published on Friday, Nov 6, 2026 by tencentcloudstack
published on Friday, Nov 6, 2026 by tencentcloudstack
Provides a resource to create a FWM VPC ACL rule
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.FwmVpcAclRule("example", {
groupId: "fwmrg-y53zyyg7da",
edgeId: "ALL",
fwGroupId: "ALL",
sourceType: "net",
sourceContent: "0.0.0.0/0",
destType: "net",
destContent: "0.0.0.0/0",
protocol: "ANY",
port: "-1/-1",
ruleAction: "accept",
description: "remark.",
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.FwmVpcAclRule("example",
group_id="fwmrg-y53zyyg7da",
edge_id="ALL",
fw_group_id="ALL",
source_type="net",
source_content="0.0.0.0/0",
dest_type="net",
dest_content="0.0.0.0/0",
protocol="ANY",
port="-1/-1",
rule_action="accept",
description="remark.")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewFwmVpcAclRule(ctx, "example", &tencentcloud.FwmVpcAclRuleArgs{
GroupId: pulumi.String("fwmrg-y53zyyg7da"),
EdgeId: pulumi.String("ALL"),
FwGroupId: pulumi.String("ALL"),
SourceType: pulumi.String("net"),
SourceContent: pulumi.String("0.0.0.0/0"),
DestType: pulumi.String("net"),
DestContent: pulumi.String("0.0.0.0/0"),
Protocol: pulumi.String("ANY"),
Port: pulumi.String("-1/-1"),
RuleAction: pulumi.String("accept"),
Description: pulumi.String("remark."),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.FwmVpcAclRule("example", new()
{
GroupId = "fwmrg-y53zyyg7da",
EdgeId = "ALL",
FwGroupId = "ALL",
SourceType = "net",
SourceContent = "0.0.0.0/0",
DestType = "net",
DestContent = "0.0.0.0/0",
Protocol = "ANY",
Port = "-1/-1",
RuleAction = "accept",
Description = "remark.",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.FwmVpcAclRule;
import com.pulumi.tencentcloud.FwmVpcAclRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new FwmVpcAclRule("example", FwmVpcAclRuleArgs.builder()
.groupId("fwmrg-y53zyyg7da")
.edgeId("ALL")
.fwGroupId("ALL")
.sourceType("net")
.sourceContent("0.0.0.0/0")
.destType("net")
.destContent("0.0.0.0/0")
.protocol("ANY")
.port("-1/-1")
.ruleAction("accept")
.description("remark.")
.build());
}
}
resources:
example:
type: tencentcloud:FwmVpcAclRule
properties:
groupId: fwmrg-y53zyyg7da
edgeId: ALL
fwGroupId: ALL
sourceType: net
sourceContent: 0.0.0.0/0
destType: net
destContent: 0.0.0.0/0
protocol: ANY
port: -1/-1
ruleAction: accept
description: remark.
Example coming soon!
API Reference
This resource interacts with the following TencentCloud APIs:
- Create: CreateVpcAclRule
- Read: DescribeVpcAclRules
- Update: ModifyVpcAclRule
- Delete: DeleteVpcAclRule
Create FwmVpcAclRule Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new FwmVpcAclRule(name: string, args: FwmVpcAclRuleArgs, opts?: CustomResourceOptions);@overload
def FwmVpcAclRule(resource_name: str,
args: FwmVpcAclRuleArgs,
opts: Optional[ResourceOptions] = None)
@overload
def FwmVpcAclRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
protocol: Optional[str] = None,
description: Optional[str] = None,
dest_content: Optional[str] = None,
dest_type: Optional[str] = None,
edge_id: Optional[str] = None,
fw_group_id: Optional[str] = None,
source_type: Optional[str] = None,
group_id: Optional[str] = None,
source_content: Optional[str] = None,
rule_action: Optional[str] = None,
fwm_vpc_acl_rule_id: Optional[str] = None,
port: Optional[str] = None,
param_template_id: Optional[str] = None,
belong_member_id: Optional[str] = None)func NewFwmVpcAclRule(ctx *Context, name string, args FwmVpcAclRuleArgs, opts ...ResourceOption) (*FwmVpcAclRule, error)public FwmVpcAclRule(string name, FwmVpcAclRuleArgs args, CustomResourceOptions? opts = null)
public FwmVpcAclRule(String name, FwmVpcAclRuleArgs args)
public FwmVpcAclRule(String name, FwmVpcAclRuleArgs args, CustomResourceOptions options)
type: tencentcloud:FwmVpcAclRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "tencentcloud_fwm_vpc_acl_rule" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args FwmVpcAclRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FwmVpcAclRuleArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FwmVpcAclRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FwmVpcAclRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FwmVpcAclRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
FwmVpcAclRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The FwmVpcAclRule resource accepts the following input properties:
- Description string
- Rule description, required and up to 30 characters.
- Dest
Content string - Destination address content.
- Dest
Type string - Destination type: ip/url/template/instance/tag.
- Edge
Id string - Edge firewall ID: ALL or CFWS-xxx.
- Fw
Group stringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- Group
Id string - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- Protocol string
- Protocol: TCP/UDP/ICMP/ANY etc.
- Rule
Action string - Action: accept/drop/log (lowercase).
- Source
Content string - Source address content.
- Source
Type string - Source type: ip/url/template/instance/tag.
- Belong
Member stringId - Rule owner member account ID.
- Fwm
Vpc stringAcl Rule Id - ID of the resource.
- Param
Template stringId - Port template ID.
- Port string
- Port, empty for ICMP protocol.
- Description string
- Rule description, required and up to 30 characters.
- Dest
Content string - Destination address content.
- Dest
Type string - Destination type: ip/url/template/instance/tag.
- Edge
Id string - Edge firewall ID: ALL or CFWS-xxx.
- Fw
Group stringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- Group
Id string - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- Protocol string
- Protocol: TCP/UDP/ICMP/ANY etc.
- Rule
Action string - Action: accept/drop/log (lowercase).
- Source
Content string - Source address content.
- Source
Type string - Source type: ip/url/template/instance/tag.
- Belong
Member stringId - Rule owner member account ID.
- Fwm
Vpc stringAcl Rule Id - ID of the resource.
- Param
Template stringId - Port template ID.
- Port string
- Port, empty for ICMP protocol.
- description string
- Rule description, required and up to 30 characters.
- dest_
content string - Destination address content.
- dest_
type string - Destination type: ip/url/template/instance/tag.
- edge_
id string - Edge firewall ID: ALL or CFWS-xxx.
- fw_
group_ stringid - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- group_
id string - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- protocol string
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule_
action string - Action: accept/drop/log (lowercase).
- source_
content string - Source address content.
- source_
type string - Source type: ip/url/template/instance/tag.
- belong_
member_ stringid - Rule owner member account ID.
- fwm_
vpc_ stringacl_ rule_ id - ID of the resource.
- param_
template_ stringid - Port template ID.
- port string
- Port, empty for ICMP protocol.
- description String
- Rule description, required and up to 30 characters.
- dest
Content String - Destination address content.
- dest
Type String - Destination type: ip/url/template/instance/tag.
- edge
Id String - Edge firewall ID: ALL or CFWS-xxx.
- fw
Group StringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- group
Id String - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- protocol String
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule
Action String - Action: accept/drop/log (lowercase).
- source
Content String - Source address content.
- source
Type String - Source type: ip/url/template/instance/tag.
- belong
Member StringId - Rule owner member account ID.
- fwm
Vpc StringAcl Rule Id - ID of the resource.
- param
Template StringId - Port template ID.
- port String
- Port, empty for ICMP protocol.
- description string
- Rule description, required and up to 30 characters.
- dest
Content string - Destination address content.
- dest
Type string - Destination type: ip/url/template/instance/tag.
- edge
Id string - Edge firewall ID: ALL or CFWS-xxx.
- fw
Group stringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- group
Id string - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- protocol string
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule
Action string - Action: accept/drop/log (lowercase).
- source
Content string - Source address content.
- source
Type string - Source type: ip/url/template/instance/tag.
- belong
Member stringId - Rule owner member account ID.
- fwm
Vpc stringAcl Rule Id - ID of the resource.
- param
Template stringId - Port template ID.
- port string
- Port, empty for ICMP protocol.
- description str
- Rule description, required and up to 30 characters.
- dest_
content str - Destination address content.
- dest_
type str - Destination type: ip/url/template/instance/tag.
- edge_
id str - Edge firewall ID: ALL or CFWS-xxx.
- fw_
group_ strid - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- group_
id str - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- protocol str
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule_
action str - Action: accept/drop/log (lowercase).
- source_
content str - Source address content.
- source_
type str - Source type: ip/url/template/instance/tag.
- belong_
member_ strid - Rule owner member account ID.
- fwm_
vpc_ stracl_ rule_ id - ID of the resource.
- param_
template_ strid - Port template ID.
- port str
- Port, empty for ICMP protocol.
- description String
- Rule description, required and up to 30 characters.
- dest
Content String - Destination address content.
- dest
Type String - Destination type: ip/url/template/instance/tag.
- edge
Id String - Edge firewall ID: ALL or CFWS-xxx.
- fw
Group StringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- group
Id String - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- protocol String
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule
Action String - Action: accept/drop/log (lowercase).
- source
Content String - Source address content.
- source
Type String - Source type: ip/url/template/instance/tag.
- belong
Member StringId - Rule owner member account ID.
- fwm
Vpc StringAcl Rule Id - ID of the resource.
- param
Template StringId - Port template ID.
- port String
- Port, empty for ICMP protocol.
Outputs
All input properties are implicitly available as output properties. Additionally, the FwmVpcAclRule resource produces the following output properties:
Look up Existing FwmVpcAclRule Resource
Get an existing FwmVpcAclRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: FwmVpcAclRuleState, opts?: CustomResourceOptions): FwmVpcAclRule@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
belong_member_id: Optional[str] = None,
description: Optional[str] = None,
dest_content: Optional[str] = None,
dest_type: Optional[str] = None,
edge_id: Optional[str] = None,
fw_group_id: Optional[str] = None,
fwm_vpc_acl_rule_id: Optional[str] = None,
group_id: Optional[str] = None,
param_template_id: Optional[str] = None,
port: Optional[str] = None,
protocol: Optional[str] = None,
rule_action: Optional[str] = None,
rule_id: Optional[str] = None,
sequence: Optional[float] = None,
source_content: Optional[str] = None,
source_type: Optional[str] = None) -> FwmVpcAclRulefunc GetFwmVpcAclRule(ctx *Context, name string, id IDInput, state *FwmVpcAclRuleState, opts ...ResourceOption) (*FwmVpcAclRule, error)public static FwmVpcAclRule Get(string name, Input<string> id, FwmVpcAclRuleState? state, CustomResourceOptions? opts = null)public static FwmVpcAclRule get(String name, Output<String> id, FwmVpcAclRuleState state, CustomResourceOptions options)resources: _: type: tencentcloud:FwmVpcAclRule get: id: ${id}import {
to = tencentcloud_fwm_vpc_acl_rule.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Belong
Member stringId - Rule owner member account ID.
- Description string
- Rule description, required and up to 30 characters.
- Dest
Content string - Destination address content.
- Dest
Type string - Destination type: ip/url/template/instance/tag.
- Edge
Id string - Edge firewall ID: ALL or CFWS-xxx.
- Fw
Group stringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- Fwm
Vpc stringAcl Rule Id - ID of the resource.
- Group
Id string - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- Param
Template stringId - Port template ID.
- Port string
- Port, empty for ICMP protocol.
- Protocol string
- Protocol: TCP/UDP/ICMP/ANY etc.
- Rule
Action string - Action: accept/drop/log (lowercase).
- Rule
Id string - Rule ID.
- Sequence double
- Priority (read-only, same source as order_index).
- Source
Content string - Source address content.
- Source
Type string - Source type: ip/url/template/instance/tag.
- Belong
Member stringId - Rule owner member account ID.
- Description string
- Rule description, required and up to 30 characters.
- Dest
Content string - Destination address content.
- Dest
Type string - Destination type: ip/url/template/instance/tag.
- Edge
Id string - Edge firewall ID: ALL or CFWS-xxx.
- Fw
Group stringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- Fwm
Vpc stringAcl Rule Id - ID of the resource.
- Group
Id string - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- Param
Template stringId - Port template ID.
- Port string
- Port, empty for ICMP protocol.
- Protocol string
- Protocol: TCP/UDP/ICMP/ANY etc.
- Rule
Action string - Action: accept/drop/log (lowercase).
- Rule
Id string - Rule ID.
- Sequence float64
- Priority (read-only, same source as order_index).
- Source
Content string - Source address content.
- Source
Type string - Source type: ip/url/template/instance/tag.
- belong_
member_ stringid - Rule owner member account ID.
- description string
- Rule description, required and up to 30 characters.
- dest_
content string - Destination address content.
- dest_
type string - Destination type: ip/url/template/instance/tag.
- edge_
id string - Edge firewall ID: ALL or CFWS-xxx.
- fw_
group_ stringid - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- fwm_
vpc_ stringacl_ rule_ id - ID of the resource.
- group_
id string - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- param_
template_ stringid - Port template ID.
- port string
- Port, empty for ICMP protocol.
- protocol string
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule_
action string - Action: accept/drop/log (lowercase).
- rule_
id string - Rule ID.
- sequence number
- Priority (read-only, same source as order_index).
- source_
content string - Source address content.
- source_
type string - Source type: ip/url/template/instance/tag.
- belong
Member StringId - Rule owner member account ID.
- description String
- Rule description, required and up to 30 characters.
- dest
Content String - Destination address content.
- dest
Type String - Destination type: ip/url/template/instance/tag.
- edge
Id String - Edge firewall ID: ALL or CFWS-xxx.
- fw
Group StringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- fwm
Vpc StringAcl Rule Id - ID of the resource.
- group
Id String - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- param
Template StringId - Port template ID.
- port String
- Port, empty for ICMP protocol.
- protocol String
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule
Action String - Action: accept/drop/log (lowercase).
- rule
Id String - Rule ID.
- sequence Double
- Priority (read-only, same source as order_index).
- source
Content String - Source address content.
- source
Type String - Source type: ip/url/template/instance/tag.
- belong
Member stringId - Rule owner member account ID.
- description string
- Rule description, required and up to 30 characters.
- dest
Content string - Destination address content.
- dest
Type string - Destination type: ip/url/template/instance/tag.
- edge
Id string - Edge firewall ID: ALL or CFWS-xxx.
- fw
Group stringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- fwm
Vpc stringAcl Rule Id - ID of the resource.
- group
Id string - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- param
Template stringId - Port template ID.
- port string
- Port, empty for ICMP protocol.
- protocol string
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule
Action string - Action: accept/drop/log (lowercase).
- rule
Id string - Rule ID.
- sequence number
- Priority (read-only, same source as order_index).
- source
Content string - Source address content.
- source
Type string - Source type: ip/url/template/instance/tag.
- belong_
member_ strid - Rule owner member account ID.
- description str
- Rule description, required and up to 30 characters.
- dest_
content str - Destination address content.
- dest_
type str - Destination type: ip/url/template/instance/tag.
- edge_
id str - Edge firewall ID: ALL or CFWS-xxx.
- fw_
group_ strid - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- fwm_
vpc_ stracl_ rule_ id - ID of the resource.
- group_
id str - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- param_
template_ strid - Port template ID.
- port str
- Port, empty for ICMP protocol.
- protocol str
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule_
action str - Action: accept/drop/log (lowercase).
- rule_
id str - Rule ID.
- sequence float
- Priority (read-only, same source as order_index).
- source_
content str - Source address content.
- source_
type str - Source type: ip/url/template/instance/tag.
- belong
Member StringId - Rule owner member account ID.
- description String
- Rule description, required and up to 30 characters.
- dest
Content String - Destination address content.
- dest
Type String - Destination type: ip/url/template/instance/tag.
- edge
Id String - Edge firewall ID: ALL or CFWS-xxx.
- fw
Group StringId - Firewall instance ID: ALL, cfwg-xxx or ccn-xxx.
- fwm
Vpc StringAcl Rule Id - ID of the resource.
- group
Id String - Rule group ID, the parent resource reference, required by all four interfaces, immutable.
- param
Template StringId - Port template ID.
- port String
- Port, empty for ICMP protocol.
- protocol String
- Protocol: TCP/UDP/ICMP/ANY etc.
- rule
Action String - Action: accept/drop/log (lowercase).
- rule
Id String - Rule ID.
- sequence Number
- Priority (read-only, same source as order_index).
- source
Content String - Source address content.
- source
Type String - Source type: ip/url/template/instance/tag.
Import
FWM VPC ACL rule can be imported using the groupId#ruleId, e.g.
$ pulumi import tencentcloud:index/fwmVpcAclRule:FwmVpcAclRule example fwmrg-y53zyyg7da#e42a7669-cf0c-42bb-b563-7cbf399a1f0f
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- tencentcloud tencentcloudstack/terraform-provider-tencentcloud
- License
- Notes
- This Pulumi package is based on the
tencentcloudTerraform Provider.
published on Friday, Nov 6, 2026 by tencentcloudstack