tencentcloud.SecurityGroupRuleSet

import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";

const baseSecurityGroup = new tencentcloud.SecurityGroup("baseSecurityGroup", {description: "Testing Rule Set Security"});
const relative = new tencentcloud.SecurityGroup("relative", {description: "Used for attach security policy"});
const fooAddressTemplate = new tencentcloud.AddressTemplate("fooAddressTemplate", {addresses: [
    "10.0.0.1",
    "10.0.1.0/24",
    "10.0.0.1-10.0.0.100",
]});
const fooAddressTemplateGroup = new tencentcloud.AddressTemplateGroup("fooAddressTemplateGroup", {templateIds: [fooAddressTemplate.addressTemplateId]});
const baseSecurityGroupRuleSet = new tencentcloud.SecurityGroupRuleSet("baseSecurityGroupRuleSet", {
    securityGroupId: baseSecurityGroup.securityGroupId,
    ingresses: [
        {
            action: "ACCEPT",
            cidrBlock: "10.0.0.0/22",
            protocol: "TCP",
            port: "80-90",
            description: "A:Allow Ips and 80-90",
        },
        {
            action: "ACCEPT",
            cidrBlock: "10.0.2.1",
            protocol: "UDP",
            port: "8080",
            description: "B:Allow UDP 8080",
        },
        {
            action: "ACCEPT",
            cidrBlock: "10.0.2.1",
            protocol: "UDP",
            port: "8080",
            description: "C:Allow UDP 8080",
        },
        {
            action: "ACCEPT",
            cidrBlock: "172.18.1.2",
            protocol: "ALL",
            port: "ALL",
            description: "D:Allow ALL",
        },
        {
            action: "DROP",
            protocol: "TCP",
            port: "80",
            sourceSecurityId: relative.securityGroupId,
            description: "E:Block relative",
        },
    ],
    egresses: [
        {
            action: "DROP",
            cidrBlock: "10.0.0.0/16",
            protocol: "ICMP",
            description: "A:Block ping3",
        },
        {
            action: "DROP",
            addressTemplateId: fooAddressTemplate.addressTemplateId,
            description: "B:Allow template",
        },
        {
            action: "DROP",
            addressTemplateGroup: fooAddressTemplateGroup.addressTemplateGroupId,
            description: "C:DROP template group",
        },
    ],
});

import pulumi
import pulumi_tencentcloud as tencentcloud

base_security_group = tencentcloud.SecurityGroup("baseSecurityGroup", description="Testing Rule Set Security")
relative = tencentcloud.SecurityGroup("relative", description="Used for attach security policy")
foo_address_template = tencentcloud.AddressTemplate("fooAddressTemplate", addresses=[
    "10.0.0.1",
    "10.0.1.0/24",
    "10.0.0.1-10.0.0.100",
])
foo_address_template_group = tencentcloud.AddressTemplateGroup("fooAddressTemplateGroup", template_ids=[foo_address_template.address_template_id])
base_security_group_rule_set = tencentcloud.SecurityGroupRuleSet("baseSecurityGroupRuleSet",
    security_group_id=base_security_group.security_group_id,
    ingresses=[
        {
            "action": "ACCEPT",
            "cidr_block": "10.0.0.0/22",
            "protocol": "TCP",
            "port": "80-90",
            "description": "A:Allow Ips and 80-90",
        },
        {
            "action": "ACCEPT",
            "cidr_block": "10.0.2.1",
            "protocol": "UDP",
            "port": "8080",
            "description": "B:Allow UDP 8080",
        },
        {
            "action": "ACCEPT",
            "cidr_block": "10.0.2.1",
            "protocol": "UDP",
            "port": "8080",
            "description": "C:Allow UDP 8080",
        },
        {
            "action": "ACCEPT",
            "cidr_block": "172.18.1.2",
            "protocol": "ALL",
            "port": "ALL",
            "description": "D:Allow ALL",
        },
        {
            "action": "DROP",
            "protocol": "TCP",
            "port": "80",
            "source_security_id": relative.security_group_id,
            "description": "E:Block relative",
        },
    ],
    egresses=[
        {
            "action": "DROP",
            "cidr_block": "10.0.0.0/16",
            "protocol": "ICMP",
            "description": "A:Block ping3",
        },
        {
            "action": "DROP",
            "address_template_id": foo_address_template.address_template_id,
            "description": "B:Allow template",
        },
        {
            "action": "DROP",
            "address_template_group": foo_address_template_group.address_template_group_id,
            "description": "C:DROP template group",
        },
    ])

package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		baseSecurityGroup, err := tencentcloud.NewSecurityGroup(ctx, "baseSecurityGroup", &tencentcloud.SecurityGroupArgs{
			Description: pulumi.String("Testing Rule Set Security"),
		})
		if err != nil {
			return err
		}
		relative, err := tencentcloud.NewSecurityGroup(ctx, "relative", &tencentcloud.SecurityGroupArgs{
			Description: pulumi.String("Used for attach security policy"),
		})
		if err != nil {
			return err
		}
		fooAddressTemplate, err := tencentcloud.NewAddressTemplate(ctx, "fooAddressTemplate", &tencentcloud.AddressTemplateArgs{
			Addresses: pulumi.StringArray{
				pulumi.String("10.0.0.1"),
				pulumi.String("10.0.1.0/24"),
				pulumi.String("10.0.0.1-10.0.0.100"),
			},
		})
		if err != nil {
			return err
		}
		fooAddressTemplateGroup, err := tencentcloud.NewAddressTemplateGroup(ctx, "fooAddressTemplateGroup", &tencentcloud.AddressTemplateGroupArgs{
			TemplateIds: pulumi.StringArray{
				fooAddressTemplate.AddressTemplateId,
			},
		})
		if err != nil {
			return err
		}
		_, err = tencentcloud.NewSecurityGroupRuleSet(ctx, "baseSecurityGroupRuleSet", &tencentcloud.SecurityGroupRuleSetArgs{
			SecurityGroupId: baseSecurityGroup.SecurityGroupId,
			Ingresses: tencentcloud.SecurityGroupRuleSetIngressArray{
				&tencentcloud.SecurityGroupRuleSetIngressArgs{
					Action:      pulumi.String("ACCEPT"),
					CidrBlock:   pulumi.String("10.0.0.0/22"),
					Protocol:    pulumi.String("TCP"),
					Port:        pulumi.String("80-90"),
					Description: pulumi.String("A:Allow Ips and 80-90"),
				},
				&tencentcloud.SecurityGroupRuleSetIngressArgs{
					Action:      pulumi.String("ACCEPT"),
					CidrBlock:   pulumi.String("10.0.2.1"),
					Protocol:    pulumi.String("UDP"),
					Port:        pulumi.String("8080"),
					Description: pulumi.String("B:Allow UDP 8080"),
				},
				&tencentcloud.SecurityGroupRuleSetIngressArgs{
					Action:      pulumi.String("ACCEPT"),
					CidrBlock:   pulumi.String("10.0.2.1"),
					Protocol:    pulumi.String("UDP"),
					Port:        pulumi.String("8080"),
					Description: pulumi.String("C:Allow UDP 8080"),
				},
				&tencentcloud.SecurityGroupRuleSetIngressArgs{
					Action:      pulumi.String("ACCEPT"),
					CidrBlock:   pulumi.String("172.18.1.2"),
					Protocol:    pulumi.String("ALL"),
					Port:        pulumi.String("ALL"),
					Description: pulumi.String("D:Allow ALL"),
				},
				&tencentcloud.SecurityGroupRuleSetIngressArgs{
					Action:           pulumi.String("DROP"),
					Protocol:         pulumi.String("TCP"),
					Port:             pulumi.String("80"),
					SourceSecurityId: relative.SecurityGroupId,
					Description:      pulumi.String("E:Block relative"),
				},
			},
			Egresses: tencentcloud.SecurityGroupRuleSetEgressArray{
				&tencentcloud.SecurityGroupRuleSetEgressArgs{
					Action:      pulumi.String("DROP"),
					CidrBlock:   pulumi.String("10.0.0.0/16"),
					Protocol:    pulumi.String("ICMP"),
					Description: pulumi.String("A:Block ping3"),
				},
				&tencentcloud.SecurityGroupRuleSetEgressArgs{
					Action:            pulumi.String("DROP"),
					AddressTemplateId: fooAddressTemplate.AddressTemplateId,
					Description:       pulumi.String("B:Allow template"),
				},
				&tencentcloud.SecurityGroupRuleSetEgressArgs{
					Action:               pulumi.String("DROP"),
					AddressTemplateGroup: fooAddressTemplateGroup.AddressTemplateGroupId,
					Description:          pulumi.String("C:DROP template group"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;

return await Deployment.RunAsync(() => 
{
    var baseSecurityGroup = new Tencentcloud.SecurityGroup("baseSecurityGroup", new()
    {
        Description = "Testing Rule Set Security",
    });

    var relative = new Tencentcloud.SecurityGroup("relative", new()
    {
        Description = "Used for attach security policy",
    });

    var fooAddressTemplate = new Tencentcloud.AddressTemplate("fooAddressTemplate", new()
    {
        Addresses = new[]
        {
            "10.0.0.1",
            "10.0.1.0/24",
            "10.0.0.1-10.0.0.100",
        },
    });

    var fooAddressTemplateGroup = new Tencentcloud.AddressTemplateGroup("fooAddressTemplateGroup", new()
    {
        TemplateIds = new[]
        {
            fooAddressTemplate.AddressTemplateId,
        },
    });

    var baseSecurityGroupRuleSet = new Tencentcloud.SecurityGroupRuleSet("baseSecurityGroupRuleSet", new()
    {
        SecurityGroupId = baseSecurityGroup.SecurityGroupId,
        Ingresses = new[]
        {
            new Tencentcloud.Inputs.SecurityGroupRuleSetIngressArgs
            {
                Action = "ACCEPT",
                CidrBlock = "10.0.0.0/22",
                Protocol = "TCP",
                Port = "80-90",
                Description = "A:Allow Ips and 80-90",
            },
            new Tencentcloud.Inputs.SecurityGroupRuleSetIngressArgs
            {
                Action = "ACCEPT",
                CidrBlock = "10.0.2.1",
                Protocol = "UDP",
                Port = "8080",
                Description = "B:Allow UDP 8080",
            },
            new Tencentcloud.Inputs.SecurityGroupRuleSetIngressArgs
            {
                Action = "ACCEPT",
                CidrBlock = "10.0.2.1",
                Protocol = "UDP",
                Port = "8080",
                Description = "C:Allow UDP 8080",
            },
            new Tencentcloud.Inputs.SecurityGroupRuleSetIngressArgs
            {
                Action = "ACCEPT",
                CidrBlock = "172.18.1.2",
                Protocol = "ALL",
                Port = "ALL",
                Description = "D:Allow ALL",
            },
            new Tencentcloud.Inputs.SecurityGroupRuleSetIngressArgs
            {
                Action = "DROP",
                Protocol = "TCP",
                Port = "80",
                SourceSecurityId = relative.SecurityGroupId,
                Description = "E:Block relative",
            },
        },
        Egresses = new[]
        {
            new Tencentcloud.Inputs.SecurityGroupRuleSetEgressArgs
            {
                Action = "DROP",
                CidrBlock = "10.0.0.0/16",
                Protocol = "ICMP",
                Description = "A:Block ping3",
            },
            new Tencentcloud.Inputs.SecurityGroupRuleSetEgressArgs
            {
                Action = "DROP",
                AddressTemplateId = fooAddressTemplate.AddressTemplateId,
                Description = "B:Allow template",
            },
            new Tencentcloud.Inputs.SecurityGroupRuleSetEgressArgs
            {
                Action = "DROP",
                AddressTemplateGroup = fooAddressTemplateGroup.AddressTemplateGroupId,
                Description = "C:DROP template group",
            },
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.SecurityGroup;
import com.pulumi.tencentcloud.SecurityGroupArgs;
import com.pulumi.tencentcloud.AddressTemplate;
import com.pulumi.tencentcloud.AddressTemplateArgs;
import com.pulumi.tencentcloud.AddressTemplateGroup;
import com.pulumi.tencentcloud.AddressTemplateGroupArgs;
import com.pulumi.tencentcloud.SecurityGroupRuleSet;
import com.pulumi.tencentcloud.SecurityGroupRuleSetArgs;
import com.pulumi.tencentcloud.inputs.SecurityGroupRuleSetIngressArgs;
import com.pulumi.tencentcloud.inputs.SecurityGroupRuleSetEgressArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var baseSecurityGroup = new SecurityGroup("baseSecurityGroup", SecurityGroupArgs.builder()
            .description("Testing Rule Set Security")
            .build());

        var relative = new SecurityGroup("relative", SecurityGroupArgs.builder()
            .description("Used for attach security policy")
            .build());

        var fooAddressTemplate = new AddressTemplate("fooAddressTemplate", AddressTemplateArgs.builder()
            .addresses(            
                "10.0.0.1",
                "10.0.1.0/24",
                "10.0.0.1-10.0.0.100")
            .build());

        var fooAddressTemplateGroup = new AddressTemplateGroup("fooAddressTemplateGroup", AddressTemplateGroupArgs.builder()
            .templateIds(fooAddressTemplate.addressTemplateId())
            .build());

        var baseSecurityGroupRuleSet = new SecurityGroupRuleSet("baseSecurityGroupRuleSet", SecurityGroupRuleSetArgs.builder()
            .securityGroupId(baseSecurityGroup.securityGroupId())
            .ingresses(            
                SecurityGroupRuleSetIngressArgs.builder()
                    .action("ACCEPT")
                    .cidrBlock("10.0.0.0/22")
                    .protocol("TCP")
                    .port("80-90")
                    .description("A:Allow Ips and 80-90")
                    .build(),
                SecurityGroupRuleSetIngressArgs.builder()
                    .action("ACCEPT")
                    .cidrBlock("10.0.2.1")
                    .protocol("UDP")
                    .port("8080")
                    .description("B:Allow UDP 8080")
                    .build(),
                SecurityGroupRuleSetIngressArgs.builder()
                    .action("ACCEPT")
                    .cidrBlock("10.0.2.1")
                    .protocol("UDP")
                    .port("8080")
                    .description("C:Allow UDP 8080")
                    .build(),
                SecurityGroupRuleSetIngressArgs.builder()
                    .action("ACCEPT")
                    .cidrBlock("172.18.1.2")
                    .protocol("ALL")
                    .port("ALL")
                    .description("D:Allow ALL")
                    .build(),
                SecurityGroupRuleSetIngressArgs.builder()
                    .action("DROP")
                    .protocol("TCP")
                    .port("80")
                    .sourceSecurityId(relative.securityGroupId())
                    .description("E:Block relative")
                    .build())
            .egresses(            
                SecurityGroupRuleSetEgressArgs.builder()
                    .action("DROP")
                    .cidrBlock("10.0.0.0/16")
                    .protocol("ICMP")
                    .description("A:Block ping3")
                    .build(),
                SecurityGroupRuleSetEgressArgs.builder()
                    .action("DROP")
                    .addressTemplateId(fooAddressTemplate.addressTemplateId())
                    .description("B:Allow template")
                    .build(),
                SecurityGroupRuleSetEgressArgs.builder()
                    .action("DROP")
                    .addressTemplateGroup(fooAddressTemplateGroup.addressTemplateGroupId())
                    .description("C:DROP template group")
                    .build())
            .build());

    }
}

resources:
  baseSecurityGroup:
    type: tencentcloud:SecurityGroup
    properties:
      description: Testing Rule Set Security
  relative:
    type: tencentcloud:SecurityGroup
    properties:
      description: Used for attach security policy
  fooAddressTemplate:
    type: tencentcloud:AddressTemplate
    properties:
      addresses:
        - 10.0.0.1
        - 10.0.1.0/24
        - 10.0.0.1-10.0.0.100
  fooAddressTemplateGroup:
    type: tencentcloud:AddressTemplateGroup
    properties:
      templateIds:
        - ${fooAddressTemplate.addressTemplateId}
  baseSecurityGroupRuleSet:
    type: tencentcloud:SecurityGroupRuleSet
    properties:
      securityGroupId: ${baseSecurityGroup.securityGroupId}
      ingresses:
        - action: ACCEPT
          cidrBlock: 10.0.0.0/22
          protocol: TCP
          port: 80-90
          description: A:Allow Ips and 80-90
        - action: ACCEPT
          cidrBlock: 10.0.2.1
          protocol: UDP
          port: '8080'
          description: B:Allow UDP 8080
        - action: ACCEPT
          cidrBlock: 10.0.2.1
          protocol: UDP
          port: '8080'
          description: C:Allow UDP 8080
        - action: ACCEPT
          cidrBlock: 172.18.1.2
          protocol: ALL
          port: ALL
          description: D:Allow ALL
        - action: DROP
          protocol: TCP
          port: '80'
          sourceSecurityId: ${relative.securityGroupId}
          description: E:Block relative
      egresses:
        - action: DROP
          cidrBlock: 10.0.0.0/16
          protocol: ICMP
          description: A:Block ping3
        - action: DROP
          addressTemplateId: ${fooAddressTemplate.addressTemplateId}
          description: B:Allow template
        - action: DROP
          addressTemplateGroup: ${fooAddressTemplateGroup.addressTemplateGroupId}
          description: C:DROP template group