published on Thursday, Apr 23, 2026 by Volcengine
published on Thursday, Apr 23, 2026 by Volcengine
The network ACL controls inbound and outbound traffic for subnets. It is designed based on the allowlist principle: traffic entering or leaving a subnet must be permitted by a network ACL rule to pass through.
Example Usage
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
resources:
networkAclDemo:
type: volcenginecc:vpc:NetworkAcl
name: NetworkAclDemo
properties:
vpcId: vpc-rrco37ovjq4gv0x58xxxxxx
networkAclName: NetworkAclDemo
description: NetworkAclDemo-Description
projectName: default
ingressAclEntries:
- cidr_ip: 10.0.1.0/24
description: test-rule
network_acl_entry_name: test-entries
policy: drop
port: 80/80
protocol: tcp
egressAclEntries:
- cidr_ip: 0.0.0.0/0
description: test-rule
network_acl_entry_name: ""
policy: accept
port: -1/-1
protocol: all
resources:
- resource_id: subnet-3nrjlvvxo4gsg931ebxxxxxx
tags:
- key: env
value: test
Create NetworkAcl Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new NetworkAcl(name: string, args: NetworkAclArgs, opts?: CustomResourceOptions);@overload
def NetworkAcl(resource_name: str,
args: NetworkAclArgs,
opts: Optional[ResourceOptions] = None)
@overload
def NetworkAcl(resource_name: str,
opts: Optional[ResourceOptions] = None,
vpc_id: Optional[str] = None,
description: Optional[str] = None,
egress_acl_entries: Optional[Sequence[NetworkAclEgressAclEntryArgs]] = None,
ingress_acl_entries: Optional[Sequence[NetworkAclIngressAclEntryArgs]] = None,
network_acl_name: Optional[str] = None,
project_name: Optional[str] = None,
resources: Optional[Sequence[NetworkAclResourceArgs]] = None,
tags: Optional[Sequence[NetworkAclTagArgs]] = None)func NewNetworkAcl(ctx *Context, name string, args NetworkAclArgs, opts ...ResourceOption) (*NetworkAcl, error)public NetworkAcl(string name, NetworkAclArgs args, CustomResourceOptions? opts = null)
public NetworkAcl(String name, NetworkAclArgs args)
public NetworkAcl(String name, NetworkAclArgs args, CustomResourceOptions options)
type: volcenginecc:vpc:NetworkAcl
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args NetworkAclArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args NetworkAclArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args NetworkAclArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args NetworkAclArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args NetworkAclArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var networkAclResource = new Volcenginecc.Vpc.NetworkAcl("networkAclResource", new()
{
VpcId = "string",
Description = "string",
EgressAclEntries = new[]
{
new Volcenginecc.Vpc.Inputs.NetworkAclEgressAclEntryArgs
{
CidrIp = "string",
Description = "string",
NetworkAclEntryName = "string",
Policy = "string",
Port = "string",
Protocol = "string",
},
},
IngressAclEntries = new[]
{
new Volcenginecc.Vpc.Inputs.NetworkAclIngressAclEntryArgs
{
CidrIp = "string",
Description = "string",
NetworkAclEntryName = "string",
Policy = "string",
Port = "string",
Protocol = "string",
},
},
NetworkAclName = "string",
ProjectName = "string",
Resources = new[]
{
new Volcenginecc.Vpc.Inputs.NetworkAclResourceArgs
{
ResourceId = "string",
},
},
Tags = new[]
{
new Volcenginecc.Vpc.Inputs.NetworkAclTagArgs
{
Key = "string",
Value = "string",
},
},
});
example, err := vpc.NewNetworkAcl(ctx, "networkAclResource", &vpc.NetworkAclArgs{
VpcId: pulumi.String("string"),
Description: pulumi.String("string"),
EgressAclEntries: vpc.NetworkAclEgressAclEntryArray{
&vpc.NetworkAclEgressAclEntryArgs{
CidrIp: pulumi.String("string"),
Description: pulumi.String("string"),
NetworkAclEntryName: pulumi.String("string"),
Policy: pulumi.String("string"),
Port: pulumi.String("string"),
Protocol: pulumi.String("string"),
},
},
IngressAclEntries: vpc.NetworkAclIngressAclEntryArray{
&vpc.NetworkAclIngressAclEntryArgs{
CidrIp: pulumi.String("string"),
Description: pulumi.String("string"),
NetworkAclEntryName: pulumi.String("string"),
Policy: pulumi.String("string"),
Port: pulumi.String("string"),
Protocol: pulumi.String("string"),
},
},
NetworkAclName: pulumi.String("string"),
ProjectName: pulumi.String("string"),
Resources: vpc.NetworkAclResourceArray{
&vpc.NetworkAclResourceArgs{
ResourceId: pulumi.String("string"),
},
},
Tags: vpc.NetworkAclTagArray{
&vpc.NetworkAclTagArgs{
Key: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
})
var networkAclResource = new NetworkAcl("networkAclResource", NetworkAclArgs.builder()
.vpcId("string")
.description("string")
.egressAclEntries(NetworkAclEgressAclEntryArgs.builder()
.cidrIp("string")
.description("string")
.networkAclEntryName("string")
.policy("string")
.port("string")
.protocol("string")
.build())
.ingressAclEntries(NetworkAclIngressAclEntryArgs.builder()
.cidrIp("string")
.description("string")
.networkAclEntryName("string")
.policy("string")
.port("string")
.protocol("string")
.build())
.networkAclName("string")
.projectName("string")
.resources(NetworkAclResourceArgs.builder()
.resourceId("string")
.build())
.tags(NetworkAclTagArgs.builder()
.key("string")
.value("string")
.build())
.build());
network_acl_resource = volcenginecc.vpc.NetworkAcl("networkAclResource",
vpc_id="string",
description="string",
egress_acl_entries=[{
"cidr_ip": "string",
"description": "string",
"network_acl_entry_name": "string",
"policy": "string",
"port": "string",
"protocol": "string",
}],
ingress_acl_entries=[{
"cidr_ip": "string",
"description": "string",
"network_acl_entry_name": "string",
"policy": "string",
"port": "string",
"protocol": "string",
}],
network_acl_name="string",
project_name="string",
resources=[{
"resource_id": "string",
}],
tags=[{
"key": "string",
"value": "string",
}])
const networkAclResource = new volcenginecc.vpc.NetworkAcl("networkAclResource", {
vpcId: "string",
description: "string",
egressAclEntries: [{
cidrIp: "string",
description: "string",
networkAclEntryName: "string",
policy: "string",
port: "string",
protocol: "string",
}],
ingressAclEntries: [{
cidrIp: "string",
description: "string",
networkAclEntryName: "string",
policy: "string",
port: "string",
protocol: "string",
}],
networkAclName: "string",
projectName: "string",
resources: [{
resourceId: "string",
}],
tags: [{
key: "string",
value: "string",
}],
});
type: volcenginecc:vpc:NetworkAcl
properties:
description: string
egressAclEntries:
- cidrIp: string
description: string
networkAclEntryName: string
policy: string
port: string
protocol: string
ingressAclEntries:
- cidrIp: string
description: string
networkAclEntryName: string
policy: string
port: string
protocol: string
networkAclName: string
projectName: string
resources:
- resourceId: string
tags:
- key: string
value: string
vpcId: string
NetworkAcl Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The NetworkAcl resource accepts the following input properties:
- Vpc
Id string - ID of the VPC associated with the network ACL.
- Description string
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- Egress
Acl List<Volcengine.Entries Network Acl Egress Acl Entry> - Ingress
Acl List<Volcengine.Entries Network Acl Ingress Acl Entry> - Network
Acl stringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- Project
Name string - Name of the project associated with the network ACL. If not specified, added to the default project.
- Resources
List<Volcengine.
Network Acl Resource> -
List<Volcengine.
Network Acl Tag>
- Vpc
Id string - ID of the VPC associated with the network ACL.
- Description string
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- Egress
Acl []NetworkEntries Acl Egress Acl Entry Args - Ingress
Acl []NetworkEntries Acl Ingress Acl Entry Args - Network
Acl stringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- Project
Name string - Name of the project associated with the network ACL. If not specified, added to the default project.
- Resources
[]Network
Acl Resource Args -
[]Network
Acl Tag Args
- vpc
Id String - ID of the VPC associated with the network ACL.
- description String
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- egress
Acl List<NetworkEntries Acl Egress Acl Entry> - ingress
Acl List<NetworkEntries Acl Ingress Acl Entry> - network
Acl StringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- project
Name String - Name of the project associated with the network ACL. If not specified, added to the default project.
- resources
List<Network
Acl Resource> -
List<Network
Acl Tag>
- vpc
Id string - ID of the VPC associated with the network ACL.
- description string
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- egress
Acl NetworkEntries Acl Egress Acl Entry[] - ingress
Acl NetworkEntries Acl Ingress Acl Entry[] - network
Acl stringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- project
Name string - Name of the project associated with the network ACL. If not specified, added to the default project.
- resources
Network
Acl Resource[] -
Network
Acl Tag[]
- vpc_
id str - ID of the VPC associated with the network ACL.
- description str
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- egress_
acl_ Sequence[Networkentries Acl Egress Acl Entry Args] - ingress_
acl_ Sequence[Networkentries Acl Ingress Acl Entry Args] - network_
acl_ strname - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- project_
name str - Name of the project associated with the network ACL. If not specified, added to the default project.
- resources
Sequence[Network
Acl Resource Args] -
Sequence[Network
Acl Tag Args]
- vpc
Id String - ID of the VPC associated with the network ACL.
- description String
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- egress
Acl List<Property Map>Entries - ingress
Acl List<Property Map>Entries - network
Acl StringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- project
Name String - Name of the project associated with the network ACL. If not specified, added to the default project.
- resources List<Property Map>
- List<Property Map>
Outputs
All input properties are implicitly available as output properties. Additionally, the NetworkAcl resource produces the following output properties:
- Created
Time string - Creation time of the network ACL.
- Default
Egress List<Volcengine.Acl Entries Network Acl Default Egress Acl Entry> - Default
Ingress List<Volcengine.Acl Entries Network Acl Default Ingress Acl Entry> - Id string
- The provider-assigned unique ID for this managed resource.
- Network
Acl stringId - Network ACL ID.
- Status string
- Status of the network ACL. Available: Available. Creating: Creating.
- Updated
Time string - Last updated time of the network ACL.
- Created
Time string - Creation time of the network ACL.
- Default
Egress []NetworkAcl Entries Acl Default Egress Acl Entry - Default
Ingress []NetworkAcl Entries Acl Default Ingress Acl Entry - Id string
- The provider-assigned unique ID for this managed resource.
- Network
Acl stringId - Network ACL ID.
- Status string
- Status of the network ACL. Available: Available. Creating: Creating.
- Updated
Time string - Last updated time of the network ACL.
- created
Time String - Creation time of the network ACL.
- default
Egress List<NetworkAcl Entries Acl Default Egress Acl Entry> - default
Ingress List<NetworkAcl Entries Acl Default Ingress Acl Entry> - id String
- The provider-assigned unique ID for this managed resource.
- network
Acl StringId - Network ACL ID.
- status String
- Status of the network ACL. Available: Available. Creating: Creating.
- updated
Time String - Last updated time of the network ACL.
- created
Time string - Creation time of the network ACL.
- default
Egress NetworkAcl Entries Acl Default Egress Acl Entry[] - default
Ingress NetworkAcl Entries Acl Default Ingress Acl Entry[] - id string
- The provider-assigned unique ID for this managed resource.
- network
Acl stringId - Network ACL ID.
- status string
- Status of the network ACL. Available: Available. Creating: Creating.
- updated
Time string - Last updated time of the network ACL.
- created_
time str - Creation time of the network ACL.
- default_
egress_ Sequence[Networkacl_ entries Acl Default Egress Acl Entry] - default_
ingress_ Sequence[Networkacl_ entries Acl Default Ingress Acl Entry] - id str
- The provider-assigned unique ID for this managed resource.
- network_
acl_ strid - Network ACL ID.
- status str
- Status of the network ACL. Available: Available. Creating: Creating.
- updated_
time str - Last updated time of the network ACL.
- created
Time String - Creation time of the network ACL.
- default
Egress List<Property Map>Acl Entries - default
Ingress List<Property Map>Acl Entries - id String
- The provider-assigned unique ID for this managed resource.
- network
Acl StringId - Network ACL ID.
- status String
- Status of the network ACL. Available: Available. Creating: Creating.
- updated
Time String - Last updated time of the network ACL.
Look up Existing NetworkAcl Resource
Get an existing NetworkAcl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: NetworkAclState, opts?: CustomResourceOptions): NetworkAcl@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
created_time: Optional[str] = None,
default_egress_acl_entries: Optional[Sequence[NetworkAclDefaultEgressAclEntryArgs]] = None,
default_ingress_acl_entries: Optional[Sequence[NetworkAclDefaultIngressAclEntryArgs]] = None,
description: Optional[str] = None,
egress_acl_entries: Optional[Sequence[NetworkAclEgressAclEntryArgs]] = None,
ingress_acl_entries: Optional[Sequence[NetworkAclIngressAclEntryArgs]] = None,
network_acl_id: Optional[str] = None,
network_acl_name: Optional[str] = None,
project_name: Optional[str] = None,
resources: Optional[Sequence[NetworkAclResourceArgs]] = None,
status: Optional[str] = None,
tags: Optional[Sequence[NetworkAclTagArgs]] = None,
updated_time: Optional[str] = None,
vpc_id: Optional[str] = None) -> NetworkAclfunc GetNetworkAcl(ctx *Context, name string, id IDInput, state *NetworkAclState, opts ...ResourceOption) (*NetworkAcl, error)public static NetworkAcl Get(string name, Input<string> id, NetworkAclState? state, CustomResourceOptions? opts = null)public static NetworkAcl get(String name, Output<String> id, NetworkAclState state, CustomResourceOptions options)resources: _: type: volcenginecc:vpc:NetworkAcl get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Created
Time string - Creation time of the network ACL.
- Default
Egress List<Volcengine.Acl Entries Network Acl Default Egress Acl Entry> - Default
Ingress List<Volcengine.Acl Entries Network Acl Default Ingress Acl Entry> - Description string
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- Egress
Acl List<Volcengine.Entries Network Acl Egress Acl Entry> - Ingress
Acl List<Volcengine.Entries Network Acl Ingress Acl Entry> - Network
Acl stringId - Network ACL ID.
- Network
Acl stringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- Project
Name string - Name of the project associated with the network ACL. If not specified, added to the default project.
- Resources
List<Volcengine.
Network Acl Resource> - Status string
- Status of the network ACL. Available: Available. Creating: Creating.
-
List<Volcengine.
Network Acl Tag> - Updated
Time string - Last updated time of the network ACL.
- Vpc
Id string - ID of the VPC associated with the network ACL.
- Created
Time string - Creation time of the network ACL.
- Default
Egress []NetworkAcl Entries Acl Default Egress Acl Entry Args - Default
Ingress []NetworkAcl Entries Acl Default Ingress Acl Entry Args - Description string
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- Egress
Acl []NetworkEntries Acl Egress Acl Entry Args - Ingress
Acl []NetworkEntries Acl Ingress Acl Entry Args - Network
Acl stringId - Network ACL ID.
- Network
Acl stringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- Project
Name string - Name of the project associated with the network ACL. If not specified, added to the default project.
- Resources
[]Network
Acl Resource Args - Status string
- Status of the network ACL. Available: Available. Creating: Creating.
-
[]Network
Acl Tag Args - Updated
Time string - Last updated time of the network ACL.
- Vpc
Id string - ID of the VPC associated with the network ACL.
- created
Time String - Creation time of the network ACL.
- default
Egress List<NetworkAcl Entries Acl Default Egress Acl Entry> - default
Ingress List<NetworkAcl Entries Acl Default Ingress Acl Entry> - description String
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- egress
Acl List<NetworkEntries Acl Egress Acl Entry> - ingress
Acl List<NetworkEntries Acl Ingress Acl Entry> - network
Acl StringId - Network ACL ID.
- network
Acl StringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- project
Name String - Name of the project associated with the network ACL. If not specified, added to the default project.
- resources
List<Network
Acl Resource> - status String
- Status of the network ACL. Available: Available. Creating: Creating.
-
List<Network
Acl Tag> - updated
Time String - Last updated time of the network ACL.
- vpc
Id String - ID of the VPC associated with the network ACL.
- created
Time string - Creation time of the network ACL.
- default
Egress NetworkAcl Entries Acl Default Egress Acl Entry[] - default
Ingress NetworkAcl Entries Acl Default Ingress Acl Entry[] - description string
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- egress
Acl NetworkEntries Acl Egress Acl Entry[] - ingress
Acl NetworkEntries Acl Ingress Acl Entry[] - network
Acl stringId - Network ACL ID.
- network
Acl stringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- project
Name string - Name of the project associated with the network ACL. If not specified, added to the default project.
- resources
Network
Acl Resource[] - status string
- Status of the network ACL. Available: Available. Creating: Creating.
-
Network
Acl Tag[] - updated
Time string - Last updated time of the network ACL.
- vpc
Id string - ID of the VPC associated with the network ACL.
- created_
time str - Creation time of the network ACL.
- default_
egress_ Sequence[Networkacl_ entries Acl Default Egress Acl Entry Args] - default_
ingress_ Sequence[Networkacl_ entries Acl Default Ingress Acl Entry Args] - description str
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- egress_
acl_ Sequence[Networkentries Acl Egress Acl Entry Args] - ingress_
acl_ Sequence[Networkentries Acl Ingress Acl Entry Args] - network_
acl_ strid - Network ACL ID.
- network_
acl_ strname - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- project_
name str - Name of the project associated with the network ACL. If not specified, added to the default project.
- resources
Sequence[Network
Acl Resource Args] - status str
- Status of the network ACL. Available: Available. Creating: Creating.
-
Sequence[Network
Acl Tag Args] - updated_
time str - Last updated time of the network ACL.
- vpc_
id str - ID of the VPC associated with the network ACL.
- created
Time String - Creation time of the network ACL.
- default
Egress List<Property Map>Acl Entries - default
Ingress List<Property Map>Acl Entries - description String
- Network ACL description. Length must be 0–255 characters. Must start with a letter, Chinese character, or number. Can include English commas (,), periods (.), underscores (_), spaces ( ), equals signs (=), hyphens (-), Chinese commas (,), and Chinese periods (。).
- egress
Acl List<Property Map>Entries - ingress
Acl List<Property Map>Entries - network
Acl StringId - Network ACL ID.
- network
Acl StringName - Network ACL name. Length must be 1–128 characters. Must start with a letter, Chinese character, or number, and can include periods (.), underscores (_), and hyphens (-).
- project
Name String - Name of the project associated with the network ACL. If not specified, added to the default project.
- resources List<Property Map>
- status String
- Status of the network ACL. Available: Available. Creating: Creating.
- List<Property Map>
- updated
Time String - Last updated time of the network ACL.
- vpc
Id String - ID of the VPC associated with the network ACL.
Supporting Types
NetworkAclDefaultEgressAclEntry, NetworkAclDefaultEgressAclEntryArgs
- Cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- Description string
- Rule description.
- Network
Acl stringEntry Id - Rule ID.
- Network
Acl stringEntry Name - Rule name.
- Policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- Port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- Priority int
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- Protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- Cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- Description string
- Rule description.
- Network
Acl stringEntry Id - Rule ID.
- Network
Acl stringEntry Name - Rule name.
- Policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- Port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- Priority int
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- Protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip String - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description String
- Rule description.
- network
Acl StringEntry Id - Rule ID.
- network
Acl StringEntry Name - Rule name.
- policy String
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port String
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- priority Integer
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- protocol String
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description string
- Rule description.
- network
Acl stringEntry Id - Rule ID.
- network
Acl stringEntry Name - Rule name.
- policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- priority number
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr_
ip str - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description str
- Rule description.
- network_
acl_ strentry_ id - Rule ID.
- network_
acl_ strentry_ name - Rule name.
- policy str
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port str
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- priority int
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- protocol str
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip String - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description String
- Rule description.
- network
Acl StringEntry Id - Rule ID.
- network
Acl StringEntry Name - Rule name.
- policy String
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port String
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- priority Number
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- protocol String
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
NetworkAclDefaultIngressAclEntry, NetworkAclDefaultIngressAclEntryArgs
- Cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- Description string
- Rule description.
- Network
Acl stringEntry Id - Rule ID.
- Network
Acl stringEntry Name - Rule name.
- Policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- Port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- Priority int
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- Protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- Cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- Description string
- Rule description.
- Network
Acl stringEntry Id - Rule ID.
- Network
Acl stringEntry Name - Rule name.
- Policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- Port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- Priority int
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- Protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip String - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description String
- Rule description.
- network
Acl StringEntry Id - Rule ID.
- network
Acl StringEntry Name - Rule name.
- policy String
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port String
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- priority Integer
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- protocol String
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description string
- Rule description.
- network
Acl stringEntry Id - Rule ID.
- network
Acl stringEntry Name - Rule name.
- policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- priority number
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr_
ip str - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description str
- Rule description.
- network_
acl_ strentry_ id - Rule ID.
- network_
acl_ strentry_ name - Rule name.
- policy str
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port str
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- priority int
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- protocol str
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip String - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description String
- Rule description.
- network
Acl StringEntry Id - Rule ID.
- network
Acl StringEntry Name - Rule name.
- policy String
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port String
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- priority Number
- Priority of direction rules. Lower numbers indicate higher priority. Default value if not specified: 1.
- protocol String
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
NetworkAclEgressAclEntry, NetworkAclEgressAclEntryArgs
- Cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- Description string
- Rule description.
- Network
Acl stringEntry Name - Rule name.
- Policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- Port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- Protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- Cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- Description string
- Rule description.
- Network
Acl stringEntry Name - Rule name.
- Policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- Port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- Protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip String - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description String
- Rule description.
- network
Acl StringEntry Name - Rule name.
- policy String
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port String
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- protocol String
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description string
- Rule description.
- network
Acl stringEntry Name - Rule name.
- policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr_
ip str - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description str
- Rule description.
- network_
acl_ strentry_ name - Rule name.
- policy str
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port str
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- protocol str
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip String - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description String
- Rule description.
- network
Acl StringEntry Name - Rule name.
- policy String
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port String
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- protocol String
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
NetworkAclIngressAclEntry, NetworkAclIngressAclEntryArgs
- Cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- Description string
- Rule description.
- Network
Acl stringEntry Name - Rule name.
- Policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- Port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- Protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- Cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- Description string
- Rule description.
- Network
Acl stringEntry Name - Rule name.
- Policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- Port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- Protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip String - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description String
- Rule description.
- network
Acl StringEntry Name - Rule name.
- policy String
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port String
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- protocol String
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip string - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description string
- Rule description.
- network
Acl stringEntry Name - Rule name.
- policy string
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port string
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- protocol string
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr_
ip str - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description str
- Rule description.
- network_
acl_ strentry_ name - Rule name.
- policy str
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port str
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- protocol str
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
- cidr
Ip String - For inbound rules, specifies the source address range. For outbound rules, specifies the destination address range. Supports CIDR and IPv4 address ranges. Default value: none.
- description String
- Rule description.
- network
Acl StringEntry Name - Rule name.
- policy String
- Authorization policy. accept: Allow access. drop: Deny access. No denial message is returned; the requester only experiences a timeout or similar connection failure.
- port String
- Destination port range for the rule. If the direction rule protocol is all, icmp, or gre, the port range is -1/-1, meaning no port restriction. If the protocol is tcp or udp, the port range is 1–65535, formatted as 1/200, 80/80, indicating ports 1 to 200, or port 80.
- protocol String
- Protocol type. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol. icmpv6: ICMPV6 protocol. gre: GRE protocol. all: Supports all protocols.
NetworkAclResource, NetworkAclResourceArgs
- Resource
Id string - Associated resource ID.
- Resource
Id string - Associated resource ID.
- resource
Id String - Associated resource ID.
- resource
Id string - Associated resource ID.
- resource_
id str - Associated resource ID.
- resource
Id String - Associated resource ID.
NetworkAclTag, NetworkAclTagArgs
Import
$ pulumi import volcenginecc:vpc/networkAcl:NetworkAcl example "network_acl_id"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- volcenginecc volcengine/pulumi-volcenginecc
- License
- MPL-2.0
- Notes
- This Pulumi package is based on the
volcengineccTerraform Provider.
published on Thursday, Apr 23, 2026 by Volcengine
