published on Monday, Jul 20, 2026 by Volcengine
published on Monday, Jul 20, 2026 by Volcengine
NAT border firewall access control policy.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as volcenginecc from "@volcengine/pulumi-volcenginecc";
const example = new volcenginecc.fwcenter.NatFireWallControlPolicy("Example", {
natFirewallId: "nfw-yepxxxxxxx4vvsxpfs",
direction: "in",
action: "accept",
proto: "TCP",
source: "0.0.0.0/0",
sourceType: "net",
destination: "0.0.0.0/0",
destinationType: "net",
destPort: "60000",
destPortType: "port",
description: "this is a test",
prio: 1,
repeatType: "Weekly",
repeatDays: [
2,
3,
],
repeatStartTime: "02:00",
repeatEndTime: "04:00",
startTime: 1782662400,
endTime: 1782921540,
status: true,
});
import pulumi
import pulumi_volcenginecc as volcenginecc
example = volcenginecc.fwcenter.NatFireWallControlPolicy("Example",
nat_firewall_id="nfw-yepxxxxxxx4vvsxpfs",
direction="in",
action="accept",
proto="TCP",
source="0.0.0.0/0",
source_type="net",
destination="0.0.0.0/0",
destination_type="net",
dest_port="60000",
dest_port_type="port",
description="this is a test",
prio=1,
repeat_type="Weekly",
repeat_days=[
2,
3,
],
repeat_start_time="02:00",
repeat_end_time="04:00",
start_time=1782662400,
end_time=1782921540,
status=True)
package main
import (
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/volcengine/pulumi-volcenginecc/sdk/go/volcenginecc/fwcenter"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := fwcenter.NewNatFireWallControlPolicy(ctx, "Example", &fwcenter.NatFireWallControlPolicyArgs{
NatFirewallId: pulumi.String("nfw-yepxxxxxxx4vvsxpfs"),
Direction: pulumi.String("in"),
Action: pulumi.String("accept"),
Proto: pulumi.String("TCP"),
Source: pulumi.String("0.0.0.0/0"),
SourceType: pulumi.String("net"),
Destination: pulumi.String("0.0.0.0/0"),
DestinationType: pulumi.String("net"),
DestPort: pulumi.String("60000"),
DestPortType: pulumi.String("port"),
Description: pulumi.String("this is a test"),
Prio: pulumi.Int(1),
RepeatType: pulumi.String("Weekly"),
RepeatDays: pulumi.IntArray{
pulumi.Int(2),
pulumi.Int(3),
},
RepeatStartTime: pulumi.String("02:00"),
RepeatEndTime: pulumi.String("04:00"),
StartTime: pulumi.Int(1782662400),
EndTime: pulumi.Int(1782921540),
Status: pulumi.Bool(true),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Volcenginecc = Volcengine.Pulumi.Volcenginecc;
return await Deployment.RunAsync(() =>
{
var example = new Volcenginecc.Fwcenter.NatFireWallControlPolicy("Example", new()
{
NatFirewallId = "nfw-yepxxxxxxx4vvsxpfs",
Direction = "in",
Action = "accept",
Proto = "TCP",
Source = "0.0.0.0/0",
SourceType = "net",
Destination = "0.0.0.0/0",
DestinationType = "net",
DestPort = "60000",
DestPortType = "port",
Description = "this is a test",
Prio = 1,
RepeatType = "Weekly",
RepeatDays = new[]
{
2,
3,
},
RepeatStartTime = "02:00",
RepeatEndTime = "04:00",
StartTime = 1782662400,
EndTime = 1782921540,
Status = true,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.volcengine.volcenginecc.fwcenter.NatFireWallControlPolicy;
import com.volcengine.volcenginecc.fwcenter.NatFireWallControlPolicyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new NatFireWallControlPolicy("example", NatFireWallControlPolicyArgs.builder()
.natFirewallId("nfw-yepxxxxxxx4vvsxpfs")
.direction("in")
.action("accept")
.proto("TCP")
.source("0.0.0.0/0")
.sourceType("net")
.destination("0.0.0.0/0")
.destinationType("net")
.destPort("60000")
.destPortType("port")
.description("this is a test")
.prio(1)
.repeatType("Weekly")
.repeatDays(
2,
3)
.repeatStartTime("02:00")
.repeatEndTime("04:00")
.startTime(1782662400)
.endTime(1782921540)
.status(true)
.build());
}
}
resources:
example:
type: volcenginecc:fwcenter:NatFireWallControlPolicy
name: Example
properties:
natFirewallId: nfw-yepxxxxxxx4vvsxpfs
direction: in
action: accept
proto: TCP
source: 0.0.0.0/0
sourceType: net
destination: 0.0.0.0/0
destinationType: net
destPort: '60000'
destPortType: port
description: this is a test
prio: 1
repeatType: Weekly
repeatDays:
- 2
- 3
repeatStartTime: 02:00
repeatEndTime: 04:00
startTime: 1.7826624e+09
endTime: 1.78292154e+09
status: true
pulumi {
required_providers {
volcenginecc = {
source = "pulumi/volcenginecc"
}
}
}
resource "volcenginecc_fwcenter_natfirewallcontrolpolicy" "Example" {
nat_firewall_id = "nfw-yepxxxxxxx4vvsxpfs"
direction = "in"
action = "accept"
proto = "TCP"
source = "0.0.0.0/0"
source_type = "net"
destination = "0.0.0.0/0"
destination_type = "net"
dest_port = "60000"
dest_port_type = "port"
description = "this is a test"
prio = 1
repeat_type = "Weekly"
repeat_days = [2, 3]
repeat_start_time = "02:00"
repeat_end_time = "04:00"
start_time = 1782662400
end_time = 1782921540
status = true
}
Create NatFireWallControlPolicy Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new NatFireWallControlPolicy(name: string, args: NatFireWallControlPolicyArgs, opts?: CustomResourceOptions);@overload
def NatFireWallControlPolicy(resource_name: str,
args: NatFireWallControlPolicyArgs,
opts: Optional[ResourceOptions] = None)
@overload
def NatFireWallControlPolicy(resource_name: str,
opts: Optional[ResourceOptions] = None,
nat_firewall_id: Optional[str] = None,
proto: Optional[str] = None,
source_type: Optional[str] = None,
source: Optional[str] = None,
destination: Optional[str] = None,
destination_type: Optional[str] = None,
direction: Optional[str] = None,
action: Optional[str] = None,
description: Optional[str] = None,
end_time: Optional[int] = None,
dest_port_type: Optional[str] = None,
repeat_days: Optional[Sequence[int]] = None,
repeat_end_time: Optional[str] = None,
repeat_start_time: Optional[str] = None,
repeat_type: Optional[str] = None,
prio: Optional[int] = None,
dest_port: Optional[str] = None,
start_time: Optional[int] = None,
status: Optional[bool] = None)func NewNatFireWallControlPolicy(ctx *Context, name string, args NatFireWallControlPolicyArgs, opts ...ResourceOption) (*NatFireWallControlPolicy, error)public NatFireWallControlPolicy(string name, NatFireWallControlPolicyArgs args, CustomResourceOptions? opts = null)
public NatFireWallControlPolicy(String name, NatFireWallControlPolicyArgs args)
public NatFireWallControlPolicy(String name, NatFireWallControlPolicyArgs args, CustomResourceOptions options)
type: volcenginecc:fwcenter:NatFireWallControlPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "volcenginecc_fwcenter_nat_fire_wall_control_policy" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args NatFireWallControlPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args NatFireWallControlPolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args NatFireWallControlPolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args NatFireWallControlPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args NatFireWallControlPolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var natFireWallControlPolicyResource = new Volcenginecc.Fwcenter.NatFireWallControlPolicy("natFireWallControlPolicyResource", new()
{
NatFirewallId = "string",
Proto = "string",
SourceType = "string",
Source = "string",
Destination = "string",
DestinationType = "string",
Direction = "string",
Action = "string",
Description = "string",
EndTime = 0,
DestPortType = "string",
RepeatDays = new[]
{
0,
},
RepeatEndTime = "string",
RepeatStartTime = "string",
RepeatType = "string",
Prio = 0,
DestPort = "string",
StartTime = 0,
Status = false,
});
example, err := fwcenter.NewNatFireWallControlPolicy(ctx, "natFireWallControlPolicyResource", &fwcenter.NatFireWallControlPolicyArgs{
NatFirewallId: pulumi.String("string"),
Proto: pulumi.String("string"),
SourceType: pulumi.String("string"),
Source: pulumi.String("string"),
Destination: pulumi.String("string"),
DestinationType: pulumi.String("string"),
Direction: pulumi.String("string"),
Action: pulumi.String("string"),
Description: pulumi.String("string"),
EndTime: pulumi.Int(0),
DestPortType: pulumi.String("string"),
RepeatDays: pulumi.IntArray{
pulumi.Int(0),
},
RepeatEndTime: pulumi.String("string"),
RepeatStartTime: pulumi.String("string"),
RepeatType: pulumi.String("string"),
Prio: pulumi.Int(0),
DestPort: pulumi.String("string"),
StartTime: pulumi.Int(0),
Status: pulumi.Bool(false),
})
resource "volcenginecc_fwcenter_nat_fire_wall_control_policy" "natFireWallControlPolicyResource" {
lifecycle {
create_before_destroy = true
}
nat_firewall_id = "string"
proto = "string"
source_type = "string"
source = "string"
destination = "string"
destination_type = "string"
direction = "string"
action = "string"
description = "string"
end_time = 0
dest_port_type = "string"
repeat_days = [0]
repeat_end_time = "string"
repeat_start_time = "string"
repeat_type = "string"
prio = 0
dest_port = "string"
start_time = 0
status = false
}
var natFireWallControlPolicyResource = new NatFireWallControlPolicy("natFireWallControlPolicyResource", NatFireWallControlPolicyArgs.builder()
.natFirewallId("string")
.proto("string")
.sourceType("string")
.source("string")
.destination("string")
.destinationType("string")
.direction("string")
.action("string")
.description("string")
.endTime(0)
.destPortType("string")
.repeatDays(0)
.repeatEndTime("string")
.repeatStartTime("string")
.repeatType("string")
.prio(0)
.destPort("string")
.startTime(0)
.status(false)
.build());
nat_fire_wall_control_policy_resource = volcenginecc.fwcenter.NatFireWallControlPolicy("natFireWallControlPolicyResource",
nat_firewall_id="string",
proto="string",
source_type="string",
source="string",
destination="string",
destination_type="string",
direction="string",
action="string",
description="string",
end_time=0,
dest_port_type="string",
repeat_days=[0],
repeat_end_time="string",
repeat_start_time="string",
repeat_type="string",
prio=0,
dest_port="string",
start_time=0,
status=False)
const natFireWallControlPolicyResource = new volcenginecc.fwcenter.NatFireWallControlPolicy("natFireWallControlPolicyResource", {
natFirewallId: "string",
proto: "string",
sourceType: "string",
source: "string",
destination: "string",
destinationType: "string",
direction: "string",
action: "string",
description: "string",
endTime: 0,
destPortType: "string",
repeatDays: [0],
repeatEndTime: "string",
repeatStartTime: "string",
repeatType: "string",
prio: 0,
destPort: "string",
startTime: 0,
status: false,
});
type: volcenginecc:fwcenter:NatFireWallControlPolicy
properties:
action: string
description: string
destPort: string
destPortType: string
destination: string
destinationType: string
direction: string
endTime: 0
natFirewallId: string
prio: 0
proto: string
repeatDays:
- 0
repeatEndTime: string
repeatStartTime: string
repeatType: string
source: string
sourceType: string
startTime: 0
status: false
NatFireWallControlPolicy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The NatFireWallControlPolicy resource accepts the following input properties:
- Action string
- Policy action. accept: allow; deny: deny; monitor: observe.
- Destination string
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- Destination
Type string - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- Direction string
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- Nat
Firewall stringId - NAT border firewall instance ID.
- Proto string
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- Source string
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- Source
Type string - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- Description string
- Description of the policy.
- Dest
Port string - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- Dest
Port stringType - Destination port type. port: port; group: port address book.
- End
Time int - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- Prio int
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- Repeat
Days List<int> - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- Repeat
End stringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- Repeat
Start stringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- Repeat
Type string - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- Start
Time int - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- Status bool
- Policy switch status. false: off; true: on.
- Action string
- Policy action. accept: allow; deny: deny; monitor: observe.
- Destination string
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- Destination
Type string - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- Direction string
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- Nat
Firewall stringId - NAT border firewall instance ID.
- Proto string
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- Source string
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- Source
Type string - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- Description string
- Description of the policy.
- Dest
Port string - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- Dest
Port stringType - Destination port type. port: port; group: port address book.
- End
Time int - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- Prio int
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- Repeat
Days []int - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- Repeat
End stringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- Repeat
Start stringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- Repeat
Type string - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- Start
Time int - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- Status bool
- Policy switch status. false: off; true: on.
- action string
- Policy action. accept: allow; deny: deny; monitor: observe.
- destination string
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination_
type string - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction string
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- nat_
firewall_ stringid - NAT border firewall instance ID.
- proto string
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- source string
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source_
type string - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- description string
- Description of the policy.
- dest_
port string - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest_
port_ stringtype - Destination port type. port: port; group: port address book.
- end_
time number - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- prio number
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- repeat_
days list(number) - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat_
end_ stringtime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat_
start_ stringtime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat_
type string - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- start_
time number - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status bool
- Policy switch status. false: off; true: on.
- action String
- Policy action. accept: allow; deny: deny; monitor: observe.
- destination String
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination
Type String - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction String
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- nat
Firewall StringId - NAT border firewall instance ID.
- proto String
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- source String
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source
Type String - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- description String
- Description of the policy.
- dest
Port String - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest
Port StringType - Destination port type. port: port; group: port address book.
- end
Time Integer - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- prio Integer
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- repeat
Days List<Integer> - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat
End StringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Start StringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Type String - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- start
Time Integer - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status Boolean
- Policy switch status. false: off; true: on.
- action string
- Policy action. accept: allow; deny: deny; monitor: observe.
- destination string
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination
Type string - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction string
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- nat
Firewall stringId - NAT border firewall instance ID.
- proto string
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- source string
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source
Type string - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- description string
- Description of the policy.
- dest
Port string - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest
Port stringType - Destination port type. port: port; group: port address book.
- end
Time number - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- prio number
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- repeat
Days number[] - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat
End stringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Start stringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Type string - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- start
Time number - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status boolean
- Policy switch status. false: off; true: on.
- action str
- Policy action. accept: allow; deny: deny; monitor: observe.
- destination str
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination_
type str - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction str
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- nat_
firewall_ strid - NAT border firewall instance ID.
- proto str
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- source str
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source_
type str - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- description str
- Description of the policy.
- dest_
port str - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest_
port_ strtype - Destination port type. port: port; group: port address book.
- end_
time int - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- prio int
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- repeat_
days Sequence[int] - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat_
end_ strtime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat_
start_ strtime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat_
type str - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- start_
time int - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status bool
- Policy switch status. false: off; true: on.
- action String
- Policy action. accept: allow; deny: deny; monitor: observe.
- destination String
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination
Type String - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction String
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- nat
Firewall StringId - NAT border firewall instance ID.
- proto String
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- source String
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source
Type String - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- description String
- Description of the policy.
- dest
Port String - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest
Port StringType - Destination port type. port: port; group: port address book.
- end
Time Number - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- prio Number
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- repeat
Days List<Number> - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat
End StringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Start StringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Type String - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- start
Time Number - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status Boolean
- Policy switch status. false: off; true: on.
Outputs
All input properties are implicitly available as output properties. Additionally, the NatFireWallControlPolicy resource produces the following output properties:
- Account
Id string - User's unique identifier ID.
- Dest
Port stringGroup Type - Destination port book type.
- Dest
Port List<Volcengine.List V1s Nat Fire Wall Control Policy Dest Port List V1> - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Dest
Port List<string>Lists - Destination port list.
- Destination
Cidr List<Volcengine.List V1s Nat Fire Wall Control Policy Destination Cidr List V1> - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Destination
Cidr List<string>Lists - Destination CIDR list.
- Destination
Domain List<string>Lists - Destination domain name list.
- Destination
Group stringType - Destination address book type.
- Effect
Status int - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- Hit
Cnt int - Hit count, indicating the number of times this policy has been triggered.
- Id string
- The provider-assigned unique ID for this managed resource.
- Is
Effected bool - Whether the policy is effective.
- Last
Hit intTime - Last hit timestamp, indicating the last time this policy was triggered.
- Rule
Id string - Unique ID of the access control policy.
- Source
Cidr List<Volcengine.List V1s Nat Fire Wall Control Policy Source Cidr List V1> - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Source
Cidr List<string>Lists - Source CIDR list.
- Source
Group stringType - Source address book type.
- Update
Time int - Policy update timestamp.
- Use
Count int - Number of policies occupied by this policy.
- Account
Id string - User's unique identifier ID.
- Dest
Port stringGroup Type - Destination port book type.
- Dest
Port []NatList V1s Fire Wall Control Policy Dest Port List V1 - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Dest
Port []stringLists - Destination port list.
- Destination
Cidr []NatList V1s Fire Wall Control Policy Destination Cidr List V1 - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Destination
Cidr []stringLists - Destination CIDR list.
- Destination
Domain []stringLists - Destination domain name list.
- Destination
Group stringType - Destination address book type.
- Effect
Status int - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- Hit
Cnt int - Hit count, indicating the number of times this policy has been triggered.
- Id string
- The provider-assigned unique ID for this managed resource.
- Is
Effected bool - Whether the policy is effective.
- Last
Hit intTime - Last hit timestamp, indicating the last time this policy was triggered.
- Rule
Id string - Unique ID of the access control policy.
- Source
Cidr []NatList V1s Fire Wall Control Policy Source Cidr List V1 - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Source
Cidr []stringLists - Source CIDR list.
- Source
Group stringType - Source address book type.
- Update
Time int - Policy update timestamp.
- Use
Count int - Number of policies occupied by this policy.
- account_
id string - User's unique identifier ID.
- dest_
port_ stringgroup_ type - Destination port book type.
- dest_
port_ list(object)list_ v1s - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest_
port_ list(string)lists - Destination port list.
- destination_
cidr_ list(object)list_ v1s - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination_
cidr_ list(string)lists - Destination CIDR list.
- destination_
domain_ list(string)lists - Destination domain name list.
- destination_
group_ stringtype - Destination address book type.
- effect_
status number - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- hit_
cnt number - Hit count, indicating the number of times this policy has been triggered.
- id string
- The provider-assigned unique ID for this managed resource.
- is_
effected bool - Whether the policy is effective.
- last_
hit_ numbertime - Last hit timestamp, indicating the last time this policy was triggered.
- rule_
id string - Unique ID of the access control policy.
- source_
cidr_ list(object)list_ v1s - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source_
cidr_ list(string)lists - Source CIDR list.
- source_
group_ stringtype - Source address book type.
- update_
time number - Policy update timestamp.
- use_
count number - Number of policies occupied by this policy.
- account
Id String - User's unique identifier ID.
- dest
Port StringGroup Type - Destination port book type.
- dest
Port List<NatList V1s Fire Wall Control Policy Dest Port List V1> - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest
Port List<String>Lists - Destination port list.
- destination
Cidr List<NatList V1s Fire Wall Control Policy Destination Cidr List V1> - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination
Cidr List<String>Lists - Destination CIDR list.
- destination
Domain List<String>Lists - Destination domain name list.
- destination
Group StringType - Destination address book type.
- effect
Status Integer - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- hit
Cnt Integer - Hit count, indicating the number of times this policy has been triggered.
- id String
- The provider-assigned unique ID for this managed resource.
- is
Effected Boolean - Whether the policy is effective.
- last
Hit IntegerTime - Last hit timestamp, indicating the last time this policy was triggered.
- rule
Id String - Unique ID of the access control policy.
- source
Cidr List<NatList V1s Fire Wall Control Policy Source Cidr List V1> - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source
Cidr List<String>Lists - Source CIDR list.
- source
Group StringType - Source address book type.
- update
Time Integer - Policy update timestamp.
- use
Count Integer - Number of policies occupied by this policy.
- account
Id string - User's unique identifier ID.
- dest
Port stringGroup Type - Destination port book type.
- dest
Port NatList V1s Fire Wall Control Policy Dest Port List V1[] - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest
Port string[]Lists - Destination port list.
- destination
Cidr NatList V1s Fire Wall Control Policy Destination Cidr List V1[] - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination
Cidr string[]Lists - Destination CIDR list.
- destination
Domain string[]Lists - Destination domain name list.
- destination
Group stringType - Destination address book type.
- effect
Status number - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- hit
Cnt number - Hit count, indicating the number of times this policy has been triggered.
- id string
- The provider-assigned unique ID for this managed resource.
- is
Effected boolean - Whether the policy is effective.
- last
Hit numberTime - Last hit timestamp, indicating the last time this policy was triggered.
- rule
Id string - Unique ID of the access control policy.
- source
Cidr NatList V1s Fire Wall Control Policy Source Cidr List V1[] - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source
Cidr string[]Lists - Source CIDR list.
- source
Group stringType - Source address book type.
- update
Time number - Policy update timestamp.
- use
Count number - Number of policies occupied by this policy.
- account_
id str - User's unique identifier ID.
- dest_
port_ strgroup_ type - Destination port book type.
- dest_
port_ Sequence[Natlist_ v1s Fire Wall Control Policy Dest Port List V1] - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest_
port_ Sequence[str]lists - Destination port list.
- destination_
cidr_ Sequence[Natlist_ v1s Fire Wall Control Policy Destination Cidr List V1] - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination_
cidr_ Sequence[str]lists - Destination CIDR list.
- destination_
domain_ Sequence[str]lists - Destination domain name list.
- destination_
group_ strtype - Destination address book type.
- effect_
status int - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- hit_
cnt int - Hit count, indicating the number of times this policy has been triggered.
- id str
- The provider-assigned unique ID for this managed resource.
- is_
effected bool - Whether the policy is effective.
- last_
hit_ inttime - Last hit timestamp, indicating the last time this policy was triggered.
- rule_
id str - Unique ID of the access control policy.
- source_
cidr_ Sequence[Natlist_ v1s Fire Wall Control Policy Source Cidr List V1] - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source_
cidr_ Sequence[str]lists - Source CIDR list.
- source_
group_ strtype - Source address book type.
- update_
time int - Policy update timestamp.
- use_
count int - Number of policies occupied by this policy.
- account
Id String - User's unique identifier ID.
- dest
Port StringGroup Type - Destination port book type.
- dest
Port List<Property Map>List V1s - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest
Port List<String>Lists - Destination port list.
- destination
Cidr List<Property Map>List V1s - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination
Cidr List<String>Lists - Destination CIDR list.
- destination
Domain List<String>Lists - Destination domain name list.
- destination
Group StringType - Destination address book type.
- effect
Status Number - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- hit
Cnt Number - Hit count, indicating the number of times this policy has been triggered.
- id String
- The provider-assigned unique ID for this managed resource.
- is
Effected Boolean - Whether the policy is effective.
- last
Hit NumberTime - Last hit timestamp, indicating the last time this policy was triggered.
- rule
Id String - Unique ID of the access control policy.
- source
Cidr List<Property Map>List V1s - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source
Cidr List<String>Lists - Source CIDR list.
- source
Group StringType - Source address book type.
- update
Time Number - Policy update timestamp.
- use
Count Number - Number of policies occupied by this policy.
Look up Existing NatFireWallControlPolicy Resource
Get an existing NatFireWallControlPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: NatFireWallControlPolicyState, opts?: CustomResourceOptions): NatFireWallControlPolicy@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[str] = None,
action: Optional[str] = None,
description: Optional[str] = None,
dest_port: Optional[str] = None,
dest_port_group_type: Optional[str] = None,
dest_port_list_v1s: Optional[Sequence[NatFireWallControlPolicyDestPortListV1Args]] = None,
dest_port_lists: Optional[Sequence[str]] = None,
dest_port_type: Optional[str] = None,
destination: Optional[str] = None,
destination_cidr_list_v1s: Optional[Sequence[NatFireWallControlPolicyDestinationCidrListV1Args]] = None,
destination_cidr_lists: Optional[Sequence[str]] = None,
destination_domain_lists: Optional[Sequence[str]] = None,
destination_group_type: Optional[str] = None,
destination_type: Optional[str] = None,
direction: Optional[str] = None,
effect_status: Optional[int] = None,
end_time: Optional[int] = None,
hit_cnt: Optional[int] = None,
is_effected: Optional[bool] = None,
last_hit_time: Optional[int] = None,
nat_firewall_id: Optional[str] = None,
prio: Optional[int] = None,
proto: Optional[str] = None,
repeat_days: Optional[Sequence[int]] = None,
repeat_end_time: Optional[str] = None,
repeat_start_time: Optional[str] = None,
repeat_type: Optional[str] = None,
rule_id: Optional[str] = None,
source: Optional[str] = None,
source_cidr_list_v1s: Optional[Sequence[NatFireWallControlPolicySourceCidrListV1Args]] = None,
source_cidr_lists: Optional[Sequence[str]] = None,
source_group_type: Optional[str] = None,
source_type: Optional[str] = None,
start_time: Optional[int] = None,
status: Optional[bool] = None,
update_time: Optional[int] = None,
use_count: Optional[int] = None) -> NatFireWallControlPolicyfunc GetNatFireWallControlPolicy(ctx *Context, name string, id IDInput, state *NatFireWallControlPolicyState, opts ...ResourceOption) (*NatFireWallControlPolicy, error)public static NatFireWallControlPolicy Get(string name, Input<string> id, NatFireWallControlPolicyState? state, CustomResourceOptions? opts = null)public static NatFireWallControlPolicy get(String name, Output<String> id, NatFireWallControlPolicyState state, CustomResourceOptions options)resources: _: type: volcenginecc:fwcenter:NatFireWallControlPolicy get: id: ${id}import {
to = volcenginecc_fwcenter_nat_fire_wall_control_policy.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Id string - User's unique identifier ID.
- Action string
- Policy action. accept: allow; deny: deny; monitor: observe.
- Description string
- Description of the policy.
- Dest
Port string - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- Dest
Port stringGroup Type - Destination port book type.
- Dest
Port List<Volcengine.List V1s Nat Fire Wall Control Policy Dest Port List V1> - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Dest
Port List<string>Lists - Destination port list.
- Dest
Port stringType - Destination port type. port: port; group: port address book.
- Destination string
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- Destination
Cidr List<Volcengine.List V1s Nat Fire Wall Control Policy Destination Cidr List V1> - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Destination
Cidr List<string>Lists - Destination CIDR list.
- Destination
Domain List<string>Lists - Destination domain name list.
- Destination
Group stringType - Destination address book type.
- Destination
Type string - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- Direction string
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- Effect
Status int - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- End
Time int - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- Hit
Cnt int - Hit count, indicating the number of times this policy has been triggered.
- Is
Effected bool - Whether the policy is effective.
- Last
Hit intTime - Last hit timestamp, indicating the last time this policy was triggered.
- Nat
Firewall stringId - NAT border firewall instance ID.
- Prio int
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- Proto string
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- Repeat
Days List<int> - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- Repeat
End stringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- Repeat
Start stringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- Repeat
Type string - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- Rule
Id string - Unique ID of the access control policy.
- Source string
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- Source
Cidr List<Volcengine.List V1s Nat Fire Wall Control Policy Source Cidr List V1> - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Source
Cidr List<string>Lists - Source CIDR list.
- Source
Group stringType - Source address book type.
- Source
Type string - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- Start
Time int - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- Status bool
- Policy switch status. false: off; true: on.
- Update
Time int - Policy update timestamp.
- Use
Count int - Number of policies occupied by this policy.
- Account
Id string - User's unique identifier ID.
- Action string
- Policy action. accept: allow; deny: deny; monitor: observe.
- Description string
- Description of the policy.
- Dest
Port string - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- Dest
Port stringGroup Type - Destination port book type.
- Dest
Port []NatList V1s Fire Wall Control Policy Dest Port List V1Args - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Dest
Port []stringLists - Destination port list.
- Dest
Port stringType - Destination port type. port: port; group: port address book.
- Destination string
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- Destination
Cidr []NatList V1s Fire Wall Control Policy Destination Cidr List V1Args - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Destination
Cidr []stringLists - Destination CIDR list.
- Destination
Domain []stringLists - Destination domain name list.
- Destination
Group stringType - Destination address book type.
- Destination
Type string - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- Direction string
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- Effect
Status int - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- End
Time int - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- Hit
Cnt int - Hit count, indicating the number of times this policy has been triggered.
- Is
Effected bool - Whether the policy is effective.
- Last
Hit intTime - Last hit timestamp, indicating the last time this policy was triggered.
- Nat
Firewall stringId - NAT border firewall instance ID.
- Prio int
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- Proto string
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- Repeat
Days []int - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- Repeat
End stringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- Repeat
Start stringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- Repeat
Type string - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- Rule
Id string - Unique ID of the access control policy.
- Source string
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- Source
Cidr []NatList V1s Fire Wall Control Policy Source Cidr List V1Args - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- Source
Cidr []stringLists - Source CIDR list.
- Source
Group stringType - Source address book type.
- Source
Type string - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- Start
Time int - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- Status bool
- Policy switch status. false: off; true: on.
- Update
Time int - Policy update timestamp.
- Use
Count int - Number of policies occupied by this policy.
- account_
id string - User's unique identifier ID.
- action string
- Policy action. accept: allow; deny: deny; monitor: observe.
- description string
- Description of the policy.
- dest_
port string - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest_
port_ stringgroup_ type - Destination port book type.
- dest_
port_ list(object)list_ v1s - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest_
port_ list(string)lists - Destination port list.
- dest_
port_ stringtype - Destination port type. port: port; group: port address book.
- destination string
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination_
cidr_ list(object)list_ v1s - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination_
cidr_ list(string)lists - Destination CIDR list.
- destination_
domain_ list(string)lists - Destination domain name list.
- destination_
group_ stringtype - Destination address book type.
- destination_
type string - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction string
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- effect_
status number - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- end_
time number - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- hit_
cnt number - Hit count, indicating the number of times this policy has been triggered.
- is_
effected bool - Whether the policy is effective.
- last_
hit_ numbertime - Last hit timestamp, indicating the last time this policy was triggered.
- nat_
firewall_ stringid - NAT border firewall instance ID.
- prio number
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- proto string
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- repeat_
days list(number) - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat_
end_ stringtime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat_
start_ stringtime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat_
type string - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- rule_
id string - Unique ID of the access control policy.
- source string
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source_
cidr_ list(object)list_ v1s - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source_
cidr_ list(string)lists - Source CIDR list.
- source_
group_ stringtype - Source address book type.
- source_
type string - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- start_
time number - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status bool
- Policy switch status. false: off; true: on.
- update_
time number - Policy update timestamp.
- use_
count number - Number of policies occupied by this policy.
- account
Id String - User's unique identifier ID.
- action String
- Policy action. accept: allow; deny: deny; monitor: observe.
- description String
- Description of the policy.
- dest
Port String - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest
Port StringGroup Type - Destination port book type.
- dest
Port List<NatList V1s Fire Wall Control Policy Dest Port List V1> - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest
Port List<String>Lists - Destination port list.
- dest
Port StringType - Destination port type. port: port; group: port address book.
- destination String
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination
Cidr List<NatList V1s Fire Wall Control Policy Destination Cidr List V1> - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination
Cidr List<String>Lists - Destination CIDR list.
- destination
Domain List<String>Lists - Destination domain name list.
- destination
Group StringType - Destination address book type.
- destination
Type String - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction String
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- effect
Status Integer - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- end
Time Integer - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- hit
Cnt Integer - Hit count, indicating the number of times this policy has been triggered.
- is
Effected Boolean - Whether the policy is effective.
- last
Hit IntegerTime - Last hit timestamp, indicating the last time this policy was triggered.
- nat
Firewall StringId - NAT border firewall instance ID.
- prio Integer
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- proto String
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- repeat
Days List<Integer> - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat
End StringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Start StringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Type String - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- rule
Id String - Unique ID of the access control policy.
- source String
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source
Cidr List<NatList V1s Fire Wall Control Policy Source Cidr List V1> - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source
Cidr List<String>Lists - Source CIDR list.
- source
Group StringType - Source address book type.
- source
Type String - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- start
Time Integer - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status Boolean
- Policy switch status. false: off; true: on.
- update
Time Integer - Policy update timestamp.
- use
Count Integer - Number of policies occupied by this policy.
- account
Id string - User's unique identifier ID.
- action string
- Policy action. accept: allow; deny: deny; monitor: observe.
- description string
- Description of the policy.
- dest
Port string - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest
Port stringGroup Type - Destination port book type.
- dest
Port NatList V1s Fire Wall Control Policy Dest Port List V1[] - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest
Port string[]Lists - Destination port list.
- dest
Port stringType - Destination port type. port: port; group: port address book.
- destination string
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination
Cidr NatList V1s Fire Wall Control Policy Destination Cidr List V1[] - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination
Cidr string[]Lists - Destination CIDR list.
- destination
Domain string[]Lists - Destination domain name list.
- destination
Group stringType - Destination address book type.
- destination
Type string - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction string
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- effect
Status number - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- end
Time number - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- hit
Cnt number - Hit count, indicating the number of times this policy has been triggered.
- is
Effected boolean - Whether the policy is effective.
- last
Hit numberTime - Last hit timestamp, indicating the last time this policy was triggered.
- nat
Firewall stringId - NAT border firewall instance ID.
- prio number
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- proto string
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- repeat
Days number[] - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat
End stringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Start stringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Type string - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- rule
Id string - Unique ID of the access control policy.
- source string
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source
Cidr NatList V1s Fire Wall Control Policy Source Cidr List V1[] - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source
Cidr string[]Lists - Source CIDR list.
- source
Group stringType - Source address book type.
- source
Type string - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- start
Time number - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status boolean
- Policy switch status. false: off; true: on.
- update
Time number - Policy update timestamp.
- use
Count number - Number of policies occupied by this policy.
- account_
id str - User's unique identifier ID.
- action str
- Policy action. accept: allow; deny: deny; monitor: observe.
- description str
- Description of the policy.
- dest_
port str - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest_
port_ strgroup_ type - Destination port book type.
- dest_
port_ Sequence[Natlist_ v1s Fire Wall Control Policy Dest Port List V1Args] - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest_
port_ Sequence[str]lists - Destination port list.
- dest_
port_ strtype - Destination port type. port: port; group: port address book.
- destination str
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination_
cidr_ Sequence[Natlist_ v1s Fire Wall Control Policy Destination Cidr List V1Args] - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination_
cidr_ Sequence[str]lists - Destination CIDR list.
- destination_
domain_ Sequence[str]lists - Destination domain name list.
- destination_
group_ strtype - Destination address book type.
- destination_
type str - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction str
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- effect_
status int - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- end_
time int - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- hit_
cnt int - Hit count, indicating the number of times this policy has been triggered.
- is_
effected bool - Whether the policy is effective.
- last_
hit_ inttime - Last hit timestamp, indicating the last time this policy was triggered.
- nat_
firewall_ strid - NAT border firewall instance ID.
- prio int
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- proto str
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- repeat_
days Sequence[int] - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat_
end_ strtime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat_
start_ strtime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat_
type str - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- rule_
id str - Unique ID of the access control policy.
- source str
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source_
cidr_ Sequence[Natlist_ v1s Fire Wall Control Policy Source Cidr List V1Args] - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source_
cidr_ Sequence[str]lists - Source CIDR list.
- source_
group_ strtype - Source address book type.
- source_
type str - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- start_
time int - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status bool
- Policy switch status. false: off; true: on.
- update_
time int - Policy update timestamp.
- use_
count int - Number of policies occupied by this policy.
- account
Id String - User's unique identifier ID.
- action String
- Policy action. accept: allow; deny: deny; monitor: observe.
- description String
- Description of the policy.
- dest
Port String - Destination port, either a single port or a port range (e.g., 22/22, 100/200). If DestPortType is group, provide a list of port address book UUIDs, separated by commas. Leave blank if the protocol is ICMP or ANY.
- dest
Port StringGroup Type - Destination port book type.
- dest
Port List<Property Map>List V1s - Destination port list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- dest
Port List<String>Lists - Destination port list.
- dest
Port StringType - Destination port type. port: port; group: port address book.
- destination String
- Destination address. The value depends on DestinationType: if net, use the destination CIDR address; if group, use the destination address book UUID. Separate multiple address books with commas.
- destination
Cidr List<Property Map>List V1s - Destination CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- destination
Cidr List<String>Lists - Destination CIDR list.
- destination
Domain List<String>Lists - Destination domain name list.
- destination
Group StringType - Destination address book type.
- destination
Type String - Destination address type, used to specify the format and source of the destination address in the access control policy. net: destination network segment (CIDR format); group: destination address book (UUID format).
- direction String
- Policy direction, used to specify the traffic direction for the access control policy. in: inbound; out: outbound.
- effect
Status Number - Status of the access control policy. Values: 1: Inactive; 2: Deploying; 3: Active.
- end
Time Number - Policy end timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- hit
Cnt Number - Hit count, indicating the number of times this policy has been triggered.
- is
Effected Boolean - Whether the policy is effective.
- last
Hit NumberTime - Last hit timestamp, indicating the last time this policy was triggered.
- nat
Firewall StringId - NAT border firewall instance ID.
- prio Number
- Policy priority. A lower value indicates a higher priority. By default, the priority is set to the highest. 0: lowest priority; 1: highest priority. When modifying, the minimum value for this parameter is 1.
- proto String
- Protocol type. ICMP: ICMP protocol; TCP: TCP protocol; UDP: UDP protocol; ANY: any protocol.
- repeat
Days List<Number> - Repeat cycle. This field is not required when RepeatType is Daily. When RepeatType is Weekly, the value range is [0, 6], corresponding to Sunday through Saturday. When RepeatType is Monthly, the value range is [1, 31], corresponding to the days of the month.
- repeat
End StringTime - Repeat end time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Start StringTime - Repeat start time. This field is required when RepeatType is Daily, Weekly, or Monthly. Accurate to the minute, format: hh:mm.
- repeat
Type String - Policy repeat type. Permanent: always effective; Once: effective only once; Daily: effective every day; Weekly: effective every week; Monthly: effective every month.
- rule
Id String - Unique ID of the access control policy.
- source String
- Source address. The format varies based on the value of SourceType. If SourceType is net, use a CIDR address; if SourceType is group, use the UUID of the source address book; if SourceType is location, use the region code.
- source
Cidr List<Property Map>List V1s - Source CIDR list (structured). Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
- source
Cidr List<String>Lists - Source CIDR list.
- source
Group StringType - Source address book type.
- source
Type String - Source address type, used to specify the format and source of the source address in the access control policy. net: source network segment (CIDR format); group: source address book (UUID format); location: source region (region code format).
- start
Time Number - Policy start timestamp. This field is not required when RepeatType is Permanent. When RepeatType is Once, Daily, Weekly, or Monthly, this field must be provided.
- status Boolean
- Policy switch status. false: off; true: on.
- update
Time Number - Policy update timestamp.
- use
Count Number - Number of policies occupied by this policy.
Supporting Types
NatFireWallControlPolicyDestPortListV1, NatFireWallControlPolicyDestPortListV1Args
- Address string
- Specific address information.
- Description string
- Description.
- Type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- Address string
- Specific address information.
- Description string
- Description.
- Type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address string
- Specific address information.
- description string
- Description.
- type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address String
- Specific address information.
- description String
- Description.
- type String
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address string
- Specific address information.
- description string
- Description.
- type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address str
- Specific address information.
- description str
- Description.
- type str
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address String
- Specific address information.
- description String
- Description.
- type String
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
NatFireWallControlPolicyDestinationCidrListV1, NatFireWallControlPolicyDestinationCidrListV1Args
- Address string
- Specific address information.
- Description string
- Description.
- Type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- Address string
- Specific address information.
- Description string
- Description.
- Type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address string
- Specific address information.
- description string
- Description.
- type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address String
- Specific address information.
- description String
- Description.
- type String
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address string
- Specific address information.
- description string
- Description.
- type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address str
- Specific address information.
- description str
- Description.
- type str
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address String
- Specific address information.
- description String
- Description.
- type String
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
NatFireWallControlPolicySourceCidrListV1, NatFireWallControlPolicySourceCidrListV1Args
- Address string
- Specific address information.
- Description string
- Description.
- Type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- Address string
- Specific address information.
- Description string
- Description.
- Type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address string
- Specific address information.
- description string
- Description.
- type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address String
- Specific address information.
- description String
- Description.
- type String
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address string
- Specific address information.
- description string
- Description.
- type string
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address str
- Specific address information.
- description str
- Description.
- type str
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
- address String
- Specific address information.
- description String
- Description.
- type String
- Address type. ip: IPv4; ipv6: IPv6; domain: domain name; port: port.
Import
$ pulumi import volcenginecc:fwcenter/natFireWallControlPolicy:NatFireWallControlPolicy example "nat_firewall_id|direction|rule_id"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- volcenginecc volcengine/pulumi-volcenginecc
- License
- MPL-2.0
- Notes
- This Pulumi package is based on the
volcengineccTerraform Provider.
published on Monday, Jul 20, 2026 by Volcengine