published on Thursday, Apr 23, 2026 by Volcengine
published on Thursday, Apr 23, 2026 by Volcengine
Domain denylist access control policy.
Example Usage
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
resources:
fWCenterDnsControlPolicyDemo:
type: volcenginecc:fwcenter:DnsControlPolicy
name: FWCenterDnsControlPolicyDemo
properties:
description: FWCenterDnsControlPolicyDemo test
destination: www.xxxx.com
destinationType: domain
internetFirewallId: ifw-yebxxxxx0iac7gxxxxx
sources:
- region: cn-beijing
vpc_id: vpc-3rehw4xxxxk2ixxxxx
Create DnsControlPolicy Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new DnsControlPolicy(name: string, args: DnsControlPolicyArgs, opts?: CustomResourceOptions);@overload
def DnsControlPolicy(resource_name: str,
args: DnsControlPolicyArgs,
opts: Optional[ResourceOptions] = None)
@overload
def DnsControlPolicy(resource_name: str,
opts: Optional[ResourceOptions] = None,
destination: Optional[str] = None,
destination_type: Optional[str] = None,
description: Optional[str] = None,
internet_firewall_id: Optional[str] = None,
sources: Optional[Sequence[DnsControlPolicySourceArgs]] = None,
status: Optional[bool] = None)func NewDnsControlPolicy(ctx *Context, name string, args DnsControlPolicyArgs, opts ...ResourceOption) (*DnsControlPolicy, error)public DnsControlPolicy(string name, DnsControlPolicyArgs args, CustomResourceOptions? opts = null)
public DnsControlPolicy(String name, DnsControlPolicyArgs args)
public DnsControlPolicy(String name, DnsControlPolicyArgs args, CustomResourceOptions options)
type: volcenginecc:fwcenter:DnsControlPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args DnsControlPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DnsControlPolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DnsControlPolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DnsControlPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DnsControlPolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var dnsControlPolicyResource = new Volcenginecc.Fwcenter.DnsControlPolicy("dnsControlPolicyResource", new()
{
Destination = "string",
DestinationType = "string",
Description = "string",
InternetFirewallId = "string",
Sources = new[]
{
new Volcenginecc.Fwcenter.Inputs.DnsControlPolicySourceArgs
{
Region = "string",
VpcId = "string",
},
},
Status = false,
});
example, err := fwcenter.NewDnsControlPolicy(ctx, "dnsControlPolicyResource", &fwcenter.DnsControlPolicyArgs{
Destination: pulumi.String("string"),
DestinationType: pulumi.String("string"),
Description: pulumi.String("string"),
InternetFirewallId: pulumi.String("string"),
Sources: fwcenter.DnsControlPolicySourceArray{
&fwcenter.DnsControlPolicySourceArgs{
Region: pulumi.String("string"),
VpcId: pulumi.String("string"),
},
},
Status: pulumi.Bool(false),
})
var dnsControlPolicyResource = new DnsControlPolicy("dnsControlPolicyResource", DnsControlPolicyArgs.builder()
.destination("string")
.destinationType("string")
.description("string")
.internetFirewallId("string")
.sources(DnsControlPolicySourceArgs.builder()
.region("string")
.vpcId("string")
.build())
.status(false)
.build());
dns_control_policy_resource = volcenginecc.fwcenter.DnsControlPolicy("dnsControlPolicyResource",
destination="string",
destination_type="string",
description="string",
internet_firewall_id="string",
sources=[{
"region": "string",
"vpc_id": "string",
}],
status=False)
const dnsControlPolicyResource = new volcenginecc.fwcenter.DnsControlPolicy("dnsControlPolicyResource", {
destination: "string",
destinationType: "string",
description: "string",
internetFirewallId: "string",
sources: [{
region: "string",
vpcId: "string",
}],
status: false,
});
type: volcenginecc:fwcenter:DnsControlPolicy
properties:
description: string
destination: string
destinationType: string
internetFirewallId: string
sources:
- region: string
vpcId: string
status: false
DnsControlPolicy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The DnsControlPolicy resource accepts the following input properties:
- Destination string
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- Destination
Type string - Type of access target. domain: domain; group: domain address book.
- Description string
- Policy description information.
- Internet
Firewall stringId - Internet border firewall instance ID.
- Sources
List<Volcengine.
Dns Control Policy Source> - Status bool
- Switch status of the domain denylist access control policy. false: Off; true: On.
- Destination string
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- Destination
Type string - Type of access target. domain: domain; group: domain address book.
- Description string
- Policy description information.
- Internet
Firewall stringId - Internet border firewall instance ID.
- Sources
[]Dns
Control Policy Source Args - Status bool
- Switch status of the domain denylist access control policy. false: Off; true: On.
- destination String
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- destination
Type String - Type of access target. domain: domain; group: domain address book.
- description String
- Policy description information.
- internet
Firewall StringId - Internet border firewall instance ID.
- sources
List<Dns
Control Policy Source> - status Boolean
- Switch status of the domain denylist access control policy. false: Off; true: On.
- destination string
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- destination
Type string - Type of access target. domain: domain; group: domain address book.
- description string
- Policy description information.
- internet
Firewall stringId - Internet border firewall instance ID.
- sources
Dns
Control Policy Source[] - status boolean
- Switch status of the domain denylist access control policy. false: Off; true: On.
- destination str
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- destination_
type str - Type of access target. domain: domain; group: domain address book.
- description str
- Policy description information.
- internet_
firewall_ strid - Internet border firewall instance ID.
- sources
Sequence[Dns
Control Policy Source Args] - status bool
- Switch status of the domain denylist access control policy. false: Off; true: On.
- destination String
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- destination
Type String - Type of access target. domain: domain; group: domain address book.
- description String
- Policy description information.
- internet
Firewall StringId - Internet border firewall instance ID.
- sources List<Property Map>
- status Boolean
- Switch status of the domain denylist access control policy. false: Off; true: On.
Outputs
All input properties are implicitly available as output properties. Additionally, the DnsControlPolicy resource produces the following output properties:
- Account
Id string - User's unique identifier.
- Destination
Group List<string>Lists - Domain address book name list.
- Domain
List List<Volcengine.V1s Dns Control Policy Domain List V1> - Domain
Lists List<string> - Domain list.
- Hit
Cnt int - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- Id string
- The provider-assigned unique ID for this managed resource.
- Last
Hit intTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- Rule
Id string - Unique identifier of the access control policy.
- Use
Count int - Number of policies occupied by this domain denylist access control policy.
- Account
Id string - User's unique identifier.
- Destination
Group []stringLists - Domain address book name list.
- Domain
List []DnsV1s Control Policy Domain List V1 - Domain
Lists []string - Domain list.
- Hit
Cnt int - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- Id string
- The provider-assigned unique ID for this managed resource.
- Last
Hit intTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- Rule
Id string - Unique identifier of the access control policy.
- Use
Count int - Number of policies occupied by this domain denylist access control policy.
- account
Id String - User's unique identifier.
- destination
Group List<String>Lists - Domain address book name list.
- domain
List List<DnsV1s Control Policy Domain List V1> - domain
Lists List<String> - Domain list.
- hit
Cnt Integer - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- id String
- The provider-assigned unique ID for this managed resource.
- last
Hit IntegerTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- rule
Id String - Unique identifier of the access control policy.
- use
Count Integer - Number of policies occupied by this domain denylist access control policy.
- account
Id string - User's unique identifier.
- destination
Group string[]Lists - Domain address book name list.
- domain
List DnsV1s Control Policy Domain List V1[] - domain
Lists string[] - Domain list.
- hit
Cnt number - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- id string
- The provider-assigned unique ID for this managed resource.
- last
Hit numberTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- rule
Id string - Unique identifier of the access control policy.
- use
Count number - Number of policies occupied by this domain denylist access control policy.
- account_
id str - User's unique identifier.
- destination_
group_ Sequence[str]lists - Domain address book name list.
- domain_
list_ Sequence[Dnsv1s Control Policy Domain List V1] - domain_
lists Sequence[str] - Domain list.
- hit_
cnt int - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- id str
- The provider-assigned unique ID for this managed resource.
- last_
hit_ inttime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- rule_
id str - Unique identifier of the access control policy.
- use_
count int - Number of policies occupied by this domain denylist access control policy.
- account
Id String - User's unique identifier.
- destination
Group List<String>Lists - Domain address book name list.
- domain
List List<Property Map>V1s - domain
Lists List<String> - Domain list.
- hit
Cnt Number - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- id String
- The provider-assigned unique ID for this managed resource.
- last
Hit NumberTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- rule
Id String - Unique identifier of the access control policy.
- use
Count Number - Number of policies occupied by this domain denylist access control policy.
Look up Existing DnsControlPolicy Resource
Get an existing DnsControlPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: DnsControlPolicyState, opts?: CustomResourceOptions): DnsControlPolicy@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[str] = None,
description: Optional[str] = None,
destination: Optional[str] = None,
destination_group_lists: Optional[Sequence[str]] = None,
destination_type: Optional[str] = None,
domain_list_v1s: Optional[Sequence[DnsControlPolicyDomainListV1Args]] = None,
domain_lists: Optional[Sequence[str]] = None,
hit_cnt: Optional[int] = None,
internet_firewall_id: Optional[str] = None,
last_hit_time: Optional[int] = None,
rule_id: Optional[str] = None,
sources: Optional[Sequence[DnsControlPolicySourceArgs]] = None,
status: Optional[bool] = None,
use_count: Optional[int] = None) -> DnsControlPolicyfunc GetDnsControlPolicy(ctx *Context, name string, id IDInput, state *DnsControlPolicyState, opts ...ResourceOption) (*DnsControlPolicy, error)public static DnsControlPolicy Get(string name, Input<string> id, DnsControlPolicyState? state, CustomResourceOptions? opts = null)public static DnsControlPolicy get(String name, Output<String> id, DnsControlPolicyState state, CustomResourceOptions options)resources: _: type: volcenginecc:fwcenter:DnsControlPolicy get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Id string - User's unique identifier.
- Description string
- Policy description information.
- Destination string
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- Destination
Group List<string>Lists - Domain address book name list.
- Destination
Type string - Type of access target. domain: domain; group: domain address book.
- Domain
List List<Volcengine.V1s Dns Control Policy Domain List V1> - Domain
Lists List<string> - Domain list.
- Hit
Cnt int - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- Internet
Firewall stringId - Internet border firewall instance ID.
- Last
Hit intTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- Rule
Id string - Unique identifier of the access control policy.
- Sources
List<Volcengine.
Dns Control Policy Source> - Status bool
- Switch status of the domain denylist access control policy. false: Off; true: On.
- Use
Count int - Number of policies occupied by this domain denylist access control policy.
- Account
Id string - User's unique identifier.
- Description string
- Policy description information.
- Destination string
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- Destination
Group []stringLists - Domain address book name list.
- Destination
Type string - Type of access target. domain: domain; group: domain address book.
- Domain
List []DnsV1s Control Policy Domain List V1Args - Domain
Lists []string - Domain list.
- Hit
Cnt int - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- Internet
Firewall stringId - Internet border firewall instance ID.
- Last
Hit intTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- Rule
Id string - Unique identifier of the access control policy.
- Sources
[]Dns
Control Policy Source Args - Status bool
- Switch status of the domain denylist access control policy. false: Off; true: On.
- Use
Count int - Number of policies occupied by this domain denylist access control policy.
- account
Id String - User's unique identifier.
- description String
- Policy description information.
- destination String
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- destination
Group List<String>Lists - Domain address book name list.
- destination
Type String - Type of access target. domain: domain; group: domain address book.
- domain
List List<DnsV1s Control Policy Domain List V1> - domain
Lists List<String> - Domain list.
- hit
Cnt Integer - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- internet
Firewall StringId - Internet border firewall instance ID.
- last
Hit IntegerTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- rule
Id String - Unique identifier of the access control policy.
- sources
List<Dns
Control Policy Source> - status Boolean
- Switch status of the domain denylist access control policy. false: Off; true: On.
- use
Count Integer - Number of policies occupied by this domain denylist access control policy.
- account
Id string - User's unique identifier.
- description string
- Policy description information.
- destination string
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- destination
Group string[]Lists - Domain address book name list.
- destination
Type string - Type of access target. domain: domain; group: domain address book.
- domain
List DnsV1s Control Policy Domain List V1[] - domain
Lists string[] - Domain list.
- hit
Cnt number - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- internet
Firewall stringId - Internet border firewall instance ID.
- last
Hit numberTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- rule
Id string - Unique identifier of the access control policy.
- sources
Dns
Control Policy Source[] - status boolean
- Switch status of the domain denylist access control policy. false: Off; true: On.
- use
Count number - Number of policies occupied by this domain denylist access control policy.
- account_
id str - User's unique identifier.
- description str
- Policy description information.
- destination str
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- destination_
group_ Sequence[str]lists - Domain address book name list.
- destination_
type str - Type of access target. domain: domain; group: domain address book.
- domain_
list_ Sequence[Dnsv1s Control Policy Domain List V1Args] - domain_
lists Sequence[str] - Domain list.
- hit_
cnt int - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- internet_
firewall_ strid - Internet border firewall instance ID.
- last_
hit_ inttime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- rule_
id str - Unique identifier of the access control policy.
- sources
Sequence[Dns
Control Policy Source Args] - status bool
- Switch status of the domain denylist access control policy. false: Off; true: On.
- use_
count int - Number of policies occupied by this domain denylist access control policy.
- account
Id String - User's unique identifier.
- description String
- Policy description information.
- destination String
- Access target, which can be the unique identifier of a domain or domain address book. Currently, only one address book is supported.
- destination
Group List<String>Lists - Domain address book name list.
- destination
Type String - Type of access target. domain: domain; group: domain address book.
- domain
List List<Property Map>V1s - domain
Lists List<String> - Domain list.
- hit
Cnt Number - Hit count, indicating the number of times the domain denylist access control policy was triggered.
- internet
Firewall StringId - Internet border firewall instance ID.
- last
Hit NumberTime - Latest hit timestamp, indicating the last time the domain denylist access control policy was triggered.
- rule
Id String - Unique identifier of the access control policy.
- sources List<Property Map>
- status Boolean
- Switch status of the domain denylist access control policy. false: Off; true: On.
- use
Count Number - Number of policies occupied by this domain denylist access control policy.
Supporting Types
DnsControlPolicyDomainListV1, DnsControlPolicyDomainListV1Args
- Address string
- Specific address information.
- Description string
- Description information.
- Type string
- Address type. Supported values are as follows. ip: IPv4 address; ipv6: IPv6 address; domain: domain name; port: port number.
- Address string
- Specific address information.
- Description string
- Description information.
- Type string
- Address type. Supported values are as follows. ip: IPv4 address; ipv6: IPv6 address; domain: domain name; port: port number.
- address String
- Specific address information.
- description String
- Description information.
- type String
- Address type. Supported values are as follows. ip: IPv4 address; ipv6: IPv6 address; domain: domain name; port: port number.
- address string
- Specific address information.
- description string
- Description information.
- type string
- Address type. Supported values are as follows. ip: IPv4 address; ipv6: IPv6 address; domain: domain name; port: port number.
- address str
- Specific address information.
- description str
- Description information.
- type str
- Address type. Supported values are as follows. ip: IPv4 address; ipv6: IPv6 address; domain: domain name; port: port number.
- address String
- Specific address information.
- description String
- Description information.
- type String
- Address type. Supported values are as follows. ip: IPv4 address; ipv6: IPv6 address; domain: domain name; port: port number.
DnsControlPolicySource, DnsControlPolicySourceArgs
Import
$ pulumi import volcenginecc:fwcenter/dnsControlPolicy:DnsControlPolicy example "rule_id"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- volcenginecc volcengine/pulumi-volcenginecc
- License
- MPL-2.0
- Notes
- This Pulumi package is based on the
volcengineccTerraform Provider.
published on Thursday, Apr 23, 2026 by Volcengine
