- dest_
type string - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- group_
id string - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip_
version string - IP version: ipv4, ipv6.
- port string
- Port, such as 80, 1-65535 or ALL.
- protocol string
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- rule_
action string - Rule action: accept, drop, log.
- source_
content string - Source content, such as IP, CIDR or instance ID.
- source_
type string - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- belong_
member_ stringid - ID of the member account that the rule belongs to.
- description string
- Rule description.
- fwm_
security_ stringgroup_ rule_ id - ID of the resource.
- protocol_
port_ numbertype - Protocol port type.
- scope string
- Rule effective scope: SG, LH.
- service_
template_ stringid - Service template ID.
- dest
Content String - Destination content, such as IP, CIDR or instance ID.
- dest
Type String - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- group
Id String - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip
Version String - IP version: ipv4, ipv6.
- port String
- Port, such as 80, 1-65535 or ALL.
- protocol String
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- rule
Action String - Rule action: accept, drop, log.
- source
Content String - Source content, such as IP, CIDR or instance ID.
- source
Type String - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- belong
Member StringId - ID of the member account that the rule belongs to.
- description String
- Rule description.
- fwm
Security StringGroup Rule Id - ID of the resource.
- protocol
Port DoubleType - Protocol port type.
- scope String
- Rule effective scope: SG, LH.
- service
Template StringId - Service template ID.
- dest
Content string - Destination content, such as IP, CIDR or instance ID.
- dest
Type string - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- group
Id string - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip
Version string - IP version: ipv4, ipv6.
- port string
- Port, such as 80, 1-65535 or ALL.
- protocol string
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- rule
Action string - Rule action: accept, drop, log.
- source
Content string - Source content, such as IP, CIDR or instance ID.
- source
Type string - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- belong
Member stringId - ID of the member account that the rule belongs to.
- description string
- Rule description.
- fwm
Security stringGroup Rule Id - ID of the resource.
- protocol
Port numberType - Protocol port type.
- scope string
- Rule effective scope: SG, LH.
- service
Template stringId - Service template ID.
- dest_
content str - Destination content, such as IP, CIDR or instance ID.
- dest_
type str - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- group_
id str - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip_
version str - IP version: ipv4, ipv6.
- port str
- Port, such as 80, 1-65535 or ALL.
- protocol str
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- rule_
action str - Rule action: accept, drop, log.
- source_
content str - Source content, such as IP, CIDR or instance ID.
- source_
type str - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- belong_
member_ strid - ID of the member account that the rule belongs to.
- description str
- Rule description.
- fwm_
security_ strgroup_ rule_ id - ID of the resource.
- protocol_
port_ floattype - Protocol port type.
- scope str
- Rule effective scope: SG, LH.
- service_
template_ strid - Service template ID.
- dest
Content String - Destination content, such as IP, CIDR or instance ID.
- dest
Type String - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- group
Id String - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip
Version String - IP version: ipv4, ipv6.
- port String
- Port, such as 80, 1-65535 or ALL.
- protocol String
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- rule
Action String - Rule action: accept, drop, log.
- source
Content String - Source content, such as IP, CIDR or instance ID.
- source
Type String - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- belong
Member StringId - ID of the member account that the rule belongs to.
- description String
- Rule description.
- fwm
Security StringGroup Rule Id - ID of the resource.
- protocol
Port NumberType - Protocol port type.
- scope String
- Rule effective scope: SG, LH.
- service
Template StringId - Service template ID.
Outputs
All input properties are implicitly available as output properties. Additionally, the FwmSecurityGroupRule resource produces the following output properties:
Look up Existing FwmSecurityGroupRule Resource
Get an existing FwmSecurityGroupRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: FwmSecurityGroupRuleState, opts?: CustomResourceOptions): FwmSecurityGroupRule@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
belong_member_id: Optional[str] = None,
description: Optional[str] = None,
dest_content: Optional[str] = None,
dest_type: Optional[str] = None,
fwm_security_group_rule_id: Optional[str] = None,
group_id: Optional[str] = None,
ip_version: Optional[str] = None,
port: Optional[str] = None,
protocol: Optional[str] = None,
protocol_port_type: Optional[float] = None,
rule_action: Optional[str] = None,
rule_id: Optional[str] = None,
scope: Optional[str] = None,
sequence: Optional[float] = None,
service_template_id: Optional[str] = None,
source_content: Optional[str] = None,
source_id: Optional[str] = None,
source_type: Optional[str] = None,
target_id: Optional[str] = None) -> FwmSecurityGroupRulefunc GetFwmSecurityGroupRule(ctx *Context, name string, id IDInput, state *FwmSecurityGroupRuleState, opts ...ResourceOption) (*FwmSecurityGroupRule, error)public static FwmSecurityGroupRule Get(string name, Input<string> id, FwmSecurityGroupRuleState? state, CustomResourceOptions? opts = null)public static FwmSecurityGroupRule get(String name, Output<String> id, FwmSecurityGroupRuleState state, CustomResourceOptions options)resources: _: type: tencentcloud:FwmSecurityGroupRule get: id: ${id}import {
to = tencentcloud_fwm_security_group_rule.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Belong
Member stringId - ID of the member account that the rule belongs to.
- Description string
- Rule description.
- Dest
Content string - Destination content, such as IP, CIDR or instance ID.
- Dest
Type string - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- Fwm
Security stringGroup Rule Id - ID of the resource.
- Group
Id string - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- Ip
Version string - IP version: ipv4, ipv6.
- Port string
- Port, such as 80, 1-65535 or ALL.
- Protocol string
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- Protocol
Port doubleType - Protocol port type.
- Rule
Action string - Rule action: accept, drop, log.
- Rule
Id string - Rule ID.
- Scope string
- Rule effective scope: SG, LH.
- Sequence double
- Priority (read-only, same source as order_index).
- Service
Template stringId - Service template ID.
- Source
Content string - Source content, such as IP, CIDR or instance ID.
- Source
Id string - Source ID.
- Source
Type string - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- Target
Id string - Destination ID.
- Belong
Member stringId - ID of the member account that the rule belongs to.
- Description string
- Rule description.
- Dest
Content string - Destination content, such as IP, CIDR or instance ID.
- Dest
Type string - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- Fwm
Security stringGroup Rule Id - ID of the resource.
- Group
Id string - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- Ip
Version string - IP version: ipv4, ipv6.
- Port string
- Port, such as 80, 1-65535 or ALL.
- Protocol string
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- Protocol
Port float64Type - Protocol port type.
- Rule
Action string - Rule action: accept, drop, log.
- Rule
Id string - Rule ID.
- Scope string
- Rule effective scope: SG, LH.
- Sequence float64
- Priority (read-only, same source as order_index).
- Service
Template stringId - Service template ID.
- Source
Content string - Source content, such as IP, CIDR or instance ID.
- Source
Id string - Source ID.
- Source
Type string - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- Target
Id string - Destination ID.
- belong_
member_ stringid - ID of the member account that the rule belongs to.
- description string
- Rule description.
- dest_
content string - Destination content, such as IP, CIDR or instance ID.
- dest_
type string - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- fwm_
security_ stringgroup_ rule_ id - ID of the resource.
- group_
id string - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip_
version string - IP version: ipv4, ipv6.
- port string
- Port, such as 80, 1-65535 or ALL.
- protocol string
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- protocol_
port_ numbertype - Protocol port type.
- rule_
action string - Rule action: accept, drop, log.
- rule_
id string - Rule ID.
- scope string
- Rule effective scope: SG, LH.
- sequence number
- Priority (read-only, same source as order_index).
- service_
template_ stringid - Service template ID.
- source_
content string - Source content, such as IP, CIDR or instance ID.
- source_
id string - Source ID.
- source_
type string - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- target_
id string - Destination ID.
- belong
Member StringId - ID of the member account that the rule belongs to.
- description String
- Rule description.
- dest
Content String - Destination content, such as IP, CIDR or instance ID.
- dest
Type String - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- fwm
Security StringGroup Rule Id - ID of the resource.
- group
Id String - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip
Version String - IP version: ipv4, ipv6.
- port String
- Port, such as 80, 1-65535 or ALL.
- protocol String
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- protocol
Port DoubleType - Protocol port type.
- rule
Action String - Rule action: accept, drop, log.
- rule
Id String - Rule ID.
- scope String
- Rule effective scope: SG, LH.
- sequence Double
- Priority (read-only, same source as order_index).
- service
Template StringId - Service template ID.
- source
Content String - Source content, such as IP, CIDR or instance ID.
- source
Id String - Source ID.
- source
Type String - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- target
Id String - Destination ID.
- belong
Member stringId - ID of the member account that the rule belongs to.
- description string
- Rule description.
- dest
Content string - Destination content, such as IP, CIDR or instance ID.
- dest
Type string - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- fwm
Security stringGroup Rule Id - ID of the resource.
- group
Id string - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip
Version string - IP version: ipv4, ipv6.
- port string
- Port, such as 80, 1-65535 or ALL.
- protocol string
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- protocol
Port numberType - Protocol port type.
- rule
Action string - Rule action: accept, drop, log.
- rule
Id string - Rule ID.
- scope string
- Rule effective scope: SG, LH.
- sequence number
- Priority (read-only, same source as order_index).
- service
Template stringId - Service template ID.
- source
Content string - Source content, such as IP, CIDR or instance ID.
- source
Id string - Source ID.
- source
Type string - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- target
Id string - Destination ID.
- belong_
member_ strid - ID of the member account that the rule belongs to.
- description str
- Rule description.
- dest_
content str - Destination content, such as IP, CIDR or instance ID.
- dest_
type str - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- fwm_
security_ strgroup_ rule_ id - ID of the resource.
- group_
id str - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip_
version str - IP version: ipv4, ipv6.
- port str
- Port, such as 80, 1-65535 or ALL.
- protocol str
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- protocol_
port_ floattype - Protocol port type.
- rule_
action str - Rule action: accept, drop, log.
- rule_
id str - Rule ID.
- scope str
- Rule effective scope: SG, LH.
- sequence float
- Priority (read-only, same source as order_index).
- service_
template_ strid - Service template ID.
- source_
content str - Source content, such as IP, CIDR or instance ID.
- source_
id str - Source ID.
- source_
type str - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- target_
id str - Destination ID.
- belong
Member StringId - ID of the member account that the rule belongs to.
- description String
- Rule description.
- dest
Content String - Destination content, such as IP, CIDR or instance ID.
- dest
Type String - Destination type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- fwm
Security StringGroup Rule Id - ID of the resource.
- group
Id String - Rule group ID, the parent rule group (Product=enterprise_sg) to which the rule belongs.
- ip
Version String - IP version: ipv4, ipv6.
- port String
- Port, such as 80, 1-65535 or ALL.
- protocol String
- Protocol: TCP, UDP, ICMP, ANY. ANY means all protocols.
- protocol
Port NumberType - Protocol port type.
- rule
Action String - Rule action: accept, drop, log.
- rule
Id String - Rule ID.
- scope String
- Rule effective scope: SG, LH.
- sequence Number
- Priority (read-only, same source as order_index).
- service
Template StringId - Service template ID.
- source
Content String - Source content, such as IP, CIDR or instance ID.
- source
Id String - Source ID.
- source
Type String - Source type: net, vpc, subnet, cvm, clb, eni, cdb, template, tag, region, resourcegroup, addressbook, instance.
- target
Id String - Destination ID.
Import
FWM security group rule can be imported using the groupId#ruleId, e.g.
$ pulumi import tencentcloud:index/fwmSecurityGroupRule:FwmSecurityGroupRule example fwmrg-ghlu11dv#a5f39ae7-2a81-4735-9027-5d6f83d814a5
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- tencentcloud tencentcloudstack/terraform-provider-tencentcloud
- License
- Notes
- This Pulumi package is based on the
tencentcloudTerraform Provider.
published on Friday, Nov 6, 2026 by tencentcloudstack