Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Volcenginecc Provider
  4. API Docs
  5. fwcenter
  6. NatFireWallControlPolicy
Viewing docs for volcenginecc v0.0.49
published on Thursday, Jul 16, 2026 by Volcengine
Schema (JSON)
volcengine/pulumi-volcenginecc

volcenginecc.fwcenter.NatFireWallControlPolicy

volcenginecc logo
Viewing docs for volcenginecc v0.0.49
published on Thursday, Jul 16, 2026 by Volcengine
Schema (JSON)
volcengine/pulumi-volcenginecc

    NAT border firewall access control policy.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as volcenginecc from "@volcengine/pulumi-volcenginecc";

const example = new volcenginecc.fwcenter.NatFireWallControlPolicy("Example", {
    natFirewallId: "nfw-yepxxxxxxx4vvsxpfs",
    direction: "in",
    action: "accept",
    proto: "TCP",
    source: "0.0.0.0/0",
    sourceType: "net",
    destination: "0.0.0.0/0",
    destinationType: "net",
    destPort: "60000",
    destPortType: "port",
    description: "this is a test",
    prio: 1,
    repeatType: "Weekly",
    repeatDays: [
        2,
        3,
    ],
    repeatStartTime: "02:00",
    repeatEndTime: "04:00",
    startTime: 1782662400,
    endTime: 1782921540,
    status: true,
});

    import pulumi
import pulumi_volcenginecc as volcenginecc

example = volcenginecc.fwcenter.NatFireWallControlPolicy("Example",
    nat_firewall_id="nfw-yepxxxxxxx4vvsxpfs",
    direction="in",
    action="accept",
    proto="TCP",
    source="0.0.0.0/0",
    source_type="net",
    destination="0.0.0.0/0",
    destination_type="net",
    dest_port="60000",
    dest_port_type="port",
    description="this is a test",
    prio=1,
    repeat_type="Weekly",
    repeat_days=[
        2,
        3,
    ],
    repeat_start_time="02:00",
    repeat_end_time="04:00",
    start_time=1782662400,
    end_time=1782921540,
    status=True)

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/volcengine/pulumi-volcenginecc/sdk/go/volcenginecc/fwcenter"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := fwcenter.NewNatFireWallControlPolicy(ctx, "Example", &fwcenter.NatFireWallControlPolicyArgs{
			NatFirewallId:   pulumi.String("nfw-yepxxxxxxx4vvsxpfs"),
			Direction:       pulumi.String("in"),
			Action:          pulumi.String("accept"),
			Proto:           pulumi.String("TCP"),
			Source:          pulumi.String("0.0.0.0/0"),
			SourceType:      pulumi.String("net"),
			Destination:     pulumi.String("0.0.0.0/0"),
			DestinationType: pulumi.String("net"),
			DestPort:        pulumi.String("60000"),
			DestPortType:    pulumi.String("port"),
			Description:     pulumi.String("this is a test"),
			Prio:            pulumi.Int(1),
			RepeatType:      pulumi.String("Weekly"),
			RepeatDays: pulumi.IntArray{
				pulumi.Int(2),
				pulumi.Int(3),
			},
			RepeatStartTime: pulumi.String("02:00"),
			RepeatEndTime:   pulumi.String("04:00"),
			StartTime:       pulumi.Int(1782662400),
			EndTime:         pulumi.Int(1782921540),
			Status:          pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Volcenginecc = Volcengine.Pulumi.Volcenginecc;

return await Deployment.RunAsync(() => 
{
    var example = new Volcenginecc.Fwcenter.NatFireWallControlPolicy("Example", new()
    {
        NatFirewallId = "nfw-yepxxxxxxx4vvsxpfs",
        Direction = "in",
        Action = "accept",
        Proto = "TCP",
        Source = "0.0.0.0/0",
        SourceType = "net",
        Destination = "0.0.0.0/0",
        DestinationType = "net",
        DestPort = "60000",
        DestPortType = "port",
        Description = "this is a test",
        Prio = 1,
        RepeatType = "Weekly",
        RepeatDays = new[]
        {
            2,
            3,
        },
        RepeatStartTime = "02:00",
        RepeatEndTime = "04:00",
        StartTime = 1782662400,
        EndTime = 1782921540,
        Status = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.volcengine.volcenginecc.fwcenter.NatFireWallControlPolicy;
import com.volcengine.volcenginecc.fwcenter.NatFireWallControlPolicyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new NatFireWallControlPolicy("example", NatFireWallControlPolicyArgs.builder()
            .natFirewallId("nfw-yepxxxxxxx4vvsxpfs")
            .direction("in")
            .action("accept")
            .proto("TCP")
            .source("0.0.0.0/0")
            .sourceType("net")
            .destination("0.0.0.0/0")
            .destinationType("net")
            .destPort("60000")
            .destPortType("port")
            .description("this is a test")
            .prio(1)
            .repeatType("Weekly")
            .repeatDays(            
                2,
                3)
            .repeatStartTime("02:00")
            .repeatEndTime("04:00")
            .startTime(1782662400)
            .endTime(1782921540)
            .status(true)
            .build());

    }
}

    resources:
  example:
    type: volcenginecc:fwcenter:NatFireWallControlPolicy
    name: Example
    properties:
      natFirewallId: nfw-yepxxxxxxx4vvsxpfs
      direction: in
      action: accept
      proto: TCP
      source: 0.0.0.0/0
      sourceType: net
      destination: 0.0.0.0/0
      destinationType: net
      destPort: '60000'
      destPortType: port
      description: this is a test
      prio: 1
      repeatType: Weekly
      repeatDays:
        - 2
        - 3
      repeatStartTime: 02:00
      repeatEndTime: 04:00
      startTime: 1.7826624e+09
      endTime: 1.78292154e+09
      status: true

    pulumi {
  required_providers {
    volcenginecc = {
      source = "pulumi/volcenginecc"
    }
  }
}

resource "volcenginecc_fwcenter_natfirewallcontrolpolicy" "Example" {
  nat_firewall_id   = "nfw-yepxxxxxxx4vvsxpfs"
  direction         = "in"
  action            = "accept"
  proto             = "TCP"
  source            = "0.0.0.0/0"
  source_type       = "net"
  destination       = "0.0.0.0/0"
  destination_type  = "net"
  dest_port         = "60000"
  dest_port_type    = "port"
  description       = "this is a test"
  prio              = 1
  repeat_type       = "Weekly"
  repeat_days       = [2, 3]
  repeat_start_time = "02:00"
  repeat_end_time   = "04:00"
  start_time        = 1782662400
  end_time          = 1782921540
  status            = true
}

    Create NatFireWallControlPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new NatFireWallControlPolicy(name: string, args: NatFireWallControlPolicyArgs, opts?: CustomResourceOptions);
    @overload
def NatFireWallControlPolicy(resource_name: str,
                             args: NatFireWallControlPolicyArgs,
                             opts: Optional[ResourceOptions] = None)

@overload
def NatFireWallControlPolicy(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             nat_firewall_id: Optional[str] = None,
                             proto: Optional[str] = None,
                             source_type: Optional[str] = None,
                             source: Optional[str] = None,
                             destination: Optional[str] = None,
                             destination_type: Optional[str] = None,
                             direction: Optional[str] = None,
                             action: Optional[str] = None,
                             description: Optional[str] = None,
                             end_time: Optional[int] = None,
                             dest_port_type: Optional[str] = None,
                             repeat_days: Optional[Sequence[int]] = None,
                             repeat_end_time: Optional[str] = None,
                             repeat_start_time: Optional[str] = None,
                             repeat_type: Optional[str] = None,
                             prio: Optional[int] = None,
                             dest_port: Optional[str] = None,
                             start_time: Optional[int] = None,
                             status: Optional[bool] = None)
    func NewNatFireWallControlPolicy(ctx *Context, name string, args NatFireWallControlPolicyArgs, opts ...ResourceOption) (*NatFireWallControlPolicy, error)
    public NatFireWallControlPolicy(string name, NatFireWallControlPolicyArgs args, CustomResourceOptions? opts = null)
    public NatFireWallControlPolicy(String name, NatFireWallControlPolicyArgs args)
public NatFireWallControlPolicy(String name, NatFireWallControlPolicyArgs args, CustomResourceOptions options)

    type: volcenginecc:fwcenter:NatFireWallControlPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "volcenginecc_fwcenter_natfirewallcontrolpolicy" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args NatFireWallControlPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NatFireWallControlPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NatFireWallControlPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NatFireWallControlPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NatFireWallControlPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var natFireWallControlPolicyResource = new Volcenginecc.Fwcenter.NatFireWallControlPolicy("natFireWallControlPolicyResource", new()
{
    NatFirewallId = "string",
    Proto = "string",
    SourceType = "string",
    Source = "string",
    Destination = "string",
    DestinationType = "string",
    Direction = "string",
    Action = "string",
    Description = "string",
    EndTime = 0,
    DestPortType = "string",
    RepeatDays = new[]
    {
        0,
    },
    RepeatEndTime = "string",
    RepeatStartTime = "string",
    RepeatType = "string",
    Prio = 0,
    DestPort = "string",
    StartTime = 0,
    Status = false,
});

    example, err := fwcenter.NewNatFireWallControlPolicy(ctx, "natFireWallControlPolicyResource", &fwcenter.NatFireWallControlPolicyArgs{
	NatFirewallId:   pulumi.String("string"),
	Proto:           pulumi.String("string"),
	SourceType:      pulumi.String("string"),
	Source:          pulumi.String("string"),
	Destination:     pulumi.String("string"),
	DestinationType: pulumi.String("string"),
	Direction:       pulumi.String("string"),
	Action:          pulumi.String("string"),
	Description:     pulumi.String("string"),
	EndTime:         pulumi.Int(0),
	DestPortType:    pulumi.String("string"),
	RepeatDays: pulumi.IntArray{
		pulumi.Int(0),
	},
	RepeatEndTime:   pulumi.String("string"),
	RepeatStartTime: pulumi.String("string"),
	RepeatType:      pulumi.String("string"),
	Prio:            pulumi.Int(0),
	DestPort:        pulumi.String("string"),
	StartTime:       pulumi.Int(0),
	Status:          pulumi.Bool(false),
})

    resource "volcenginecc_fwcenter_natfirewallcontrolpolicy" "natFireWallControlPolicyResource" {
  nat_firewall_id   = "string"
  proto             = "string"
  source_type       = "string"
  source            = "string"
  destination       = "string"
  destination_type  = "string"
  direction         = "string"
  action            = "string"
  description       = "string"
  end_time          = 0
  dest_port_type    = "string"
  repeat_days       = [0]
  repeat_end_time   = "string"
  repeat_start_time = "string"
  repeat_type       = "string"
  prio              = 0
  dest_port         = "string"
  start_time        = 0
  status            = false
}

    var natFireWallControlPolicyResource = new NatFireWallControlPolicy("natFireWallControlPolicyResource", NatFireWallControlPolicyArgs.builder()
    .natFirewallId("string")
    .proto("string")
    .sourceType("string")
    .source("string")
    .destination("string")
    .destinationType("string")
    .direction("string")
    .action("string")
    .description("string")
    .endTime(0)
    .destPortType("string")
    .repeatDays(0)
    .repeatEndTime("string")
    .repeatStartTime("string")
    .repeatType("string")
    .prio(0)
    .destPort("string")
    .startTime(0)
    .status(false)
    .build());

    nat_fire_wall_control_policy_resource = volcenginecc.fwcenter.NatFireWallControlPolicy("natFireWallControlPolicyResource",
    nat_firewall_id="string",
    proto="string",
    source_type="string",
    source="string",
    destination="string",
    destination_type="string",
    direction="string",
    action="string",
    description="string",
    end_time=0,
    dest_port_type="string",
    repeat_days=[0],
    repeat_end_time="string",
    repeat_start_time="string",
    repeat_type="string",
    prio=0,
    dest_port="string",
    start_time=0,
    status=False)

    const natFireWallControlPolicyResource = new volcenginecc.fwcenter.NatFireWallControlPolicy("natFireWallControlPolicyResource", {
    natFirewallId: "string",
    proto: "string",
    sourceType: "string",
    source: "string",
    destination: "string",
    destinationType: "string",
    direction: "string",
    action: "string",
    description: "string",
    endTime: 0,
    destPortType: "string",
    repeatDays: [0],
    repeatEndTime: "string",
    repeatStartTime: "string",
    repeatType: "string",
    prio: 0,
    destPort: "string",
    startTime: 0,
    status: false,
});

    type: volcenginecc:fwcenter:NatFireWallControlPolicy
properties:
    action: string
    description: string
    destPort: string
    destPortType: string
    destination: string
    destinationType: string
    direction: string
    endTime: 0
    natFirewallId: string
    prio: 0
    proto: string
    repeatDays:
        - 0
    repeatEndTime: string
    repeatStartTime: string
    repeatType: string
    source: string
    sourceType: string
    startTime: 0
    status: false

    NatFireWallControlPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The NatFireWallControlPolicy resource accepts the following input properties:

    Action string
    Policy action. accept: allow; deny: deny; monitor: observe.
    Destination string
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    DestinationType string
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    Direction string
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    NatFirewallId string
    NAT border firewall instance ID.
    Proto string
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    Source string
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    SourceType string
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    Description string
    Description of the policy.
    DestPort string
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    DestPortType string
    Destination port type. port: port; group: port address book.
    EndTime int
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    Prio int
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    RepeatDays List<int>
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    RepeatEndTime string
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    RepeatStartTime string
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    RepeatType string
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    StartTime int
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    Status bool
    Policy switch status. false: off; true: on.
    Action string
    Policy action. accept: allow; deny: deny; monitor: observe.
    Destination string
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    DestinationType string
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    Direction string
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    NatFirewallId string
    NAT border firewall instance ID.
    Proto string
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    Source string
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    SourceType string
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    Description string
    Description of the policy.
    DestPort string
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    DestPortType string
    Destination port type. port: port; group: port address book.
    EndTime int
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    Prio int
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    RepeatDays []int
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    RepeatEndTime string
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    RepeatStartTime string
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    RepeatType string
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    StartTime int
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    Status bool
    Policy switch status. false: off; true: on.
    action string
    Policy action. accept: allow; deny: deny; monitor: observe.
    destination string
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destination_type string
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction string
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    nat_firewall_id string
    NAT border firewall instance ID.
    proto string
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    source string
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    source_type string
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    description string
    Description of the policy.
    dest_port string
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    dest_port_type string
    Destination port type. port: port; group: port address book.
    end_time number
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    prio number
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    repeat_days list(number)
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeat_end_time string
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeat_start_time string
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeat_type string
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    start_time number
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status bool
    Policy switch status. false: off; true: on.
    action String
    Policy action. accept: allow; deny: deny; monitor: observe.
    destination String
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destinationType String
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction String
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    natFirewallId String
    NAT border firewall instance ID.
    proto String
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    source String
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    sourceType String
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    description String
    Description of the policy.
    destPort String
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    destPortType String
    Destination port type. port: port; group: port address book.
    endTime Integer
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    prio Integer
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    repeatDays List<Integer>
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeatEndTime String
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatStartTime String
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatType String
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    startTime Integer
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status Boolean
    Policy switch status. false: off; true: on.
    action string
    Policy action. accept: allow; deny: deny; monitor: observe.
    destination string
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destinationType string
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction string
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    natFirewallId string
    NAT border firewall instance ID.
    proto string
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    source string
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    sourceType string
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    description string
    Description of the policy.
    destPort string
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    destPortType string
    Destination port type. port: port; group: port address book.
    endTime number
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    prio number
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    repeatDays number[]
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeatEndTime string
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatStartTime string
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatType string
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    startTime number
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status boolean
    Policy switch status. false: off; true: on.
    action str
    Policy action. accept: allow; deny: deny; monitor: observe.
    destination str
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destination_type str
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction str
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    nat_firewall_id str
    NAT border firewall instance ID.
    proto str
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    source str
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    source_type str
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    description str
    Description of the policy.
    dest_port str
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    dest_port_type str
    Destination port type. port: port; group: port address book.
    end_time int
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    prio int
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    repeat_days Sequence[int]
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeat_end_time str
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeat_start_time str
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeat_type str
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    start_time int
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status bool
    Policy switch status. false: off; true: on.
    action String
    Policy action. accept: allow; deny: deny; monitor: observe.
    destination String
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destinationType String
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction String
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    natFirewallId String
    NAT border firewall instance ID.
    proto String
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    source String
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    sourceType String
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    description String
    Description of the policy.
    destPort String
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    destPortType String
    Destination port type. port: port; group: port address book.
    endTime Number
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    prio Number
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    repeatDays List<Number>
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeatEndTime String
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatStartTime String
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatType String
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    startTime Number
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status Boolean
    Policy switch status. false: off; true: on.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the NatFireWallControlPolicy resource produces the following output properties:

    AccountId string
    User's unique identifier ID.
    DestPortGroupType string
    Destination port book type.
    DestPortListV1s List<Volcengine.NatFireWallControlPolicyDestPortListV1>
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    DestPortLists List<string>
    Destination port list.
    DestinationCidrListV1s List<Volcengine.NatFireWallControlPolicyDestinationCidrListV1>
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    DestinationCidrLists List<string>
    Destination CIDR list.
    DestinationDomainLists List<string>
    Destination domain name list.
    DestinationGroupType string
    Destination address book type.
    EffectStatus int
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    HitCnt int
    Hit count, indicating the number of times this policy has been triggered.
    Id string
    The provider-assigned unique ID for this managed resource.
    IsEffected bool
    Whether the policy is effective.
    LastHitTime int
    Last hit timestamp, indicating the last time this policy was triggered.
    RuleId string
    Unique ID of the access control policy.
    SourceCidrListV1s List<Volcengine.NatFireWallControlPolicySourceCidrListV1>
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    SourceCidrLists List<string>
    Source CIDR list.
    SourceGroupType string
    Source address book type.
    UpdateTime int
    Policy update timestamp.
    UseCount int
    Number of policies occupied by this policy.
    AccountId string
    User's unique identifier ID.
    DestPortGroupType string
    Destination port book type.
    DestPortListV1s []NatFireWallControlPolicyDestPortListV1
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    DestPortLists []string
    Destination port list.
    DestinationCidrListV1s []NatFireWallControlPolicyDestinationCidrListV1
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    DestinationCidrLists []string
    Destination CIDR list.
    DestinationDomainLists []string
    Destination domain name list.
    DestinationGroupType string
    Destination address book type.
    EffectStatus int
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    HitCnt int
    Hit count, indicating the number of times this policy has been triggered.
    Id string
    The provider-assigned unique ID for this managed resource.
    IsEffected bool
    Whether the policy is effective.
    LastHitTime int
    Last hit timestamp, indicating the last time this policy was triggered.
    RuleId string
    Unique ID of the access control policy.
    SourceCidrListV1s []NatFireWallControlPolicySourceCidrListV1
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    SourceCidrLists []string
    Source CIDR list.
    SourceGroupType string
    Source address book type.
    UpdateTime int
    Policy update timestamp.
    UseCount int
    Number of policies occupied by this policy.
    account_id string
    User's unique identifier ID.
    dest_port_group_type string
    Destination port book type.
    dest_port_list_v1s list(object)
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    dest_port_lists list(string)
    Destination port list.
    destination_cidr_list_v1s list(object)
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destination_cidr_lists list(string)
    Destination CIDR list.
    destination_domain_lists list(string)
    Destination domain name list.
    destination_group_type string
    Destination address book type.
    effect_status number
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    hit_cnt number
    Hit count, indicating the number of times this policy has been triggered.
    id string
    The provider-assigned unique ID for this managed resource.
    is_effected bool
    Whether the policy is effective.
    last_hit_time number
    Last hit timestamp, indicating the last time this policy was triggered.
    rule_id string
    Unique ID of the access control policy.
    source_cidr_list_v1s list(object)
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    source_cidr_lists list(string)
    Source CIDR list.
    source_group_type string
    Source address book type.
    update_time number
    Policy update timestamp.
    use_count number
    Number of policies occupied by this policy.
    accountId String
    User's unique identifier ID.
    destPortGroupType String
    Destination port book type.
    destPortListV1s List<NatFireWallControlPolicyDestPortListV1>
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destPortLists List<String>
    Destination port list.
    destinationCidrListV1s List<NatFireWallControlPolicyDestinationCidrListV1>
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destinationCidrLists List<String>
    Destination CIDR list.
    destinationDomainLists List<String>
    Destination domain name list.
    destinationGroupType String
    Destination address book type.
    effectStatus Integer
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    hitCnt Integer
    Hit count, indicating the number of times this policy has been triggered.
    id String
    The provider-assigned unique ID for this managed resource.
    isEffected Boolean
    Whether the policy is effective.
    lastHitTime Integer
    Last hit timestamp, indicating the last time this policy was triggered.
    ruleId String
    Unique ID of the access control policy.
    sourceCidrListV1s List<NatFireWallControlPolicySourceCidrListV1>
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    sourceCidrLists List<String>
    Source CIDR list.
    sourceGroupType String
    Source address book type.
    updateTime Integer
    Policy update timestamp.
    useCount Integer
    Number of policies occupied by this policy.
    accountId string
    User's unique identifier ID.
    destPortGroupType string
    Destination port book type.
    destPortListV1s NatFireWallControlPolicyDestPortListV1[]
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destPortLists string[]
    Destination port list.
    destinationCidrListV1s NatFireWallControlPolicyDestinationCidrListV1[]
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destinationCidrLists string[]
    Destination CIDR list.
    destinationDomainLists string[]
    Destination domain name list.
    destinationGroupType string
    Destination address book type.
    effectStatus number
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    hitCnt number
    Hit count, indicating the number of times this policy has been triggered.
    id string
    The provider-assigned unique ID for this managed resource.
    isEffected boolean
    Whether the policy is effective.
    lastHitTime number
    Last hit timestamp, indicating the last time this policy was triggered.
    ruleId string
    Unique ID of the access control policy.
    sourceCidrListV1s NatFireWallControlPolicySourceCidrListV1[]
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    sourceCidrLists string[]
    Source CIDR list.
    sourceGroupType string
    Source address book type.
    updateTime number
    Policy update timestamp.
    useCount number
    Number of policies occupied by this policy.
    account_id str
    User's unique identifier ID.
    dest_port_group_type str
    Destination port book type.
    dest_port_list_v1s Sequence[NatFireWallControlPolicyDestPortListV1]
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    dest_port_lists Sequence[str]
    Destination port list.
    destination_cidr_list_v1s Sequence[NatFireWallControlPolicyDestinationCidrListV1]
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destination_cidr_lists Sequence[str]
    Destination CIDR list.
    destination_domain_lists Sequence[str]
    Destination domain name list.
    destination_group_type str
    Destination address book type.
    effect_status int
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    hit_cnt int
    Hit count, indicating the number of times this policy has been triggered.
    id str
    The provider-assigned unique ID for this managed resource.
    is_effected bool
    Whether the policy is effective.
    last_hit_time int
    Last hit timestamp, indicating the last time this policy was triggered.
    rule_id str
    Unique ID of the access control policy.
    source_cidr_list_v1s Sequence[NatFireWallControlPolicySourceCidrListV1]
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    source_cidr_lists Sequence[str]
    Source CIDR list.
    source_group_type str
    Source address book type.
    update_time int
    Policy update timestamp.
    use_count int
    Number of policies occupied by this policy.
    accountId String
    User's unique identifier ID.
    destPortGroupType String
    Destination port book type.
    destPortListV1s List<Property Map>
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destPortLists List<String>
    Destination port list.
    destinationCidrListV1s List<Property Map>
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destinationCidrLists List<String>
    Destination CIDR list.
    destinationDomainLists List<String>
    Destination domain name list.
    destinationGroupType String
    Destination address book type.
    effectStatus Number
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    hitCnt Number
    Hit count, indicating the number of times this policy has been triggered.
    id String
    The provider-assigned unique ID for this managed resource.
    isEffected Boolean
    Whether the policy is effective.
    lastHitTime Number
    Last hit timestamp, indicating the last time this policy was triggered.
    ruleId String
    Unique ID of the access control policy.
    sourceCidrListV1s List<Property Map>
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    sourceCidrLists List<String>
    Source CIDR list.
    sourceGroupType String
    Source address book type.
    updateTime Number
    Policy update timestamp.
    useCount Number
    Number of policies occupied by this policy.

    Look up Existing NatFireWallControlPolicy Resource

    Get an existing NatFireWallControlPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NatFireWallControlPolicyState, opts?: CustomResourceOptions): NatFireWallControlPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        action: Optional[str] = None,
        description: Optional[str] = None,
        dest_port: Optional[str] = None,
        dest_port_group_type: Optional[str] = None,
        dest_port_list_v1s: Optional[Sequence[NatFireWallControlPolicyDestPortListV1Args]] = None,
        dest_port_lists: Optional[Sequence[str]] = None,
        dest_port_type: Optional[str] = None,
        destination: Optional[str] = None,
        destination_cidr_list_v1s: Optional[Sequence[NatFireWallControlPolicyDestinationCidrListV1Args]] = None,
        destination_cidr_lists: Optional[Sequence[str]] = None,
        destination_domain_lists: Optional[Sequence[str]] = None,
        destination_group_type: Optional[str] = None,
        destination_type: Optional[str] = None,
        direction: Optional[str] = None,
        effect_status: Optional[int] = None,
        end_time: Optional[int] = None,
        hit_cnt: Optional[int] = None,
        is_effected: Optional[bool] = None,
        last_hit_time: Optional[int] = None,
        nat_firewall_id: Optional[str] = None,
        prio: Optional[int] = None,
        proto: Optional[str] = None,
        repeat_days: Optional[Sequence[int]] = None,
        repeat_end_time: Optional[str] = None,
        repeat_start_time: Optional[str] = None,
        repeat_type: Optional[str] = None,
        rule_id: Optional[str] = None,
        source: Optional[str] = None,
        source_cidr_list_v1s: Optional[Sequence[NatFireWallControlPolicySourceCidrListV1Args]] = None,
        source_cidr_lists: Optional[Sequence[str]] = None,
        source_group_type: Optional[str] = None,
        source_type: Optional[str] = None,
        start_time: Optional[int] = None,
        status: Optional[bool] = None,
        update_time: Optional[int] = None,
        use_count: Optional[int] = None) -> NatFireWallControlPolicy
    func GetNatFireWallControlPolicy(ctx *Context, name string, id IDInput, state *NatFireWallControlPolicyState, opts ...ResourceOption) (*NatFireWallControlPolicy, error)
    public static NatFireWallControlPolicy Get(string name, Input<string> id, NatFireWallControlPolicyState? state, CustomResourceOptions? opts = null)
    public static NatFireWallControlPolicy get(String name, Output<String> id, NatFireWallControlPolicyState state, CustomResourceOptions options)
    resources:  _:    type: volcenginecc:fwcenter:NatFireWallControlPolicy    get:      id: ${id}
    import {
  to = volcenginecc_fwcenter_natfirewallcontrolpolicy.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    User's unique identifier ID.
    Action string
    Policy action. accept: allow; deny: deny; monitor: observe.
    Description string
    Description of the policy.
    DestPort string
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    DestPortGroupType string
    Destination port book type.
    DestPortListV1s List<Volcengine.NatFireWallControlPolicyDestPortListV1>
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    DestPortLists List<string>
    Destination port list.
    DestPortType string
    Destination port type. port: port; group: port address book.
    Destination string
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    DestinationCidrListV1s List<Volcengine.NatFireWallControlPolicyDestinationCidrListV1>
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    DestinationCidrLists List<string>
    Destination CIDR list.
    DestinationDomainLists List<string>
    Destination domain name list.
    DestinationGroupType string
    Destination address book type.
    DestinationType string
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    Direction string
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    EffectStatus int
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    EndTime int
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    HitCnt int
    Hit count, indicating the number of times this policy has been triggered.
    IsEffected bool
    Whether the policy is effective.
    LastHitTime int
    Last hit timestamp, indicating the last time this policy was triggered.
    NatFirewallId string
    NAT border firewall instance ID.
    Prio int
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    Proto string
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    RepeatDays List<int>
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    RepeatEndTime string
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    RepeatStartTime string
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    RepeatType string
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    RuleId string
    Unique ID of the access control policy.
    Source string
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    SourceCidrListV1s List<Volcengine.NatFireWallControlPolicySourceCidrListV1>
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    SourceCidrLists List<string>
    Source CIDR list.
    SourceGroupType string
    Source address book type.
    SourceType string
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    StartTime int
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    Status bool
    Policy switch status. false: off; true: on.
    UpdateTime int
    Policy update timestamp.
    UseCount int
    Number of policies occupied by this policy.
    AccountId string
    User's unique identifier ID.
    Action string
    Policy action. accept: allow; deny: deny; monitor: observe.
    Description string
    Description of the policy.
    DestPort string
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    DestPortGroupType string
    Destination port book type.
    DestPortListV1s []NatFireWallControlPolicyDestPortListV1Args
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    DestPortLists []string
    Destination port list.
    DestPortType string
    Destination port type. port: port; group: port address book.
    Destination string
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    DestinationCidrListV1s []NatFireWallControlPolicyDestinationCidrListV1Args
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    DestinationCidrLists []string
    Destination CIDR list.
    DestinationDomainLists []string
    Destination domain name list.
    DestinationGroupType string
    Destination address book type.
    DestinationType string
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    Direction string
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    EffectStatus int
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    EndTime int
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    HitCnt int
    Hit count, indicating the number of times this policy has been triggered.
    IsEffected bool
    Whether the policy is effective.
    LastHitTime int
    Last hit timestamp, indicating the last time this policy was triggered.
    NatFirewallId string
    NAT border firewall instance ID.
    Prio int
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    Proto string
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    RepeatDays []int
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    RepeatEndTime string
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    RepeatStartTime string
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    RepeatType string
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    RuleId string
    Unique ID of the access control policy.
    Source string
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    SourceCidrListV1s []NatFireWallControlPolicySourceCidrListV1Args
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    SourceCidrLists []string
    Source CIDR list.
    SourceGroupType string
    Source address book type.
    SourceType string
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    StartTime int
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    Status bool
    Policy switch status. false: off; true: on.
    UpdateTime int
    Policy update timestamp.
    UseCount int
    Number of policies occupied by this policy.
    account_id string
    User's unique identifier ID.
    action string
    Policy action. accept: allow; deny: deny; monitor: observe.
    description string
    Description of the policy.
    dest_port string
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    dest_port_group_type string
    Destination port book type.
    dest_port_list_v1s list(object)
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    dest_port_lists list(string)
    Destination port list.
    dest_port_type string
    Destination port type. port: port; group: port address book.
    destination string
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destination_cidr_list_v1s list(object)
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destination_cidr_lists list(string)
    Destination CIDR list.
    destination_domain_lists list(string)
    Destination domain name list.
    destination_group_type string
    Destination address book type.
    destination_type string
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction string
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    effect_status number
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    end_time number
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    hit_cnt number
    Hit count, indicating the number of times this policy has been triggered.
    is_effected bool
    Whether the policy is effective.
    last_hit_time number
    Last hit timestamp, indicating the last time this policy was triggered.
    nat_firewall_id string
    NAT border firewall instance ID.
    prio number
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    proto string
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    repeat_days list(number)
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeat_end_time string
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeat_start_time string
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeat_type string
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    rule_id string
    Unique ID of the access control policy.
    source string
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    source_cidr_list_v1s list(object)
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    source_cidr_lists list(string)
    Source CIDR list.
    source_group_type string
    Source address book type.
    source_type string
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    start_time number
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status bool
    Policy switch status. false: off; true: on.
    update_time number
    Policy update timestamp.
    use_count number
    Number of policies occupied by this policy.
    accountId String
    User's unique identifier ID.
    action String
    Policy action. accept: allow; deny: deny; monitor: observe.
    description String
    Description of the policy.
    destPort String
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    destPortGroupType String
    Destination port book type.
    destPortListV1s List<NatFireWallControlPolicyDestPortListV1>
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destPortLists List<String>
    Destination port list.
    destPortType String
    Destination port type. port: port; group: port address book.
    destination String
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destinationCidrListV1s List<NatFireWallControlPolicyDestinationCidrListV1>
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destinationCidrLists List<String>
    Destination CIDR list.
    destinationDomainLists List<String>
    Destination domain name list.
    destinationGroupType String
    Destination address book type.
    destinationType String
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction String
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    effectStatus Integer
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    endTime Integer
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    hitCnt Integer
    Hit count, indicating the number of times this policy has been triggered.
    isEffected Boolean
    Whether the policy is effective.
    lastHitTime Integer
    Last hit timestamp, indicating the last time this policy was triggered.
    natFirewallId String
    NAT border firewall instance ID.
    prio Integer
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    proto String
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    repeatDays List<Integer>
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeatEndTime String
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatStartTime String
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatType String
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    ruleId String
    Unique ID of the access control policy.
    source String
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    sourceCidrListV1s List<NatFireWallControlPolicySourceCidrListV1>
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    sourceCidrLists List<String>
    Source CIDR list.
    sourceGroupType String
    Source address book type.
    sourceType String
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    startTime Integer
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status Boolean
    Policy switch status. false: off; true: on.
    updateTime Integer
    Policy update timestamp.
    useCount Integer
    Number of policies occupied by this policy.
    accountId string
    User's unique identifier ID.
    action string
    Policy action. accept: allow; deny: deny; monitor: observe.
    description string
    Description of the policy.
    destPort string
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    destPortGroupType string
    Destination port book type.
    destPortListV1s NatFireWallControlPolicyDestPortListV1[]
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destPortLists string[]
    Destination port list.
    destPortType string
    Destination port type. port: port; group: port address book.
    destination string
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destinationCidrListV1s NatFireWallControlPolicyDestinationCidrListV1[]
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destinationCidrLists string[]
    Destination CIDR list.
    destinationDomainLists string[]
    Destination domain name list.
    destinationGroupType string
    Destination address book type.
    destinationType string
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction string
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    effectStatus number
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    endTime number
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    hitCnt number
    Hit count, indicating the number of times this policy has been triggered.
    isEffected boolean
    Whether the policy is effective.
    lastHitTime number
    Last hit timestamp, indicating the last time this policy was triggered.
    natFirewallId string
    NAT border firewall instance ID.
    prio number
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    proto string
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    repeatDays number[]
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeatEndTime string
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatStartTime string
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatType string
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    ruleId string
    Unique ID of the access control policy.
    source string
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    sourceCidrListV1s NatFireWallControlPolicySourceCidrListV1[]
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    sourceCidrLists string[]
    Source CIDR list.
    sourceGroupType string
    Source address book type.
    sourceType string
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    startTime number
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status boolean
    Policy switch status. false: off; true: on.
    updateTime number
    Policy update timestamp.
    useCount number
    Number of policies occupied by this policy.
    account_id str
    User's unique identifier ID.
    action str
    Policy action. accept: allow; deny: deny; monitor: observe.
    description str
    Description of the policy.
    dest_port str
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    dest_port_group_type str
    Destination port book type.
    dest_port_list_v1s Sequence[NatFireWallControlPolicyDestPortListV1Args]
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    dest_port_lists Sequence[str]
    Destination port list.
    dest_port_type str
    Destination port type. port: port; group: port address book.
    destination str
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destination_cidr_list_v1s Sequence[NatFireWallControlPolicyDestinationCidrListV1Args]
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destination_cidr_lists Sequence[str]
    Destination CIDR list.
    destination_domain_lists Sequence[str]
    Destination domain name list.
    destination_group_type str
    Destination address book type.
    destination_type str
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction str
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    effect_status int
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    end_time int
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    hit_cnt int
    Hit count, indicating the number of times this policy has been triggered.
    is_effected bool
    Whether the policy is effective.
    last_hit_time int
    Last hit timestamp, indicating the last time this policy was triggered.
    nat_firewall_id str
    NAT border firewall instance ID.
    prio int
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    proto str
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    repeat_days Sequence[int]
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeat_end_time str
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeat_start_time str
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeat_type str
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    rule_id str
    Unique ID of the access control policy.
    source str
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    source_cidr_list_v1s Sequence[NatFireWallControlPolicySourceCidrListV1Args]
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    source_cidr_lists Sequence[str]
    Source CIDR list.
    source_group_type str
    Source address book type.
    source_type str
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    start_time int
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status bool
    Policy switch status. false: off; true: on.
    update_time int
    Policy update timestamp.
    use_count int
    Number of policies occupied by this policy.
    accountId String
    User's unique identifier ID.
    action String
    Policy action. accept: allow; deny: deny; monitor: observe.
    description String
    Description of the policy.
    destPort String
    Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
    destPortGroupType String
    Destination port book type.
    destPortListV1s List<Property Map>
    Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destPortLists List<String>
    Destination port list.
    destPortType String
    Destination port type. port: port; group: port address book.
    destination String
    Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
    destinationCidrListV1s List<Property Map>
    Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    destinationCidrLists List<String>
    Destination CIDR list.
    destinationDomainLists List<String>
    Destination domain name list.
    destinationGroupType String
    Destination address book type.
    destinationType String
    Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
    direction String
    Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
    effectStatus Number
    Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
    endTime Number
    Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    hitCnt Number
    Hit count, indicating the number of times this policy has been triggered.
    isEffected Boolean
    Whether the policy is effective.
    lastHitTime Number
    Last hit timestamp, indicating the last time this policy was triggered.
    natFirewallId String
    NAT border firewall instance ID.
    prio Number
    Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
    proto String
    Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
    repeatDays List<Number>
    Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
    repeatEndTime String
    Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatStartTime String
    Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
    repeatType String
    Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
    ruleId String
    Unique ID of the access control policy.
    source String
    Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
    sourceCidrListV1s List<Property Map>
    Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    sourceCidrLists List<String>
    Source CIDR list.
    sourceGroupType String
    Source address book type.
    sourceType String
    Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
    startTime Number
    Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
    status Boolean
    Policy switch status. false: off; true: on.
    updateTime Number
    Policy update timestamp.
    useCount Number
    Number of policies occupied by this policy.

    Supporting Types

    NatFireWallControlPolicyDestPortListV1, NatFireWallControlPolicyDestPortListV1Args

    Address string
    Specific address information.
    Description string
    Description.
    Type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    Address string
    Specific address information.
    Description string
    Description.
    Type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address string
    Specific address information.
    description string
    Description.
    type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address String
    Specific address information.
    description String
    Description.
    type String
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address string
    Specific address information.
    description string
    Description.
    type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address str
    Specific address information.
    description str
    Description.
    type str
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address String
    Specific address information.
    description String
    Description.
    type String
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.

    NatFireWallControlPolicyDestinationCidrListV1, NatFireWallControlPolicyDestinationCidrListV1Args

    Address string
    Specific address information.
    Description string
    Description.
    Type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    Address string
    Specific address information.
    Description string
    Description.
    Type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address string
    Specific address information.
    description string
    Description.
    type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address String
    Specific address information.
    description String
    Description.
    type String
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address string
    Specific address information.
    description string
    Description.
    type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address str
    Specific address information.
    description str
    Description.
    type str
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address String
    Specific address information.
    description String
    Description.
    type String
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.

    NatFireWallControlPolicySourceCidrListV1, NatFireWallControlPolicySourceCidrListV1Args

    Address string
    Specific address information.
    Description string
    Description.
    Type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    Address string
    Specific address information.
    Description string
    Description.
    Type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address string
    Specific address information.
    description string
    Description.
    type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address String
    Specific address information.
    description String
    Description.
    type String
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address string
    Specific address information.
    description string
    Description.
    type string
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address str
    Specific address information.
    description str
    Description.
    type str
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
    address String
    Specific address information.
    description String
    Description.
    type String
    Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.

    Import

    $ pulumi import volcenginecc:fwcenter/natFireWallControlPolicy:NatFireWallControlPolicy example "nat_firewall_id|direction|rule_id"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    volcenginecc volcengine/pulumi-volcenginecc
    License
    MPL-2.0
    Notes
    This Pulumi package is based on the volcenginecc Terraform Provider.
    volcenginecc logo
    Viewing docs for volcenginecc v0.0.49
    published on Thursday, Jul 16, 2026 by Volcengine
    Schema (JSON)
    volcengine/pulumi-volcenginecc

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial